Abstract:
A method for preventing fraud or misuse when a User Equipment uses a service of a public land mobile network. The User Equipment includes a Subscriber Identity Module. The Subscriber Identity Module includes address information used for the service of the public land mobile network. The Subscriber Identity Module includes an application program. The application program includes reference address information. The method includes: determining, by the application program of the Subscriber Identity Module of the User Equipment, that the address information does not correspond to the reference address information; and in response to the determining: blocking, by the application program, the service for the User Equipment and sending an error message to the public land mobile network; or invoking, by the application program, the service for the User Equipment using the reference address information.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application is a U.S. National Phase application under 35 U.S.C. §371 of International Application No. PCT/EP2011/004583, filed on Sep. 13, 2011. The International Application was published in English on Mar. 21, 2013 as WO 2013/037383 A1 under PCT Article 21(2). 
     
    
     FIELD 
       [0002]    The present invention relates a method for preventing fraud or misuse when using a specific service of a public land mobile network by a User Equipment. The present invention further relates to Subscriber Identity Module for preventing fraud or misuse when a User Equipment equipped with the Subscriber Identity Module uses a specific service of a public land mobile network. 
       BACKGROUND 
       [0003]    Operators of telecommunications networks, especially public land mobile networks, typically protect network nodes that are used to provide specific services for User Equipments, such as the Short Message Service Center for providing the short message service, wherein the protection is provided such that customers that should not use such a network node are excluded from using such a network node. 
         [0004]    In case this protection of such a network node is permanently or temporarily not available or efficient, fraud or misuse scenarios can occur. For example, with respect to the short message service, such a fraud or misuse scenario might occur in case when a User Equipment (of a home public land mobile network) roams in a visited public land mobile network (different to the home public land mobile network) and an unprotected Short Message Service Center in a further public land mobile network instead of the (home) Short Message Service Center in the home public land mobile network. In such a case, mobile originated short message service traffic is routed from the visited public land mobile network (where the User Equipment roams) to the further public land mobile network, and therefore bypasses the home public land mobile network. Nevertheless, the inter operator tariffs still apply in the relation between the visited public land mobile network and the home public land mobile network, which can cause huge damages to the operator of the home public land mobile network. Another example of primarily a misuse case and not a fraud situation would be to use a wrong Short Message Service Center address setting within a home public land mobile network due to the fact that the User Equipment has been bought secondhand and has been used in another public land mobile network, and hence with another setting of the Short Message Service Center address. 
       SUMMARY 
       [0005]    In an embodiment, the invention provides a method for preventing fraud or misuse when a User Equipment uses a service of a public land mobile network. The User Equipment includes a Subscriber Identity Module. The Subscriber Identity Module includes address information used for the service of the public land mobile network. The Subscriber Identity Module includes an application program. The application program includes reference address information. The method includes: determining, by the application program of the Subscriber Identity Module of the User Equipment, that the address information does not correspond to the reference address information; and in response to the determining: blocking, by the application program, the service for the User Equipment and sending an error message to the public land mobile network; or invoking, by the application program, the service for the User Equipment using the reference address information. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0006]    The present invention will be described in even greater detail below based on the exemplary figures. The invention is not limited to the exemplary embodiments. All features described and/or illustrated herein can be used alone or combined in different combinations in embodiments of the invention. The features and advantages of various embodiments of the present invention will become apparent by reading the following detailed description with reference to the attached drawings which illustrate the following: 
           [0007]      FIG. 1  schematically illustrates the handling of a mobile originating short message sent from a User Equipment roaming in a visited public land mobile network which is different from the home public land mobile network of that User Equipment. 
           [0008]      FIG. 2  schematically illustrates a fraud scenario of the handling of a mobile originating short message sent from a User Equipment roaming in a visited public land mobile network, wherein the home public land mobile network is bypassed by using a Short Message Service Center of a further public land mobile network instead of the Short Message Service Center of the home public land mobile network. 
           [0009]      FIG. 3  schematically illustrates a method for providing a Subscriber Identity Module with an application program for performing the inventive method. 
           [0010]      FIG. 4  schematically illustrates an implementation of the inventive method. 
       
    
    
     DETAILED DESCRIPTION 
       [0011]    The present invention provides cost effective solution for preventing such fraud or misuse scenarios when using a specific service of a public land mobile network by a User Equipment. 
         [0012]    The invention provides a method for preventing fraud or misuse when using a specific service of a public land mobile network by a User Equipment, wherein the User Equipment comprises a Subscriber Identity Module, wherein the Subscriber Identity Module comprises an address information used for the specific service of the public land mobile network, wherein the Subscriber Identity Module comprises an application program, wherein the application program comprises a reference address information, wherein the application program is provided such that the following steps are executed:
       in a first step, it is verified whether the address information corresponds to the reference address information,   in a second step, and in case that the verification of the first step holds a negative result,
           either the specific service is blocked, at least temporarily, for the User Equipment,   or the specific service is invoked using the reference address information.   
               
 
         [0017]    According to the present invention, it is thereby advantageously possible that fraud or misuse can be effectively reduced by enforcing the use of the correct address information, especially for specifying a network node using the address information. 
         [0018]    According to another preferred embodiment of the present invention, in case that, during the second step, the specific service is blocked for the User Equipment, an error message is sent to the public land mobile network. 
         [0019]    According to the present invention, it is thereby advantageously that the public land mobile network, especially the home public land mobile network is informed about the incorrect setting of the address information such that a self-healing process can be triggered, e.g. by providing a configuration message to the corresponding User Equipment in order to change the incorrect address information. 
         [0020]    According to a preferred embodiment of the present invention, the address information is provided at a specific memory location within the Subscriber Identity Module, wherein the application program is configured such that, during the first step, the specific memory location within the Subscriber Identity Module is verified repeatedly, at least once in a predetermined time interval. 
         [0021]    Thereby, it is advantageously possible according to the present invention that a wrong setting of the address information can be detected easily and quickly. Especially, it is advantageously possible to transmit the application program to the User Equipment and, without an interruption of the functionality of the User Equipment/Subscriber Identity Module (especially without rebooting the User Equipment), verification of the address information is performed. 
         [0022]    According to a further preferred embodiment of the present invention, a request of the User Equipment to use the specific service comprises the address information, wherein the User Equipment is configured such that each request of the User Equipment to use the specific service is directed to the Subscriber Identity Module, wherein the application program is configured such that, during the first step, the address information of the redirected request of the User Equipment to use the specific service is verified. 
         [0023]    Thereby, it is advantageously possible according to the present invention that no request of the specific service can be transmitted to the public land mobile network without the verification by the Subscriber Identity Module (during the first step of the inventive method). 
         [0024]    It is also possible that both a repeated verification of the correct address information and a forced redirection of any requests of the User Equipment to the specific service towards the Subscriber Identity Module are performed. 
         [0025]    According to another preferred embodiment of the present invention, the specific service is the short message service. 
         [0026]    Thereby, it is advantageously possible to avoid fraud and misuse damages for an operator of a public land mobile network in an efficient manner. 
         [0027]    It is furthermore preferred that the address information and the reference address information relates to the address of a Short Message Service Center used by the User Equipment. 
         [0028]    Thereby, it is efficiently possible according to the present invention that no short message service functionality can be used by the User Equipment without using the correct Short Message Service Center. 
         [0029]    According to the present invention, it is furthermore preferred that the reference address information relates to the address of a Short Message Service Center used by the User Equipment but that the reference address information is not a complete address information (being able to specify a network entity in the telecommunications network) such as, e.g., a global title, but that the reference address information corresponds to the country code of the correct address information  22  to be used or that the reference address information corresponds to the country code and additionally a certain number (such as one or two or three or four) of digits, specifying, e.g., the public land mobile network of the operator or the like. If in this case a comparison (during the first step of the method according to the present invention) of the reference address information with the address information (or with the corresponding part or with the corresponding part of the address information) holds that the address information is not correct, the appropriate actions are taken as specified in the second step of the present invention. 
         [0030]    Furthermore, the present invention relates to a Subscriber Identity Module for preventing fraud or misuse when a User Equipment equipped with the Subscriber Identity Module uses a specific service of a public land mobile network, wherein the Subscriber Identity Module comprises an address information used for the specific service of the public land mobile network, wherein the Subscriber Identity Module comprises an application program, wherein the application program comprises a reference address information, wherein the application program is provided such that:
       a verification is executed whether the address information corresponds to the reference address information, and   in case that the verification holds a negative result,
           either the specific service is blocked, at least temporarily, for the User Equipment,   or the specific service is invoked using the reference address information.   
               
 
         [0035]    Additionally, the present invention relates to a program comprising a computer readable program code which, when executed on a computer or on a Subscriber Identity Module, causes the computer or the Subscriber Identity Module to perform an inventive method. 
         [0036]    Still additionally, the present invention relates to computer program product for preventing fraud or misuse when using a specific service of a public land mobile network by a User Equipment, the computer program product comprising a computer program stored on a storage medium, the computer program comprising program code which, when executed on a computer or on a Subscriber Identity Module, causes the computer or the Subscriber Identity Module to perform an inventive method. 
         [0037]    These and other characteristics, features and advantages of the present invention will become apparent from the following detailed description, taken in conjunction with the accompanying drawings, which illustrate, by way of example, the principles of the invention. The description is given for the sake of example only, without limiting the scope of the invention. The reference figures quoted below refer to the attached drawings. 
         [0038]    The present invention will be described with respect to particular embodiments and with reference to certain drawings but the invention is not limited thereto but only by the claims. The drawings described are only schematic and are non-limiting. In the drawings, the size of some of the elements may be exaggerated and not drawn on scale for illustrative purposes. 
         [0039]    Where an indefinite or definite article is used when referring to a singular noun, e.g. “a”, “an”, “the”, this includes a plural of that noun unless something else is specifically stated. 
         [0040]    Furthermore, the terms first, second, third and the like in the description and in the claims are used for distinguishing between similar elements and not necessarily for describing a sequential or chronological order. It is to be understood that the terms so used are interchangeable under appropriate circumstances and that the embodiments of the invention described herein are capable of operation in other sequences than described or illustrated herein. 
         [0041]    In  FIG. 1 , the handling of a mobile originating short message (SMS) in a telecommunications network is schematically shown. The short message (SMS) is sent from a User Equipment  20  roaming in a visited public land mobile network B which is different from a home public land mobile network A of that User Equipment  20 . The User Equipment  20  sends a request for using the short message service of the visited public land mobile network B to a specific network node  30  (typically a Mobile Switching Center  30 ) of the visited public land mobile network B. The request of the User Equipment  20  specifies, using address information, the Short Message Service Center  240  of the home public land mobile network A and the short message (SMS) is sent triggering an IOT (inter operator tariff) charging event  41  from the visited public land mobile network B to the home public land mobile network A and a client charging event  42  from the home public land mobile network A to the User Equipment/the subscriber. 
         [0042]    In  FIG. 2 , a fraud or misuse scenario of a mobile originating short message (SMS) in a telecommunications network is schematically shown. The short message (SMS) is sent from a User Equipment  20  roaming in a visited public land mobile network B which is different from a home public land mobile network A of that User Equipment  20 . The User Equipment  20  sends a request for using the short message service of the visited public land mobile network B to a specific network node  30  (typically a Mobile Switching Center  30 ) of the visited public land mobile network B. The request of the User Equipment  20  specifies, by using address information, (and instead of the Short Message Service Center  240  of the home public land mobile network A) the Short Message Service Center  220  of a further public land mobile network C. This results in the short message (SMS) being sent via the further public land mobile network C and bypassing the home public land mobile network A. Involving the visited public land mobile network nevertheless triggers an IOT (inter operator tariff) charging event  41  from the visited public land mobile network B to the home public land mobile network A. However, due to the fact that the home public land mobile network A is bypassed regarding the handling of the short message, a corresponding client charging event  42 ′ from the home public land mobile network A to the User Equipment/the subscriber is not possible. That is why huge amounts of short messages can be sent using this fraud or misuse scenario causing at the home public land mobile network massive losses. Currently, it is not mandatorily required that the visited public land mobile network B informs the home public land mobile network A about such irregularities. Therefore, such frauds or misuses cannot be quickly detected by the home public land mobile network A. 
         [0043]    According to the present invention, a method is provided that is able to avoid the situation where a User Equipment uses wrong address information  22  and hence a wrong network node (such as a Short Message Service Center  220 ). This is schematically illustrated in  FIG. 5 . 
         [0044]    According to the present invention, this is achieved by providing the Subscriber Identity Module  21 , which is used with the User Equipment  20 , such that the Subscriber Identity Module  21  comprises an address information  22  used for the specific service of the public land mobile network, wherein the Subscriber Identity Module  21  comprises an application program  23 , wherein the application program  23  comprises a reference address information  24 , wherein the application program  23  is provided such that the following steps are executed:
       in a first step, it is verified whether the address information  22  corresponds to the reference address information  24 ,   in a second step, and in case that the verification of the first step holds a negative result,
           either the specific service is blocked, at least temporarily, for the User Equipment  20 ,   or the specific service is invoked using the reference address information  24 .   
               
 
         [0049]    Thereby, it is possible to provide a detection and/or correction mechanism of wrong address information  22  on the Subscriber Identity Modules  21  of users or subscribers of the home public land mobile network A. Thereby, it is advantageously possible to detect wrong settings in the address information  22 . In case that a wrong setting of the address information  22  is detected, different options exist: In one alternative embodiment of the present invention, the specific service—e.g. the short message service—is blocked, i.e. no further service request of this kind (i.e. a user initiated short message) can be sent. In another alternative embodiment of the present invention, a correction is applied to the false address information  22  and a this wring address information  22  is replaced by a reference address information  24  which part of the application program  23 , i.e. the specific service is invoked using the reference address information  24 . 
         [0050]    In  FIG. 3 , a method for providing a Subscriber Identity Module  21  with an application program  24  for performing the inventive method is schematically shown: a server (e.g., an OTA server (OTA meaning “Over The Air”))  50  checks with a database  51  whether a Subscriber Identity Module  21  of a specific User Equipment  20  is enabled to receive and store the program information of the application program  23 . The information of the application program  23  is then transmitted to the User Equipment  20 , especially using an short message service transmission method, involving an Short Message Service Center  52 . The Short Message Service Center  52  sends binary short messages  53  comprising the application program  23  to the User Equipment  20 . The application program  23  is then saved (and installed) to a memory of the Subscriber Identity Module  21 . 
         [0051]    According to the present invention, it is possible and preferred that once the application program  23  is saved and installed to the Subscriber Identity Module  21 , certain parameters of the application program  23  such as values of the reference address information  24  or parameters defining the appropriate action to be taken in the second step of the inventive method (in case that it is verified in the first step that the verification of the first step holds a negative result) are modified. This is preferably be realized by an OTA mechanism comparable to the transmission of the application program itself to the Subscriber Identity Module  21 . 
         [0052]    The application program  23  according to the present invention is preferably a so-called “SIM Application Toolkit application” or SAT application. The application program  23  or SAT application  23  can be provided to any new Subscriber Identity Modules to be distributed to new customers but also to all (or at least the vast majority) of Subscriber Identity Modules  21  already circulating. This is because the vast majority of circulating Subscriber Identity Modules  21  are OTA enabled such that the application program  23  can be simply stored on such Subscriber Identity Modules  21 . This means that the method according to the present invention can be implemented in a very quick manner. During roll-out of the application program  23 , it is possible to transfer (or not to transfer) the application program  23  to different Subscriber Identity Modules depending on an information in a database about the Subscriber Identity Modules. 
         [0053]    Furthermore, especially for the case that some models of User Equipments are not compatible with running the application program  23 , it is possible to control the use of the application program  23  via the following steps:
       in a first step, the application program  23  is stored in the Subscriber Identity Module  21  of a User Equipment  20 ,   in a second step, the application program  23  sends an information to the public land mobile network about the value of the IMEI (International Mobile Equipment Identity),   Based on this IMEI information, it is possible to look up in a database whether the Subscriber Identity Module (and the corresponding User Equipment  20 ) are compatible with running the application program  23 . If this is the case the application program  23  is (remotely) switched on or off, dependant on the result of the database lookup.       
 
         [0057]      FIG. 4  schematically illustrates an implementation of the inventive method, where in a first step, a detection of the address information  22  is provided and compared with a reference address information  24 . 
         [0058]    The reference address information  24  is either a complete address information (e.g. in the form of a global title) being able to specify a network entity in the telecommunications network/public land mobile network. In this case, it is possible according to the present invention to simply replace the use of the address information  22  by the use of the reference address information  24 . 
         [0059]    However, according to an alternative embodiment of the present invention, it is also possible that the reference address information  24  is not a complete address information (being able to specify a network entity in the telecommunications network). For example, the reference address information could simply comprise the country code of the correct address information  22  to use. If in this case a comparison of the reference address information  24  with the address information  22  (or with the corresponding part of the address information  22 ) holds that the address information  22  is not correct, it is not possible to simply replace the use of the address information  22  by the use of the reference address information  24 . In this case, it will be preferred to block the specific serve for the User Equipment at least temporarily. 
         [0060]    While the invention has been illustrated and described in detail in the drawings and foregoing description, such illustration and description are to be considered illustrative or exemplary and not restrictive. It will be understood that changes and modifications may be made by those of ordinary skill within the scope of the following claims. In particular, the present invention covers further embodiments with any combination of features from different embodiments described above and below. Additionally, statements made herein characterizing the invention refer to an embodiment of the invention and not necessarily all embodiments. 
         [0061]    The terms used in the claims should be construed to have the broadest reasonable interpretation consistent with the foregoing description. For example, the use of the article “a” or “the” in introducing an element should not be interpreted as being exclusive of a plurality of elements. Likewise, the recitation of “or” should be interpreted as being inclusive, such that the recitation of “A or B” is not exclusive of “A and B,” unless it is clear from the context or the foregoing description that only one of A and B is intended. Further, the recitation of “at least one of A, B and C” should be interpreted as one or more of a group of elements consisting of A, B and C, and should not be interpreted as requiring at least one of each of the listed elements A, B and C, regardless of whether A, B and C are related as categories or otherwise. Moreover, the recitation of “A, B and/or C” or “at least one of A, B or C” should be interpreted as including any singular entity from the listed elements, e.g., A, any subset from the listed elements, e.g., A and B, or the entire list of elements A, B and C.