Detection of abnormal behavior of traffic transmitted from a mobile terminal in a radiocommunication network

摘要

The method involves incrementing an authentication count (CA) assigned to a mobile terminal (TM), over a predetermined time interval, by an evaluation module (ME) of a warning device (DA) when security data (DS) are transmitted to an entity of a radiocommunication network (RR) e.g. Global System for Mobile communicationsnetwork, for authenticating the terminal. The authentication count is compared with a predefined threshold (SP) so as to detect an anomaly of traffic transmitted by the mobile terminal if the count exceeds the threshold. An independent claim is also included for a device communicating with a location register of a radiocommunication network for detecting an anomaly of traffic transmitted from a mobile terminal in the radiocommunication network.