Managing Undesired Service Requests in a Network

• US 20120047262A1
• Filed: 04/27/2009
• Published: 02/23/2012
• Est. Priority Date: 04/27/2009
• Status: Active Grant

• Current Assignee: Koninklijke KPN NV, Nederlandse Organisatie Voor Toegepast-Natuurwetenschappelijk Onderzoek Tno
• Original Assignee: Koninklijke KPN NV
• Inventors: Laarakkers, Jeroen, Muller, Frank, Hartog, Tim
• Granted Patent: US 9,603,022 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 88/10 adapted for operation in multiple networks, e.g. multi-mode access points

Abstract

A Method and a system for managing undesired service requests sent from at least one terminal to a network are described, wherein the network comprises a network node for storing trusted service-information. The method comprises the steps of: the network receiving a service request from a terminal, the request comprising service request information; and, sending, preferably via a secure communication channel, a user verification request for requesting the user to verify the service requested by the terminal if at least part of the service request information is not listed in the trusted service-information.

Claims

1. A method for managing a service request sent from a terminal to a network, the network comprising a network node for storing service-information, comprising:

receiving the service request from the terminal, the request comprising service request information; and

sending, via a communication channel, a user verification request for requesting a user to verify the service requested by the terminal if at least part of the service request information is not listed in the service-information.

2. The method according to claim 1, further comprising:

receiving, via the communication channel, a user verification response, the user verification response comprising verification information provided by the user, the verification information indicating whether the user accepts or rejects the service request; and

adding at least part of the service request information to the service-information if the verification information provides an indication that the requested service is allowed.

3. The method according to claim 1, further comprising:

receiving, via the communication channel, a user verification response, the user verification response comprising verification information provided by the user, the verification information indicating whether the user accepts or rejects the service request; and

adding at least part of the service request information to the service-information if the verification information provides an indication that the requested service is not allowed.

4. The method according to claim 1, further comprising:

establishing an encrypted communication channel, using a private key stored in an identity module of the terminal, between the terminal and the network;

sending the user verification request via the encrypted communication channel to the terminal; and

receiving via the encrypted communication channel a user verification response, the user verification response comprising verification information provided by the user whether the user accepts or rejects the service request.

5. The method according to claim 4, wherein the terminal comprises the identity module, one or more input/output interfaces and at least one hardware component, the at least one hardware component being configured for establishing one or more communication paths between the hardware component and the identity module and/or the one or more input/output interfaces.

6. The method according to any of claim 1, further comprising:

establishing another communication channel which is different from the communication channel through which the service request is received;

sending the user verification request via the communication channel to the terminal; and

receiving via the another communication channel, a user verification response, the response comprising verification information whether the subscriber allows or rejects the service request.

7. The method according to claim 5, wherein the communication channel is provided by a messaging service, wherein the messaging service is a short message service or an USSD service.

8. The method according to claim 1, wherein the verification request comprises a test configured for determining whether the user is human or not, wherein the test is one of a reverse Turing test and a Captcha, and wherein the verification response comprises information whether the test was successful or not.

9. The method according to any of claim 1, wherein the network comprises a service provisioning network node, the service provisioning network node comprising a visiting location register (VLR) comprising service-information, the service provisioning network node further comprises a user verification function for sending in response to the service request from the terminal the user verification request to the terminal at least part of the service request information is not listed in the service-information.

10. The method according to claim 9, wherein the network further comprises a home location register (HLR), the home location register comprising service-information of the terminal, wherein the service-information is transmitted from the home location register to the visiting location register.

14. A computer program product comprising software code portions configured for, when run in the memory of a computer located in one or more network nodes, executing the method of claims of claim 1.

15. The method according to claim 1, wherein the communication channel is a secure communication channel.

17. The method according to claim 1, wherein the stored service-information is a trusted service-information.

11. A system for managing a service request sent to a network, comprising:

at least one terminal for establishing a communication channel with the network;

a service provisioning network node configured for receiving the service request comprising service request information from the at least one terminal; and

a service database connected to the service provisioning network node,

wherein,

the service provisioning network node is configured for sending, via the communication channel, a user verification request for requesting a user to verify the service requested by the at least one terminal if at least part of the service request information is not listed in the service-information.

12. The system according to claim 11, further comprising a user verification function comprising:

a first software code portion for receiving the service request from the at least one terminal, the service request comprising service request information;

a second software code portion for checking whether at least part of the service request information is comprised in a service database; and

,

a third software code portion for enabling a dialog between the user of the at least one terminal or between another user, related to the at least one terminal, and the network if at least part of the service request information is not listed in the service-information.

13. The system according to claim 11, wherein the at least one terminal comprises:

a user verification client for establishing in response to a user verification request from the service provisioning network node a dialog between the user of the at least one terminal and the network;

an identity module for providing an encryption key for establishing the communications channel for the dialog;

an input element for receiving dialog information from the user;

an output element for transmitting dialog information to the user; and

a hardware component for establishing, preferably using a computing standard, one or more communications paths between the user verification client, the identity module, the input element and/or the output element.

16. The system according to claim 11, wherein the communication channel is a secure communication channel.

18. The system according to claim 11, wherein the stored service-information is a trusted service-information.