WO1997029583A1 - Telecommunication system, fraud signalling arrangement and method - Google Patents

Telecommunication system, fraud signalling arrangement and method Download PDF

Info

Publication number
WO1997029583A1
WO1997029583A1 PCT/EP1997/000559 EP9700559W WO9729583A1 WO 1997029583 A1 WO1997029583 A1 WO 1997029583A1 EP 9700559 W EP9700559 W EP 9700559W WO 9729583 A1 WO9729583 A1 WO 9729583A1
Authority
WO
WIPO (PCT)
Prior art keywords
code
fraud
telecommunication
data
codes
Prior art date
Application number
PCT/EP1997/000559
Other languages
French (fr)
Inventor
René Antonie HARTE
Original Assignee
Koninklijke Ptt Nederland N.V.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Koninklijke Ptt Nederland N.V. filed Critical Koninklijke Ptt Nederland N.V.
Priority to AU17223/97A priority Critical patent/AU1722397A/en
Publication of WO1997029583A1 publication Critical patent/WO1997029583A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP

Definitions

  • Telecommunication system fraud signalling arrangement and method.
  • the invention relates to a telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic,
  • a fraud signalling device coupled to the billing system with the purpose of signalling possible fraud.
  • Such a telecommunication system is for example disclosed in EP 0 618 713.
  • This telecommunication system comprises a series circuit of, in succession, a telecommunication exchange (IXC switch 20 in FIG. 1 of EP 0 618 713), a billing system (billing data collector 26 in FIG. 1 of EP 0 618 713), and a fraud signalling device (fraud monitoring processor in FIG. 1 of EP 0 618 713).
  • Telecommunication traffic is switched through the telecommunication exchange, in response to which the telecommunication exchange generates data (so- called call detail records, or CDRs) .
  • billing data are compiled by the billing system, and by combining certain billing data, bills are composed, which are sent to customers e.g.
  • the fraud signalling device In response to billing data compiled per customer, given a certain history of said customer and/or options selected by said customer, the fraud signalling device will detect any possible fraud. This concerns both possible fraud committed by the customer and any possible fraud committed by a third party at the expense of the customer.
  • An object of the invention is to provide a telecommunication system of the type referred to in the preamble, which enables fraud to be signalled without the prior loss of substantial capital.
  • the telecommunication system according to the invention is characterized in that the fraud signalling device is located between the telecommunication exchange and the billing system.
  • the invention is based among other things on the insight that on the one hand the billing system requires a non-negligible amount of time tc compile the billing data and compose the billing data into bills. whereas on the other hand in the case of customers subscribing to foreign network operators, these billing data and/or bills are sent to the foreign network operator in question through a so-called data clearing house, which is a very time-consuming procedure.
  • a first embodiment of the telecommunica ion system according to the invention is characterized in that the data comprise data units, in which a data unit comprises
  • the fraud signalling device comprises - a detector device with the purpose of detecting second codes of one type in relation to second codes of another type
  • determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code of one type, a fourth code which is a function of at least the third code, and
  • a threshold value device coupled to the determining device, with the purpose of comparing, for each first code, combined fourth codes with a threshold value.
  • the determining device is used to determine, only for data units which comprise a second code of one type, the fourth code which is a function of at least the third code, thus resulting in a price indication, after which the threshold value device compares, for each first code, the combined fourth codes with a threshold value. Exceeding said threshold value could then form an indication of possible fraud. Thus any fraud is signalled at a very early stage by monitoring a price indication of expensive numbers only, and without the need for distinguishing between different expensive numbers.
  • a third embodiment of the telecommunication system according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
  • the fourth code at least a function of the second code, a certain distinction between the expensive numbers becomes possible, which facilitates a more accurate price indication.
  • the invention furthermore relates to a fraud signalling device for application in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data units comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, it being possible to couple said fraud signalling device to the billing system with the purpose of signalling possible fraud.
  • the fraud signalling device according to the invention is characterized in that the fraud signalling device comprises
  • determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code' of one type, a fourth code which is a function of at least the third code, and
  • a threshold value device coupled to the determining device, with the purpose of comparing, for each first code, combined fourth codes with a threshold value.
  • a first embodiment of the fraud signalling device according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
  • the invention relates to a method for signalling possible fraud in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data units comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, and said telecommunication system comprising a fraud signalling device coupled to the billing system, with the purpose of signalling the possible fraud.
  • the method according to the invention is characterized in that the method comprises the steps of
  • a first embodiment of the method according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
  • EP 0 618 713 nor EP 0 661 863 discloses a telecommunication system in which the fraud signalling device is located between the telecommunication exchange and the billing system.
  • FIG. 1 shows a telecommunication system according to the invention
  • FIG. 2 shows a fraud signalling device according to the invention.
  • the telecommunication system according to the invention shown in FIG. 1 comprises a telephone 1 coupled to a telecommunication exchange 4, and a telephone 2 coupled to a telecommunication exchange 3.
  • Telecommunication exchange 4 is coupled to telecommunication exchange 3 and, through a connection 7, to a fraud signalling device 5, which is coupled through a connection 8 to a billing system 6.
  • the telecommunication exchanges 3 and 4 switch telecommunication traffic, for example a call taking place between the telephones 1 and 2.
  • At least one of the telecommunication exchanges generates data (for example, telecommunication exchange 4 if the call was initiated from, for example, telephone 1, or for example, telecommunication exchange 3 if the call was initiated from, for example, telephone 2 and these data were subsequently transmitted to telecommunication exchange 4 via the connection shown by the broken line) .
  • data for example, telecommunication exchange 4 if the call was initiated from, for example, telephone 1, or for example, telecommunication exchange 3 if the call was initiated from, for example, telephone 2 and these data were subsequently transmitted to telecommunication exchange 4 via the connection shown by the broken line.
  • the fraud signalling device 5 according to the invention shown in FIG. 2 comprises a splitter 20, which transmits all the data arriving through connection 7 both through connection 30 which changes over into connection 8, and through connection 31. Furthermore, the fraud signalling device 5 comprises a buffer memory 21, an input of which is coupled to connection 31. An output of buffer memory 21 is coupled to an input of data memory 24 through connection 37.
  • the f aud signalling device 5 contains a processor 25 which is coupled to an input/output of processor memory 26 through control connection 38 and which is coupled to an input/output of buffer memory 21 through a control connection 36.
  • processor 25 is coupled to an input/output of a buffer memory 23 through a control connection 34 and coupled, through a control connection 35, to an input/output of a comparator 22 which can compare on the one hand, through connection 32, a (part of a) content of buffer memory 23 with on th-s other hand, through connection 33, a (part of a) content of buffer memory 21.
  • An output of data memory 24 is coupled, through a connection 43, to an input of buffer memory 27, an input/output of which is coupled to processor 25 through a control connection 42.
  • Processor 25 is coupled to an input/output of a buffer memory 29 through a control connection 40 and, through a control connection 41, to an input/output of a comparator 28, which can compare on the one hand, through connection 44, a (part of a) content of buffer memory 29 with on the other hand, through connection 45, a (part of a) content of buffer memory 27.
  • the operation of the fraud signalling device 5 according to the invention shown in FIG. 2 is as follows. Data arriving through connection 7 are transmitted, through splitter 20, both, through connection 30 and connection 8, to billing system 6, which composes bills on the basis of these data, and, through connection 31, to buffer memory 21. These data comprise data units, and for example, in each case one whole data unit is stored in buffer memory 21.
  • Such a data unit comprises for example a first code which is indicative for a calling first party, a second code which is indicative for a called second part), and a third code which comprises time information.
  • processor 25 is informed by buffer memory 21 that a data unit has been stored.
  • processor 25 issues a command to processor memory 26 to generate certain values through control connection 38, said values then being placed in succession into buffer memory 23 through control connection 34.
  • comparator 22 compares said value with the second code stored in buffer memory 21, and if they are found to be identical, processor 25 is informed through control connection 35.
  • processor 25 issue a command to buffer memory 21, through control connection 36, to transmit the stored data unit to data memory 24 through connection 37; in other cases the data unit stored in buffer memory 21 may be erased, for example by overwriting it with a subsequent data unit.
  • the third code, and, if required, also the second code is transmitted, through control connection 39, to processor 25, which in response calculates a fourth code which is a function of said third code, and, if required, also of the second code.
  • Said fourth code is transmitted, through control connection 39, to data memory 24, where the fourth code is stored at a location determined by the first code. If a ??previous?? fourth code already occupies this location, this ??previous??
  • fourth code must, for example together with the third code and a possible second code, be transmitted to processor 25 through control connection 39, and processor 25 must add up the new fourth code and said ??previous?? fourth code and store the resulting combined fourth code at said location. Subsequently, processor 25 issues a command through control connection 39 to transmit this (combined) fourth code to buffer memory 27 via connection 43. As soon as said fourth code has arrived there, processor 25 is informed through control connection 42, after which processor 25 issues a command to processor memory 26 to generate a certain value through control connection 38, said value then being placed in buffer memory 29 through control connection 40. Comparator 28 compares said value with the fourth code stored in buffer memory 27, and if the fourth code exceeds said value, processor 25 is informed through control connection 41.
  • processor 25 In response, processor 25 generates an alarm signal, to indicate the possibility of fraud by a party indicated by the first code, which is sent to a network operator and/or service provider in a manner known to those skilled in the art (e.g. by means of a fc-i message and/or an electronic mail message), for example, through a connection not shown in the Figures and at least one of the telecommunication exchanges 3 and 4.
  • the first code??,?? which is indicative for a calling first party??,?? contains for example the so-called ?? M a"?? number
  • the second code??,?? which is indicative for a called second party??,?? contains for example the so-called ??b?? number
  • the third code??,?? which comprises time information??,?? contains for example the date and for example either the time of commencement and the duration of a call, or the time of commencement and the time of termination of the call, in order to enable (a certain degree of) billing to be carried out.
  • said memory could be cleared with a certain regularity, for example when a certain interval has elapsed and/or when a bill has been paid by a customer linked to a first code.
  • fraud signalling device 5 is located, as it were, in parallel to connections 7 and 8.
  • fraud signalling device 5 could be incorporated in a wholly serial manner into connections 7 and 8, and all first, second and third codes transmitted to billing system 6 through buffer memory 21, data memory 24, and buffer memory 27.
  • splitter 20 could be provided with a detector device in order that on the one hand first and/or second codes which are not sensitive to fraud may be transmitted through connection 30, whereas first and/or second codes which are sensitive to fraud may be transmitted through connection 31, after which these must be transmitted to billing system 6 through buffer memory 21, data memory 24, and buffer memory 27.
  • fraud signalling device 5 could be more or less integrated with billing system 6, and as previously remarked, the possibility exists of locating fraud signalling device 5 as an additional device between telecommunication e-.chang ⁇ 4 and billing system 6, while a known fraud signalling device is already located behind billing system 6.
  • telecommunication exchange 3 The transmission of the data generated by telecommunication exchange 3 from telecommunication exchange 3 to telecommunication exchange 4 through the connection shown as a broken line is only one possible embodiment.
  • all telecommunication exchanges in a certain area or in a certain country are connected in a more direct manner to fraud signalling device 5 and transmit their data to fraud signalling device 5, for example in a certain order and/or for example once per certain interval, etc.
  • all network operators in adjoining countries shall utilize the telecommunication system according to the invention, as in particular fraud by or at the expense of customers subscribing to foreign network operators can be detected much faster by means of this system.
  • Buffer memory 21, comparator 22, buffer memory 23 and processor 25 and processor memory 26 together form an embodiment of a detector device with the purpose of detecting second codes of one type in relation to second codes of another type.
  • Data memory 24 and processor 25 together form an embodiment of ⁇ determining device with the purpose of determining, only for data units which comprise a second c ide of one type, a fourth code which is a function of at least the third code.
  • Buffer memory 27, comparator 28, buffer memory 29 and processor 25 and processor memory 26 together form an embodiment of a threshold value device with the purpose of comparing, for each first code, combined fourth codes with a threshold value.

Abstract

Due to the fact that in telecommunication systems the billing system for preparing bills in response to data received from a telecommunication exchange is located between the telecommunication exchange and a fraud signalling device with the purpose of signalling possible fraud, a large sum will often already have been lost before the fraud is detected. By moving the fraud detection device to a location between the telecommunication exchange and the billing system, or by adding a further fraud detection device at said location, any fraud may be detected at a much earlier stage, particularly when only a part of the data which concerns more expensive calls is checked for fraud.

Description

Telecommunication system, fraud signalling arrangement and method.
Background of the invention
The invention relates to a telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic,
- a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, and
- a fraud signalling device coupled to the billing system with the purpose of signalling possible fraud.
Such a telecommunication system is for example disclosed in EP 0 618 713. This telecommunication system comprises a series circuit of, in succession, a telecommunication exchange (IXC switch 20 in FIG. 1 of EP 0 618 713), a billing system (billing data collector 26 in FIG. 1 of EP 0 618 713), and a fraud signalling device (fraud monitoring processor in FIG. 1 of EP 0 618 713). Telecommunication traffic is switched through the telecommunication exchange, in response to which the telecommunication exchange generates data (so- called call detail records, or CDRs) . On the basis of these data, billing data are compiled by the billing system, and by combining certain billing data, bills are composed, which are sent to customers e.g. once per month or six times per year. In response to billing data compiled per customer, given a certain history of said customer and/or options selected by said customer, the fraud signalling device will detect any possible fraud. This concerns both possible fraud committed by the customer and any possible fraud committed by a third party at the expense of the customer.
One of the disadvantages of such a telecommunication system is that a substantial capital will often have been lost before the fraud is detected, especially if the customer subscribes to a foreign network operator.
Summary of the invention
An object of the invention is to provide a telecommunication system of the type referred to in the preamble, which enables fraud to be signalled without the prior loss of substantial capital. The telecommunication system according to the invention is characterized in that the fraud signalling device is located between the telecommunication exchange and the billing system.
Either moving the fraud signalling device to a location between the telecommunication exchange and the billing system, or introducing a further fraud signalling device between the telecommunication exchange and the billing system, enables any fraud to be signalled at a much earlier stage.
The invention is based among other things on the insight that on the one hand the billing system requires a non-negligible amount of time tc compile the billing data and compose the billing data into bills. whereas on the other hand in the case of customers subscribing to foreign network operators, these billing data and/or bills are sent to the foreign network operator in question through a so-called data clearing house, which is a very time-consuming procedure.
Thus the problem of unnecessary loss of capital is solved by including a fraud signalling device between the telecommunication exchange and the billing system.
A first embodiment of the telecommunica ion system according to the invention is characterized in that the data comprise data units, in which a data unit comprises
- a first code which is indicative for a calling first party,
- a second code which is indicative for a called second party, and - a third code which comprises time information.
These data comprise so-called call detail records or CDRs. The first code??,?? which is indicative for a calling first party??,?? concerns for example the so-called ??"a"?? number, the second code??,?? which is indicative for a called second party??,?? concerns for example the so-called 7?"bn?? number, and the third code??,?? which comprises time information??,?? concerns for example the date and for example, either the time of commencement and the duration of a call, or the time of commencement and the time of termination of the call. A second embodiment of the telecommunication system according to the invention is characterized in that the fraud signalling device comprises - a detector device with the purpose of detecting second codes of one type in relation to second codes of another type,
- a determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code of one type, a fourth code which is a function of at least the third code, and
- a threshold value device coupled to the determining device, with the purpose of comparing, for each first code, combined fourth codes with a threshold value. By providing the fraud signalling device with the detector device for detecting second codes of one type in relation to second codes of another type, dialled numbers which involve high costs (second codes of one type, or so-called expensive numbers, such as remote foreign destinations and commercially exploited numbers) can be distinguished from dialled numbers which involve relatively few costs (second codes of another type or so-called cheap numbers, such as local numbers and national numbers). The determining device is used to determine, only for data units which comprise a second code of one type, the fourth code which is a function of at least the third code, thus resulting in a price indication, after which the threshold value device compares, for each first code, the combined fourth codes with a threshold value. Exceeding said threshold value could then form an indication of possible fraud. Thus any fraud is signalled at a very early stage by monitoring a price indication of expensive numbers only, and without the need for distinguishing between different expensive numbers.
A third embodiment of the telecommunication system according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
By making the fourth code at least a function of the second code, a certain distinction between the expensive numbers becomes possible, which facilitates a more accurate price indication.
Preferably, in a certain part of the world all network operators in adjoining countries shall utilize the telecommunication system according to the invention. The invention furthermore relates to a fraud signalling device for application in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data units comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, it being possible to couple said fraud signalling device to the billing system with the purpose of signalling possible fraud. The fraud signalling device according to the invention is characterized in that the fraud signalling device comprises
- a detictor device with the purpose of detecting second codes of one type in relation to second codes of another type,
- a determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code' of one type, a fourth code which is a function of at least the third code, and
- a threshold value device coupled to the determining device, with the purpose of comparing, for each first code, combined fourth codes with a threshold value.
A first embodiment of the fraud signalling device according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
Still further, the invention relates to a method for signalling possible fraud in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data units comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, and said telecommunication system comprising a fraud signalling device coupled to the billing system, with the purpose of signalling the possible fraud. The method according to the invention is characterized in that the method comprises the steps of
- detecting second codes of one type in relation to second codes of another type, - determining, only for data units comprising a second code of one type, a fourth code which is a function of at least the third code, and
- comparing, for each first code, combined fourth codes with a threshold value. A first embodiment of the method according to the invention is characterized in that furthermore the fourth code is at least a function of the second code.
Neither EP 0 618 713 nor EP 0 661 863 discloses a telecommunication system in which the fraud signalling device is located between the telecommunication exchange and the billing system.
References
■ EP 0 618 713
. EP 0 661 863
All the references are deemed to be incorporated in this application.
Exemplary embodiment
The invention will be explained in greater detail by reference to an exemplary embodiment shown in the figure . In these:
FIG. 1 shows a telecommunication system according to the invention, and
FIG. 2 shows a fraud signalling device according to the invention.
The telecommunication system according to the invention shown in FIG. 1 comprises a telephone 1 coupled to a telecommunication exchange 4, and a telephone 2 coupled to a telecommunication exchange 3. Telecommunication exchange 4 is coupled to telecommunication exchange 3 and, through a connection 7, to a fraud signalling device 5, which is coupled through a connection 8 to a billing system 6. The telecommunication exchanges 3 and 4 switch telecommunication traffic, for example a call taking place between the telephones 1 and 2. In order to enable telephone bills to be composed, at least one of the telecommunication exchanges generates data (for example, telecommunication exchange 4 if the call was initiated from, for example, telephone 1, or for example, telecommunication exchange 3 if the call was initiated from, for example, telephone 2 and these data were subsequently transmitted to telecommunication exchange 4 via the connection shown by the broken line) . These data are transmittec to the uilling system 6 through the connections 7 and 8, while the fraud signalling device 5 attempts to signal possible fraud on the basis of the data.
The fraud signalling device 5 according to the invention shown in FIG. 2 comprises a splitter 20, which transmits all the data arriving through connection 7 both through connection 30 which changes over into connection 8, and through connection 31. Furthermore, the fraud signalling device 5 comprises a buffer memory 21, an input of which is coupled to connection 31. An output of buffer memory 21 is coupled to an input of data memory 24 through connection 37. The f aud signalling device 5 contains a processor 25 which is coupled to an input/output of processor memory 26 through control connection 38 and which is coupled to an input/output of buffer memory 21 through a control connection 36. Furthermore, processor 25 is coupled to an input/output of a buffer memory 23 through a control connection 34 and coupled, through a control connection 35, to an input/output of a comparator 22 which can compare on the one hand, through connection 32, a (part of a) content of buffer memory 23 with on th-s other hand, through connection 33, a (part of a) content of buffer memory 21. An output of data memory 24 is coupled, through a connection 43, to an input of buffer memory 27, an input/output of which is coupled to processor 25 through a control connection 42. Processor 25 is coupled to an input/output of a buffer memory 29 through a control connection 40 and, through a control connection 41, to an input/output of a comparator 28, which can compare on the one hand, through connection 44, a (part of a) content of buffer memory 29 with on the other hand, through connection 45, a (part of a) content of buffer memory 27. The operation of the fraud signalling device 5 according to the invention shown in FIG. 2 is as follows. Data arriving through connection 7 are transmitted, through splitter 20, both, through connection 30 and connection 8, to billing system 6, which composes bills on the basis of these data, and, through connection 31, to buffer memory 21. These data comprise data units, and for example, in each case one whole data unit is stored in buffer memory 21. Such a data unit comprises for example a first code which is indicative for a calling first party, a second code which is indicative for a called second part), and a third code which comprises time information. Through control connection 36, processor 25 is informed by buffer memory 21 that a data unit has been stored. In response, processor 25 issues a command to processor memory 26 to generate certain values through control connection 38, said values then being placed in succession into buffer memory 23 through control connection 34. For each value, comparator 22 compares said value with the second code stored in buffer memory 21, and if they are found to be identical, processor 25 is informed through control connection 35. Only in this case will processor 25 issue a command to buffer memory 21, through control connection 36, to transmit the stored data unit to data memory 24 through connection 37; in other cases the data unit stored in buffer memory 21 may be erased, for example by overwriting it with a subsequent data unit. Of the data unit transmitted to data memory 24, the third code, and, if required, also the second code, is transmitted, through control connection 39, to processor 25, which in response calculates a fourth code which is a function of said third code, and, if required, also of the second code. Said fourth code is transmitted, through control connection 39, to data memory 24, where the fourth code is stored at a location determined by the first code. If a ??previous?? fourth code already occupies this location, this ??previous?? fourth code must, for example together with the third code and a possible second code, be transmitted to processor 25 through control connection 39, and processor 25 must add up the new fourth code and said ??previous?? fourth code and store the resulting combined fourth code at said location. Subsequently, processor 25 issues a command through control connection 39 to transmit this (combined) fourth code to buffer memory 27 via connection 43. As soon as said fourth code has arrived there, processor 25 is informed through control connection 42, after which processor 25 issues a command to processor memory 26 to generate a certain value through control connection 38, said value then being placed in buffer memory 29 through control connection 40. Comparator 28 compares said value with the fourth code stored in buffer memory 27, and if the fourth code exceeds said value, processor 25 is informed through control connection 41. In response, processor 25 generates an alarm signal, to indicate the possibility of fraud by a party indicated by the first code, which is sent to a network operator and/or service provider in a manner known to those skilled in the art (e.g. by means of a fc-i message and/or an electronic mail message), for example, through a connection not shown in the Figures and at least one of the telecommunication exchanges 3 and 4.
The first code??,?? which is indicative for a calling first party??,?? contains for example the so-called ??Ma"?? number, and the second code??,?? which is indicative for a called second party??,?? contains for example the so-called ??b?? number. The third code??,?? which comprises time information??,?? contains for example the date and for example either the time of commencement and the duration of a call, or the time of commencement and the time of termination of the call, in order to enable (a certain degree of) billing to be carried out.
Instead of repeatedly storing a new fourth code, at a location determined by a first code, in data memory 24, said new fourth code being calculated by processor 25 on the basis of the ??previous?? fourth code and the newly arrived third code and, if necessary, the newly received second code, obviously the possibility also exists of calculating the fourth code for each arrived third cede and, if necessary, for each arrived second code, and storing all fourth codes at locations determined by the first code. In doing so, the sum of the fourth codes relating to a first code can be calculated immediately or with a certain regularity, and said sum must then be compared, as previously described, via buffer memory 27 and comparator 28 with the determined value in buffer memory 29, etc. Furthermore, the possibility exists of storing all third codes, and, if necessary, all second codes, in data memory 24 at locations determined by the first code, and for example adding up these third codes, and, if necessary, adding up the second codes, with a certain regularity, only after which a fourth code needs to be calculated on the basis of the thus obtained sum of the third codes and, if necessary, the sum of the second codes, etc. To prevent the overflow of data memory 24, said memory could be cleared with a certain regularity, for example when a certain interval has elapsed and/or when a bill has been paid by a customer linked to a first code.
Instead of transmitting a single fixed value from processor memory 26 through control connection 38 and control connection 40 to buffer memory 29, obviously a value dependent on the first code and/or the second code could be generated, which might enable fraud to be determined in a more differentiating manner.
As a result of the application of splitter 20, fraud signalling device 5 is located, as it were, in parallel to connections 7 and 8. As a first alternative, fraud signalling device 5 could be incorporated in a wholly serial manner into connections 7 and 8, and all first, second and third codes transmitted to billing system 6 through buffer memory 21, data memory 24, and buffer memory 27. As a second alternative, splitter 20 could be provided with a detector device in order that on the one hand first and/or second codes which are not sensitive to fraud may be transmitted through connection 30, whereas first and/or second codes which are sensitive to fraud may be transmitted through connection 31, after which these must be transmitted to billing system 6 through buffer memory 21, data memory 24, and buffer memory 27. Furthermore, fraud signalling device 5 could be more or less integrated with billing system 6, and as previously remarked, the possibility exists of locating fraud signalling device 5 as an additional device between telecommunication e-.changα 4 and billing system 6, while a known fraud signalling device is already located behind billing system 6.
The transmission of the data generated by telecommunication exchange 3 from telecommunication exchange 3 to telecommunication exchange 4 through the connection shown as a broken line is only one possible embodiment. According to another embodiment, all telecommunication exchanges in a certain area or in a certain country are connected in a more direct manner to fraud signalling device 5 and transmit their data to fraud signalling device 5, for example in a certain order and/or for example once per certain interval, etc. Preferably, in a certain part of the world all network operators in adjoining countries shall utilize the telecommunication system according to the invention, as in particular fraud by or at the expense of customers subscribing to foreign network operators can be detected much faster by means of this system.
Buffer memory 21, comparator 22, buffer memory 23 and processor 25 and processor memory 26 together form an embodiment of a detector device with the purpose of detecting second codes of one type in relation to second codes of another type. Data memory 24 and processor 25 together form an embodiment of Ϊ determining device with the purpose of determining, only for data units which comprise a second c ide of one type, a fourth code which is a function of at least the third code. Buffer memory 27, comparator 28, buffer memory 29 and processor 25 and processor memory 26 together form an embodiment of a threshold value device with the purpose of comparing, for each first code, combined fourth codes with a threshold value.

Claims

Claims
1. A telecommunication system comprising
- a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, - a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, and
- a fraud signalling device coupled to the billing system, with the purpose of signalling possible fraut1., characterized in that the fraud signalling device is located between the telecommunication exchange and the billing system.
2. The telecommunication system according to claim 1, characterized in that the data comprise data units, in which a data unit comprises
- a first code which is indicative for a calling first party,
- a second code which is indicative for a called second party, and
- a third code which comprises time information.
3. The telecommunication system according to claim 2, characterized in that the fraud signalling device comprises
- a detector device with the purpose of detecting second codes of one type in relation to second codes of another type,
- a determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code of one type, a fourth code which is a function of at least the third code, and - a threshold value device coupled to the determining device, with the purpose ox comparing, for each first code, combined fourtn codes with a threshold value.
4. The telecommunication system according to claim 3, characterized in that furthermore the fourth code is at least a function of the second code.
5. A fraud signalling device for application in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data units comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, it being possible to couple said fraud signalling device to the billing system, with the purpose of signalling possible fraud, characterized in that the fraud signalling device comprises
- a detector device with the purpose of detecting second codes of one type in relation to second codes of another type,
- a determining device coupled to the detector device, with the purpose of determining, only for data units which comprise a second code of one type, a fourth code which is a function of at least the third code, and - a threshold value device coupled to the determining device, with the purpose of comparing, for each first code, combined fourth codes with a threshold value.
6. The fraud signalling device according to claim 5, characterized in that furthermore the fourth code is at least a function of the second code.
7. A method of signalling possible fraud in a telecommunication system, said telecommunication system comprising a telecommunication exchange with the purpose of switching telecommunication traffic and of generating data in response to the switched telecommunication traffic, and said telecommunication system comprising a billing system coupled to the telecommunication exchange, with the purpose of composing bills in response to the data, said data comprising data units, each of said data unit;, comprising a first code which is indicative for a calling first party, and comprising a second code which is indicative for a called second party, and comprising a third code which comprises time information, and said telecommunication system comprising a fraud signalling device coupled to the billing system, with the purpose of signalling the possible fraud, characterized in that the method comprises the steps of - detecting second codes of one type in relation to second codes of another type, - determining, only for data units which comprise a second code of one type, a fourth code which is a function of at least the third code, and
- comparing, for each first code, combined fourth codes with a threshold value.
8. The method according to claim 7, characterized in that furthermore the fourth code is at least a function of the second code.
PCT/EP1997/000559 1996-02-07 1997-02-06 Telecommunication system, fraud signalling arrangement and method WO1997029583A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU17223/97A AU1722397A (en) 1996-02-07 1997-02-06 Telecommunication system, fraud signalling arrangement and method

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
NL1002269 1996-02-07
NL1002269A NL1002269C2 (en) 1996-02-07 1996-02-07 Telecommunication system, fraud signaling device and working method.

Publications (1)

Publication Number Publication Date
WO1997029583A1 true WO1997029583A1 (en) 1997-08-14

Family

ID=19762261

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP1997/000559 WO1997029583A1 (en) 1996-02-07 1997-02-06 Telecommunication system, fraud signalling arrangement and method

Country Status (3)

Country Link
AU (1) AU1722397A (en)
NL (1) NL1002269C2 (en)
WO (1) WO1997029583A1 (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110189134B (en) * 2019-05-17 2023-01-31 同济大学 Suspected fraud transaction reference ordinal-based network payment anti-fraud system architecture design method

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5333183A (en) * 1992-03-13 1994-07-26 Moscom Corporation Universal MDR data record collection and reporting system
EP0618713A2 (en) * 1993-03-31 1994-10-05 AT&T Corp. Real-time fraud monitoring system in a telecommunication network
WO1994023528A1 (en) * 1993-03-31 1994-10-13 British Telecommunications Public Limited Company Fraud preventing method for a communication network
EP0661863A2 (en) * 1993-12-29 1995-07-05 AT&T Corp. Security system for terminating fraudulent telephone calls

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5333183A (en) * 1992-03-13 1994-07-26 Moscom Corporation Universal MDR data record collection and reporting system
EP0618713A2 (en) * 1993-03-31 1994-10-05 AT&T Corp. Real-time fraud monitoring system in a telecommunication network
WO1994023528A1 (en) * 1993-03-31 1994-10-13 British Telecommunications Public Limited Company Fraud preventing method for a communication network
EP0661863A2 (en) * 1993-12-29 1995-07-05 AT&T Corp. Security system for terminating fraudulent telephone calls

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
D.B.WAECHTER: "Considerations for the use of adjunct technology in the telecommunications network", GLOBECOM '87, vol. 3/3, 15 November 1987 (1987-11-15) - 18 November 1987 (1987-11-18), TOKYO, JAPAN, pages 1551 - 1555, XP002014998 *

Also Published As

Publication number Publication date
NL1002269C2 (en) 1997-08-08
AU1722397A (en) 1997-08-28

Similar Documents

Publication Publication Date Title
CA1309785C (en) Line interface unit
US5602906A (en) Toll fraud detection system
US6529591B1 (en) Method and system for communication caller identification information between a remote site and a central monitoring station over PSTN
US5465293A (en) Apparatus and method for screening foreign incollect calls to domestic non-collect call telephone numbers to reduce fraud
US6078647A (en) Method and apparatus for detecting a data service provider in a public switched telephone network
WO1998024230A2 (en) A mechanism for a system and method for detecting fraudulent use of collect calls
US4839916A (en) Telephone toll integrity checking system
US6330312B1 (en) Communications network
US6418212B1 (en) Telephone fraud detection and prevention
US6636592B2 (en) Method and system for using bad billed number records to prevent fraud in a telecommunication system
AU6403898A (en) Call setup for prepaid services
EP0938805B1 (en) A method for controlling a credit customer call
US4182934A (en) Method and apparatus for detecting irregular telephone calls
US7203291B2 (en) Apparatus and method for generating call information data for calls on long duration
WO1997029583A1 (en) Telecommunication system, fraud signalling arrangement and method
US5898771A (en) Method and apparatus for universal telephone operator service
CA2182225A1 (en) Method and telecommunications network for control of mass calling
US4885767A (en) Blue-box fraud prevention
US6118858A (en) Call distribution processing method for called line number computation in premium-rate service
US6373935B1 (en) Workstation for calling card fraud analysis
MXPA02005970A (en) Country to country call intercept process (cip).
US7133508B1 (en) Prepaid long distance call system and method
KR100210403B1 (en) Appartus and method for processing charging data
KR970006416B1 (en) Database main table structure
KR0149593B1 (en) Charging system for an exchanger

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AL AU BA BB BG BR CA CN CU CZ EE GE HU IL IS JP KP KR LC LK LR LT LV MD MG MK MN MW MX NO NZ PL RO RU SD SG SI SK TR TT UA UG US UZ VN AM AZ BY KG KZ MD RU TJ TM

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): KE LS MW SD SZ UG AT BE CH DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN ML MR NE SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: JP

Ref document number: 97528162

Format of ref document f/p: F

122 Ep: pct application non-entry in european phase