SHORT MESSAGE SERVICE SPAM DATA ANALYSIS AND DETECTION

• US 20140004892A1
• Filed: 07/02/2012
• Published: 01/02/2014
• Est. Priority Date: 07/02/2012
• Status: Active Grant

• Current Assignee: RingCentral Incorporated
• Original Assignee: Ilona Murynets
• Inventors: MURYNETS, ILONA, JOVER, ROGER PIQUERAS
• Granted Patent: US 9,445,245 B2
• Time in Patent Office: Days
• US Class Current: 455/466
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04M 3/2218 Call detail recording
• CPC Class Codes: H04M 3/2227 Quality of service monitoring
• CPC Class Codes: H04M 3/42382 Text-based messaging services in telephone networks such as PSTN/ISDN, e.g. User-to-User Signalling or Short Message Service for fixed networks
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

A method and apparatus for identifying a potential source of SMS spam are disclosed. For example, the method collects a plurality of call detail records, extracts at least one feature from each of the plurality of call detail records, and identifies the potential source of the short message service spam by analyzing the at least one feature that is extracted from each of the plurality of call detail records.

Claims

1. A method for identifying a potential source of a short message service spam, comprising:

collecting a plurality of call detail records;

extracting at least one feature from each of the plurality of call detail records; and

identifying, by a processor, the potential source of the short message service spam by analyzing the at least one feature that is extracted from each of the plurality of call detail records.

2. The method of claim 1, wherein the at least one feature comprises an international mobile equipment identity number.

3. The method of claim 2, wherein the identifying comprises comparing the international mobile equipment identity number to a device watch list.

4. The method of claim 1, further comprising:

blocking a message associated with the potential source of the short message service spam that is identified.

5. The method of claim 4, wherein the blocking comprises blocking the potential source of the short message service spam based upon an international mobile equipment identity number.

6. The method of claim 1, wherein the at least one feature comprises a device type allocation code.

7. The method of claim 6, wherein the identifying comprises comparing the device type allocation code to a device watch list.

8. The method of claim 1, wherein the at least one feature comprises a geographic origin.

9. The method of claim 1, wherein the at least one feature comprises a plurality of features extracted from each of the plurality of call detail records.

10. The method of claim 9, wherein the plurality of features is used to calculate a response ratio of a number of incoming short message service messages to a number of outgoing short message service messages.

11. The method of claim 9, wherein the plurality of features is used to calculate a ratio of a volume of short message service messages versus a volume of voice calls.

12. The method of claim 9, wherein the plurality of features is used to determine a geographic pattern of a plurality of messages that are sent.

13. The method of claim 12, wherein the geographic pattern comprises a number of geographic destinations of the plurality of messages that are sent, where the number is determined based upon an area code of each intended recipient of each of the plurality of messages that is sent.

14. The method of claim 1, wherein the collecting the plurality of call detail record is performed by an application server interacting with a billing server.

15. The method of claim 1, wherein the identifying uses a decision tree.

16. The method of claim 1, further comprising:

providing a feedback comprising an identification of the potential source of the short message service spam that has been identified.

17. A non-transitory computer-readable storage medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, cause the processor to perform operations for identifying a potential source of a short message service spam, the operations comprising:

collecting a plurality of call detail records;

extracting at least one feature from each of the plurality of call detail records; and

identifying, by a processor, the potential source of the short message service spam by analyzing the at least one feature that is extracted from each of the plurality of call detail records.

18. The non-transitory computer-readable storage medium of claim 17, wherein the at least one feature comprises an international mobile equipment identity number.

19. The non-transitory computer-readable storage medium of claim 17, further comprising:

blocking a message associated with the potential source of the short message service spam that is identified.

20. An apparatus for identifying a potential source of a short message service spam, comprising:

a processor; and

a non-transitory computer-readable medium in communication with the processor, wherein the non-transitory computer-readable medium has stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

collecting a plurality of call detail records;

extracting at least one feature from each of the plurality of call detail records; and

identifying, by a processor, the potential source of the short message service spam by analyzing the at least one feature that is extracted from each of the plurality of call detail records.