Message Pattern Processor for VoIP Fraud Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication networks, particularly SIP-based VoIP systems, face challenges in distinguishing between legitimate and fraudulent use, as initial interactions can appear identical, making it difficult to detect unauthorized or fraudulent activities until they have substantially begun or ended.

Innovation Solution

A system that intercepts messages in stateful transactions, processes them using a message pattern processor, and compares them to exemplary patterns to identify fraudulent or invalid messages, allowing for real-time filtering and prevention of unauthorized communications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If message interception and pattern comparison is implemented to detect fraudulent transactions, then security against fraudulent use is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by intercepting messages and building message patterns before transactions are completed. The message pattern processor continuously monitors and stores message sequences in advance, creating a database of legitimate communication patterns that can be used for rapid comparison during actual transactions, enabling early detection of fraudulent behavior.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The message pattern processor acts as an intermediary component between the message interceptor and the transaction validation system. It receives intercepted messages, processes them into patterns, and compares them against stored exemplary patterns, serving as a mediator that translates raw message data into security decisions without requiring direct modification of the core communication protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If message patterns are compared against multiple exemplary patterns to accurately identify fraudulent transactions, then measurement precision is improved, but loss of time increases

Engineering Contradiction:
Improvedetection accuracyVSAvoiddetection time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system applies partial action by comparing message patterns against a subset of relevant exemplary patterns rather than exhaustively checking all possible patterns. The message pattern processor identifies and compares only against patterns that are relevant to the current transaction type and context, achieving sufficient detection accuracy without the time cost of complete pattern matching against every stored pattern.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS9942233B2Identification of patterns in stateful transactions
Publication Date: 2018.04.10 LOOKINGGLASS CYBER SOLUTIONS LLC
  • US9942233B2 patent drawing
  • US9942233B2 patent drawing
  • US9942233B2 patent drawing

AI summary

A system for the identification of patterns in stateful transactions may include a message interceptor, a message pattern processor, a message handler, and a memory. The message interceptor may be operative to intercept messages transmitted by a first device over a network to a recipient. The message interceptor may be operative to intercept the messages before the messages are received by the recipient. The message pattern processor may be operative to add the message to a message pattern and store the message pattern in a memory. The message pattern processor may compare the message pattern to a plurality of exemplary message patterns and identify when the message pattern matches at least one of the exemplary message patterns. The message handler may be operative to determine an action to take with respect to the message based on the at least one matching exemplary message pattern identified by the message pattern processor.