WO2018056925A2 - Système et procédé de détection et de prévention de la fraude utilisant le renvoi automatique d'appels dans des réseaux de communication mobile - Google Patents

Système et procédé de détection et de prévention de la fraude utilisant le renvoi automatique d'appels dans des réseaux de communication mobile Download PDF

Info

Publication number
WO2018056925A2
WO2018056925A2 PCT/TR2017/000076 TR2017000076W WO2018056925A2 WO 2018056925 A2 WO2018056925 A2 WO 2018056925A2 TR 2017000076 W TR2017000076 W TR 2017000076W WO 2018056925 A2 WO2018056925 A2 WO 2018056925A2
Authority
WO
WIPO (PCT)
Prior art keywords
call
unit
suspicious
data
interpretation unit
Prior art date
Application number
PCT/TR2017/000076
Other languages
English (en)
Other versions
WO2018056925A3 (fr
Inventor
Ugur Cumhur CELIK
Gamze KAPLAN
Enes SAHIN
Burak ISIKLI
Original Assignee
Turkcell Teknoloji Arastirma Ve Gelistirme Anonim Sirketi
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Turkcell Teknoloji Arastirma Ve Gelistirme Anonim Sirketi filed Critical Turkcell Teknoloji Arastirma Ve Gelistirme Anonim Sirketi
Publication of WO2018056925A2 publication Critical patent/WO2018056925A2/fr
Publication of WO2018056925A3 publication Critical patent/WO2018056925A3/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
    • H04M15/47—Fraud detection or prevention means
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
    • H04M15/82—Criteria or parameters used for performing billing operations
    • H04M15/8271—Based on the number of used services, e.g. call forwarding or call barring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M3/00—Automatic or semi-automatic exchanges
    • H04M3/42—Systems providing special services or facilities to subscribers
    • H04M3/54—Arrangements for diverting calls for one subscriber to another predetermined subscriber
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/24—Accounting or billing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13282—Call forward, follow-me, call diversion
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/282—Call forwarding

Definitions

  • the present invention relates to a system and method which detects and prevents forwarding frauds connecting to a called subscriber by forwarding call to a number registered to a domestic operator and making a domestic call over the forwarded number when performing a call set-up between international GSM (Global System for Mobile Communications) operators.
  • GSM Global System for Mobile Communications
  • test calls are made to numbers registered in the operator so as to determine SIM (Subscriber Identity Module) cards purchased from the operator for the purpose of forwarding fraud on a desired network.
  • SIM Subscriber Identity Module
  • the number is taken under review on suspicion of fraud in the event that CLI (Calling Line Identity) code cannot be transferred to the called number.
  • CLI Calling Line Identity
  • Occurrence of an undesired density in network due to initiation of call is an undesired situation in these usages.
  • there are methods such as test call. However, these methods remain incapable due to the fact that they do not provide a wide scale tracking and prevention mechanism. Continuing revenue losses of telecommunication operators summarizes this situation. Therefore, the need of a system for substantially detecting and preventing forwarding frauds such as SIM Box is evident.
  • US9002320 an application in the state of the art, discloses a system and method which detects forwarding fraud by initiating test call to network subscribers at certain intervals and tracking signal data of the test call.
  • An objective of the present invention is to realize a system and method which enables to detect frauds performed by means of call forwarding (SIM Box, etc.) and to prevent the detected numbers by tracking network signals in international calls.
  • Figure 1 is a schematic block diagram of the inventive system.
  • Figure 2 is a flow diagram related to the inventive method.
  • FIG. 3 is continuation of the flow diagram included in the Figure 1 related to the inventive method.
  • the components illustrated in the figures are individually numbered, where the numbers refer to the following:
  • Method FN Foreign network
  • the inventive system (1) for detecting and preventing call forwarding fraud in international calls comprises:
  • At least one signalling data unit (2) which essentially tracks signals regarding calls established on a mobile communication network in order to determine information about time, duration of an initiated call and its status of being national or international and status of the calling and called party of being mobile-based and which records signalling data of these calls;
  • At least one transferred numbers database (3) which is in communication with the domestic network (DN) and keeps records of numbers switching among mobile operators on the domestic network (DN);
  • At least one data gathering unit (4) which is in communication with the signalling data unit (2) and the transferred numbers database (3) and essentially records the call signalling data received from the signalling data unit (2) as input and the operator data received from the transferred numbers database (3) upon associating them with one another;
  • At least one interpretation unit (5) which is in communication with the data gathering unit (4) and the end systems (US), essentially receives the data recorded upon being associated with one another by the data gathering unit (4) and detects fraud carried out through call forwarding by performing analysis of these received data and consequently takes necessary pre-determined actions in order to prevent the related numbers and gives notification to the end systems (US) as a result of the analysis;
  • At least one suspicious numbers database (6) which in communication with the interpretation unit (5) and essentially keeps records of data related to the numbers about the fraud detected by the interpretation unit (5) ( Figure- 1)
  • the signalling data unit (2) included in the inventive system (1) is in communication with the domestic network (DN) and the data gathering unit (4).
  • the signalling data unit (2) tracks signal data of calls made on the communication network with which it is in communication.
  • the signalling data unit (2) determines information about time, duration of an initiated call and its status of being national or international and status of the calling and called party of being mobile-based by using the signal tracking protocols of the domestic network (DN) in its function to track calls initiated on network.
  • the signalling data unit (2) gathering the signal data of the calls made on the domestic network (DN) transmits these signal data to the data gathering unit (4).
  • the signalling data unit (2) performs a pre-selection process by applying pre-determined filters such as for example mobile -based call before it transmits the signalling data to the data gathering unit (4).
  • the transferred numbers database (3) included in the inventive system (1) is in communication with the domestic network (DN) and the data gathering unit (4).
  • the transferred numbers database (3) records the numbers changing operator inside the domestic network (DN).
  • the transferred numbers database (3) comprises up-to-date operator information of numbers which change operator and transmits the related operator information to the data gathering unit (4) when they are triggered by the data gathering unit (4).
  • the data gathering unit (4) included in the inventive system (1) is in communication with the signalling data unit (2), the transferred numbers database (3) and the interpretation unit (5).
  • the data gathering unit (4) receives the data coming from the signalling data unit (2).
  • the data gathering unit (4) transmits the stored data to the interpretation unit (5) when it is triggered by the interpretation unit (5).
  • the interpretation unit (5) included in the inventive system (1) is in communication with the data gathering unit (4), the suspicious numbers database (6) and the end systems (US).
  • the interpretation unit (5) detects fraud made by means of call forwarding and consequently takes necessary actions in order to prevent the related numbers.
  • the interpretation unit (5) receives call signalling and operator data from the data gathering unit (4) so as to analyse them. In accordance with the data received, the interpretation unit (5) controls whether call is terminated within a pre-determined period such as for example 30 seconds when call is initiated to a number belonging to a domestic network (DN) from a number belonging to a foreign network (FN).
  • DN domestic network
  • FN foreign network
  • the interpretation unit (5) takes no action if it is detected that the call is not terminated within a pre-determined period as a result of the control transaction.
  • the interpretation unit (5) controls whether any call is initiated to a number belonging to a domestic network (DN) from the domestic network (DN) within a pre-determined period such as for example 60 seconds if it is detected that the call is terminated within a pre- determined period as a result of the control transaction.
  • the interpretation unit (5) takes no action if it is detected that no call is initiated to a number belonging to a domestic network (DN) from the domestic network (DN) within a pre-determined period as a result of the control transaction.
  • the interpretation unit (5) perceives the fact that a call -which is initiated from the foreign network (FN) and terminated within a certain period of time- is then taken as a call from the domestic network (DN) within a certain period of time as forwarding and it determines the number initiating call from the domestic network (DN) as a suspicious number on suspicion of forwarding fraud.
  • the interpretation unit (5) controls the suspicious number from the suspicious numbers database (6).
  • the interpretation unit (5) adds the suspicious number to the suspicious numbers database (6) if the suspicious number is not recorded in the suspicious numbers database (6) as a result of the control transaction.
  • the interpretation unit (5) updates the number of becoming suspicious by increasing it one in number in one embodiment of the invention if the suspicious number is recorded in the suspicious numbers database (6) as a result of the control transaction.
  • the interpretation unit (5) determines the suspicious number as a number belonging to the fraud operator (FO) in the event that it becomes suspicious for the said forwarding fraud as much as a pre-determined threshold value.
  • FO fraud operator
  • the interpretation unit (5) takes action in order to prevent the numbers determined as numbers belonging to the fraud operator (FO). For this purpose, it receives the information concerning which domestic operator the fraud numbers of the domestic network (DN) belongs to from the data gathering unit (4). The interpretation unit (5) notifies the fraud numbers -operator information of which are received- to the end systems (US) on grounds of fraud so as to be examined and closed down.
  • the suspicious numbers database (6) included in the inventive system (1) is in communication with the interpretation unit (5).
  • the suspicious numbers database (6) records the numbers determined as suspicious by the interpretation unit (5). Besides, it keeps record of how many times have the suspicious numbers been marked as suspicious by the interpretation unit (5).
  • the suspicious numbers database (6) transmits suspicious number information to the interpretation unit (5) when it is triggered by the interpretation unit (5).
  • the inventive system (1) becomes active when a call is initiated from a number registered to the foreign network (FN) to a number recorded in the domestic network (DN).
  • Information about time, duration of this call -which is initiated by the signalling data unit (2) tracking the signalling data of the calls made in the domestic network (DN)- and its status of being national or international and status of the calling and called party of being mobile-based are determined.
  • the signalling data unit (2) gathers the specified signal data and transmits them to the data gathering unit (4).
  • the data gathering unit (4) receives the operator information of the numbers from the transferred numbers database (3) wherein the records of numbers switching among operators in the domestic network (DN) are kept in addition to the signalling data received.
  • the data gathering unit (4) correlates the signalling data and the operator information and records them.
  • the interpretation unit (5) detecting forwarding fraud receives the signalling data from the data gathering unit (4) as input.
  • the interpretation unit (5) looks at the duration of the call initiated from the foreign network (FN) to the number registered to the domestic network (DN) in accordance with these data received. If the call initiated from the foreign network (FN) is terminated in a time less than a pre-determined period, after the call is terminated, it is controlled whether a call is initiated to the number called by the foreign network (FN) from the domestic network (DN) within a pre-determined period. If a call is initiated to the called number from the domestic network (DN) within a pre-determined period, the interpretation unit (5) determines the call initiating number as a suspicious number on suspicion of forwarding fraud.
  • the interpretation unit (5) adds the suspicious number to the suspicious numbers database (6) if the suspicious number detected as a result of the query transaction by querying the suspicious numbers database (6) is not recorded in the suspicious numbers database (6) or it updates the suspicious status in the suspicious numbers database (6) if the suspicious number detected as a result of the query transaction is not recorded in the suspicious numbers database (6).
  • the interpretation unit (5) determines this number as belonging to the fraud operator (FO).
  • the interpretation unit (5) retrieves the operator information of the number from the data gathering unit (4) and gives notifications to the end systems (US) in order to prevent the number.
  • the end systems (US) are the related unit of the operator where the detected fraud number belongs.
  • the notification made to the end systems (US) can be carried out by means of any service provided by the communication network.
  • the inventive system (1) it is enabled to detect forwarding fraud which forwards a call to a number registered in the domestic network (DN) and thus ensures that it is carried out as a domestic call in calls made among international mobile operators.
  • the inventive forwarding fraud detection and prevention method (100) for detecting and preventing call forwarding in international calls comprises steps of:
  • the signalling data unit (2) tracking the signalling data related to the calls made on the network by using the signal tracking protocols of the domestic network (DN) (101); - the signalling data unit (2) transmitting the information about time, duration of calls made on domestic network (DN) and their status of being national or international and status of the calling and called party of being mobile-based to the data gathering unit (4) together with the information of calling and called party number (102);
  • the data gathering unit (4) receiving the operator information of the calling numbers from the transferred numbers database (3) (103);
  • the data gathering unit (4) associating the signalling data and the operator data (104);
  • the interpretation unit (5) receiving the signalling data and the data associated with the operator information from the data gathering unit (4) (105);
  • the interpretation unit (5) controlling whether the call initiated from the foreign network (FN) is terminated within a pre-determined period (106); - if it is determined as a result of the control transaction (106) that the call initiated from the foreign network (FN) is not terminated within a predetermined period, the interpretation unit (5) taking no action;
  • the interpretation unit (5) controlling whether the called party in the said call has received call from the domestic network (DN) within a pre-determined period (107);
  • the interpretation unit (5) controlling whether the number initiating the call is registered in the suspicious numbers database (6) (108); - if it is determined as a result of the control transaction (108) that the party initiating the call from the domestic network (DN) is not registered in the suspicious numbers database (6), the interpretation unit (5) recording the said number to the suspicious numbers database (6) (109);
  • the interpretation unit (5) recording the said number to the suspicious numbers database (6) (109) updating the number of becoming suspicious of the party initiating the call in the suspicious numbers database (6) (110);
  • the interpretation unit (5) controlling the number of becoming suspicious of the party initiating the call recorded in the suspicious numbers database (6) (111);
  • the interpretation unit marking the suspicious number as belonging to the fraud operator (FO) and giving notification to the end systems (US) (112);
  • the interpretation unit (5) taking no action.
  • the signalling data unit (2) tracks the signalling data of the calls made on the network by using the signal tracking protocols of the domestic network (DN) (101) at first.
  • the signalling data unit (2) transmits the information about time, duration of calls made on domestic network (DN) and their status of being national or international and status of the calling and called party of being mobile-based to the data gathering unit (4) together with the information of calling and called party number (102).
  • the data gathering unit (4) receives the operator information of the numbers switching among operators in the domestic network (DN) from the transferred numbers database (3) (103) and associates the operator information with the signalling data (104).
  • the interpretation unit (5) receives the associated data from the data gathering unit (4) (105).
  • the interpretation unit (5) controls the calls initiated from the foreign network (FN) and terminated within a pre-determined period (106). If it is determined as a result of the control transaction (106) that the call initiated from the foreign network (FN) is not terminated within a pre-determined period, the interpretation unit (5) terminates the transaction by taking no action. If it is determined as a result of the control transaction (106) that the call initiated from the foreign network (FN) is terminated within a pre-determined period, the interpretation unit (5) controls whether the called party has received call from the domestic network (DN) within a pre-determined period after the call is terminated (107).
  • DN domestic network
  • the interpretation unit (5) terminates the transaction by taking no action. If it is determined as a result of the control transaction (107) that the called party has received call from the domestic network (DN) within a predetermined period, the interpretation unit (5) queries the party initiating the call in the suspicious numbers database (6) (108) and if the party initiating the call is not available in the suspicious numbers database (6), it adds the suspicious number to the suspicious numbers database (6) (109). If the party initiating the call is available in the suspicious numbers database (6), the interpretation unit (5) updates the number of becoming suspicious of the party initiating the call (110).
  • the number of becoming suspicious of the party initiating the call is controlled by the interpretation unit (5) (111) and if it is determined to be under the predetermined threshold value, the interpretation unit (5) terminates the transaction. If it is detected as a result of the control transaction (111) that the number of suspicious statuses reaches a pre-determined threshold value, the interpretation unit (5) marks the party initiating the call as the number belonging to the fraud operator (FO) and gives notification to the end systems (US) (112).
  • the inventive forwarding fraud method (100) is enabled to detect forwarding fraud which forwards a call to a number registered in the domestic network (DN) and thus ensures that it is carried out as a domestic call in calls made among international mobile operators.

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

La présente invention concerne d'une manière générale un système (1) et un procédé (100) permettant de détecter et de prévenir les fraudes utilisant le renvoi automatique d'appels en se connectant à un abonné appelé par renvoi d'appel vers un numéro enregistré dans un réseau domestique (DN) et en passant un appel domestique sur le numéro renvoyé lors de l'établissement d'une communication entre des opérateurs mobiles internationaux. Le système selon l'invention (1) comprend une unité de données de signalisation (2), une base de données de numéros transférés (3), une unité de collecte de données (4), une unité d'interprétation (5) et une base de données de numéros suspects (6).
PCT/TR2017/000076 2016-07-14 2017-07-05 Système et procédé de détection et de prévention de la fraude utilisant le renvoi automatique d'appels dans des réseaux de communication mobile WO2018056925A2 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
TR201609738 2016-07-14
TR2016/09738 2016-07-14

Publications (2)

Publication Number Publication Date
WO2018056925A2 true WO2018056925A2 (fr) 2018-03-29
WO2018056925A3 WO2018056925A3 (fr) 2018-06-21

Family

ID=61656294

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/TR2017/000076 WO2018056925A2 (fr) 2016-07-14 2017-07-05 Système et procédé de détection et de prévention de la fraude utilisant le renvoi automatique d'appels dans des réseaux de communication mobile

Country Status (1)

Country Link
WO (1) WO2018056925A2 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3726825A1 (fr) 2019-04-16 2020-10-21 Bics Sa/Nv Système et procédé de détection de fraude dans un trafic de télécommunications internationales

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2012080781A1 (fr) 2010-12-12 2012-06-21 Gayan Samarasekara Procédé et système de détection de numéros de mobile utilisés par des opérateurs de contournement de passerelle internationale (boîte sim)
US9002320B2 (en) 2010-07-02 2015-04-07 Roamware, Inc. Advanced predictive intelligence for termination bypass detection and prevention

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5615253A (en) * 1994-10-28 1997-03-25 At&T Method for processing forwarded telephone calls
US20070072587A1 (en) * 2005-09-28 2007-03-29 Starhome Gmbh Tracking roaming cellular telephony calls for anti-fraud and other purposes
US20090069047A1 (en) * 2007-09-07 2009-03-12 Tekelec Methods, systems, and computer program products for detecting wireless bypass in a communications network

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9002320B2 (en) 2010-07-02 2015-04-07 Roamware, Inc. Advanced predictive intelligence for termination bypass detection and prevention
WO2012080781A1 (fr) 2010-12-12 2012-06-21 Gayan Samarasekara Procédé et système de détection de numéros de mobile utilisés par des opérateurs de contournement de passerelle internationale (boîte sim)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3726825A1 (fr) 2019-04-16 2020-10-21 Bics Sa/Nv Système et procédé de détection de fraude dans un trafic de télécommunications internationales
WO2020212275A1 (fr) 2019-04-16 2020-10-22 Bics Sa/Nv Système et procédé de détection de fraude dans un trafic de télécommunication international
US11882236B2 (en) 2019-04-16 2024-01-23 Bics Sa/Nv System and method for detecting fraud in international telecommunication traffic

Also Published As

Publication number Publication date
WO2018056925A3 (fr) 2018-06-21

Similar Documents

Publication Publication Date Title
CN101472008B (zh) 对骚扰电话进行识别、控制的方法及相应的系统
US20090069047A1 (en) Methods, systems, and computer program products for detecting wireless bypass in a communications network
US20180359636A1 (en) System and method for mobile number verification
EP1771031A2 (fr) Contrôle des appels mobiles cellulaires itinérants dans le but anti-fraude
US20040192297A1 (en) System and method for enabling and enhancing spending limits functionality in post-paid wireless billing systems
EP3657769B1 (fr) Procédé et système de détection de dérivation d'interconnexion utilisant des appels de test à des abonnés réels
CN104244216A (zh) 一种通话过程中实时拦截诈骗电话的方法和系统
EP2403288B1 (fr) Système et procédé permettant de déterminer les terminaux de communication couramment utilisés et d'identifier les entités bruyantes dans une analyse de lien à grande échelle
CN102075639A (zh) 一种国际业务通信网中恶意呼叫的拦截方法及装置
GB2494292A (en) Detection of potentially fraudulent activity by users of mobile communications networks
CN101341729A (zh) 用户信息的提供
RU2429589C2 (ru) Способ обнаружения мошенничества при роуминговых соединениях в сетях мобильной связи
US20120099711A1 (en) Telecommunication fraud prevention system and method
US6636592B2 (en) Method and system for using bad billed number records to prevent fraud in a telecommunication system
CN107733900B (zh) 一种通信网用户异常呼叫行为检测预警方法
US6418212B1 (en) Telephone fraud detection and prevention
WO2018056925A2 (fr) Système et procédé de détection et de prévention de la fraude utilisant le renvoi automatique d'appels dans des réseaux de communication mobile
US8897809B2 (en) Method and system to automatically identify unknown identities
JP2004527185A (ja) 共通の請求番号を使用して不正呼び出しを防ぐためのシステムおよび方法
US20010041557A1 (en) Preventing misuse of call forwarding service
US11882453B2 (en) Fraudelent subscription detection
WO2018203842A2 (fr) Système et procédé de détection de fraude de bypass téléphonique utilisant le renvoi automatique d'appels dans des réseaux de communication mobile
WO2017111741A1 (fr) Système et procédé destinés à la prévention de la fraude irsf
Macia-Fernandez et al. Fraud in roaming scenarios: An overview
JP2004533770A (ja) 可変長の呼ばれた番号スクリーニング

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17851879

Country of ref document: EP

Kind code of ref document: A2

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17851879

Country of ref document: EP

Kind code of ref document: A2