WO2015101805A1 - Système et procédé de détection de clones de cartes sim - Google Patents

Système et procédé de détection de clones de cartes sim Download PDF

Info

Publication number
WO2015101805A1
WO2015101805A1 PCT/IB2013/061438 IB2013061438W WO2015101805A1 WO 2015101805 A1 WO2015101805 A1 WO 2015101805A1 IB 2013061438 W IB2013061438 W IB 2013061438W WO 2015101805 A1 WO2015101805 A1 WO 2015101805A1
Authority
WO
WIPO (PCT)
Prior art keywords
call
msc
clone
clone card
card detector
Prior art date
Application number
PCT/IB2013/061438
Other languages
English (en)
Inventor
Burak CAKMAK
Mert DEVA
Original Assignee
Turkcell Teknoloji Arastirma Ve Gelistirme A.S.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Turkcell Teknoloji Arastirma Ve Gelistirme A.S. filed Critical Turkcell Teknoloji Arastirma Ve Gelistirme A.S.
Priority to PCT/IB2013/061438 priority Critical patent/WO2015101805A1/fr
Publication of WO2015101805A1 publication Critical patent/WO2015101805A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/69—Identity-dependent
    • H04W12/72—Subscriber identity

Definitions

  • the present invention is basically related to a system and method for detecting clone SIM cards.
  • SIM cards can be copied easily. This brings the problem of fraud which is about cloning SIM cards and making use of services as free by the original SIM card's GSM subscription in outbound roaming, i.e. in VPLMN. Installing SIM cards in mobile phones and/or SEVIBOXes and using them to originate calls which last for long durations is one of the examples of this fraud.
  • Customized Applications for Mobile networks Enhanced Logic, or CAMEL is a set of standards designed to work on either a GSM (Global System for Mobile Communications) core network or UMTS (Universal Mobile Telecommunications System) network. They allow an operator to define services over and above standard GSM services/UMTS services.
  • the CAMEL architecture is based on the Intelligent Network (IN) standards, and uses the CAP (CAMEL Application Part) protocol. Many services can be created using CAMEL, and it is particularly effective in allowing these services to be offered when a subscriber is roaming, like, for instance, prepaid charging, no-prefix dialing (the number the user dials is the same no matter the country where the call is placed) or seamless MMS (Multimedia Messaging Service) message access from abroad.
  • GSM Global System for Mobile Communications
  • UMTS Universal Mobile Telecommunications System
  • CAP CAMEL Application Part
  • Many services can be created using CAMEL, and it is particularly effective in allowing these services to be offered when a subscriber is roaming, like, for
  • BCSM Base call state model
  • T-BCSM which is related for call terminating calls of a CAMEL subscriber
  • the problem in the background of this invention is related with O-BCSM.
  • the BCSM contains detection points (DP) and points in call (PIC).
  • the PIC indicates the state of the call, i.e. analysis, routing, alerting and active.
  • a DP is associated with a state transition.
  • the BCSM first processes the DP that is associated with the transition to that PIC, e.g. when the call is in the alerting phase and an answer event is received over I SUP (ISDN User Part), the BCSM processes the DP that is associated with the answer event. After the processing of the DP is complete, the BCSM transits to the active PIC.
  • I SUP ISDN User Part
  • the China patent document no. CNlOl 179809 discloses an invention which relates to a device used for capturing a clone SIM card.
  • the device depends on an analysis tool of an analyzer, which gathers a user calling record details to obtain a user communication record, and the communication record obtained is loaded to a database arranged on the small- typed call.
  • the device database judges and captures the clone SIM card by analyzing phone serial number, telephone number, communication time, communication location, account start time and end time, etc. in the communication record.
  • the invention is able to hold back effectively the illegal clone of SIM cards, also is able to protect effectively benefits of consumers, and to retrieve losses for the consumers.
  • An objective of the present invention is to detect clone SIM cards that are used in outbound roaming in VPLMN by checking the situation that if two mobile originated calls with the same calling number are ongoing simultaneously or not.
  • Figure 1 is a schematic block diagram of the inventive system.
  • Figure 2 is a flowchart of the inventive method.
  • Figure 3 is a sequence diagram representing the activities of components of inventive system
  • MSC Mobile Switching Center
  • MSC Mobile Switching Center
  • a system (1) which enables detecting clone SIM cards :
  • MSC (2) which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS (Short Message Service) as well as other services,
  • At least one MSC (12) which belongs to another mobile operator than the one that MSC (2) does and which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services for the mobile operator that it (12) belongs to, at least one clone card detector (3) which communicates with both MSCs (2, 12) to control the service provided by both MSCs (2, 12) by tracking the call events and managing calls and to detect clone SIM cards by a real-time observation over the call information, at least one clone card database (4) which is managed by clone card detector (3) and stores clone card information along with calling party number information ( Figure 1).
  • MSC (2) is the exchange and the standard component which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services.
  • MSC (12) is the component which belongs to another mobile operator than the one that MSC (2) does and which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services for the mobile operator that it (12) belongs to.
  • Both MSCs (2, 12) includes a functional entity which is called as Service Switching Function (SSF).
  • SSF handles CAMEL control protocol at the MSCs (2, 12).
  • SSF passes call control from MSCs (2, 12) to clone card detector (3) and relays instructions from clone card detector (3) back to MSCs (2, 12). All IN (Intelligent Network) protocol aspects are handled by SSF.
  • At least one of the MSCs (2, 12) is located in VPLMN and belongs to a foreign mobile operator which means at least one of the calls operated by MSCs (2, 12) is originated as outbound roaming call.
  • Clone card detector (3) is the component which communicates with both MSCs (2, 12) to control the service provided by both MSCs (2, 12) by tracking the call events and managing calls and to detect clone SIM cards by a real-time observation over the call information.
  • clone card detector (3) is a SCP (Service Control Point) which is a standard component of the CAMEL telephone system and used to control the service provided by MSCs (2, 12) to subscriber (S) by tracking the call events such as requests sent from MSCs (2, 12) for instructions to complete the call and by managing calls.
  • Clone card detector (3) includes a functional entity which is called as Service Control Function (SCF). SCF forms an application in the clone card detector (3) that facilitates the execution of CAMEL services.
  • Clone card detector (3) is located and operating in FIPLMN where the owner mobile operator of the original SIM card which is cloned, is providing services.
  • InitialDp This type of message is sent by the SSF in MSCs (2, 12) after detection of a trigger detection point request (TDP-R) in the basic call state model (BCSM), to request the SCF in clone card detector (3) for instructions to complete the call.
  • TDP-R trigger detection point request
  • BCSM basic call state model
  • This operation is used to request the SSF in MSCs (2, 12) to proceed with call processing at the DP at which it previously suspended call processing to await SCF in clone card detector (3) instructions.
  • the SSF in MSC (3) continues call processing without substituting new data from the SCF in clone card detector (3).
  • This operation is used to request the SSF in MSCs (2, 12) to perform the call processing actions to route a call to a specific destination or to influence other call set-up information, e.g. the Generic Number.
  • RequestReportBCSM This operation is used to request the SSF in MSCs (2, 12) to monitor for a call-related event (e.g., BCSM events such as Answer, Busy or No Answer, Route Select Failure), then send a notification back to the SCF in clone card detector (3) when the event is detected.
  • a call-related event e.g., BCSM events such as Answer, Busy or No Answer, Route Select Failure
  • EventReportBCSM This operation is used to notify the SCF in clone card detector (3) of a call related event previously requested by the SCF in clone card detector (3) in a RequestReportBCSMEvent operation.
  • the monitoring of more than one event could be requested with a RequestReportBCSMEvent operation, but each of these requested events is reported in a separate EventReportBCSM operation.
  • REL Tear down Release
  • Clone card detector (3) is the unit which checks whether there is an ongoing call that has been started with the request of MSC (2) for the instructions to complete the call where the request is sent as a message which contains the calling and called party numbers or not, when a new request from MSC (12) is received with at least the same calling party number as the one in the request message of MSC (2).
  • request of MSC (2) for the instructions to complete the call is sent as IDP message which contains the calling and called party numbers (IDP (A#, B#)) to clone card detector (3) where first argument in IDP message (A#) represents the number of calling party and second argument in IDP message (B#) represents the number of called party.
  • IDP calling and called party numbers
  • clone card detector (3) determines that at least one of the SIM cards which let the said calls be originated via MSCs (2, 12) is clone card and inputs the calling party number and SIM card information to clone card database (4) so that it (3) can check this information from database (4) for the next calls and these SIM cards will not be allowed to use any services that a SIM card may provide to subscriber regardless of the foreign operator in VPLMN used for outbound roaming.
  • request of MSC (2) for the instructions to complete the call is sent as IDP (A#, B#) message to clone card detector (3)
  • request of MSC (12) for the instructions to complete the call is sent as IDP (A#, B#) or IDP (A#, C#) while there was an ongoing call as a result of the request of MSC (2)
  • clone card detector (3) determines that at least one of the SIM cards which let the said calls be originated via MSCs (2, 12) is clone card.
  • clone card detector (3) After detecting that at least one of the cards which let the said calls be originated via MSCs (2, 12) is clone card, clone card detector (3) sends both MSCs (2, 12) a message to tear down both calls at any phase of the call for all parties involved in the call.
  • the message sent from clone card detector (3) to both MSCs (2, 12) to tear down both calls is REL message.
  • Clone card database (4) is database which stores clone card information along with calling party number information and managed by clone card detector (3).
  • a method (100) which enables detecting clone SIM cards comprises steps of:
  • TDP-R trigger detection point request
  • - clone card detector (3) sending an RRB message to MSC (2) to request MSC (2) to monitor for call related event and send a notification back to clone card detector (3) when any call event occurs (103); clone card detector (3) sending a CON or CUE message to MSC (2) to request MSC (2) to perform the call processing actions (104); MSC (2) sending an ERB message to clone card detector (3) to notify clone card detector (3) of Answer event which means call is answered by called party and ongoing (105);
  • TDP-R trigger detection point request
  • BCSM basic call state model
  • MSC (12) sending an IDP message including same calling party number as the calling party number argument at step 102 and a called party number which is same as or different from the called party number argument at step 102 as arguments to clone card detector (3) to request the instructions to complete the call (107);
  • clone card detector (3) detecting that calling party number in the IDP message that it (3) received at step 107 is the same as the calling party number argument in the IDP message that it (3) received at step 102 and that resulted an ongoing call (108);
  • clone card detector (3) inputting the calling party number and SIM card information to clone card database (4) (109);
  • FIG. 3 A sequence diagram representing the activities of components of inventive system (1) for an embodiment of the invention is represented in Figure 3. It is possible to develop various embodiments of the inventive system (1) and method (100), it cannot be limited to examples disclosed herein and it is essentially according to claims.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

La présente invention concerne fondamentalement un système (1) et un procédé (100) de détection de clones de cartes SIM. Ledit système (1) comprend un CCM (2), un CCM (12), un détecteur (3) de clones de carte et une base de données (4) de clones de cartes.
PCT/IB2013/061438 2013-12-31 2013-12-31 Système et procédé de détection de clones de cartes sim WO2015101805A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/IB2013/061438 WO2015101805A1 (fr) 2013-12-31 2013-12-31 Système et procédé de détection de clones de cartes sim

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/IB2013/061438 WO2015101805A1 (fr) 2013-12-31 2013-12-31 Système et procédé de détection de clones de cartes sim

Publications (1)

Publication Number Publication Date
WO2015101805A1 true WO2015101805A1 (fr) 2015-07-09

Family

ID=50115925

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IB2013/061438 WO2015101805A1 (fr) 2013-12-31 2013-12-31 Système et procédé de détection de clones de cartes sim

Country Status (1)

Country Link
WO (1) WO2015101805A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017206246A1 (fr) * 2016-05-30 2017-12-07 宇龙计算机通信科技(深圳)有限公司 Procédé et serveur d'indication de duplication de carte de module d'identité d'abonné
CN111027593A (zh) * 2019-11-15 2020-04-17 广东工业大学 基于模拟退火改进克隆选择算法的能耗异常检测方法

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070072587A1 (en) * 2005-09-28 2007-03-29 Starhome Gmbh Tracking roaming cellular telephony calls for anti-fraud and other purposes
US20070270127A1 (en) * 2004-06-08 2007-11-22 Telefonaktiebolaget L M Ericsson (Publ) Method and Radio Communication Network For Detecting The Presence Of Fraudulent Subscriber Identity Modules
CN101179809A (zh) 2007-11-14 2008-05-14 中国移动通信集团福建有限公司 用于捕捉克隆sim卡的装置
US20100056139A1 (en) * 2007-04-20 2010-03-04 Koninklijke Kpn N.V. Monitoring Roaming Calls

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070270127A1 (en) * 2004-06-08 2007-11-22 Telefonaktiebolaget L M Ericsson (Publ) Method and Radio Communication Network For Detecting The Presence Of Fraudulent Subscriber Identity Modules
US20070072587A1 (en) * 2005-09-28 2007-03-29 Starhome Gmbh Tracking roaming cellular telephony calls for anti-fraud and other purposes
US20100056139A1 (en) * 2007-04-20 2010-03-04 Koninklijke Kpn N.V. Monitoring Roaming Calls
CN101179809A (zh) 2007-11-14 2008-05-14 中国移动通信集团福建有限公司 用于捕捉克隆sim卡的装置

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017206246A1 (fr) * 2016-05-30 2017-12-07 宇龙计算机通信科技(深圳)有限公司 Procédé et serveur d'indication de duplication de carte de module d'identité d'abonné
CN111027593A (zh) * 2019-11-15 2020-04-17 广东工业大学 基于模拟退火改进克隆选择算法的能耗异常检测方法
CN111027593B (zh) * 2019-11-15 2022-06-14 广东工业大学 基于模拟退火改进克隆选择算法的能耗异常检测方法

Similar Documents

Publication Publication Date Title
CN101111071B (zh) Cdma智能业务实现非结构化用户数据功能的方法
US20090023427A1 (en) Automated call back request for a mobile phone
US20020183040A1 (en) Cross-charging in a mobile telecommunication network
CN101472007A (zh) 一种确定骚扰电话的方法和系统
US8009809B2 (en) Method and system for call proceeding in an intelligent network system
EP2046008A1 (fr) Procédé, système, commutateur et point de commande de service pour mettre en oeuvre un renvoi d'appel
US9014693B2 (en) Monitoring roaming calls
US7974611B2 (en) Method, apparatus or software for managing a call in a telecommunications network
EP2637429A1 (fr) Établissement d'appel à un identifiant active de la carte SIM dans un réseau de communication mobile
WO2015101805A1 (fr) Système et procédé de détection de clones de cartes sim
KR100965482B1 (ko) Ａｒｓ 및 원 링 스팸 전화 차단 시스템 및 그 방법
CN105991850B (zh) 基于智能网的语音信箱业务的处理方法及智能网设备
CN101138227B (zh) 智能网企业虚拟总机业务的实现系统及方法
CN101027917A (zh) 智能网方式中个性化回铃音呼叫保护的方法及装置
CN100488090C (zh) 一种处理cdma智能呼叫实体间消息丢失的方法
WO2015082958A1 (fr) Système et procédé pour accroître le taux d'aboutissement des appels
CN104717372B (zh) 一种呼叫业务处理方法和设备
CN103781042A (zh) 对漫游状态预付费被叫用户进行业务计费的方法与系统
CN101562787B (zh) 业务处理方法及通信设备
RU2719432C1 (ru) Способ управления соединениями в сети мобильной связи при недостаточности средств на счете вызывающего абонента при нахождении в международном роуминге
CN1988726B (zh) 呼叫重定向中智能触发及计费的方法、装置和系统
CN1867084B (zh) 信令处理方法
RU2675784C1 (ru) Система и способ контролируемого разъединения вызова по окончании максимального времени разговора для направления вызывающего абонента на дополнительные виды обслуживания по протоколам интеллектуального управления вызовами (CAP/ISUP) и установления сеанса (SIP)
CN105813043A (zh) 智能业务旁路方法和装置
EP2061222B1 (fr) Procédé et appareil pour la mise en eouvre du service CNAP

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13830155

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 2016/08813

Country of ref document: TR

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 04.10.16)

122 Ep: pct application non-entry in european phase

Ref document number: 13830155

Country of ref document: EP

Kind code of ref document: A1