US5953652A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Detection of fraudulently registered mobile phones
Assignee: AT&T Mobility II LLC
•
Filing: 1997-01-24
•
Granted: 1999-09-14
•
Expires: 2017-01-24
Abstract
Abstract A system and method is provided for detecting fraudulent use of a unique identifier associated with an authorized mobile station in a wireless telecommunications network. A monitoring system passively collects data associated with the registration of one or more mobile stations utilizing the unique identifier. A fraud detection processor analyzes the collected data using a first pattern recognition device. The pattern recognition device determines the periodicity of successive registration messages associated with the unique identifier of the authorized mobile station and a suspected fraudulent event is identified when the time between successive registration messages is non-periodic. A second pattern recognition device may be utilized alone or in combination with the first pattern recognition device to identify suspected fraudulent activity when an apparent velocity of the mobile station utilizing the unique identifier between successive registration messages exceeds a predetermined maximum velocity. The apparent velocity is based upon the approximated geographical distance and time between successive registration messages. Upon the detection of a suspected fraudulent event by the first and/or second pattern recognition devices, an authentication system may be utilized to identify a suspected mobile station as an unauthorized mobile station when a response to an authentication challenge received from the suspected mobile station is not substantially the same as a predicted response calculated by the authentication system based upon at least the unique identifier of the authorized mobile station.
Inventors
- 👤 Umesh J. Amin
- 👤 Lorin B. Rowe
- 👤 Russell John Waughman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 20:39
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/14; H04L63/1408; H04W; H04W12/00; H04W12/12; H04W12/126
Claims Analysis
Total Claims: 32
Claim 1
Independent Claim
68 words
A method of detecting fraudulent use of a mobile station in a wireless telecommunications network, the mobile station having, a unique identifier associated therewith, the method comprising the steps of: determining at least two actual elapsed time periods between successive registrations associated with the unique identifier of the mobile station; and detecting a suspected fraudulent event when the actual elapsed time periods between successive registrations are substantially non-periodic.
Claim 2
Independent Claim
68 words
A method of detecting fraudulent use of a mobile station in a wireless telecommunications network, the mobile station having, a unique identifier associated therewith, the method comprising the steps of: determining at least two actual elapsed time periods between successive registrations associated with the unique identifier of the mobile station; and detecting a suspected fraudulent event when the actual elapsed time periods between successive registrations are substantially non-periodic.
Claim 3
Dependent Claim
91 words
The method according to claim 1, further comprising the steps of: identifying a switch in the wireless network where the mobile station is registered; determining the constant registration period associated with the switch, the constant registration period defining the expected time period between successive registrations by the mobile station to the switch; and comparing the actual elapsed time period between successive registrations associated with the unique identifier of the mobile station to the constant registration period associated with the switch to determine whether the actual elapsed time period is substantially non-periodic.
Claim 4
Dependent Claim
33 words
The method according to claim 2, wherein the actual elapsed time period between successive registrations is substantially non-periodic when the actual elapsed time period corresponds to at least two different constant registration periods.
Claim 5
Dependent Claim
29 words
The method according to claim 1, further comprising the step of monitoring registration messages associated with the unique identifier to determine the actual elapsed time period between successive registrations.
Claim 6
Dependent Claim
28 words
The method according to claim 4, wherein the registration messages are passively monitored at the Home Location Register associated with the unique identifier of an authorized mobile station.
Claim 7
Dependent Claim
68 words
The method according to claim 1, further comprising the steps of: receiving a response to an authentication challenge from the mobile station; determining a predicted response based upon at least the unique identifier of the mobile station; comparing the received response to the predicted response; and identifying the mobile station as an unauthorized mobile station when the received response is not substantially the same as the predicted response.
Claim 8
Dependent Claim
27 words
The method according to claim 6, further comprising the step of providing an indication of a fraudulent event when the mobile station is identified as being unauthorized.
Claim 9
Dependent Claim
32 words
The method according to claim 6, further comprising the step of instructing the wireless telecommunications network to take a predefined action in response to identification of the mobile station as being unauthorized.
Claim 10
Dependent Claim
106 words
The method according to claim 1, further comprising the steps of: determining the location of the mobile station within the wireless network at each registration associated with unique identifier; determining the approximate distance between the determined locations for successive registrations associated with the unique identifier; calculating an apparent velocity of the mobile station between successive registrations based upon the approximated distance and the actual elapsed time period between successive registrations; comparing the apparent velocity with a predetermined maximum velocity; and detecting a suspected fraudulent event when the apparent velocity exceeds the predetermined maximum velocity for successive registrations associated with the unique identifier of the mobile station.
Claim 11
Dependent Claim
68 words
The method according to claim 9, further comprising the steps of: receiving a response to an authentication challenge from the mobile station; determining a predicted response based upon at least the unique identifier of the mobile station; comparing the received response to the predicted response; and identifying the mobile station as an unauthorized mobile station when the received response is not substantially the same as the predicted response.
Claim 12
Dependent Claim
27 words
The method according to claim 10, further comprising the step of providing an indication of a fraudulent event when the mobile station is identified as being unauthorized.
Claim 13
Dependent Claim
32 words
The method according to claim 8, further comprising the step of instructing the wireless telecommunications network to take a predefined action in response to identification of the mobile station as being unauthorized.
Claim 14
Independent Claim
86 words
A method of detecting fraudulent use of a unique identifier associated with an authorized mobile station in a wireless telecommunications network, comprising the steps of: monitoring registration messages associated with the unique identifier; determining a first elapsed time between successive first and second registration messages associated with the unique identifier; determining a second elapsed time between the second registration and a successive third registration associated with the unique identifier; detecting a suspected fraudulent event when the first and second elapsed times are not substantially the same.
Claim 15
Independent Claim
86 words
A method of detecting fraudulent use of a unique identifier associated with an authorized mobile station in a wireless telecommunications network, comprising the steps of: monitoring registration messages associated with the unique identifier; determining a first elapsed time between successive first and second registration messages associated with the unique identifier; determining a second elapsed time between the second registration and a successive third registration associated with the unique identifier; detecting a suspected fraudulent event when the first and second elapsed times are not substantially the same.
Claim 16
Dependent Claim
94 words
The method according to claim 13, further comprising the steps of: identifying at least one switch in the wireless network where a mobile station utilizing the unique identifier is registered; determining the constant registration period associated with the switch, the constant registration period defining the expected time period between successive registrations by the mobile station; comparing the elapsed time between successive registrations to the constant registration period associated with the switch; and detecting a suspected fraudulent event when the first or second elapsed time is not substantially the same as the constant registration period.
Claim 17
Dependent Claim
29 words
The method according to claim 13, wherein the registration messages are passively monitored at the Home Location Register (HLR) associated with the unique identifier of the authorized mobile station.
Claim 18
Dependent Claim
27 words
The method according to claim 13, wherein the unique identifier is the unique mobile identification number (MIN) and equipment serial number (ESN) of the authorized mobile station.
Claim 19
Dependent Claim
75 words
The method according to claim 13, further comprising the steps of: receiving a response to an authentication challenge from a suspected mobile station utilizing the unique identifier; determining a predicted response based upon at least the unique identifier of the authorized mobile station; comparing the received response to the predicted response; and identifying the suspected mobile station as an unauthorized mobile station when the received response is not substantially the same as the predicted response.
Claim 20
Dependent Claim
28 words
The method according to claim 17, further comprising the step of providing an indication of a fraudulent event when the suspected mobile station is identified as being unauthorized.
Claim 21
Dependent Claim
33 words
The method according to claim 17, further comprising the step of instructing the wireless telecommunications network to take a predefined action in response to identification of the suspected mobile station as being unauthorized.
Claim 22
Dependent Claim
128 words
The method according to claim 13, further comprising the steps of: monitoring the successive first and second registration messages associated with the unique identifier to determine the respective location of the mobile station within the wireless network at the time of each of the registration messages; determining the approximate geographic distance between the respective locations of the mobile station at the time of the first and second registration messages; calculating an apparent velocity of the mobile station between the first and second successive registration messages based upon the approximated geographical distance and the first elapsed time between the first and second successive registration messages; comparing the apparent velocity with a predetermined maximum velocity; and detecting a suspected fraudulent event when the apparent velocity exceeds the predetermined maximum velocity.
Claim 23
Dependent Claim
75 words
The method according to claim 20, further comprising the steps of: receiving a response to an authentication challenge from a suspected mobile station utilizing the unique identifier; determining a predicted response based upon at least the unique identifier of the authorized mobile station; comparing the received response to the predicted response; and identifying the suspected mobile station as an unauthorized mobile station when the received response is not substantially the same as the predicted response.
Claim 24
Dependent Claim
28 words
The method according to claim 21, further comprising the step of providing an indication of a fraudulent event when the suspected mobile station is identified as being unauthorized.
Claim 25
Dependent Claim
33 words
The method according to claim 21, further comprising the step of instructing the wireless telecommunications network to take a predefined action in response to identification of the suspected mobile station as being unauthorized.
Claim 26
Independent Claim
100 words
A system for detecting fraudulent use of a unique identifier associated with an authorized mobile station in a wireless telecommunications network, comprising: a monitoring system for collecting data associated with the registration of one or more mobile stations utilizing the unique identifier; and a fraud detection processor in communication with the monitoring system for analyzing the data collected by the monitoring system, the processor comprising a first pattern recognition device for determining the periodicity of successive registration messages associated with the unique identifier, wherein a suspected fraudulent event is identified when the time periods between successive registration messages are non-periodic.
Claim 27
Independent Claim
100 words
A system for detecting fraudulent use of a unique identifier associated with an authorized mobile station in a wireless telecommunications network, comprising: a monitoring system for collecting data associated with the registration of one or more mobile stations utilizing the unique identifier; and a fraud detection processor in communication with the monitoring system for analyzing the data collected by the monitoring system, the processor comprising a first pattern recognition device for determining the periodicity of successive registration messages associated with the unique identifier, wherein a suspected fraudulent event is identified when the time periods between successive registration messages are non-periodic.
Claim 28
Dependent Claim
45 words
The system according to claim 24, further comprising a passive monitor tap for passively monitoring data at the Home Location Register (HLR) associated with the unique identifier of the authorized mobile station, the passively monitored data being transmitted from the tap to the monitoring system.
Claim 29
Dependent Claim
22 words
The system according to claim 25, wherein the tap passively monitors data on at least one data link connected to the HLR.
Claim 30
Dependent Claim
27 words
The system according to claim 24, wherein the unique identifier is the unique mobile identification number (MIN) and equipment serial number (ESN) of the authorized mobile station.
Claim 31
Dependent Claim
61 words
The system according to claim 24, wherein the fraud detection processor further comprises a second pattern recognition device for identifying suspected fraudulent activity when an apparent velocity of the mobile station utilizing the unique identifier between successive registration messages exceeds a predetermined maximum velocity, the apparent velocity being based upon the approximated geographical distance and time between the successive registration messages.
Claim 32
Dependent Claim
61 words
The system according to claim 24, further comprising an authentication system for identifying a suspected mobile station as an unauthorized mobile station when a response to an authentication challenge received from the suspected mobile station is not substantially the same as a predicted response calculated by the authentication system based upon at least the unique identifier of the authorized mobile station.
References Cited (Backward Citations)
EP0336079A2
Cited
US5335265A
Cited
US5329573A
Cited
US5243652A
Cited
US5345595A
Cited
US5483465A
Cited
US5420908A
Cited
US5541977A
Cited
US5455863A
Cited
US5481611A
Cited
US5438570A
Cited
US5535431A
Cited
US5509075A
Cited
US5537474A
Cited
WO1996015643A1
Cited
US5734977A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-09-13 | 2003-03-15 | 2003-09-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-09-13 | 2007-03-15 | 2007-09-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-09-13 | 2011-03-15 | 2011-09-14 | $7700.00 | Window Closed / Lapsed |