TW202220424A - Method and system for preventing robots from dialing international fraudulent calls - Google Patents

Abstract

The present invention provides a method and system for preventing robots from dialing international fraudulent calls, using call filtering technology and dynamic captcha code authentication procedures to prevent the fraud group from dialing international calls through machines. The method and system can increase the difficulty for the fraud group to use voice recognition technology to recognize the captcha code by using background music and prompts and captcha codes based on sound sources that change dynamically in the dynamical captcha code authentication process. The system composition of the present invention includes (1) an application server, (2) a media server, (3) a database, and (4) a service management system for preventing fraudulent robot dialing. The method implemented by the present invention includes (1) a service management method for preventing fraudulent robot dialing and (2) a call filtering processing method based on a black list, a white list and a gray list.

Description

Method and system for preventing unauthorized international calls by machine

The present invention relates to a method and system for preventing unauthorized international calls by machines, and more particularly to a technology that applies phone filtering and phone interaction menus to provide services for preventing unauthorized international calls by machines.

In the past, most of the telecommunication switching equipment was a closed circuit-switched (Circuit-Switched) network type, and it was not easy for hackers to invade and steal. Protocol, IP) network, because the customer installs the Internet Protocol Private Branch Exchange (PBX), and uses the public network of the Internet to save Internet phone charges, the system and company-end equipment are easy to Intrusion by malicious groups; in addition, the account and password of the remote office extension may also be stolen. After the switching equipment or device on the Internet Protocol network is intruded, a large number of specific international calls are made through the machine in a short period of time, and then contacted with It is common to hear that illegal operators split telephone bills to seek illegal benefits, causing huge losses to telecommunications operators and their customers. Therefore, there have been proposals to provide technologies to prevent unauthorized international calls by machines.

At present, there is a method for real-time detection of international fraudulent calls applied to a Call Detail Record (CDR) receiving device. The statistical value is built into the device memory and stored. When the latest contact record is received, the historical statistical data in the memory is used as a standard to compare the calling number and the destination country for detecting fraudulent calls. It can be used for international fraudulent calls At the beginning of the occurrence, the detection effect can be achieved immediately, so as to avoid excessive fraudulent dialing traffic, so as to facilitate the work reference of subsequent blocking and blocking of the calling source. The method of real-time detection of international fraudulent calls can achieve the effect of detection in a short period of time, but has no automatic blocking function. Special personnel must deal with high-risk door numbers separately. Therefore, it is impossible to block machine fraudulent calls with burst traffic characteristics in time. International traffic.

Another system and method for preventing international telephone revenue sharing fraud, the system and method use SS7 CAMEL (Customized Applications for Mobile networks Enhanced Logic, customized applications for mobile networks Enhanced Logic) through a workstation to connect to an anti-fraud component In order to prevent the mobile phone number that has made two international calls to the same called number at the same time and record it in the database, the mobile phone number will be prohibited from making international calls in the future, but this technology is only suitable for mobile phone operators. Enterprise users who use the mobile number to save fees may be blocked by mistake.

Yet another system and method for a mobile network that automates continuous observation, auditing and control of user activity by continuously observing the number of calls made by each user to other countries and the total number of international calls made by each telecommunications operator to other countries. If the number of minutes and the total number of calls exceeds the set value of the system, an alarm and report will be generated, and the customer care center will intervene and deal with it. This technology also cannot block the unauthorized international calls made by machines with burst traffic characteristics in time. Special personnel must deal with high risks. Door numbers will be handled separately.

Yet another system and method for detecting communication fraud, the system and method by which calls are determined by the switch to the fraud application server using a unique personal identification number, biometric information Or the answer to preset personal questions, etc. If the authentication fails for many times, the fraud application server will list the user as a high-risk call and block it by the switch. This method can actively handle fraudulent calls and block them immediately. Stealing international calls, but telecommunications operators need to provide authentication databases and websites for users to keep their unique personal identification numbers, biometric information, and answers to preset personal questions, etc., and when making international calls to users who do not meet the trust level , you need to remember your personal identification code or answer preset personal questions, which is inconvenient to use. If you use voiceprint recognition, you may not be able to make international calls if you have a cold or a hoarse throat.

It can be seen that the above conventional methods cannot meet the needs of telecommunication operators who want a simple and effective way to block the unauthorized international traffic by machines with burst traffic characteristics. They are not good designers and need to be improved.

The purpose of the present invention is to provide a method and system for preventing theft of international calls by machine, so that the service manager of preventing theft of machine calls can set the time period for anti-theft dialing of the country's exclusive verification code, and the system activates the anti-theft verification code. Dial the time period, black and white list and select language, upload and edit the prompt sound source group, verification code sound source group and background music. When a user makes an international call, the system starts filtering black, white and gray lists based on the calling and called numbers according to the time. White list users are directly connected, black list users are directly blocked, and the rest are identified as gray list users, and they are released after performing verification code filtering. , so that telecom operators can prevent the vast majority of machines from making international calls.

In order to achieve the above object of the invention, the present invention provides a system for preventing theft of an international phone call by a machine. The system includes: a database for storing the anti-theft dialing period of the recipient country's exclusive verification code, the anti-theft dialing period of the system activation verification code, a black and white list, a selection Language, Prompt Sound Source Group, Verification Code Sound Source Group and background music; application server, which is used to filter and process black, white and grey lists after receiving calls from international telephone routing switches; media server, which is used to receive call pins from the application server and perform grey list filtering processing , according to the selected parameters of the application server, after the background music is turned on, the verification code authentication process is performed to determine that the identity of the caller is a human rather than a machine; the anti-theft service management system is used to interface with the international telephone fraud detection system and provide Anti-theft machine dialing service manager user GUI to create and store the specific verification code anti-theft dialing period of the recipient country, system activation verification code anti-theft dialing period, black and white list and selected language, and upload and edit the prompt sound source group, verification code After the sound source group and background music are stored, they are stored in the database.

The present invention further provides a method for preventing theft of an international call by a machine. The method includes: a service management method for preventing theft by a machine and a method for filtering black, white and grey lists.

Firstly, introduce the anti-theft-dialing service management method. The anti-theft-dialing service administrator can create and store the anti-theft-dialing period of the recipient country's unique verification code and the anti-theft-dialing period for the system to activate the verification code through the GUI of the anti-theft-dialing service management system. , black and white list, upload and edit the prompt sound source group, verification code sound source group and background music, and save them in the database. In addition, the anti-robot service management system can also receive the black and white list from the international telephone fraud detection system, and add it to the database.

Secondly, the method of filtering blacklist and graylist is introduced. After the application server receives a call from an international telephone routing switch, it first performs whitelist filtering according to the calling number, and the whitelisted user directly connects the call, and then performs blacklist filtering. When the calling or called number is in the blacklist, the call ends. Finally, the graylist filtering is performed. The application server first selects the background music, and then randomly generates a verification code with a preset length (for example, 3~6 characters), and then selects it according to the user. After selecting the prompt tone sound source group and the verification code sound source group, the relevant selected parameters are sent to the media server for verification code authentication along with the call pin, and the media server starts the background music according to the selected parameters of the application server. then play the prompt The user is asked to enter the randomly generated verification code to perform identity authentication. If the verification code entered by the user is the same as the randomly generated verification code, the call will be connected, otherwise the call will be terminated after three errors.

In the aforementioned method, the application server will first check whether the system time is within the specific verification code anti-theft dialing period or the system activates the verification code anti-theft dialing period of the calling country before performing the graylist filtering. List filtering, otherwise the call is directly connected.

In the aforementioned method, the application server can randomly select the background music, and then randomly select the prompt sound source group and the verification code sound source group according to the language selected by the user to determine the presentation mode of the playing prompt sound and the verification code.

110: General old telephone

120: mobile phone

130: Softphone

140: Talk initial agreement phone

200: Department responsible for international telephone fraud business

210: International Telephone Fraud Detection System

220: International Telephone Routing Exchange

250: International telephone network

260: Public Switched Telephone Network, Public Land Mobile Network or IP Multimedia Subsystem

300: Prevent machines from stealing international phone calls

310: Media Server

320:Database

330: Service management system for preventing machine theft

340: Application Server

400~430: Steps of the management method for preventing machine theft

500~560: The steps of the black-white-graylist filtering method

FIG. 1 is a schematic diagram of the interface between a system for preventing theft of an international phone call by a machine and an external terminal according to the present invention.

FIG. 2 is a system architecture diagram of the system for preventing unauthorized international calls by a machine in FIG. 1 .

FIG. 3 is a flow chart of a management method for anti-theft dialing service according to the present invention.

FIG. 4 is a flow chart of a black-white-graylist filtering processing method according to the present invention.

The present invention includes a system for preventing unauthorized international calls by machines and a method for preventing unauthorized international calls by machines.

Please refer to FIG. 1 , which is a schematic diagram of the interface between the system 300 for preventing theft of international calls by a machine of the present invention and an external terminal. The user terminals and traffic that are filtered by the anti-theft international telephone service include general old telephones 110, mobile telephones 120, Soft Phones 130, Session Initiation Protocol (SIP) telephones 140, and telephones from the international telephone network. words passing by on road 250 service. The international telephone fraud detection system 210 and the international telephone routing switch 220 are connected through a public switched telephone network (Public Switched Telephone Network, PSTN), a public land mobile network (Public Land Mobile Network, PLMN) or an IP Multimedia Subsystem (IP Multimedia Subsystem). , IMS) 260 interfaces with user terminals such as general old telephones 110, mobile telephones 120, softphones 130, and telephone 140 of the initial agreement of the meeting. The system 300 for preventing machine fraudulently dialing international calls, the international call fraud detection system 210 and the international call routing switch 220 can be maintained and managed by the department 200 in charge of the international call fraud business.

Please refer to FIG. 2 , which is a system structure diagram of a system 300 for preventing machine theft of international calls according to the present invention. The system 300 includes a media server 310 , a database 320 , a service management system 330 for preventing machine theft and an application server 340 . The anti-theft service management system 330 may be software, hardware or firmware; if it is hardware, it may be a computer or server; if it is software or firmware, it may include a processing unit, processor, computer or server executable instructions.

The anti-theft machine call service management system 330 provides a graphical user interface for the anti-theft machine call service manager to create and edit the callee country-specific verification code anti-theft dialing period, the system activation verification code anti-theft dialing period, black and white lists (blacklist and whitelist) (collectively) and the selected language, and let the administrator upload and edit the prompt sound source group, the verification code sound source group and the background music. After the above uploading or editing, the anti-robot dialing service management system 330 will store the above sound source group. and music files are stored in the database 320 ; in addition, the anti-robot service management system 330 can receive the black and white lists from the international telephone fraud detection system 210 and add them to the database 320 .

The application server 340 receives the call from the international telephone routing switch 220, uses the black and white list stored in the database 320 to determine whether the calling number of the call is in the white list, if so, directly connects the call, and then executes the black and white list. List filtering, as long as the calling or called number of the call is in the blacklist, the call will be terminated, and finally the graylist filtering will be performed. After the application server 340 first selects the background music, it randomly generates a preset length (for example, 3~6 characters). yuan) verification code, and then according to the user of the call After selecting the prompt tone sound source group and the verification code sound source group according to the selected language, the relevant selected parameters are transmitted to the media server 310 along with the call pin for verification code authentication. The media server 310 first starts the background music according to the parameters selected by the application server 340, and then plays a prompt sound according to the randomly generated verification code and the prompt sound source group to ask the user to input the randomly generated verification code to perform identity verification. If the verification code input by the user is the same as the randomly generated verification code, the application server 340 will return the result to connect the call. If the error has passed a preset number of times (eg, three times), the application server 340 will return the result and end the call. the call. The application server 340 will first check whether the system time of the application server 340 is within the specific verification code anti-theft dialing period of the calling country or the system activation verification code anti-theft dialing period before performing the graylist filtering. List filtering, otherwise the call is directly connected. In addition, the application server 340 can randomly select the background music, and then randomly select the prompt sound source group and the verification code sound source group according to the language selected by the user, so as to determine the presentation mode of the prompt sound and the verification code played by the media server 310 .

The database 320 stores data such as the period of anti-theft dialing of the verification code exclusive to the recipient country, the period of anti-theft dialing of the verification code when the system is activated, the black and white list, the sound source group of the prompt tone, the sound source group of the verification code, and the background music.

The media server 310 has the function of broadcasting and receiving codes, and can start the background music according to the selected parameters input from the application server 340, and then play a prompt sound to ask the calling user to enter the verification code to perform identity authentication. If the randomly generated verification codes are the same, please return the result to the application server 340 to connect the call. If the error occurs a preset number of times (for example, three times), please return the result to the application server 340 to end the call.

The present invention further proposes a method for preventing theft of international phone calls by machine, including a method 400 for preventing theft of international phone calls by machine and a method 500 for filtering black, white and grey lists (collectively referred to as blacklist, whitelist and greylist), which are described as follows .

Please refer to FIG. 3 , which is a flow chart of the management method 400 for preventing theft by machines of the present invention. The international telephone service management method 400 for preventing unauthorized calls by machines can be implemented by, for example, preventing machines The device fraud service management system 330 is executed. First, the anti-robot international telephone service manager performs identity verification based on the account number and password through the web interface of the anti-robbery service management system 330 (step 410). If the verification fails, the user will be directly refused to log in. There are two functions that can be selected to be used by the administrator to verify and prevent the unauthorized dialing of the international telephone service by the machine, namely, the filtering list and the anti-theft dialing period management function (step 420) and the graylist verification program sound source management function (step 430), which are described as follows:

(1) If it is the filtering list and the anti-theft dialing time period management function (step 420), the international telephone service administrator for preventing theft of machines from dialing can:

Add, delete, query, and modify the anti-theft dialing period of the recipient country-specific verification code, the anti-theft dialing period for the system to activate the verification code, the black and white list, and the selected language. In this function, administrators can set multiple callee countries and their respective specific verification code anti-theft dialing time periods corresponding to these callee countries. After this function is used by the administrator, the configuration file including the above-mentioned specific verification code anti-theft dialing period of the recipient country, the system activation verification code anti-theft dialing period, black and white list, and selected language will be stored in the database 320 . If necessary, the international telephone service administrator can also check the call record details to prevent the machine from making unauthorized calls.

(2) If it is the sound source management function of the greylist verification program (step 430), the international telephone service administrator can upload and edit (such as adding, deleting and modifying) the prompt sound source group and verification code sound source group through the webpage to prevent the machine from making unauthorized calls. and background music, and store the result in the database 320 . In addition, the international telephone service administrator for preventing unauthorized calls by the machine can inquire the prompt tone source group, verification code source group and background music stored in the database 320 through the web page.

Please refer to FIG. 4 , which is a flowchart of a method 500 for filtering a black and white gray list according to the present invention. First, the application server 340 receives the call from the international telephone routing switch 220 (step 510), uses the black and white list stored in the database 320 to determine whether the calling number of the call is in the white list (step 512), if so, Connect the call directly (step 550), then perform blacklist filtering (step 514), and end the call as long as the calling or called number of the call is in the blacklist (step 560), then Performing the greylist filtering process, the application server 340 will first check whether the system time of the application server 340 is within the anti-theft dialing period of the country-specific verification code for the call before performing the greylist filtering (step 516 ). The server 340 compares the system time with the anti-theft dialing period of the specific verification code of the recipient country corresponding to the called number of the call to determine whether the system time is within the anti-theft dialing period of the specific verification code of the receiving country of the call, and if so, Then start the greylist filtering, otherwise the application server 340 checks whether the system time is within the system startup verification code anti-theft dialing period (step 518), if so, start the greylist filtering, otherwise directly connect the call (step 550).

When performing graylist filtering, the application server 340 randomly selects the background music first, and then randomly selects the prompt tone source group and the verification code source group according to the language selected by the calling user, so as to determine the media server 310 to play the prompt tone and verification code. ways of presenting. Finally, the application server 340 randomly generates a verification code with a predetermined length (eg, 3-6 characters) (step 520).

In detail, the database 320 stores plural background music, plural prompt tone sound source groups and plural verification code sound source groups, wherein the prompt sound sound source groups and the verification code sound source groups can be people of different languages, genders and ages respectively. recorded voice. The content of the verification code audio source group is related to the characters that make up the verification code. For example, if the characters contained in the verification code are all numbers from 0 to 9, then each verification code sound source group includes a total of 10 voices from 0 to 9; if the characters contained in the verification code are all A to Z English letters, each verification code sound source group includes a total of 26 English letters from A to Z. The application server 340 may randomly select one of the background music, and randomly select one of the prompt tone sound source group and the verification code sound source group of the language selected by the calling user. After selection, the application server 340 transmits the relevant selected parameters to the media server 310 along with the transfer of the call pin to perform the verification code authentication procedure, wherein the selected parameters include the number of the background music selected by the application server 340, The number of the selected prompt tone sound source group, the number of the selected verification code sound source group, and the random generated verification code. According to the above numbers, the media server 310 can obtain the background music, the prompt sound source group and the verification code sound source group selected by the application server 340 from the database 320 .

Next, the media server 310 first starts the background music according to the parameters selected by the application server 340, and then plays a prompt sound according to the randomly generated verification code, the prompt sound source group and the verification code sound source group, asking the user to input the randomly generated verification code to execute Identity confirmation (step 530). The media server 310 also plays background music when playing the prompt sound. After the user inputs the verification code with the keys of the telephone or mobile phone (step 540 ), the media server 310 determines whether the verification code input by the user’s key is the same as the randomly generated verification code (step 542 ), and if it is the same, returns the result, please apply the server The controller 340 connects the call (step 550), if not, then checks whether the number of times the user has entered the verification code has reached a preset number of times (for example, three times) (step 544). When the preset number of times has been reached, the application server 340 will return the result to end the call (step 560).

In one embodiment, the language selected by user A is Chinese, and user A makes an international call at 10:00 pm to find friend B in high-risk country F, assuming that the anti-theft dialing period for country F’s exclusive verification code is from 6:00 pm to 8:00 am the next day , and the phone numbers of user A and B are not in the black and white list, then user A will hear a male Chinese prompt tone "Please enter 2356" in the background music after dialing the call, where "please enter" comes from the one selected by the application server 340. The prompt sound source group, "2356" comes from the verification code sound source group selected by the application server 340. The media server 310 can obtain the voices of numbers 2, 3, 5 and 6 from the verification code sound source group selected by the application server 340 according to the randomly generated verification code 2356 to form the part of "2356" in the prompt tone. After user A enters 2356, the phone is connected with B. Suppose user A makes an international call to find friend B again at 10:30 pm. This time, user A will hear a female Chinese prompt tone "Please enter 789" in another background music. If user A enters 2356 three times, the call will be terminated. .

When compared with other conventional technologies, the method and system for preventing theft of an international call by a machine of the present invention have the following advantages:

(1) The method of the present invention to handle international calls first adopts black and white list filtering, and the rest of the gray list uses dynamic verification code for authentication, users do not need to memorize passwords, functionally enough to prevent machines from stealing international calls, and no password authentication is used. inconvenient way.

(2) The dynamic verification code authentication method of the present invention provides randomly replaced prompt tone sound source groups and verification code sound source groups for different calls, so that the presentation mode of the playing prompt tone and verification code can be changed at any time, and the background of changing with the call is also supplemented. Music playback, even if the pirate group uses a machine with voice recognition function to pirate, it is difficult to successfully crack the verification code, so it can effectively prevent machine robbery.

(3) The present invention can provide different prompt tone sound source groups and verification code sound source groups according to the language selected by the user, so as to diversify the presentation modes of the playing prompt tone and verification code, and can effectively support the use of multiple languages.

(4) The present invention provides a graphical user interface for service managers, to prevent the service manager from stealing machine calls through a computer browser to complete settings such as black and white lists, the time period for anti-theft dialing of the country-specific verification code, and the time period for anti-theft dialing of the system activation code. , you can also upload and edit the prompt sound source group, verification code sound source group and background music.

To sum up, the present invention is not only innovative in terms of technical ideas, but also has the above-mentioned multiple effects that are beyond the reach of conventional methods, and has fully met the requirements of the statutory invention patent for novelty and progress. The Bureau approves this patent application for invention, in order to encourage invention, and to feel moral.

110: General old telephone

120: mobile phone

130: Softphone

140: Talk initial agreement phone

200: Department responsible for international telephone fraud business

210: International Telephone Fraud Detection System

220: International Telephone Routing Exchange

250: International telephone network

260: Public Switched Telephone Network, Public Land Mobile Network or IP Multimedia Subsystem

300: Prevent machines from stealing international phone calls

Claims (10)

A system for preventing theft by machines to dial international calls, including: The application server is used for receiving calls, and randomly selects the background music, the prompt tone sound source group and the verification code sound source group, and randomly generates the first verification code; and The media server is used to play the background music, and play the prompt sound according to the first verification code, the prompt sound source group and the verification code sound source group, so as to determine the first verification code after the calling user inputs the second verification code Whether the second verification code is the same as the first verification code, so that when the second verification code is the same as the first verification code, the media server returns the first result, and then the application server connects the call. The system for preventing theft of an international call by a machine according to claim 1, wherein the application server randomly selects the prompt tone source group and the verification code source group according to the language selected by the user. The system for preventing unauthorized international calls by a machine according to claim 1, wherein the media server also plays the background music when playing the prompt sound. The system for preventing machine fraudulently dialing international calls as described in claim 1, wherein when the second verification code is different from the first verification code, and the number of times the user inputs the second verification code has reached a preset number of times , causing the media server to return the second result so that the application server ends the call. The system for preventing theft of international calls by machine as described in claim 1, wherein the application server randomly generates the first verification before randomly selecting the background music, the prompt sound source group and the verification code sound source group Before the code, it is reused to determine whether the calling number of the call is in the white list. When the calling number is in the white list, the application server will directly connect the call, and when the calling number is not in the white list When in the whitelist, make the application server determine the calling number or the called party of the call Whether the number is in the blacklist, wherein when the calling number or the called number is in the blacklist, the application server is instructed to end the call. The system for preventing theft of international calls by machine as described in claim 1, wherein the application server randomly generates the first verification before randomly selecting the background music, the prompt sound source group and the verification code sound source group Before the code, it is reused to judge whether the system time of the application server is within the specific verification code anti-theft dialing period of the recipient country of the call or within the system activation verification code anti-theft dialing period, when the system time is not the specific verification code of the recipient country. During the anti-theft dialing period and not within the anti-theft dialing period of the system activation verification code, the application server is directly connected to the call. A method for preventing unauthorized international calls by machines, comprising: receive calls; Randomly select the background music, prompt sound source group and verification code sound source group; Randomly generate the first verification code; play the background music; Play a prompt tone according to the first verification code, the prompt tone sound source group and the verification code sound source group, so that the calling user can input the second verification code; and It is judged whether the second verification code is the same as the first verification code, so that when the second verification code is the same as the first verification code, the call is connected. The method for preventing theft of an international call by a machine as described in claim 7, wherein the prompt sound source group and the verification code sound source group are randomly selected according to the language selected by the user, and the prompt sound is combined with the background music Play simultaneously. As stated in claim 7, the method for preventing unauthorized international calls by machines further includes: When the second verification code is different from the first verification code and the number of times the user inputs the second verification code has reached a preset number of times, the call is terminated. The method for preventing theft of an international call by a machine as described in claim 7, wherein before the step of randomly selecting the background music, the prompt sound source group and the verification code sound source group, the first verification is generated at random Before the code steps, the method of preventing the machine from making international calls includes: Determine whether the calling number of the call is in the whitelist; and When the calling number is in the white list, connect the call directly, and when the calling number is not in the white list, determine whether the calling number or the called number of the call is in the black list, wherein , when the calling number or the called number is in the blacklist, end the call, and when neither the calling number nor the called number are in the blacklist, determine whether the system time is exclusive to the country where the call is received During the verification code anti-theft dialing period or the system activates the verification code anti-theft dialing period, when the system time is not within the specific verification code anti-theft dialing period of the recipient country and is not within the system activation verification code anti-theft dialing period, the system will be connected directly. call.

Images