System and method for responding to aggressive behavior associated with wireless devices
An embodiment of the invention describes a wireless device comprising a Subscriber Identity Module (SIM) further comprising a memory for storing program code for performing a plurality of operations, and a processor for processing the program code to execute the plurality of operations, the operations including receiving over-the-air instructions via a wireless network from a control center to create a rules set in the SIM, wherein the rules set defines an acceptable behavior of the wireless device, monitoring requests from a wireless modem of the wireless device for access files stored in the SIM, detecting an aggressive behavior of the wireless device based on the rules set, and blocking the wireless modem from generating traffic in the wireless network.
1. A system comprising a control center server and a Mobile Switching Center (MSC) node for managing aggressive behavior of a wireless device in a wireless network, the system comprising:
the control center server comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to perform operations to:
predetermine a wireless device Short Message Service (SMS) signal behavior to develop a wireless device SMS signature that defines an aggressive SMS behavior of the wireless device indexed by a wireless device identifier, wherein the aggressive SMS behavior of the wireless device is present when the wireless device repeatedly tries to send SMS messages in a time frame such that a threshold for the sent SMS messages is exceeded;
retrieve at least one data log from at least one network element comprising at least one of a diagnostic device, a Home Location Register (HLR), the Mobile Switching Center (MSC), and a Short Message Service Center (SMSC), by utilizing the wireless device identifier;
determine a rule set to modify the aggressive SMS behavior, wherein the rule set is indexed by the wireless device identifier and comprises first logic to compare the wireless device SMS signature to aggressive SMS behavior data contained in the least one data log, and second logic to provision the MSC node to control a transmission function of the MSC node;
identify aggressive SMS behavior signals transmitted from the wireless device in accordance with the rule set when the aggressive SMS behavior signals correlates to the aggressive SMS behavior data; and
transmit a provisioning instruction comprising subscriber data to provision the MSC node for real-time blocking of the aggressive SMS behavior signals transmitted from the wireless device to the MSC node, and
the MSC node comprising:
a MSC processor; and
a MSC memory coupled with the MSC processor, wherein the MSC memory is configured to provide the MSC processor with the provisioning instruction which when executed cause the MSC processor to perform MSC operations to:
update subscriber data in a database utilizing the wireless device identifier;
receive, from the wireless device, aggressive SMS behavior signals indicating the aggressive SMS behavior of the wireless device;
identify the subscriber data in the database utilizing the wireless device identifier; and
block the transmission of the aggressive SMS behavior signals sent from the wireless device according to the subscriber data.
2. The system of claim 1 , wherein the subscriber data comprises a parameter to instruct the MSC to block SMS message delivery utilizing the wireless device identifier.
3. The system of claim 1 , wherein the wireless device identifier is an International Mobile Subscriber Identity (IMSI) or an MSISDN.
4. The system of claim 1 , wherein the at least one data log comprises multiple SMS messages.
5. The system of claim 1 , wherein the control center server identifies the aggressive SMS behavior signals when the wireless device generates more than a threshold number of SMS messages per time unit.
6. The system of claim 1 , wherein the control center server identifies the aggressive SMS behavior signals when the wireless device sends more than a threshold number of SMS messages in a time period towards the MSC.
7. The system of claim 1 , wherein the rule set is adapted to different field behaviors of different categories of wireless devices.
8. A method of a control center server and a Mobile Switching Center (MSC) node for managing aggressive behavior of a wireless device in a wireless network, the method comprising:
at the control center server:
predetermining a wireless device Short Message Service (SMS) signal behavior to develop a wireless device SMS signature that defines an aggressive SMS behavior of the wireless device indexed by a wireless device identifier, wherein the aggressive SMS behavior of the wireless device is present when the wireless device repeatedly tries to send SMS messages in a time frame such that a threshold for the sent SMS messages is exceeded;
retrieving at least one data log from at least one network element comprising at least one of a diagnostic device, a Home Location Register (HLR), the Mobile Switching Center (MSC), and a Short Message Service Center (SMSC), by utilizing the wireless device identifier;
determining a rule set to modify the aggressive SMS behavior, wherein the rule set is indexed by the wireless device identifier and comprises first logic to compare the wireless device SMS signature to aggressive SMS behavior data contained in the least one data log, and second logic to provision the MSC node to control a transmission function of the MSC node;
identifying aggressive SMS behavior signals transmitted from the wireless device in accordance with the rule set when the aggressive SMS behavior signals correlates to the aggressive SMS behavior data; and
transmitting a provisioning instruction comprising subscriber data to provision the MSC node for real-time blocking of the aggressive SMS behavior signals transmitted from the wireless device to the MSC node, and
at the MSC node:
updating subscriber data in a database utilizing the wireless device identifier;
receiving, from the wireless device, aggressive SMS behavior signals indicating the aggressive SMS behavior of the wireless device;
identifying the subscriber data in the database utilizing the wireless device identifier; and
blocking the transmission of the aggressive SMS behavior signals sent from the wireless device according to the subscriber data.
9. A system for managing aggressive behavior of a wireless device in a wireless network, the system comprising:
a control center server comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to perform operations to:
predetermine a wireless device Short Message Service (SMS) signal behavior to develop a wireless device SMS signature that defines an aggressive SMS behavior of the wireless device indexed by a wireless device identifier, wherein the aggressive SMS behavior of the wireless device is present when the wireless device repeatedly tries to send SMS messages in a time frame such that a threshold for the sent SMS messages is exceeded;
retrieve at least one data log from at least one network element comprising at least one of a diagnostic device, a Home Location Register (HLR), a Mobile Switching Center (MSC), and a Short Message Service Center (SMSC), by utilizing the wireless device identifier;
determine a rule set to modify the aggressive SMS behavior, wherein the rule set is indexed by the wireless device identifier and comprises first logic to compare the wireless device SMS signature to aggressive SMS behavior data contained in the least one data log, and second logic to provision the MSC node to control a transmission function of the MSC node;
identify aggressive SMS behavior signals transmitted from the wireless device in accordance with the rule set when the aggressive SMS behavior signals correlates to the aggressive SMS behavior data; and
transmit a provisioning instruction comprising subscriber data to provision the MSC node for real-time blocking of the aggressive SMS behavior signals transmitted from the wireless device to the MSC node.
10. The system of claim 9 , wherein the subscriber data comprises a parameter to instruct the MSC to block SMS message delivery utilizing the wireless device identifier.
11. The system of claim 9 , wherein the wireless device identifier is an International Mobile Subscriber Identity (IMSI) or an MSISDN.
12. The system of claim 9 , wherein the at least one data log comprises multiple SMS messages.
13. The system of claim 9 , wherein the control center server identifies the aggressive SMS behavior signals when the wireless device generates more than a threshold number of SMS messages per time unit.
14. The system of claim 9 , wherein the control center server identifies the aggressive SMS behavior signals when the wireless device sends more than a threshold number of SMS messages in a time period towards the MSC.
15. The system of claim 9 , wherein the rule set is adapted to different field behaviors of different categories of wireless devices.