CN106162688A - A kind of pseudo-base station localization method and system - Google Patents
A kind of pseudo-base station localization method and system Download PDFInfo
- Publication number
- CN106162688A CN106162688A CN201510151799.9A CN201510151799A CN106162688A CN 106162688 A CN106162688 A CN 106162688A CN 201510151799 A CN201510151799 A CN 201510151799A CN 106162688 A CN106162688 A CN 106162688A
- Authority
- CN
- China
- Prior art keywords
- base station
- pseudo
- signaling data
- platform
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a kind of pseudo-base station localization method, described method includes: obtain signaling data according to specifying isochronous surface；Rule-based model storehouse carries out distributed treatment to described signaling data；When distributed treatment result meets pre-conditioned, alert, and by distributed treatment result logging data analysis platform；Described Data Analysis Platform is according to described distributed treatment result, and combines signaling data, carries out multi-dimensional data analysis to add up pseudo-base station occurrence law；According to multi-dimensional data analysis result, regulate the parameter in described rule model storehouse, reversely to improve described rule model storehouse.The present invention further simultaneously discloses a kind of pseudo-base station alignment system.Use technical solution of the present invention, the relevant information of alarm pseudo-base station that can be the most real-time.
Description
Technical field
The present invention relates to communication field, particularly relate to a kind of pseudo-base station localization method and system.
Background technology
In recent years, pseudo-base station event takes place frequently, and some undesirables pass through high-tech instrument (such as main frame and notes
This computer) build the platform such as sending short messages in groups device, note sender, search and take centered by it, certain radius model
Enclose interior Mobile phone card information.By the base station of the operator that disguises oneself as, falsely use other people phone number by force to user
Mobile phone sends the short messages such as swindle, ad promotions.The operation principle of pseudo-base station mainly has a following two:
1) traditional pseudo-base station, functionally can only obtain user international mobile subscriber identity (IMSI,
International Mobile Subscriber Identification Number), flow process is generally: " pseudo-base station is little
District's gravity treatment-> re-start existing network to pseudo-base station launch position renewal-> pseudo-base station location updating refusal-> mobile phone is little
District's gravity treatment-> location updating success again ", this process at least needs more than 3 seconds.
2) novel pseudo-base station, functionally can allow the resident pseudo-community of user, and transmitting short message controls user's turnover.
Flow process is generally: " pseudo-base station cell reselection-> accept to pseudo-base station launch position renewal-> pseudo-base station location updating
-> pseudo-base station transmitting short message-> pseudo-base station is shifted one's position district's code (LAC, Location Area Code)-> puppet base
The cell reselection-> re-start to pseudo-base station launch position renewal-> pseudo-base station location updating refusal-> mobile phone of standing is existing
Net community selects-> location updating success again ", this process at least needs more than 25 seconds.
Owing to pseudo-base station has mobility, sporadic feature, and the amount of user data that base station networks simultaneously is huge
Greatly, traditional technological means cannot accomplish the detecting real-time to pseudo-base station, disposal.State-of-the art pseudo-base station has
There is the feature such as low cost, powerful, portable, low energy consumption so that pseudo-base station mobility is greatly enhanced.One
As be that the information of customer complaint has just arrived soon, pseudo-base station has converted crime place, and traditional dependence client throws
The information of telling is analyzed the means of investigation, such as alarm and performance counter, is all based on network element device angle anti-
Reflect network operation situation, it is impossible to reflect each calling or detail of event, i.e. cannot reflect based on
The network condition of family granularity, especially investigation pseudo-base station event this based on signaling content screening statistics can seem
Feel simply helpless or flow process is loaded down with trivial details.But, existing analysis investigation means cannot promptly and accurately be provided with
Imitating reliable pseudo-base station information to public security department, it is difficult that the exception that work becomes is arrested in criminal investigation.
Thus, the relevant information of the most real-time alarm pseudo-base station becomes problem demanding prompt solution.
Summary of the invention
In view of this, embodiment of the present invention expectation provides a kind of pseudo-base station localization method and system, can be accurately real
Time the relevant information of alarm pseudo-base station.
For reaching above-mentioned purpose, the technical scheme of the embodiment of the present invention is achieved in that
Embodiments providing a kind of pseudo-base station localization method, described method includes:
Signaling data is obtained according to specifying isochronous surface；
Rule-based model storehouse carries out distributed treatment to described signaling data；
When distributed treatment result meets pre-conditioned, alert, and by distributed treatment result typing
Data Analysis Platform.
Preferably, described by after distributed treatment result logging data analysis platform, also include:
Described Data Analysis Platform is according to described distributed treatment result, and combines signaling data, carries out multidimensional
Degrees of data is analyzed to add up pseudo-base station occurrence law；
According to multi-dimensional data analysis result, regulate the parameter in described rule model storehouse, described reversely to improve
Rule model storehouse.
Preferably, described rule-based model storehouse carries out distributed treatment to described signaling data, including:
The signaling data of each isochronous surface is converted into elasticity distribution formula data set RDD；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
Preferably, described in carry out multi-dimensional data analysis, at least include:
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
Preferably, described according to specifying isochronous surface to obtain before signaling data, described method also includes:
Distributed Message Queue platform real-time reception signaling data；
Described signaling data is stored in each node of cluster according to self-defining mode；
Wherein, described self-defining mode is: described signaling data is divided into N class, and wherein N is positive integer.
Preferably, before described Distributed Message Queue platform real-time reception signaling data, described method is also wrapped
Include:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
The embodiment of the present invention additionally provides a kind of pseudo-base station alignment system, and described system includes distributed message team
Row platform, stream processing platform and Data Analysis Platform；Wherein,
Described Distributed Message Queue platform, for real-time reception signaling data；Described signaling data is pressed
Each node of cluster it is stored according to self-defining mode；Wherein, described self-defining mode is: by described
Signaling data is divided into N class, and wherein N is positive integer:
Described stream processing platform, for according to specifying isochronous surface to obtain signaling data；Rule-based model storehouse
Described signaling data is carried out distributed treatment；When distributed treatment result meets pre-conditioned, accuse
Alert, and by distributed treatment result logging data analysis platform；
Described Data Analysis Platform, is used for according to described distributed treatment result, and combines signaling data, enter
Row multi-dimensional data is analyzed to add up pseudo-base station occurrence law；According to multi-dimensional data analysis result, regulate institute
State the parameter in rule model storehouse, reversely to improve described rule model storehouse.
Preferably, described stream processing platform, it is additionally operable to:
The signaling data of each isochronous surface is converted into RDD；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
Preferably, described Data Analysis Platform, it is additionally operable to:
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
Preferably, described Distributed Message Queue platform, it is additionally operable to:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
Pseudo-base station localization method based on Spark Streaming Flow Technique that the embodiment of the present invention is provided and be
System, obtains signaling data according to specifying isochronous surface；Described signaling data is carried out point by rule-based model storehouse
Cloth processes；When distributed treatment result meets pre-conditioned, alert, and distributed treatment is tied
Really logging data analysis platform；Described Data Analysis Platform is according to described distributed treatment result, and combines letter
Make data, carry out multi-dimensional data analysis to add up pseudo-base station occurrence law；Tie according to multi-dimensional data analysis
Really, regulate the parameter in described rule model storehouse, reversely to improve described rule model storehouse.So, can be accurately
The relevant information of real-time alarm pseudo-base station, improves the accuracy of detecting pseudo-base station.
Accompanying drawing explanation
The flowchart one of the pseudo-base station localization method that Fig. 1 provides for the embodiment of the present invention；
The flowchart two of the pseudo-base station localization method that Fig. 2 provides for the embodiment of the present invention；
The flowchart three of the pseudo-base station localization method that Fig. 3 provides for the embodiment of the present invention；
The composition structural representation of the pseudo-base station alignment system that Fig. 4 provides for the embodiment of the present invention.
Detailed description of the invention
The present invention proposes a kind of pseudo-base station localization method based on Spark Streaming Flow Technique and system.
In order to be more fully understood that the present invention, first introduce Spark Streaming Flow Technique.
The real-time Computational frame that Spark Streaming is built upon on Spark, Spark Streaming's is excellent
Gesture is: can operate on the node of 100+, and reaches the delay of second level.
The workflow of Spark streaming is as follows: after receiving real time data, to data in batches, so
After pass to Spark Engine process, ultimately produce the result of this batch.
The ultimate principle of Spark Streaming is: be that unit is entered by input traffic with timeslice (second level)
Row splits, and then processes each timeslice data in the way of similar batch processing.Spark Streaming be by
Streaming calculates and resolves into a series of short and small batch processing job.Spark Streaming is real time input data stream
It is unit cutting in bulk with timeslice Δ t (such as 1 second)；Spark Streaming can be using every blocks of data as one
Individual elasticity distribution formula data set (RDD, Resilient Distributed Datasets), and use RDD to operate
Process each small block data；Each piece can generate a Spark Job process, and final result also returns to polylith.
The technical solution of the present invention is further elaborated with specific embodiment below in conjunction with the accompanying drawings.
The flowchart one of the pseudo-base station localization method that Fig. 1 provides for the embodiment of the present invention, as it is shown in figure 1,
Described method mainly comprises the steps that
Step 101: obtain signaling data according to specifying isochronous surface.
Here, the value of the length Δ t of described isochronous surface can be set according to practical situation, such as, described
The value of Δ t can be 500 milliseconds.
Preferably, described according to specifying isochronous surface to obtain before signaling data, described method also includes:
Distributed Message Queue platform real-time reception signaling data；
Described signaling data is stored in each node of cluster according to self-defining mode.
Wherein, described self-defining mode is: described signaling data is divided into N class, and wherein N is positive integer.
Specifically, signaling data classification is become several topics, as networking user's information, networking base station are come
Source, networking user position, customer incident type (such as caller, urgent call, called, video caller, regard
The most called, send short messages, receive note, cut, cut out, switching in BSC, normal position update, periodically
Location updating, IMSI attachment, IMSI separation, paging, supplementary service, short message state report, business weight
Build, mobile phone state is reported).
Above-mentioned BSC is the abbreviation of Base Station Controller, and its Chinese name is referred to as base station controller.
Step 102: rule-based model storehouse carries out distributed treatment to described signaling data.
Preferably, described rule-based model storehouse carries out distributed treatment to described signaling data, may include that
The signaling data of each isochronous surface is converted into elasticity distribution formula data set (RDD, Resilient
Distributed Datasets)；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
Here, described rule model storehouse may include that
1), time by pseudo-base station location updating refusal (due to reason 12,13), mobile terminal can delete pseudo-base
The lane place identification code (LAI, Location Area Identity) stood and interim identity (TMSI, Temporary
Mobile Subscriber Identity), then enter at existing network with LAI and IMSI of 65534 or 0 at existing network
Line position updates；
2), time by pseudo-base station location updating refusal (due to reason 15), mobile terminal can use pseudo-base station to divide
LAI and TMSI joined carries out location updating at existing network.
3) mobile terminal pseudo-base station signal weaker or disappearance, then mobile terminal re-searches for frequency and enters existing network,
Again carry LAI and TMSI before renewal (pseudo-base station distribution) during location updating.
The location updating refusal that above-mentioned reason 12, reason 13, reason 15 are pseudo-base station in communication system is former
Cause, concrete, reason 12 refers to " Location Area not allowed ", and Chinese is meant that " position
Region does not allows "；Reason 13 refers to " Roaming not allowed in this location area ", Chinese meaning
Think to refer to " in this area, not allowing roaming "；Reason 15 refers to " No Suitable Cells In Location Area "
Chinese is meant that " not having suitable community in lane place ".
Certainly, the location updating Reason For Denial of pseudo-base station also has a lot, does not repeats them here.
Rule-based model storehouse carries out distributed treatment to described signaling data, specifically may include that
Step 103: when distributed treatment result meets pre-conditioned, alert, and by distributed place
Reason result logging data analysis platform.
Specifically, can be by setting relevant alarming threshold value, when distributed treatment result meets corresponding announcement
During alert threshold value, can trigger and alert.
The executive agent of above-mentioned steps 101,102,103 can be all stream processing platform.
Preferably, described stream processing platform is processing platform based on Spark Streaming Flow Technique.
Preferably, before described Distributed Message Queue platform real-time reception signaling data, described method also may be used
To include:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
Specifically, so that described Distributed Message Queue platform processes with stream based on Zoopkeeper equilibrium base station
Load between platform.
Pseudo-base station localization method described in the present embodiment, by customer location event data and Spark Streaming
Stream treatment technology combines, and first screens the key message that pseudo-base station occurs from mass data, be then based on user,
Event, time, space carry out multidimensional analysis, it is achieved can display quasi real time and alarm as weather cloud atlas
Pseudo-base station activity focus.So, rule-based model storehouse batch processing time window internal data, can realize low
Postpone alarm, so solve prior art means can not the problem of detecting real-time pseudo-base station.
The flowchart two of the pseudo-base station location that Fig. 2 provides for the embodiment of the present invention, as in figure 2 it is shown, should
Flow process mainly comprises the steps that
Step 201: it is flat that signaling data divides topic to be stored in Distributed Message Queue according to the queue mode specified
Platform.
Specifically, step 201 can be passed through, i.e. by being stored in the topic data of Distributed Message Queue platform
Accounting base-station is in real time at netizen's number；Then set up MC mouth tablet menu, and all of MC mouth data are imported
To first-class processing platform.
Wherein, MC mouth refers to mobile switching centre (MSC, Mobile Switching Center) and media
Interface between gateway (MGW, Media Gateway).
Concrete, described first processing platform refers to stream processing platform based on Spark Streaming Flow Technique.
Step 202: obtain signaling data according to specifying isochronous surface.
Concrete, stream processing platform based on Spark Streaming Flow Technique is cut signaling data according to the time
Sheet Δ t is unit cutting in bulk, and using every blocks of data as a RDD, and it is each to use RDD operation to process
Small block data；Each fritter can generate a Spark Job process, and final result also returns to polylith.
Concrete, for topic data (Topic_Data), current time section (such as 500ms)
Data are complete signaling data, including: networking number, time started, end time, agreement, event
Type, coding sorts, MSC signaling point code, BSC signaling point code, present position-region, current area
Or service area code (SAC, Service Area Code), source position district, cell-of-origin, destination locations district,
Purpose community, starting position district, beginning community, end position district, end community, purpose wireless network control
District processed identification code (RNCID, Radio Network Controller Identity), calling number, called number,
Caller IMSI, called IMS I, caller IMEI, called IMEI, event result, cut out reason for claim, cut
Go out the time started, cut out response time, cut the time started, cut response time, cut out state, incision
State, location updating state, switching mark, ring time, response time, the duration of call.
Specifically, base station can be obtained by step 202 and at netizen's number and net the data such as base station, by advance
Set pattern then, identifies abnormal base station；Normal position can also be set up also by step 202 and update interim table,
Filter events is the record that normal position updates.
Step 203: the signaling data of each isochronous surface is converted into RDD, then to data stream
Carry out the batch processing analysis of real-time streams.
Specifically, described in carry out batch processing analysis, may include that
According to signaling data format and separator, temporally section obtains all kinds of topic data.
Described topic may is that caller, urgent call, called, video caller, video is called, send short messages,
Receive note, cut, cut out, switching, normal position renewal, periodic location update, IMSI in BSC
Attachment, IMSI separation, paging, supplementary service, short message state report, service reconstruction, mobile phone state report.
Specifically, the abnormal base station data that can be obtained by step 203, obtain user and drop mobile base station
Signaling data and the signaling data again networked, by base station geographic position information in these signaling datas,
Obtain pseudo-base station scope；Setting up normal position also by step 203 and update interim table, screening source LAC is not
For planning the event of LAC.
Step 204: when distributed treatment result meets pre-conditioned, exports result data, and triggers alarm.
Pseudo-base station localization method described in the present embodiment, by being stored in the topic of Distributed Message Queue platform
Data statistics base station is in real time at netizen's number；Then set up MC mouth tablet menu；Obtain base station at netizen's number and
In data such as net base stations, by pre-defined rule, identify abnormal base station；Obtain user to drop the letter of mobile base station
Make data and the signaling data again networked, by base station geographic position information in these signaling datas, obtain
Obtain pseudo-base station scope.So, can detecting real-time pseudo-base station.
The flowchart three of the pseudo-base station localization method that Fig. 3 provides for the embodiment of the present invention, as it is shown on figure 3,
Described method mainly comprises the steps that
Step 301: according to distributed treatment result, and combine signaling data, carries out multi-dimensional data analysis
To add up pseudo-base station occurrence law.
Here, described distributed treatment result can be to flow the distributed treatment knot of processing platform in embodiment one
Really, the signaling data that described signaling data can obtain with Distributed Message Queue platform.
Preferably, described in carry out multi-dimensional data analysis, at least may include that
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
Specifically, described in carry out multi-dimensional data analysis, can include but not limited to following several:
1) statistical summaries based on hour, day, month multiple time granularities, including victim user inventory, disturbed
The forms such as cell lists, pseudo-base station LAC inventory；
2) public security pseudo-base station, stationary point pseudo-base station, flee pseudo-base station interference incident classification；
3) complain the concrete event of event and place according to customer complaint information searching, verify complaint event
Real effectiveness；
4) calculate high frequency victim user track, inquire about single user based on certain time period or the motion of multi-user position
Track, simultaneously pseudo-base station case point in labelling track, be used for analyzing whether investigation is pseudo-base station；
5) to the hot spot region of pseudo-base station interference incident, newly-increased pseudo-base station interference region, disappearance occur
Pseudo-base station interference region be analyzed, in order to burst colony pseudo-base station event is alerted.
Step 302: according to multi-dimensional data analysis result, regulate the parameter in described rule model storehouse, with instead
To improving described rule model storehouse.
Preferably, described rule model storehouse can be stored in stream processing platform local storage in or be stored in
In Cloud Server.
Above-mentioned steps 301, the executive agent of step 302 can be all Data Analysis Platform.
Pseudo-base station localization method described in the present embodiment, Data Analysis Platform based on user, event, the time,
Space carries out multidimensional analysis, it is achieved can as weather cloud atlas display quasi real time and alarm pseudo-base station activity heat
Point and the track trend of analysis pseudo-base station activity, it was predicted that next criminal activity region；Further, according to
Multi-dimensional data analysis result, regulates the parameter in described rule model storehouse, reversely to improve described rule model
Storehouse, improves the accuracy of detecting.
The composition structural representation of the pseudo-base station alignment system that Fig. 4 provides for the embodiment of the present invention, such as Fig. 4 institute
Showing, described system includes Distributed Message Queue platform 41, stream processing platform 42 and Data Analysis Platform 43；
Wherein,
Described Distributed Message Queue platform 41, for real-time reception signaling data；By described signaling data quilt
Each node of cluster it is stored according to self-defining mode；
Described stream processing platform 42, for according to specifying isochronous surface to obtain signaling data；Rule-based model
Storehouse carries out distributed treatment to described signaling data；When distributed treatment result meets pre-conditioned, carry out
Alarm, and by distributed treatment result logging data analysis platform 43；
Described Data Analysis Platform 43, is used for according to described distributed treatment result, and combines signaling data,
Carry out multi-dimensional data analysis to add up pseudo-base station occurrence law；According to multi-dimensional data analysis result, regulation
The parameter in described rule model storehouse, reversely to improve described rule model storehouse.
Wherein, described self-defining mode is: described signaling data is divided into N class, and wherein N is positive integer:
Preferably, described stream processing platform 42, it is additionally operable to:
The signaling data of each isochronous surface is converted into RDD；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
Preferably, described Data Analysis Platform 43, it is additionally operable to:
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
Preferably, described Distributed Message Queue platform 41, it is additionally operable to:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
The embodiment of the present invention provides pseudo-base station alignment system, and system is by each base station real-time that will collect
Data are stored in Distributed Message Queue platform, and stream processing platform serves as message queue consumer role, packet
Each topic data in consumption message queue, i.e. utilizes Spark batch system, uses MC mouth history full dose
Family behavioural information carries out ETL flow process, and screening original position district is the normal position more new events letter of abnormal LAC
Breath carries out collecting statistics, association subscriber data and base station geographic position information, can obtain the event of various dimensions
Statistics, thus judge pseudo-base station main activity region and victim user group.Spark streaming is utilized to flow
Treatment technology, MC mouth real time information is carried out judge screening, then with minute or a hour level time granule enter
Row collects, and utilizes GIS-Geographic Information System (GIS, Geographic Information System) system to carry out heat
Force is analyzed, and can effectively draw pseudo-base station interference region and track, thus predict next work of pseudo-base station
Dynamic place.By the alarming threshold value that default is relevant, real time data triggers thresholding after collecting statistics
Realize pseudo-base station and alarm function occurs.Data Analysis Platform can store stream and process historical data simultaneously, completes
Off-line multi dimensional analysis is added up, and optimizes base station network safety.
In several embodiments provided by the present invention, it should be understood that disclosed method, equipment and be
System, can realize by another way.Apparatus embodiments described above is only schematically, example
Such as, the division of described unit, being only a kind of logic function and divide, actual can have other drawing when realizing
Point mode, such as: multiple unit or assembly can be in conjunction with, or are desirably integrated into another system, or some are special
Levy and can ignore, or do not perform.It addition, the coupling each other of shown or discussed each ingredient,
Or direct-coupling or communication connection can be the INDIRECT COUPLING by some interfaces, equipment or unit or communication
Connect, can be electrical, machinery or other form.
The above-mentioned unit illustrated as separating component can be or may not be physically separate, as
The parts that unit shows can be or may not be physical location, i.e. may be located at a place, it is possible to
To be distributed on multiple NE；Part or all of unit therein can be selected according to the actual needs
Realize the purpose of the present embodiment scheme.
It addition, each functional unit in various embodiments of the present invention can be fully integrated in a processing unit,
Can also be that each unit is individually as a unit, it is also possible to two or more unit are integrated in one
In individual unit；Above-mentioned integrated unit both can realize to use the form of hardware, it would however also be possible to employ hardware adds soft
The form of part functional unit realizes.
One of ordinary skill in the art will appreciate that: all or part of step realizing said method embodiment can
Completing with the hardware relevant by programmed instruction, aforesaid program can be stored in an embodied on computer readable and deposit
In storage media, this program upon execution, performs to include the step of said method embodiment；And aforesaid storage
Medium includes: movable storage device, read only memory (ROM, Read-Only Memory), magnetic disc or
The various media that can store program code such as person's CD.
Or, if the above-mentioned integrated unit of the embodiment of the present invention realizes with the form of software function module and makees
During for independent production marketing or use, it is also possible to be stored in a computer read/write memory medium.Base
In such understanding, prior art is contributed by the technical scheme of the embodiment of the present invention the most in other words
Part can embody with the form of software product, and this computer software product is stored in a storage medium
In, including some instructions with so that computer equipment (can be personal computer, server or
Person's network equipment etc.) perform all or part of of method described in each embodiment of the present invention.And aforesaid storage
Medium includes: various Jie that can store program code such as movable storage device, ROM, magnetic disc or CD
Matter.
The above, only presently preferred embodiments of the present invention, it is not intended to limit the protection model of the present invention
Enclose.All any amendment, equivalent and improvement etc. made within the spirit and principles in the present invention, all should
Within being included in protection scope of the present invention.
Claims (10)
1. a pseudo-base station localization method, it is characterised in that described method includes:
Signaling data is obtained according to specifying isochronous surface；
Rule-based model storehouse carries out distributed treatment to described signaling data；
When distributed treatment result meets pre-conditioned, alert, and by distributed treatment result typing
Data Analysis Platform.
Method the most according to claim 1, it is characterised in that described by distributed treatment result typing
After Data Analysis Platform, also include:
Described Data Analysis Platform is according to described distributed treatment result, and combines signaling data, carries out multidimensional
Degrees of data is analyzed to add up pseudo-base station occurrence law；
According to multi-dimensional data analysis result, regulate the parameter in described rule model storehouse, described reversely to improve
Rule model storehouse.
Method the most according to claim 1, it is characterised in that described rule-based model storehouse is to described
Signaling data carries out distributed treatment, including:
The signaling data of each isochronous surface is converted into elasticity distribution formula data set RDD；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
Method the most according to claim 2, it is characterised in that described in carry out multi-dimensional data analysis,
At least include:
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
Method the most according to claim 1, it is characterised in that described according to specifying isochronous surface to obtain
Before signaling data, described method also includes:
Distributed Message Queue platform real-time reception signaling data；
Described signaling data is stored in each node of cluster according to self-defining mode；
Wherein, described self-defining mode is: described signaling data is divided into N class, and wherein N is positive integer.
Method the most according to claim 5, it is characterised in that described Distributed Message Queue platform is real
Time receive before signaling data, described method also includes:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
7. a pseudo-base station alignment system, it is characterised in that described system include Distributed Message Queue platform,
Stream processing platform and Data Analysis Platform；Wherein,
Described Distributed Message Queue platform, for real-time reception signaling data；Described signaling data is pressed
Each node of cluster it is stored according to self-defining mode；Wherein, described self-defining mode is: by described
Signaling data is divided into N class, and wherein N is positive integer:
Described stream processing platform, for according to specifying isochronous surface to obtain signaling data；Rule-based model storehouse
Described signaling data is carried out distributed treatment；When distributed treatment result meets pre-conditioned, accuse
Alert, and by distributed treatment result logging data analysis platform；
Described Data Analysis Platform, is used for according to described distributed treatment result, and combines signaling data, enter
Row multi-dimensional data is analyzed to add up pseudo-base station occurrence law；According to multi-dimensional data analysis result, regulate institute
State the parameter in rule model storehouse, reversely to improve described rule model storehouse.
System the most according to claim 7, it is characterised in that described stream processing platform, is additionally operable to:
The signaling data of each isochronous surface is converted into RDD；
Rule-based model storehouse carries out batch processing analysis to the signaling data stream in Preset Time.
System the most according to claim 7, it is characterised in that described Data Analysis Platform, is additionally operable to:
Carry out multi dimensional analysis based on user, event, time, space, generate pseudo-base station based on the whole network and do
Disturb quasi real time thermodynamic chart；
Temporally frame plays described pseudo-base station interference thermodynamic chart, according to fleeing type pseudo-base station suspicious region and track,
Next activity venue of type pseudo-base station is fled described in prediction.
System the most according to claim 7, it is characterised in that described Distributed Message Queue platform,
It is additionally operable to:
Cluster is built Zookeeper, so that described Distributed Message Queue platform is based on Zoopkeeper
Equally loaded.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510151799.9A CN106162688B (en) | 2015-04-01 | 2015-04-01 | A kind of pseudo-base station localization method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510151799.9A CN106162688B (en) | 2015-04-01 | 2015-04-01 | A kind of pseudo-base station localization method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106162688A true CN106162688A (en) | 2016-11-23 |
| CN106162688B CN106162688B (en) | 2019-08-27 |
Family
ID=57338784
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510151799.9A Active CN106162688B (en) | 2015-04-01 | 2015-04-01 | A kind of pseudo-base station localization method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106162688B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108243421A (en) * | 2016-12-26 | 2018-07-03 | 中国移动通信集团山东有限公司 | Pseudo-base station recognition methods and system |
| CN110213724A (en) * | 2019-05-17 | 2019-09-06 | 国家计算机网络与信息安全管理中心 | A kind of recognition methods of pseudo-base station motion profile |
| CN111913996A (en) * | 2020-07-14 | 2020-11-10 | 中国联合网络通信集团有限公司 | Data processing method, device, equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101453743A (en) * | 2008-10-31 | 2009-06-10 | 中国移动通信集团北京有限公司 | Real-time monitoring system, apparatus and method |
| CN101772011A (en) * | 2008-12-29 | 2010-07-07 | 中国移动通信集团上海有限公司 | Method for optimizing configuration of household base station and household base station device |
| CN102075980A (en) * | 2009-11-25 | 2011-05-25 | 中国移动通信集团福建有限公司 | Method and device for obtaining system switching information element |
| CN104038301A (en) * | 2014-06-30 | 2014-09-10 | 信亚美科（南京）信息技术有限公司 | Distributed intelligent radio monitoring system |
| CN104301896A (en) * | 2014-10-15 | 2015-01-21 | 上海欣方智能系统有限公司 | Intelligent fraud short message monitor and alarm system and method |
-
2015
- 2015-04-01 CN CN201510151799.9A patent/CN106162688B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101453743A (en) * | 2008-10-31 | 2009-06-10 | 中国移动通信集团北京有限公司 | Real-time monitoring system, apparatus and method |
| CN101772011A (en) * | 2008-12-29 | 2010-07-07 | 中国移动通信集团上海有限公司 | Method for optimizing configuration of household base station and household base station device |
| CN102075980A (en) * | 2009-11-25 | 2011-05-25 | 中国移动通信集团福建有限公司 | Method and device for obtaining system switching information element |
| CN104038301A (en) * | 2014-06-30 | 2014-09-10 | 信亚美科（南京）信息技术有限公司 | Distributed intelligent radio monitoring system |
| CN104301896A (en) * | 2014-10-15 | 2015-01-21 | 上海欣方智能系统有限公司 | Intelligent fraud short message monitor and alarm system and method |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108243421A (en) * | 2016-12-26 | 2018-07-03 | 中国移动通信集团山东有限公司 | Pseudo-base station recognition methods and system |
| CN108243421B (en) * | 2016-12-26 | 2020-12-15 | 中国移动通信集团山东有限公司 | Pseudo base station identification method and system |
| CN110213724A (en) * | 2019-05-17 | 2019-09-06 | 国家计算机网络与信息安全管理中心 | A kind of recognition methods of pseudo-base station motion profile |
| CN111913996A (en) * | 2020-07-14 | 2020-11-10 | 中国联合网络通信集团有限公司 | Data processing method, device, equipment and storage medium |
| CN111913996B (en) * | 2020-07-14 | 2023-07-18 | 中国联合网络通信集团有限公司 | Data processing method, device, equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106162688B (en) | 2019-08-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7966020B2 (en) | Wireless user based notification system | |
| US10104536B2 (en) | Method and system for user equipment identification in a network | |
| CN102640090B (en) | Location intelligence management system | |
| CN104661267B (en) | For the system, method and medium of cell idle mode mobility | |
| KR101432230B1 (en) | A system and method for registering network information strings | |
| US8862173B2 (en) | Method for selecting media for delivery to users at an incident | |
| KR20110097947A (en) | Predictive notification system for emergency services | |
| CN105830468A (en) | Geo-fence based alerts | |
| CN102026129B (en) | Method and device for processing call delay information | |
| WO2015158399A1 (en) | Method and system for identifying significant locations through data obtainable from a telecommunication network | |
| CN103518414A (en) | Disabling transceivers while servicing emergency messages | |
| US20110319052A1 (en) | System and method for determining commonly used communication terminals and for identifying noisy entities in large-scale link analysis | |
| US20220167171A1 (en) | Security anomaly detection for internet of things devices | |
| WO2012048383A1 (en) | Method and apparatus for communication and alert system | |
| CN109508965A (en) | A kind of policing administration system | |
| CN103248864A (en) | Fusion method and system for cluster communication and video monitoring | |
| CN106162688A (en) | A kind of pseudo-base station localization method and system | |
| CN111480352B (en) | Edge-based location-specific alarm system for LTE networks | |
| JP5401539B2 (en) | Mobile device, communication system, and communication method | |
| CN100499906C (en) | Method for realizing legal monitoring | |
| US11200409B2 (en) | Utilizing an array of cameras including IoT sensors with cameras to search for objects via a wireless communication network | |
| CN1331369C (en) | Method for acquiring user entry into position zone by scheduling bable in group radio communication system | |
| TWI692957B (en) | Indoor area human flow positioning system and its usage method | |
| US20130346420A1 (en) | Method And System For Identifying Aberrant Wireless Behavior | |
| CN110121172A (en) | A kind of remote power feeding system applied to Android phone |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |