Anti-fraud method, device and equipment based on PON (Passive Optical Network), and storage medium

Abstract

The invention relates to the technical field of communication networks, and discloses an anti-fraud method, device and equipment based on a PON (Passive Optical Network) and a storage medium, which can be applied to Fiber To Room (Fiber To Room, FTTR), enterprise-level Fiber To Room-Bus (Fiber To Room-Broadband) and broadband fusion terminal products, and comprises the following steps: obtaining fraud data; the fraud data comprises a suspected fraud phone number and / or a suspected fraud website address; identifying whether a communication connection and / or network access established through the home gateway is related to the fraud data; and when the identification result is related, intercepting the communication connection and / or network access. The problem that voice communication and network access scenes cannot be covered at the same time in the prior art is solved.

Description

Technical Field

[0001] This invention relates to the field of communication network technology, and in particular to a method, apparatus, device, and storage medium for fraud prevention based on a PON network. Background Technology

[0002] FTTR home gateways provide a technology for optical networking within the home, enabling low-latency, high-speed network access. Elderly family members and children can use this technology to access network information and make and receive phone calls. With widespread network access, online and telephone scams are rampant. Elderly family members and children are less susceptible to these scams and are easily deceived, necessitating strengthened security measures at the home network level.

[0003] Existing technical solutions cannot simultaneously cover both voice calls and network access scenarios. Summary of the Invention

[0004] This invention provides a method, device, computer equipment, and storage medium for fraud prevention based on a PON network, in order to solve the problem that existing technologies cannot simultaneously cover voice call and network access scenarios.

[0005] Firstly, a fraud prevention method based on a PON network is provided, applied to a home gateway, including: Obtain fraud data, including suspected fraudulent phone numbers and / or suspected fraudulent website addresses; Identify whether the communication connection and / or network access established through the home gateway are related to the fraudulent data; When the identification result is relevant, the communication connection and / or network access are intercepted.

[0006] Optionally, obtaining fraud data includes: Establish a communication connection with the central data server to periodically or in real-time obtain updated fraud data from the central data server.

[0007] Optionally, identifying whether the communication connection and / or network access established through the home gateway is related to the fraudulent data includes: Extract target numbers for incoming and outgoing calls via the home gateway; The extracted target number is compared with the suspected fraudulent phone numbers in the fraud data to determine whether the target number is related to the fraud data.

[0008] Optionally, identifying whether the communication connection and / or network access established through the home gateway is related to the fraudulent data includes: Extract the target URLs accessed via the home gateway; The extracted target URL is compared with the suspected fraudulent website addresses in the fraud data to determine whether the target URL is related to the fraud data.

[0009] Optionally, intercepting the communication connection and / or network access when the identification result is relevant includes: When the identification result is relevant, the voice connection with the suspected fraudulent phone number is cut off and / or access requests to the suspected fraudulent website address are blocked, and a fraud alert is pushed to the user terminal.

[0010] Optionally, obtaining fraud data further includes: Receive fraudulent data uploaded by users' terminals.

[0011] Optionally, the anti-fraud method based on the PON network further includes: The intercepted communication connections and / or network accesses are recorded to generate an interception log; The interception logs are synchronized to the user terminal and uploaded to the central data server.

[0012] Secondly, a PON-based anti-fraud device is provided for use in home gateways, including: The acquisition module is used to acquire fraud data, which includes suspected fraudulent phone numbers and / or suspected fraudulent website addresses; An identification module is used to identify whether the communication connection and / or network access established through the home gateway is related to the fraudulent data; An interception module is used to intercept the communication connection and / or network access when the identification result is relevant.

[0013] Fifthly, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor executes the computer program to implement the steps of the above-described anti-fraud method based on a PON network.

[0014] In a sixth aspect, a computer-readable storage medium is provided, the computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the above-described anti-fraud method based on a PON network.

[0015] In the aforementioned anti-fraud method, device, computer equipment, and storage medium based on PON networks, fraud data is acquired, including suspected fraudulent phone numbers and / or suspected fraudulent website addresses; it is identified whether communication connections and / or network access established through the home gateway are related to the fraud data; and when the identification result is relevant, the communication connection and / or network access is blocked. This invention can be applied to Fiber to the Room (FTTR), Fiber to the Room-Business (FTTR-B), and broadband converged terminal products. In this invention, the anti-fraud logic for voice calls and network access is integrated into the core node of the home gateway, simultaneously addressing both scenarios and solving the problem in existing technologies that cannot simultaneously cover voice call and network access scenarios. Attached Figure Description

[0016] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 This is a flowchart illustrating a fraud prevention method based on a PON network in one embodiment of the present invention. Figure 2 This is a schematic diagram of a fraud prevention device based on a PON network in one embodiment of the present invention. Detailed Implementation

[0018] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention.

[0019] It should be understood that, when used in this specification and the appended claims, the term "comprising" indicates the presence of the described features, integrals, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0020] It should also be understood that the term "and / or" as used in this specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0021] As used in this specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," or "in response to determination." Similarly, the phrase "if determined" or "if matched to [described condition or event]" may be interpreted, depending on the context, as meaning "once determined," "in response to determination," "once matched to [described condition or event]," or "in response to matched to [described condition or event]."

[0022] Furthermore, in the description of this invention and the appended claims, the terms "first," "second," "third," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0023] References to "one embodiment" or "some embodiments" as described in this specification mean that one or more embodiments of the invention include a specific feature, structure, or characteristic described in connection with that embodiment. Therefore, the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in still other embodiments," etc., appearing in different parts of this specification do not necessarily refer to the same embodiment, but rather mean "one or more, but not all, embodiments," unless otherwise specifically emphasized. The terms "comprising," "including," "having," and variations thereof mean "including but not limited to," unless otherwise specifically emphasized.

[0024] It should be understood that the sequence number of each step in the following embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0025] To illustrate the technical solution of the present invention, specific embodiments are described below.

[0026] Please see Figure 1 As shown, Figure 1 A flowchart illustrating a PON-based anti-fraud method provided in this embodiment of the invention, applied to a home gateway, includes the following steps: S11: Obtain fraud data, which includes suspected fraudulent phone numbers and / or suspected fraudulent website addresses.

[0027] FTTR (Fiber to the Room) is a broadband access technology that extends fiber optic networks directly into a user's room. FTTR technology is primarily used in homes and offices, providing independent fiber optic connections to each room, enabling ultra-high-speed network transmission, meeting the needs of multiple devices accessing the internet at high speed simultaneously, and offering stable signals that are less susceptible to interference.

[0028] After fiber optic cable is installed in the room, landline phones, computers, smart devices, and other devices within the room all connect to the network through the home gateway. When the home gateway is equipped with anti-fraud features, it allows for unified maintenance and management of all devices within the room.

[0029] "Suspected fraudulent phone numbers" and "suspected fraudulent website addresses" are two core types of data in preventing home-based online fraud, corresponding to the two major fraud scenarios of voice communication and internet access, respectively.

[0030] Suspected fraudulent phone numbers refer to numbers marked as potentially used for telephone fraud (such as impersonating law enforcement, fake customer service, prize scams, etc.). These include landline numbers, mobile phone numbers, and VoIP virtual numbers. Their characteristics typically include high-frequency outbound calls, being reported by multiple people, and originating from areas with high rates of fraud (such as overseas).

[0031] Suspected fraudulent website addresses refer to URLs identified as potentially used for online fraud (such as phishing websites, fake trading platforms, malicious information dissemination, etc.). These include web page addresses, APP backend server addresses, etc. Their characteristics often include mimicking legitimate website domains, containing misleading content (such as "urgent notices" or "high returns"), and containing malicious code.

[0032] Home gateways typically acquire fraud data in the following ways: First, they can connect with official platforms to regularly obtain nationwide databases of fraudulent phone numbers (such as numbers involved in cases, high-frequency fraudulent numbers) and blacklists of phishing websites (such as fake financial and shopping websites that have been investigated). For example, they can synchronize the "list of numbers involved in fraud" in real time through API interfaces to ensure that the gateway blocks officially identified high-risk numbers as soon as possible. Alternatively, they can share user report data (such as call records marked as "fraud") and abnormal call behavior data (such as high-frequency calls from overseas numbers to home landlines) with operators; and cooperate with enterprises to obtain URLs of fraudulent websites identified by their security systems (such as counterfeit phishing links) and server addresses of fraudulent apps. Third, through the home gateway's accompanying app, users can manually mark suspected fraudulent call numbers and websites as "fraudulent," and the marking information is uploaded to the home gateway's local database in real time. For example, if an elderly person receives a call from an unknown number, their children can mark the number through the app, and the gateway will subsequently block any further calls from that number. Fourthly, the home gateway can also automatically analyze device interaction behavior to identify potential fraudulent data. For example, in voice scenarios, it can monitor high-frequency fraudulent keywords (such as "transfer," "verification code," and "court summons") appearing in landline or VoIP calls, and automatically mark suspected fraudulent numbers based on call duration (such as multiple calls within a short period with similar content). In network scenarios, it can analyze the characteristics of websites accessed by the device (such as domain names containing enticing words like "winning a prize" or "free giveaway," or pages containing fake login boxes), or detect communication between the device and known malicious IPs, and automatically mark the corresponding URLs as suspected fraudulent addresses. Since there are many methods for obtaining fraudulent data, all of them can be applied to this invention, and will not be elaborated on here.

[0033] S12: Identify whether the communication connection and / or network access established through the home gateway is related to the fraudulent data.

[0034] This step is the core judgment step in home gateway fraud prevention. Essentially, it involves real-time monitoring of all communication connections and / or network accesses (voice calls, data transmission, etc.) flowing through the home gateway within the home network, matching and verifying them with acquired fraud data (suspected fraudulent phone numbers, suspected fraudulent website addresses) to determine whether the communication connections and / or network accesses pose a fraud risk.

[0035] Communication connections primarily refer to voice calls (such as landline calls and VoIP calls) made through the home gateway, encompassing both inbound and outbound calls. The core verification object is the phone number involved in the call. For example, when a home user dials a number via a landline, the home gateway retrieves the number in real time and compares it with a locally stored "suspected fraudulent phone number database." If the number is found to have been repeatedly reported for "impersonating customer service to induce refunds," it is immediately entered into the database. The home gateway then determines that the outbound communication connection is related to fraudulent data. Similarly, if an overseas number calls into a home landline, the home gateway detects that the number is in the fraud database and immediately determines that the outbound communication connection is related to fraudulent data.

[0036] Network access refers to the act of home devices (computers, mobile phones, smart terminals, etc.) accessing the Internet through a home gateway. The core verification objects are the website domain name, IP address, or server address accessed. For example, if a home mobile phone accesses a website through the gateway, the gateway extracts the URL and compares it with the local "suspected fraudulent website database." If it finds that the address is highly similar to a known phishing website (difference by only one digit) and both involve tricking users into entering account passwords, the home gateway determines that the network access is related to fraudulent data. As another example, if a home user uses a tablet to access a website through the home gateway, and the website domain name is not marked as a suspected fraudulent website, and the gateway detects that its server IP is an officially registered IP, and the page content is from a legitimate search engine service (without fake login boxes, misleading links, or other fraudulent features), and this access behavior has no connection with known fraudulent data (such as phishing website URLs or malicious IPs), the home gateway determines that the network access is not related to fraudulent data.

[0037] S13: When the identification result is relevant, intercept the communication connection and / or network access.

[0038] When a home gateway detects that a communication connection and / or network access is related to fraudulent data, it triggers an "interception" action. Its core objective is to proactively block risky interactions and prevent users from suffering losses due to being misled by fraudulent information. The specific logic is as follows: based on the identified risk type (communication connection or network access), the corresponding interception module (such as a VoIP voice interception module or a website access interception module) is invoked to restrict the completion of the risky behavior.

[0039] Communication connection blocking primarily targets voice calls (landline calls, VoIP calls, etc.) made through the home gateway. Based on the call direction (incoming / outgoing) and risk level, the following blocking methods can be employed: First, directly disconnect the connection. If the call number is identified as a perfect match for fraudulent data, indicating a high risk level (such as a confirmed fraudulent number), the gateway immediately terminates the call link to prevent the user from establishing communication with the fraudsters. For example, if a home landline receives an incoming call from a number, the home gateway compares the numbers and finds that the number is in the "overseas fraudulent number database" and is marked as "impersonating public security, procuratorate, and court officials to commit money transfer fraud," then immediately disconnects the incoming call. Second, restrict outgoing calls and provide risk warnings. If a user actively dials a suspected fraudulent phone number, but the number has been marked as fraudulent with a low number of calls and a low risk level, the gateway can first block the outgoing call and simultaneously inform the user of the risk through voice prompts or an app pop-up, allowing the user to confirm whether to continue. For example, when a user dials a phone number through a home VoIP phone, the home gateway identifies the number as a "high-frequency outbound call suspected fraud number that has been reported by more than 10 people," immediately blocks the call, and plays a voice prompt on the phone: "The number you dialed is at risk of fraud, do you want to continue?" to help the user make a judgment.

[0040] Network access blocking primarily targets home devices accessing the internet through a home gateway. If the gateway detects that the website address being accessed by the device matches fraudulent data (such as a phishing website URL), it directly rejects the request during the TCP connection establishment phase, preventing the device from communicating with the website's server. For example, if a home computer attempts to access a website (a phishing website mimicking the official website of the Industrial and Commercial Bank of China), the home gateway detects that the URL is in the "suspected fraudulent website database," immediately returns a "connection refused" response to the computer, and displays a pop-up message in the browser: "This website is suspected of being a phishing website and has been blocked. Please do not access it."

[0041] The aforementioned anti-fraud method based on PON networks acquires fraud data, including suspected fraudulent phone numbers and / or suspected fraudulent website addresses; identifies whether communication connections and / or network access established through the home gateway are related to the fraudulent data; and when the identification result is relevant, intercepts the communication connection and / or network access. This invention can be applied to Fiber to the Room (FTTR), Fiber to the Room-Business (FTTR-B), and broadband converged terminal products. In this invention, the anti-fraud logic for voice calls and network access is integrated into the core node of the home gateway, simultaneously addressing both scenarios and solving the problem in existing technologies that cannot simultaneously cover voice call and network access scenarios.

[0042] Optionally, obtaining fraud data includes: establishing a communication connection with a central data server and periodically or in real time obtaining fraud data updated by the central data server.

[0043] The home gateway establishes a long-term connection with the central server via an encrypted TCP / IP protocol. There are generally two ways to obtain fraud data from the central data server: First, it actively requests updated data from the central data server at preset intervals (such as hourly or daily). This is suitable for scenarios where fraud methods change slowly and real-time requirements are not high, and it can reduce network resource consumption. Second, when the central data server adds or updates fraud data, it immediately pushes incremental information to the home gateway. This is suitable for sudden fraud events (such as an outbreak of fake base station numbers or the emergence of new phishing websites), ensuring "zero-latency" synchronization of risk data.

[0044] Optionally, obtaining fraud data further includes: receiving fraud data uploaded by user terminals.

[0045] Receiving user-uploaded fraud data is a crucial supplement to the home gateway's fraud data. Through active user participation, personalized and real-time fraud information within the home environment is incorporated into the anti-fraud system. The core logic is: allowing users to manually upload suspected fraudulent phone numbers and website addresses they encounter or identify to the home gateway via their terminal devices (such as mobile apps or the home gateway's accompanying mini-program). After local verification, these are synchronized to the central data server, ultimately forming a two-way data loop of "official data + user contributions." This compensates for the lag in data coverage by the central data server (e.g., new types of fraudulent numbers not yet fully included in the network) and adapts to personalized risk scenarios within the home (e.g., targeted fraudulent numbers targeting the elderly).

[0046] For example, an elderly person receives a call from a number claiming to be "health product customer service," who tries to lure them into buying expensive products under the guise of "free gifts." The elderly person hangs up and informs their children. The children open the family gateway's accompanying app, select "Fraud Reporting" under "Phone Number," choose the corresponding phone number from their call log, mark it as "Fake Marketing Fraud," and click "Upload." The family gateway verifies the number's format and temporarily saves it, then synchronizes it to the central data server the next day. The central data server discovers that this number has been uploaded by three other families, and the call activity shows "50+ outbound calls per day," classifying it as a high-risk fraud number and adding it to the entire database. Three hours later, the number is synchronized to all family gateways. When other users receive calls from this number, the family gateway immediately intercepts them and displays a message stating, "This number is a fraudulent number reported by the user."

[0047] In another example, a parent discovered their child browsing a website on a tablet. The website, claiming to offer "free game skins," requested the parent's ID number and bank card information, which the parent suspected was a phishing website. The parent opened the "Fraud Reporting" section of the home gateway's accompanying app, selected "Website Address," manually entered the website address, marked it "Inducing Personal Information," and uploaded it to the home gateway. The home gateway verified the website address format and temporarily stored it before synchronizing it to the central data server. The central data server, through technical detection, found that the website lacked registration information and its code structure was highly similar to known phishing websites, thus identifying it as a fraudulent website and adding it to the entire database. Three hours later, the number was synchronized to all home gateways. When any home device accessed the website, the home gateway would block the connection and display "This website is a phishing website reported by the user and has been blocked."

[0048] Optionally, identifying whether the communication connection and / or network access established through the home gateway is related to the fraud data includes: extracting target numbers dialed in and out through the home gateway; comparing the extracted target numbers with suspected fraudulent phone numbers in the fraud data to determine whether the target numbers are related to the fraud data.

[0049] This step focuses on the home gateway's identification of fraud risks in voice communication scenarios. By extracting the target number in the call and comparing it with fraud data, it accurately determines whether the number is involved in fraud. The core logic is as follows: As an essential node in home voice communication, the home gateway captures all incoming / outgoing numbers (i.e., "target numbers") passing through it in real time and performs precise matching (completely identical numbers) or feature matching (such as number segment, location, or number type highly matching fraud data) with a local "suspected fraud phone number database" to determine whether the target number is a suspected fraud number, providing a basis for subsequent interception actions. For example, if the incoming target number is completely identical to a number in the "suspected fraud phone number database," it is determined to be "precisely relevant," and the home gateway directly cuts off the connection. As another example, if the outgoing target number is not completely identical to any number in the "suspected fraud phone number database," but its location is a high-risk overseas region, its number segment is a virtual operator segment and has been reported multiple times, and its number format conforms to fraud patterns, it is determined to be "high-risk relevant." The home gateway can first block the outgoing call and simultaneously inform the user of the risk through voice prompts or an app pop-up, allowing the user to confirm whether to continue.

[0050] Optionally, identifying whether the communication connection and / or network access established through the home gateway is related to the fraud data includes: extracting the target URL accessed through the home gateway; comparing the extracted target URL with the suspected fraudulent website address in the fraud data to determine whether the target URL is related to the fraud data.

[0051] This step targets fraud risk identification in home network access scenarios. It extracts target URLs accessed by devices and compares them with fraud data to determine if they are suspected fraudulent websites. The core logic is: the home gateway, acting as the entry and exit point of the home network, captures all target URLs accessing the internet through the gateway in real time (such as webpage URLs, app backend request addresses, etc.) and matches them against a local "suspected fraudulent website address database" to accurately identify whether the target URL poses a fraud risk.

[0052] The target URLs cover all internet addresses accessed by home devices (computers, mobile phones, smart TVs, etc.) through the gateway, including domain names, complete URLs, and corresponding IP addresses, ensuring coverage of various network access behaviors such as web browsing and APP data interaction.

[0053] For example, the home gateway's database of suspected fraudulent website addresses may contain a first URL (a phishing website impersonating a bank to steal account passwords). If a user clicks a link in a text message on their computer and attempts to access a second URL, the home gateway will extract this second URL in real time and compare it with the URLs in the database of suspected fraudulent website addresses. If the second URL is found to be completely identical to the first URL, it will be determined to be "related".

[0054] Optionally, when the identification result is relevant, blocking the communication connection and / or network access includes: when the identification result is relevant, cutting off the voice connection with the suspected fraudulent phone number and / or blocking access requests to the suspected fraudulent website address, and pushing fraud alerts to the user terminal.

[0055] For calls related to suspected fraudulent phone numbers, the system terminates the voice connection to prevent the call from continuing, applicable to both inbound and outbound calls. For network access related to suspected fraudulent website addresses, the system prevents the device from loading fraudulent content by rejecting connection requests or interrupting data transmission. Alarm information is simultaneously sent to the user terminal (such as a mobile app or gateway display) explaining the reason for the block (e.g., "This number is a known fraudulent number" or "This website is a phishing website") to ensure that the user is aware of the risks.

[0056] Optionally, the anti-fraud method based on PON network also includes: recording intercepted communication connections and / or network accesses to generate interception logs; synchronizing the interception logs to user terminals and uploading them to a central data server.

[0057] For users, it provides interception logs of interception behavior, making it easier to confirm whether there are false interceptions; for the central data server, it aggregates interception logs from the entire network, providing a basis for updating fraud data and analyzing risk trends.

[0058] The home gateway generates an interception log for each interception event, which generally includes the following key information: Basic information: interception time (e.g., "2024-07-01 09:35:22"), interception type (e.g., "voice call interception", "network access interception"); Risk object information: intercepted phone number or website address, risk level (e.g., "confirmed fraud", "suspected fraud"); Interception details: interception trigger reason (e.g., "matched with impersonating public security, procuratorate and court numbers", "website contains phishing forms"), interception method (e.g., "cut off voice connection", "block access request"), associated devices (e.g., "living room landline", "children's tablet").

[0059] In one embodiment, a fraud prevention device based on a PON network is provided. For example... Figure 2 As shown, this PON network-based anti-fraud device is applied to a home gateway and includes an acquisition module 21, an identification module 22, and an interception module 23. Detailed descriptions of each functional module are as follows: The acquisition module 21 is used to acquire fraud data, which includes suspected fraudulent phone numbers and / or suspected fraudulent website addresses; The identification module 22 is used to identify whether the communication connection and / or network access established through the home gateway is related to the fraudulent data; The interception module 23 is used to intercept the communication connection and / or network access when the identification result is relevant.

[0060] This invention also provides an electronic device, including a memory, a processor, and a program stored in the memory and executable on the processor. The processor, when executing the program, implements the aforementioned anti-fraud method based on a PON network; to avoid repetition, this will not be described further. Alternatively, the electronic device can implement the functions of each module in this embodiment of the anti-fraud device based on a PON network; this will not be described further.

[0061] This invention also provides a readable storage medium storing a program. The program, when executed by a processor, implements the aforementioned anti-fraud method based on a PON network; to avoid repetition, this will not be described further. Alternatively, when executed by a processor, the program implements the functions of each module in this embodiment of the anti-fraud device based on a PON network; this will not be described further.

[0062] The above-described embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included within the protection scope of the present invention.

[0063] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0064] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is used as an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

Claims

1. A fraud prevention method based on a PON network, applied to a home gateway, characterized in that, include: Obtain fraud data, including suspected fraudulent phone numbers and / or suspected fraudulent website addresses; Identify whether the communication connection and / or network access established through the home gateway are related to the fraudulent data; When the identification result is relevant, the communication connection and / or network access are intercepted.

2. The anti-fraud method based on a PON network according to claim 1, characterized in that, The acquisition of fraud data includes: Establish a communication connection with the central data server to periodically or in real-time obtain updated fraud data from the central data server.

3. The anti-fraud method based on a PON network according to claim 1, characterized in that, The identification of whether the communication connection and / or network access established through the home gateway is related to the fraudulent data includes: Extract target numbers for incoming and outgoing calls via the home gateway; The extracted target number is compared with the suspected fraudulent phone numbers in the fraud data to determine whether the target number is related to the fraud data.

4. The anti-fraud method based on a PON network according to claim 1, characterized in that, The identification of whether the communication connection and / or network access established through the home gateway is related to the fraudulent data includes: Extract the target URLs accessed via the home gateway; The extracted target URL is compared with the suspected fraudulent website addresses in the fraud data to determine whether the target URL is related to the fraud data.

5. The anti-fraud method based on a PON network according to claim 1, characterized in that, When the identification result is relevant, intercepting the communication connection and / or network access includes: When the identification result is relevant, the voice connection with the suspected fraudulent phone number is cut off and / or access requests to the suspected fraudulent website address are blocked, and a fraud alert is pushed to the user terminal.

6. The anti-fraud method based on a PON network according to claim 1, characterized in that, The acquisition of fraud data also includes: Receive fraudulent data uploaded by users' terminals.

7. The anti-fraud method based on a PON network according to claim 1, characterized in that, Also includes: The intercepted communication connections and / or network accesses are recorded to generate an interception log; The interception logs are synchronized to the user terminal and uploaded to the central data server.

8. A fraud prevention device based on a PON network, applied to a home gateway, characterized in that, include: The acquisition module is used to acquire fraud data, which includes suspected fraudulent phone numbers and / or suspected fraudulent website addresses; An identification module is used to identify whether the communication connection and / or network access established through the home gateway is related to the fraudulent data; An interception module is used to intercept the communication connection and / or network access when the identification result is relevant.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the anti-fraud method based on a PON network as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the anti-fraud method based on a PON network as described in any one of claims 1 to 7.

Images