A communication method, apparatus, device, and storage medium

Abstract

The application discloses a communication method, device, equipment and storage medium, and relates to the technical field of communication. The method comprises the following steps: performing behavior risk analysis on a communication application of a calling terminal to obtain a calling risk index, and determining a called vulnerability index of a called terminal; sending a risk exemption index determined according to the calling risk index and the called vulnerability index to the calling terminal, so that the calling terminal returns a pledge application according to the risk exemption index, and whether the calling terminal obtains a communication access qualification is determined according to the received pledge application; if it is determined that the calling terminal obtains the communication access qualification, communication risk prompt information is sent to the called terminal, so that the called terminal returns a response determination result according to the risk prompt information, and whether a communication connection between the calling terminal and the called terminal is established is determined according to the received response determination result. The technical scheme of the embodiment of the application fundamentally improves the overall efficiency and security resilience of the whole communication anti-harassment and anti-fraud system.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a communication method, apparatus, device, and storage medium. Background Technology

[0002] With the rapid development of mobile communication technology and Internet services, various instant messaging tools such as telephone communication have been deeply integrated into social production and daily life.

[0003] Currently, the prevention and control system for malicious communication behavior mainly relies on the following three types of technical means: first, the interception mechanism based on static blacklists; second, the passive detection method based on rules such as keywords or call frequency; and third, the crowdsourcing feedback model that relies on user manual marking and reporting.

[0004] However, while the aforementioned methods have played a certain role in suppressing mass, indiscriminate attacks in the early stages, their inherent limitations are becoming increasingly apparent. On the one hand, malicious callers can evade interception by changing their numbers and spoofing their identities, resulting in poor prevention and control effectiveness and problems with low identification accuracy and high false interception rates. On the other hand, existing mechanisms are mostly dominated by network operators or third-party platforms, failing to fully empower the called party with autonomous decision-making authority and thus unable to meet the personalized risk preferences of different users. Summary of the Invention

[0005] This invention provides a communication method, apparatus, device, and storage medium to address the problems of ineffective prevention and control of malicious calls and the inability of prevention and control methods to meet the personalized risk preferences of different users.

[0006] In a first aspect, the present invention provides a communication method, comprising: Behavioral risk analysis is performed on the communication request of the calling party to obtain the calling party risk index, and the called party vulnerability index is determined, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The risk exemption index determined based on the calling risk index and the called vulnerability index is sent to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging communication access qualification; If the acquisition is confirmed, resource pledging is performed and communication risk warning information is sent to the called party, so that the called party returns a response determination result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response determination result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

[0007] In a second aspect, the present invention provides a communication device, comprising: The risk and vulnerability determination module is used to perform behavioral risk analysis on the communication request of the calling party to obtain the calling risk index and determine the called party vulnerability index, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The judgment module is used to send a risk exemption index determined based on the calling risk index and the called vulnerability index to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging the communication access qualification; The communication module is used to perform resource pledging and send communication risk warning information to the called party if the information returned by the judgment module is not obtained, so that the called party returns a response judgment result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response judgment result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

[0008] Thirdly, the present invention provides an electronic device comprising: At least one processor; and memory that is communicatively connected to at least one processor; The memory stores a computer program that can be executed by at least one processor, which is executed by at least one processor to enable the at least one processor to perform the communication method of the first aspect described above.

[0009] Fourthly, the present invention provides a computer-readable storage medium storing computer instructions for causing a processor to execute the communication method of the first aspect described above.

[0010] The communication solution provided by this invention analyzes the communication behavior of the calling party to generate a dynamic "calling party risk index" in real time. Simultaneously, it creatively introduces a "called party vulnerability index" as an intrinsic dimension for assessing the risk of user fraud, achieving a two-way, precise characterization of communication risks. This dual-index assessment architecture can accurately quantify risks from both subjective and objective perspectives, avoiding false or missed interceptions and significantly improving the accuracy of risk identification. It is particularly effective in identifying malicious communication behaviors that circumvent traditional interception methods such as changing phone numbers or disguising identities. This solution also feeds back a risk exemption index, derived from the calling party risk index and the called party vulnerability index, to the calling party, essentially setting a dynamic and personalized entry threshold for high-risk callers. The calling party then submits a pledge application for the corresponding resource type to obtain communication qualifications, significantly advancing the defense node and enabling the prevention and control system to possess proactive and flexible countermeasure capabilities. At the same time, the introduction of pledge resources significantly increases the cost of illegal activities for malicious callers, thereby generating a strong economic deterrent and source-control effect against mass, extensive attacks. This solution constructs a complete closed-loop chain encompassing "risk analysis - index generation - pledge negotiation - alert confirmation - connection decision." This data-driven chain deeply couples caller behavior risk, inherent vulnerability of the called party, and dynamic resource game theory. It not only overcomes the limitations of single-point defense but also achieves intelligent closed-loop management of communication risks throughout the entire process—from identification and assessment to game theory and final resolution—through collaborative linkage between each stage. This fundamentally enhances the overall effectiveness and security resilience of the entire communication anti-harassment and anti-fraud system.

[0011] It should be understood that the description in this section is not intended to identify key or essential features of the invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 This is a flowchart of a communication method provided according to Embodiment 1 of the present invention; Figure 2 This is a flowchart of a communication method provided according to Embodiment 2 of the present invention; Figure 3 This is a schematic diagram of the structure of a communication device according to Embodiment 3 of the present invention; Figure 4This is a schematic diagram of the structure of an electronic device provided according to Embodiment 4 of the present invention. Detailed Implementation

[0014] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0015] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. In the description of this invention, unless otherwise stated, "a plurality of" means two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist; for example, A and / or B can represent: A alone, A and B simultaneously, and B alone. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices.

[0016] Example 1 Figure 1 This is a flowchart of a communication method provided in Embodiment 1 of the present invention. This embodiment is applicable to communication between the calling end and the called end. The method can be executed by a communication device, which can be implemented in hardware and / or software. The communication device can be configured in an electronic device, which can be composed of two or more physical entities or a single physical entity.

[0017] like Figure 1 As shown, the communication method provided in Embodiment 1 of the present invention specifically includes the following steps: S101. Perform behavioral risk analysis on the communication request of the calling party to obtain the calling risk index and determine the called party's vulnerability index, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed.

[0018] In this embodiment, all communication entities are equipped with lightweight communication behavior clients. The communication method described in any embodiment of this document can be applied to the core network equipment of an operator.

[0019] Specifically, the caller risk index can be determined based on the caller's historical communication behavior.

[0020] For example, the caller's call count, number of called parties, average call duration, number of years the number has been online, and whether it is a virtual number can be obtained from the operator's call record database in the past hour. These characteristics are then input into a preset caller behavior risk analysis model to obtain a caller risk index. The caller behavior risk analysis model can be a model that integrates a Long Short-Term Memory network with an extreme gradient boosting algorithm. For instance, if the caller made 22 different calls to 0 different numbers in the past hour, received 0 calls, had an average call duration of 2 seconds, and the number has been online for 2 months and is a virtual operator number, the caller behavior risk analysis model would output a caller risk index of 0.85.

[0021] Then, based on the called party's historical data, such as the number of unknown calls and other data related to communication risks, the called party's vulnerability index can be determined. The higher the called party's vulnerability index, the higher the potential risk of the called party being scammed.

[0022] S102. A risk exemption index determined based on the calling risk index and the called vulnerability index is sent to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources used as the basis for determining communication access qualification.

[0023] In this embodiment, a preset function is first used to calculate the calling risk index and the called vulnerability index, converting them into a quantifiable risk exemption index. This achieves a precise link between communication risk and the calling party's pledge cost. The higher the risk (the larger the risk index and the called vulnerability index), the more exemption cost (i.e., the risk exemption index) needs to be pledged, thus effectively constraining high-risk calls from the cost side. The risk exemption index is then sent to the calling party. The calling party can independently determine the pledge object, i.e., the type of pledged resource, based on the magnitude of the risk exemption index, and return a pledge application containing that type of pledged resource. Devices using this method can first determine the type of pledged resource based on the received pledge application, and then determine whether the calling party obtains communication access qualification based on the amount of that type of pledged resource. If the amount of that type of pledged resource is less than a preset value, the calling party cannot obtain communication access qualification; if it is greater than or equal to the preset value, the calling party obtains communication access qualification. The preset value is determined based on the risk exemption index; the larger the risk exemption index, the larger the preset value.

[0024] S103. If it is determined that the resource is obtained, resource pledging is performed and communication risk warning information is sent to the called party, so that the called party returns a response determination result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response determination result, wherein the communication risk warning information includes at least the calling party risk index, the called party vulnerability index and the risk exemption index.

[0025] In this embodiment, when the calling party obtains communication access qualification, it can first pledge resources. By pledging resources (such as freezing resources), high-risk calls bear higher pledging costs, while the pledging behavior also verifies the calling party's sincerity in communicating. Simultaneously, a communication risk warning message containing a calling party risk index, a called party vulnerability index, and the aforementioned risk exemption index can be sent to the called party. The called party can assess whether to respond based on the risk warning message, and the method of response or non-response, and return a response determination result, which includes whether the called party responded and the corresponding response or non-response method. Based on this response determination result, it can be determined whether to establish a communication connection between the calling party and the called party.

[0026] This invention's technical solution analyzes the calling party's communication behavior to generate a dynamic "caller risk index" in real time. Simultaneously, it creatively introduces a "called party vulnerability index" as an intrinsic dimension for assessing the user's risk of being scammed, achieving a two-way, precise characterization of communication risks. This dual-index assessment architecture can accurately quantify risks from both subjective and objective perspectives, avoiding false or missed interceptions and significantly improving the accuracy of risk identification. It is particularly effective in identifying malicious communication behaviors that circumvent traditional interception methods such as changing phone numbers or disguising identities. This solution also feeds back a risk exemption index, derived from the caller risk index and the called party vulnerability index, to the calling party, essentially setting a dynamic and personalized entry threshold for high-risk callers. The calling party then submits a pledge application for the corresponding resource type to obtain communication eligibility. This significantly advances the defense node, giving the prevention and control system proactive and flexible countermeasure capabilities. Furthermore, the introduction of pledged resources significantly increases the cost of illegal activities for malicious callers, thereby generating a strong economic deterrent and source-control effect against mass, extensive attacks. This solution constructs a complete closed-loop chain encompassing "risk analysis - index generation - pledge negotiation - alert confirmation - connection decision." This data-driven chain deeply couples caller behavior risk, inherent vulnerability of the called party, and dynamic resource game theory. It not only overcomes the limitations of single-point defense but also achieves intelligent closed-loop management of communication risks throughout the entire process—from identification and assessment to game theory and final resolution—through collaborative linkage between each stage. This fundamentally enhances the overall effectiveness and security resilience of the entire communication anti-harassment and anti-fraud system.

[0027] Optionally, before performing behavioral risk analysis on the caller's communication request to obtain a caller risk index, the method further includes: encrypting the communication information determined based on the communication request sent by the caller using an encryption algorithm to obtain an encrypted value, and determining whether the communication request is legitimate by comparing the encrypted value with the session credentials in the communication request; wherein, performing behavioral risk analysis on the caller's communication request to obtain a caller risk index includes: if it is determined to be legitimate, then using a preset behavioral risk analysis model to determine the caller risk index based on the caller's historical communication request records.

[0028] Specifically, firstly, the calling party can combine the calling number digest, call timestamp, called number digest, and communication type into a plaintext string, generate an encrypted session credential using a hash algorithm, and then write the credential into an extended field of the call signaling before initiating a communication request. The calling party generates a unique and tamper-proof identifier for this communication, which can be used for subsequent risk assessment and trusted tracing.

[0029] For example, if the calling number is "abc", the call timestamp is 1710000000, the called number is "efg", and the communication type is voice call, the calling party can perform an MD5 hash algorithm on the string "abc|1710000000|efg|VOICE" to obtain a 128-bit binary hash value. This hash value is then converted into a 32-bit hexadecimal string and used as a parameter value, written into the extended fields of the call signaling, such as the extended field P-Asserted-Identity. The encrypted session credential can be represented as: P-Asserted-Identity: "abc"<tel: abc> x-session-credential=parameter value. Here, "x-session-credential" is the name of a custom parameter. Then, the obtained session credentials are placed in the call signaling to initiate a communication request.

[0030] Next, during the forwarding of call signaling, the operator's core network equipment parses and extracts the calling number, called number, communication type, call timestamp, and session credentials carried in the signaling, and sends these five pieces of data completely to the device using this method. The device using this method will first verify the validity of the session credentials. If the verification fails, it will directly intercept the communication request and terminate subsequent steps. For example, the validity verification method can be as follows: 1) Extract the calling number, called number, call timestamp, and session credentials from the request data forwarded by the core network equipment; 2) Calculate the hash value of the string "caller number|call timestamp|called number|communication type" using a hash algorithm pre-agreed with the calling party; 3) First, compare the obtained hash value with the session credentials carried in the request data for consistency, and then check whether the difference between the call timestamp and the current time is within the preset valid time window; 4) If the hash values ​​are completely identical and the timestamp is within the valid time window, the credential is considered valid and the current communication request is legitimate. If either condition is not met, the credential is deemed invalid and the communication request is directly blocked.

[0031] The advantage of this setup is that it performs a pre-verification of the legitimacy of call requests before the communication link is formally established. By filtering out forged call requests that are illegally constructed, have tampered with signaling, or have abnormal timestamps, it ensures that only legitimate and genuine call requests enter the subsequent risk assessment stage. This avoids invalid and forged requests consuming core network resources, constructs a pre-emptive security filter for communication fraud prevention, and lays a foundation of legitimate and reliable request data for subsequent accurate risk assessment.

[0032] Optionally, determining the called party's vulnerability index includes: obtaining the number of unknown calls, the number of times it has been negatively marked, and the terminal security level of the called party within a preset historical time period, wherein the terminal security level is related to the number of high-risk behaviors of the terminal where the called party is located; and determining the called party's vulnerability index based on the number of unknown calls, the number of times it has been negatively marked, and the terminal security level.

[0033] Specifically, the number of unknown calls, the number of times the terminal was negatively flagged, and the terminal security level of the called party within a preset historical time period can be standardized and normalized to obtain a standardized result. Then, according to preset weights and using preset methods, such as weighted summation, the called party's vulnerability index can be calculated. For example: Vulnerability Index of the Called Party = Standardized Frequency of Unknown Calls × 0.4 + Standardized Number of Negatively Labeled Calls × 0.4 + Standardized Terminal Security Level × 0.2 Among these, the number of unknown calls and the number of times a user is negatively flagged are core indicators of vulnerability to scams, and their weight can be greater than that of the terminal security level. The standardized frequency of unknown calls, the standardized number of negative flags, and the standardized terminal security level can be determined as follows: 1) Standardized frequency of unknown calls: If the preset historical time period is the past three days, with the daily average number of unknown calls as the upper limit of 8, the standardized frequency of unknown calls = min(the daily average number of unknown calls in the past 3 days / 8, 1). 2) Standardize the number of times negatively labeled: with a preset harassment threshold of 5 times as the upper limit, the standardized number of times negatively labeled = min(the number of times negatively labeled in history / 5, 1); 3) Standardized terminal security levels: No risk = 0, Low risk = 0.5, High risk = 1. Low risk indicates the called party has a suspected risky app, while high risk indicates the called party has a malicious fraudulent app or engages in high-risk behavior.

[0034] For example, if the called party has received 16 unknown calls in the past 3 days, has been flagged as fraudulent 5 times, and has a terminal security level of no risk, then: First, standardize the calculation: Standardized unknown call frequency = min((16÷3)÷8,1) = min(0.6667,1) = 0.6667; Standardized negative flagging count = min(5÷5,1) = 1; Standardized terminal security level = 0. The called party vulnerability index = 0.6667×0.4 + 1×0.4 + 0×0.2 = 0.26668 + 0.4 = 0.66668 ≈ 0.67.

[0035] Optionally, determining whether to establish a communication connection between the calling end and the called end based on the received response determination result includes: using the received response determination result and a two-way comprehensive risk value determined based on the calling risk index and the called vulnerability index, determining a target communication handling rule from multi-level communication handling rules, wherein the response determination result includes the target communication receiving rule determined by the called end from multi-level communication receiving rules, and the communication handling rules are different for different levels; determining whether to establish a communication connection between the calling end and the called end based on the target communication receiving rule and the target communication handling rule, and if so, establishing a corresponding communication connection based on the target communication receiving rule and the target communication handling rule. The advantage of this setup is that it grants the called end the autonomy to decide on call reception, achieving risk consensus at the communication receiving end, and simultaneously implementing a differentiated and tiered handling strategy for calls based on the two-way comprehensive risk value. This approach avoids unwanted high-risk calls through the called end's autonomous screening, while also balancing anti-fraud security with the user experience of normal communication through tiered connection, avoiding security vulnerabilities caused by simply blocking or allowing calls.

[0036] Specifically, the called party can receive and display communication risk warning information, and then automatically complete the response judgment of accepting or rejecting the call according to the multi-level communication reception rules preset by the called party. At the same time, the response judgment result containing the target communication reception rules is fed back to the device that applied this method.

[0037] For example, multi-level communication reception rules include: Low-risk rule: Receive directly in silent or vibrating mode; Medium-risk rule: Receive and perform secondary verification on the calling party or directly refuse to receive; High-risk rules: Receive and issue a strong warning, delay connection and issue a warning, or directly refuse to receive.

[0038] Next, the device using this method can select the target communication handling rule from the multi-level communication handling rules based on the bidirectional comprehensive risk value determined by the calling risk index and the called vulnerability index, as well as the response judgment result.

[0039] For example, if the grading criteria for the two-way composite risk value are: Low risk: Risk value < 0.3; Medium risk: 0.3 ≤ risk value < 0.7; High risk: Risk value ≥ 0.7.

[0040] Multi-level communication processing rules include: Low-risk handling rules: Directly release, immediately establish communication link, no additional verification or warning, and ensure normal communication efficiency; Medium-risk handling rules: In silent mode, the calling party is verified twice by sending an encrypted verification command to the calling party's backup application (such as the bound operator's APP or SMS). The call is only connected after the calling party completes the verification. During this process, the called party is not disturbed. High-risk handling rules: Delayed connection + strong early warning. The communication link is connected after a preset time delay, and multi-dimensional anti-fraud strong early warning information (terminal pop-up window + voice broadcast + SMS reminder) is pushed to the called party to remind the called party to verify the identity of the caller.

[0041] Finally, the device using this method can determine whether to establish a communication connection between the calling end and the called end based on the target communication reception rules and the target communication processing rules, and perform specific communication connection operations to complete the hierarchical establishment of this communication.

[0042] Example 1: High-risk scenario If the two-way comprehensive risk value is 0.81 (≥0.7, judged as high risk), the corresponding target communication handling rule is the high-risk handling rule. Devices using this method push communication risk warning information to the called party: "The calling number for this call is 135xxxxxxxx, the calling party risk index is 0.85, your vulnerability index is 0.75, the two-way comprehensive risk value is 0.81 (high risk), the calling party has pledged 21 credit points, do you want to accept?" The called party automatically decides to accept the call and feeds back the decision result "delay connection and issue a warning" to the device using this method. Devices using this method execute: a 3-second delay before connection, simultaneously triggering a pop-up window and voice broadcast warning on the called party. Specifically, the process involves: sending an anti-fraud pop-up alert to the called party: "[Operator Anti-Fraud Reminder] This call has a comprehensive risk value of 0.81, which is a high-risk call. Please verify the identity of the other party." A 3-second delay timer is then initiated, during which a pre-connection voice alert is played to the called party: "The call you are receiving is a high-risk call. Please verify the identity of the other party and beware of fraud." After the 3-second delay timer expires, a formal communication link is established between the calling and called parties, completing the hierarchical communication setup.

[0043] Example 2: Medium-risk scenario If the bidirectional comprehensive risk value is 0.5, the corresponding target communication handling rule is a medium-risk handling rule. The device using this method pushes communication risk warning information to the called party. The called party automatically determines to accept the call and feeds back the determination result "Received and performs secondary verification on the calling party" to the device using this method. The device using this method sends an encrypted verification code to the calling party: "xxxx, complete this call verification." After the calling party completes silent verification by sending the verification code, the device using this method formally establishes the communication link between the calling party and the called party, completing the hierarchical communication establishment.

[0044] Example 3: Failure Scenario If the bidirectional comprehensive risk value is 0.81 (≥0.7, judged as high risk), the corresponding target communication handling rule is the high-risk handling rule. Devices using this method push communication risk warning information to the called party. The called party automatically makes its own judgment and feeds back the judgment result "directly refuse to receive" to the device using this method. Devices using this method return a prompt to the calling party stating "The called party refuses to receive this high-risk call," and directly refuse to establish a communication link, terminating all subsequent processes of this call, thus enabling the called party to autonomously block high-risk calls.

[0045] Example 2 Figure 2 This is a flowchart of a communication method provided in Embodiment 2 of the present invention. The technical solution of the present invention is further optimized based on the above optional technical solutions, and provides a specific method for communication between the calling end and the called end.

[0046] Optionally, sending the risk exemption index determined based on the calling risk index and the called vulnerability index to the calling end, so that the calling end returns the pledge application based on the risk exemption index, includes: determining a two-way comprehensive risk value based on the calling risk index and the called vulnerability index, and determining the risk exemption index based on the two-way comprehensive risk value using a preset linear pricing function; sending the risk exemption index and preset pledge rules to the calling end, so that the calling end returns the pledge application based on the risk exemption index and the preset pledge rules.

[0047] Optionally, determining whether the calling party has obtained communication access qualification based on the received pledge application includes: determining the pledge resources of the calling party based on the type of pledge resources in the received pledge application, wherein the pledge resource type includes the calling party's prepaid call charges and credit score; determining the comparison result between the risk exemption index and the amount of pledge resources, and determining whether the calling party has obtained communication access qualification based on the comparison result.

[0048] Optionally, the step of pledging resources includes: determining the amount of pledged resources to be frozen based on the risk exemption index, and freezing the pledged resources based on the amount of frozen resources; wherein, after determining whether to establish a communication connection between the calling end and the called end based on the received response determination result, the step further includes: after the communication connection is broken, receiving the marking information for this round of communication sent by the called end, and returning and / or deducting a preset proportion of the pledged resources frozen by the calling end based on the marking information.

[0049] like Figure 2 As shown, the communication method provided in Embodiment 2 of the present invention specifically includes the following steps: S201. Encrypt the communication information determined based on the communication request sent by the calling party using an encryption algorithm to obtain an encrypted value. Then, determine whether the communication request is legitimate by comparing the encrypted value with the session credentials in the communication request. If it is legitimate, determine the calling party risk index based on the calling party's historical communication request records using a preset behavioral risk analysis model.

[0050] S202. Obtain the number of unknown calls, the number of times the terminal is negatively marked, and the terminal security level of the called party within a preset historical time period; determine the called party's vulnerability index based on the number of unknown calls, the number of times the terminal is negatively marked, and the terminal security level.

[0051] The terminal security level is related to the number of high-risk behaviors of the terminal where the called party is located.

[0052] S203. Determine a two-way comprehensive risk value based on the calling risk index and the called vulnerability index, and determine a risk exemption index based on the two-way comprehensive risk value using a preset linear pricing function; send the risk exemption index and the preset pledging rules to the calling end, so that the calling end returns a pledging application based on the risk exemption index and the preset pledging rules.

[0053] Specifically, the calling risk index and the called vulnerability index can be calculated using a weighted summation method to determine the overall two-way risk value. For example, this could be: Two-way comprehensive risk value = calling risk index × α + called vulnerability index × β In this context, α can be 0.6, β can be 0.4, and α+β=1. The caller's behavioral risk is the core cause of communication risk, and its weight can be set relatively high. The called party's vulnerability index reflects the potential for harm and, as a risk-additional indicator, its weight can be set relatively low.

[0054] Next, the two-way composite risk value is processed using a preset linear pricing function to obtain the risk exemption index required for this communication. For example, it could be: Risk Exemption Index = round(Two-way Composite Risk Value × K + C) In this system, the risk amplification factor K=20, and the base points C=5. The base points C can set a minimum staking threshold for legitimate calls, preventing low-risk calls from being initiated without cost. `round()` is a rounding function used to convert the calculated result into a positive integer.

[0055] When the combined risk value is 0, the risk exemption index is 5. When the combined risk value is 1, the risk exemption index is round(1×20+5)=25. That is, the range of the risk exemption index is from 5 to 25.

[0056] For example, if the calling risk index = 0.85, the called vulnerability index = 0.75, α = 0.6, β = 0.4, K = 20, and C = 5, then the combined two-way risk value = 0.85 × 0.6 + 0.75 × 0.4 = 0.51 + 0.3 = 0.81. The risk exemption index = round(0.81 × 20 + 5) = round(21.2) = 21.

[0057] The risk exemption index and preset staking rules (such as the exchange ratio between different types of resources and staking resources) can be sent to the calling client. The calling client will determine the type of staking resource based on its own resource quantity and initiate the corresponding staking application. Among them, if the exchange ratio is 1:1, it means that this type of resource can be exchanged for staking resources at a 1:1 ratio.

[0058] S204. Determine the pledged resources of the calling party based on the type of pledged resources in the received pledge application; determine the comparison result between the risk exemption index and the amount of pledged resources, and determine whether the calling party has obtained communication access qualification based on the comparison result; if it is determined that it has obtained it, determine the amount of pledged resources to be frozen based on the risk exemption index, and freeze the pledged resources based on the amount of pledged resources.

[0059] The pledged resources include the caller's prepaid call charges and credit points.

[0060] Specifically, devices using this method can first calculate the calling party's pledged resources and the amount of pledged resources based on preset pledge rules and the type of pledged resources in the received pledge application. Then, the risk exemption index and the amount of pledged resources are compared to verify in real time whether the calling party's corresponding account has sufficient resource balance. If the amount of pledged resources is greater than or equal to the risk exemption index, it indicates sufficient balance, and the calling party obtains communication access qualification, generating a unique communication exemption identifier for this call to mark that the call has obtained communication access qualification. Conversely, if the amount is insufficient, the calling party does not obtain communication access qualification, the pledge application is rejected, the call is directly intercepted, and subsequent steps are terminated. The pledge of credit points can be: a one-to-one equal pledge, where 1 credit point = 1 pledged resource. Credit points are comprehensively assessed by the operator based on historical communication behavior and performance records. The pledge of prepaid call charges can be: 1 yuan of prepaid call charge = 10 pledged resources. The calling party can choose one of the two pledge types based on its own account status.

[0061] When it is confirmed that the risk exemption index has been obtained, the amount of pledged resources corresponding to the risk exemption index can be determined as the frozen amount, and the pledged resources of the frozen amount can be pledged and frozen.

[0062] For example, Example 1: If the risk exemption index for this call is 21, the calling terminal selects credit points as collateral, with a default collateral rule of 1 credit point = 1 collateral resource. Devices using this method send a message to the calling terminal: "The risk exemption index for this call is 21. You can choose to collateralize credit points at a 1:1 ratio or prepaid call charges at a 1:10 ratio." The calling terminal selects credit points for collateral and initiates a collateral application for "collateralized credit points." Devices using this method verify the calling terminal's credit point account in real time, confirming an account balance of 50 ≥ 21, and generate a unique communication exemption identifier for this call, marking it as "This call has been collateralized and communication access has been granted." The 21 credit points in the calling terminal's account are frozen as a dedicated collateral for this call (these points cannot be used for collateral in other calls and are only bound to this call session).

[0063] Example 2: If the calling party chooses prepaid call credit as collateral, the default collateral rule is 1 prepaid call credit = 10 collateral resources. Devices using this method send a message to the calling party: "The risk exemption index for this call is 21. You can choose to collateralize your credit points at a 1:1 ratio or your prepaid call credit at a 1:10 ratio." The calling party chooses to collateralize the prepaid call credit and initiates a "collateralize prepaid call credit" application. Devices using this method verify the calling party's prepaid call credit account in real time, confirming the account balance is 10 × 10 ≥ 21, generating a unique communication exemption identifier for this call, and marking it as "This call has been collateralized and communication access has been granted." The 10 yuan prepaid call credit in the calling party's account is then frozen as a dedicated collateral for this call.

[0064] Example 3: If the risk exemption index for this call is 21, the calling terminal selects credit points as collateral, with a default collateral rule of 1 credit point = 1 collateral resource. Devices using this method send a message to the calling terminal: "The risk exemption index for this call is 21. You can choose to collateralize credit points at a 1:1 ratio or prepaid call charges at a 1:10 ratio." The calling terminal selects credit points for collateral and initiates a collateral application for "collateralized credit points." Devices using this method verify the calling terminal's credit point account in real time. If the account balance is 15 ≤ 21, the collateral is deemed to have failed, and a message is returned to the calling terminal: "Insufficient collateral balance, call blocked." Simultaneously, all subsequent steps of this call are terminated, and the communication link is refused to be established.

[0065] S205. Send communication risk warning information to the called party so that the called party returns a response determination result based on the risk warning information; using the received response determination result and the bidirectional comprehensive risk value determined based on the calling party risk index and the called party vulnerability index, determine the target communication handling rule from the multi-level communication handling rules; determine whether to establish a communication connection between the calling party and the called party based on the target communication receiving rule and the target communication handling rule; if so, establish the corresponding communication connection based on the target communication receiving rule and the target communication handling rule.

[0066] The response determination result includes the target communication receiving rule determined by the called party from the multi-level communication receiving rules. The communication handling rules are different for different levels, and the communication receiving rules are different for different levels.

[0067] S206. After the communication connection is disconnected, receive the marking information of the current round of communication sent by the called party, and return and / or deduct the pledged resources frozen by the calling party according to the marking information at a preset ratio.

[0068] Specifically, after the communication connection is broken, the called party can pop up an anonymous tagging window to receive the user's tagging of the communication, such as normal call, harassment call, or fraudulent call. Normal calls are legitimate communications without harassment or fraudulent intent (such as calls with family or friends or formal business communication); harassment calls are communications without fraudulent intent but involving frequent dialing or irrelevant sales pitches; and fraudulent calls are communications with fraudulent intent such as impersonation, inducement to transfer money, or dissemination of false information. After tagging, the information is synchronized to devices using this method. Devices using this method, based on the called party's tagging information, execute the return, deduction, or confiscation of the caller's frozen pledged resources according to preset liquidation rules. The preset liquidation rules (corresponding to the tagging information) can be: 1) Normal call settlement: 90% of the pledged resources will be returned, and 10% of the pledged resources will be deducted; 2) Harassment Call Settlement: 50% of the pledged resources will be returned, and 50% of the pledged resources will be confiscated; 3) Fraudulent call clearing: All pledged resources will be forfeited, and the caller's number will be added to the operator's high-risk list.

[0069] Optionally, devices using this method will anonymize all data from the current call (caller risk index, called party vulnerability index, two-way comprehensive risk value, risk exemption index, pledge type, frozen amount, tagging information, and settlement result) before aggregating it into the sample library of the AI ​​model training platform. The AI ​​model training platform employs a federated learning algorithm, integrating newly anonymized samples into the existing training set to iteratively train the behavioral risk analysis model across all dimensions, and specifically optimizing the calculation rules for the called party vulnerability index (e.g., adjusting weights). The updated model and rules will be used for risk assessment and vulnerability calculation in subsequent calls.

[0070] For example, scenario 1: The called party is marked as "normal call". 1) Result feedback: The "normal call" flag on the called end is synchronized to the devices that have applied this method; 2) Pledged liquidation: If the frozen amount is 21 credit points, then: Return: 21 × 90% = 18.9 credit points; Deduct: 21 × 10% = 2.1 credit points; 3) Data Collection and Model Update: Devices using this method will de-identify the following data for this call: "Caller Risk Index 0.85, Called Vulnerability Index 0.75, Two-Way Comprehensive Risk Value 0.81, Risk Exemption Index 21, Credit Score, Normal Call, Settlement Return 18.9 points minus 2.1," and then collect this data into the sample library of the AI ​​model training platform. The platform will mark this sample as "High-Risk Assessment - Normal Communication Result," and iteratively optimize the behavioral risk analysis model's misjudgment threshold for high-risk callers, reducing the risk scoring bias for subsequent legitimate high-frequency calls (such as regular outbound calls).

[0071] Scenario 2: The called party is marked as a "fraudulent call". 1) Result feedback: The "fraudulent call" flag on the called end is synchronized to the devices that have applied this method; 2) Pledged liquidation: If the frozen amount is 21 credit points, then: Full deduction: 21 × 100% = 21 credit points; 3) Inclusion in high-risk lists: Including the calling number in the operator's high-risk list; 4) Data Collection and Model Update: Devices using this method will have the following data from this call de-identified: "Caller Risk Index 0.85, Caller Vulnerability Index 0.75, Two-Way Comprehensive Risk Value 0.81, Risk Exemption Index 21, Credit Score, Fraudulent Call, and Full Deduction in Settlement." This data will then be collected into the sample library of the AI ​​model training platform. The platform will label this sample as "High-Risk Assessment - Fraudulent Communication Result," and iteratively strengthen the behavioral risk analysis model's weighting of features such as "high call frequency + short call duration + virtual number," thereby improving the accuracy of risk identification for similar fraudulent calls in the future.

[0072] The communication method provided in this invention addresses pain points in existing communication risk prevention and control systems, such as low identification accuracy, lack of effective cost constraints on malicious calls, lack of autonomous decision-making power for called parties, and the inability of risk control rules to adaptively evolve. It constructs a fully-fledged, trusted communication prevention and control mechanism encompassing "caller risk assessment – ​​called party vulnerability calculation – two-way risk joint pricing – caller pledge credit – called party reception consensus – tiered call handling – liquidation and reward / penalty closed loop." This method achieves precise interception of malicious communication, reduces false interception rates, empowers called parties with full communication decision-making power, and curbs malicious communication behavior through cost constraints, thereby ensuring the security of the communication network.

[0073] Example 3 Figure 3 This is a schematic diagram of a communication device provided in Embodiment 3 of the present invention. Figure 3 As shown, the device includes: a risk and vulnerability determination module 301, a judgment module 302, and a communication module 303, wherein: The risk and vulnerability determination module is used to perform behavioral risk analysis on the communication request of the calling party to obtain the calling risk index and determine the called party vulnerability index, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The judgment module is used to send a risk exemption index determined based on the calling risk index and the called vulnerability index to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging the communication access qualification; The communication module is used to perform resource pledging and send communication risk warning information to the called party if the information returned by the judgment module is not obtained, so that the called party returns a response judgment result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response judgment result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

[0074] The communication device provided in this invention analyzes the communication behavior of the calling party to generate a dynamic "calling party risk index" in real time. Simultaneously, it creatively introduces a "called party vulnerability index" as an intrinsic dimension for assessing the risk of user fraud, achieving a two-way, precise characterization of communication risks. This dual-index assessment architecture can accurately quantify risks from both subjective and objective perspectives, avoiding false or missed interceptions and significantly improving the accuracy of risk identification. It is particularly effective in identifying malicious communication behaviors that circumvent traditional interception methods such as changing phone numbers or disguising identities. The device also feeds back a risk exemption index, obtained from the calling party risk index and the called party vulnerability index, to the calling party, essentially setting a dynamic and personalized entry threshold for high-risk callers. The calling party then provides a pledge application for the corresponding resource type to obtain communication qualifications, significantly advancing the defense node and enabling the prevention and control system to possess proactive and flexible countermeasure capabilities. At the same time, the introduction of pledge resources significantly increases the cost of illegal activities for malicious callers, thereby generating a strong economic deterrent and source-control effect against mass, extensive attacks. This device constructs a complete closed-loop chain of "risk analysis - index generation - pledge negotiation - reminder confirmation - connection decision". This data-driven chain deeply couples the caller's behavioral risks, the inherent vulnerabilities of the called party, and dynamic resource game theory. It not only solves the limitations of single-point defense, but also achieves intelligent closed-loop management of the entire process of communication risk from identification, assessment, game theory to final disposal through the coordinated linkage between each link. This fundamentally improves the overall effectiveness and security resilience of the entire communication anti-harassment and anti-fraud system.

[0075] Optionally, the device may also include: The legitimacy verification module is used to encrypt the communication information determined based on the communication request sent by the calling party using an encryption algorithm before performing behavioral risk analysis on the communication request of the calling party to obtain the calling party risk index, so as to obtain an encrypted value, and determine whether the communication request is legitimate by comparing the encrypted value with the session credentials in the communication request. The risk and vulnerability determination module includes: The risk index determination unit is used to determine the calling party risk index based on the calling party's historical communication request records if the information returned by the legality verification module is legal.

[0076] Optional risk and vulnerability determination modules include: The information acquisition unit is used to acquire the number of unknown calls, the number of times the called party is negatively marked, and the terminal security level of the called party within a preset historical time period. The terminal security level is related to the number of high-risk behaviors of the terminal where the called party is located. The called party vulnerability index determination unit is used to determine the called party vulnerability index based on the number of unknown calls, the number of times it has been negatively marked, and the terminal security level.

[0077] Optionally, the judgment module includes: The exemption index determination unit is used to determine a two-way comprehensive risk value based on the calling risk index and the called vulnerability index, and to determine a risk exemption index based on the two-way comprehensive risk value using a preset linear pricing function; The sending unit is used to send the risk exemption index and the preset pledging rules to the calling end, so that the calling end can return a pledging application according to the risk exemption index and the preset pledging rules.

[0078] Optionally, the judgment module includes: The pledge resource determination unit is used to determine the pledge resources of the calling party based on the type of pledge resources in the received pledge application, wherein the pledge resource type includes the prepaid call charges and credit points of the calling party. The qualification determination unit is used to determine the comparison result between the risk exemption index and the amount of pledged resources, and to determine whether the calling party has obtained communication access qualification based on the comparison result.

[0079] Optionally, the communication module includes: The rule determination unit is used to determine the target communication handling rule from the multi-level communication handling rules by using the received response determination result and the bidirectional comprehensive risk value determined according to the calling risk index and the called vulnerability index. The response determination result includes the target communication receiving rule determined by the called end from the multi-level communication receiving rules. The communication handling rules are different for different levels, and the communication receiving rules are different for different levels. The connection determination unit is used to determine whether to establish a communication connection between the calling end and the called end based on the target communication receiving rule and the target communication processing rule. If so, the corresponding communication connection is established based on the target communication receiving rule and the target communication processing rule.

[0080] Optionally, the communication module includes: A freezing unit is used to determine the amount of pledged resources to be frozen based on the risk exemption index, and to freeze the pledged resources based on the amount of frozen resources. The device also includes: The resource handling module is used to, after determining whether to establish a communication connection between the calling end and the called end based on the received response judgment result, receive the marking information of the current round of communication sent by the called end after the communication connection is broken, and return and / or deduct the pledged resources of the calling end that are frozen according to a preset ratio based on the marking information.

[0081] The communication device provided in the embodiments of the present invention can execute the communication method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0082] Example 4 Figure 4 A schematic diagram of an electronic device 40 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0083] like Figure 4 As shown, the electronic device 40 includes at least one processor 41 and a memory, such as a read-only memory (ROM) 42 or a random access memory (RAM) 43, communicatively connected to the at least one processor 41. The memory stores computer programs executable by the at least one processor. The processor 41 can perform various appropriate actions and processes based on the computer program stored in the ROM 42 or loaded from storage unit 48 into the RAM 43. The RAM 43 may also store various programs and data required for the operation of the electronic device 40. The processor 41, ROM 42, and RAM 43 are interconnected via a bus 44. An input / output (I / O) interface 45 is also connected to the bus 44.

[0084] Multiple components in electronic device 40 are connected to I / O interface 45, including: input unit 46, such as keyboard, mouse, etc.; output unit 47, such as various types of monitors, speakers, etc.; storage unit 48, such as disk, optical disk, etc.; and communication unit 49, such as network card, modem, wireless transceiver, etc. Communication unit 49 allows electronic device 40 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0085] Processor 41 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 41 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 41 performs the various methods and processes described above, such as communication methods.

[0086] In some embodiments, the communication method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 48. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 40 via ROM 42 and / or communication unit 49. When the computer program is loaded into RAM 43 and executed by processor 41, one or more steps of the communication method described above may be performed. Alternatively, in other embodiments, processor 41 may be configured to perform the communication method by any other suitable means (e.g., by means of firmware).

[0087] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), system-on-a-chip (SoC) systems, complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0088] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0089] The computer equipment provided above can be used to execute the communication methods provided in any of the above embodiments, and has corresponding functions and beneficial effects.

[0090] Example 5 In the context of this invention, a computer-readable storage medium may be a tangible medium, and the computer-executable instructions, when executed by a computer processor, are used to perform a communication method, the method comprising: Behavioral risk analysis is performed on the communication request of the calling party to obtain the calling party risk index, and the called party vulnerability index is determined, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The risk exemption index determined based on the calling risk index and the called vulnerability index is sent to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging communication access qualification; If the acquisition is confirmed, resource pledging is performed and communication risk warning information is sent to the called party, so that the called party returns a response determination result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response determination result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

[0091] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by, or in conjunction with, an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0092] The computer equipment provided above can be used to execute the communication methods provided in any of the above embodiments, and has corresponding functions and beneficial effects.

[0093] This application also provides a computer program product, including a computer program / instructions, which, when executed by a processor, implement the communication method as described in any of the above embodiments.

[0094] It is worth noting that in the embodiments of the above communication device, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be realized; in addition, the specific names of each functional unit are only for easy distinction between each other and are not used to limit the scope of protection of the present invention.

[0095] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A communication method, characterized in that, include: Behavioral risk analysis is performed on the communication request of the calling party to obtain the calling party risk index, and the called party vulnerability index is determined, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The risk exemption index determined based on the calling risk index and the called vulnerability index is sent to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging communication access qualification; If the acquisition is confirmed, resource pledging is performed and communication risk warning information is sent to the called party, so that the called party returns a response determination result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response determination result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

2. The method according to claim 1, characterized in that, Before performing behavioral risk analysis on the caller's communication request to obtain the caller risk index, the following steps are also included: The communication information determined based on the communication request sent by the calling party is encrypted using an encryption algorithm to obtain an encrypted value. The validity of the communication request is then determined by comparing the encrypted value with the session credentials in the communication request. The step of performing behavioral risk analysis on the caller's communication request to obtain a caller risk index includes: If the request is deemed legitimate, a pre-defined behavioral risk analysis model is used to determine the caller risk index based on the caller's historical communication request records.

3. The method according to claim 1 or 2, characterized in that, The determination of the called party's vulnerability index includes: The system obtains the number of unknown calls, the number of times the device is negatively flagged, and the terminal security level of the called party within a preset historical time period. The terminal security level is related to the number of high-risk behaviors of the terminal where the called party is located. The called party's vulnerability index is determined based on the number of unknown calls, the number of times it is negatively marked, and the terminal's security level.

4. The method according to claim 1, characterized in that, The step of sending a risk exemption index determined based on the calling risk index and the called vulnerability index to the calling end, so that the calling end returns a pledge application based on the risk exemption index, includes: A two-way comprehensive risk value is determined based on the calling risk index and the called vulnerability index, and a risk exemption index is determined based on the two-way comprehensive risk value using a preset linear pricing function; The risk exemption index and the preset pledging rules are sent to the calling party so that the calling party can return a pledging application based on the risk exemption index and the preset pledging rules.

5. The method according to claim 1 or 4, characterized in that, The step of determining whether the calling party has obtained communication access qualification based on the received pledge application includes: The caller's pledged resources are determined based on the type of pledged resources in the received pledge application, wherein the pledged resource type includes the caller's prepaid call charges and credit points. The comparison result between the risk exemption index and the amount of pledged resources is determined, and the caller is determined to have obtained communication access qualification based on the comparison result.

6. The method according to claim 1, characterized in that, The step of determining whether to establish a communication connection between the calling end and the called end based on the received response determination result includes: Using the received response determination result and the bidirectional comprehensive risk value determined based on the calling risk index and the called vulnerability index, a target communication handling rule is determined from the multi-level communication handling rules. The response determination result includes the target communication receiving rule determined by the called end from the multi-level communication receiving rules. The communication handling rules are different for different levels, and the communication receiving rules are different for different levels. Based on the target communication receiving rules and the target communication processing rules, determine whether to establish a communication connection between the calling end and the called end. If so, establish the corresponding communication connection based on the target communication receiving rules and the target communication processing rules.

7. The method according to any one of claims 1, 2, 4 and 6, characterized in that, The resource pledging includes: The amount of pledged resources to be frozen is determined based on the risk exemption index, and the pledged resources are frozen based on the amount of pledged resources. The process further includes, after determining whether to establish a communication connection between the calling end and the called end based on the received response determination result: After the communication connection is disconnected, the system receives the marking information of the current communication sent by the called party, and returns and / or deducts a preset proportion of the pledged resources frozen by the calling party based on the marking information.

8. A communication device, characterized in that, include: The risk and vulnerability determination module is used to perform behavioral risk analysis on the communication request of the calling party to obtain the calling risk index and determine the called party vulnerability index, wherein the called party vulnerability index is used to characterize the degree of risk of being scammed. The judgment module is used to send a risk exemption index determined based on the calling risk index and the called vulnerability index to the calling end, so that the calling end returns a pledge application based on the risk exemption index, and determines whether the calling end has obtained communication access qualification based on the received pledge application, wherein the pledge application includes the type of pledged resources as the basis for judging the communication access qualification; The communication module is used to perform resource pledging and send communication risk warning information to the called party if the information returned by the judgment module is not obtained, so that the called party returns a response judgment result based on the risk warning information, and determines whether to establish a communication connection between the calling party and the called party based on the received response judgment result. The communication risk warning information includes at least the calling party risk index, the called party vulnerability index, and the risk exemption index.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the communication method according to any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that are used to cause a processor to execute the communication method according to any one of claims 1-7.

Images