Method of recognizing fraudulent wireless emergency service calls

• US 7,302,250 B2
• Filed: 01/13/2003
• Issued: 11/27/2007
• Est. Priority Date: 01/13/2003
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Rollender, Douglas H., Chin, Mary W.
• Primary Examiner(s): Trost; William
• Assistant Examiner(s): Santiago-Cordero; Marivelisse
• Application Number:
  US10/340,707
• Publication Number:
  US 20040203575A1
• Time in Patent Office: 1,779 Days
• Field of Search: 455/404.1, 455/410
• US Class Current: 455/404.1
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 2242/04 for emergency applications
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections

Abstract

In the method of recognizing fraudulent emergency calls from a mobile station, a mobile station originating an emergency call is identified based on a mobile equipment identity received from the mobile station. A count of emergency calls received from the identified mobile station is generated and an incoming emergency call from the identified mobile station is determined as fraudulent based on the count.

Claims

1. A method of recognizing fraudulent emergency calls from a mobile station, comprising:

identifying a source of an emergency call based on a mobile equipment identity received from a mobile station originating the emergency call;

counting a number of emergency calls received from the identified source;

deciding whether an incoming emergency call from the identified source is fraudulent by comparing the counted number of emergency calls and a count threshold value; and

forwarding the incoming call to a fraudulent call handling entity if the counted number of emergency calls exceeds a threshold value.

2. The method of claim 1, wherein

the counting step counts the number of emergency calls received from the identified source within a predetermined period of time ending with a currently received emergency call from the identified source.

3. The method of claim 1, further comprising:

storing, in a database, an emergency call record for each emergency call in association with the mobile equipment identity appearing as a source entry in the database.

4. The method of claim 3, wherein the counting step counts emergency call records of emergency calls received within a predetermined period of time ending with a currently received emergency call from the identified source.

5. The method of claim 3, wherein the storing step stores a time stamp in association with each emergency call record, the time stamp indicating a time that an emergency call associated with the emergency call record was received.

6. The method of claim 5, wherein the counting step counts emergency call records having time stamps indicating receipt of an emergency call within a predetermined period of time ending with a currently received emergency call from the identified source.

7. The method of claim 6, further comprising:

removing an emergency call record from the database when the time stamp for the emergency call record is greater than the predetermined period of time.

8. The method of claim 7, further comprising:

removing a source entry from the database based on a received signal.

9. The method of claim 7, further comprising:

removing a source entry from the database when a predetermined event occurs.

10. The method of claim 6, further comprising:

removing an oldest emergency call record from the database when a number of call records exceeds a sum of the count threshold plus one.

11. The method of claim 1, further comprising:

blocking the incoming emergency call when the deciding step decides that an incoming call is fraudulent.

12. The method of claim 1, further comprising:

routing the incoming emergency call to a recorded message when the deciding step decides that an incoming emergency call is fraudulent.

13. The method of claim 1, further comprising:

routing the incoming emergency call to an operator handling fraudulent emergency calls when the deciding step decides that an incoming emergency call is fraudulent.

14. The method of claim 1, wherein the identifying, counting and deciding steps are performed at a mobile switching center.

15. The method of claim 1, wherein the identifying, counting and deciding steps are performed at a PSAP.

16. The method of claim 1, wherein the identifying step identifies a source based on the mobile equipment identity and a mobile station identifier received from the mobile station originating the emergency call.

17. The method of claim 16, further comprising:

storing, in a database, an emergency call record for each emergency call in association with a unique pair of the mobile equipment identity and the mobile station identifier appearing as a source entry in the database.

18. A method of recognizing fraudulent emergency calls from a mobile station, comprising:

performing, at a first network entity, the steps of,

generating a first count of emergency calls received at the first network entity from a source, and

deciding whether an incoming emergency call from the source is fraudulent based on the first count; and

performing, at a second network entity, the steps of,

generating a second count of emergency calls received at the second network entity from the source, and

deciding whether an incoming emergency call from the source is fraudulent based on the second count.

19. The method of claim 18, wherein the source is identified at the first and second network entities based on a mobile equipment identity of a mobile station originating the emergency call.

20. The method of claim 19, wherein the source is identified at the first and second network entities based on the mobile equipment identity and a mobile station identifier of the mobile station.

21. The method of claim 19, wherein

the performing at a first network entity step includes

storing, in a first database, an emergency call record and time stamp for each emergency call in association with the mobile equipment identity appearing as a source entry in the database, the time stamp indicating a time that an emergency call associated with the emergency call record was received, and wherein

the generating step generates the count by counting emergency call records having time stamps indicating receipt of an emergency call within a predetermined period of time ending with a currently received emergency call from the identified source;

and

the performing at a second network entity step includes.

storing, in a second database, an emergency call record and time stamp for each emergency call in association with the mobile equipment identity appearing as a source entry in the database, the time stamp indicating a time that an emergency call associated with the emergency call record was received, and wherein

the generating step generates the count by counting emergency call records having time stamps indicating receipt of an emergency call within a predetermined period of time ending with a currently received emergency call from the identified source.

22. The method of claim 21, wherein

the performing at a second network entity step includes removing a source entry from the second database when a first predetermined event occurs;

and

the performing at a first network entity step includes periodically reconciling the first database with the second database to remove source entries from the first database.

23. The method of claim 22, wherein the first predetermined event is failure to receive an emergency call from the source after another predetermined period of time.

24. The method of claim 22, wherein the first predetermined event is an instruction received from a user.

25. The method of claim 22, wherein the performing at a first network entity step includes removing the source entry from the first database when a second predetermined event occurs.

26. The method of claim 18, wherein the first network entity is a mobile switching center and the second network entity is a PSAP.

27. The method of claim 18, wherein the performing at a first network entity step includes one of blocking the incoming emergency call and routing the emergency call to a predetermined destination when the deciding at the first network step decides that an incoming call is fraudulent.

28. The method of claim 18, wherein the performing at a second network entity step includes one of blocking the incoming emergency call and routing the emergency call to a predetermined destination when the deciding at the second network step decides that an incoming call is fraudulent.