KR101929389B1 - Method and apparatus for sensing piracy terminal - Google Patents

Abstract

According to the present invention, a method for detecting a piracy terminal may detect a piracy terminal through IMEI replication in real time after a terminal is activated by applying a procedure performed when a terminal is powered on to receive a push message. The method comprises the steps of: receiving an information registration request message including a plurality of pieces of terminal identification information transmitted from a terminal to an application server; receiving the pieces of terminal identification information for the terminal registered in a subscriber management server from the subscriber management server; comparing the identification information included in the information registration request message with identification information received from the subscriber management server; and determining the terminal as a normal terminal if all pieces of the identification information matches and determining the terminal as a duplicate terminal if one or more pieces of the identification information do not match as a result of comparison.

Description

TECHNICAL FIELD The present invention relates to a method and apparatus for detecting a pirated terminal,

The present invention relates to a method for detecting an illegal copy terminal, and more particularly, to solve a problem that can be caused by maintaining a closed terminal for a predetermined period by replicating specific information of an opened terminal after the terminal is opened, the present invention relates to an illegal duplicate terminal detection method capable of detecting a duplicate terminal in real time at an application level and an apparatus therefor.

The contents described in this section merely provide background information on the present embodiment and do not constitute the prior art.

Recently, the opening of subsidies for subscription for smartphone cloning and micropayment fraud are emerging as social problems.

It opens a new terminal by borrowing the name of a specific person, replays the IMEI of the normally opened new terminal to the used terminal after a normal opening procedure such as subscriber registration and network authentication procedure. The new terminal can be sold at a price higher than the purchase price at the time of opening and the USIM of the new terminal can be inserted into the IMEI-duplicated used terminal for a certain period of time, thereby maintaining the opening of the new terminal. In this situation, duplication due to counterfeit terminals such as micropayment fraud arising from performing a micropayment using a duplicated terminal, shunting subsidies due to the opening of a new terminal, and a difference arising from dumping the new terminal at a price higher than the purchase price The person gets an unfair advantage, and the name of the information used at the time of opening and the carrier incur huge losses.

However, in the case of a replication terminal through IMEI replication, which has recently become a problem, it is performed by IMEI replication using a replication program after all normal procedures have been performed. Therefore, registration of a subscriber IEMI replication can not be detected in the confirmation or network authentication procedure confirmation step.

In the prior patent (No. 10-2006-0074220) related to the present invention, when a software upgrade of a terminal is required, a software upgrade request is transmitted to all subscription terminals subscribed to a communication company, and a response A method of judging a duplicated terminal by gathering terminal information only for one terminal is proposed.

That is, the precedent patent can identify whether the terminal is a replication terminal only when a software upgrade is required. Since the upgrade request message must be transmitted to all the terminals, excessive traffic is generated. Therefore, if the replication terminal does not respond to the upgrade request, the replication terminal can not be detected.

Therefore, the prior patent can not detect the duplicated terminal in real time, and there is still a problem that it may cause the excessive traffic for detecting a small number of duplicated terminals without considering the burden of the communication network, thereby causing a trouble in the communication service for all the subscribers do.

Korean Patent Laid-Open No. 10-2006-0074220, 2006.07.03 Release (Name: Piracy terminal processing system and method)

An object of the present invention is to provide a method for detecting an illegal duplicate terminal through IMEI replication using an application-level procedure performed to use the terminal after the terminal is opened to solve the above-described problems, and an apparatus therefor.

However, the object of the present invention is not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood from the following description.

According to another aspect of the present invention, there is provided an anti-piracy terminal detection method comprising: receiving an information registration request message including a plurality of terminal identification information from a terminal; Receiving a plurality of terminal identification information for a terminal registered in the subscriber management server from a subscriber management server; Comparing the identification information included in the information registration request message with the identification information received from the subscriber management server; And determining that the terminal is a normal terminal if all the identification information are identical to each other, and determining the terminal as a duplicate terminal if one or more identification information does not match.

Here, the information registration request message may include a plurality of pieces of terminal identification information transmitted when the terminal is powered on, in order to receive a push message for a service provided by a communication service provider, Lt; RTI ID = 0.0 > a < / RTI >

The terminal identification information may include at least one of an operating system (OS), a software version, a terminal model, an International Mobile Subscriber Identity (IMSI), and an International Mobile Equipment Identity (IMEI) and an MDN.

The method may further include notifying the user of the terminal or the subscriber management server that the terminal is a duplicate terminal when the terminal is determined to be a duplicate terminal.

According to another aspect of the present invention, there is provided an apparatus for detecting an illegal copy terminal, comprising: a transmitting / receiving unit transmitting and receiving data to and from a terminal and a subscriber management server; And comparing a plurality of terminal identification information included in an information registration request message received from the terminal with a plurality of terminal identification information for terminals registered in the subscriber management server received from the subscriber management server, And a control unit for generating a message notifying that the terminal is a duplicate terminal when the terminal is a duplicate terminal.

Further, the present invention can provide a computer readable recording medium on which a program for executing the above-described method is recorded.

According to the method and apparatus for detecting an illegal duplicate terminal of the present invention, it is possible to detect whether or not a duplicate terminal is detected by using a procedure accompanied by using the terminal after the terminal opening procedure. Therefore, It is possible to detect the terminal.

Also, since the illegal duplication terminal detection method of the present invention is performed at the application level after the normal opening procedure, it is possible to effectively detect duplication terminals due to IMEI illegal duplication, thereby preventing cost loss of customers and communication companies.

In addition, various effects other than the above-described effects can be directly or implicitly disclosed in the detailed description according to the embodiment of the present invention to be described later.

1 is a diagram for explaining a system for detecting an illegal copy terminal according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating an illegal duplicate terminal detection process according to an embodiment of the present invention.
FIG. 3 is a message flow diagram for an illegal duplicate terminal detection process according to an embodiment of the present invention.
4 is a block diagram showing a main configuration of an illegal duplicate terminal detection apparatus according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the detailed description of known functions and configurations incorporated herein will be omitted when it may unnecessarily obscure the subject matter of the present invention. This is to omit the unnecessary description so as to convey the key of the present invention more clearly without fading. While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. However, it should be understood that the invention is not limited to the specific embodiments thereof, It is to be understood that the invention is intended to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

In addition, when referring to an element as being "connected" or "connected" to another element, it means that it can be connected or connected logically or physically. In other words, it is to be understood that although an element may be directly connected or connected to another element, there may be other elements in between, or indirectly connected or connected.

Also, the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. It is also to be understood that the terms such as " comprising "or" having ", as used herein, are intended to specify the presence of stated features, integers, It should be understood that the foregoing does not preclude the presence or addition of other features, numbers, steps, operations, elements, parts, or combinations thereof.

Also, the terms "part," "module," and the like, which are described in the specification, refer to a unit for processing at least one function or operation, and may be implemented by hardware or software or a combination of hardware and software.

In addition, embodiments within the scope of the present invention include computer-readable media having computer-executable instructions or data structures stored on computer-readable media. Such computer-readable media can be any available media that is accessible by a general purpose or special purpose computer system. By way of example, and not limitation, such computer-readable media can comprise RAM, ROM, EPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or in the form of computer- But is not limited to, a physical storage medium such as any other medium that can be used to store or communicate certain program code means of the general purpose or special purpose computer system, .

Now, an illegal duplication terminal method and an apparatus therefor according to an embodiment of the present invention will be described in detail with reference to the drawings. Here, the same reference numerals are used for similar functions and functions throughout the drawings, and a duplicate description thereof will be omitted. Furthermore, in order to avoid obscuring the concept of the present invention, well-known structures and devices may be omitted, or may be shown in block diagram form centering on the core functions of each structure and device.

1 is a diagram for explaining a system for detecting an illegal copy terminal according to an embodiment of the present invention.

As shown in FIG. 1, the system for detecting an illegal duplicate terminal of the present invention includes a currently used terminal 10, an application server 30, and a subscriber management server 40 connected through a communication network 50 And the counterfeit terminal detection apparatus 100 can be implemented in the application server 30. [ Also, the terminal 20 used for opening means a device which is opened through a first subscription or a device change to a communication company.

It is possible to determine whether the terminal 20 registered in the subscriber management server 40 and the terminal 10 currently used by the user are the same or not in accordance with the normal opening procedure.

In the following description, the terminal 10 is assumed to be the terminal 10 being used by the user after the normal opening procedure, and it is desired to detect whether the terminal 10 is a legitimate terminal or an illegal copy terminal.

The terminal 10 of the present invention is a device capable of transmitting and receiving various data via the communication network 50 in accordance with a user's operation and can perform voice or data communication and stores a browser, A memory, and a microprocessor for executing and controlling various programs.

The terminal 10 of the present invention is registered in the subscriber management server 40 through a computer which has been registered in a normal manner and whose subscriber information is managed through a home location register (HLR) Device.

The terminal 10 of the present invention may be fixed or mobile and may be a mobile station such as a UE, a mobile station (MS), a mobile subscriber station (MSS), a subscriber station (SS), an advanced mobile station (AMS) May be replaced by terms such as a wireless terminal, a MTC (machine-type communication) device, a machine-to-machine (M2M) device, a D2D device, Devices such as a smart phone, a tablet PC having a mobile communication function, and a PDA can be applied according to the method.

The application server 30 means a service device on the side of a communication service provider for transmitting an alarm push message to the terminal 10 for various service applications provided by a communication service provider.

The counterfeit terminal detection apparatus 100 may be implemented in a separate apparatus in association with the application server 30 or with the application server 30, and may be a combination of hardware and / or software executed on such hardware.

When the subscriber management server 40 opens the terminal 20 for the first time when a user who has not previously joined the service of the communication carrier opens the terminal 20 or when the existing subscriber opens the new terminal 20 by changing the device And stores and manages the identification information of the terminals 20 that are opened.

The communication network 50 includes a user access network for supporting communication between the terminals 10 and a core system for providing a communication service for the terminal 10 connected to the access network. An access network including a plurality of base station apparatuses can perform functions related to call processing between terminals 10 and a core system can perform main functions for communication services such as call processing, have.

The terminal 10 of the present invention can perform session connection processing for receiving a push message based on TCP / IP from the application server 20 via the communication network 50. [

FIG. 2 is a flowchart illustrating an illegal duplicate terminal detection process according to an embodiment of the present invention.

First, the terminal 10 transmits an information registration request message including a plurality of terminal identification information to the application server 30 and transmits the information registration request message to the application server 30 or the illegal duplication terminal detection device 100 receives the message (S 200). The plurality of terminal identification information included in the information registration request message is referred to as first identification information.

The information registration request message transmission procedure is an essential procedure every time the power of the terminal 10 is turned on (power on). The session connection with the application server 30 is disconnected and the push message is received from the application server 30 only when the terminal 10 is turned on The terminal 10 transmits the information registration request message and performs a session connection process with the application server 30 in order to receive a push message to inform that the push message is received whenever the terminal 10 is powered on.

The illegal copy terminal detection apparatus 100 receives a plurality of terminal identification information about the terminal 20 registered in the subscriber management server 40 from the subscriber management server 40 (S 202) And the second identification information for identifying the terminal identification information included in the request message.

The second identification information received from the subscriber management server 40 can be received whenever there is a status change to the terminal 20 information such as an initial subscription or a change of an existing subscriber's apparatus.

The first and second identification information includes an MDN (Mobile Directory Number) which is a telephone number and at least one of an OS, a software version, a terminal model, an International Mobile Subscriber Identity (IMSI) May be information including one or more.

The IMSI is an international terminal subscriber identifier, which is used by a cellular network to identify a user and is a unique identifier in all cellular networks. It is designated as a 64-bit field and is represented by 15 digits. The first three digits are the mobile country code (MCC), and the next two or three digits are the mobile network code (MNC). Such an IMSI may be stored in the USIM to identify the subscriber.

The IMEI is an international mobile terminal identifier, which is a 15-digit identification number that identifies a 3GPP (GSM, UMTS, LTE) terminal. The IMEI is an identification number provided by a terminal manufacturer to identify a valid terminal and assigned to a terminal manufactured by the terminal manufacturer.

If the IMSI is the only identifier that identifies the 'subscriber', then the IMEI can be used to check the validity of the 'terminal', and thus it can be used to prevent the stolen phone from connecting to the network.

However, in recent terminal duplication, the IMEI of the terminal 20 normally opened under the name of a specific person is duplicated, the terminal 20 used for opening is inserted by inserting the USIM of the terminal 20 used for the opening into the terminal 10 to be used, It is difficult to detect whether or not the terminal is a duplicate terminal when the terminal 10 is used.

The method for detecting an illegal duplicate terminal of the present invention will be described below. If the terminal 20 used for the opening and the terminal 10 being used are the same through the communication network 50 on the user side after completing the opening procedure, All of the second identification information will be the same, and if any of the two identification information is not identical, it can be regarded as a duplicate terminal. Even if the IMEI is replicated, there may exist an area which is not completely replicable in the current replication program, so that the IMEI of the terminal 20 used and the IMEI of the terminal 10 in use may be different, However, when IMEI is copied to the used B model and USIM is inserted and used, the terminal model, OS, software version, and the like may be different.

Accordingly, when the terminal 10 is powered on, the counterfeit terminal detection apparatus 100 compares the first identification information included in the received information registration request message with the second identification information of the terminal 20 used for the opening (S204).

Even if the IMEI is replicated using the replication program, the MDN of the telephone number must be the same so that the terminal 20 used for opening is used, so that the terminal to be compared can be identified based on the MDN among the identification information. That is, the terminal 20 having the same MDN as the MDN of the terminal 10 is checked to compare the identification information.

If all of the other identification information is the same based on the MDN, the terminal 20 registered in the subscriber management server 40 and the terminal 10 currently used by the user are the same, ).

However, when the currently used terminal 10 is duplicated, one or more pieces of identification information of the terminal 10 in use and the terminal 20 used for the opening are different from each other. Therefore, any one of the first and second identification information It is determined to be a duplicate terminal (S 206).

If it is determined that the terminal is a duplicate terminal, it can notify that it is a terminal duplicated to the subscriber management server 40 or the currently used terminal 10 (S 210).

The method of detecting an illegal duplicate terminal of the present invention is performed in the process of registering information in an application server 30 for receiving a push message provided by a communication provider in using the terminal 10 after a normal operation procedure, .

That is, when using the terminal 10, when the terminal 10 is turned on, it transmits an information registration request message including the first identification information to the application server 30 transmitting the push message for the service provided by the communication service provider And it is possible to detect whether or not the clone terminal can not be detected during the opening process or the IMEI cloning process using the clone program by comparing it with the second identification information at the time of opening.

In addition, the procedure for transmitting the information registration request message is an operation performed to receive an alarm for the service of the communication service provider to which the terminal 10 is subscribed, and the operation of turning on the power of the terminal 10 after the insertion of the USIM It is possible to detect in real time whether or not the terminal 10, which is currently being used and maintained in use, is a duplicate terminal.

FIG. 3 is a message flow diagram for an illegal duplicate terminal detection process according to an embodiment of the present invention.

The application server 30 that transmits the push message to the terminal 10 currently in use transmits a push message from the terminal 10 to the terminal 10 in order to confirm whether the terminal 10 in use is currently powered on and can receive the push message, Receives the information registration request message including the first identification information and receives the second identification information about the terminal 20 from which the activation procedure is performed from the subscriber management server 40 for confirming the subscriber information S 300, 302). The second identification information received from the subscriber management server 40 can receive the updated identification information every time there is a change in the status of the device change.

The counterfeit terminal detection apparatus 100 compares the second identification information received from the subscriber management server 40 with the first identification information included in the information registration request message (S 304), and if the comparison result indicates that one or more identification information is inconsistent The terminal 10 that is currently in use and the terminal 20 that has undergone the opening procedure are different from each other, so that it can be determined to be the duplicating terminal (S306). The information on the detected duplicate terminal is notified to the subscriber management server 40 (S308).

On the other hand, whether the terminal is an illegal copy terminal notified to the subscriber management server 40 can be informed to a server of an external organization such as the police agency, and prevent damage of good faith in advance.

4 is a block diagram showing a main configuration of an illegal duplicate terminal detection apparatus according to an embodiment of the present invention.

The transmission and reception unit 110 transmits and receives data to and from the terminal 10 and the subscriber management server 40 through the communication network 50 and transmits the data to the terminals 10 and 20, And receives the terminal identification information. As described above, the plurality of terminal identification information may include a Mobile Directory Number (MDN), an operating system (OS), a software version, a terminal model, an International Mobile Subscriber Identity (IMSI), an International Mobile Equipment Identity (IMEI) .

In addition, when a duplicate terminal is detected, the transceiver unit 110 may transmit a message informing the user of the terminal 10 or the subscriber management server 40 that the terminal is a duplicate terminal.

The control unit 120 may be an operating system and a process unit for driving each configuration.

The control unit 120 receives the terminal identification information (first identification information) included in the information registration request message received from the terminal 10 and the terminal identification information (first identification information) received from the subscriber management server 40 according to the embodiment of the present invention The second identification information), and controls the overall process of detecting whether the terminal is a duplicate terminal.

Even if the USIM is inserted after the IMEI of the terminal 20 used for the opening is copied and the other terminal 10 is used, the MDN of the telephone number is the same, so that the MDN compares the identification information between the same terminals It can be confirmed whether the used terminal 20 is different from the currently used terminal 10. At this time, if all the terminal identification information are the same, it is determined that the terminal is the normal terminal, and if any terminal identification information is different, it can be determined that the terminal is a duplicated terminal.

In addition, when it is confirmed that the terminal is an illegal duplicate terminal, the controller 120 notifies the user or the subscriber management server 40 that the terminal is a duplicate terminal, and may generate a notification message in order to prevent subsequent damage.

The storage unit 130 is a device for storing data. The storage unit 130 includes a main storage device and an auxiliary storage device, and stores all application programs required for the functioning of the counterfeit terminal detection device 100. The storage unit 230 may include a program area and a data area.

In particular, the storage unit 130 according to the present invention may store a plurality of terminal identification information received from the terminal 10 and the subscriber management server 40. If it is determined that the terminal is an illegal copy terminal, Can be stored.

Thus, the method of detecting a duplicate terminal by the illegal duplicate terminal detection apparatus 100 has been described. By the above process, the illegal copy terminal due to the IMEI copy which can not be detected in the opening process can be detected in real time at the application level, and thus the intentional damage can be prevented.

The method of detecting an illegal copy terminal according to the present invention described with reference to the drawings may be implemented in a form of software readable by various computer means and recorded in a computer-readable recording medium. Here, the recording medium may include program commands, data files, data structures, and the like, alone or in combination. Program instructions to be recorded on a recording medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. For example, the recording medium may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a compact disk read only memory (CD-ROM), a digital video disk (DVD) Includes a hardware device that is specially configured to store and execute program instructions such as a magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), a flash memory, do. Examples of program instructions may include machine language code such as those generated by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like.

That is, the apparatus 100 for detecting an unauthorized copying terminal according to the present invention performs a method of detecting an unauthorized copying terminal by loading and executing a program module stored in the recording medium, in which a program module for performing the above- And the like. Here, a processor mounted in the positioning apparatus 200 according to the present invention can process program instructions for executing the method according to the present invention. In one implementation, the processor may be a single-threaded processor, and in other embodiments, the processor may be a multithreaded processor. Further, the processor is capable of processing instructions stored on a memory or storage device.

The present invention relates to a method for detecting an illegal duplicate terminal, and more particularly, to a method for detecting a duplicate terminal in real time using a procedure performed at an application level in order to detect an illegal duplicate terminal through IMEI duplication after terminal activation I want to.

The present invention is industrially advantageous because the present invention is industrially advantageous and can be practically practiced and is likely to be commercially or commercially available.

10, 20: terminal
30: application server
40: Subscriber management server
50: Network
100: Piracy terminal detection device

Claims (6)

An illegal duplicate terminal detection apparatus
Receiving an information registration request message including a plurality of terminal identification information transmitted from a terminal to an application server;
Receiving a plurality of terminal identification information for the terminal registered in the subscriber management server from a subscriber management server;
Comparing the identification information included in the information registration request message with the identification information received from the subscriber management server; And
Determining that the terminal is a normal terminal if all the identification information are identical and determining the terminal as a duplicate terminal if one or more identification information does not match;
Wherein the plurality of terminal identification information includes at least one of operating system information, terminal model information, and software version information,
The information registration request message includes:
Wherein the message is a message informing that the terminal is capable of receiving the push message when the terminal is powered on, in order to receive a push message for a service provided by a communication provider at an application level. Terminal detection method. delete The method of claim 1, wherein the plurality of terminal identification information
Further comprising at least one of an International Mobile Subscriber Identity (IMSI), an International Mobile Equipment Identity (IMEI), and a Mobile Directory Number (MDN). The method according to claim 1,
Notifying the user of the terminal or the subscriber management server that the terminal is a duplicate terminal;
Further comprising the step of: A computer-readable recording medium storing a program for executing the method according to any one of claims 1, 3, and 4. A transmission / reception unit for transmitting / receiving data to / from the terminal and the subscriber management server; And
The method includes receiving an information registration request message transmitted from the terminal to an application server, receiving a plurality of terminal identification information included in the information registration request message, and a plurality of terminal identification information for a terminal registered in the subscriber management server, And a control unit for performing a comparison of the identification information to detect a duplicate terminal according to whether the identification information is matched or not,
Wherein the plurality of terminal identification information includes at least one of operating system information, terminal model information, and software version information,
The information registration request message includes:
Wherein the message is a message informing that the terminal is capable of receiving the push message when the terminal is powered on, in order to receive a push message for a service provided by a communication provider at an application level. Terminal detection device.

Images