Telephone number screening method, device and storage medium

Abstract

The present application discloses a method, device, and storage medium for screening telephone numbers, relating to the field of communication technology. The method comprises: obtaining device information corresponding to each first telephone number among a plurality of first telephone numbers; determining a second telephone number based on the device information corresponding to the plurality of first telephone numbers, wherein the second telephone number is a telephone number among the plurality of first telephone numbers that has a first change behavior; determining a first electronic device among the electronic devices used by the second telephone number, wherein the first electronic device is an electronic device that has been used by the plurality of second telephone numbers within the same time period and under the same network device; and if the first electronic device meets a first preset condition, screening a plurality of third telephone numbers that have been used by the target electronic device to obtain one or more fourth telephone numbers, wherein the fourth telephone number is a telephone number that has registration information and has no abnormal behavior.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, device and storage medium for screening telephone numbers. Background Art

[0002] With the widespread adoption and continued development of portable mobile devices like smartphones, users can now make phone calls through any device with telecommunications capabilities. While these users enjoy fast and convenient phone services, they are also facing an increasing number of scam calls, which are disrupting users' daily lives and, if successful, can seriously harm their vital interests.

[0003] Current anti-fraud technology can only detect and shut down fraudulent numbers. However, since fraudsters often use numbers that aren't registered with their real names, carriers can only blacklist the owners of detected numbers, making it difficult to identify the actual fraudsters. This only serves as a deterrent. Therefore, how to screen fraudulent calls, identify the real fraudsters' phone numbers, and ultimately identify them has become a pressing technical challenge for relevant departments. Summary of the Invention

[0004] The present application provides a telephone number screening method, device and storage medium for accurately screening out the daily telephone numbers used by fraudsters, thereby determining the personal information of the fraudsters.

[0005] To achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, a method for screening a telephone number is provided, the method comprising: obtaining device information corresponding to each of a plurality of first telephone numbers, the device information of the plurality of first telephone numbers being the same as the device information of a target telephone number; the target telephone number being a telephone number exhibiting abnormal behavior;

[0007] Determining a second telephone number based on device information corresponding to the plurality of first telephone numbers, where the second telephone number is a telephone number among the plurality of first telephone numbers that has a first change behavior, wherein the first change behavior is an act of changing the electronic device used at a preset time, and the telephone number has not used the changed electronic device before the preset time;

[0008] Determine a first electronic device among the electronic devices used by the second telephone number, where the first electronic device is an electronic device that has been used by multiple second telephone numbers in the same time period and on the same network device;

[0009] If the first electronic device meets the first preset condition, multiple third telephone numbers used by the target electronic device are screened to obtain one or more fourth telephone numbers, where the fourth telephone number is a telephone number with registration information and no abnormal behavior.

[0010] In one possible implementation, the above-mentioned "determining the target electronic device among the electronic devices used by the second phone number" includes: determining the time information and device information used by the second phone number based on the call records of the second phone number before a preset time; and determining the target electronic device based on the time information and device information used by the second phone number.

[0011] In one possible implementation, the above-mentioned "screening multiple third telephone numbers that have been used in the target electronic device to obtain one or more fourth telephone numbers" includes: screening multiple third telephone numbers based on the communication behavior of each third telephone number in the multiple third telephone numbers, and determining a fifth telephone number in the multiple third telephone numbers that meets the second preset condition; the second preset condition is used to determine that the telephone number is abnormal; screening the telephone numbers other than the fifth telephone number in the multiple third telephone numbers to obtain one or more fourth telephone numbers, the communication information includes the number of times the communication service is used and / or the communication service, the number of times the communication service of the fourth telephone number is used is greater than the first threshold and / or the communication service usage time is greater than and / or greater than the second threshold.

[0012] In one possible implementation, the second preset condition includes: the telephone number has power on / off signaling during the use of the target electronic device, the telephone number has abnormal communication behavior after making a call using the target electronic device, and the telephone number performs one or more of the first communication behaviors when using the target electronic device for the first time, wherein the abnormal communication behavior includes one or more of the absence of call behavior within a preset time period, changing the electronic device used, and changing the network device used, and the first communication behavior includes one or more of dialing a service type number, the number of communications being less than a first preset number, and the communication duration being less than the first preset duration.

[0013] In one possible implementation, the method further includes: screening the fifth telephone number based on the communication information of the fifth telephone number, and determining the telephone number among the fifth numbers that meets the third preset condition, the third preset condition including one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within a preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0014] In a possible implementation, the first electronic device meeting the first preset condition includes: the number of phone numbers meeting the second preset condition among the multiple phone numbers of the first electronic device is greater than a threshold.

[0015] In a possible implementation, the method further includes: for each of the one or more fourth telephone numbers, determining a registered person associated with the fourth telephone number and address information of the registered person based on registration information of the fourth telephone number.

[0016] In a second aspect, a telephone number screening device is provided. This device is implemented in a chip or system-on-chip within the telephone number screening device. It can also be a functional module within the telephone number screening device for implementing the method of the first aspect or any possible design of the first aspect. This communication device can implement the functions performed by the telephone number screening device in the aforementioned aspects or possible designs. These functions can be implemented by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the aforementioned functions. For example, the device includes an acquisition unit, a determination unit, and a processing unit.

[0017] an acquiring unit, configured to acquire device information corresponding to each of a plurality of first telephone numbers, wherein the device information of the plurality of first telephone numbers is the same as the device information of a target telephone number; the target telephone number being the telephone number with abnormal behavior;

[0018] a determining unit, configured to determine a second telephone number based on device information corresponding to the plurality of first telephone numbers, the second telephone number being a telephone number among the plurality of first telephone numbers that has a first change behavior, wherein the first change behavior is an act of changing an electronic device used at a preset time, and the telephone number has not used the changed electronic device before the preset time;

[0019] The determining unit is further configured to determine a first electronic device among the electronic devices used by the second telephone number, where the first electronic device is an electronic device that has been used by multiple second telephone numbers in the same time period and on the same network device;

[0020] The processing unit is configured to screen multiple third telephone numbers that have been used by the target electronic device to obtain one or more fourth telephone numbers if the first electronic device meets the first preset condition. The fourth telephone number is a telephone number with registration information and no abnormal behavior.

[0021] In one possible implementation, the determining unit is specifically configured to: determine time information and device information used by the second phone number based on call records of the second phone number before a preset time; and determine a target electronic device based on the time information and device information used by the second phone number.

[0022] In one possible implementation, the processing unit is specifically used to: screen the multiple third telephone numbers based on the communication behavior of each third telephone number in the multiple third telephone numbers, and determine a fifth telephone number in the multiple third telephone numbers that meets the second preset condition; the second preset condition is used to determine that the telephone number is abnormal; screen the telephone numbers other than the fifth telephone number in the multiple third telephone numbers to obtain one or more fourth telephone numbers, the communication information includes the number of times the communication service is used and / or the communication service, the number of times the communication service is used of the fourth telephone number is greater than the first threshold and / or the communication service usage time is greater than and / or greater than the second threshold.

[0023] In one possible implementation, the processing unit is also used to: screen the fifth telephone number based on the communication information of the fifth telephone number, and determine the telephone number in the fifth number that meets the third preset condition, the third preset condition including one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within the preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0024] In one possible implementation, the processing unit is specifically used to: screen the fifth telephone number based on the communication information of the fifth telephone number, and determine the telephone number among the fifth numbers that meets the third preset condition, the third preset condition including one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within a preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0025] In a possible implementation, the first electronic device meeting the first preset condition includes: the number of phone numbers meeting the second preset condition among the multiple phone numbers of the first electronic device is greater than a threshold.

[0026] In a possible implementation, the determining unit is further configured to: for each of the one or more fourth telephone numbers, determine a registered person associated with the fourth telephone number and address information of the registered person based on registration information of the fourth telephone number.

[0027] In a third aspect, a telephone number screening device is provided. This device may be a telephone number screening device or a chip or system-on-chip within a telephone number screening device. This device can implement the functions performed by the telephone number screening device in the aforementioned aspects or possible designs. The functions can be implemented in hardware. For example, in one possible design, the device may include a processor and a communication interface. The processor can be used to support the telephone number screening device in implementing the functions described in the aforementioned first aspect or any possible design of the first aspect.

[0028] In another possible design, the telephone number screening device may further include a memory for storing computer-executable instructions and data necessary for the telephone number screening device. When the device is running, the processor executes the computer-executable instructions stored in the memory to cause the device to perform the telephone number screening method of the first aspect or any possible design of the first aspect.

[0029] In a fourth aspect, a computer-readable storage medium is provided, which may be a readable non-volatile storage medium. The computer-readable storage medium stores computer instructions or programs, which, when executed on a computer, enables the computer to execute the telephone number screening method of the first aspect or any possible design of the above aspects.

[0030] In a fifth aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the method for screening telephone numbers according to the first aspect or any possible design of the above aspects.

[0031] In a sixth aspect, a telephone number screening device is provided. The device may be a telephone number screening device or a chip or system-on-chip within the telephone number screening device. The device includes one or more processors and one or more memories. The one or more memories are coupled to the one or more processors and are configured to store computer program code. The computer program code includes computer instructions. When the one or more processors execute the computer instructions, the telephone number screening device performs the telephone number screening method described in the first aspect or any possible embodiment of the first aspect.

[0032] In a seventh aspect, a chip system is provided, comprising a processor and a communication interface. The chip system can be used to implement the functions performed by the telephone number screening device described in the first aspect or any possible design of the first aspect. In one possible design, the chip system also includes a memory for storing program instructions and / or data. The chip system can be comprised solely of a chip or include a chip and other discrete components, without limitation. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 A schematic diagram of the structure of a telephone number screening system provided in an embodiment of the present application;

[0034] Figure 2 A schematic diagram of the structure of a telephone number screening device 200 provided in an embodiment of the present application;

[0035] Figure 3 A flowchart of a method for screening telephone numbers provided in an embodiment of the present application;

[0036] Figure 4 A flowchart of another method for screening telephone numbers provided in an embodiment of the present application;

[0037] Figure 5 A flowchart of another method for screening telephone numbers provided in an embodiment of the present application;

[0038] Figure 6 This is a schematic structural diagram of a telephone number screening device 60 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] In order to enable ordinary people in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings.

[0040] It should be noted that the terms "first," "second," and the like in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or precedence. It should be understood that the numbers used in this manner are interchangeable where appropriate so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the appended claims.

[0041] It will also be understood that the term “comprising” indicates the presence of described features, integers, steps, operations, elements and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements and / or components.

[0042] Anti-fraud systems typically use fraud models to identify fraudulent calls. The fraud model design process primarily includes preparing data, selecting feature values, reducing dimensionality, selecting an appropriate model, adjusting model parameters, training the model using full data, exporting the model to a production environment, and monitoring subsequent execution. The following explains each step in this process.

[0043] 1. Prepare data: Create a large amount of raw data corresponding to the eigenvalues, collect and convert it into a format that is easy to analyze.

[0044] 2. Selecting eigenvalues: When there are hundreds or thousands of eigenvalues, some are irrelevant or duplicated, which only interferes with the model and seriously affects training efficiency. This requires data cleaning, which should be combined with an understanding of the business.

[0045] 3. Dimensionality reduction: When eigenvalues ​​are correlated, principal component analysis (PCA) and deep autodecoders can be used to transform the data into a more independent set.

[0046] 4. Select the appropriate model: Based on the cleaned data and expected output, determine whether the problem is regression, classification, or aggregation. This helps determine the appropriate algorithm. Different models are more suitable for specific data, so you can select the most appropriate algorithm through some experiments.

[0047] 5. Adjust model parameters: Different models require different parameters to be adjusted. The parameter settings determine whether the model output results are accurate.

[0048] 6. Use the full amount of data to train the model: After selecting the model and adjusting the parameters through the data subset of the early training test set, use the full amount of data to train the model to achieve better fitness.

[0049] 7. Monitor subsequent execution: Monitor the output of subsequent models to see if there is any deviation in the results, or if there is a significant change in the distribution of the original data provided.

[0050] However, the above-mentioned fraud model intelligence can only identify fraudulent calls and shut down the fraudulent numbers, but it is difficult to find the fraudsters.

[0051] In view of this, the present application proposes a telephone number screening method, which identifies fraudulent calls and finds out the multiple terminal devices used by the fraudulent calls, and screens the multiple telephone numbers used by the terminal devices to obtain the daily life numbers commonly used by the fraudsters, and accurately locates the fraudsters based on their daily life numbers.

[0052] The following describes in detail the telephone number screening method, device and storage medium provided in the embodiments of the present application in conjunction with the accompanying drawings.

[0053] For example, Figure 1 This is a schematic diagram of the structure of a telephone number screening system provided in an embodiment of the present application. The system can be connected to electronic devices, network devices, and servers. The electronic devices, network devices, and servers are communicatively connected.

[0054] Among them, the electronic device may include a first electronic device and a target electronic device. The electronic device is used to implement communication functions and Internet access functions. Different electronic devices have different international mobile equipment identities (IMEIs). Specifically, the electronic device can be a mobile phone, a smart phone watch, a tablet computer or a computer with wireless transceiver functions, and can also be a virtual reality (VR) device, an augmented reality (AR) device, a wireless terminal in industrial control, a wireless terminal in unmanned driving, a wireless terminal in telemedicine, a wireless terminal in smart grids, a wireless terminal in smart cities, a smart home, a vehicle-mounted terminal, etc.

[0055] Network devices are primarily used to implement functions such as resource scheduling, wireless resource management, and wireless access control for electronic devices. Different network devices correspond to different location area codes and cell identities (LAC-CIs). Specifically, a network device can be a small base station, a wireless access point, a transmission receive point (TRP), a transmission point (TP), or any other access node.

[0056] The server is used to obtain phone numbers from the big data system, and is also used to screen the obtained phone numbers and compare them with the registration information in the big data system. In some embodiments, the server can be a single server or a server cluster consisting of multiple servers. In some implementations, the server cluster can also be a distributed cluster. This application does not limit the specific implementation of the server.

[0057] It should be noted that the system described in the embodiment of the present application is intended to more clearly illustrate the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of the system and the emergence of other communication systems, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0058] In one example, an embodiment of the present application further provides a telephone number screening device (hereinafter referred to as a screening device for the sake of convenience of description), which can be used to execute the method of an embodiment of the present application.

[0059] For example, Figure 2 FIG. 2 is a schematic diagram of a screening device 200 according to an embodiment of the present application. The screening device 200 may include a processor 201 , a communication interface 202 , and a communication line 203 .

[0060] Furthermore, the screening device 200 may further include a memory 204 , wherein the processor 201 , the memory 204 and the communication interface 202 may be connected via a communication line 203 .

[0061] The processor 201 is a CPU, a general-purpose processor, a network processor (NP), a digital signal processor (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD), or any combination thereof. The processor 201 may also be other devices with processing functions, such as circuits, devices, or software modules, without limitation.

[0062] The communication interface 202 is used to communicate with other devices or other communication networks. The communication interface 202 can be a module, a circuit, a communication interface or any device capable of achieving communication.

[0063] The communication line 203 is used to transmit information between the various components included in the screening device 200.

[0064] The memory 204 is used to store instructions, where the instructions may be computer programs.

[0065] The memory 204 may be a read-only memory (ROM) or other type of static storage device that can store static information and / or instructions, or a random access memory (RAM) or other type of dynamic storage device that can store information and / or instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compact disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, etc., without limitation.

[0066] It should be noted that memory 204 can exist independently of processor 201 or be integrated with processor 201. Memory 204 can be used to store instructions, program code, or data. Memory 204 can be located within or outside of screening device 200, without limitation. Processor 201 is configured to execute instructions stored in memory 204 to implement the telephone number screening method provided in the following embodiments of this application.

[0067] In one example, the processor 201 may include one or more CPUs, for example, Figure 2 CPU0 and CPU1 in.

[0068] As an optional implementation, the screening device 200 includes multiple processors, for example, Figure 2 In addition to the processor 201, a processor 207 may also be included.

[0069] As an optional implementation, the screening apparatus 200 further includes an output device 205 and an input device 206. For example, the input device 206 is a keyboard, a mouse, a microphone, a joystick, or the like, and the output device 205 is a display screen, a speaker, or the like.

[0070] It should be noted that the screening device 200 can be a desktop computer, a portable computer, a network server, a mobile phone, a tablet computer, a wireless terminal, an embedded device, a chip system or a computer with a plurality of chips. Figure 2 In addition, Figure 2 The composition structure shown in the figure is not limited, except Figure 2 In addition to the components shown, it may also include Figure 2More or fewer components, or combinations of certain components, or different arrangements of components.

[0071] In the embodiment of the present application, the chip system can be composed of chips, or can include chips and other discrete devices.

[0072] In addition, the actions and terms involved in the various embodiments of this application can refer to each other without limitation. The message names or parameter names in the messages exchanged between the various devices in the embodiments of this application are only examples, and other names can also be used in specific implementations without limitation.

[0073] To facilitate the clear description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, the words "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art will understand that the words "first" and "second" do not limit the quantity or execution order, and the words "first" and "second" do not necessarily mean different.

[0074] It should be noted that, in this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described in this application as "exemplary" or "for example" should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.

[0075] In this application, "at least one" means one or more, and "more" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0076] The following combination Figure 1The telephone number screening system shown in the figure describes the telephone number screening method provided in the embodiment of the present application. Among them, the actions, terms, etc. involved in the various embodiments of the present application can refer to each other without limitation. The message name or parameter name in the message exchanged between the various devices in the embodiment of the present application is only an example, and other names can also be used in the specific implementation without limitation. The actions involved in the various embodiments of the present application are only an example, and other names can also be used in the specific implementation, such as: "included in" described in the embodiment of the present application can also be replaced by "carried on" or "carried in", etc.

[0077] like Figure 3 As shown, a method for screening telephone numbers provided in an embodiment of the present application includes:

[0078] S301: Obtain device information corresponding to each first telephone number among multiple first telephone numbers.

[0079] The device information of the first phone numbers is the same as the device information of the target phone number. The device information of the phone number may include Figure 1 The target electronic device and the first electronic device in the target phone number are: a phone number with abnormal behavior. For example, the target phone number may include a fraudulent phone number. The first phone number may be an associated phone number of the fraudulent phone number.

[0080] In one possible implementation, the server can obtain a history list of the target phone number from the telecommunications provider's network management system. For example, the history list of the target phone number may be as shown in Table 1. Based on the device information corresponding to the target phone number in the list, the server can filter out multiple first phone numbers that have the same device information as the target phone number, and then obtain the device information corresponding to each of the multiple first phone numbers. For example, the multiple first phone numbers may include the same phone number as the device IMEI 1 in Table 1.

[0081] Table 1

[0082] Date electronic devices Network equipment Monday IMEI1 LAC-CI1 Tuesday IMEI2 LAC-CI2 Wednesday IMEI3 LAC-CI3 Thursday IMEI4 LAC-CI4 Friday IMEI5 LAC-CI5 Saturday IMEI6 LAC-CI6 Sunday IMEI7 LAC-CI7

[0083] Among them, Table 1 represents a history table corresponding to a target phone number, Date represents the historical time corresponding to the target phone number, Electronic Device represents the device information used by the target phone number during the historical time, and Network Setting 2 represents the base station information used by the target phone number for communication.

[0084] It should be noted that the data in Table 1 are exemplary only and this application does not impose any specific limitations on the data in the table.

[0085] S302: Determine a second telephone number based on device information corresponding to the multiple first telephone numbers.

[0086] The second telephone number is a telephone number among the multiple first telephone numbers that has a first change behavior. For example, the second telephone number may be a number with at least one IMEI that has not appeared on that day within a historical time period. The first change behavior refers to the act of changing the electronic device used at a preset time, where the electronic device refers to an electronic device that has not been used with the changed telephone number before the preset time. For example, the first change behavior may include using different electronic devices with the same telephone number. The preset time may be the current day. The time before the preset time may be a historical time.

[0087] In one example, the history list of the second telephone number may be as shown in Table 2.

[0088] Table 2

[0089]

[0090] For example, the first change behavior can be represented by IMEI1 and IMEI2 in the electronic device in Table 2. The preset time can be Tuesday in Date in Table 2. If the phone number has not been used before the preset time, the electronic device after the change can be represented by IMEI1 in Table 2.

[0091] It should be noted that the data in Table 2 are exemplary only and this application does not impose any specific limitations on the data in the table.

[0092] In one possible implementation, after obtaining the first phone number and the device information corresponding to the first phone number according to S301, the server can delete the first phone number that does not have corresponding device information. Further, the server selects the first phone number that has been changed within a preset time, namely the second phone number.

[0093] S303: Determine a first electronic device among the electronic devices used by the second telephone number.

[0094] The first electronic device is an electronic device that has been used by multiple second phone numbers in the same time period and on the same network device. For example, in Table 2, different phone numbers all used IMEI 1 on Monday and were on the same network device LAC-CI1. The first electronic device is IMEI 1.

[0095] In one possible implementation, the server filters out electronic devices corresponding to the second telephone number that have been used in the same time period and under the same network device, and uses the device as the first electronic device.

[0096] S304: If the first electronic device meets the first preset condition, multiple third telephone numbers of the target electronic device are screened to obtain one or more fourth telephone numbers.

[0097] The first preset condition is that the number of phone numbers that meet the second preset condition among the multiple phone numbers using the first electronic device is greater than a threshold. The electronic device that meets the first preset condition is the target electronic device. For example, the target electronic device may be an electronic device used in fraudulent calls.

[0098] The second preset condition includes one or more of the following: the phone number has power on / off signaling while using the target electronic device, the phone number has abnormal communication behavior after making a call using the target electronic device, or the phone number performs the first communication behavior when using the target electronic device for the first time. The abnormal communication behavior includes one or more of the following: no call behavior within a preset time period, a change in the electronic device used, or a change in the network device used; the first communication behavior includes one or more of dialing a service type number, the number of communications being less than a first preset number, and the communication duration being less than a first preset duration.

[0099] The fourth phone number's communication service usage count exceeds a first threshold and / or its communication service usage duration exceeds and / or exceeds a second threshold. The fourth phone number has registration information and exhibits no abnormal behavior. The registrant of the fourth phone number is the same as or related to the registrant of the target phone number. For example, the fourth phone number may be a personal phone number used by the fraudster.

[0100] In one possible implementation, the server identifies a first electronic device that meets a first preset condition as a target electronic device. The server obtains a phone number of a user who has used the first electronic device from a telecommunications operator's network management system and uses the obtained phone number as the third phone number. The server then filters the third phone number to obtain a fourth phone number.

[0101] In one example, the server screens the third phone number to obtain the fourth phone number screening conditions, which may include: the number of calls made by the third number is greater than a first threshold, for example, the threshold may be 20 times; the duration of a call made by the third number is greater than a second threshold, for example, the second threshold may be 5 minutes; the ratio of the third number's dialing records to its answering records is similar; and the third number frequently uses communication services, for example, video applications (APPs), communication APPs, and food ordering APPs.

[0102] based on Figure 3According to the technical solution, the embodiment of the present application obtains the device information of the first phone number to determine multiple second numbers. The target electronic device is then determined based on the electronic device used by the second number, and finally the fourth phone number is determined. Compared with simply identifying fraudulent numbers and shutting them down, this solution can truly identify the fraudsters using fraudulent numbers, which can better detect and further deal with fraudsters.

[0103] In some embodiments, such as Figure 4 As shown, in S304, a plurality of third telephone numbers that have been used by the target electronic device are screened, including S401 to S402.

[0104] S401: Determine a fifth telephone number among a plurality of third telephone numbers that meets a second preset condition.

[0105] For example, the fifth telephone number may be a telephone number used by fraudsters.

[0106] In one example, the server screens the third phone number and uses the third phone number as the fifth phone number if the third phone number meets the second preset condition. For example, the fifth phone number may be a service phone number such as dialing 114, or the fifth phone number may have been turned on and off multiple times, or the fifth phone number may not have been used for an extended period of time, or the fifth point number may have been located at a different base station multiple times.

[0107] S402: Determine a telephone number among the fifth numbers that meets a third preset condition.

[0108] Among them, the third preset condition includes that the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within the preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0109] In one example, the fifth phone number has fewer than a preset number of communications with the target electronic device within a preset time period, for example, the preset time period may be 8 days and the preset number of communications may be 10. The fifth phone number has changed electronic devices multiple times, for example, the number of changes is greater than or equal to 2. The fifth phone number has more than a third preset number of calls within a preset time period, for example, the preset time period may be 8 days and the third preset number of calls may be 10. The fifth phone number has a cumulative call duration greater than a preset duration within a preset time period, for example, the preset time period may be 8 days and the preset duration may be 200 minutes.

[0110] based on Figure 4According to the technical solution, the server screens the third telephone number to obtain the fifth telephone number and the telephone numbers in the fifth telephone number that meet the third preset condition. This solution can accurately classify all telephone numbers, and the screened fifth number can be used as an important basis for determining whether the number is fraudulent.

[0111] In some embodiments, such as Figure 5 As shown, after screening multiple third telephone numbers that have been used by the target electronic device to obtain one or more fourth telephone numbers, the method further includes S501.

[0112] S501: Determine the registrant of the fourth telephone number and the address information of the registrant based on the registration information of the fourth telephone number.

[0113] In one example, the server compares the registration information of the fourth number with the registration information in the big data system to obtain the registrant of the number and the registrant's address information. For example, the registration information may include the registrant's ID card, home address, and family relationships, thereby determining the registrant's movement trajectory.

[0114] based on Figure 5 The technical solution determines the registration information of the fourth number based on the fourth telephone number screened by the server, and then determines the location information of the fraudster, which can better identify the fraudster and quickly find the source of the fraud.

[0115] In the embodiment of the present application, the screening device can be divided into functional modules or functional units according to the above method examples. For example, each functional module or functional unit can be divided according to each function, or two or more functions can be integrated into one processing module. The above-mentioned integrated module can be implemented in the form of hardware or in the form of software functional modules or functional units. Among them, the division of modules or units in the embodiment of the present application is schematic and is only a logical function division. In actual implementation, there may be other division methods.

[0116] In the case of dividing each functional module into corresponding functional modules, Figure 6 A schematic structural diagram of a screening device 60 is shown, which can be used to perform the functions involved in the above embodiments. Figure 6 The screening device 60 shown may include: an acquisition unit 601 , a determination unit 602 and a processing unit 603 .

[0117] An acquiring unit 601 is configured to acquire device information corresponding to each of a plurality of first phone numbers, where the device information of the plurality of first phone numbers is the same as the device information of a target phone number; the target phone number is the phone number with abnormal behavior;

[0118] Determining unit 602, configured to determine a second telephone number based on device information corresponding to the plurality of first telephone numbers, where the second telephone number is a telephone number among the plurality of first telephone numbers that has a first change behavior, wherein the first change behavior is an act of changing an electronic device used at a preset time, and the telephone number has not used the changed electronic device before the preset time;

[0119] The determining unit 602 is further configured to determine a first electronic device among the electronic devices used by the second telephone number, where the first electronic device is an electronic device that has been used by multiple second telephone numbers in the same time period and on the same network device;

[0120] The processing unit 603 is configured to screen multiple third telephone numbers used by the target electronic device to obtain one or more fourth telephone numbers if the first electronic device meets the first preset condition. The fourth telephone number is a telephone number with registration information and no abnormal behavior.

[0121] In one possible implementation, the determining unit 602 is specifically configured to: determine the time information and device information used by the second phone number based on the call records of the second phone number before a preset time; and determine the target electronic device based on the time information and device information used by the second phone number.

[0122] In one possible implementation, the processing unit 603 is specifically used to: screen the multiple third telephone numbers based on the communication behavior of each third telephone number in the multiple third telephone numbers, and determine a fifth telephone number in the multiple third telephone numbers that meets the second preset condition; the second preset condition is used to determine that the telephone number is abnormal; screen the telephone numbers other than the fifth telephone number in the multiple third telephone numbers to obtain one or more fourth telephone numbers, the communication information includes the number of times the communication service is used and / or the communication service, the number of times the communication service is used of the fourth telephone number is greater than the first threshold and / or the communication service usage time is greater than and / or greater than the second threshold.

[0123] In one possible implementation, the processing unit 603 is also used to: screen the fifth telephone number based on the communication information of the fifth telephone number, and determine the telephone number in the fifth number that meets the third preset condition, the third preset condition including one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within the preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0124] In one possible implementation, the processing unit 603 is specifically used to: screen the fifth telephone number based on the communication information of the fifth telephone number, and determine the telephone number in the fifth number that meets the third preset condition, the third preset condition including one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within the preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

[0125] In a possible implementation, the first electronic device meeting the first preset condition includes: the number of phone numbers meeting the second preset condition among the multiple phone numbers of the first electronic device is greater than a threshold.

[0126] In a possible implementation, the determining unit 602 is further configured to: for each of the one or more fourth telephone numbers, determine the registered person and the address information of the registered person according to the registration information of the fourth telephone number.

[0127] As another possible implementation, Figure 6 The processing unit 603 in the embodiment may be replaced by a processor, which may integrate the functions of the processing unit 603 .

[0128] Furthermore, when the processing unit 603 is replaced by a processor, the screening device 60 involved in the embodiment of the present application can be Figure 2 The screening device 200 is shown.

[0129] The embodiments of the present application also provide a computer-readable storage medium. All or part of the processes in the above-mentioned method embodiments can be completed by a computer program to instruct the relevant hardware, and the program can be stored in the above-mentioned computer-readable storage medium. When the program is executed, it may include the processes of the above-mentioned method embodiments. The computer-readable storage medium can be an internal storage unit of the communication device (including the data sending end and / or the data receiving end) of any of the above-mentioned embodiments, such as the hard disk or memory of the communication device. The above-mentioned computer-readable storage medium can also be an external storage device of the above-mentioned terminal device, such as a plug-in hard disk equipped on the above-mentioned terminal device, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. Further, the above-mentioned computer-readable storage medium can also include both the internal storage unit of the above-mentioned communication device and an external storage device. The above-mentioned computer-readable storage medium is used to store the above-mentioned computer program and other programs and data required by the above-mentioned communication device. The above-mentioned computer-readable storage medium can also be used to temporarily store data that has been output or is to be output.

[0130] It should be noted that the terms "first" and "second" in the specification, claims, and drawings of this application are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products, or devices.

[0131] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0132] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the modules or units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0133] The units described as separate components may or may not be physically separate, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple places. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0134] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0135] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a device (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.

[0136] The above is only a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or replacements within the technical scope disclosed in this application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

Claims

1. A method for screening telephone numbers, characterized in that: The method further comprises: Obtaining device information corresponding to each of a plurality of first phone numbers, where the device information of the plurality of first phone numbers is the same as the device information of a target phone number; the target phone number is the phone number with abnormal behavior; Determining a second telephone number based on device information corresponding to the multiple first telephone numbers, where the second telephone number is a telephone number among the multiple first telephone numbers that has a first change behavior, wherein the first change behavior is an act of changing the electronic device used at a preset time, and the telephone number has not used the changed electronic device before the preset time; Determine a first electronic device among the electronic devices used by the second telephone number, where the first electronic device is an electronic device that has been used by multiple second telephone numbers in the same time period and on the same network device; If the number of phone numbers that meet the second preset condition using multiple phone numbers of the first electronic device is greater than a threshold, it is determined that the first electronic device meets the first preset condition, and the first electronic device is determined as the target electronic device; the second preset condition includes: the phone number has power on / off signaling during the use of the target electronic device, the phone number has abnormal communication behavior after making a call using the target electronic device, and the phone number performs the first communication behavior when using the target electronic device for the first time, wherein the abnormal communication behavior includes one or more of the absence of call behavior within a preset time period, changing the electronic device used, and changing the network device used, and the first communication behavior includes one or more of dialing a service type number, the number of communications being less than a first preset number, and the communication duration being less than the first preset duration; A plurality of third telephone numbers that have been used with the target electronic device are screened to obtain one or more fourth telephone numbers, where the fourth telephone numbers are telephone numbers that have registration information and do not have abnormal behavior.

2. The method according to claim 1, characterized in that Determining a target electronic device among the electronic devices used by the second telephone number includes: Determining time information and device information used by the second telephone number based on call records of the second telephone number before the preset time; The target electronic device is determined according to the time information and device information of use of the second telephone number.

3. The method according to claim 1 or 2, characterized in that The step of screening a plurality of third telephone numbers that have been used with the target electronic device to obtain one or more fourth telephone numbers includes: screening the plurality of third telephone numbers based on the communication behavior of each third telephone number in the plurality of third telephone numbers to determine a fifth telephone number in the plurality of third telephone numbers that satisfies a second preset condition; the second preset condition being used to determine that the telephone number is abnormal; The telephone numbers other than the fifth telephone number among the multiple third telephone numbers are screened to obtain the one or more fourth telephone numbers, the communication behavior includes the number of times the communication service is used and / or the communication service, the number of times the communication service is used of the fourth telephone number is greater than the first threshold and / or the duration of the communication service usage is greater than and / or greater than the second threshold.

4. The method according to claim 3, characterized in that The method further comprises: Based on the communication information of the fifth telephone number, the fifth telephone number is screened to determine the telephone number among the fifth telephone numbers that meets the third preset condition, and the third preset condition includes one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within a preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

5. The method according to claim 1 or 2, characterized in that The method further comprises: For each of the one or more fourth telephone numbers, a registered person associated with the fourth telephone number and address information of the registered person are determined according to the registration information of the fourth telephone number.

6. A telephone number screening device, characterized in that: The device comprises: an acquiring unit, configured to acquire device information corresponding to each of a plurality of first telephone numbers, wherein the device information of the plurality of first telephone numbers is the same as the device information of a target telephone number; the target telephone number being the telephone number with abnormal behavior; a determining unit, configured to determine a second telephone number based on device information corresponding to the plurality of first telephone numbers, the second telephone number being a telephone number among the plurality of first telephone numbers that has a first change behavior, wherein the first change behavior is an act of changing an electronic device used at a preset time, and the telephone number has not used the changed electronic device before the preset time; The determining unit is further configured to determine a first electronic device among the electronic devices used by the second telephone number, where the first electronic device is an electronic device that has been used by multiple second telephone numbers in the same time period and on the same network device; a processing unit, configured to determine that the first electronic device satisfies the first preset condition and determine the first electronic device as a target electronic device if the number of phone numbers that meet the second preset condition using multiple phone numbers of the first electronic device is greater than a threshold; the second preset condition includes one or more of: the phone number has power on / off signaling during use of the target electronic device, the phone number has abnormal communication behavior after making a call using the target electronic device, and the phone number performs a first communication behavior when using the target electronic device for the first time, wherein the abnormal communication behavior includes one or more of the absence of a call within a preset time period, a change of the electronic device used, and a change of the network device used, and the first communication behavior includes one or more of dialing a service type number, the number of communications being less than a first preset number, and the communication duration being less than the first preset duration; The processing unit is further configured to screen multiple third telephone numbers that have been used with the target electronic device to obtain one or more fourth telephone numbers, where the fourth telephone numbers are telephone numbers that have registration information and no abnormal behavior.

7. The device according to claim 6, characterized in that The determining unit is specifically configured to: Determining time information and device information used by the second telephone number based on call records of the second telephone number before the preset time; The target electronic device is determined according to the time information and device information of the use of the second telephone number.

8. The device according to claim 6 or 7, characterized in that The processing unit is specifically configured to: screening the plurality of third telephone numbers according to the communication behavior of each third telephone number in the plurality of third telephone numbers, and determining a fifth telephone number in the plurality of third telephone numbers that meets a second preset condition; The second preset condition is used to determine that the telephone number is abnormal; The telephone numbers other than the fifth telephone number among the multiple third telephone numbers are screened to obtain the one or more fourth telephone numbers, the communication behavior includes the number of times the communication service is used and / or the communication service, the number of times the communication service is used of the fourth telephone number is greater than the first threshold and / or the duration of the communication service usage is greater than and / or greater than the second threshold.

9. The device according to claim 8, characterized in that The processing unit is further configured to: Based on the communication information of the fifth telephone number, the fifth telephone number is screened to determine the telephone number among the fifth telephone numbers that meets the third preset condition, and the third preset condition includes one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within a preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

10. The device according to claim 8, characterized in that The processing unit is specifically configured to: Based on the communication information of the fifth telephone number, the fifth telephone number is screened to determine the telephone number among the fifth telephone numbers that meets the third preset condition, and the third preset condition includes one or more of the following: the number of communications using the target electronic device is less than the second preset number, there is an act of changing the electronic device after using the target electronic device, the number of calls within a preset time period is greater than the third preset number, and the cumulative call duration within the preset time period is greater than the preset duration.

11. The device according to claim 6 or 7, characterized in that The determining unit is further configured to: For each of the one or more fourth telephone numbers, a registered person associated with the fourth telephone number and address information of the registered person are determined according to the registration information of the fourth telephone number.

12. A computer-readable storage medium, characterized in that The readable storage medium stores instructions, and when the instructions are executed, the method according to any one of claims 1 to 5 is implemented.

13. A telephone number screening device, characterized in that: include: Processor, memory and communication interface; wherein the communication interface is used for the communication device and other equipment; The memory is used to store one or more programs, which include computer-executable instructions. When the device is running, the processor executes the computer-executable instructions stored in the memory to enable the device to perform the method according to any one of claims 1 to 5.

Images