Method and system for preventing mobile roaming fraud

• US 5,953,653 A
• Filed: 01/28/1997
• Issued: 09/14/1999
• Est. Priority Date: 01/28/1997
• Status: Expired due to Term

• Current Assignee: Comcast MO Group Incorporated (Comcast Corporation)
• Original Assignee: MediaOne Group Inc. (Comcast Corporation), U S West Inc.
• Inventors: Moore, Joseph B., Waliser, Shawn M., Josenhans, Charles A.
• Primary Examiner(s): Eisenzopf, Reinhard J.
• Assistant Examiner(s): APPIAH, CHARLES NANA
• Application Number:
  US08/789,927
• Time in Patent Office: 959 Days
• Field of Search: 455/410, 455/417, 455/411, 455/432, 455/435, 455/433, 455/414, 455/551, 455/552, 380/20, 380/23, 379/196, 379/197, 379/188
• US Class Current: 455/410
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A method and system for detecting and preventing a fraudulent request for mobile telephone service to be provided to a mobile subscriber by one of a plurality of serving carrier mobile networks in one of a plurality of roaming markets subject to fraud includes a first database storing home/serving market identification codes and a second database storing authorized subscriber identification data. A monitoring device monitors communication data in response to a power-on signal transmitted by the mobile telephone unit. A central server then determines if the subscriber is authorized to receive service in the roaming market based on the communication data, the home/serving market identification codes stored in the first database, and the authorized subscriber identification data stored in the second database. The home carrier mobile network can then prevent the subscriber from obtaining service in the roaming market or any other market thereafter if the subscriber is not authorized to receive service in that roaming market by updating data stored in a subscriber profile database to reflect the subscriber must be routed to customer service upon placing an outgoing call following the power-on signal.

Claims

1. For use in a mobile telephone system including a home carrier mobile network providing mobile telephone services to a mobile subscriber having a mobile telephone unit assigned thereto and further including a service profile database for storing data to be verified by a serving carrier mobile network, a method for detecting and preventing a fraudulent request for mobile telephone service to be provided to the mobile subscriber by one of a plurality of serving networks, the method comprising:

storing home/serving market identification code combinations in a first database identifying at least one of the plurality of serving networks subject to fraud;

storing authorized subscriber identification data in a second database identifying authorized serving networks associated with the mobile subscriber;

receiving a power-on signal from the mobile telephone unit when the mobile telephone unit is in one of the plurality of serving networks;

determining if the subscriber is authorized to receive mobile service in the serving network based on the power-on signal, the home/serving market identification code combinations stored in the first database, and the authorized subscriber identification data stored in the second database; and

if the subscriber is not authorized to receive service in the serving network, updating the data stored in the service profile database to indicate the subscriber is not authorized to receive mobile service in the serving network and must be routed to a customer service representative for validation immediately upon placing an outgoing call following the power-on signal.

2. The method as recited in claim 1 wherein the power-on signal includes subscriber identification data, a home market identification code and a serving market identification code and wherein determining if the subscriber is authorized comprises:

comparing the home market identification code and the serving market identification code of the signal with the stored home/serving market identification code combinations to determine if the power-on signal is originating in one of the plurality of serving networks subject to fraud;

if the power-on signal is originating in one of the plurality of serving networks subject to fraud, comparing the subscriber identification data of the signal with the stored authorized subscriber identification data to determine if the subscriber is authorized to receive service in the serving network.

3. The method as recited in claim 1 further comprising:

receiving an outgoing call from the subscriber having identification data;

comparing the identification data with the data stored in the service profile database; and

routing the subscriber to a customer service representative based on the comparison.

4. The method as recited in claim 3 wherein routing the subscriber to the customer service representative includes verifying the subscriber is authorized to access the mobile telephone unit.

5. In a mobile telephone system including a home carrier mobile network providing mobile telephone services to a mobile subscriber having a mobile telephone unit assigned thereto, and further including a service profile database for storing data to be verified by a serving carrier mobile network, a system for detecting and preventing a fraudulent request for mobile telephone service to be provided to the mobile subscriber by one of a plurality of serving networks, the system comprising:

a first database for storing home/serving market identification code combinations identifying at least one of the plurality of serving networks subject to fraud;

a second database for storing authorized subscriber identification data identifying authorized serving networks associated with the mobile subscriber;

a monitoring device for monitoring communication data in response to a power-on signal transmitted by the mobile telephone unit when the mobile telephone unit is in one of the plurality of serving networks;

a central server for determining if the subscriber is authorized to receive mobile service in the serving network based on the communication data, the home/serving market identification code combinations stored in the first database, and the authorized subscriber identification data stored in the second database; and

a switch provisioning system for updating the data stored in the service profile database to indicate the subscriber is not authorized to receive mobile service in the serving network and must be routed to a customer service representative for validation immediately upon placing an outgoing call following the power-on signal.

6. The system as recited in claim 5 wherein the communication data includes subscriber identification data, a home market identification code and a serving market identification code and wherein the central server comprises:

a first comparator circuit for comparing the home market identification code and the serving market identification code of the communication data with the stored home/serving market identification code combinations to determine if the power-on signal is originating in one of the plurality of serving networks subject to fraud;

a second comparator circuit for comparing the subscriber identification data of the communication data with the stored authorized subscriber identification data to determine if the subscriber is authorized to receive service in the serving network if the power-on signal is originating in one of the plurality of serving networks subject to fraud.

7. The system as recited in claim 5 wherein the system further comprises:

a local switch for receiving an outgoing call from the subscriber having identification data;

the one of the plurality of switches for comparing the identification data with the service profile database and routing the subscriber to a customer service representative of the home carrier mobile network based on the comparison.

8. The system as recited in claim 7 wherein the customer service representative further verifies the subscriber is authorized to access the mobile telephone unit.

9. The system as recited in claim 5 wherein the monitoring device is an IS-41 network message protocol analyzer.

10. The system as recited in claim 9 wherein the IS-41 network message protocol analyzer is an AcceSS7 device.

11. The system as recited in claim 5 wherein the home/serving market identification code combinations are point code combinations.

12. The system as recited in claim 5 wherein the home/serving market identification code combinations include telephone number prefixes.

13. The system as recited in claim 5 wherein the subscriber profile database is centrally located.

14. The system as recited in claim 5 wherein the mobile telephone system includes a plurality of switches and wherein the subscriber profile database is located at each of the plurality of switches.