Call Forwarding Activity Analysis for Fraud Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Call forwarding technologies are misused for improper purposes such as obfuscating call origination information, bypassing network controls, and engaging in fraudulent billing, making it difficult for network operators to detect and manage such activities effectively.
Innovation Solution
Implementing a system to analyze call forwarding activity, including multiple chained, sequential, and parallel forwarding, to detect and identify improper call forwarding by analyzing call information and determining forwarding characteristics that deviate from established baselines or thresholds, enabling network operators to take corrective actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If call forwarding is enabled to allow users to redirect calls to another destination, then call routing flexibility is improved, but network security and control are worsened due to misuse for obfuscating call origination information and bypassing network controls
Solution Approach 1:
The patent implements a monitoring system that continuously observes call forwarding activity and provides feedback to the network operator. The system analyzes call detail records to detect patterns indicating misuse, such as calls being forwarded to unallocated numbers or exhibiting abnormal forwarding behavior. This feedback mechanism enables the network operator to identify and respond to security threats while maintaining legitimate call forwarding functionality.
Solution Approach 2:
The patent introduces an intermediary monitoring system positioned between the call forwarding mechanism and the network core. This intermediary analyzes call detail records and forwarding activity without disrupting legitimate call routing. It acts as a mediator that allows call forwarding to operate while simultaneously detecting and reporting suspicious patterns to the network operator for appropriate action.
2Object-affected harmful factors
If call forwarding activity is monitored and analyzed to detect improper usage, then network security is improved, but system complexity increases due to the need for analyzing call information and determining forwarding characteristics
Solution Approach 1:
The patent extracts only the necessary call information elements required for detecting improper call forwarding from the complete call detail records. Instead of analyzing all call data, the system focuses on specific fields such as forwarding indicators, destination number patterns, and call routing information. This extraction approach reduces processing complexity while maintaining effective security monitoring.
Solution Approach 2:
The monitoring system is integrated into the existing network infrastructure and utilizes already-collected call detail records for analysis. Rather than requiring separate dedicated monitoring equipment, the system leverages existing network elements and data sources to perform security analysis, thereby reducing overall system complexity while maintaining security monitoring capabilities.
3Measurement precision
If multiple chained and parallel forwarding activities are analyzed to detect fraud, then detection accuracy is improved, but processing time and resource consumption increase
Solution Approach 1:
The patent establishes baseline call forwarding patterns and characteristics in advance through analysis of historical call detail records. By pre-processing and storing normal forwarding behavior patterns, the system can quickly compare real-time call activity against these established baselines. This preliminary action enables rapid detection of deviations indicating fraud without requiring extensive real-time processing of complex chained and parallel forwarding scenarios.
Data Source
AI summary
A device may receive, from a network device, call information associated with a call. The call may be from a calling party device. The call may appear to be intended for a destination device. The call information may be received, from the network device, based on the network device having routed the call. The device may determine, based on the call information, that the call appears to have been forwarded to a called party device that is different from the destination device. The device may determine, based on the call information, a forwarding characteristic for the call. The device may determine that the forwarding characteristic satisfies a criterion. The device may send an output message based on the forwarding characteristic satisfying the criterion to support responding to call forwarding activity that has the forwarding characteristic.