Method and system for preventing and treating fraud by using intermediate number, electronic equipment, storage medium and application
By real-time monitoring and intercepting call forwarding signals on the called side on the telecommunications call platform, the problem of difficulty in preventing middle-number fraud has been solved, and effective interception and prevention of fraud using middle-numbers has been achieved, protecting the legitimate rights and interests of users and enterprises.
Patent Information
- Application Number
- CN202510980978.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-16
- Publication Date
- 2025-09-30
AI Technical Summary
Existing technologies make it difficult to effectively prevent fraud using intermediary numbers, especially on telecommunications call platforms. When fraudsters establish a call forwarding relationship with the called party through an intermediary number, it is difficult for victims to identify the real calling number, making it difficult to track and confirm their identity.
Monitor and intercept call forwarding signals from the called party in real time on the telecommunications call platform. By querying the risk number pool, modifying the INVITE request signaling, displaying a virtual intermediate number, and extracting the call forwarding number and storing it in the risk pool when call forwarding behavior is detected, the risk warning tone is played to the calling party and the call is hung up.
It has achieved real-time prevention of fraud using intermediary numbers, effectively intercepted more than 300 million calls through the voice cloud platform, prevented them from happening, eliminated the occurrence of such cases, and protected the legitimate rights and interests of users and enterprises.
Smart Images
Figure CN120729985A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of voice call communications, and in particular to a method, system, electronic device, storage medium and application for preventing and controlling fraud using intermediary numbers. Background Art
[0002] As internet e-commerce platforms like Meituan, Didi, and Pinduoduo establish close connections between merchants and customers, they rely on intermediary numbers to protect the privacy of both parties and safeguard their legitimate rights. However, this legitimate business characteristic has been exploited by fraudsters. First, the fraudster impersonates the e-commerce platform and enters into a fraudulent transaction order. Then, through a telecommunications platform, they "legally" establish a binding relationship between the caller, the intermediary number, and the called party—known as the AXB model. Both A and B numbers are held by the criminals. Simultaneously, the fraudster activates the telecommunications call forwarding service on the called party (number B), forwarding the call to the real victim's number.
[0003] At this point, a complete call link has been established. Figure 1 As shown, the caller's number goes from the middle number to the forwarding number to the forwarded number. Once the call is established, the victim sees the legitimate middle number as the incoming caller, not the forwarding number. When the victim actually reports the case to the police or files a complaint, the incorrect number is used, making it difficult for the scammer to track and verify their identity. Summary of the Invention
[0004] Purpose of the invention: To propose a method, system, electronic device, storage medium and application for preventing and controlling fraud using intermediate numbers, by real-time monitoring and intelligent interception of response signaling when call forwarding is generated on the called side on the telecommunications call platform, and real-time extraction and addition of numbers that have generated call forwarding to the risk number pool, thereby preventing and controlling new fraud methods that use intermediate numbers and telecommunications call forwarding service functions that protect the privacy of merchants and customers on Internet e-commerce platforms.
[0005] In a first aspect of the present invention, a method for preventing and controlling fraud using an intermediary number is provided, comprising the following steps:
[0006] The call platform receives the caller's INVITE request for a number-changing outbound call, parses the called number in the INVITE request, and queries the risk number pool.
[0007] If the called number matches a number in the risk number pool, a risk warning tone is played to the calling party, and a SIP603 message is sent to the calling party to hang up the call;
[0008] If the called party's number does not match a number in the risk number pool, the calling platform modifies the PAI field in the INVITE request signaling to a virtual intermediate number, and then sends the INVITE request to the called party, displaying the virtual intermediate number.
[0009] The call platform receives a response message from the called party, and if the response message is a SIP181 message, analyzes whether the reason field in the history-info header field of the message contains 480 or 486;
[0010] If the reason field does not contain 480 or 486, the SIP181 message is forwarded and the call is connected normally;
[0011] If the reason field contains 480 or 486, the call forwarding service number is extracted and stored in the risk number pool, a risk prompt tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
[0012] In a further embodiment of the first aspect, the call platform is a voice cloud platform, and the number-changing outbound call is implemented based on VOIP SIP voice call communication technology.
[0013] In a further embodiment of the first aspect, the risk number pool is used to store historically detected call forwarding service numbers, where the call forwarding service numbers are numbers generated for call forwarding during fraud using intermediary numbers.
[0014] In a further embodiment of the first aspect, the call platform is based on a B2BUA architecture and realizes the externalization of the virtual intermediate number by modifying the PAI field in the INVITE request signaling.
[0015] In a further embodiment of the first aspect, the SIP181 message is a call forwarding notification message responded by the call forwarding platform when the called side network element detects that the called number is configured with a call forwarding function.
[0016] In a further embodiment of the first aspect, after the extracted call forwarding service number is stored in the risk number pool, the risk number pool is updated in real time and used for query matching of all subsequent number-changing outbound call requests.
[0017] In a further embodiment of the first aspect, the parsing of the SIP181 message is automatically completed by the soft switch module of the call platform, and the soft switch module has the ability to detect the call forwarding function in real time.
[0018] The method for preventing and controlling fraud using intermediate numbers disclosed in the first aspect above can be applied to the virtual number changing outbound call scenario in the VoLTE network. The call platform interacts with the IMS network to realize signaling transmission and processing of voice calls.
[0019] A second aspect of the present invention provides a system for preventing and controlling fraud using intermediary numbers. The system is connected to a call platform and includes:
[0020] The first execution module is configured to receive an INVITE request for an outbound call with a changed number from the calling party, parse the called party number in the INVITE request, and query a risk number pool;
[0021] The second execution module is configured to match the called party number with a number in the risk number pool. If the called party number matches the number in the risk number pool, the risk warning tone is played to the calling party, and a SIP603 message is sent to the calling party to hang up the call.
[0022] If the called party's number does not match a number in the risk number pool, the calling platform modifies the PAI field in the INVITE request signaling to a virtual intermediate number, and then sends the INVITE request to the called party, displaying the virtual intermediate number.
[0023] The third execution module is configured to read a response message from the called party, and if the response message is a SIP181 message, analyze whether the reason field in the history-info header field of the message contains 480 or 486;
[0024] If the reason field does not contain 480 or 486, the SIP181 message is forwarded and the call is connected normally;
[0025] If the reason field contains 480 or 486, the call forwarding service number is extracted and stored in the risk number pool, a risk prompt tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
[0026] The third aspect of the present invention proposes an electronic device, which includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements the method for preventing and controlling fraud using intermediate numbers as described in the first aspect.
[0027] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, in which at least one executable instruction is stored. When the executable instruction is executed on an electronic device, the electronic device executes the method for preventing and controlling fraud using intermediate numbers as described in the first aspect.
[0028] Compared with the prior art, the present invention has the following beneficial effects:
[0029] (1) When the Voice Cloud Calling Platform changes the number to make an outbound call, it determines the call forwarding based on the 480 or 486 response code carried in the reason field of the history-info header field of the SIP signaling 181 message responded by the called party, and performs real-time fraud blocking.
[0030] (2) When the called party generates a call forwarding request, the 181 message in response extracts the call forwarding service number and stores it in the risk number pool, providing information processing basis for subsequent call requests and preventing fraud crimes using intermediate numbers.
[0031] (3) After the present invention was launched on the telecommunications voice cloud platform, it played a very significant preventive role in the voice cloud call platform's average daily call volume of more than 300 million calls, achieving effective prevention in advance and real-time interception during the event, completely eliminating the occurrence of such cases and providing good protection for enterprises and users. BRIEF DESCRIPTION OF THE DRAWINGS
[0032] Figure 1 This is a call chain diagram for fraud on e-commerce platforms.
[0033] Figure 2 This is an example diagram of call forwarding signaling.
[0034] Figure 3 This is an example diagram of the request interaction when the calling platform changes the number to make an outbound call under normal circumstances.
[0035] Figure 4 This is an example diagram of the interaction request when the call platform changes the number for outbound calling during an abnormal situation.
[0036] Figure 5 A diagram describing the basic solution for preventing and controlling fraud using intermediary numbers.
[0037] Figure 6 A flowchart to prevent and control fraud using intermediary numbers. DETAILED DESCRIPTION
[0038] In the following description, numerous specific details are provided to provide a more thorough understanding of the present invention. However, it will be apparent to those skilled in the art that the present invention may be practiced without one or more of these details. In other instances, certain technical features well known in the art have not been described to avoid confusion with the present invention.
[0039] Before describing the embodiments, the professional terms that appear in the following text are first explained.
[0040] SIP (Session Initiation Protocol): Session Initiation Protocol.
[0041] SIP181 message: This is the "CallIsBeingForwarded" message, which is a temporary response of the 1xx information type. When the called party reroutes the call to another number, this message will be sent by the call forwarding platform to the calling platform. In the fraud scenario described in the document using the intermediate number, if the called number is configured with the call forwarding function, a 181 message will be generated. The calling platform will determine whether the call has been forwarded by parsing the reason field in the history-info header field of the message to see if it contains 480 or 486, and then determine whether there is a risk of fraud.
[0042] SIP 603 message, also known as "Decline," belongs to the 6xx global error category. It indicates that the called party's device was successfully contacted, but the called party does not want to answer the call. In the technical solution to combat fraud using intermediary numbers, if the call platform detects an anomaly (such as the called party's number matching a risky number pool, or parsing a 181 message reveals a call forwarding request), it will send a 603 response message to the calling party, disconnecting the call and preventing potential fraud.
[0043] VoLTE (Voice over LTE): A 4G IP transmission technology that allows high-definition audio and video calls on 4G networks.
[0044] B2BUA (Back-to-Back User Agent): is a SIP user agent architecture that receives user requests, reformats the requests, and sends them as new requests.
[0045] The Voice Cloud Platform is an intermediary number-changing outbound calling platform. When the platform sends a sipINVITE message for an outbound call, if the called party's number is configured for call forwarding, the reason field in the history-info header field of the SIP181 message responded by the called party will contain 480 or 486, indicating unconditional or busy call forwarding, indicating that call forwarding has occurred for this call. Figure 2 This is an example of call forwarding signaling.
[0046] Therefore, the voice call platform must be able to automatically detect call forwarding and immediately terminate the call in real time to prevent the actual called user from being defrauded. Furthermore, to further strengthen risk management, the forwarding number is extracted from the response signaling from the called party and added to the platform's risk number pool. The next time the platform receives a new call, it prioritizes the risk number pool. If the called number matches a number in the risk number pool, the call request is immediately terminated, preventing fraud before it occurs and maximizing user safety.
[0047] Figure 3 The figure shows an example of request interaction signaling when the call platform changes the number to make an outbound call under normal circumstances. Figure 4 The following is an example of requesting interactive signaling when the call platform changes the number and makes an outbound call under abnormal circumstances.
[0048] This application advocates that a voice call signaling processing platform, particularly a call number changing platform based on a B2BUA architecture, can prevent this new type of crime that exploits the called party's call forwarding function by real-time monitoring and intercepting the called party's response signaling message 181 when the voice call platform changes its number to an outbound call. To completely eliminate the exploitation of vulnerabilities in the privacy protection of e-commerce platforms and telecom call forwarding functions, this application proposes that the telecom call platform take the following measures to deal with the called party's response message:
[0049] 1) If the softswitch of the voice calling platform automatically detects that the 181 message responded by the called party contains a call forwarding identification code, it will immediately hang up the call to prevent the real called party from being defrauded;
[0050] 2) Extract the call forwarding number from the 181 signaling response from the called party and add it to the platform's risk number pool to prevent fraud before it happens.
[0051] Figure 5 This diagram illustrates the basic solution for preventing and controlling fraud using intermediate numbers disclosed in this embodiment. The solution is based on the fact that upon receiving a 181 message from the called party, the call number changing platform identifies the call forwarding service and immediately takes effective measures to intercept it. The forwarding number is then extracted and stored in a risk number pool to provide risk warnings and fraud prevention measures for subsequent calls. Furthermore, a risk alert tone is sent to the calling party upon the call hang-up request, informing them of the high-risk nature of the call.
[0052] The following describes an embodiment of a method for preventing and controlling fraud using intermediary numbers. This embodiment, based on VOIP (SIP) voice call communication technology, uses a B2BUA architecture to achieve real-time monitoring and interception of intermediary number fraud. The implementation steps are as follows:
[0053] 1. Construction of Risk Number Pool
[0054] The system pre-creates a risk number pool to store call forwarding service numbers that have been detected as fraudulent. This pool is updated in real time, enabling fast query and matching.
[0055] 2. Handling of outbound call request with number change
[0056] Scenario: Fraudsters create an AXB binding relationship (caller A → middle number X → called party B) on an e-commerce platform through fake orders and use middle number X to initiate fraudulent calls.
[0057] Processing flow:
[0058] The voice cloud platform receives the caller's INVITE request for number change and parses the called party's number (middle number X) in the request.
[0059] The system automatically queries the risk number pool to determine whether the middle number X has been marked as a risk number.
[0060] 3. Blocking risky numbers
[0061] If the middle number X matches the risk number pool, the system immediately plays a voice prompt to the caller: "The call you dialed is high-risk." At the same time, it sends a SIP603 response message to the caller, terminating the call process.
[0062] 4. Normal call processing
[0063] If the middle number X does not match the risk number pool, the system modifies the PAI field in the INVITE request signaling, sets the external number to the virtual middle number X, and then forwards it to the called party.
[0064] 5. Call forwarding service testing
[0065] If the called party has configured the call forwarding function, the call forwarding platform will respond with a SIP181 message ("CallIsBeingForwarded").
[0066] The voice cloud platform parses the history-info header field of the message and checks whether the reason field contains 480 (Temporarily Unavailable) or 486 (Busy Here).
[0067] 6. Abnormal call forwarding interception
[0068] If the reason field contains 480 or 486, the system determines that there is an abnormal call forwarding, which may be a fraudulent act.
[0069] The system extracts the call forwarding target number (such as the number actually controlled by the fraudster) and stores it in the risk number pool.
[0070] Play a risk warning tone to the calling party and send a SIP603 response message to hang up the call.
[0071] 7. Update of Risk Number Pool
[0072] Each time an abnormal call forwarding is detected, the newly discovered call forwarding number is immediately added to the risk number pool.
[0073] The risk number pool is synchronized to all voice cloud platform nodes in real time to ensure the consistency of subsequent interception.
[0074] In this embodiment, the system implements bidirectional signaling based on a B2BUA architecture, supporting PAI field modification and 181 message parsing. Parsing of SIP 181 messages is automatically performed by the softswitch module of the voice cloud platform. A risk warning tone is generated using TTS (Text-to-Speech) technology, stating, "The call you dial is high-risk."
[0075] A typical anti-fraud process is shown in Figure 6 :
[0076] 1. When the call platform receives an INVITE request from the calling party (e.g., the e-commerce platform), it parses the called party number in the INVITE request signaling and queries the risk number pool.
[0077] 2. If the resolved called number matches a number in the risk number pool, a risk warning tone "The number you dialed is high risk xxx" will be immediately broadcast to the calling party, and a SIP603 message will be sent to the calling party to hang up the call;
[0078] 3. If the resolved called number does not match a number in the risk number pool, it indicates that the called number is a normal number change call. The calling platform then modifies the PAI in the INVITE request signaling according to the number change relationship: xxx... (virtual middle number) and sends an INVITE request message to the called party, displaying the virtual middle number.
[0079] 4. After the called network element receives the INVITE request, if the called number has been configured with the call forwarding function, the call forwarding platform will respond with a SIP181 message. If the calling platform receives the 181 message, it will analyze the reason field in the history-info header field of the call forwarding response message to see if a 480 or 486 call forwarding request appears;
[0080] 5. If there is no call forwarding request in the SIP181 message in step 4, the response message is directly forwarded and the call is connected;
[0081] 6. If a call forwarding request is received in the SIP181 message in step 4, the forwarding service number is pre-determined and stored in the risk number pool to provide anti-fraud information for subsequent calls. After extracting the forwarding service number, a risk warning tone is played to the calling party: "The number you dialed is high-risk xxx" and the call is terminated.
[0082] This application has been applied to the China Telecom Voice Cloud Platform's middle number (virtual number) number-changing outbound call scenario, and has successfully intercepted and substantially prevented the number-changing outbound call scenarios initiated by Meituan, Pinduoduo and other e-commerce platforms, which use false check-ins on e-commerce platforms and telecommunications call forwarding services to commit fraud, completely eliminating the occurrence of such fraud cases.
[0083] The logic behind the methods disclosed in the above embodiments can be constructed into a system for preventing and controlling fraud using intermediary numbers. This system is connected to a call platform to automatically execute the methods for preventing and controlling fraud using intermediary numbers. The system consists of a first execution module, a second execution module, and a third execution module.
[0084] The first execution module is used to receive an INVITE request for an outbound call with a changed number from the calling side, parse the called side number in the INVITE request, and query a risk number pool.
[0085] The second execution module is used to match the called side number with the number in the risk number pool. If the called side number matches the number in the risk number pool, a risk warning tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
[0086] If the called party's number does not match a number in the risk number pool, the calling platform modifies the PAI field in the INVITE request signaling to a virtual intermediate number and sends an INVITE request to the called party, displaying the virtual intermediate number.
[0087] The third execution module is used to read the response message from the called side. If the response message is a SIP181 message, it parses the reason field in the history-info header field of the message to see whether it contains 480 or 486; if the reason field does not contain 480 or 486, the SIP181 message is forwarded and the call is connected normally; if the reason field contains 480 or 486, the call forwarding service number is extracted and stored in the risk number pool, a risk warning tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
[0088] The logic behind the methods disclosed in the above embodiments can be implemented in whole or in part through software, hardware, firmware, or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. A computer program product includes one or more computer instructions or computer programs.
[0089] When loading or executing a computer instruction or computer program on a computer, the process or function according to an embodiment of the present application is generated in whole or in part.The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable devices.Computer instructions can be stored in a computer-readable storage medium, or transmitted from a computer-readable storage medium to another computer-readable storage medium. For example, a computer instruction can be transmitted from a website, a computer, a server or a data center to another website, a computer, a server or a data center by a wired (e.g., infrared, wireless, microwave, etc.) mode.Computer-readable storage media can be any available medium that a computer can access or a data storage device such as a server or a data center containing one or more available media sets.Available media can be magnetic media (e.g., floppy disk, hard disk, tape), optical media (e.g., DVD) or semiconductor media.Semiconductor media can be a solid-state drive.
[0090] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as combinations of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts and / or block diagrams. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0091] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.
[0092] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.
[0093] While the present invention has been shown and described with reference to certain preferred embodiments, it is not to be construed as limiting the invention itself, and various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims.
Claims
1. A method for preventing and controlling fraud using an intermediary number, characterized in that: The steps include: The call platform receives the caller's INVITE request for a number-changing outbound call, parses the called number in the INVITE request, and queries the risk number pool. If the called number matches a number in the risk number pool, a risk warning tone is played to the calling party, and a SIP603 message is sent to the calling party to hang up the call; If the called party's number does not match a number in the risk number pool, the calling platform modifies the PAI field in the INVITE request signaling to a virtual intermediate number, and then sends the INVITE request to the called party, displaying the virtual intermediate number. The call platform receives a response message from the called party, and if the response message is a SIP181 message, analyzes whether the reason field in the history-info header field of the message contains 480 or 486; If the reason field does not contain 480 or 486, the SIP181 message is forwarded and the call is connected normally; If the reason field contains 480 or 486, the call forwarding service number is extracted and stored in the risk number pool, a risk prompt tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
2. A method for preventing and controlling fraud using an intermediary number according to claim 1, characterized in that: The calling platform is a voice cloud platform, and the number-changing outbound calling is implemented based on VOIP SIP voice calling communication technology; The call platform is based on the B2BUA architecture and realizes the externalization of the virtual intermediate number by modifying the PAI field in the INVITE request signaling.
3. A method for preventing and controlling fraud using an intermediary number according to claim 1, characterized in that: The risk number pool is used to store call forwarding service numbers detected in the history, and the call forwarding service numbers are numbers that generate call forwarding during the process of fraud using intermediary numbers.
4. A method for preventing and controlling fraud using intermediary numbers according to claim 1, characterized in that: The SIP181 message is a call forwarding notification message responded by the call forwarding platform when the called side network element detects that the called number is configured with the call forwarding function.
5. The method for preventing and controlling fraud using an intermediary number according to claim 1, characterized in that: After the extracted call forwarding service number is stored in the risk number pool, the risk number pool is updated in real time and used for query matching of all subsequent number-changing outbound call requests.
6. A method for preventing and controlling fraud using an intermediary number according to claim 1, characterized in that: The parsing of the SIP181 message is automatically completed by the soft switch module of the call platform, and the soft switch module has the ability to detect the call forwarding function in real time.
7. The method for preventing and controlling fraud using intermediate numbers as described in any one of claims 1 to 6 is applied to a virtual number-changing outbound call scenario in a VoLTE network, wherein the call platform interacts with the IMS network to realize signaling transmission and processing of voice calls.
8. A system for preventing and controlling fraud using intermediary numbers, which is connected to a call platform and is characterized by: The system includes: The first execution module is configured to receive an INVITE request for an outbound call with a changed number from the calling party, parse the called party number in the INVITE request, and query a risk number pool; The second execution module is configured to match the called party number with a number in the risk number pool. If the called party number matches the number in the risk number pool, the risk warning tone is played to the calling party, and a SIP603 message is sent to the calling party to hang up the call. If the called party's number does not match a number in the risk number pool, the calling platform modifies the PAI field in the INVITE request signaling to a virtual intermediate number, and then sends the INVITE request to the called party, displaying the virtual intermediate number. The third execution module is configured to read a response message from the called party, and if the response message is a SIP181 message, analyze whether the reason field in the history-info header field of the message contains 480 or 486; If the reason field does not contain 480 or 486, the SIP181 message is forwarded and the call is connected normally; If the reason field contains 480 or 486, the call forwarding service number is extracted and stored in the risk number pool, a risk prompt tone is played to the calling side, and a SIP603 message is sent to the calling side to hang up the call.
9. An electronic device, characterized in that: The electronic device includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements the method for preventing and controlling fraud using intermediate numbers as described in any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that The storage medium stores at least one executable instruction. When the executable instruction is executed on the electronic device, the electronic device executes the method for preventing and controlling fraud using intermediate numbers as described in any one of claims 1 to 7.