Short message service spam data analysis and detection
First Claim
Patent Images
1. A method for identifying a potential source of a short message service spam, the method comprising:
- collecting, by a processor, a plurality of call detail records associated with a plurality of short message service messages, wherein a device type allocation code is included in each of the plurality of call detail records;
extracting, by the processor, the device type allocation code from each of the plurality of call detail records, wherein the device type allocation code identifies a manufacturer of a device that is originating the plurality of short message service messages and a model type of the device;
comparing, by the processor, the device type allocation code to a device type watch list, wherein the device type watch list includes device type allocation codes of model types that are associated with short message service spam originators;
identifying, by the processor, the device as the potential source of the short message service spam when the device type allocation code is contained in the device type watch list; and
blocking, by the processor, communications from an account, the account using the device that has been identified as the potential source of the short message service spam based upon the device type allocation code being contained in the device type watch list, wherein the blocking of the account is based on an entropy of time between consecutive short message service messages associated with the account.
4 Assignments
0 Petitions
Accused Products
Abstract
A method and apparatus for identifying a potential source of SMS spam are disclosed. For example, the method collects a plurality of call detail records, extracts at least one feature from each of the plurality of call detail records, and identifies the potential source of the short message service spam by analyzing the at least one feature that is extracted from each of the plurality of call detail records.
13 Citations
20 Claims
-
1. A method for identifying a potential source of a short message service spam, the method comprising:
-
collecting, by a processor, a plurality of call detail records associated with a plurality of short message service messages, wherein a device type allocation code is included in each of the plurality of call detail records; extracting, by the processor, the device type allocation code from each of the plurality of call detail records, wherein the device type allocation code identifies a manufacturer of a device that is originating the plurality of short message service messages and a model type of the device; comparing, by the processor, the device type allocation code to a device type watch list, wherein the device type watch list includes device type allocation codes of model types that are associated with short message service spam originators; identifying, by the processor, the device as the potential source of the short message service spam when the device type allocation code is contained in the device type watch list; and blocking, by the processor, communications from an account, the account using the device that has been identified as the potential source of the short message service spam based upon the device type allocation code being contained in the device type watch list, wherein the blocking of the account is based on an entropy of time between consecutive short message service messages associated with the account. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A non-transitory computer-readable storage medium storing a plurality of instructions which, when executed by a processor, cause the processor to perform operations for identifying a potential source of a short message service spam, the operations comprising:
-
collecting a plurality of call detail records associated with a plurality of short message service messages, wherein a device type allocation code is included in each of the plurality of call detail records; extracting the device type allocation code from each of the plurality of call detail records, wherein the device type allocation code identifies a manufacturer of a device that is originating the plurality of short message service messages and a model type of the device; comparing the device type allocation code to a device type watch list, wherein the device type watch list includes device type allocation codes of model types that are associated with short message service spam originators; identifying the device as the potential source of the short message service spam when the device type allocation code is contained in the device type watch list; and blocking communications from an account, the account using the device that has been identified as the potential source of the short message service spam based upon the device type allocation code being contained in the device type watch list, wherein the blocking of the account is based on an entropy of time between consecutive short message service messages associated with the account. - View Dependent Claims (15, 16, 17)
-
-
18. An apparatus for identifying a potential source of a short message service spam, the apparatus comprising:
-
a processor; and a non-transitory computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising; collecting a plurality of call detail records associated with a plurality of short message service messages, wherein a device type allocation code is included in each of the plurality of call detail records; extracting the device type allocation code from each of the plurality of call detail records, wherein the device type allocation code identifies a manufacturer of a device that is originating the plurality of short message service messages and a model type of the device; comparing the device type allocation code to a device type watch list, wherein the device type watch list includes device type allocation codes of model types that are associated with short message service spam originators; identifying the device as the potential source of the short message service spam when the device type allocation code is contained in the device type watch list; and blocking communications from an account, the account using the device that has been identified as the potential source of the short message service spam based upon the device type allocation code being contained in the device type watch list, wherein the blocking of the account is based on an entropy of time between consecutive short message service messages associated with the account. - View Dependent Claims (19, 20)
-
Specification