METHOD FOR DETECTING ATTACKS TO MULTIMEDIA SYSTEMS AND MULTIMEDIA SYSTEM WITH ATTACK DETECTION FUNCTIONALITY
    1.
    发明申请
    METHOD FOR DETECTING ATTACKS TO MULTIMEDIA SYSTEMS AND MULTIMEDIA SYSTEM WITH ATTACK DETECTION FUNCTIONALITY 有权
    用于检测多媒体系统的攻击方法和具有攻击检测功能的多媒体系统

    公开(公告)号:US20110041181A1

    公开(公告)日:2011-02-17

    申请号:US12674480

    申请日:2008-08-21

    IPC分类号: G06F21/00

    摘要: A method for detecting attacks to multimedia systems, wherein a communication path (1) is established within the multimedia system by a multimedia communication flow between a communication source and a communication destination, is characterized in that at least two devices (3, 4, 8) are provided along the communication path (1), each the device (3, 4, 8) acting as inspection device (2) that is enabled to inspect the multimedia communication flow that transits the inspection device (2), and that the results of the single inspections are accumulated along the communication path (1). Furthermore, a multimedia system with attack detection functionality is described.

    摘要翻译: 一种用于检测对多媒体系统的攻击的方法,其中在通信源和通信目的地之间的多媒体通信流中在多媒体系统内建立通信路径(1),其特征在于,至少两个设备(3,4,8 )沿着通信路径(1)提供,每个用作检查设备(2)的设备(3,4,8)能够检查通过检查设备(2)的多媒体通信流,并且结果 的单次检查沿着通信路径(1)累积。 此外,描述了具有攻击检测功能的多媒体系统。

    Method for detecting attacks to multimedia systems and multimedia system with attack detection functionality
    2.
    发明授权
    Method for detecting attacks to multimedia systems and multimedia system with attack detection functionality 有权
    用于检测具有攻击检测功能的多媒体系统和多媒体系统的攻击方法

    公开(公告)号:US09032515B2

    公开(公告)日:2015-05-12

    申请号:US12674480

    申请日:2007-08-21

    IPC分类号: G06F11/00 H04L29/06

    摘要: A method for detecting attacks to multimedia systems, wherein a communication path (1) is established within the multimedia system by a multimedia communication flow between a communication source and a communication destination, is characterized in that at least two devices (3, 4, 8) are provided along the communication path (1), each the device (3, 4, 8) acting as inspection device (2) that is enabled to inspect the multimedia communication flow that transits the inspection device (2), and that the results of the single inspections are accumulated along the communication path (1). Furthermore, a multimedia system with attack detection functionality is described.

    摘要翻译: 一种用于检测对多媒体系统的攻击的方法,其中在通信源和通信目的地之间的多媒体通信流中在多媒体系统内建立通信路径(1),其特征在于,至少两个设备(3,4,8 )沿着通信路径(1)提供,每个用作检查设备(2)的设备(3,4,8)能够检查通过检查设备(2)的多媒体通信流,并且结果 的单次检查沿着通信路径(1)累积。 此外,描述了具有攻击检测功能的多媒体系统。

    MALICIOUS CALL DETECTION APPARATUS, MALICIOUS CALL DETECTING METHOD AND COMPUTER PROGRAM FOR DETECTING MALICIOUS CALLS
    3.
    发明申请
    MALICIOUS CALL DETECTION APPARATUS, MALICIOUS CALL DETECTING METHOD AND COMPUTER PROGRAM FOR DETECTING MALICIOUS CALLS 有权
    恶意呼叫检测装置,恶意呼叫检测方法和用于检测恶意呼叫的计算机程序

    公开(公告)号:US20120110170A1

    公开(公告)日:2012-05-03

    申请号:US13266376

    申请日:2010-04-28

    IPC分类号: G06F15/173

    摘要: To improve detection accuracy of SPIT, first, an identification information gathering apparatus receives various identification information from an IP phone terminal which has transmitted an INVITE message. A PUCI server generates bind identification information by binding or associating various identification information received from an identification information gathering apparatus via an SIP server and registers the bind identification information to a gray list stored in a list storing portion. A SPIT determination portion evaluates the bind identification information in reference to the gray list and determines whether or not the session start request from the IP phone terminal is allowed.

    摘要翻译: 为了提高SPIT的检测精度,首先,识别信息收集装置从发送了INVITE消息的IP电话终端接收各种识别信息。 PUCI服务器通过经由SIP服务器绑定或关联从识别信息收集装置接收的各种识别信息来生成绑定标识信息,并将绑定标识信息登记到存储在列表存储部分中的灰色列表。 SPIT确定部分参考灰色列表来评估绑定标识信息,并确定是否允许来自IP电话终端的会话开始请求。

    Communication system and processing method
    6.
    发明授权
    Communication system and processing method 有权
    通讯系统及处理方法

    公开(公告)号:US08406396B2

    公开(公告)日:2013-03-26

    申请号:US13266392

    申请日:2010-04-22

    IPC分类号: H04M1/56

    摘要: A communication system shares terminal identification information (TII) used for identifying a terminal that sends a spam phone call, with another communication system belonging to another network provider, and includes: a storage section that stores the TII of a terminal that sends a spam phone call; a transmission section that transmits the TII stored in the storage section to the other communication system; a reception section that receives the TII used for identifying the terminal that sends the spam phone call; a registration section that registers the TII received by the reception section in the storage section; and a spam phone call determination section that determines whether there is a match between terminal information indicating information of an outgoing call terminal that sends a connection request, and the TII stored in the storage section, thereby determining whether the outgoing call terminal sends a spam phone call.

    摘要翻译: 通信系统与另一个属于另一网络提供商的通信系统共享用于识别发送垃圾电话呼叫的终端的终端识别信息(TII),并且包括:存储部,其存储发送垃圾电话的终端的TII 呼叫; 传输部分,其将存储在存储部分中的TII发送到另一通信系统; 接收部分,其接收用于识别发送垃圾电话呼叫的终端的TII; 注册部,其将由所述接收部接收的所述TII登记在所述存储部中; 以及垃圾电话呼叫确定部分,确定是否存在指示发送连接请求的呼出终端的信息的终端信息与存储在存储部分中的TII之间的匹配,从而确定呼出呼叫终端是否发送垃圾电话 呼叫。

    PROTECTION AGAINST UNSOLICITED COMMUNICATION FOR INTERNET PROTOCOL MULTIMEDIA SUBSYSTEM
    7.
    发明申请
    PROTECTION AGAINST UNSOLICITED COMMUNICATION FOR INTERNET PROTOCOL MULTIMEDIA SUBSYSTEM 有权
    互联网协议多媒体子系统不安全通信保护

    公开(公告)号:US20110289217A1

    公开(公告)日:2011-11-24

    申请号:US13122263

    申请日:2009-10-06

    IPC分类号: H04L29/06 G06F15/173

    摘要: A PUCI system is designed to process an incoming call originated by the user equipment toward the counterpart user equipment via an EMS node having a PUCI-light functionality, which includes an IBCF/I-CSCF, a S-CSCF, and a database storing the PUCI-light information. Through a query to the database indicating a suspicious session in relation to the incoming call, the IMS node immediately blocks the suspicious session or simply marks the suspicious session for the further processing at a subsequent node. The reason for rejection is included in a SIP BYE/ERROR message of an original session setup message, which is interpreted by a previous IMS node so as to obtain the relevant information from a SIP header. The relevant information is stored in either a global operator policy database or a local database, thus enabling a PUCI-negating IMS node to reject an unsolicited call related to the blocked session.

    摘要翻译: PUCI系统被设计为经由具有PUCI轻功能的EMS节点处理由用户设备发起的来话给对方的用户设备,该EMS节点包括IBCF / I-CSCF,S-CSCF和存储 PUCI-light信息。 通过对数据库的查询指示相对于来话呼叫的可疑会话,IMS节点立即阻止可疑会话,或简单地标记可疑会话,以便在后续节点进一步处理。 拒绝的原因包括在原始会话建立消息的SIP BYE / ERROR消息中,由先前IMS节点解释,以便从SIP报头获得相关信息。 相关信息存储在全局运营商策略数据库或本地数据库中,从而使PUCI否定IMS节点能够拒绝与被阻塞会话相关的主动呼叫。

    Malicious call detection apparatus, malicious call detecting method and computer program for detecting malicious calls
    8.
    发明授权
    Malicious call detection apparatus, malicious call detecting method and computer program for detecting malicious calls 有权
    恶意呼叫检测装置,恶意呼叫检测方法及用于检测恶意呼叫的计算机程序

    公开(公告)号:US09338196B2

    公开(公告)日:2016-05-10

    申请号:US13266376

    申请日:2010-04-28

    摘要: To improve detection accuracy of SPIT, first, an identification information gathering apparatus receives various identification information from an IP phone terminal which has transmitted an INVITE message. A PUCI server generates bind identification information by binding or associating various identification information received from an identification information gathering apparatus via an SIP server and registers the bind identification information to a gray list stored in a list storing portion. A SPIT determination portion evaluates the bind identification information in reference to the gray list and determines whether or not the session start request from the IP phone terminal is allowed.

    摘要翻译: 为了提高SPIT的检测精度,首先,识别信息收集装置从发送了INVITE消息的IP电话终端接收各种识别信息。 PUCI服务器通过经由SIP服务器绑定或关联从识别信息收集装置接收的各种识别信息来生成绑定标识信息,并将绑定标识信息登记到存储在列表存储部分中的灰色列表。 SPIT确定部分参考灰色列表来评估绑定标识信息,并确定是否允许来自IP电话终端的会话开始请求。

    Protection against unsolicited communication for internet protocol multimedia subsystem
    9.
    发明授权
    Protection against unsolicited communication for internet protocol multimedia subsystem 有权
    防止互联网协议多媒体子系统的主动通信

    公开(公告)号:US09225751B2

    公开(公告)日:2015-12-29

    申请号:US13122263

    申请日:2009-10-06

    IPC分类号: H04L12/16 H04L29/06

    摘要: A PUCI system is designed to process an incoming call originated by the user equipment toward the counterpart user equipment via an EMS node having a PUCI-light functionality, which includes an IBCF/I-CSCF, a S-CSCF, and a database storing the PUCI-light information. Through a query to the database indicating a suspicious session in relation to the incoming call, the IMS node immediately blocks the suspicious session or simply marks the suspicious session for the further processing at a subsequent node. The reason for rejection is included in a SIP BYE/ERROR message of an original session setup message, which is interpreted by a previous IMS node so as to obtain the relevant information from a SIP header. The relevant information is stored in either a global operator policy database or a local database, thus enabling a PUCI-negating IMS node to reject an unsolicited call related to the blocked session.

    摘要翻译: PUCI系统被设计为经由具有PUCI轻功能的EMS节点处理由用户设备发起的来话给对方的用户设备,该EMS节点包括IBCF / I-CSCF,S-CSCF和存储 PUCI-light信息。 通过对数据库的查询指示相对于来话呼叫的可疑会话,IMS节点立即阻止可疑会话,或简单地标记可疑会话,以便在后续节点进一步处理。 拒绝的原因包括在原始会话建立消息的SIP BYE / ERROR消息中,由先前IMS节点解释,以便从SIP报头获得相关信息。 相关信息存储在全局运营商策略数据库或本地数据库中,从而使PUCI否定IMS节点能够拒绝与被阻塞会话相关的主动呼叫。

    COMMUNICATION SYSTEM AND PROCESSING METHOD
    10.
    发明申请
    COMMUNICATION SYSTEM AND PROCESSING METHOD 有权
    通信系统和处理方法

    公开(公告)号:US20120134484A1

    公开(公告)日:2012-05-31

    申请号:US13266392

    申请日:2010-04-22

    IPC分类号: H04M3/42

    摘要: A communication system shares terminal identification information (TII) used for identifying a terminal that sends a spam phone call, with another communication system belonging to another network provider, and includes: a storage section that stores the TII of a terminal that sends a spam phone call; a transmission section that transmits the TII stored in the storage section to the other communication system; a reception section that receives the TII used for identifying the terminal that sends the spam phone call; a registration section that registers the TII received by the reception section in the storage section; and a spam phone call determination section that determines whether there is a match between terminal information indicating information of an outgoing call terminal that sends a connection request, and the TII stored in the storage section, thereby determining whether the outgoing call terminal sends a spam phone call.

    摘要翻译: 通信系统与另一个属于另一网络提供商的通信系统共享用于识别发送垃圾电话呼叫的终端的终端识别信息(TII),并且包括:存储部,其存储发送垃圾电话的终端的TII 呼叫; 传输部分,其将存储在存储部分中的TII发送到另一通信系统; 接收部分,其接收用于识别发送垃圾电话呼叫的终端的TII; 注册部,其将由所述接收部接收的所述TII登记在所述存储部中; 以及垃圾电话呼叫确定部分,确定是否存在指示发送连接请求的呼出终端的信息的终端信息与存储在存储部分中的TII之间的匹配,从而确定呼出呼叫终端是否发送垃圾电话 呼叫。