WO2015101805A1 - Système et procédé de détection de clones de cartes sim - Google Patents
Système et procédé de détection de clones de cartes sim Download PDFInfo
- Publication number
- WO2015101805A1 WO2015101805A1 PCT/IB2013/061438 IB2013061438W WO2015101805A1 WO 2015101805 A1 WO2015101805 A1 WO 2015101805A1 IB 2013061438 W IB2013061438 W IB 2013061438W WO 2015101805 A1 WO2015101805 A1 WO 2015101805A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- call
- msc
- clone
- clone card
- card detector
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
- H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/72—Subscriber identity
Definitions
- the present invention is basically related to a system and method for detecting clone SIM cards.
- SIM cards can be copied easily. This brings the problem of fraud which is about cloning SIM cards and making use of services as free by the original SIM card's GSM subscription in outbound roaming, i.e. in VPLMN. Installing SIM cards in mobile phones and/or SEVIBOXes and using them to originate calls which last for long durations is one of the examples of this fraud.
- Customized Applications for Mobile networks Enhanced Logic, or CAMEL is a set of standards designed to work on either a GSM (Global System for Mobile Communications) core network or UMTS (Universal Mobile Telecommunications System) network. They allow an operator to define services over and above standard GSM services/UMTS services.
- the CAMEL architecture is based on the Intelligent Network (IN) standards, and uses the CAP (CAMEL Application Part) protocol. Many services can be created using CAMEL, and it is particularly effective in allowing these services to be offered when a subscriber is roaming, like, for instance, prepaid charging, no-prefix dialing (the number the user dials is the same no matter the country where the call is placed) or seamless MMS (Multimedia Messaging Service) message access from abroad.
- GSM Global System for Mobile Communications
- UMTS Universal Mobile Telecommunications System
- CAP CAMEL Application Part
- Many services can be created using CAMEL, and it is particularly effective in allowing these services to be offered when a subscriber is roaming, like, for
- BCSM Base call state model
- T-BCSM which is related for call terminating calls of a CAMEL subscriber
- the problem in the background of this invention is related with O-BCSM.
- the BCSM contains detection points (DP) and points in call (PIC).
- the PIC indicates the state of the call, i.e. analysis, routing, alerting and active.
- a DP is associated with a state transition.
- the BCSM first processes the DP that is associated with the transition to that PIC, e.g. when the call is in the alerting phase and an answer event is received over I SUP (ISDN User Part), the BCSM processes the DP that is associated with the answer event. After the processing of the DP is complete, the BCSM transits to the active PIC.
- I SUP ISDN User Part
- the China patent document no. CNlOl 179809 discloses an invention which relates to a device used for capturing a clone SIM card.
- the device depends on an analysis tool of an analyzer, which gathers a user calling record details to obtain a user communication record, and the communication record obtained is loaded to a database arranged on the small- typed call.
- the device database judges and captures the clone SIM card by analyzing phone serial number, telephone number, communication time, communication location, account start time and end time, etc. in the communication record.
- the invention is able to hold back effectively the illegal clone of SIM cards, also is able to protect effectively benefits of consumers, and to retrieve losses for the consumers.
- An objective of the present invention is to detect clone SIM cards that are used in outbound roaming in VPLMN by checking the situation that if two mobile originated calls with the same calling number are ongoing simultaneously or not.
- Figure 1 is a schematic block diagram of the inventive system.
- Figure 2 is a flowchart of the inventive method.
- Figure 3 is a sequence diagram representing the activities of components of inventive system
- MSC Mobile Switching Center
- MSC Mobile Switching Center
- a system (1) which enables detecting clone SIM cards :
- MSC (2) which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS (Short Message Service) as well as other services,
- At least one MSC (12) which belongs to another mobile operator than the one that MSC (2) does and which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services for the mobile operator that it (12) belongs to, at least one clone card detector (3) which communicates with both MSCs (2, 12) to control the service provided by both MSCs (2, 12) by tracking the call events and managing calls and to detect clone SIM cards by a real-time observation over the call information, at least one clone card database (4) which is managed by clone card detector (3) and stores clone card information along with calling party number information ( Figure 1).
- MSC (2) is the exchange and the standard component which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services.
- MSC (12) is the component which belongs to another mobile operator than the one that MSC (2) does and which is the primary service delivery node for GSM/CDMA, responsible for routing voice calls and SMS as well as other services for the mobile operator that it (12) belongs to.
- Both MSCs (2, 12) includes a functional entity which is called as Service Switching Function (SSF).
- SSF handles CAMEL control protocol at the MSCs (2, 12).
- SSF passes call control from MSCs (2, 12) to clone card detector (3) and relays instructions from clone card detector (3) back to MSCs (2, 12). All IN (Intelligent Network) protocol aspects are handled by SSF.
- At least one of the MSCs (2, 12) is located in VPLMN and belongs to a foreign mobile operator which means at least one of the calls operated by MSCs (2, 12) is originated as outbound roaming call.
- Clone card detector (3) is the component which communicates with both MSCs (2, 12) to control the service provided by both MSCs (2, 12) by tracking the call events and managing calls and to detect clone SIM cards by a real-time observation over the call information.
- clone card detector (3) is a SCP (Service Control Point) which is a standard component of the CAMEL telephone system and used to control the service provided by MSCs (2, 12) to subscriber (S) by tracking the call events such as requests sent from MSCs (2, 12) for instructions to complete the call and by managing calls.
- Clone card detector (3) includes a functional entity which is called as Service Control Function (SCF). SCF forms an application in the clone card detector (3) that facilitates the execution of CAMEL services.
- Clone card detector (3) is located and operating in FIPLMN where the owner mobile operator of the original SIM card which is cloned, is providing services.
- InitialDp This type of message is sent by the SSF in MSCs (2, 12) after detection of a trigger detection point request (TDP-R) in the basic call state model (BCSM), to request the SCF in clone card detector (3) for instructions to complete the call.
- TDP-R trigger detection point request
- BCSM basic call state model
- This operation is used to request the SSF in MSCs (2, 12) to proceed with call processing at the DP at which it previously suspended call processing to await SCF in clone card detector (3) instructions.
- the SSF in MSC (3) continues call processing without substituting new data from the SCF in clone card detector (3).
- This operation is used to request the SSF in MSCs (2, 12) to perform the call processing actions to route a call to a specific destination or to influence other call set-up information, e.g. the Generic Number.
- RequestReportBCSM This operation is used to request the SSF in MSCs (2, 12) to monitor for a call-related event (e.g., BCSM events such as Answer, Busy or No Answer, Route Select Failure), then send a notification back to the SCF in clone card detector (3) when the event is detected.
- a call-related event e.g., BCSM events such as Answer, Busy or No Answer, Route Select Failure
- EventReportBCSM This operation is used to notify the SCF in clone card detector (3) of a call related event previously requested by the SCF in clone card detector (3) in a RequestReportBCSMEvent operation.
- the monitoring of more than one event could be requested with a RequestReportBCSMEvent operation, but each of these requested events is reported in a separate EventReportBCSM operation.
- REL Tear down Release
- Clone card detector (3) is the unit which checks whether there is an ongoing call that has been started with the request of MSC (2) for the instructions to complete the call where the request is sent as a message which contains the calling and called party numbers or not, when a new request from MSC (12) is received with at least the same calling party number as the one in the request message of MSC (2).
- request of MSC (2) for the instructions to complete the call is sent as IDP message which contains the calling and called party numbers (IDP (A#, B#)) to clone card detector (3) where first argument in IDP message (A#) represents the number of calling party and second argument in IDP message (B#) represents the number of called party.
- IDP calling and called party numbers
- clone card detector (3) determines that at least one of the SIM cards which let the said calls be originated via MSCs (2, 12) is clone card and inputs the calling party number and SIM card information to clone card database (4) so that it (3) can check this information from database (4) for the next calls and these SIM cards will not be allowed to use any services that a SIM card may provide to subscriber regardless of the foreign operator in VPLMN used for outbound roaming.
- request of MSC (2) for the instructions to complete the call is sent as IDP (A#, B#) message to clone card detector (3)
- request of MSC (12) for the instructions to complete the call is sent as IDP (A#, B#) or IDP (A#, C#) while there was an ongoing call as a result of the request of MSC (2)
- clone card detector (3) determines that at least one of the SIM cards which let the said calls be originated via MSCs (2, 12) is clone card.
- clone card detector (3) After detecting that at least one of the cards which let the said calls be originated via MSCs (2, 12) is clone card, clone card detector (3) sends both MSCs (2, 12) a message to tear down both calls at any phase of the call for all parties involved in the call.
- the message sent from clone card detector (3) to both MSCs (2, 12) to tear down both calls is REL message.
- Clone card database (4) is database which stores clone card information along with calling party number information and managed by clone card detector (3).
- a method (100) which enables detecting clone SIM cards comprises steps of:
- TDP-R trigger detection point request
- - clone card detector (3) sending an RRB message to MSC (2) to request MSC (2) to monitor for call related event and send a notification back to clone card detector (3) when any call event occurs (103); clone card detector (3) sending a CON or CUE message to MSC (2) to request MSC (2) to perform the call processing actions (104); MSC (2) sending an ERB message to clone card detector (3) to notify clone card detector (3) of Answer event which means call is answered by called party and ongoing (105);
- TDP-R trigger detection point request
- BCSM basic call state model
- MSC (12) sending an IDP message including same calling party number as the calling party number argument at step 102 and a called party number which is same as or different from the called party number argument at step 102 as arguments to clone card detector (3) to request the instructions to complete the call (107);
- clone card detector (3) detecting that calling party number in the IDP message that it (3) received at step 107 is the same as the calling party number argument in the IDP message that it (3) received at step 102 and that resulted an ongoing call (108);
- clone card detector (3) inputting the calling party number and SIM card information to clone card database (4) (109);
- FIG. 3 A sequence diagram representing the activities of components of inventive system (1) for an embodiment of the invention is represented in Figure 3. It is possible to develop various embodiments of the inventive system (1) and method (100), it cannot be limited to examples disclosed herein and it is essentially according to claims.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/IB2013/061438 WO2015101805A1 (fr) | 2013-12-31 | 2013-12-31 | Système et procédé de détection de clones de cartes sim |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/IB2013/061438 WO2015101805A1 (fr) | 2013-12-31 | 2013-12-31 | Système et procédé de détection de clones de cartes sim |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2015101805A1 true WO2015101805A1 (fr) | 2015-07-09 |
Family
ID=50115925
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IB2013/061438 WO2015101805A1 (fr) | 2013-12-31 | 2013-12-31 | Système et procédé de détection de clones de cartes sim |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2015101805A1 (fr) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2017206246A1 (fr) * | 2016-05-30 | 2017-12-07 | 宇龙计算机通信科技(深圳)有限公司 | Procédé et serveur d'indication de duplication de carte de module d'identité d'abonné |
CN111027593A (zh) * | 2019-11-15 | 2020-04-17 | 广东工业大学 | 基于模拟退火改进克隆选择算法的能耗异常检测方法 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070072587A1 (en) * | 2005-09-28 | 2007-03-29 | Starhome Gmbh | Tracking roaming cellular telephony calls for anti-fraud and other purposes |
US20070270127A1 (en) * | 2004-06-08 | 2007-11-22 | Telefonaktiebolaget L M Ericsson (Publ) | Method and Radio Communication Network For Detecting The Presence Of Fraudulent Subscriber Identity Modules |
CN101179809A (zh) | 2007-11-14 | 2008-05-14 | 中国移动通信集团福建有限公司 | 用于捕捉克隆sim卡的装置 |
US20100056139A1 (en) * | 2007-04-20 | 2010-03-04 | Koninklijke Kpn N.V. | Monitoring Roaming Calls |
-
2013
- 2013-12-31 WO PCT/IB2013/061438 patent/WO2015101805A1/fr active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070270127A1 (en) * | 2004-06-08 | 2007-11-22 | Telefonaktiebolaget L M Ericsson (Publ) | Method and Radio Communication Network For Detecting The Presence Of Fraudulent Subscriber Identity Modules |
US20070072587A1 (en) * | 2005-09-28 | 2007-03-29 | Starhome Gmbh | Tracking roaming cellular telephony calls for anti-fraud and other purposes |
US20100056139A1 (en) * | 2007-04-20 | 2010-03-04 | Koninklijke Kpn N.V. | Monitoring Roaming Calls |
CN101179809A (zh) | 2007-11-14 | 2008-05-14 | 中国移动通信集团福建有限公司 | 用于捕捉克隆sim卡的装置 |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2017206246A1 (fr) * | 2016-05-30 | 2017-12-07 | 宇龙计算机通信科技(深圳)有限公司 | Procédé et serveur d'indication de duplication de carte de module d'identité d'abonné |
CN111027593A (zh) * | 2019-11-15 | 2020-04-17 | 广东工业大学 | 基于模拟退火改进克隆选择算法的能耗异常检测方法 |
CN111027593B (zh) * | 2019-11-15 | 2022-06-14 | 广东工业大学 | 基于模拟退火改进克隆选择算法的能耗异常检测方法 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN101111071B (zh) | Cdma智能业务实现非结构化用户数据功能的方法 | |
US20090023427A1 (en) | Automated call back request for a mobile phone | |
CN101287163B (zh) | 一种视频呼叫回落到语音呼叫的方法、系统和装置 | |
GB2369270A (en) | Cross charging in a mobile network | |
CN101472007A (zh) | 一种确定骚扰电话的方法和系统 | |
US8009809B2 (en) | Method and system for call proceeding in an intelligent network system | |
EP2046008A1 (fr) | Procédé, système, commutateur et point de commande de service pour mettre en oeuvre un renvoi d'appel | |
US9014693B2 (en) | Monitoring roaming calls | |
US7974611B2 (en) | Method, apparatus or software for managing a call in a telecommunications network | |
EP2637429A1 (fr) | Établissement d'appel à un identifiant active de la carte SIM dans un réseau de communication mobile | |
WO2015101805A1 (fr) | Système et procédé de détection de clones de cartes sim | |
EP2490455A1 (fr) | Procédé, système et passerelle intelligente pour multiples services intelligents | |
KR100965482B1 (ko) | Ars 및 원 링 스팸 전화 차단 시스템 및 그 방법 | |
CN105991850B (zh) | 基于智能网的语音信箱业务的处理方法及智能网设备 | |
CN103888922B (zh) | 一种拆除呼叫及管理终端用户账户安全的方法及装置 | |
CN101138227B (zh) | 智能网企业虚拟总机业务的实现系统及方法 | |
CN101027917A (zh) | 智能网方式中个性化回铃音呼叫保护的方法及装置 | |
CN100488090C (zh) | 一种处理cdma智能呼叫实体间消息丢失的方法 | |
WO2015082958A1 (fr) | Système et procédé pour accroître le taux d'aboutissement des appels | |
CN104717372B (zh) | 一种呼叫业务处理方法和设备 | |
CN101562787B (zh) | 业务处理方法及通信设备 | |
RU2719432C1 (ru) | Способ управления соединениями в сети мобильной связи при недостаточности средств на счете вызывающего абонента при нахождении в международном роуминге | |
CN1988726B (zh) | 呼叫重定向中智能触发及计费的方法、装置和系统 | |
CN1867084B (zh) | 信令处理方法 | |
RU2675784C1 (ru) | Система и способ контролируемого разъединения вызова по окончании максимального времени разговора для направления вызывающего абонента на дополнительные виды обслуживания по протоколам интеллектуального управления вызовами (CAP/ISUP) и установления сеанса (SIP) |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 13830155 Country of ref document: EP Kind code of ref document: A1 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2016/08813 Country of ref document: TR |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 04.10.16) |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 13830155 Country of ref document: EP Kind code of ref document: A1 |