SMS Anti-spam product is developed for detection spam and other unwanted SMS messages,
coming through different external interfaces into network of mobile operator.

The product is deployed as a multiservice platform and allows to quickly integrate solutions on the basis of SMS such as:

  • Anti-SPAM
  • Parent’s control
  • Multi-SIM
  • SMS-Router

Solution SMS Anti-SPAM allows to detect such attack as faking (faking MAP or SCCP parameters), spamming (unwanted messages), spoofing (operations with subscriber’s MSISDN of home network, using capacity of SMSC), flooding (a lot of SMS messages sent to one or more destinations, e.c. GT Scanning).
In general system SMS Anti-SPAM provides:

  • Rules of filtering for MO and MT messages
  • MT-SMS Firewall
  • Additional functional for following scenarios:
    • Flooding
    • Probing/scanning
    • Faking
    • Blacklists of receivers and senders
    • Content SMS with spam
    • MT-FSM without advance SRI-SM
  • Online and offline rules
    • Online – monitoring and filtering in real time
    • Offline – monitoring for following analysis
  • Interface for external systems of monitoring and filtering SMS traffic

SMS Anti-SPAM module is deployed in network to control, detet and block SMS messages which can contain spam, viruses. Also solution SMS Anti-SPAM allows to detect and block SMS messages fraudulent inherently (e.c. reversed MSISDN and etc.).

Used equipments and software

Physically all nodes of platform are based on servers Proliant DL380 G8 with Linux OS on them. Possibly using Blade servers.

Technical description

SMS Anti-SPAM solution allows:

  • To navigate monitoring and to generate massives of data for further analysis
  • Real-time detecting spam in SMS with appropriate action which can block message or discard it

Solution uses complex scheme of filtering SMS traffic which allows to detect intricate SMS messages basing in context of messages and feedback systems. Following picture shows typical scheme of solution integrating to the operator’s network.

Architecture of SMS Anti-SPAM is shown on a figure bellow. Main module – Probe allows to receive messages MO/MT SMS in SS7 net and AO/AT messages in IP net.

Module SMS Probe is used for receiving and sending messages in SS7 and IP net. Level Probe allows to use different trigger terms in life cycle of SMS messages:

  • submission
  • pre-delivery
  • post-delivery

Also level Probe can be used for defining initial filters of SMS messages for checking them on module Anti-SPAM.

Messages that do not need to send to SPAM checking go to designed departure (SMSC or HLR). Architecture of SMS Probe module is designed with the need to control the delay when sending a message to Anti-SPAM checking levels.

To receive messages of SS7 net are supported most decisions STP and intellectual routing (Cisco ITP, HP IP-STG, Siemens SURPASS STP, Sevis TMR). In addition to the Anti-SPAM functions SMS Probe can support additional services on the basis of SMS messages (Auto-copy, auto call forwarding and etc.), Home-Routing and IMS SMS gateway (according to 3GPP TS 23.240).

Module Probe can be configurated for passing specific traffic MT/MO to module SPAM Processor. Usually this traffic goes from external net (e.c. traffic MO-SMS from subscribers in roaming). SPAM Processor includes all functional logic of SMS Anti-SPAM is based on rule list which can work as well in real time as in passive monitoring.

SM Anti-SPAM allows system administrator to determine set of rules are logically separated on levels::

  • Level 1. Black/white list rules
  • Level 2. Check rules
  • Level 3. Filter rules
  • Level 4. Monitoring rules
Received data analysis

Statistics and data calls (CDR records) can be generated in real time and can be used in future for traffic analysis.

Statistic meters measure traffic level going through the system. Records of messages log give a detail information about specific message (level MAP parameters and etc.). Solution SMS Anti-SPAM allows to use full logging of all SMS traffic going through system.

System administrator can flexibly adjust logging and statistics levels for every rule. Statistics and messages log data are formed through administrator-defined interval of time and can be sent to external platforms for analysis.

Management and administration of system

System provides secure delimited access to GUI of control terminal. Terminal gives a set of mechanisms for monitoring and controling behavior of the system:

  • Monitoring of system status and it’s main subsystems
  • Records about error events
  • Notification external systems by events

Solution gives SNMP agent for monitoring external control system. Events are sending like SNMP traps. Also system allows to use utilities for tracing and logging internal events and traffic collection. Solution can remove old records and statistics specific prescription.

Statistic and report collection subsystem (MARS)

MARS is offline business platform including a lot of applications:

  • Customer Care Message Query application. This application allows to employees to respond to requests related with SMS service work
  • Offline antispam/anti-fraudulent analysis. It allows to users to analyze SMS traffic which was marked (but not locked) by antispam nodes according to antispam/anti-fraudulent scenarios
  •  Reporting. It allows to users to get automatically generated reports. There are different categories of reports including SMS traffic reports, SMS fraudulent reports, Messaging+ usage reports and system reports.

MARS is offline platform integrating with SMS platform module through IP based network, as shown at the picture bellow. MARS platform is offline in
the sense that it is separated from message nodes and does not play active role in traffic processing in real time by message processing nodes. All data
is transmitted unidirectionally from processing nodes to MARS node nad failure of MARS node cannot affect on SMS traffic.

Additional services based on SMSAnti-SPAM platform

  • SMSX. SMSX solution meets all current and future needs in SMS traffic processing. It is a customizable router of short messages had been made for for optimization of connecting application with network and controlling a large volume of P2A, A2P and P2P transactions of messages without reducing the quality of service. SMSX can be developed as a classic SMSC, or as an entity undertaking direct SMS delivery (Direct Delivery Engine) and a SMS router. The product supports such standarts as GSM, GSM-R (Rail) and CDMA.
  • SMS router. SMS router module supports a routing MO-AT, AO-MT, AO-AT SMS and MMS. This module is developed for maintenance of application integrating with different interfaces including SMPP, Web, SQL, FTP and many others. Moreover this modole allows to realize user applications having access to content of a message and if necessary changing any of it’s parameter.
    Module supports integrating with external and internal applications by different protocols including SMPP, UCP/EMI, Web-services, SQL and Message Queue (MQ).
  • Messaging+ package. It consists of current services:
    • Personal filter. This service allows to subscriber to manage a black list or a white list of numbers (list of numbers can involve mobile numbers, short numbers / application numbers, alphabet-digit numbers) for recieving and sending messages (message origination and message termination). Messages were sent to a subsriber are compared with “termination barred” list. If the number A is on the list the message either blocked or ignored depending on the type of list. If the sending number B is on the list, the outgoing message is either blocked or ignored, depending on the type of list. Personal filters service can be activated by a subscriber and can be controlled by different mechanisms by him.
    • SMS Divert. This service can forward recieved SMS messages to a lot of recievers including mobile number of another reciever, another private MSISDN,/ another private SIM card (in the case of multi-SIM), e-mail address (general for all types of messages) and/or another e-mail address belonging or not to the subsriber
    • SMS copy. This service allows to copy recieved SMS message and to send copies to multiple recipients including mobile number of another reciever, another private MSISDN,/ another private SIM card (in the case of multi-SIM), e-mail address (general for all types of messages) and/or another e-mail address (belonging or not to the subsriber).
    • Auto-response. Intellectual services Auto Response allows the subsriber to install answer message coming automatically to all other users sending messages to him. This service also can be used when subsriber is unavaliable for SMS. The sender will get a message, as example, as follows: “I’m sorry, I’m not available until 16:00”, or “I’m going in a transport and unavailable”. The message is controled by a user.The user can also control a pattern of a message (e.c. conference, not in the office) using web-interface that allows to simlify a choice controlling auomatic answer from phone.
    • SMS-signature. Intellectual services SMS-signature allows the subscriber to complete sent from phone SMS message.
    • CLI Alias. Intellectual services CLI Alias is an optional service allowing the subsriber to replace CLI (A number) by another address (numerical or alphabetic-numerical). The subsriber can activate this service for all messages using “on/off” parameter or on demand pointing to the “preamble”, as example “#A”. A set of options may be included by the operator limiting replaced CLI