The disclosure relates to the call completion to busy subscriber (CCBS) service processing technique, and in particular to a method and an apparatus for filtering a malicious call completion indicator in the CCBS service and a calling-side network device.
Step 1: a calling user A calls a called user B, and the called user B rejects the call request from the calling user A due to busy line.
Step 2: an application server (AS) at the calling side (O_AS) sends a SUBSCRIBE message to the AS at the called side (T_AS) to subscribe the idle state of the called user.
Step 3: after receiving the SUBSCRIBE message sent from the O_AS, the T_AS returns a 202OK message to the O_AS to acknowledge the reception of SUBSCRIBE message.
After Step 3, the T_AS begins to perform busy state supervision on the called user B. When it is detected that the current state of the user B becomes available, Step 4 is performed.
Step 4: when the called user is idle, the T_AS traverses the list of the calling-side ASs subscribing the idle state of the called user and sends a NOTIFY message to the first calling AS subscribing the idle state of the called user.
Step 5: after receiving the NOTIFY message, the O_AS returns a 200OK acknowledgment message to the T_AS.
Step 6 to Step 10: the O_AS notifies the calling user to initiate a call-back request (INVITE) in a REFER form and inserts call completion indicator information into the call request of the calling user A; or, the O_AS starts a 3rd party call control (3PCC) flow, in which a call request (INVITE) is sent to the called user, and the O_AS inserts call completion indicator information into the call request.
After receiving the call request (INVITE), the T_AS judges whether the call request (INVITE) carries the call completion indicator information, if yes, the T_AS forwards the call request to the called user B, and if not, the T_AS rejects the current call request by using a 486 (busy here) failure response.
If the T_AS allows this call, the T_AS continues to perform the following processing flow to finish this call.
Step 1 to Step 5: they are completely the same as Step 1 to Step 5 shown in
Step 6: a malicious user sends a call request (INVITE) to the T_AS, wherein the malicious user inserts call completion indicator information into the call request initiated by the malicious user itself; the T_AS processes the call initiated by the malicious user as if it is the calling user A shown in Step 1 to Step 5 above, that is, the call request of the current malicious user is processed as that of a user of the CCBS service.
Step 7: the T_AS forwards the call request of the malicious user to the called user B and then performs call access.
In this way, the malicious user implements the call access to the called user B prior to the user A.
Step 8 to Step 12: they are corresponding to the processing flows shown in
It can be known from
In view of the above, the main object of the disclosure is to provide a method and an apparatus for filtering a malicious call completion indicator in the CCBS service and a calling-side network device, capable of filtering out the call request carrying malicious call completion indicator information.
In order to achieve the object above, the technical scheme of the disclosure is implemented as follows.
A method for filtering a malicious call completion indicator in a CCBS service, includes the following steps:
when a calling-side network device determines that a call request carries call completion indicator information, the calling-side network device rejects the current call request, or removes the call completion indicator information from the call request and then forwards the call request.
Preferably, the calling-side network device comprises at least one of a serving call session control function entity (S-CSCF), a proxy call session control function entity (P-CSCF), a media gateway control function (MGCF), an access gateway control function entity (AGCF) and an application server (AS).
An apparatus for filtering a malicious call completion indicator in a CCBS service, includes a reception unit, a detection unit and a rejection unit, wherein
the reception unit is configured to receive a call request;
the detection unit is configured to detect the call request and to trigger the rejection unit when determining that the call request carries call completion indicator information; and
the rejection unit is configured to reject the current call request.
An apparatus for filtering a malicious call completion indicator in a CCBS service, includes a reception unit, a detection unit, a removal unit and a forwarding unit, wherein
the reception unit is configured to receive a call request;
the detection unit is configured to detect the call request and to trigger the removal unit when determining that the call request carries call completion indicator information;
the removal unit is configured to remove the call completion indicator information from the call request; and
the forwarding unit is configured to forward the call request which has been processed by the removal unit.
A calling-side network device, includes a reception unit, a detection unit and a rejection unit, wherein
the reception unit is configured to receive a call request;
the detection unit is configured to detect the call request and to trigger the rejection unit when determining that the call request carries call completion indicator information; and
the rejection unit is configured to reject the current call request.
Preferably, the calling-side network device comprises at least one of
a serving call session control function entity (S-CSCF), a proxy call session control function entity (P-CSCF), a media gateway control function (MGCF), an access gateway control function entity (AGCF) and an application server (AS).
A calling-side network device, includes a reception unit, a detection unit, a removal unit and a forwarding unit, wherein
the reception unit is configured to receive a call request;
the detection unit is configured to detect the call request and to trigger the removal unit when determining that the call request carries call completion indicator information;
the removal unit is configured to remove the call completion indicator information from the call request; and
the forwarding unit is configured to forward the call request which has been processed by the removal unit.
Preferably, the calling-side network device comprises at least one of a serving call session control function entity (S-CSCF), a proxy call session control function entity (P-CSCF), a media gateway control function (MGCF), an access gateway control function entity (AGCF) and an application server (AS).
In the disclosure, a filtering mechanism for a call request is provided in the calling-side network device; the call request initiated by a calling user is detected, and when it is determined that the call request carries the call completion indicator information, the call request is rejected, or the call completion indicator information is deleted from the call request and then the call request is forwarded. According to the disclosure, the sequence for accessing the calls from calling subscribers to a called subscriber is well kept, thus assuring the fairness of the call access and avoiding preferential call access of malicious subscribers.
The basic principle of the disclosure lies in that, a filtering mechanism for a call request is provided in the calling-side network device; the call request initiated by a calling user is detected, and when it is determined that the call request carries the call completion indicator information, the call request is rejected, or the call completion indicator information is deleted from the call request and then the call request is forwarded. According to the disclosure, the sequence for accessing the calls from calling subscribers to a called subscriber is well kept, thus assuring the fairness of the call access and avoiding preferential call access of malicious subscribers.
For better understanding the purpose, the technical scheme and the advantages of the disclosure, embodiments are provided below to illustrate the disclosure in detail by reference to the accompanying drawings.
Step 1: the calling user A sends a call request (INVITE) to the called side AS through a calling-side network device in an IP multimedia subsystem (IMS) network, wherein the call request carries the call completion indicator information. the network device of the calling side of the IMS network includes but not limited to Proxy Call Session Control Function (P-CSCF), Media Gateway Control Function (MGCF), and Access Gateway Control Function (AGCF), etc.
In the disclosure, a detection mechanism for call request is provided in the calling-side network device in the IMS network to detect the call request initiated by the user; when it is determined that the call request carries the call completion indicator information, Step 2 is performed.
In the disclosure, a resolution function for call request is added to the calling-side network device in the IMS network, so as to determine whether the call request carries the call completion indicator information.
Step 2: it is refused to provide a response to this call request; that is, this call request is rejected.
Step 1: the calling user A initiates a call request to the P-CSCF/MGCF/AGCF, wherein the call request carries a call completion indicator.
Step 2: the P-CSCF/MGCF/AGCF sends the call request to the S-CSCF in a transparent transmission mode.
Step 3: the S-CSCF resolves and detects the received call request, and sends a call request rejection response to the P-CSCF/MGCF/AGCF to reject this call when determining that the call request carries the call completion indicator; or, the S-CSCF detects the field corresponding to the call completion indicator in the call request, when the call request contains the field, it is indicated that the call request contains the call completion indicator.
Step 4: the P-CSCF/MGCF/AGCF forwards the call request rejection response to the calling user A.
Step 1: the calling user A initiates a call request to the P-CSCF/MGCF/AGCF, wherein the call request carries a call completion indicator.
Step 2: the P-CSCF/MGCF/AGCF sends the call request to the S-CSCF in a transparent transmission mode.
Step 3: the S-CSCF sends the call request to the O_AS in a transparent transmission mode.
Step 4: the O_AS resolves and detects the received call request, and sends a call request rejection response to the S-CSCF to reject this call when determining that the call request carries the call completion indicator.
Step 5: the S-CSCF forwards the call request rejection response to the P-CSCF/MGCF/AGCF.
Step 6: the P-CSCF/MGCF/AGCF forwards the call request rejection response to the calling user A.
Step 1: the calling user A initiates a call request to the P-CSCF/MGCF/AGCF, wherein the call request carries a call completion indicator.
Step 2: after receiving the call request of the calling user A, the P-CSCF/MGCF/AGCF detects the received call request, judges whether the call request carries the call completion indicator information, deletes the call completion indicator from the call request when determining that the call request carries the call completion indicator, and then forwards the call request.
Those skilled in the art should understand that the technical scheme of the disclosure also can be implemented when the detection mechanism shown in
the reception unit 70 is configured to receive a call request;
the detection unit 71 is configured to detect the call request, and to trigger the rejection unit 72 when determining that the call request carries call completion indicator information. Here, the detection includes resolving the call request to determine whether the call completion indicator information is contained in the call request, or, detecting the field corresponding to the call completion indicator in the call request, and indicating that the call request contains the call completion indicator when the call request contains the field; and
the rejection unit 72 is configured to reject the current call request. The rejection unit 72 refuses to forward the current call request to a network element in the next stage.
the reception unit 80 is configured to receive a call request;
the detection unit 81 is configured to detect the call request and to trigger the removal unit 82 when determining that the call request carries call completion indicator information. here, the detection includes resolving the call request to determine whether the call completion indicator information is contained in the call request, or, detecting the field corresponding to the call completion indicator in the call request, and indicating that the call request contains the call completion indicator when the call request contains the field;
the removal unit 82 is configured to remove the call completion indicator information in the call request; that is, to delete the corresponding call completion indicator information in the call request, and then to forward, by means of the forwarding unit 83, the call request with the call completion indicator being removed; and
the forwarding unit 83 is configured to forward the call request which has been processed by the removal unit 82.
Those skilled in the art should understand that the devices for filtering malicious call completion indicator in the CCBS service shown in
The calling-side network device of the disclosure, such as S-CSCF, P-CSCF, MGCF, AGCF or AS, comprises the device shown in
The above is only the preferred embodiments of the disclosure and not intended to limit the protection scope of the disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 201010110354.3 | Feb 2010 | CN | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/CN11/70368 | 1/18/2011 | WO | 00 | 6/28/2012 |