Network fraud early warning method on mobile terminal
Through the monitoring and analysis layer and multimodal output engine, combined with multiple early warning methods, the problems of insufficient early warning awareness, customization methods and untimely information updates in the mobile anti-fraud system are solved, and effective reminders in high-frequency operation scenarios and timely updates and classification management of fraud-related information are achieved.
Patent Information
- Application Number
- CN202510920992.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-04
- Publication Date
- 2025-09-26
AI Technical Summary
The existing mobile anti-fraud system has problems such as insufficient warning awareness, inability of users to customize warning methods, insufficient classification and management of fraud-related categories, and inability to update fraud-related information in a timely manner.
It adopts a monitoring and analysis layer, a multimodal output engine and an early warning management module, including a monitoring module, an analysis module, a visual early warning unit, a physical feedback unit and a permission management module. It provides multiple early warning methods such as banner notifications, voice broadcasts and vibration reminders, and supports user-defined configurations.
It can effectively remind users in high-frequency operation scenarios, support customized early warning methods, and realize the classification management of fraud-related categories and timely update of fraud-related information.
Smart Images

Figure CN120708381A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of fraud early warning, and more specifically, to a network fraud early warning method on a mobile terminal. Background Art
[0002] The current mobile anti-fraud system has the following core problems: Insufficient warning awareness: Traditional solutions rely on single pop-up windows or SMS alerts, which are easily ignored in scenarios with high user activity (such as full-screen gaming or video playback). Users cannot customize the warning method: Traditional solutions are usually based on a single warning method, which is relatively simple; Classification and management of fraud-related categories: Traditional solutions cannot classify and manage all fraud-related categories; Fraudulent information cannot be updated in a timely manner: Traditional solutions do not have the function of updating fraudulent information in a timely manner; Therefore, it is necessary to provide a network fraud early warning method on a mobile terminal to solve the above problems. Summary of the Invention
[0003] Based on the above-mentioned problems existing in the prior art, the purpose of the embodiments of the present application is to provide a network fraud early warning method on a mobile terminal to achieve the effect of combining multiple early warning methods.
[0004] The technical solution adopted by the present application to solve its technical problem is: a network fraud early warning method on a mobile terminal, comprising a monitoring and analysis layer, a multimodal output engine and an early warning management module; The monitoring and analysis layer includes a monitoring module and an analysis module. The monitoring module is used to monitor whether the subject's behavior is triggered, and the analysis module is used to upload the subject's information to the server to analyze whether the subject is involved in fraud. The multimodal output engine includes a visual warning unit, a physical feedback unit, and a rights management module; The visual warning unit includes a banner notification reminder module and a toast reminder module. The physical feedback unit includes a vibration reminder module and a voice broadcast reminder module. The permission management module allows users to customize the selection of switching banner notification reminders and voice and vibration reminders. The early warning management module includes an early warning level configuration module, which is used to determine the early warning interval, upload interval and configuration validity period of the fraud-related subject according to the early warning level after the server sends the fraud level configuration.
[0005] Furthermore, the following workflow is included: S1.1. The subject triggers fraudulent behavior and queries fraudulent information; S1.2. If this is not the first time that the subject has triggered the behavior and the last warning for the behavior is within the warning interval, the warning message corresponding to the last warning for the same subject and the same behavior will be aggregated. Otherwise, a new warning message will be generated directly. S1.3. If no warning message is displayed within one minute, the following warning methods will be used according to the user's customized method (can exist simultaneously): pop-up banner notification, voice broadcast, vibration, pop-up toast; S1.4. Record the warning message into the database.
[0006] Furthermore, step S1.1 specifically includes the following process for querying fraudulent information: S2.1, subject triggers behavior; S2.2. Check whether the main configuration has been cached and whether the configuration is still valid. If so, execute S2.3. Otherwise, execute the following steps: Add the subject to the configuration query queue and wait for query; Query and upload subject information to the server; The server returns the main configuration information, and the application updates the configuration cache; S2.3. Determine whether the subject is involved in fraud based on the cache configuration. If not, ignore the subject's behavior. Otherwise, execute S2.4. S2.4. Execute the early warning process and upload process.
[0007] Furthermore, in step S1.2, the pop-up banner notification includes the following process: S3.1. Confirm the warning message about fraud; S3.2. Determine whether the permission is enabled. If so, continue with the following process. Otherwise, the user cannot be notified of the warning message. S3.3. Create a notification builder with the following details: Set the application icon; Set a fixed warning title; Set content based on the type of fraud involved; Set the highest notification priority; Set the PendingIntent that is triggered when the notification is clicked to jump to the warning message details page; Set the application badge; S3.4. Generate notifications based on settings; S3.5. Whether banner notifications are enabled in the permission settings interface. If so, notifications can be displayed floating above the screen when sent. Otherwise, notifications can only be displayed in the pull-down notification bar. S3.6. When the user clicks on the notification, the page will jump to the warning message details.
[0008] Furthermore, in step S3.3, setting the application badge includes the following process: S4.1. Determine the device model and perform the following actions based on the model: For VIVO, create an intent with the action set to launcher.action.CHANGE_APPLICATION_NOTIFCATION_NUM. In the extra section, set packageName to the package name, className to the main interface class, and notificationNum to 1 to display a red corner on the app icon. Send the intent as a broadcast. For HUAWEI or HONOR models: Create a bundle, set package to your own package name, set class to the main interface class, and set badgenumber to 1. Call the change_badge function at content: / / com.huawei.android.launcher.settings / badge / to update the app badge (using the call function of ContentResolver with the created bundle). If the model is XIAOMI: Get the miui version number (get the corresponding value of ro.miui.ui.version.name); if 6 <= miui version number <= 11, use reflection to get the extraNotification field of the Notification class, call the setMessageCount function of the field, and pass 1 as the parameter; S4.2. Display a red corner mark on the application icon.
[0009] Furthermore, in step S1.3, the voice broadcast includes the following process: S5.1. Triggering an early warning message; S5.2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S5.3. Check whether the warning voice is played for the first time. If so, lazy load the MediaPlayer (Android media player class). Otherwise, continue with the following process. S5.4, start playing the voice coroutine; S5.5. Is the audio playing? If so, reset the MediaPlayer. Otherwise, continue with the following process. S5.6. Set the file descriptor of the audio file and the offset and length to be played into the MediaPlayer. S5.7, MediaPlayer is prepared asynchronously and plays the audio directly after it is ready; S5.8. Playback is complete and the warning ends.
[0010] Furthermore, in step S1.3, the pop-up toast includes the following process: S6.1. Triggering an early warning message; S6.2. Set the text content of Toast; S6.3. Set the display duration of Toast; S6.4. Set the position of Toast to the center; S6.5. Display the toast on the interface; S6.6. Check the system Android SDK version. If it is a higher version, Toast can only be displayed in the system style and cannot be customized, the display position cannot be changed, and it cannot be displayed in the background. If it is a lower version, Toast can be customized, the display position can be changed, and it can be displayed in the background. S6.7. The display is completed and the warning ends.
[0011] Furthermore, in step S1.3, the vibration includes the following process: S7.1. Triggering an early warning message; S7.2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S7.3. Get the Vibrator instance. If the system SDK version is greater than or equal to 31, get the system service VibratorManager and get defaultVibrator as the Vibrator instance. Otherwise, get the system service Vibrator as the Vibrator instance. S7.4, fixed vibration duration; S7.5. Vibration is completed and the warning ends.
[0012] The beneficial effects of the present invention are: 1. It has multiple warnings, so that users can have sufficient warning reminders in high-frequency operation scenarios (such as full-screen mode of games / videos); 2. Allow users to customize warning methods; 3. Classification and management of fraud-related categories; 4. Fraud-related information is updated in a timely manner. BRIEF DESCRIPTION OF THE DRAWINGS
[0013] The accompanying drawings, which constitute part of the present invention, are intended to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are intended to explain the present invention and do not constitute an undue limitation of the present invention. In the accompanying drawings: Figure 1 This is an overall schematic diagram of a network fraud early warning method on a mobile terminal in this application; Figure 2 This is a schematic diagram of the workflow of a network fraud early warning method on a mobile terminal in this application; Figure 3 for Figure 2 Schematic diagram of the process of querying fraud-related information; Figure 4 for Figure 2 Flowchart of pop-up banner notification; Figure 5 for Figure 4 Flow chart of setting application superscript in ; Figure 6 for Figure 2 Flowchart of voice broadcast in Chinese; Figure 7 for Figure 2 A flowchart of the pop-up Toast; Figure 8 for Figure 2 Schematic diagram of the process of vibration. DETAILED DESCRIPTION
[0014] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments in this application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.
[0015] It should be noted that, unless otherwise specified, all technical and scientific terms used in this application have the same meaning as commonly understood by ordinary technicians in the technical field to which this application belongs.
[0016] In the present invention, unless otherwise specified, directions such as "up" and "down" are generally used with respect to the directions shown in the drawings, or with respect to the vertical, perpendicular or gravity directions; similarly, for ease of understanding and description, "left" and "right" are generally used with respect to the left and right shown in the drawings; "inside" and "outside" refer to the inside and outside relative to the outline of each component itself, but the above-mentioned directions are not used to limit the present invention.
[0017] like Figure 1 As shown, the present application provides a network fraud early warning method on a mobile terminal, including a monitoring and analysis layer, a multimodal output engine and an early warning management module.
[0018] The monitoring and analysis layer includes a monitoring module and an analysis module. The monitoring module is used to monitor whether the subject's behavior is triggered, and the analysis module is used to upload the subject's information to the server to analyze whether the subject is involved in fraud.
[0019] The multimodal output engine includes a visual warning unit, a physical feedback unit, and a permissions management module. The visual warning unit includes a banner notification module and a toast notification module. The physical feedback unit includes a vibration notification module and a voice broadcast notification module. The permissions management module allows users to customize the on / off functions of banner notifications and voice and vibration notifications.
[0020] The banner notification module, toast notification module, and vibration notification module all issue reminders based on system-related functions. The voice broadcast reminder module first loads the voice file through system-related functions, prepares it using related functions, and then calls a specific function to start playing the voice.
[0021] The early warning management module includes an early warning level configuration module. After the server issues the fraud level configuration, it determines the early warning interval, upload interval, and configuration validity period for the fraud-related subject based on the early warning level. Each subject will only receive an early warning level if it is confirmed to be involved in fraud. The same subject will only be warned again after the time of the most recent early warning plus the time after the early warning interval (the first time will be directly warned). Within the early warning interval, only the most recent early warning will be aggregated, and the upload interval logic is the same. The configuration validity period refers to the validity period of the subject's fraudulent information and configuration (including the early warning level) cached by the application. Each time a fraudulent subject triggers an action, the application will check whether the configuration has expired (lazy loading method).
[0022] like Figure 2 As shown, a network fraud early warning method on a mobile terminal includes the following workflow: S1.1. The subject triggers fraudulent behavior and queries fraudulent information; S1.2. If this is not the first time that the subject has triggered the behavior and the last warning for the behavior is within the warning interval, the warning message corresponding to the last warning for the same subject and the same behavior will be aggregated. Otherwise, a new warning message will be generated directly. S1.3. If no warning message is displayed within one minute, the following warning methods will be used according to the user's customized method (can exist simultaneously): pop-up banner notification, voice broadcast, vibration, pop-up toast; S1.4. Record the warning message into the database.
[0023] like Figure 3 As shown, step S1.1 specifically includes the following process of querying fraudulent information: S2.1, subject triggers behavior; S2.2. Check whether the main configuration has been cached and whether the configuration is still valid. If so, execute S2.3. Otherwise, execute the following steps: Add the subject to the configuration query queue and wait for query; Query and upload subject information to the server; The server returns the main configuration information, and the application updates the configuration cache; S2.3. Determine whether the subject is involved in fraud based on the cache configuration. If not, ignore the subject's behavior. Otherwise, execute S2.4. S2.4. Execute the early warning process and upload process.
[0024] like Figure 4 As shown, in step S1.2, the pop-up banner notification includes the following process: S3.1. Confirm the warning message about fraud; S3.2. Determine whether the permission is enabled. If so, continue with the following process. Otherwise, the user cannot be notified of the warning message. S3.3. Create a notification builder with the following details: Set the application icon; Set a fixed warning title; Set content based on the type of fraud involved; Set the highest notification priority; Set the PendingIntent that is triggered when the notification is clicked to jump to the warning message details page; Set the application badge; S3.4. Generate notifications based on settings; S3.5. Whether banner notifications are enabled in the permission settings interface. If so, notifications can be displayed floating above the screen when sent. Otherwise, notifications can only be displayed in the pull-down notification bar. S3.6. When the user clicks on the notification, the page will jump to the warning message details.
[0025] like Figure 5 As shown, in step S3.3, setting the application badge includes the following process: S4.1. Determine the device model and perform the following actions based on the model: For VIVO, create an intent with the action set to launcher.action.CHANGE_APPLICATION_NOTIFCATION_NUM. In the extra section, set packageName to the package name, className to the main interface class, and notificationNum to 1 to display a red corner on the app icon. Send the intent as a broadcast. For HUAWEI or HONOR models: Create a bundle, set package to your own package name, set class to the main interface class, and set badgenumber to 1. Call the change_badge function at content: / / com.huawei.android.launcher.settings / badge / to update the app badge (using the call function of ContentResolver with the created bundle). If the model is XIAOMI: Get the miui version number (get the corresponding value of ro.miui.ui.version.name); if 6 <= miui version number <= 11, use reflection to get the extraNotification field of the Notification class, call the setMessageCount function of the field, and pass 1 as the parameter; S4.2. Display a red corner mark on the application icon.
[0026] like Figure 6 As shown, in step S1.3, the voice broadcast includes the following process: S5.1. Triggering an early warning message; S5.2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S5.3. Check whether the warning voice is played for the first time. If so, lazy load the MediaPlayer (Android media player class). Otherwise, continue with the following process. S5.4, start playing the voice coroutine; S5.5. Is the audio playing? If so, reset the MediaPlayer. Otherwise, continue with the following process. S5.6. Set the file descriptor of the audio file and the offset and length to be played into the MediaPlayer. S5.7, MediaPlayer is prepared asynchronously and plays the audio directly after it is ready; S5.8. Playback is complete and the warning ends.
[0027] like Figure 7 As shown, in step S1.3, popping up Toast includes the following process: S6.1. Triggering an early warning message; S6.2. Set the text content of Toast; S6.3. Set the display duration of Toast; S6.4. Set the position of Toast to the center; S6.5. Display the toast on the interface; S6.6. Check the system Android SDK version. If it is a higher version, Toast can only be displayed in the system style and cannot be customized, the display position cannot be changed, and it cannot be displayed in the background. If it is a lower version, Toast can be customized, the display position can be changed, and it can be displayed in the background. S6.7. The display is completed and the warning ends.
[0028] like Figure 8 As shown, in step S1.3, vibration includes the following process: S7.1. Triggering an early warning message; S7.2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S7.3. Get the Vibrator instance. If the system SDK version is greater than or equal to 31, get the system service VibratorManager and get defaultVibrator as the Vibrator instance. Otherwise, get the system service Vibrator as the Vibrator instance. S7.4, fixed vibration duration; S7.5. Vibration is completed and the warning ends.
[0029] Obviously, the embodiments described above are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.
[0030] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprise" and / or "include" are used in this specification, they indicate the presence of features, steps, tasks, devices, components and / or combinations thereof.
[0031] It should be noted that the terms "first," "second," and the like in the specification and claims of this application and the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.
[0032] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.
[0033] The above description is merely a preferred embodiment of the present invention. The scope of protection of the present invention is not limited to the above embodiment. All technical solutions based on the concept of the present invention are within the scope of protection of the present invention. It should be noted that for those skilled in the art, various improvements and modifications that do not depart from the principles of the present invention should also be considered within the scope of protection of the present invention.
Claims
1. A network fraud early warning method on a mobile terminal, characterized by: Includes monitoring and analysis layer, multimodal output engine and early warning management module; The monitoring and analysis layer includes a monitoring module and an analysis module. The monitoring module is used to monitor whether the subject's behavior is triggered, and the analysis module is used to upload the subject's information to the server to analyze whether the subject is involved in fraud. The multimodal output engine includes a visual warning unit, a physical feedback unit, and a rights management module; The visual warning unit includes a banner notification reminder module and a toast reminder module. The physical feedback unit includes a vibration reminder module and a voice broadcast reminder module. The permission management module allows users to customize the selection of switching banner notification reminders and voice and vibration reminders. The early warning management module includes an early warning level configuration module, which is used to determine the early warning interval, upload interval and configuration validity period of the fraud-related subject according to the early warning level after the server sends the fraud level configuration.
2. The network fraud early warning method on a mobile terminal according to claim 1, characterized in that: The following workflows are included: S1.
1. The subject triggers fraudulent behavior and queries fraudulent information; S1.
2. If this is not the first time that the subject has triggered the behavior and the last warning for the behavior is within the warning interval, the warning message corresponding to the last warning for the same subject and the same behavior will be aggregated. Otherwise, a new warning message will be generated directly. S1.
3. If no warning message is displayed within one minute, the following warning methods will be used according to the user's customized method (can exist simultaneously): pop-up banner notification, voice broadcast, vibration, pop-up toast; S1.
4. Record the warning message into the database.
3. The network fraud early warning method on a mobile terminal according to claim 2, characterized in that: The step S1.1 specifically includes the following process of querying fraudulent information: S2.1, subject triggers behavior; S2.
2. Check whether the main configuration has been cached and whether the configuration is still valid. If so, execute S2.
3. Otherwise, execute the following steps: Add the subject to the configuration query queue and wait for query; Query and upload subject information to the server; The server returns the main configuration information, and the application updates the configuration cache; S2.
3. Determine whether the subject is involved in fraud based on the cache configuration. If not, ignore the subject's behavior. Otherwise, execute S2.
4. S2.
4. Execute the early warning process and upload process.
4. The network fraud early warning method on a mobile terminal according to claim 2, characterized in that: In step S1.2, the pop-up banner notification includes the following process: S3.
1. Confirm the warning message about fraud; S3.
2. Determine whether the permission is enabled. If so, continue with the following process. Otherwise, the user cannot be notified of the warning message. S3.
3. Create a notification builder with the following details: Set the application icon; Set a fixed warning title; Set content based on the type of fraud involved; Set the highest notification priority; Set the PendingIntent that is triggered when the notification is clicked to jump to the warning message details page; Set the application badge; S3.
4. Generate notifications based on settings; S3.
5. Whether banner notifications are enabled in the permission settings interface. If so, notifications can be displayed floating above the screen when sent. Otherwise, notifications can only be displayed in the pull-down notification bar. S3.
6. When the user clicks on the notification, the page will jump to the warning message details.
5. The network fraud early warning method on a mobile terminal according to claim 4, characterized in that: In step S3.3, setting the application badge includes the following process: S4.
1. Determine the device model and perform the following actions based on the model: For VIVO, create an intent with the action set to launcher.action.CHANGE_APPLICATION_NOTIFCATION_NUM. In the extra section, set packageName to the package name, className to the main interface class, and notificationNum to 1 to display a red corner on the app icon. Send the intent as a broadcast. For HUAWEI or HONOR models: Create a bundle, set package to your own package name, set class to the main interface class, and set badgenumber to 1. Call the change_badge function at content: / / com.huawei.android.launcher.settings / badge / to update the app badge (using the call function of ContentResolver with the created bundle). If the model is XIAOMI: Get the miui version number (get the corresponding value of ro.miui.ui.version.name); if 6 <= miui version number <= 11, use reflection to get the extraNotification field of the Notification class, call the setMessageCount function of the field, and pass 1 as the parameter; S4.
2. Display a red corner mark on the application icon.
6. The network fraud early warning method on a mobile terminal according to claim 2, characterized in that: In step S1.3, the voice broadcast includes the following process: S5.
1. Triggering an early warning message; S5.
2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S5.
3. Check whether the warning voice is played for the first time. If so, lazy load the MediaPlayer (Android media player class). Otherwise, continue with the following process. S5.4, start playing the voice coroutine; S5.
5. Is the audio playing? If so, reset the MediaPlayer. Otherwise, continue with the following process. S5.
6. Set the file descriptor of the audio file and the offset and length to be played into the MediaPlayer. S5.7, MediaPlayer is prepared asynchronously and plays the audio directly after it is ready; S5.
8. Playback is complete and the warning ends.
7. The network fraud early warning method on a mobile terminal according to claim 2, characterized in that: In step S1.3, popping up Toast includes the following process: S6.
1. Triggering an early warning message; S6.
2. Set the text content of Toast; S6.
3. Set the display duration of Toast; S6.
4. Set the position of Toast to the center; S6.
5. Display the toast on the interface; S6.
6. Check the system Android SDK version. If it is a higher version, Toast can only be displayed in the system style and cannot be customized, the display position cannot be changed, and it cannot be displayed in the background. If it is a lower version, Toast can be customized, the display position can be changed, and it can be displayed in the background; S6.
7. The display is completed and the warning ends.
8. The network fraud early warning method on a mobile terminal according to claim 2, characterized in that: In step S1.3, the vibration includes the following process: S7.
1. Triggering an early warning message; S7.
2. Has the voice broadcast permission been authorized? If so, continue with the following process; otherwise, terminate the process. S7.
3. Get the Vibrator instance. If the system SDK version is greater than or equal to 31, get the system service VibratorManager and get defaultVibrator as the Vibrator instance. Otherwise, get the system service Vibrator as the Vibrator instance. S7.4, fixed vibration duration; S7.
5. Vibration is completed and the warning ends.
Citation Information
Patent Citations
Method and device for providing performance alarm services
CN102118276A
Stranger call warning method and device and intelligent mobile terminal
CN102761842A
System and method for preventing phone fraud, mobile terminal and cloud terminal analysis server
CN103458412A
WLAN wireless intrusion alarm aggregation method
CN104009870A
Network telecommunication fraud prevention system
CN107342987A