Network Interface Fraud Detection via Policy Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile networks are vulnerable to fraudulent activities, such as international revenue sharing fraud and signaling protocol breaches, which degrade service quality and pose security threats.
Innovation Solution
Implementing a network interface that receives communication requests, determines characteristics, and applies policy rules to terminate fraudulent communications, while generating temporary device identifiers and location information to secure routing processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network processes all communication requests without filtering, then network throughput is maintained, but fraudulent activity increases and security deteriorates
Solution Approach 1:
The patent applies preliminary action by implementing a detection point that analyzes communication requests before they are fully processed by the network. The system evaluates characteristics such as subscriber identifiers, device identifiers, and location information in advance, applying policy rules to terminate fraudulent communications before they consume network resources. This prevents fraudulent activity from degrading network security while allowing legitimate traffic to flow through without unnecessary interference.
2Reliability
If the network terminates all suspicious communication requests, then security is improved, but legitimate communications may be blocked and network productivity decreases
Solution Approach 1:
The patent implements feedback by continuously monitoring communication requests and their outcomes. The detection point evaluates characteristics of each request, applies policy rules based on accumulated knowledge of fraudulent patterns, and adjusts its filtering behavior accordingly. This feedback mechanism ensures that legitimate communications are not incorrectly blocked while maintaining high security by learning from and adapting to emerging fraudulent techniques.
Solution Approach 2:
The system changes parameters by dynamically evaluating multiple characteristics of communication requests including subscriber identifiers, device identifiers, location information, and communication patterns. By analyzing these parameters and applying policy rules based on their combinations, the system can distinguish between legitimate and fraudulent traffic with high accuracy, maintaining both security and productivity.
3Reliability
If temporary device identifiers are generated for all requests, then security is enhanced, but processing demand and device complexity increase
Solution Approach 1:
The patent applies the taking out principle by extracting and analyzing only the essential characteristics of communication requests that are necessary for fraud detection. Rather than processing all possible data, the system focuses on key parameters such as subscriber identifiers, device identifiers, and location information. This selective extraction reduces processing complexity while maintaining routing security through the generation of temporary device identifiers for validated requests.
Data Source
AI summary
In one embodiment, a network interface receives a communication request over a communication link of a radio access network. A processor then determines one or more characteristics associated with the communication request and applies one or more policy rules to the one or more determined characteristics associated with the communication request. The processor terminates the communication request based in part on the application of the one or more policy rules to the one or more determined characteristics.