Detecting a fraudulent mobile station in a mobile communication system using location information of mobile station
View Patent ↗The invention relates to a mobile communication system including mobile stations, a mobile switching center, and a subscriber register containing subscriber data, which includes location information indicating the location of mobile stations. In order to detect the presence of a fraudulent mobile station the system includes a monitor for monitoring the processes which trigger location information changes in the subscriber register, and a detector for detecting and indicating the presence of a fraudulent mobile station if a location information change has been triggered by a process which should not trigger a change of location information in the subscriber register.
1. A method, comprising:
detecting a change of a location area code for a mobile station operating in a mobile communication system, where location area codes for a plurality of mobile stations operating in a plurality of location areas are stored in a register of the mobile communication system that also stores subscriber data pertaining to the plurality of mobile stations;
determining if the change in the location area code is a result of an occurrence of an event that is not expected to trigger a change in a location area code because the event is of such a nature that a valid event of that nature will have been preceded by a location area code change, and thus no location area code change would be expected to accompany the event, wherein the determining comprises examining an event type identifier to determine if the event type identifier indicates that the event is of a type that is not expected to trigger a change in a location area code; and
if the event type identifier indicates that the event is not expected to trigger a change in a location area code, generating a message and transmitting the message to inform an operator of the mobile communication system that the mobile station has the same mobile station identity as another mobile station.
2. The method of claim 1 , where the steps of detecting, determining, generating and transmitting the message are executed at a visitor location register.
3. The method of claim 1 , where determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated call.
4. The method of claim 1 , where determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated short message.
5. The method of claim 1 , where determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated unstructured supplementary service data.
6. The method of claim 1 , where determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated supplementary service.
7. The method of claim 1 , where determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a periodic location update.
8. The method of claim 1 , where the method is performed as a result of execution of at least one computer program by a computer at a visitor location register.
9. An apparatus, comprising:
at least one processor;
memory storing a program of instructions;
wherein the memory storing the program of instructions is configured to, with the at least one processor, cause the apparatus to perform, actions comprising at least:
detecting a change of a location area code for a mobile station operating in a mobile communication system, wherein the apparatus has access to stored data relating to location area codes for a plurality of mobile stations operating in a plurality of location areas, and wherein the apparatus further has access to stored subscriber data pertaining to the plurality of mobile stations;
determining if the change in the location area code is a result of an occurrence of an event that is not expected to trigger a change in a location area code because the event is of such a nature that no location area code change would be expected to accompany the event, wherein the determination comprises examining type identifier to determine if the event type identifier indicates that the event is of a type that is not expected to trigger a change in a location area code and, if the event type identifier indicates that the event is not expected to trigger a change in a location area code, generating a message and transmitting the message to inform an operator of the mobile communication system that the mobile station has the same mobile station identity as another mobile station.
10. The apparatus as in claim 9 , where the apparatus is embodied as a visitor location register.
11. The apparatus as in claim 9 , wherein determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated call.
12. The apparatus as in claim 9 , wherein determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated short message.
13. The apparatus as in claim 9 , wherein determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code occurs when the event is a mobile station originated unstructured supplementary service data.
14. The apparatus as in claim 9 , wherein determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a mobile station originated supplementary service.
15. The apparatus as in claim 9 , wherein determining that the change in the location area code is a result of the occurrence of an event that is not expected to trigger a change in the location area code comprises determining that the event is a periodic location update.
16. A method comprising:
in response to mobile station initiated event when it is located in one of a plurality of location areas associated with a first register of a mobile communication system, where each of the plurality of location areas has an associated location area code, at the first register of the mobile communication system determining that subscriber data for the mobile station is not stored in the first register;
retrieving the subscriber data of the mobile station from a second register of the mobile communication system;
detecting a change in a location area code for the mobile station in the first register from a location area code in the retrieved subscriber data when the location area code for the mobile station in the first register differs from a location area code in the retrieved subscriber data;
determining if the change in the location area code is a result of an occurrence of an event that is one of a set of events that is not expected to trigger a change in a location area code because no location area code change would be expected to accompany the event, wherein the determining comprises examining an event type identifier to determine if the event type identifier indicates that the event is of a type that is not expected to trigger a change in a location area code, and thus no location area code change would be expected to accompany the event; and
if the event type identifier indicates that the event is not expected to trigger a change in a location area code, generating a message and transmitting the message to inform an operator of the mobile communication system that the mobile station has the same mobile station identity as another mobile station.