Detection and prevention of channel grabbing in a wireless communications system

• US 5,956,635 A
• Filed: 07/16/1996
• Issued: 09/21/1999
• Est. Priority Date: 07/16/1996
• Status: Expired due to Fees

• Current Assignee: Cellular Technical Services Co., Inc. (Asensus Surgical, Inc.)
• Original Assignee: Cellular Technical Services Co., Inc. (Asensus Surgical, Inc.)
• Inventors: Stanhope, David M., Hoogerwerf, David N., McKernan, Randy
• Primary Examiner(s): Eisenzopf, Reinhard J.
• Assistant Examiner(s): Kincaid, Lester G.
• Application Number:
  US08/680,930
• Time in Patent Office: 1,162 Days
• Field of Search: 455/410, 455/411, 455/67.1, 455/414, 455/416, 455/507, 455/515, 455/524, 455/67.6
• US Class Current: 455/411
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A method and system for detecting a voice channel grab by a pirate in a cellular telephone network. Initially, RF signals transmitted to and from an authorized cellular telephone over the control and voice channels are monitored to track call processing activities and obtain various data that are used to detect potential voice channel grabbing attempts. The data may include such things as RSSI, change power output messages and responses, and hook-flash signal. From the data, the system looks for two events. A first event is an unexpected change or an absence of an expected change in the voice channel RF signal indicating that the pirate may be transmitting on the voice channel. The first event may be any one or more of the following: (1) a sudden upward shift in the voice channel RSSI; (2) an unexpected phase shift of either the RF signal or the SAT signal contained in the RF signal; and (3) an absence of an expected shift in the RSSI that corresponds to the change power level message from the network. The second event is receipt of a message indicative of a request to establish a new telephone connection such as a hook-flash message initiating a call conference. When the unexpected change in the RF signal and the message indicative of the request to establish the new telephone connection are detected, the system determines that the voice channel assigned to the authorized cellular telephone has been grabbed by the pirate. When the system determines that the channel grab has occurred, it prevents the pirate from establishing the new telephone connection by preventing receipt of dialed digits or terminating the connection on the voice channel.

Claims

1. In a wireless telephone network, a method of detecting an unauthorized access to a communication channel assigned to an authorized wireless telephone during an ongoing communication with the authorized telephone, comprising the steps of:

(a) monitoring a signal received from the communication channel during the ongoing communication;

(b) detecting in the received signal an unexpected shift from an expected predetermined value or a lack of shift to an expected predetermined value; and

(c) determining that an unauthorized access to the communication channel of the authorized telephone by an unauthorized wireless telephone has occurred based on the unexpected shift from the expected predetermined value or the lack of shift to the expected predetermined value is detected.

2. The method according to claim 1, before step (c), further comprising the step of detecting in the received signal a message indicative of a request for a new telephone connection and wherein step (c) comprises the step of determining that the unauthorized access to the communication channel has occurred by the unauthorized wireless telephone when both the unexpected shift or lack of shift in the received signal and the message indicative of the request for the new telephone connection are detected.

3. The method according to claim 2 wherein the step of detecting in the received signal a message indicative of a request for a new telephone connection comprises the step of detecting a hook-flash message requesting a call conference.

4. The method according to claim 2 wherein the step of detecting in the received signal a message indicative of a request for a new telephone connection comprises the step of detecting a hook-flash message responsive to a call waiting signal transmitted from the wireless telephone network.

5. The method according to claim 2 wherein the step of detecting in the received signal a message indicative of a request for a new telephone connection comprises the step of detecting a message requesting a new telephone call without the need to dial an authorization number.

6. The method according to claim 5 wherein the message requesting the new telephone call without the need to dial the authorization number is a message representing the pound (#) key of a telephone.

7. The method according to claim 1 wherein step (b) comprises:

detecting an upward shift in the signal strength of the received signal beyond an expected predetermined signal strength value.

8. The method according to claim 1 wherein step (b) comprises:

detecting a power down message transmitted from the wireless telephone network; and

detecting a lack of downward shift in the signal strength of the received signal to an expected predetermined signal strength value indicative of a failure of the authorized wireless telephone to respond to the power down message.

9. The method according to claim 1 wherein step (b) comprises:

detecting a phase shift in the received signal beyond a predetermined range of phase shift values, the phase shift being indicative of transmission of a signal on the communication channel by the unauthorized wireless telephone.

10. The method according to claim 9 wherein the step of detecting the phase shift in the received signal comprises:

detecting a phase shift of a signaling audio tone (SAT) contained in the received signal.

11. The method according to claim 1, further comprising:

preventing the unauthorized wireless telephone from establishing a telephone connection through the wireless telephone network when the unauthorized access to the communication channel by the unauthorized wireless telephone is determined.

12. The method according to claim 11 wherein the step of preventing the unauthorized wireless telephone from establishing the telephone connection through the wireless telephone network comprises:

preventing the wireless telephone network from receiving dialed digits from the unauthorized wireless telephone.

13. The method according to claim 11 wherein the step of preventing the unauthorized wireless telephone from establishing the telephone connection through the wireless telephone network comprises:

disabling the output of a demodulator of a communication channel receiver during receipt of dialed digits from the unauthorized wireless telephone.

14. The method according to claim 11 wherein the step of preventing the unauthorized wireless telephone from establishing the telephone connection through the wireless telephone network comprises:

transmitting an interfering radio frequency signal on the communication channel during receipt of dialed digits from the unauthorized wireless telephone.

15. The method according to claim 11 wherein the step of preventing the unauthorized wireless telephone from establishing the telephone connection through the wireless telephone network comprises:

inserting an interfering signal into a demodulator of a communication channel receiver to prevent receipt of dialed digits from the unauthorized wireless telephone.

16. The method according to claim 1, further comprising:

when the unauthorized access to the communication channel by the unauthorized wireless telephone is determined,

storing dialed digits from the unauthorized wireless telephone for later use in a fraudulent destinations analysis; and

preventing the unauthorized wireless telephone from establishing a telephone connection through the wireless telephone network.

17. The method according to claim 1, further comprising:

when the unauthorized access to the communication channel by the unauthorized wireless telephone is determined,

transmitting a call termination message to one or both of the unauthorized wireless telephone and the wireless telephone network.

18. In a wireless telephone network, a method of detecting an unauthorized access to a communication channel of a given control site in the telephone network assigned to an authorized wireless telephone, the method comprising the steps of:

(a) receiving a signal from the communication channel of the given control site;

(b) detecting a shift or lack of shift in the received signal indicative of transmission of a signal on the communication channel by an unauthorized wireless telephone;

(c) detecting in the received signal a communication indicative of a request for a new telephone connection within the same control site; and

(d) determining that an unauthorized access to the communication channel by an unauthorized wireless telephone has occurred when both the shift or lack of shift in the received signal and the communication indicative of the request for the new telephone connection within the same control site are detected.

19. The method according to claim 18 wherein step (b) comprises:

detecting in the received signal an unexpected shift from an expected predetermined value or a lack of shift to an expected predetermined value.

20. The method according to claim 18 wherein step (b) comprises:

detecting an upward shift in the signal strength of the received signal beyond an expected predetermined signal strength value.

21. The method according to claim 18 wherein step (b) comprises:

detecting a power down communication transmitted from the wireless telephone network; and

detecting a lack of downward shift in the signal strength of the received signal to an expected predetermined signal strength value indicative of a failure of the authorized wireless telephone to respond to the power down communication.

22. The method according to claim 18 wherein the received signal is a radio frequency (RF) signal and wherein step (b) comprises:

detecting a phase shift of the RF signal beyond a predetermined range of phase shift values.

23. The method according to claim 18 wherein the received signal contains a signaling audio tone (SAT) and wherein step (b) comprises:

detecting in the SAT a phase shift beyond a predetermined range of phase shift values.

24. The method according to claim 18 wherein step (c) comprises the step of detecting a hook-flash communication initiating a call conference.

25. The method according to claim 18 wherein step (c) comprises the step of detecting a hook-flash communication responsive to a call waiting signal transmitted from the wireless telephone network.

26. The method according to claim 18 wherein step (c) comprises the step of detecting a communication requesting a new telephone call without the need to dial an authorization number.

27. The method according to claim 26 wherein the communication requesting the new telephone call without the need to dial the authorization number is a communication representing the pound (#) key of a telephone.

28. In a wireless telephone network, a system for detecting an unauthorized access to a communication channel within a cell and assigned to an authorized wireless telephone, comprising:

a data decoder connected to the communication channel receiver and operable to extract data contained in the received signal; and

a processor connected to the communication channel receiver for receiving a strength indicator signal and the data decoder for receiving the extracted data, the processor being operable to detect in the received signal a shift or lack of shift indicative of transmission of a signal on the communication channel by an unauthorized wireless telephone and to detect from the extracted data a communication indicative of a request to establish a new telephone connection within the same cell as the communication channel, the processor being operable to determine the unauthorized access to the communication channel by the unauthorized wireless telephone when both the shift or lack of shift in the received signal and the communication indicative of the request to establish the new telephone connection are detected.

29. The system according to claim 28, further comprising:

a memory connected to the processor;

a fraud detection program stored in the memory and running on the processor to detect the shift or lack of shift in the received signal, to detect from the extracted data the communication indicative of the request to establish the new telephone connection, and to determine the unauthorized access to the communication channel by the unauthorized wireless telephone.

30. The system according to claim 28 wherein the data decoder includes:

an analog to digital converter connected to the communication channel receiver to convert the received signal into a digital signal for analysis by the processor.

31. The system according to claim 30, further including a communication channel receiver generating a strength indicator signal indicative of the strength of a signal received from the communication channel and wherein the analog to digital converter converts the strength indicator signal into a digital strength indicator signal for analysis by the processor.

32. The system according to claim 28 wherein the shift or lack of shift in the received signal is an upward shift in the signal strength of the received signal beyond an expected predetermined signal strength value.

33. The system according to claim 28 wherein the shift or lack of shift in the received signal is a lack of a downward shift in the signal strength to an expected predetermined signal strength value indicative of a failure of the authorized wireless telephone to respond to a power down communication transmitted from the wireless telephone network.

34. The system according to claim 28 wherein the shift or lack of shift in the received signal is a phase shift in the received signal beyond a predetermined range of phase shift values.

35. The system according to claim 34 wherein the phase shift in the received signal is a phase shift of a signaling audio tone (SAT) contained in the received signal.

36. The system according to claim 28, further comprising:

an interface line connected to the communication channel receiver and controlled by the processor to disable a demodulator of the communication channel receiver during receipt of dialed digits from the unauthorized wireless telephone.

37. The system according to claim 28, further comprising:

a radio frequency transmitter connected to the processor and operable to transmit an interfering signal on the communication channel during receipt of dialed digits from the unauthorized wireless telephone.

38. The system according to claim 28, further comprising:

a signal generator connected to the communication channel receiver and operable to generate and insert an interfering signal into the communication channel receiver to prevent the unauthorized wireless telephone from establishing the new telephone connection through the wireless telephone network.

39. The system according to claim 28, further comprising:

a radio frequency transmitter connected to the processor and operable to transmit on the communication channel a call termination communication to the wireless telephone network when the processor determines that the unauthorized access to the communication channel by the unauthorized wireless telephone has occurred.

40. In a cellular telephone network including a voice channel receiver generating a strength indicator signal indicative of the strength of a signal received from the voice channel, a system for detecting an unauthorized access to the voice channel within a cell and assigned to an authorized cellular telephone having an established telephone connection thereon, the system comprising:

a message decoder connected to the voice channel receiver and operable to extract messages contained in the received signal;

a processor connected to the voice channel receiver for receiving the strength indicator signal and the message decoder for receiving the extracted messages;

a memory; and

a process stored in the memory and running on the processor to detect in the received signal an unexpected shift or lack of an expected shift indicative of transmission of a signal on the voice channel by an unauthorized cellular telephone and to detect from the extracted messages a message indicative of a request to establish a new telephone connection within the same cell as the voice channel, the process being executable to determine the unauthorized access to the voice channel by the unauthorized cellular telephone when both the shift or lack of shift in the received signal and the message indicative of the request to establish the new telephone connection are detected.

41. The system according to claim 40 wherein the data decoder includes:

an analog to digital converter connected to the communication channel receiver to convert the received signal into a digital signal for analysis by the process.

42. The system according to claim 41 wherein the analog to digital converter converts the strength indicator signal into a digital strength indicator signal for analysis by the process.

43. In a wireless telephone network, a method of detecting an unauthorized access to a communication channel assigned to an authorized wireless telephone during an ongoing communication with the authorized telephone, comprising the steps of:

monitoring a signal received from the communication channel;

detecting at least two of the following events (i) to (iii);

(i) an upward shift in the signal strength of the received signal beyond an expected predetermined signal strength value,

(ii) a lack of downward shift in the signal strength of the received signal to an expected predetermined signal strength value indicative of a failure of the authorized wireless telephone to respond to a power down message, and

(iii) a phase shift in the received signal beyond a predetermined range of phase shift values; and

determining that an unauthorized access to the communication channel of the authorized telephone by an unauthorized wireless telephone has occurred when at least two of the events (i) to (iii) are detected.