Detecting Cloned Identifiers in Communication Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication systems, such as GSM networks, are ineffective in preventing mobile telephone theft and IMSI cloning due to the inability to detect cloned identifiers before fraudulent use occurs, leading to increased criminal activity and inconvenience for both consumers and network operators.
Innovation Solution
A method and apparatus in a communication system that identifies cloned identifiers by receiving and analyzing first and second identifiers associated with a communication device, utilizing a connection history database and network elements to determine cloning, thereby preventing fraudulent use before connection is established.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If EIR is used to classify IMEI numbers with white list, black list, and grey list, then mobile telephone theft can be reduced, but cloned IMEI numbers can still bypass the system by assuming the identity of non-blacklisted devices
Solution Approach 1:
The system performs preliminary actions by storing the original pairing of IMEI and IMSI identifiers in a database before any cloning can occur. When a device connects, the system retrieves the stored original pairing and compares it with the current identifiers, enabling detection of cloning attempts before they can cause harm.
Solution Approach 2:
The system implements feedback by continuously monitoring identifier pairs and comparing them against stored original pairings. When a mismatch is detected indicating cloning, the system provides feedback by blocking the connection and alerting network elements, creating a closed-loop detection and response mechanism.
2Loss of time
If IMSI cloning detection is only performed after the owner notices fraudulent charges, then fraud detection is delayed, but this causes inconvenience to the genuine subscriber and financial loss to the network operator
Solution Approach 1:
The system performs preliminary detection by checking identifier pairings against stored originals before fraudulent use can occur. This preliminary action enables real-time detection of cloning attempts, preventing time loss and financial harm before they materialize.
Solution Approach 2:
The system introduces an intermediary detection mechanism between the cloning act and its harmful effects. By inserting an active monitoring layer that compares current identifiers with stored originals, the system detects cloning attempts before they result in fraudulent charges or subscriber inconvenience.
3Ease of operation
If cloned devices are allowed to connect to the network, then network coverage and connectivity are maintained, but cloned identifiers can be used for fraudulent purposes
Solution Approach 1:
The system introduces an intermediary verification step between the device connection request and network access. By inserting a database lookup and comparison operation that checks current identifiers against stored originals, the system enables legitimate devices to connect while blocking cloned identifiers, thus maintaining connectivity for genuine users while preventing fraud.
Solution Approach 2:
The system applies local quality by treating each identifier pairing individually with different access rights. Genuine identifier pairs that match stored originals receive full network access, while cloned pairs are blocked, creating localized quality differences in access permissions based on authentication results.
Data Source
AI summary
According to one aspect of the present invention, there is provided a method, in a communication system having a plurality of communication devices each having a first and second identifier associated therewith at the time of a connection attempt to the network, of identifying when one of the identifiers has been cloned, the connection status of the first identifier being obtainable from a network element, comprising receiving the first and second identifiers of a communication device, determining whether one of the identifiers has been cloned, the determination being made in part through information obtained from a connection history database, and in part through information obtained from the network element.