SIM Swap Fraud Detection via MSISDN-IMSI Association Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for preventing SIM swap fraud are insufficient, as they rely on traditional controls that may not effectively detect fraudulent activities, especially those originating from within the mobile network.
Innovation Solution
A method and classifier entity that monitor subscriber update data request messages in a mobile network, identifying fraudulent requests by verifying specific conditions such as an MSISDN being associated with more than one IMSI within a predefined timeframe, or an IMSI being associated with more than one MSISDN within another predefined timeframe.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional controls (showing ID/passport in person or notification confirmation) are implemented to prevent SIM swap fraud, then security against fraud is improved, but the system cannot effectively detect fraudulent activities originating from within the mobile network
Solution Approach 1:
The patent segments the detection process into multiple independent analysis components: monitoring subscriber update data request messages, verifying MSISDN-IMSI associations, checking timing patterns, and analyzing request sequences. This segmentation enables comprehensive detection of internal fraud while maintaining traditional security controls.
Solution Approach 2:
The patent introduces an intermediary detection system that monitors and analyzes provisioning requests between network entities without disrupting the existing SIM swap process. This intermediary layer can identify fraudulent internal requests while allowing legitimate operations to proceed normally.
2Measurement precision
If monitoring and analysis of all subscriber update data request messages is performed to identify fraudulent requests, then detection accuracy is improved, but the complexity of the detection system increases
Solution Approach 1:
The patent applies local quality by focusing monitoring efforts on specific critical parameters within the data stream: MSISDN-IMSI associations, timing of requests, and sequences of provisioning operations. Rather than analyzing all aspects of every message, the system concentrates on locally significant indicators of fraud.
Solution Approach 2:
The patent monitors changes in key parameters such as the association between MSISDN and IMSI, the timing intervals between requests, and the sequence of provisioning operations. By tracking parameter changes rather than static values, the system achieves high detection accuracy with manageable complexity.
3Reliability
If comprehensive monitoring of subscriber update data request messages is implemented to detect SIM swap fraud, then fraud detection capability is improved, but the processing load and time required for analysis increase
Solution Approach 1:
The patent implements partial monitoring by focusing on specific subsets of requests that are most indicative of fraud: subscriber update data request messages related to MSISDN-IMSI associations. By monitoring only the most relevant portion of traffic with heightened scrutiny, the system maintains high detection capability while preserving overall processing throughput.
Data Source
AI summary
There is provided mechanisms for detecting SIM swap fraud. A method is performed by a classifier entity. The method comprises monitoring subscriber update data request messages sent as part of an update data procedure between a first network entity and a second network entity in a mobile network. The method comprises determining that one or more of the subscriber update data request messages is associated with SIM swap fraud by verifying that the subscriber update data request messages fulfil a set of conditions. The set of conditions pertain at least to: an MSISDN of a first subscriber entity in the mobile network within a first predefined timeframe is associated with more than one IMSI, and/or an IMSI of a second subscriber entity in the mobile network within a second predefined timeframe is associated with more than one MSISDN. The method comprises performing, upon the set of conditions is fulfilled for the one or more of the subscriber update data request messages, an action according to which the IMSI of the second subscriber entity is associated with SIM swap fraud.