Network node and communication method

Abstract

This network node comprises: a reception unit that receives voice data of a call between a calling terminal and a called terminal; a control unit that, on the basis of the voice data, determines whether there is a possibility that a fraud is being carried out in the call; and a transmission unit that performs notification to the called terminal when the control unit determines that there is a possibility that a fraud is being carried out.

Description

Network node and communication method

[0001] The present invention relates to a network node and a communication method in a communication system.

[0002] In 3GPP (registered trademark) (3rd Generation Partnership Project), studies are progressing on a radio communication system called 5G or NR (New Radio) (hereinafter, this radio communication system is referred to as "5G" or "NR") to achieve further increase in system capacity, further increase in data transmission rate, further reduction in latency in radio sections, and the like. Various radio technologies are being studied for 5G to satisfy the requirement that the latency in radio sections is 1 ms or less while achieving a throughput of 10 Gbps or more. In addition, studies toward 6G are also progressing in 3GPP (registered trademark).

[0003] 3GPP TS 23.228 V19.1.0 (2024-12)

[0004] In recent years, damage caused by fraud using telephone calls has been increasing. As measures to reduce fraud damage, measures to attract people's attention have been implemented, but these are not sufficient as countermeasures. It is desired to reduce fraud damage by means of functions on the network side.

[0005] The present invention has been made in view of the above points, and an object thereof is to provide a technique for reducing fraud damage.

[0006] According to the disclosed technology, there is provided a network node comprising: a receiving unit configured to receive voice data of a call between a calling terminal and a called terminal; a control unit configured to determine a possibility that fraud is being performed in the call based on the voice data; and a transmitting unit configured to send a notification to the called terminal when the control unit determines that there is a possibility that fraud is being performed.

[0007] According to the disclosed technology, a technique for reducing fraud damage is provided.

[0008] This is a diagram illustrating an example of a communication system. This is a diagram illustrating an example of a communication system in a roaming environment. This is a diagram illustrating an example of a system configuration in an embodiment of the present invention. This is a diagram illustrating a processing sequence in an embodiment of the present invention. This is a diagram illustrating an example of a learning flow. This is a diagram illustrating an example of the functional configuration of a network node 100 in an embodiment of the present invention. This is a diagram illustrating an example of the functional configuration of a terminal 20 in an embodiment of the present invention. This is a diagram illustrating an example of the hardware configuration of a network node 100 and a terminal 20 in an embodiment of the present invention. This is a diagram illustrating an example of the configuration of a vehicle 2001 in an embodiment of the present invention.

[0009] Embodiments of the present invention will be described below with reference to the drawings. Note that the embodiments described below are examples, and the embodiments to which the present invention is applied are not limited to those described below.

[0010] In the operation of the wireless communication system according to the embodiment of the present invention, existing technologies are used as appropriate. Such existing technologies include, for example, existing LTE or NR, but are not limited to existing LTE or NR.

[0011] Furthermore, in the embodiments of the present invention, "configuring" wireless parameters, etc., may mean that predetermined values ​​are pre-configured, or that wireless parameters notified from the network node or terminal 20 are configured.

[0012] First, an example of a mobile network configuration in which the network nodes in this embodiment are expected to be installed will be described below, and then the technology related to this embodiment will be described in detail.

[0013] Figure 1 is a diagram illustrating an example of a communication system (specifically, a core network). As shown in Figure 1, the communication system consists of a UE, which is a terminal 20, and multiple network nodes. Hereafter, one network node will be assigned to each function, however, one network node may implement multiple functions, or multiple network nodes may implement one function. Furthermore, the "connection" described below may be a logical connection or a physical connection.

[0014] Furthermore, although Figure 1 shows the 5G core network, all or some of the network nodes in the core network shown in Figure 1 may also be used in 6G. Also, the names of network nodes that have the same functions as in 5G may be different in 6G. In addition, each network node shown in Figure 3, which will be described later, may be included as a component of the core network shown in Figure 1.

[0015] The RAN (Radio Access Network) 10 is a network node having wireless access functionality, which may include a base station, and is connected to the UE 20, AMF (Access and Mobility Management Function), and UPF (User plane function). The AMF is a network node having functions such as terminating the RAN interface, terminating the NAS (Non-Access Stratum), registration management, connection management, reachability management, and mobility management. The UPF is a network node having functions such as a PDU (Protocol Data Unit) session point to the outside, interconnecting with the DN (Data Network), packet routing and forwarding, and user plane QoS (Quality of Service) handling. The UPF and DN constitute a network slice. In the wireless communication network in the embodiment of the present invention, multiple network slices may be constructed.

[0016] AMF is connected to UE20, RAN10, SMF (Session Management function), NSSF (Network Slice Selection Function), NEF (Network Exposure Function), NRF (Network Repository Function), UDM (Unified Data Management), AUSF (Authentication Server Function), PCF (Policy Control Function), and AF (Application Function). AMF, SMF, NSSF, NEF, NRF, UDM, AUSF, PCF, and AF are network nodes that are interconnected via interfaces based on their respective services: Namf, Nsmf, Nnssf, Nnef, Nnrf, Nudm, Nausf, Npcf, and Naf.

[0017] The SMF is a network node with functions such as session management, IP (Internet Protocol) address allocation and management for UE20, DHCP (Dynamic Host Configuration Protocol) functionality, ARP (Address Resolution Protocol) proxy, and roaming functionality. The NEF is a network node with the function of notifying other NFs (Network Functions) of capabilities and events. The NSSF is a network node with functions such as selecting the network slice to which UE20 connects, determining the allowed NSSAI (Network Slice Selection Assistance Information), determining the NSSAI to be set, and determining the AMF set to which UE20 connects. The PCF is a network node with the function of controlling network policy. The AF is a network node with the function of controlling application servers. The NRF is a network node with the function of discovering NF instances that provide services. The UDM is a network node that manages subscriber data and authentication data. The UDM is connected to the UDR (User Data Repository) that holds this data.

[0018] Figure 2 illustrates an example of a communication system in a roaming environment. SEPP (Security Edge Protection Proxy) is an opaque proxy that filters control plane messages between PLMNs (Public Land Mobile Networks). vSEPP shown in Figure 2 is SEPP in a visited network, and hSEPP is SEPP in a home network.

[0019] As shown in Figure 2, the UE is in a roaming environment connected to the RAN and AMF in the Visited PLMN. The Visited PLMN and Home PLMN are connected via vSEPP and hSEPP. The UE can communicate with the UDM of the Home PLMN, for example, via the AMF of the Visited PLMN.

[0020] (System Configuration) This embodiment describes a technology that reduces fraud damage using network-side functions.

[0021] Figure 3 shows an example of the system configuration in this embodiment. As shown in Figure 3, the system according to this embodiment has an IMS (IP Multimedia Subsystem) 40, an MF (Media Function) 50, a DCAS (Data Channel Application Server) 60, a DCSF (Data Channel Signaling Function) 65, terminals 20A and 20B, which are connected to a core network 30. The IMS 40, MF 50, DCAS 60, and DCSF 65 may be considered as devices within the core network 30. The IMS 40, MF 50, DCAS 60, and DCSF 65 each include the functions disclosed in Non-Patent Document 1 (TS 23.228).

[0022] The core network 30 is, for example, the core network shown in Figure 1. The IMS 40 is a group of devices that control voice calls and consists of P-CSCF (Proxy-Call / Session Control Function), S-CSCF (Serving-Call / Session Control Function), IMS AS (Application Server), etc.

[0023] The MF50 operates as the media plane function for the IMS data channel, terminating the IMS data channel from the UE (Terminal) and establishing further IMS data channels to the DCAS60 or another media function. In addition to relaying the payload of the IMS data channel, the MF50 can also process the content of the media flow. For example, the MF50 can perform video rendering, audio-to-text conversion, image recognition, and more.

[0024] DCAS60 is an application server that utilizes the functions provided by the network to deliver service logic to users.

[0025] DCSF65 functions as the control plane for the IMS data channel. DCSF65 subscribes to IMS session events from IMS AS and instructs MF50 accordingly to perform media plane processing, i.e., IMS DC (Data Channel) transfer and media processing. DCSF65 also exposes APIs related to the IMS data channel and media processing to DCAS60. These APIs allow application servers to execute service logic.

[0026] Terminals 20A and 20B are both smartphones or other devices used by the user. In this embodiment, terminal 20A is a terminal suspected of making an outgoing fraud call, and terminal 20B is a terminal receiving a call.

[0027] In this embodiment, the DCAS 60 holds a trained AI model (which may also be called a machine learning model) for determining whether fraud is occurring from the call audio data. This AI model is, for example, a neural network model. Alternatively, this AI model may be a Large Language Model (LLM).

[0028] Alternatively, the AI ​​model may be located outside of the DCAS 60. In this case, the DCAS 60 transmits input data to the AI ​​model and receives output data (inference results) output from the AI ​​model.

[0029] (Service Flow) Referring to Figure 4, the service flow (processing flow) for determining whether a call is a fraudulent call based on the content of the call will be explained.

[0030] <S1 (Step 1)> SIP negotiation is performed between terminal 20A and terminal 20B, resulting in an incoming voice call from terminal 20A to terminal 20B.

[0031] <S2> By using the IMS Bootstrap Data Channel (BDC), a list of DC (Data Channel) applications is provided from IMS40 (or DCSF65, or MF50) to terminal 20B. The fraud detection application (hereinafter referred to as the fraud detection app) is downloaded from IMS40 (or DCSF65, or MF50) to terminal 20B either automatically or triggered by the user of terminal 20B. The procedure disclosed in TS 23.228 AC.7.1 may be used for the application download procedure in S2.

[0032] <S3> A voice call is made between terminal 20A and terminal 20B. Specifically, voice communication is performed using RTP.

[0033] <S4> During a voice call, the user of terminal 20B becomes suspicious of the content of the call and launches a fraud detection app.

[0034] <S5, S6> In S5, terminal 20B sends an instruction to DCAS 60 to establish an application data channel (ADC) for the fraud detection application. In S6, the ADC is established between terminal 20B and DCAS 60 via MF 50. The procedure disclosed in TS 23.228 AC.7.2.2 may be used as the procedure in S5 and S6.

[0035] <S7> IMS40 notifies DCSF65 that the ADC has been used. DCSF65 uses the Nimsas_MediaControl service to instruct MF50 via IMS40 to anchor the voice media for the call between terminal 20A and terminal 20B. Note that the procedure disclosed in TS 23.228 AC.9.3.2 may be used as the procedure for S7. Also, "anchor" may be replaced with "terminate".

[0036] As a result of the processing in S7, the call audio data between terminal 20A and terminal 20B can be shared between MF50 and DCAS60 using ADC. For example, the call audio data between terminal 20A and terminal 20B can be transmitted from MF50 to DCAS60, thereby allowing the call audio data to be shared between MF50 and DCAS60.

[0037] <S8> DCAS60 uses an AI model to determine whether or not fraud is taking place based on the content of the call between terminal 20A and terminal 20B.

[0038] For example, DCAS60 inputs voice data into an AI model, which then outputs either "Possible fraudulent call" or "Not likely to be a fraudulent call."

[0039] Furthermore, the AI ​​model may output information indicating the likelihood of a fraudulent call. This information may be, for example, a percentage between 0% and 100%, or it may be information indicating a level such as "high, medium, low." The AI ​​model may, for example, output information indicating a high likelihood of a fraudulent call when it detects suspicious words or sentences that are suspected of being fraudulent.

[0040] The DCAS60 determines whether or not a call is likely to be a scam based on the output from the AI ​​model. For example, the DCAS60 determines that a call is likely to be a scam if the output from the AI ​​model is "possible scam call," "50% or more probability of being a scam call," or "high or medium probability of being a scam call."

[0041] The following steps S9 and "S10a, S10b" may both be performed, or either one of them may be performed.

[0042] <S9> If the DCAS 60 determines that there is a possibility of a fraudulent call, it sends a notification (warning) to the terminal 20B indicating that a fraudulent call is being made. The notification indicating that a fraudulent call is being made may include a warning level (e.g., high, medium, low). The notification may also be an alert sound (alert tone or announcement). The notification may also be a signal that causes the terminal 20B to vibrate.

[0043] <S10a, S10b> In S10a, when DCAS 60 determines that a call is likely to be a fraudulent call, it transmits a notification (warning) indicating that a fraudulent call is in progress to MF 50. The notification indicating that a fraudulent call is in progress may include a warning level (e.g., high, medium, low).

[0044] In S10b, MF 50 transmits the notification (warning) received from DCAS 60 to the terminal 20B. The notification may be a sound indicating an alert (an alert tone or an announcement). The notification may also be a signal that causes the terminal 20B to vibrate.

[0045] The above is the description of steps S1 to S10b. In the above description, it is set that DCAS 60 is provided with an AI model and determines whether there is a fraudulent call using the AI model; however, instead of or in addition to this arrangement, MF 50 may be provided with an AI model and determine whether there is a fraudulent call using the AI model.

[0046] Even when MF 50 is provided with the AI model, the method for determining whether a call is a fraudulent call is the same as when DCAS 60 is provided with the AI model. When MF 50 determines that a call is likely to be a fraudulent call, it transmits a notification (warning) indicating that a fraudulent call is in progress to the terminal 20B, similarly to S9 or S10b.

[0047] In addition, in the present embodiment, it is determined whether a call is a fraudulent call; however, by changing the learning content of the AI model, it is also possible to make determinations other than whether a call is fraudulent.

[0048] (Example learning flow) Any method may be used as the learning method for the AI model used in the above processing; as an example, learning can be performed according to the flow shown in FIG. 5. In the example of FIG. 5, DCAS 60 holds the AI model to be learned, and DCAS 60 performs learning of the AI model.

[0049] In S21, learning data is transmitted from the terminal 20B to DCAS 60. The learning data includes information indicating call content (voice data) and information indicating whether the call is a fraudulent call (correct answer information).

[0050] In S22, DCAS60 inputs voice data to the AI ​​model, and the AI ​​model outputs information indicating whether or not it is a fraudulent call. DCAS60 trains the AI ​​model so that the information output by the AI ​​model matches the correct answer. For example, DCAS60 trains the AI ​​model by updating its parameters using backpropagation.

[0051] Alternatively, an AI model may be trained to determine that a call is fraudulent when certain words used in fraudulent activities appear a predetermined number of times.

[0052] (Effects of the Embodiment) According to the technology of this embodiment, the user making the call can know whether or not it is a fraudulent call, making it possible to reduce fraud damage.

[0053] (Device Configuration) Next, an example of the functional configuration of the network node 100 and terminal 20 that perform the processing and operations described above will be explained. The network node 100 corresponds to DCAS60 and MF50. Terminal 20 corresponds to terminal 20B.

[0054] <Network Node 100> Figure 6 shows an example of the functional configuration of network node 100.

[0055] As shown in Figure 6, the network node 100 includes a transmitting unit 110, a receiving unit 120, a setting unit 130, and a control unit 140. The functional configuration shown in Figure 6 is merely an example. Any functional classification and functional unit names are acceptable as long as they enable the operation according to the embodiment of the present invention.

[0056] The transmitting unit 110 includes the function of generating a signal to be transmitted to the terminal 20 or other network node and transmitting the signal by wire or wireless. The receiving unit 120 includes the function of receiving various signals transmitted from the terminal 20 or other network node and obtaining information from the received signal, for example, information of a higher layer. A communication unit including the transmitting unit 110 and the receiving unit 120 may be configured.

[0057] The setting unit 130 includes a storage unit or memory device. The setting unit 130 stores pre-configured setting information and various setting information to be transmitted to the terminal 20 in the memory device and reads it from the memory device as needed. The control unit 140 controls the network node 100. The control unit 140 also holds an AI model and makes decisions using the AI ​​model. The signal transmission function in the control unit 140 may be included in the transmission unit 110, and the signal reception function in the control unit 140 may be included in the reception unit 120. The transmission unit 110 and the reception unit 120 may also be called a transmitter and a receiver, respectively.

[0058] <Terminal 20> Figure 7 is a diagram showing an example of the functional configuration of terminal 20. As shown in Figure 7, terminal 20 has a transmitting unit 210, a receiving unit 220, a setting unit 230, and a control unit 240. The functional configuration shown in Figure 8 is merely an example. Any functional classification and functional unit names are acceptable as long as they enable the operation according to the embodiment of the present invention.

[0059] The transmitting unit 210 creates a transmission signal from the transmission data and transmits the transmission signal wirelessly. The receiving unit 220 wirelessly receives various signals and obtains signals from higher layers from the received physical layer signals. The receiving unit 220 also has the function of receiving NR-PSS, NR-SSS, NR-PBCH, DL / UL control signals or reference signals transmitted from network nodes. A communication unit including the transmitting unit 210 and the receiving unit 220 may be configured.

[0060] The setting unit 230 stores various setting information received from network nodes by the receiving unit 220 in a storage device and reads it from the storage device as needed. The setting unit 230 also stores pre-configured setting information.

[0061] The control unit 240 controls the terminal 20. The signal transmission function of the control unit 240 may be included in the transmission unit 210, and the signal reception function of the control unit 240 may be included in the reception unit 220. The transmission unit 210 and the reception unit 220 may also be called the transmitter and receiver, respectively.

[0062] (Hardware Configuration) The block diagrams (Figures 6 and 7) used in the description of the above embodiments show functional units. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method of realizing each functional block is not particularly limited. That is, each functional block may be realized using one device that is physically or logically coupled, or it may be realized using two or more physically or logically separated devices that are directly or indirectly connected (for example, using wired or wireless connections). A functional block may be realized by combining the one device or the multiple devices with software.

[0063] Functions include, but are not limited to, judgment, decision, determination, calculation, calculation, processing, derivation, investigation, exploration, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, assumption, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating (mapping), and assigning. For example, a functional block (configuration part) that enables transmission is called a transmitting unit or transmitter. In all cases, as mentioned above, the method of implementation is not particularly limited.

[0064] For example, the network node 100 and terminal 20 in one embodiment of the present disclosure may function as computers that process the communication method of the present disclosure. Figure 8 is a diagram showing an example of the hardware configuration of the network node 100 and terminal 20 according to one embodiment of the present disclosure. The network node 100 and terminal 20 described above may be physically configured as computer devices including a processor 1001, a storage device 1002, an auxiliary storage device 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, and the like.

[0065] In the following explanation, the term "device" can be replaced with "circuit," "device," "unit," etc. The hardware configuration of the network node 100 and the terminal 20 may include one or more of the devices shown in the figure, or it may be configured to omit some of the devices.

[0066] Each function in the network node 100 and terminal 20 is realized by loading predetermined software (programs) onto hardware such as the processor 1001 and storage device 1002, which allows the processor 1001 to perform calculations, control communication by the communication device 1004, and control at least one of data reading and writing in the storage device 1002 and auxiliary storage device 1003.

[0067] The processor 1001 controls the entire computer, for example, by running an operating system. The processor 1001 may consist of a central processing unit (CPU) that includes interfaces with peripheral devices, control devices, arithmetic units, registers, etc. For example, the control unit 140, control unit 240, etc., described above may be implemented by the processor 1001.

[0068] Furthermore, the processor 1001 reads programs (program code), software modules, or data from at least one of the auxiliary storage device 1003 and the communication device 1004 into the storage device 1002, and executes various processes accordingly. The program used is one that causes the computer to execute at least a part of the operations described in the above embodiment. For example, the control unit 140 of the network node 100 shown in Figure 6 may be implemented by a control program stored in the storage device 1002 and operated by the processor 1001. Also, for example, the control unit 240 of the terminal 20 shown in Figure 7 may be implemented by a control program stored in the storage device 1002 and operated by the processor 1001. Although the above-described processes have been explained as being executed by one processor 1001, they may be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. The program may also be transmitted from the network via a telecommunications line.

[0069] The storage device 1002 is a computer-readable recording medium and may consist of at least one of the following: ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), RAM (Random Access Memory), etc. The storage device 1002 may also be called a register, cache, main memory, etc. The storage device 1002 can store executable programs (program code), software modules, etc., for implementing a communication method according to one embodiment of the present disclosure.

[0070] The auxiliary storage device 1003 is a computer-readable recording medium and may consist of at least one of the following: an optical disc such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital multipurpose disk, a Blu-ray® disk), a smart card, flash memory (e.g., a card, a stick, a key drive), a floppy® disk, a magnetic strip, etc. The above-mentioned storage medium may also be a database, server, or other suitable medium that includes at least one of the storage device 1002 and the auxiliary storage device 1003.

[0071] The communication device 1004 is hardware (transmitting / receiving device) for communicating between computers via at least one of a wired network and a wireless network, and is also referred to as a network device, network controller, network card, communication module, etc. The communication device 1004 may be configured to include, for example, a high-frequency switch, duplexer, filter, frequency synthesizer, etc., in order to implement at least one of frequency division duplex (FDD) and time division duplex (TDD). For example, the transmitting and receiving antenna, amplifier section, transmitting and receiving section, transmission path interface, etc., may be implemented by the communication device 1004. The transmitting and receiving section may be implemented in a physically or logically separated manner, with a transmitting section and a receiving section.

[0072] The input device 1005 is an input device that accepts input from an external source (e.g., a keyboard, mouse, microphone, switch, button, sensor, etc.). The output device 1006 is an output device that outputs to an external source (e.g., a display, speaker, LED lamp, etc.). The input device 1005 and the output device 1006 may be configured as an integrated unit (e.g., a touch panel).

[0073] Furthermore, each device, such as the processor 1001 and the storage device 1002, is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or different buses may be configured for each device.

[0074] Furthermore, the network node 100 and the terminal 20 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), and an FPGA (Field Programmable Gate Array), and some or all of each functional block may be realized by such hardware. For example, the processor 1001 may be implemented using at least one of these hardware components.

[0075] Figure 9 shows an example of the configuration of vehicle 2001. As shown in Figure 9, vehicle 2001 includes a drive unit 2002, a steering unit 2003, an accelerator pedal 2004, a brake pedal 2005, a shift lever 2006, front wheels 2007, rear wheels 2008, an axle 2009, an electronic control unit 2010, various sensors 2021 to 2029, an information service unit 2012, and a communication module 2013. Each aspect / embodiment described in this disclosure may be applied to a communication device mounted on vehicle 2001, for example, to the communication module 2013. For example, a network node 100 or a terminal 20 may be included in the communication module 2013.

[0076] The drive unit 2002 consists of, for example, an engine, a motor, or a hybrid of an engine and a motor. The steering unit 2003 includes at least a steering wheel (also called a handle) and is configured to steer at least one of the front wheels and the rear wheels based on the operation of the steering wheel, which is operated by the user.

[0077] The electronic control unit 2010 consists of a microprocessor 2031, memory (ROM, RAM) 2032, and communication ports (IO ports) 2033. Signals from various sensors 2021 to 2029 installed in the vehicle 2001 are input to the electronic control unit 2010. The electronic control unit 2010 may also be called an ECU (Electronic Control Unit).

[0078] Signals from various sensors 2021 to 2029 include current signals from current sensor 2021 for sensing motor current, front and rear wheel rotation speed signals acquired by rotation speed sensor 2022, front and rear wheel air pressure signals acquired by air pressure sensor 2023, vehicle speed signals acquired by vehicle speed sensor 2024, acceleration signals acquired by acceleration sensor 2025, accelerator pedal depression signals acquired by accelerator pedal sensor 2029, brake pedal depression signals acquired by brake pedal sensor 2026, shift lever operation signals acquired by shift lever sensor 2027, and detection signals acquired by object detection sensor 2028 for detecting obstacles, vehicles, pedestrians, etc.

[0079] The Information Service Unit 2012 consists of various devices for providing (outputting) various types of information such as driving information, traffic information, and entertainment information, including a car navigation system, audio system, speakers, television, and radio, and one or more ECUs that control these devices. The Information Service Unit 2012 uses information acquired from external devices via a communication module 2013, etc., to provide various multimedia information and multimedia services to the occupants of the vehicle 2001. The Information Service Unit 2012 may include input devices that accept input from the outside (e.g., keyboard, mouse, microphone, switch, button, sensor, touch panel, etc.) and output devices that perform output to the outside (e.g., display, speaker, LED lamp, touch panel, etc.).

[0080] The driver assistance system unit 2030 consists of various devices that provide functions to prevent accidents or reduce the driver's workload, such as millimeter-wave radar, LiDAR (Light Detection and Ranging), cameras, positioning locators (e.g., GNSS), map information (e.g., high-definition (HD) maps, autonomous vehicle (AV) maps), gyro systems (e.g., IMU (Inertial Measurement Unit), INS (Inertial Navigation System)), AI (Artificial Intelligence) chips, and AI processors, as well as one or more ECUs that control these devices. The driver assistance system unit 2030 also transmits and receives various information via the communication module 2013 to realize driver assistance functions or autonomous driving functions.

[0081] The communication module 2013 can communicate with the microprocessor 2031 and components of the vehicle 2001 via its communication port. For example, the communication module 2013 sends and receives data via the communication port 2033 between the drive unit 2002, steering unit 2003, accelerator pedal 2004, brake pedal 2005, shift lever 2006, front wheels 2007, rear wheels 2008, axle 2009, the microprocessor 2031 and memory (ROM, RAM) 2032 in the electronic control unit 2010, and sensors 2021-29 provided in the vehicle 2001.

[0082] The communication module 2013 is a communication device that can be controlled by the microprocessor 2031 of the electronic control unit 2010 and can communicate with external devices. For example, it can send and receive various types of information to and from external devices via wireless communication. The communication module 2013 may be located either inside or outside the electronic control unit 2010. The external device may be, for example, a base station, terminal, network node, etc.

[0083] The communication module 2013 may transmit at least one of the following to an external device via wireless communication: signals from the various sensors 2021-2028 input to the electronic control unit 2010, information obtained based on said signals, and information based on input from an external source (user) obtained via the information service unit 2012. The electronic control unit 2010, the various sensors 2021-2028, the information service unit 2012, etc., may also be called input units that accept input.

[0084] The communication module 2013 receives various information (traffic information, signal information, inter-vehicle information, etc.) transmitted from an external device and displays it on the information service unit 2012 provided in the vehicle 2001. The information service unit 2012 may also be called an output unit, which outputs information (for example, outputs information to devices such as displays and speakers based on the PDSCH (or data / information decoded from the PDSCH) received by the communication module 2013). The communication module 2013 also stores the various information received from the external device in a memory 2032 that can be used by the microprocessor 2031. Based on the information stored in the memory 2032, the microprocessor 2031 may control the drive unit 2002, steering unit 2003, accelerator pedal 2004, brake pedal 2005, shift lever 2006, front wheels 2007, rear wheels 2008, axles 2009, sensors 2021-2029, etc., provided in the vehicle 2001.

[0085] Furthermore, if the communication module 2013 includes a network node 100 (or terminal 20), the communication module 2013 can perform the operations of the aforementioned network node 100 (or terminal 20).

[0086] This specification discloses at least the configurations described in the following appendix.

[0087] <Notes> (Note 1) A network node comprising: a receiving unit that receives voice data of a call between a calling terminal and a receiving terminal; a control unit that determines the possibility of fraud in the call based on the voice data; and a transmitting unit that sends a notification to the receiving terminal when the control unit determines that there is a possibility of fraud. (Note 2) The network node according to Note 1, wherein the control unit makes the determination using a trained AI model. (Note 3) The network node according to Note 1, wherein the receiving unit receives the voice data from a media function using a data channel. (Note 4) The network node according to Note 3, wherein the network node establishes the data channel based on instructions from an application launched on the receiving terminal. (Note 5) A communication method executed by a network node, comprising: a step of receiving voice data of a call between a calling terminal and a receiving terminal; a step of determining the possibility of fraud in the call based on the voice data; and a step of sending a notification to the receiving terminal when the determination step determines that there is a possibility of fraud.

[0088] The network nodes mentioned above are, for example, DCAS60 or MF50. Any of the appendices 1 to 5 provide technology to reduce fraud losses. According to appendice 2, decisions can be made using an AI model, allowing for decisions based on various specified conditions. According to appendices 3 and 4, control using an IMS data channel becomes possible, for example.

[0089] (Supplement to Embodiments) Embodiments of the present invention have been described above, but the disclosed invention is not limited to such embodiments, and those skilled in the art will understand various modifications, alterations, alternatives, substitutions, etc. Specific numerical examples have been used to facilitate understanding of the invention, but unless otherwise specified, these numerical values ​​are merely examples, and any appropriate values ​​may be used. The division of items in the above description is not essential to the present invention, and matters described in two or more items may be used in combination as necessary, and matters described in one item may be applied to matters described in another item (as long as they do not contradict each other). The boundaries of functional units or processing units in the functional block diagram do not necessarily correspond to the boundaries of physical parts. The operation of multiple functional units may be physically performed by one part, or the operation of one functional unit may be physically performed by multiple parts. The processing procedures described in the embodiments may be rearranged as long as they do not contradict each other. For the convenience of explaining the processing, the network node 100 and terminal 20 have been described using functional block diagrams, but such devices may be realized in hardware, software, or a combination thereof. The software operated by the processor of the EES 30 according to an embodiment of the present invention and the software operated by the processor of the terminal 20 according to an embodiment of the present invention may be stored in any suitable storage medium such as random access memory (RAM), flash memory, read-only memory (ROM), EPROM, EEPROM, register, hard disk (HDD), removable disk, CD-ROM, database, server, or other appropriate storage medium.

[0090] Furthermore, notification of information is not limited to the embodiments / models described herein and may be carried out by other means. For example, notification of information may be carried out by physical layer signaling (e.g., DCI (Downlink Control Information), UCI (Uplink Control Information)), upper layer signaling (e.g., RRC (Radio Resource Control) signaling, MAC (Medium Access Control) signaling), broadcast information (MIB (Master Information Block), SIB (System Information Block)), other signals, or combinations thereof. Also, RRC signaling may be called RRC messages, and may be, for example, RRC Connection Setup messages, RRC Connection Reconfiguration messages, etc.

[0091] Each aspect / embodiment described in this disclosure refers to LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), 6th generation mobile communication system (6G), xth generation mobile communication system (xG) (xG (where x is, for example, an integer or decimal)), FRA (Future Radio Access), NR (new Radio), New radio access (NX), Future generation radio access (FX), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20 may apply to at least one system utilizing UWB (Ultra-WideBand), Bluetooth®, or other appropriate systems, and to next-generation systems extended, modified, created, or defined based thereon. Alternatively, multiple systems may be applied in combination (e.g., a combination of at least one of LTE and LTE-A with 5G).

[0092] The processing procedures, sequences, flowcharts, etc., of each aspect / embodiment described herein may be reordered, provided they are consistent with each other. For example, the methods described herein present various step elements in an exemplary order and are not limited to that specific order.

[0093] In this specification, specific operations performed by the base station 10 ((R)AN10) may, in some cases, be performed by its upper node. In a network consisting of one or more network nodes having a base station 10, it is clear that various operations performed for communication with the terminal 20 can be performed by the base station 10 and at least one of the other network nodes (for example, an MME or S-GW, but not limited to these). Although the above example illustrates the case where there is one other network node besides the base station 10, the other network node may be a combination of multiple other network nodes (for example, an MME and an S-GW).

[0094] The information or signals described in this disclosure may be output from a higher layer (or lower layer) to a lower layer (or higher layer). They may also be input and output via multiple network nodes.

[0095] Input and output information may be stored in a specific location (e.g., memory) or managed using a management table. Input and output information may be overwritten, updated, or appended to. Output information may be deleted. Input information may be transmitted to other devices.

[0096] The determination in this disclosure may be made by a value represented by one bit (0 or 1), by a Boolean value (true or false), or by a numerical comparison (for example, a comparison with a predetermined value).

[0097] Software should be broadly interpreted to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, execution threads, procedures, functions, and so on, whether they are called software, firmware, middleware, microcode, hardware description languages, or by any other name.

[0098] Furthermore, software, instructions, information, etc., may be transmitted and received via a transmission medium. For example, if software is transmitted from a website, server, or other remote source using at least one of wired technology (such as coaxial cable, fiber optic cable, twisted pair, or digital subscriber line (DSL)) and wireless technology (such as infrared or microwave), then at least one of these wired and wireless technologies is included in the definition of a transmission medium.

[0099] The information, signals, etc. described in this disclosure may be represented using any of the various different techniques. For example, the data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0100] In addition, terms used in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings. For example, at least one of the channel and symbol may be a signal (signaling). Also, a signal may be a message. Furthermore, a component carrier (CC) may be called a carrier frequency, cell, frequency carrier, etc.

[0101] The terms “system” and “network” as used in this disclosure are interchangeable.

[0102] Furthermore, the information, parameters, etc., described in this disclosure may be expressed using absolute values, relative values ​​from a given value, or corresponding other information. For example, wireless resources may be indicated by an index.

[0103] The names used for the parameters described above are not restrictive in any way. Furthermore, the formulas and other expressions using these parameters may differ from those expressly disclosed in this disclosure. Various channels (e.g., PUCCH, PDCCH, etc.) and information elements can be identified by any suitable name, and therefore, the various names assigned to these various channels and information elements are not restrictive in any way.

[0104] In this disclosure, terms such as "Base Station (BS)", "wireless base station", "base station equipment", "fixed station", "NodeB", "eNodeB (eNB)", "gNodeB (gNB)", "access point", "transmission point", "reception point", "transmission / reception point", "cell", "sector", "cell group", "carrier", and "component carrier" may be used interchangeably. Base stations may also be referred to by terms such as macrocell, small cell, femtocell, and picocell.

[0105] A base station can accommodate one or more (e.g., three) cells. If a base station accommodates multiple cells, the entire coverage area of ​​the base station can be divided into multiple smaller areas, each of which may also be provided with communication services by a base station subsystem (e.g., a Remote Radio Head (RRH)). The terms “cell” or “sector” refer to part or all of the coverage area of ​​at least one of the base station and / or base station subsystems that provide communication services in that coverage.

[0106] In this disclosure, the transmission of information by a base station to a terminal may be interpreted as the base station instructing the terminal to perform control or operation based on the information.

[0107] In this disclosure, terms such as "Mobile Station (MS)," "user terminal," "User Equipment (UE)," and "terminal" may be used interchangeably.

[0108] A mobile station may also be referred to by those skilled in the art as a subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, or several other appropriate terms.

[0109] At least one of the network node 100 and terminal 20 may be called a transmitter, receiver, communication device, etc. At least one of the network node 100 and terminal 20 may be a device mounted on a mobile body, the mobile body itself, etc. The mobile body refers to a movable object, and its speed of movement is arbitrary. This also includes the case when the mobile body is stationary. The mobile body includes, but is not limited to, vehicles, transport vehicles, automobiles, motorcycles, bicycles, connected cars, excavators, bulldozers, wheel loaders, dump trucks, forklifts, trains, buses, handcarts, rickshaws, ships and other watercraft, airplanes, rockets, satellites, drones (registered trademark), multicopters, quadcopters, balloons, and items mounted on them. Furthermore, the mobile body may be a mobile body that moves autonomously based on operation commands. The mobile entity may be a vehicle (e.g., a car, an airplane), an unmanned mobile entity (e.g., a drone, an autonomous vehicle), or a robot (manned or unmanned). At least one of the network node 100 and the terminal 20 may include devices that do not necessarily move during communication. For example, at least one of the base station and the mobile station may be an IoT (Internet of Things) device such as a sensor.

[0110] Furthermore, the term "base station" in this disclosure may be interpreted as "user terminal." For example, the various aspects / embodiments of this disclosure may be applied to a configuration in which communication between a base station and a user terminal is replaced with communication between multiple terminals 20 (which may be called, for example, D2D (Device-to-Device), V2X (Vehicle-to-Everything)). In this case, the terminals 20 may have the functions that the base station 10 has. Also, terms such as "uplink" and "downlink" may be interpreted as terms corresponding to inter-terminal communication (for example, "side"). For example, uplink channel, downlink channel, etc., may be interpreted as side channel.

[0111] Similarly, the term "user terminal" in this disclosure may be replaced with "base station." In this case, the base station may be configured to have the same functions as the user terminal described above.

[0112] As used in this disclosure, the terms “determining” and “determining” may encompass a wide variety of actions. “Determining” may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, or inquiring (e.g., searching in a table, database, or other data structure), or ascertaining. “Determining” may also include receiving (e.g., receiving information), transmitting (e.g., sending information), inputting, outputting, or accessing (e.g., accessing data in memory). Furthermore, "judgment" and "decision" can include considering something as having been "judged" or "decided" after resolving, selecting, choosing, establishing, comparing, etc. In other words, "judgment" and "decision" can include considering something as having been "judged" or "decided" after some action. Also, "judgment (decision)" can be reinterpreted as "assuming," "expecting," or "considering."

[0113] The terms “connected,” “coupled,” or any variation thereof, mean any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are “connected” or “coupled” with each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, “connection” may be reinterpreted as “access.” As used in this disclosure, two elements may be considered to be “connected” or “coupled” with each other using at least one of one or more wires, cables, and printed electrical connections, and, in some non-limiting and non-exclusive examples, electromagnetic energy having wavelengths in the radio frequency domain, microwave domain, and optical (both visible and invisible) domain.

[0114] The reference signal can also be abbreviated as RS (Reference Signal), and may be called a pilot depending on the applicable standard.

[0115] In this disclosure, the phrase "based on" does not mean "based solely on" unless otherwise specified. In other words, the phrase "based on" means both "based solely on" and "based at least on."

[0116] Any reference to elements using the designations “first,” “second,” etc., as used in this disclosure does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient way to distinguish between two or more elements. Accordingly, references to the first and second elements do not imply that only two elements may be employed, or that the first element must precede the second element in any way.

[0117] In the configuration of each of the above devices, "means" may be replaced with "part," "circuit," "device," etc.

[0118] Where the terms “include,” “including,” and variations thereof are used in this disclosure, these terms are intended to be inclusive, as is the term “comprising.” Furthermore, the term “or” as used in this disclosure is not intended to mean exclusive OR.

[0119] In this disclosure, if articles are added through translation, such as a, an, and the in English, this disclosure may include the fact that the noun following these articles is plural.

[0120] In this disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "combine" may be interpreted similarly to "different."

[0121] Each aspect / embodiment described in this disclosure may be used individually, in combination, or switched between as needed during implementation. Furthermore, notification of specific information (e.g., notification that "X is") is not limited to explicit notification, but may also be implicit (e.g., by not providing such notification).

[0122] Although the present disclosure has been described in detail above, it will be clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure may be implemented in modified and altered forms without departing from the intent and scope of the present disclosure as defined by the claims. Accordingly, the descriptions in the present disclosure are for illustrative purposes only and are not intended to be restrictive in any way.

[0123] 10 Base station ((R)AN) 20 Terminal (UE) 30 Core network 40 IMS 50 MF 60 DCAS 65 DCSF 100 Network node 110 Transmitter 120 Receiver 130 Setting unit 140 Control unit 210 Transmitter 220 Receiver 230 Setting unit 240 Control unit 1001 Processor 1002 Storage device 1003 Auxiliary storage device 1004 Communication device 1005 Input device 1006 Output device 2001 Vehicle 2002 Drive unit 2003 Steering unit 2004 Accelerator pedal 2005 Brake pedal 2006 Shift lever 2007 Front wheel 2008 Rear wheel 2009 Axle 2010 Electronic control unit 2012 Information service unit 2013 Communication Module 2021 Current Sensor 2022 Rotation Speed ​​Sensor 2023 Air Pressure Sensor 2024 Vehicle Speed ​​Sensor 2025 Acceleration Sensor 2026 Brake Pedal Sensor 2027 Shift Lever Sensor 2028 Object Detection Sensor 2029 Accelerator Pedal Sensor 2030 Driver Assistance System Unit 2031 Microprocessor 2032 Memory (ROM, RAM) 2033 Communication Port (IO Port)

Claims

1. A network node comprising: a receiving unit that receives voice data of a call between a calling terminal and a receiving terminal; a control unit that determines, based on the voice data, whether fraud is occurring in the call; and a transmitting unit that sends a notification to the receiving terminal when the control unit determines that fraud is likely to be occurring.

2. The network node according to claim 1, wherein the control unit performs the determination using a trained AI model.

3. The network node according to claim 1, wherein the receiving unit receives the audio data from the media function using a data channel.

4. The network node according to claim 3, wherein the network node establishes the data channel in response to instructions from an application launched on the incoming terminal.

5. A communication method performed by a network node, comprising: receiving audio data of a call between an outgoing terminal and an incoming terminal; determining, based on the audio data, whether fraud is likely to be occurring in the call; and, if the determination step determines that fraud is likely to be occurring, sending a notification to the incoming terminal.

Images