# US 12,113,930 B2 · Decentralized automatic phone fraud risk management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,113,930 B2
- Document ID: US12113930B2
- Status: Granted
- Kind: B2
- Application number: 17/178,647
- Filed: 2021-02-18
- Published: 2021-06-10
- Granted: 2024-10-08
- Earliest claimed: 2019-10-11
- Assignees: Alipay (Hangzhou) Information Technology Co., Ltd.
- Applicants: Alipay (Hangzhou) Information Technology Co., Ltd.
- Inventors: Wenqiang Zhao; Yanpeng Li; Boyan Jia
- Web page: https://patentgrep.com/patent/US12113930B2

## CPC

- H04M 3/42042: {Notifying the called party of information on the calling party (details within substation equipment H04M1/57, signalling details H04Q3/72)}
- H04M 15/47: {Fraud detection or prevention means}
- H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 12/14: Charging, metering or billing arrangements specially adapted for data communications, e.g. authentication, authorisation and accounting [AAA] framework
- H04L 63/101: {Access control lists [ACL]}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04M 3/2281: {Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls}
- H04M 3/42068: {where the identifier is used to access a profile}
- H04M 15/00: Arrangements for metering, time-control or time indication {; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP}
- H04W 4/24: Accounting or billing
- H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for phone fraud prevention. One of the methods includes adding a first identifier of a first phone event of a first user into a blockchain managed by one or more devices on a decentralized network. The first identifier of the first phone event is classified into a list of phone fraud identifiers. A second identifier of a second phone event involving a second user is received. The second identifier is compared with the list of phone fraud identifiers that includes the first identifier. In a case where the second identifier matches a phone fraud identifier in the list of phone fraud identifiers, the first user is notified that the second phone event involves a risk of phone fraud.

## Claims

### Claim 1

A computer-implemented method, comprising:
receiving a first fingerprint of a first phone event, by a user device of a first recipient in the first phone event;
automatically detecting, by the user device without an input of the first recipient, a first behavior of a first recipient with respect to the first phone event;
automatically determining, by the user device, that the first phone event is a target phone event based on the first behavior of the first recipient detected by the user device;
batching at least one of the first fingerprint of the first phone event or the first behavior of the first recipient into a transaction data;
broadcasting the transaction data to nodes of a blockchain network for each of the nodes to add the transaction data into a respective copy of a blockchain maintained at the node.

### Claim 2 (depends on 1)

The method of claim 1, comprising:
receiving a second fingerprint of a second phone event;
comparing the second fingerprint of the second phone event with the first fingerprint of the first phone event obtained from a copy of the blockchain to determine whether the second fingerprint matches the first fingerprint; and
in response to the second fingerprint matches the first fingerprint, determining that the second phone event has a same source as the first phone event.

### Claim 3 (depends on 1)

The method of claim 1, comprising classifying the first fingerprint into a list of phone fraud identifiers based on the first behavior of the first recipient.

### Claim 4 (depends on 3)

The method of claim 3, wherein the classifying the first fingerprint into the list of phone fraud identifiers includes determining that the first behavior of the first recipient indicates that the first recipient treats the first phone event as a fraudulent phone event based on a smart contract deployed in the blockchain network.

### Claim 5 (depends on 3)

The method of claim 3, wherein the classifying includes:
based on a smart contract deployed in the blockchain,
accumulating a number of times the first fingerprint has been added to the blockchain; and
comparing the number with a threshold number to determine whether the first fingerprint is classified into the list of phone fraud identifiers.

### Claim 6 (depends on 1)

The method of claim 1, wherein the first fingerprint of the first phone event includes an audio characteristic of the first phone event.

### Claim 7 (depends on 1)

The method claim 1, wherein the first behavior of the first recipient is detected by a sensor of the user device that is used by the first recipient in the first phone event.

### Claim 8

A computer-implemented method, the method comprising:
receiving a first identifier of a first phone event involving a first recipient, by a user device of the first recipient;
detecting, automatically by the user device without an input of the first recipient, a first behavior of the first recipient with respect to the first phone event;
automatically determining, by the user device, that the first phone event is a target phone event based on the first behavior of the first recipient detected by the user device; and
adding the first identifier to a list of fraudulent identifiers stored in a blockchain of a blockchain network.

### Claim 9 (depends on 8)

The method of claim 8, comprising assigning a first weight to the first identifier, the first weight being smaller than a second weight assigned to a second fraudulent identifier in the list of fraudulent identifiers, the second fraudulent identifier manually determined as fraudulent.

### Claim 10 (depends on 8)

The method of claim 8, wherein the first behavior of the first recipient is automatically detected by a sensor on the user device.

### Claim 11 (depends on 8)

The method of claim 8, comprising determining that the first behavior of the first recipient indicates that the first recipient treats the first phone event as a fraudulent phone event based on a smart contract deployed in the blockchain network.

### Claim 12 (depends on 8)

The method of claim 8, wherein the adding the first identifier to the list of fraudulent identifiers includes:
accumulating a number of times the first identifier is added to the list of fraudulent identifiers; and
comparing the number with a threshold number to determine whether the first identifier is classified into a grey list of phone fraud identifiers or a black list of phone fraud identifiers.

### Claim 13 (depends on 12)

The method of claim 12, wherein the accumulating the number of times the first identifier is added to the list of fraudulent identifiers includes applying a weight to a time that the first identifier is added to the list of fraudulent identifiers based on whether the first identifier is manually determined as fraudulent by a recipient or is automatically determined as fraudulent based on a detected recipient behavior with respect to the first identifier for the time.

### Claim 14 (depends on 8)

The method of claim 8, comprising:
receiving a second identifier of a second phone event;
comparing the second identifier of the second phone event with the first identifier of the first phone event obtained from a copy of the blockchain to determine whether the second identifier matches the first identifier; and
in response to the second identifier matches the first identifier, determining that the second phone event is a fraudulent phone event.

### Claim 15

A system, comprising:
one or more processors; and
one or more computer-readable memories coupled to the one or more processors and having instructions stored thereon that are executable by the one or more processors to, individually or collectively, perform acts including:
receiving a first identifier of a first phone event involving a first recipient, by a user device of the first recipient;
automatically detecting, by the user device without an input of the first recipient, a first behavior of the first recipient with respect to the first phone event;
automatically determining, by the user device, that the first phone event is a target phone event based on the first behavior of the first recipient detected by the user device; and
adding the first identifier to a list of fraudulent identifiers stored in a blockchain of a blockchain network.

### Claim 16 (depends on 15)

The system of claim 15, wherein the first behavior of the first recipient is automatically detected by a sensor on the user device.

### Claim 17 (depends on 15)

The system of claim 15, wherein the acts include determining that the first behavior of the first recipient indicates that the first recipient treats the first phone event as a fraudulent phone event based on a smart contract deployed in the blockchain network.

### Claim 18 (depends on 15)

The system of claim 15, wherein the adding the first identifier to the list of fraudulent identifiers includes:
accumulating a number of times the first identifier is added to the list of fraudulent identifiers; and
comparing the number with a threshold number to determine whether the first identifier is classified into a grey list of phone fraud identifiers or a black list of phone fraud identifiers.

### Claim 19 (depends on 18)

The system of claim 18, wherein the accumulating the number of times the first identifier is added to the list of fraudulent identifiers includes applying a weight to a time that the first identifier is added to the list of fraudulent identifiers based on whether the first identifier is manually determined as fraudulent by a recipient or is automatically determined as fraudulent based on a detected recipient behavior with respect to the first identifier for the time.

### Claim 20 (depends on 8)

The system of claim 8, wherein the acts include:
receiving a second identifier of a second phone event;
comparing the second identifier of the second phone event with the first identifier of the first phone event obtained from a copy of the blockchain to determine whether the second identifier matches the first identifier; and
in response to the second identifier matches the first identifier, determining that the second phone event is a fraudulent phone event.