Call handling method for credit and fraud management

• US 5,875,236 A
• Filed: 11/21/1995
• Issued: 02/23/1999
• Est. Priority Date: 11/21/1995
• Status: Expired due to Term

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Wu, Fang, Matula, Valentine C., Munson, Gary A., Jankowitz, Charles M.
• Primary Examiner(s): Kuntz, Curtis A.
• Assistant Examiner(s): TIEU, BINH KIEN
• Application Number:
  US08/562,229
• Time in Patent Office: 1,190 Days
• Field of Search: 379/112, 379/113, 379/114, 379/115, 379/111, 379/143, 379/144, 379/145, 379/121, 379/126, 379/134, 379/128, 379/133, 379/137, 379/189, 379/196, 379/197, 379/207, 379/272 , 379/229, 379/242, 379/243, 379/118, 379/120, 379/93.02, 379/93.04, 379/91.01, 379/91.02
• US Class Current: 379/114.24
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/88 Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0116 Provision for limiting expenditure, e.g. limit on call expenses or account
• CPC Class Codes: H04M 2215/0148 Fraud detection or prevention means
• CPC Class Codes: H04Q 2213/1313 Metering, billing
• CPC Class Codes: H04Q 2213/13515 authentication, authorisation - fraud prevention
• CPC Class Codes: H04Q 2213/13547 subscriber, e.g. profile, database, database access
• CPC Class Codes: H04Q 3/0029 Provisions for intelligent networking

Abstract

Prior to completing a telephone call, a database is accessed within a telecommunications network to determine whether the call should be completed. The billing number to which the call is to be charged is compared to a customer record assigned to the billing number and stored in the database. The customer record is checked against a treatment category code which combines geographic call restrictions and thresholding. A call may be identified as potentially fraudulent and blocked if the customer record associated with the billing number indicates that the account is in arrears. In addition, at predetermined intervals during the progress of the call and at the end of each allowed call to be charged to that billing number, the time and/or cost of each call is estimated and added to the total stored in a user-defined threshold counter in the database. When the total stored in the counter exceeds a predetermined threshold limit, a potentially fraudulent call is identified. In this manner, call authorization is performed on a per call basis to prevent fraudulent telephone calls.

Claims

1. A method for identifying whether a telephone call to be billed to a billing number in a telecommunications network is potentially fraudulent, comprising the steps of:

(a) searching for said billing number in a network access interruption database;

(b) selectively enrolling said billing number in said network access interruption database if said billing number was not found in said searching step;

(c) accumulating a cost, if any, of prior calls charged to said billing number;

(d) measuring the cost of said call;

(e) adding said cost of said call to said cost of prior calls to form an accumulated cost;

(f) comparing said accumulated cost with a predetermined cost threshold limit; and

(g) identifying said call as potentially fraudulent when said accumulated cost exceeds said predetermined threshold limit.

2. The method according to claim 1, wherein said selectively enrolling step further comprises:

selectively enrolling said billing number if said billing number is not found in a customer account services database, and

wherein said measurement and comparison steps occur while said call is in progress or at the termination of said call.

3. The method according to claim 2, further comprising the steps of:

(a) estimating the cost of said call based upon a measured duration;

(b) comparing said estimated cost with a predetermined cost threshold limit; and

(c) identifying said call as potentially fraudulent when said estimated cost exceeds said predetermined cost threshold limit.

4. The method according to claim 3, wherein the cost of said call is estimated and compared with said threshold limits while the call is in progress or at the termination of said call.

5. The method according to claim 4, further comprising the steps of:

(a) storing a total estimated cost in a threshold counter of said network access interruption database;

(b) calculating a new total estimated cost by adding said estimated cost to said total estimated cost stored in said threshold counter and storing said new total estimated cost in said threshold counter;

(c) comparing said new total estimated cost stored in said threshold counter with a predetermined threshold limit; and

(d) identifying said call as potentially fraudulent when said new total estimated cost stored in said threshold counter exceeds said predetermined threshold limit.

6. The method according to claim 5, further comprising the steps of:

(a) receiving a query including a billing number from a switch within the telecommunications network responsible for processing the call;

(b) determining one of a variety of types of calls based upon said query;

(c) searching said network access interruption database of customer records for a customer record associated with said billing number; and

(d) identifying a threshold counter in said customer record for storing the new total estimated cost of calls associated with said call type charged to said billing number.

7. The method according to claim 3, wherein the duration of said call is measured up to the point in time of receiving a signal from a switch within the telecommunications network responsible for processing the call.

8. The method according to claim 7, wherein the signal from the switch is transmitted at predetermined intervals while the call is in progress.

9. The method according to claim 7, wherein the signal from the switch is transmitted at the end of the call.

10. The method according to claim 4, wherein the step of estimating the cost of said call comprises the step of applying the measured duration of said call to a rate table stored in said network access interruption database.

11. The method according to claim 10, further comprising the steps of:

(a) identifying the day of the week and time of day of said call; and

(b) estimating the cost of said call by applying the measured duration of said call to said rate table, wherein said rate table comprises the cost per minute for each hour of the day and each day of the week.

12. The method according to claim 10, further comprising the steps of:

(a) determining whether said call is a domestic or an international call based upon a destination number dialed;

(b) estimating the cost of domestic calls by applying the measured duration of said call to a domestic rate table stored in said network access interruption database; and

(c) estimating the cost of international calls by applying the measured duration of said call to an international rate table stored in said network access interruption database.

13. The method according to claim 6, further comprising the steps of:

(a) searching said customer record associated with said billing number assigned to a customer'"'"'s account to determine if said customer'"'"'s account is delinquent; and

(b) identifying said call as potentially fraudulent when said customer record indicates that said account is delinquent.

14. The method according to claim 13, further comprising the step of transmitting a response to said switch to block said call when said customer record indicates that said account is delinquent.

15. The method according to claim 6, further comprising the steps of:

(a) searching said customer record associated with said billing number to determine whether said call type is authorized; and

(b) transmitting a response to said switch to block said call when said customer record indicates that said call type is not authorized.

16. The method according to claim 6, further comprising the steps of:

(a) receiving a destination number to which said call is to be completed;

(b) searching said customer record associated with said billing number to determine whether said destination number is authorized; and

(c) transmitting a response to said switch to block said call when said customer record indicates that said destination number is not authorized.

17. The method according to claim 6, further comprising the steps of:

(a) receiving a destination number comprising a country code and a city code to which said call is to be completed;

(b) searching said customer record associated with said billing number to determine whether calls to said country code and said city code is authorized; and

(c) transmitting a response to said switch to block said call when said customer record indicates that calls to said country code and said city code are not authorized.

18. The method according to claim 6, further comprising the steps of:

(a) identifying the call as a cellular telephone call;

(b) monitoring said network to determine whether another cellular telephone call is being charged to said billing number at the same time as said identified cellular call; and

(c) identifying said identified cellular call and said another cellular telephone call as potentially fraudulent when both are charged to the same billing number at the same time.

19. The method according to claim 6, further comprising the steps of:

(a) identifying the call as a cellular telephone call;

(b) identifying the originating switch based upon the received query;

(c) maintaining in said network access interruption database previous cellular telephone calls charged to said billing number including the time and identified originating switch for each of said previous cellular calls;

(d) comparing said identified originating switch for said identified cellular call with said originating switches for said previous cellular calls stored in said network access interruption database; and

(e) identifying said identified cellular call as potentially fraudulent when, within a predetermined period of time, said originating switches for said previous cellular calls are different from said identified originating switch for said identified cellular call.

20. The method according to claim 6, further comprising the steps of:

(a) maintaining a velocity threshold counter associated with said billing number in said network access interruption database;

(b) storing the total number of calls charged to said billing number within a predetermined period of time in said velocity threshold counter;

(c) incrementing said stored total number of calls by one each time a call is charge to said billing number and storing said incremented total in said velocity threshold counter;

(d) comparing said incremented total stored in said velocity threshold counter with a predetermined threshold limit; and

(h) identifying said call as potentially fraudulent when said incremented total stored in said velocity threshold counter exceeds said predetermined threshold limit.

21. The method according to claim 6, wherein said billing number is a number from which the call is being placed.

22. The method according to claim 6, wherein said billing number is a credit card number.

23. The method according to claim 6, wherein said billing number is a bill to third party number.

24. The method according to claim 6, wherein said billing number is a destination number.

25. The method according to claim 6, wherein said billing number is a mobile identification number.

26. The method according to claim 6, further comprising the step of transmitting a response to said switch to allow the call when no customer record stored within said network access interruption database corresponds to said billing number.

27. The method according to claim 6, further comprising the step of automatically creating a customer record associated with said billing number and storing said created customer record in said network access interruption database when certain user-defined decision criteria are satisfied.

28. The method according to claim 27, wherein said user-defined decision criteria comprises a call having a billing number that does not correspond to a customer of a service provider of said telecommunications network.

29. The method according to claim 28, further comprising the step of identifying whether the billing number is associated with a customer of said service provider based upon information contained in an initial address message received by said switch.

30. A system for identifying a telephone call within a telecommunications network as potentially fraudulent, comprising:

(a) a switch for receiving said call in said network;

(b) a processor for identifying the call as potentially fraudulent;

(c) means for connecting said switch to said processor to enable said processor and switch to communicate with each other, said switch transmitting a query including a billing number associated with said call to said processor;

(d) a network access interruption database connected to said processor, said network access interruption database comprising a table of customer records, each customer record being associated with a different billing number and each customer record comprising a user-defined call treatment category;

said processor searching for said billing number in said network access interruption database;

said processor selectively enrolling said billing number in said network access interruption database if said billing number was not found in said searching step;

(e) a threshold counter stored in said network access interruption database for each customer record, said threshold counter capable of storing the total estimated cost of one or more types of calls charged to the billing number associated with the customer record while the call is in progress, wherein said one or more types of calls to be stored in said threshold counter being defined by said call treatment category; and

(f) a predetermined threshold limit stored in said network access interruption database for each threshold counter, said threshold limit being defined by said call treatment category and said call being identified as potentially fraudulent when said total estimated cost stored in said threshold counter exceeds said predetermined threshold limit.

31. An apparatus for use in conjunction with a telecommunications network to identify a telephone call as potentially fraudulent, comprising:

(a) a processor in communication with a switch within said network, said processor adapted to receive a billing number associated with said call from said switch and further adapted to instruct said switch whether or not to complete said call;

(b) a network access interruption database connected to said processor, said network access interruption database comprising a table of customer records, each customer record being associated with a different billing number and each customer record comprising a user-defined call treatment category;

said processor searching for said billing number in said network access interruption database;

said processor selectively enrolling said billing number in said network access interruption database if said billing number was not found in said searching step;

(c) a threshold counter stored in said network access interruption database for each customer record, said threshold counter adapted to store the total estimated cost of one or more types of calls charged to the billing number associated with the customer record while the call is in progress, wherein said one or more types of calls to be stored in said threshold counter being defined by said call treatment category; and

(f) a predetermined threshold limit stored in said network access interruption database for each threshold counter, said threshold limit being defined by said call treatment category and said call being identified as potentially fraudulent when said total estimated cost stored in said threshold counter exceeds said predetermined threshold limit.