Call-processing system and method

• US 5,586,175 A
• Filed: 06/02/1995
• Issued: 12/17/1996
• Est. Priority Date: 10/15/1993
• Status: Expired due to Term

• Current Assignee: Global Crossing Telecommunications Incorporated (Lumen Technologies, Inc.)
• Original Assignee: Global Crossing Advanced Card Services, Inc.
• Inventors: Austin, Mark A., Smith, Keith E., Busch, Eric M., Kripakaran, Raghavan, Hogan, Steven J., Vercande, David J., Murdock, Douglas R., Jayasimha, Madhigubba G., Goodman, Todd A., Tangeman, Michael R., Feltz, Kristi T., Berry, Dana B.
• Primary Examiner(s): Chin, Wellington
• Assistant Examiner(s): Loomis, Paul
• Application Number:
  US08/460,633
• Time in Patent Office: 564 Days
• Field of Search: 379/111, 379/112, 379/113, 379/114, 379/115, 379/121, 379/127, 379/189, 379/188, 379/91, 379/93, 379/186
• US Class Current: 379/114.14
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/44 Augmented, consolidated or itemized billing statement or bill presentation
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/68 Payment of value-added services
• CPC Class Codes: H04M 2215/0104 Augmented, consolidated or itemised billing statement, e.g. additional billing information, bill presentation, layout, format, e-mail, fax, printout, itemised bill per service or per account, cumulative billing, consolidated billing
• CPC Class Codes: H04M 2215/0148 Fraud detection or prevention means
• CPC Class Codes: H04M 2215/0196 Payment of value-added services, mainly when their charges are added on the telephone bill, e.g. payment of non-telecom services, e-commerce, on-line banking
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00
• CPC Class Codes: H04Q 3/0062 Provisions for network management
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99955 Archiving or backup

Abstract

A system and method for processing telephone calls and providing enhanced services is presented. The call processing system includes a network control processor for controlling the processing and routing of the calls and for providing enhanced features, and a matrix switch for routing calls from an originating location to a terminating location. Operator consoles can be included to provide operator assistance to the caller. The network control processor comprises a central message processor that receives call data, determines the type of call, determines the processing required, and determines whether operator assistance is required. A call route distributor allocates an operator console to the call if required. A billing server is used to track billing information for the call while it is in progress. A database server is provided for database look-ups and storage. The call processing system also includes a validation system, a billing system, a distribution system, and a fraud detection and prevention system. The validation system is used to validate call information to determine whether the call can be placed. The billing system determines rates for calls and calculates the cost of completed calls. The distribution system distributes changes that are made to a master database to the appropriate slave database. The fraud detection and prevention system monitors originating and in-process calls to detect and possibly prevent possible fraudulent uses of phone services and systems. A client interface is provided to facilitate communications among applications and DEF records are used to define specific call processing actions.

Claims

1. A system for detecting fraudulent or attempted fraudulent use of a telephone network, the system comprising:

means for creating a usage record for a call, said usage record including call information pertaining to said call, wherein said usage record is created for a terminating number associated with said call;

means for updating said usage record if a new call is directed to said terminating number; and

means for comparing said call information in said usage record to one or more thresholds to determine whether said call information indicates a possible fraudulent usage.

2. The system of claim 1, wherein said means for creating creates a usage record for a completed call.

3. The system of claim 1, wherein said means for creating creates a usage record for a failed call.

4. A method of detecting fraudulent or attempted fraudulent use of a telephone network, the method comprising the steps of:

(1) creating a usage record for a call, said usage record including call information pertaining to said call, wherein said usage record is created for a terminating number associated with said call;

(2) updating said usage record if a new call is directed to said terminating number; and

(3) comparing said call information in said usage record to one or more thresholds to determine whether said call information indicates a possible fraudulent usage.

5. The method of claim 4, wherein said step (1) comprises the step of creating a usage record for a completed call.

6. The method of claim 4, wherein said step (1) comprises the step of creating a usage record for a failed call.

7. A fraud system that detects fraudulent or attempted fraudulent use of a telephone network, the system comprising:

means for receiving call information pertaining to a call that has been completed to a destination external to the fraud system;

means for creating a usage record for a completed call to reflect said call information, wherein said usage record is created for an identifying number associated with said completed call; and

means for comparing said call information in said usage record to one or more thresholds stored in a threshold file to determine whether said call information indicates a possible fraudulent usage;

wherein said call information is compared to said one or more thresholds as soon as said new call is completed to permit a real-time response to said possible fraudulent usage to be initiated prior to termination of said new call.

8. The system of claim 7, further comprising means for receiving a start of call message from a billing server to indicate that said call has been completed.

9. The system of claim 7, further comprising means for receiving cost information from a call rating system.

10. The system of claim 7, further comprising means for receiving questionable use information from a validation system.

11. The system of claim 7, further comprising:

a billing number usage record file module that creates usage records for completed calls based on said identifying number;

a billed number usage threshold file module that contains parameters for completed calls to be used by the system for determining fraudulent uses;

a short billing information record file module that receives truncated billing information record data from said billing server;

a billing number usage alarms file module that stores alarm information from previous fraudulent uses; and

a callhandle file module that stores call data.

12. The system of claim 7, wherein said identifying number is a billing number.

13. The system of claim 7, further comprising means for communicating with a plurality of fraud consoles that monitor and verify possible fraudulent uses.

14. The system of claim 7, further comprising means for updating said billed number usage data if a new call having said identifying number is completed to reflect call information of said new call.

15. A method using a fraud system to detect fraudulent or attempted fraudulent use of a telephone network, the method comprising the steps of:

receiving call information pertaining to a call that has been completed to a destination external to the fraud system;

creating a usage record for a completed call to reflect said call information, wherein said usage record is created for an identifying number associated with said completed call; and

comparing said call information in said usage record to one or more thresholds stored in a threshold file to determine whether said call information indicates a possible fraudulent usage;

wherein said call information is compared to said one or more thresholds as soon as said new call is completed to permit a real-time response to said possible fraudulent usage to be initiated prior to termination of said new call.

16. The method of claim 15, further comprising the step of generating an alarm signal if said call information indicates a possible fraudulent usage in said comparing step.

17. The method of claim 15, further comprising the step of updating said usage record if a new call having said identifying number is completed to reflect call information of said new call.

18. The method of claim 15, wherein said comparing step comprises the steps of:

checking said usage record for an originating number; and

determining whether said originating number was previously identified as a number from which or to which fraud was occurring.

19. The method of claim 15, wherein said comparing step comprises the steps of:

checking said usage record for an originating number; and

identifying whether said originating number is an international number.

20. The method of claim 15, wherein said comparing step comprises the steps of:

checking said usage record for a terminating number; and

determining whether said terminating number was previously identified as a number from which or to which fraud was occurring.

21. The method of claim 15, wherein said comparing step comprises the steps of:

checking said usage record for a terminating number; and

identifying whether said terminating number is an international number.

22. The method of claim 15, wherein said usage record is created for a billing number associated with said call.

23. The method of claim 22, wherein said comparing step comprises the steps of:

retrieving a usage threshold from said threshold file to determine a maximum number of completed calls permitted to occur within a given period of time for said billing number;

checking said usage record for said billing number to determine an actual number of calls completed within said given period of time; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

24. The method of claim 22, wherein said comparing step comprises the steps of:

retrieving a simultaneous calls threshold from said threshold file to determine a maximum number of calls permitted to occur simultaneously for said billing number;

checking said usage record for said identifying number to determine an actual number of calls occurring simultaneously for said billing number; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

25. The method of claim 22, wherein said comparing step comprises the steps of:

retrieving an anomalous calls threshold from said threshold file to determine a maximum number of calls permitted to occur for said billing number from different originating locations;

checking said usage record for said billing number to determine an actual number of calls originating from different locations; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

26. The method of claim 22, wherein said comparing step comprises the steps of:

retrieving a reorigination threshold from said threshold file to determine a maximum number of reoriginations permitted to occur for said billing number;

checking said usage record for said billing number to determine an actual number of calls reoriginated for said billing number; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

27. The method of claim 22, wherein said comparing step comprises the steps of:

retrieving a simultaneous use threshold from said threshold file to determine a maximum number of simultaneous calls permitted to occur for said billing number;

checking said usage record for said billing number to determine an actual number of simultaneous calls for said billing number; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

28. A fraud system that detects fraudulent or attempted fraudulent use of a telephone network, the system comprising:

means for receiving call information pertaining to failed call, said failed call intended for a destination external to the fraud system;

means for creating a usage record for said failed call to reflect said call information, wherein said usage record is created for an identifying number associated with said failed call; and

means for comparing said call information in said usage record to one or more thresholds stored in a threshold file to determine whether said call information indicates a possible fraudulent usage.

29. The system of claim 28, further comprising means for receiving a failed call attempt message from at least one of a manual operator console and a voice response unit indicating a failed call attempt.

30. The system of claim 28, further comprising:

a failed billing number usage record file module that creates usage records for failed call attempts based on said identifying number;

a failed billed number usage threshold file module that contains parameters for failed call attempts to be used by the system for determining fraudulent uses;

a short failed billing number file module that receives truncated failed billing number record data from said plurality of operator consoles; and

a failed billing number alarm file module that stores alarm information from previous fraudulent uses.

31. The system of claim 28, wherein said identifying number is an originating number.

32. The system of claim 28, wherein said identifying number is a terminating number.

33. The system of claim 28, further comprising means for communicating with a plurality of fraud consoles that monitor and verify possible fraudulent uses.

34. The system of claim 28, further comprising means for updating said failed billed number usage data if another failed call having said identifying number is attempted to reflect call information of said another failed call.

35. A method using a fraud system to detect fraudulent or attempted fraudulent use of a telephone network, the method comprising the steps of:

receiving call information pertaining to a failed call, said failed call intended for a destination external to the fraud system;

creating a usage record for said failed call to reflect said call information, wherein said usage record is created for an identifying number associated with said failed call; and

comparing said call information in said usage record to one or more thresholds stored in a threshold file to determine whether said call information indicates a possible fraudulent usage.

36. The method of claim 35, further comprising the step of generating an alarm signal if said call information indicates a possible fraudulent usage in said comparing step.

37. The method of claim 35, further comprising the step of updating said usage record if another failed call having said identifying number is attempted to reflect call information of said another failed call.

38. The method of claim 35, wherein said usage record is created for an originating number associated with said call.

39. The method of claim 38, wherein said comparing step comprises the step of determining whether said originating number was previously identified as a number from which or to which fraud was occurring.

40. The method of claim 38, wherein said comparing step comprises the steps of:

retrieving a usage threshold from said threshold file to determine a maximum number of failed calls attempted within a given period of time for said originating number;

checking said usage record for said originating number to determine an actual number of failed calls attempted within said given period of time; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.

41. The method of claim 35, wherein said usage record is created for a terminating number associated with said call.

42. The method of claim 41, wherein said comparing step comprises the step of determining whether said terminating number was previously identified as a number from which or to which fraud was occurring.

43. The method of claim 41, wherein said comparing step comprises the steps of:

retrieving a usage threshold from said threshold file to determine a maximum number of failed calls attempted within a given period of time for said terminating number;

checking said usage record for said terminating number to determine an actual number of failed calls attempted within said given period of time; and

comparing said actual number to said threshold to determine whether a fraudulent use is occurring.