TR201820143A2

TR201820143A2 - A SYSTEM THAT ALLOWS THE IDENTIFICATION OF BAD CALLING NUMBERS

Info

Publication number: TR201820143A2
Application number: TR2018/20143A
Authority: TR
Inventors: Kahya Kazim; Şen Kenan; Olcay Özyilmaz Ni̇zami̇; Altaş Eser; Meli̇sa Çamur Fi̇ruza; Koçbey Emi̇r; Kuytak Levent
Original assignee: Turkcell Technology Research And Development Co; Turkcell Teknoloji̇ Araştirma Ve Geli̇şti̇rme Anoni̇m Şi̇rketi̇
Priority date: 2018-12-24
Filing date: 2018-12-24
Publication date: 2019-02-21

Abstract

Bu buluş, dolandırıcılık ve/veya kötü niyetli olarak arama yapan numaraların tespit edilerek mobil iletişim şebeke abonelerinin bu numaralar hakkında uyarılmalarını ve bu aramalara karşı savunulmalarını sağlayan bir sistem (1) ile ilgilidir. Buluş konusu kötü niyetli çağrı kuran numaraların tespit edilmesini sağlayan sistem (1) sayesinde dolandırıcılık ve/veya kötü niyetli olarak arama yapan numaraların otomatik olarak tespit edilmesiyle mobil iletişim şebeke abonelerinin bu numaralardan çağrı almaları durumunda çağrı kurulmadan önce söz konusu çağrının kötü niyetli olabileceği konusunda bilgilendirilmeleri ve daha önceden tanımlanan aksiyonların otomatik olarak alınmasıyla söz konusu kötü niyetli çağrılara karşı korunmaları sağlanmaktadır.The present invention relates to a system (1) that detects fraudulent and / or malicious calls and enables mobile communication network subscribers to be warned about these numbers and to be defended against these calls. By automatically detecting fraudulent and / or malicious call numbers thanks to the system (1) that enables the identification of malicious call numbers according to the invention, mobile communication network subscribers are informed that the call may be malicious before the call is established, and By taking the previously defined actions automatically, they are protected against such malicious calls.

Description

TARIFNAME KÖTÜ NIYETLI ÇAGRI KURAN NUMARALARIN TESPIT Teknik Alan Bu bulus, dolandiricilik ve/veya kötü niyetli olarak arama yapan numaralarin tespit edilerek mobil iletisim sebeke abonelerinin bu numaralar hakkinda uyarilmalarini ve bu aramalara karsi savunulmalarini saglayan bir sistem ile Önceki Teknik Günümüzde ses, veri, mesaj alisverisini saglayan iletisim cihazlarinin kullanimi ve buna paralel olarak da iletisim cihazlarinin kullanimina yönelik olarak tasarlanmis ve uygulanmis sahtekarlik, dolandiricilik gibi vakalar sürekli bir artis göstermektedir. Bu yaygin kullanim ve artan vakalar nedeniyle, her durumda abonelere kesintisiz ve güvenli servisler sunmak, servislerde yasanabilecek herhangi güvensizlik ya da sahtekarlik ve dolandiricilik durumlarini abone etkilenmeden tespit etinek ve önlemek iletisim sebekesi operatörleri açisindan büyük bir gereklilik olarak ortaya çikmaktadir. DESCRIPTION DETECTION OF MALICIOUS CALLING NUMBERS Technical Field This invention prevents fraudulent and/or malicious calling numbers. is detected and mobile communication network subscribers are informed about these numbers. with a system that ensures that they are warned and defended against these searches. Prior Art Today, the use of communication devices that provide voice, data and message exchange and in parallel, for the use of communication devices Cases of designed and implemented fraud and fraud are on the rise constantly. shows. Due to this widespread use and increasing cases, in all cases To provide uninterrupted and safe services to subscribers, to Subscribe to any cases of distrust or fraud or fraud. To detect and prevent communication network operators without being affected emerges as a great necessity.

Söz konusu sahtekarlik ve dolandiricilik tiplerinden birisi de wangiri (one-ring- and-cut, bir-defa-çaldir-kapat) olarak bilinen, ilk olarak Japonya”da ortaya çikan ve çok kisa bir süre içinde çok fazla sayida numaraya, yüksek ücretlendirmeli bir numaradan cevapsiz çagri birakilmasini ve merak etme, sebekede bir sorun oldugunu düsünme gibi herhangi bir nedenle bu cevapsiz çagriyi birakan numaraya dönüs yapan kisilere çok yüksek tutarda ücretlendirrne yansitilmasi temeline dayanan bir dolandiriciliktir. Bu dolandiricilik tipi, ilk olusturulan cevapsiz çagri otomatik sistemlerden ve çok fazla sayida numaraya dogru olusturuldugu için çok fazla kisinin magdur olmasina yol açmakta, kisilerde, bu tip durumlari engelleyemedikleri gerekçesiyle, iletisim sebekesi operatörlerine karsi bir hosnutsuzluk ve güvensizlik olusmasina neden olmaktadir. One of the types of fraud and fraud in question is wangiri (one-ring- known as and-cut, ring-once-hang-up), first appeared in Japan. and a very high number of numbers in a very short time. If you get a missed call from the number and don't worry, there is a problem in the network. who left this unanswered call for any reason, such as thinking that Reflecting very high fees on people who call the number It is based on fraud. This type of fraud was the first created missed calls from automated systems and to too many numbers Because it is created, it causes many people to become victims. to communication network operators on the grounds that they cannot prevent such situations. It causes discontent and distrust towards each other.

Mevcut teknikte bu tip dolandiriciliklar için gelistirilmis bazi çözümler bulunmaktadir ancak bu çözümlerin tamami sebekeye gelen çagrilarin gözlemlenmesi temeline dayanmakta, sebekeye gelen her çagrinin gözlenmesi gerekliligini tasimakta, çözümlerin hiçbiri sebekeden disari dogru gerçeklestirilen çagrilarin gözlemlenmesini saglamamaktadir. Ayrica bu çözümlerde gerçek zamanli bir gözlemleme imkani çoklukla sunulmamakta ve kisinin dolandiricilik magduru olmasina neden olabilecek çagrilar için bir aksiyon alinmasi saglanamamaktadir. Some solutions developed for this type of fraud in current technology are available, but all of these solutions handle calls coming to the network. It is based on the observation of every call coming to the network. It fulfills the requirement, none of the solutions are carried out from the network. It does not allow monitoring of calls. Moreover, these solutions also have real The opportunity for timely observation is often not offered and the person is not likely to be involved in fraud. Taking action for calls that may cause one to become a victim It cannot be provided.

Bu sebeple teknigin bilinen durumunda dolandiricilik ve/veya kötü niyetli olarak arama yapan numaralarin tespit edilerek mobil iletisim sebeke abonelerinin bu numaralar hakkinda uyarilmalarini ve bu aramalara karsi savunulmalarini saglayan bir sisteme ihtiyaç duyulmaktadir. For this reason, in the state of the art, fraud and/or malicious By detecting the calling numbers, mobile communication network subscribers be warned about these numbers and defended against these calls. A system that provides

Teknigin bilinen durumunda yer alan U88565396 sayili Birlesik Devletler patent dokümaninda, wangiri ya da genel olarak cevapsiz çagri dolandiriciliklari da dahil olmak üzere iletisim cihazlarindaki dolandiricilik durumlarinin tespit edilebilinesini saglayan bir yöntemden bahsedilmektedir. Söz konusu yöntem dahilinde, iletisim cihazina dogru gelen ve çagri ya da kisa mesaj seklinde olan iletisim tespit edilmekte ve bu iletisim üzerinde bir degerlendirme gerçeklestirilmektedir. Bu degerlendirme, iletisim cihazi üzerine kurulu olan bir uygulama ve iletisim cihazinin hafizasinda tutulan bilgiler kullanilarak gerçeklestirilmektedir. United States patent number U88565396, which is in the state of the art document, including wangiri or missed call scams in general. Detection of fraud cases in communication devices, including A method that enables this to be done is mentioned. The method in question incoming calls or text messages towards the communication device. communication is detected and an evaluation is made on this communication. is being carried out. This evaluation is based on a communication device. using the information stored in the memory of the application and the communication device is being carried out.

Bulusun Kisa Açiklamasi Bu bulusun amaci durumunda dolandiricilik ve/veya kötü niyetli olarak arama yapan numaralarin tespit edilerek mobil iletisim sebeke abonelerinin bu numaralar hakkinda uyarilmalarini ve bu aramalara karsi savunulmalarini saglayan bir sistem gerçeklestirmektir. Brief Description of the Invention In case of the purpose of this invention, fraudulent and/or malicious searches By identifying the numbers that make calls to mobile communication network subscribers, these numbers are A system that ensures that they are warned about and defended against such searches. is to realize.

Bulusun Ayrintili Açiklamasi Bu bulusun amacina ulasmak için gerçeklestirilen “Kötü Niyetli Arama Yapan Numaralarin Tespit Edilmesini Saglayan Bir Sistem” ekli sekilde gösterilmis olup, bu sekil; Sekil-1; Bulus konusu sistemin sematik görünüsüdür. Detailed Description of the Invention In order to achieve the purpose of this invention, the “Malicious Searching "A System That Enables the Identification of Numbers" is shown in the figure below. this shape; Figure 1; The subject of the invention is the schematic view of the system.

Sekilde yer alan parçalar tek tek numaralandirilmis olup, bu numaralarin karsiliklari asagida verilmistir. The parts in the figure are numbered one by one, and these numbers The equivalents are given below.

Sistem Iletisim cihazi Çagri uygulamasi Güvenlik uygulamasi Veri tabani OSU'IAUJNi-i Dolandiricilik ve/veya kötü niyetli olarak arama yapan numaralarin tespit edilerek mobil iletisim sebeke abonelerinin bu numaralar hakkinda uyarilmalarini ve bu aramalara karsi savunulmalarini saglayan bUIUS konusu sistem (1); bir mobil iletisim sebekesinden mobil iletisim servisi alan ve üzerinde en az bir uygulama yürütmek üzere yapilandirilan en az bir Iletisim cihazi (21, iletisim cihazi (2) üzerinde yürütülen ve en azindan mobil iletisim sebekesi üzerinden gelen çagrilan almak üzere yapilandirilan en az bir çagri uygulamasi iletisim cihazi (2) üzerinde yürütülen, çagri uygulamaSi (3) ile veri alisverisi gerçeklestirecek sekilde baglanti halinde olan ve mobil iletisim sebekesi üzerinden bir çagri geldiginde çagri uygulamasi (3) tarafindan tetiklenerek iletisim cihazi (2) üzerinde kullanicinin çagrinin geldigi numarayi kötü niyetli olarak belirlemesine olanak sunacak sekilde uyarlanan etkilesimli bir ara yüz sunmak üzere yapilandirilan en az bir güvenlik uygulamaSi (4), içerisinde en azindan kötü niyetli arama yaptigi daha önceden dogrulanan numaralara iliskin verileri ve kayit altinda tutulan numaralarla iliskilendirilen kisilere iliskin en azindan demografik bilgilere, iletisim cihazi kulanim aliskanliklarina, konum bilgilerine, arama zaman bilgilerine, çagri süresi bilgilerine, hareketlilik bilgilerine, arama motorlarinda aranma bilgilerine, arama istatistiklerine ve ortalama çagri uzunlugu bilgilerine iliskin verileri ilgili numara bilgilerine iliskin verilerle iliskilendirilmis sekilde kayit altinda tutan en az bir veri tabani (5] ve herhangi bir uzaktan iletisim protokolünü kullanarak iletisim cihazi (2) ile iletisim kurmak ve kurulan bu Iletisim üzerinden iletisim cihazi (2) üzerinde yürütülen güvenlik uygulamasi (4) ile veri alisverisi gerçeklestirmek, kullanici tarafindan ara yüz vasitasiyla kötü niyetli olarak belirlenen numaraya iliskin verileri Iletisim cihazi (2) ile kurulan iletisim üzerinden güvenlik uygulamasindan (4] alarak alinan numara bilgisi verilerini Veri tabani (5) içerisinde kayit altina almak, veri tabani (5) içerisinde kayit altina alinan verileri uygun bir sekilde islemek ve söz konusu çagrinin kötü niyetli olma olasiligini tahminlemek üzere yapilandirilan en az bir sunucu (6) içermektedir. System communication device Call application security app Database OSU'IAUJNi-i Identifying numbers making fraudulent and/or malicious calls mobile communication network subscribers are warned about these numbers and the system subject to this UIUS (1), which provides defense against searches; Receiving mobile communication service from a mobile communication network and having at least one at least one Communication device (21, carried out on the communication device (2) and at least the mobile communication network At least one calling application configured to receive incoming calls data exchange with the calling application (3) carried out on the communication device (2) mobile communication network that is connected in a way that enables When a call comes through, the communication is triggered by the call application (3). device (2) on which the user maliciously uses the number from which the call came. To provide an interactive interface that is adapted to allow you to determine At least one security application (4) configured to It has been previously confirmed that at least one malicious search has been made within data related to the numbers and the data associated with the numbers kept on record. At least demographic information about individuals, communication device usage habits, location information, call time information, call duration information, mobility information, search information on search engines, search data regarding statistics and average call length information to the relevant number. At least one system that keeps records of information associated with data database (5] and communication with the communication device (2) using any remote communication protocol to establish and execute on the communication device (2) through this established communication. Exchanging data with the security application (4) is done by the user. Communication data regarding the number identified as malicious through the interface by receiving it from the security application (4) via the communication established with the device (2). recording the received number information data in the database (5), to process the data recorded in the base (5) appropriately and is configured to predict the likelihood that the subject call is malicious. It contains at least one server (6).

Bulus konusu sistemde (1) yer alan iletisim cihazi (2), örnegin en az bir SIM kart vasitasiyla teknigin bilinen durumunda yer alan yöntemlerle en az bir mobil Iletisim sebekesinden mobil iletisim servisi alan ve üzerinde en az bir uygulama (3, 4) yürütebilen cep telefonu, akilli telefon, tablet bilgisayar gibi bir elektronik cihazdir. Iletisim cihazi (2) teknigin bilinen durumunda yer alan herhangi bir uzak Iletisim protokolünü kullanarak sunucu (6) ile Iletisim kurmak ve kurulan bu iletisim üzerinden güvenlik uygulamasi (4) ve sunucu (6) arasinda veri alisverisi gerçeklesmesini saglamak üzere yapilandirilmaktadir. Bulusun bir uygulamasinda iletisim cihazi (2] Internet gibi bir veri sebekesi üzerinden sunucu (6) ile Iletisim kurmak ve kurulan bu baglanti üzerinden güvenlik uygulamasi (4) ve sunucu (6) arasinda veri alisverisi gerçeklesmesini saglamak üzere yapilandirilmaktadir. The communication device (2) included in the system (1) of the invention, for example at least one SIM card at least one mobile device, using methods in the state of the art, through At least one application that receives mobile communication service from the communication network (3, 4) An electronic device such as a mobile phone, smartphone, tablet computer that can device. The communication device (2) can be connected to any remote device in the known state of the art. To communicate with the server (6) using the communication protocol and data exchange between the security application (4) and the server (6) via communication It is structured to ensure that it happens. In an application of the invention communication device (2) Communication with the server (6) over a data network such as the Internet to install and through this established connection, the security application (4) and the server (6). It is configured to enable data exchange between them.

Bulus konusu sistemde (1] yer alan çagri uygulamasi (3), iletisim cihazi (2) üzerinde yürütülmekte olup en azindan iletisim cihazina (2) gelen çagrilari almak ve iletisim cihazi (2) üzerinden çagri kurulmaSini saglamak üzere yapilandirilmaktadir. Çagri uygulamasi (3) güvenlik uygulamasi (4) ile veri alisverisi gerçeklestirecek sekilde baglanti halinde olup mobil iletisim sebekesi üzerinden bir çagri alindiginda güvenlik uygulamasinin (4) kullanicinin çagrinin geldigi numarayi kötü niyetli olarak belirlemesine olanak sunacak sekilde uyarlanan bir ara yüz sunmasini saglamak üzere çagrinin geldigi numara bilgilerine iliskin verilerle güvenlik uygulamasini (4) tetiklemek üzere yapilandirilmaktadir. Bulusun bir uygulamasinda çagri uygulamasi (4) gelen çagriyi kullaniCi tarafindan belirlenen bir baska numaraya yönlendirmeye imkan sunacak sekilde yapilandirilmaktadir. BUlUSUI'l bir uygulamasinda çagri uygulamasi (4) çagri kuruldugunda kullanici tarafindan belirlenen baska numaralarla da çagri kurularak çagri kurulan numaralarin da mevcut çagriya dahil edilmelerine imkan sunacak sekilde yapilandirilmaktadir. Call application (3) and communication device (2) in the system (1) that is the subject of the invention. It is carried out on the device and receives at least incoming calls to the communication device (2). and to enable calls to be made via the communication device (2). is being configured. The call application (3) and the security application (4) Mobile communication network that is connected to enable shopping When a call is received via , the security application (4) allows the user to in a way that allows the user to identify the number he came from as malicious. number from which the call originates to provide an adapted interface. to trigger the security application (4) with data regarding the is being configured. In an embodiment of the invention, the call application (4) allows the call to be forwarded to another number specified by the user. It is structured in a way to present Call in an application of BULUSUI application (4) another user-specified call when the call is established. Calls can also be made with numbers and the numbers that are called are included in the current call. It is structured in a way that allows them to be

Bulus konusu sistemde (1) yer alan güvenlik uygulamasi (4), iletisim cihazi (2) üzerinde yürütülmekte Olup çagri uygulamasi (3) ile veri alisverisi gerçeklestirecek sekilde baglanti halindedir. Güvenlik uygulamasi (4) iletisim Cihazi (2) ve sunucu (6) arasinda kurulan iletisim üzerinden sunucu (6) ile veri alisverisi gerçeklestirmek üzere yapilandirilmaktadir. Güvenlik uygulamasi (4) çagri uygulamasi (3) tarafindan bir çagri karsilandiginda çagri uygulamasi (3) tarafindan çagrinin geldigi numara bilgilerine iliskin verilerle tetiklenerek iletisim cihazi (3) üzerinden kullaniciya kullanicinin çagrinin geldigi numarayi kötü niyetli olarak belirlemesine olanak sunacak sekilde uyarlanan etkilesimli bir ara yüz sunmak üzere yapilandirilmaktadir. Kullanici tarafindan ara yüz vaSitasiyla çagri gelen numaranin kötü niyetli oldugu seçilirse güvenlik uygulamasi (4) söz konusu çagri gelen numara bilgilerine iliskin verileri iletisim cihazi (2) ve sunucu (6) arasinda kurulan iletisim üzerinden sunucuya (6) göndermek üzere yapilandirilmaktadir. The security application (4) and communication device (2) included in the system (1) subject to the invention. It is carried out on and data exchange is made with the calling application (3). It is connected in a way that makes it happen. Security application (4) contact Data is exchanged with the server (6) through the communication established between the device (2) and the server (6). It is configured to perform shopping. Security app (4) when a call is answered by the calling application (3) Communication is triggered by data regarding the number information from which the call came. The number from which the call came is sent to the user via the device (3). An interactive tool adapted to allow users to determine intentionality It is configured to present faces. By the user through the interface If the incoming number is determined to be malicious, security application (4) is applied. The communication device (2) and the server share the data regarding the incoming call number information in question. to send to the server (6) through the communication established between (6). is being configured.

Bulus konusu sistemde (1] yer alan veri tabani (5) sunucu (6) ile iletisim halinde Olup sunucu (6) tarafindan yönetilmek üzere yapilandirilmaktadir. Veri tabani (Sl içerisinde en azindan kötü niyetli arama yaptigi daha önceden dogrulanan numaralara iliskin veriler ve kayit altinda tutulan numaralarla iliskilendirilen kisilere iliskin en azindan demografik bilgilere, iletisim cihazi kulanim aliskanliklarina, konum bilgilerine, arama zaman bilgilerine, çagri süresi bilgilerine, hareketlilik bilgilerine, arama motorlarinda aranma bilgilerine, arama istatistiklerine ve ortalama çagri uzunlugu bilgilerine iliskin verileri ilgili numara bilgilerine iliskin verilerle iliskilendirilmis sekilde kayit altinda tutulmaktadir. The database (5) in the system (1) that is the subject of the invention is in communication with the server (6). It is configured to be managed by the server (6). Database (Sl It has been previously confirmed that at least one malicious search has been made within data related to numbers and those associated with registered numbers At least demographic information about individuals, communication device usage habits, location information, call time information, call duration information, mobility information, search information on search engines, search data regarding statistics and average call length information to the relevant number. It is kept on record in association with relevant data.

Bulus konusu sistemde (1) yer alan sunucu (6), teknigin bilinen durumunda yer alan herhangi bir uzak Iletisim protokolünü kullanarak Iletisim cihazi (2) ile iletisim kurmak ve kurulan bu iletisim üzerinden iletisim cihazi (2l üzerinde yürütülen güvenlik uygulamasi (4) ile veri alisverisi gerçeklestirmek üzere yapilandirilmaktadir. Bulusun bir uygulamasinda sunucu (6), Internet gibi bir veri sebekesi üzerinden Iletisim cihazi (2) ile iletisim kurmak ve kurulan bu iletisim üzerinden Iletisim cihazi (2) üzerinde yürütülen güvenlik uygulamasi (4] ile veri alisverisi gerçeklestirmek üzere yapilandirilmaktadir. Sunucu (6), veri tabani (5l içerisine yeni veri kaydi yapilmasi, veri tabani (5) içerisindeki kayitli verilerin silinmesi ya da veri tabani (5] içerisindeki kayitli verilerin degistirilmesiyle veri tabani (5) içerisindeki kayitli verilerin güncellenmesi gibi islemlerle veri tabanini (5) yönetmek üzere yapilandirilmaktadir. Sunucu (6) Iletisim cihazi (2) ile kurulan iletisim üzerinden kullanici tarafindan ara yüz vasitasiyla kötü niyetli olarak belirlenen numaraya iliskin verileri güvenlik uygulamasindan (4) almak ve bu verileri veri tabani (5] içerisinde kayit altina almak üzere yapilandirilmaktadir. The server (6) in the system (1) subject to the invention is in the known state of the technique. Communication device (2) using any remote communication protocol to communicate and use the communication device (over 2l) through this established communication. to exchange data with the security application (4) being implemented is being configured. In an embodiment of the invention, the server (6) provides a data connection such as the Internet. To communicate with the communication device (2) over the network and to communicate with this established communication device. data with the security application (4] executed on the communication device (2) via It is configured to perform shopping. Server (6), database (5l recording new data in the database (5) data by deleting or changing the recorded data in the database (5). database with operations such as updating the recorded data in the base (5). (5) is structured to manage. Server (6) Established with communication device (2) maliciously by the user through the communication interface to receive the data regarding the specified number from the security application (4) and It is configured to record the data in the database (5).

Sunucu (6) ayrica, veri tabani (5) içerisinde kayit altina alinan verileri uygun bir sekilde islemek ve söz konusu çagrinin kötü niyetli olma olasiligini tahminlemek üzere yapilandirilmaktadir. Sunucu (6) bir uygulamada tahminleme isleminde çagrinin kötü niyetli olma olasiligini skorlamak üzere yapilandirilmaktadir. The server (6) also records the data recorded in the database (5) in a suitable format. process and predict the likelihood that the call in question is malicious It is structured as follows. The server (6) is in the prediction process in an application It is configured to score the probability of the call being malicious.

Arama yapan numaranin skoru daha önceden belirlenen bir esik degere esit ya da bu degerin üzerinde bir degere ulasirsa sunucu (6) söz konusu numaranin kötü niyetli arama yaptigini d0grulamak ve veri tabani (5) içerisindeki kayitlari bu dogrultuda güncellemek üzere yapilandirilmaktadir. The score of the calling number is equal to or equal to a predetermined threshold value. If it reaches a value above this value, the server (6) indicates that the number in question is bad. to verify that you made an intentional search and to check the records in the database (5) It is configured to update accordingly.

BuIUSun tercih edilen uygulamasinda sunucu (6) arama yapan numaranin kötü niyetli olma olasiligini tahminleme islemini gerçeklestirmeden önce veri tabani (Sl içerisinde kayit altinda tutulan daha önceden dogrulanan numaralara iliskin verileri ve söz konusu verilerle iliskilendirilen kayit altinda tutulan numaralarla iliskilendirilen kisilere iliskin en azindan demografik bilgilere, iletisim Cihazi kulanim aliskanliklarina, konum bilgilerine, arama zaman bilgilerine, çagri süresi bilgilerine, hareketlilik bilgilerine, arama motorlarinda aranma bilgilerine, arama istatistiklerine ve ortalama çagri uzunlugu bilgilerine iliskin verileri girdi olarak kullanarak söz konusu verileri herhangi bir derin ögrenme yöntemine göre islemek ve arama yapan numaranin kötü niyetli olma olasiligini tahminleme islemi için bir model olusturmak üzere yapilandirilmaktadir. Sunucu (6) ilgili modeli olusturduktan sonra güvenlik uygulamasindan (4) gelen ve veri tabani (5) içerisinde kayit altina alinan numara bilgilerine iliskin verileri söz konusu modele bagli olarak islemek ve söz konusu numaranin kötü niyetli olma olasiligini skorlamak üzere yapilandirilmaktadir. Bu sayede sunucu (6) tarafindan gerçeklestirilen tahminleme isleminin daha önceki referanslara göre gerçeklestirilerek daha hassas ve dogru tahminler yapilabilmesi saglanmaktadir. In the preferred implementation of this IUS, the server (6) checks that the calling number is bad. database before estimating the probability of intentionality. (Regarding previously verified numbers kept on record within Sl) data and recorded numbers associated with such data. At least demographic information about the persons associated with the communication device usage habits, location information, call time information, call duration information, mobility information, search information on search engines, search data regarding statistics and average call length information as input. using the data in question according to any deep learning method. processing and predicting the likelihood of the calling number being malicious It is structured to create a model for the process. Server (6) related After creating the model, the information coming from the security application (4) and the database (5) data regarding the number information recorded in the model in question. depending on the number in question and the possibility that the number in question is malicious. It is configured for scoring. In this way, by the server (6) The prediction process performed is compared to previous references. This enables more precise and accurate predictions to be made.

Bulusun bir uygulamasinda sunucu (6) belirli periyotlarla iletisim cihazi (2) Ile iletisim kurmak ve veri tabani (Sl içerisinde kayit altinda tutulan kötü niyetli arama yaptigi daha önceden d0grulanan numara bilgilerine iliskin verileri iletisim Cihazi (2) ile kurulan iletisim üzerinden güvenlik uygulamasina (4) göndermek üzere yapilandirilmaktadir. Güvenlik uygulamasi (4] sunucu (6) tarafindan gönderilen verileri kayit altina almak üzere yapilandirilmaktadir. Güvenlik uygulamasi (4) çagri uygulamasi (3) tarafindan çagrinin geldigi numara bilgilerine iliskin verilerle tetiklendikten sonra çagrinin geldigi numara bilgisi ile içerisinde kayit altinda tutulan kötü niyetli arama yapan numara bilgilerini karsilastirmak ve mevcut çagrinin geldigi numara bilgisinin kayit altinda tutulan numara bilgilerinden en az biri ile eslestigini tespit ederse iletisim Cihazi (2) üzerinde kullaniciyi gelen aramanin kötü niyetli oldugu konusunda bilgilendirmek üzere uyarlanan en az bir ara yüz sunmak üzere yapilandirilmaktadir. Bu sayede kullanici kötü niyetli aramalar yaptigi dogrulanan bir numaradan arandiginda çagriyi kabul etmeden önce söz konusu aramanin kötü niyetli bir araina oldugu konusunda otomatik olarak bilgilendirilmektedir. In an embodiment of the invention, the server (6) communicates with the communication device (2) at certain periods. to communicate and use malicious information recorded in the database (SL). contact data regarding the previously verified numbers from which the call was made. Send it to the security application (4) via the communication established with the device (2). It is structured as follows. Security application (4) by server (6) It is configured to record the sent data. Security The call application (4) sends the number information from which the call came, by the call application (3). After being triggered with the relevant data, it contains the number information from which the call came. To compare recorded malicious caller number information and The number where the current call came from is recorded. on the communication Device (2) if it detects that it matches at least one of the information to inform the user that the incoming call is malicious. It is configured to provide at least one adapted interface. In this way when the user receives a call from a number that has been verified as making malicious calls Before accepting the call, make sure that the call in question is from a malicious caller. is automatically informed about it.

BuIUSun bir uygulamasinda güvenlik uygulamasi (4) ayrica; kötü niyetli arama yaptigi dogrulanan ve/veya kötü niyetli arama yapma olasiligi yüksek skora sahip olan bir numaradan çagri geldiginde çagri uygulamasinin (3) gelen çagriyi daha önceden tanimlanan bir numaraya otomatik olarak yönlendirmesi ya da çagri uygulamasinin (3) çagri kuruldugunda kullanici tarafindan daha önceden belirlenen baska numaralarla da çagri kurarak çagri kurulan numaralarin da mevcut çagriya dahil etmesi gibi daha önceden tanimlanan aksiyonlarin otomatik olarak gerçeklestirilmesini saglayacak sekilde yapilandirilmaktadir. Bu uygulamada güvenlik uygulamasi (4) içerisinde çagri uygulamasi (3) tarafindan gerçeklestirilmesi istenen aksiyon bilgilerine ve aksiyonun gerçeklestirilecegi sartlara iliskin veriler kayit altinda tutulmaktadir. Güvenlik uygulamasi (4) çagri uygulamasi (3) tarafindan çagrinin geldigi numara bilgilerine iliskin verilerle tetiklendikten sonra çagri uygulamasindan (3) alinan numara bilgisine iliskin verileri isleyerek söz konusu numaranin içerisinde kayit altinda tutulan herhangi bir sarti saglayip saglamadigini tespit etmek ve söz konusu numara bilgisinin bir sarti sagladigi tespit edilirse daha önceden belirlenen aksiyona ve ilgili sartla iliskilendirilen aksiyon verisini çagri uygulamasina (3) göndermek üzere yapilandirilmaktadir. Çagri uygulamasi (3) da güvenlik uygulamasindan (4) alinan verilerle iliskili olan aksiyonu otomatik olarak almak üzere yapilandirilmaktadir. In an embodiment of this IUS, the security application (4) also includes; malicious call has a high score that has been verified and/or is likely to make malicious calls. When a call comes from a number that is available, the call application (3) responds to the incoming call more quickly. Automatically forwards or calls to a predefined number application (3) has been previously created by the user when the call is established. By making calls to other specified numbers, the calls are made as well. Automatically performs predefined actions, such as adding it to the current call. It is structured in a way to ensure that it is carried out as follows. This In practice, by the call application (3) within the security application (4). information on the action desired to be performed and the information on which the action will be performed. Data regarding the conditions are kept on record. Security app (4) call with data regarding the number information from which the call came, by the application (3). regarding the number information received from the call application (3) after it is triggered any information stored within that number by processing the data. to determine whether a condition is met and to use the number information in question If it is determined that the condition is met, the previously determined action and the relevant condition are taken. to send the associated action data to the calling application (3). is being configured. The call application (3) also receives the data received from the security application (4). It is configured to automatically take action related to the data.

Bu sayede kötü niyetli arama yaptigi dogrulanan ve/veya kötü niyetli arama yapma olasiligi yüksek skora sahip olan bir numaradan çagri geldiginde çagri uygulamasinin (3) gelen çagriyi daha önceden tanimlanan bir numaraya otomatik olarak yönlendirmesi ya da çagri uygulamasinin (3) çagri kuruldugunda kullanici tarafindan daha önceden belirlenen baska numaralarla da çagri kurarak çagri kurulan numaralarin da mevcut çagriya dahil etmesi gibi daha önceden tanimlanan aksiyonlarin otomatik olarak gerçeklestirilmesi saglanmaktadir. In this way, it is confirmed that the malicious call was made and/or the malicious call was made. When a call comes from a number with a high score, the call application (3) automatically sends the incoming call to a predefined number. routing or calling application (3) when the call is established, the user You can also call other numbers predetermined by previously defined numbers, such as including the established numbers in the current call. actions are carried out automatically.

Bulus konusu kötü niyetli çagri kuran numaralarin tespit edilmesini saglayan sistem (1) sayesinde dolandiricilik ve/veya kötü niyetli olarak arama yapan numaralarin otomatik olarak tespit edilmesiyle mobil iletisim sebeke abonelerinin bu numaralardan çagri almalari durumunda çagri kurulmadan önce söz konusu çagrinin kötü niyetli olabilecegi konusunda bilgilendirilmeleri ve daha önceden tanimlanan aksiyonlarin otomatik olarak alinmasiyla söz konusu kötü niyetli çagrilara karsi korunmalari saglanmaktadir. The subject of the invention is a system that enables the detection of numbers making malicious calls. making fraudulent and/or malicious calls thanks to the system (1) mobile communication network subscribers by automatically detecting numbers If they receive calls from these numbers, they must be informed before the call is established. They should be informed that the call may be malicious and they should be informed beforehand. by automatically taking defined actions, the malicious They are protected against calls.

Bu temel kavramlar etrafinda, bulus konusu “Kötü Niyetli Çagri Kuran Numaralarin Tespit Edilmesini Saglayan Sistem (1)” ile ilgili çok çesitli uygulamalarin gelistirilmesi mümkün olup, bulus burada açiklanan örneklerle Sinirlandirilamaz, esas olarak istemlerde belirtildigi gibidir. Around these basic concepts, the subject of invention is “Malicious Call Quran There is a wide variety of information about the "System That Enables Identification of Numbers (1)" It is possible to develop applications, and the invention is illustrated by the examples explained here. It cannot be limited, it is essentially as stated in the claims.

Claims

REQUIREMENTS 1. Ensuring that numbers making fraudulent and/or malicious calls are identified and mobile communication network subscribers are warned about these numbers and defended against these calls; at least one Communication Device21(2) that receives a mobile communication service from a mobile communication network and is configured to run at least one application on it, and at least one calling application that runs on the communication device (2) and is configured to receive at least incoming calls over the mobile communication network. It contains (3) and is executed on the communication device (2), is in connection with the call application (3) to exchange data, and when a call comes over the mobile communication network, it is triggered by the call application (3) and the user receives the call on the communication device (2). At least one security application (4) configured to provide an interactive interface adapted to enable the user to identify the number as malicious, including at least data on numbers previously confirmed to have made malicious calls, and at least demographic information on persons associated with the registered numbers. , at least one database that records data regarding communication device usage habits, location information, call time information, call duration information, mobility information, appointment information in search engines, call statistics and average call length information, in association with data regarding the relevant number information ( 5) and to communicate with the communication device (2) using any remote communication protocol and to exchange data with the security application (4] executed on the communication device (2) through this communication, to the number determined as malicious by the user through the interface. taking the data from the security application (4) through the communication established with the communication device (2), recording the received number information data in the database (5), processing the data recorded in the database (S1) appropriately and determining whether the call in question is malicious. A system (ll.) characterized by at least one server (6) configured to predict the probability of . The claim is characterized by a communication device (2), which is an electronic device such as a mobile phone, smartphone, tablet computer that receives mobile communication service from at least one mobile communication network through at least one SIM card and can run at least one application (3, 4) on it. A system (1) as in l. A communication device (2) configured to communicate with the server (6] using any remote communication protocol and to enable data exchange between the security application (4) and the server (6) through this communication. A system (1) as in Request 1 or ?, which is configured to communicate with the server (6) over a data network and to enable data exchange between the security application (4) and the server (6). A communication device (2) as in any of the above claims, characterized by a communication device (2), and a call application (3) configured to receive at least incoming calls to the communication device (2) and to enable calls to be made via the communication device (2). A system as in any of the above claims characterized (ll. . It is in connection with the security application (4) to exchange data, and when a call is received over the mobile communication network, the security application (4) provides an interface adapted to enable the user to identify the number the call is coming from as malicious, with data regarding the number information from which the call came. A system (1) as in any of the above claims, characterized by the call application (3) configured to trigger the security application (4). . When a call is established as in any of the above claims, which is characterized by the call application (3) that is configured to allow the incoming call to be directed to another number determined by the user, the call is configured to allow the numbers to be included in the current call by establishing a call with other numbers determined by the user. Communication device (2) as in any of the above claims, characterized by the security application (4) executed on a Communication device (2) as in any of the above claims, characterized by the application (3) and in connection with the calling application (3) to perform data exchange. When a call is received by the call application (3) from any of the above claims, characterized by the security application (4) configured to exchange data with the server (6) through the communication established between the server (6), the call application (3) sends the information regarding the number from which the call came. Any of the above claims, characterized by the security application (4) which is configured to present an interactive interface to the user via the communication device (3) triggered by data and adapted to enable the user to determine the number from which the call is coming, is malicious. If selected, the call in question will communicate with a Server (6) as in any of the above claims, characterized by the security application (4) configured to send data regarding the incoming number information to the server (6) through the communication established between the communication device (2) and the server (6). A system (1) as in any of the above claims, characterized by a database (5) that is in the form of a database and configured to be managed by the server (6). At least data on previously confirmed numbers from which malicious calls have been made, and at least demographic information, communication device usage habits, location information, call time information, call duration information, mobility information, search information on search engines, of individuals associated with the registered numbers, A system (1) as in any of the above claims, characterized by a database (5) that records data regarding call statistics and average call length information in association with data regarding relevant number information. A system as in any of the above claims, characterized by a server (6) configured to communicate with the communication device (2) using any remote communication protocol and to exchange data with the security application (4) executed on the communication device (2) through this communication. system (1). 16. The above-mentioned server (6) is configured to communicate with the communication device (2) over a data network and to exchange data with the security application (4) carried out on the communication device (2). A system as in any of the claims (1). 17. By recording new data in the database (5), deleting the recorded data in the database (5), or changing the recorded data in the database (5). A system (1) as in any of the above claims, characterized by a server (6) configured to manage the database (5) with operations such as updating the data. 18. Characterized by the server (6) configured to receive data regarding the number determined maliciously by the user through the interface from the security application (4) through the communication established with the communication device (2) and to record these data in the database (5). a system (1) as in any of the above claims. 19. A system as in Claim 18, characterized by the server (6) configured to appropriately process the data recorded in the database (5) and predict the possibility of the call in question being malicious. 20. Scoring the probability of the call being malicious in the prediction process A system (1) as in any of the above claims, characterized by the server (6) configured as follows. 21. Request characterized by the server (6) configured to verify that the number in question is making a malicious call if the score of the calling number reaches a value equal to or above a predetermined threshold value and to update the records in the database (5) accordingly. A system like the one in 20 (1). 22. Before performing the process of predicting the possibility of the calling number being malicious, data on previously verified numbers kept in the database (5) and at least demographic information and communication device usage habits of the people associated with the recorded numbers associated with the data in question, Using data regarding subject information, call time information, call duration information, mobility information, search engine search information, call statistics and average call length information as input, we can process the data in question according to any deep learning method and predict the possibility of the calling number being malicious. A system (1) as in any of the above claims, characterized by the server (6) configured to create a model for the process. 23. Characterized by the server (6) configured to process the data regarding the number information coming from the security application (4) and recorded in the database (5) after creating the relevant model, based on the model in question and to score the probability of the number in question being malicious. A system (1) as in claim 22. The server (configured to communicate with the communication device (2) at certain periods and send the data regarding the previously confirmed number information recorded in the database (5) from which the malicious call was made) to the security application (4) through the communication established with the communication device (2). A system (1) as in any of the above claims, characterized by 6). A system (1) as in Request 24, characterized by the security application (4) configured to record the data sent by the server (6). 26. After the call application is triggered by (3) with the data regarding the number information from which the call came, it compares the number information from which the call came with the malicious caller number information recorded therein, and if it detects that the number information from which the current call came matches with at least one of the recorded number information. A system (1) as in Claim 253, characterized by a security application (4) configured to provide at least one interface on the communication device (2) adapted to inform the user that the incoming call is malicious. When a call comes from a number that is confirmed to have made malicious calls and/or has a high score with a high probability of making malicious calls, the call application (3) automatically directs the incoming call to a predefined number or the call application (3) automatically directs the incoming call to a number previously determined by the user when the call is established. 28. A 28 as in any of the above claims, characterized by a security application (4) configured to automatically perform predefined actions, such as making calls with other numbers and including the called numbers in the current call. A system (1) as in Claim 277, characterized by the security application (4) that records data regarding the information and the conditions under which the action will be carried out. 29. After being triggered by the call application (3) with the data regarding the number information from which the call came, by processing the data regarding the number information received from the call application (3), to determine whether the number in question meets any condition recorded in it and to determine whether the number information in question meets a condition. 30. A system as in claim 27 or 28, characterized by the security application (4) configured to send the action data associated with the previously determined action and the relevant condition to the calling application (3). A system (1) as in claim 29, characterized by a call application (3) configured to receive calls.