CN106789124A - WAP flow rate testing methods and its system, GGSN servers and WAP gateway - Google Patents
WAP flow rate testing methods and its system, GGSN servers and WAP gateway Download PDFInfo
- Publication number
- CN106789124A CN106789124A CN201710093531.3A CN201710093531A CN106789124A CN 106789124 A CN106789124 A CN 106789124A CN 201710093531 A CN201710093531 A CN 201710093531A CN 106789124 A CN106789124 A CN 106789124A
- Authority
- CN
- China
- Prior art keywords
- address
- domain name
- module
- wap
- http request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/02—Details
- H04L12/14—Charging, metering or billing arrangements for data wireline or wireless communications
- H04L12/1403—Architecture for metering, charging or billing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/02—Details
- H04L12/14—Charging, metering or billing arrangements for data wireline or wireless communications
- H04L12/1432—Metric aspects
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/30—Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information
- H04L63/302—Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information gathering intelligence information for situation awareness or reconnaissance
Abstract
The invention discloses a kind of WAP flow rate testing methods and its system, GGSN servers and WAP gateway, the WAP flow rate testing methods include：Second receiver module receives the HTTP request and the first IP address that GGSN servers send；Second parsing module is according to receiving the URL included in the HTTP request to parse corresponding second domain name；Second enquiry module inquires corresponding second IP address of second domain name to the dns server；Second judge module judges whether first IP address is identical with second IP address；If judge that first IP address is different from second IP address, detection module detects that the corresponding flowing of access of the mobile terminal is exception WAP flows.Technical scheme can effectively detect that mobile terminal carries out abnormal WAP flows when WAP surfs the Net, and so as to avoid the occurrence of the phenomenon that flow is stolen, and then can effectively reduce the loss of operator.
Description
Technical field
The present invention relates to communication technical field, more particularly to a kind of WAP flow rate testing methods and its system, GGSN servers
And WAP gateway.
Background technology
At present, for the internet behavior of mobile terminal, operator uses Wireless Application Protocol (Wireless
Application Protocol, abbreviation WAP) gateway processes mobile terminal WAP businesss of networking, generally comprise：Unified resource
The parsing of finger URL (Uniform Resource Locator, abbreviation URL) and domain name system (Domain Name System,
Abbreviation DNS) inquiry, at the same time, Gateway GPRS Support Node (Gateway GPRS Support Node, abbreviation GGSN)
HTTP (HyperText Transfer Protocol, abbreviation of the server according to transmitted by mobile terminal
HTTP the URL in) asking to flowing of access carries out charging, for example, the flowing of access of part website is free flow, part net
There is certain discount in the flowing of access stood.
Conventionally, as GGSN servers are different with the production firm of WAP gateway, to the resolution rules of URL
Different (being difficult the analytic uniform rule of the unified GGSN servers of definition and WAP gateway to URL at present), thus there are GGSN clothes
There is inconsistent situation to the domain name mapping result of URL with WAP gateway to the domain name mapping result of URL in business device.For example, user
Access URL：The URL can be parsed into the operator by 10010%/%m.sina.com#%3ay86, GGSN server
Free flow website, but the URL can be parsed into m.sina.com by WAP gateway, and (m.sina.com is a non-free flow
Website)；When user accesses website m.sina.com, GGSN servers but do not carry out charging to flowing of access, so as to make
The phenomenon (i.e. flowing of access is exception WAP flows) of WAP flows is stolen into user, loss is brought to operator.
From the above, how to detect that the abnormal WAP flows during user WAP online are that this area needs solution badly
Technical problem certainly.
The content of the invention
It is contemplated that at least solving one of technical problem present in prior art, it is proposed that a kind of WAP flow detections
Method and its system, GGSN servers and WAP gateway.
To achieve the above object, the invention provides a kind of WAP flow rate testing methods, including：
Second receiver module receives the HTTP request and the first IP address that GGSN servers send, and first IP address is
The GGSN servers are in the URL according to included in the HTTP request parsing corresponding first domain
After name, the corresponding IP address of first domain name inquired to dns server；
Second parsing module is according to receiving the URL included in the HTTP request to parse
Go out corresponding second domain name；
Second enquiry module inquires corresponding second IP address of second domain name to the dns server；
Second judge module judges whether first IP address is identical with second IP address；Wherein, if judging
When first IP address is identical with second IP address, then detection module detects that the corresponding flowing of access of mobile terminal is
Normal WAP flows；If judge that first IP address is different from second IP address, detection module detects described
The corresponding flowing of access of mobile terminal is exception WAP flows.
To achieve the above object, present invention also offers a kind of WAP gateway, including：
Second receiver module, HTTP request and the first IP address for receiving the transmission of GGSN servers, an IP
Address is the GGSN servers corresponding to parse in the URL according to included in the HTTP request
After first domain name, the corresponding IP address of first domain name inquired to dns server；
Second parsing module, for according to receive the URL included in the HTTP request with
Parse corresponding second domain name；
Second enquiry module, for inquiring corresponding second IP address of second domain name to the dns server；
Whether the second judge module is identical with second IP address for judging first IP address；
Detection module, if judging first IP address with the second IP address phase for second judge module
Meanwhile, then detect the corresponding flowing of access of mobile terminal for normal WAP flows, and if second judge module judge
When first IP address is different from second IP address, then detect that the corresponding flowing of access of the mobile terminal is exception
WAP flows.
To achieve the above object, present invention also offers a kind of WAP flow rate testing methods, including：
First receiver module receives the HTTP request that mobile terminal sends；
First parsing module is according to receiving the URL included in the HTTP request to parse
Go out corresponding first domain name；
First enquiry module inquires corresponding first IP address of first domain name to dns server；
First sending module sends to the WAP gateway, for described the HTTP request and first IP address
WAP gateway is according to receiving the URL included in the HTTP request to parse corresponding second domain
Name, and corresponding second IP address of second domain name is inquired to the dns server, and judge first IP address
It is whether identical with second IP address, wherein, if judge that first IP address is identical with second IP address,
The corresponding flowing of access of the mobile terminal is detected for normal WAP flows, if judging first IP address with described the
When two IP address are different, then detect that the corresponding flowing of access of the mobile terminal is exception WAP flows.
Alternatively, first parsing module is fixed according to the unified resource received included in the HTTP request
Also include after the step of position symbol is to parse corresponding first domain name：
First judge module judges whether first domain name is free flow according to default free flow list of websites
The domain name of website；
If first judge module judges the domain name that first domain name is free flow website, perform described
The step of first enquiry module inquires first domain name corresponding first IP address to dns server；
If first judge module judges first domain name for the domain name of free flow website, the is performed
The step of one sending module sends to the WAP gateway HTTP request.
To achieve the above object, present invention also offers a kind of GGSN servers, including：
First receiver module, the HTTP request for receiving mobile terminal transmission；
First parsing module, for according to receive the URL included in the HTTP request with
Parse corresponding first domain name；
First enquiry module, for inquiring corresponding first IP address of first domain name to dns server；
First sending module, for the HTTP request and first IP address to be sent to the WAP gateway, for
The WAP gateway is according to receiving the URL included in the HTTP request to parse corresponding
Two domain names, and corresponding second IP address of second domain name is inquired to the dns server, and judge an IP
Whether address is identical with second IP address, wherein, if judging, first IP address is identical with second IP address
When, then the corresponding flowing of access of the mobile terminal is detected for normal WAP flows, if judging first IP address and institute
When stating the second IP address difference, then detect that the corresponding flowing of access of the mobile terminal is exception WAP flows.
Alternatively, also include：
First judge module, after parsing corresponding first domain name in first parsing module, according to default
Free flow list of websites judge first domain name whether be free flow website domain name；
If first enquiry module judges that first domain name is free stream specifically for first judge module
When measuring the domain name of website, corresponding first IP address of first domain name is inquired to dns server；
If first sending module is additionally operable to first judge module judges first domain name freely to flow
When measuring the domain name of website, the HTTP request is sent to the WAP gateway.
To achieve the above object, present invention also offers a kind of WAP flow rate testing methods, the WAP flow rate testing methods
Detection method be based on WAP flow quantity detecting systems, the WAP flow quantity detecting systems include：GGSN servers and WAP gateway, institute
Stating GGSN servers includes：First receiver module, the first parsing module, the first enquiry module and the first sending module, the WAP
Gateway includes：Second receiver module, the first parsing module, the first enquiry module, the second judge module and detection module, it is described
WAP flow rate testing methods include：
First receiver module receives the HTTP request that mobile terminal sends；
First parsing module is according to receiving the URL included in the HTTP request to parse
Go out corresponding first domain name；
First enquiry module inquires corresponding first IP address of first domain name to dns server；
First sending module sends to the WAP gateway HTTP request and first IP address；
Second receiver module receives the HTTP request and the first IP address that GGSN servers send；
Second parsing module is according to receiving the URL included in the HTTP request to parse
Go out corresponding second domain name；
Second enquiry module inquires corresponding second IP address of second domain name to the dns server；
Second judge module judges whether first IP address is identical with second IP address；Wherein, if judging
When first IP address is identical with second IP address, then detection module detects that the corresponding flowing of access of mobile terminal is
Normal WAP flows；If judge that first IP address is different from second IP address, detection module detects described
The corresponding flowing of access of mobile terminal is exception WAP flows.
Alternatively, the GGSN servers also include：First judge module；
First parsing module according to the URL received included in the HTTP request with
Also include after the step of parsing corresponding first domain name：
First judge module judges whether first domain name is free according to default free flow list of websites
The domain name of flow website；
If first judge module judges the domain name that first domain name is free flow website, perform described
The step of first enquiry module inquires first domain name corresponding first IP address to dns server；
If first judge module judges first domain name for the domain name of free flow website, the is performed
The step of one sending module sends to the WAP gateway HTTP request.
To achieve the above object, present invention also offers a kind of WAP flow quantity detecting systems, including：GGSN servers and WAP
Gateway；
Wherein, the GGSN servers include：
First receiver module, the HTTP request for receiving mobile terminal transmission；
First parsing module, for according to receive the URL included in the HTTP request with
Parse corresponding first domain name；
First enquiry module, for inquiring corresponding first IP address of first domain name to dns server；
First sending module, for the HTTP request and first IP address to be sent to the WAP gateway；
The WAP gateway includes：
Second receiver module, HTTP request and the first IP address for receiving the transmission of GGSN servers；
Second parsing module, for according to receive the URL included in the HTTP request with
Parse corresponding second domain name；
Second enquiry module, for inquiring corresponding second IP address of second domain name to the dns server；
Whether the second judge module is identical with second IP address for judging first IP address；
Detection module, if judging first IP address with the second IP address phase for second judge module
Meanwhile, then detect the corresponding flowing of access of mobile terminal for normal WAP flows, and if second judge module judge
When first IP address is different from second IP address, then detect that the corresponding flowing of access of the mobile terminal is exception
WAP flows.
Alternatively, the GGSN servers also include：
First judge module, after parsing corresponding first domain name in first parsing module, according to default
Free flow list of websites judge first domain name whether be free flow website domain name；
If first enquiry module judges that first domain name is free stream specifically for first judge module
When measuring the domain name of website, corresponding first IP address of first domain name is inquired to dns server；
If first sending module is additionally operable to first judge module judges first domain name freely to flow
When measuring the domain name of website, the HTTP request is sent to the WAP gateway.
The invention has the advantages that：
The invention provides a kind of WAP flow rate testing methods and its system, GGSN servers and WAP gateway, the WAP flows
Detection method includes：Second receiver module receives the HTTP request and the first IP address that GGSN servers send；Second parsing mould
Root tuber evidence receives the URL included in the HTTP request to parse corresponding second domain name；The
Two enquiry modules inquire corresponding second IP address of second domain name to the dns server；Second judge module judges
Whether first IP address is identical with second IP address；Wherein, if judging first IP address and described second
When IP address is identical, then detection module detects that the corresponding flowing of access of mobile terminal is normal WAP flows；If judging described
When first IP address is different from second IP address, then detection module detects that the corresponding flowing of access of the mobile terminal is
Abnormal WAP flows.Technical scheme can effectively detect that mobile terminal carries out abnormal WAP flows when WAP surfs the Net,
There is the phenomenon that flow is stolen so as to be prevented effectively from, and then can effectively reduce the loss of operator.
Brief description of the drawings
Fig. 1 is the structural representation of the WAP flow quantity detecting systems that the embodiment of the present invention one is provided；
Fig. 2 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention two is provided；
Fig. 3 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention three is provided；
Fig. 4 is a kind of structural representation of GGSN servers that the embodiment of the present invention four is provided；
Fig. 5 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention five is provided；
Fig. 6 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention six is provided；
Fig. 7 is a kind of structural representation of WAP gateway that the embodiment of the present invention seven is provided；
Fig. 8 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention eight is provided.
Specific embodiment
To make those skilled in the art more fully understand technical scheme, the present invention is carried below in conjunction with the accompanying drawings
A kind of WAP flow rate testing methods and its system, GGSN servers and WAP gateway for supplying are described in detail.
Embodiment one
Fig. 1 is the structural representation of the WAP flow quantity detecting systems that the embodiment of the present invention one is provided, as shown in figure 1, the WAP
Flow quantity detecting system includes：GGSN servers 1 and WAP gateway 2.
Wherein, GGSN servers 1 include：First receiver module 11, the first parsing module 12, the first enquiry module 13 and
One sending module 14.First receiver module 11 is used to receive the HTTP request of mobile terminal transmission；First parsing module 12 is used for
According to receiving the URL included in HTTP request to parse corresponding first domain name；First enquiry module
13 are used to inquire corresponding first IP address of the first domain name to dns server 3；First sending module 14 is used for HTTP request
Sent to WAP gateway 2 with the first IP address.
WAP gateway 2 includes：Second receiver module 21, the first parsing module 12, the first enquiry module 13, second judge mould
Block 24 and detection module 25.Second receiver module 21 is used to receive the HTTP request and the first IP address of the transmission of GGSN servers 1；
Second parsing module 22 is used for according to receiving the URL included in HTTP request to parse corresponding the
Two domain names；Second enquiry module 23 is used to inquire corresponding second IP address of the second domain name to dns server 3；Second judges
Module 24 is used to judge whether the first IP address is identical with the second IP address；If detection module 25 is sentenced for the second judge module 24
Break the first IP address it is identical with the second IP address when, then detect the corresponding flowing of access of mobile terminal for normal WAP flows,
And if the second judge module 24 is when judging that the first IP address is different from the second IP address, detecting that mobile terminal is corresponding
Flowing of access is exception WAP flows.
In the present invention, GGSN servers 1 preserve its own the first domain name for being parsed to URL, and to DNS service
Device 3 inquires about corresponding first IP address of first domain name, and first IP address is sent to WAP gateway 2, WAP gateway 2 itself
The second IP address is obtained after having performed URL parsings and DNS query, is contrasted with the second IP address by by the first IP address,
If both are consistent, detect that the corresponding flowing of access of the mobile terminal is normal WAP flows；Conversely, then for exception WAP flows
Amount, now operator can carry out charging to these abnormal WAP flows according to actual conditions using special charge rule, specific meter
Expense rule will not be described herein.
Used as a kind of concrete application scheme alternatively in the present invention, the GGSN servers 1 also include：First judges mould
Block 15, the first judge module 15 is used for after the first parsing module 12 parses corresponding first domain name, is exempted from according to default
Expense flow list of websites judge the first domain name whether be free flow website domain name；If the first enquiry module 13 is specifically for
When one judge module 15 judges the domain name that the first domain name is free flow website, the first domain name pair is inquired to dns server 3
The first IP address answered；If the first sending module 14 is additionally operable to the first judge module 15 judges that the first domain name is not free flow
During the domain name of website, HTTP request is sent to WAP gateway 2.
Find in actual applications, non-free flow is not billed, often caused by GGSN servers 1 by non-free flow
The corresponding URL of website domain name has been parsed into the domain name of free flow website.Therefore, in the present invention, can be only when GGSN is serviced
When device 1 judges the website of mobile terminal accessing for free flow website, just to the flowing of access for exception WAP flows are examined
Survey.When GGSN servers 1 judge mobile terminal accessing website be non-free flow website when, then by HTTP request send to
WAP gateway 2, WAP gateway 2 carries out URL parsings, DNS query, for the corresponding website of mobile terminal accessing, mobile terminal accessing
The process of corresponding website with it is identical in the prior art, here is omitted.
Alternatively, the GGSN servers 1 also include：Accounting module 16, the accounting module 16 is used for mobile terminal correspondence
Flowing of access carry out charging.
Technical scheme can effectively detect that mobile terminal carries out abnormal WAP flows when WAP surfs the Net, so that
Can be prevented effectively from and the phenomenon that flow is stolen occur, and then can effectively reduce the loss of operator.
Embodiment two
Fig. 2 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention two is provided, as shown in Fig. 2 the WAP
The detection method of flow rate testing methods is based on the WAP flow quantity detecting systems in above-described embodiment one, WAP flow quantity detecting system bags
Include：GGSN servers and WAP gateway, GGSN servers include：First receiver module, the first parsing module, the first enquiry module
With the first sending module, WAP gateway includes：Second receiver module, the first parsing module, the first enquiry module, second judge mould
Block and detection module, WAP flow rate testing methods include：
Step S101, the first receiver module receive the HTTP request that mobile terminal sends.
Mobile terminal is before website visiting is carried out, it is necessary to carry out PDP (Packet Data with GGSN servers
Protocol) activate, mobile terminal obtains the authentication license of corresponding GGSN.After PDP activation is completed, mobile terminal passes through
GGSN servers send remote customer dialing authentication (Remote Authentication Dial In User to WAP gateway
Service, abbreviation RADIUS) request, WAP gateway completes certification, and feeds back RADIUS to mobile terminal by GGSN servers
Authentication success message.
After mobile terminal completes RADIUS authentication, mobile terminal will include the URL's corresponding to website to be visited
HTTP request is sent to GGSN servers, and the HTTP that the first receiver module in GGSN servers receives mobile terminal transmission please
Ask.
Step S102, the first parsing module are according to receiving the URL included in HTTP request to parse
Go out corresponding first domain name.
The first parsing module in GGSN servers is according to default first resolution rules come to included in HTTP request
URL parsed, to obtain the first domain name.
Step 103, the first enquiry module inquire corresponding first IP address of the first domain name to dns server.
The first enquiry module in GGSN servers sends to dns server the first domain name, and dns server inquires this
Corresponding first IP address of first domain name, and first IP address is fed back into GGSN servers.
It should be noted that each domain name only corresponds to an IP address, multiple domain names can correspond to same IP address.
Step 104, the first sending module send to WAP gateway HTTP request and the first IP address.
HTTP request transmitted by the first IP address that GGSN servers will be inquired and mobile terminal is sent to WAP nets
Close.
Step 105, the second receiver module receive the HTTP request and the first IP address that GGSN servers send.
The second receiver module in WAP gateway receives HTTP request and the first IP address that GGSN servers send.
Step 106, the second parsing module are according to receiving the URL included in HTTP request to parse
Go out corresponding second domain name.
The second parsing module in WAP gateway is according to default second resolution rules come to included in HTTP request
URL is parsed, to obtain the second domain name.
Step 107, the second enquiry module inquire corresponding second IP address of the second domain name to dns server.
The second enquiry module in WAP gateway sends to dns server the second domain name, dns server inquire this
Corresponding second IP address of two domain names, and second IP address is fed back into WAP gateway.
Step 108, the second judge module judge whether the first IP address is identical with the second IP address.
Wherein, if the second judge module judges that the first IP address is identical with the second IP address, the inspection in WAP gateway
Survey module and detect that the corresponding flowing of access of mobile terminal is normal WAP flows；If the second judge module judges IP ground
When location is different from the second IP address, then the detection module detects that the corresponding flowing of access of mobile terminal is exception WAP flows.
Embodiment three
Fig. 3 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention three is provided, as shown in figure 3, in this reality
Applying the GGSN servers in example not only includes that the first receiver module, the first parsing module, the first enquiry module and first send mould
Block, also includes：First judge module, the WAP flow rate testing methods not only include 101~step 108 of above-mentioned steps, and in step
Also include step 102a and step 102b after S102, only step 102a and step 102b are described in detail below.
Step 102a, the first judge module judge whether the first domain name is free according to default free flow list of websites
The domain name of flow website.
Wherein, if the first judge module judges the domain name that the first domain name is free flow website, step is performed
103；If the first judge module judges the first domain name not for the domain name of free flow website, step 102b is performed.
Step 102b, the first sending module send to WAP gateway HTTP request.
In the present embodiment, when the first judge module judges the first domain name not for the domain name of free flow website, nothing
Need whether test access flow is abnormal WAP flows.Now, WAP gateway carries out URL parsings, DNS query, for mobile terminal
Corresponding website is accessed, detailed process is not be described in detail herein.
Example IV
Fig. 4 is a kind of structural representation of GGSN servers that the embodiment of the present invention four is provided, as shown in figure 4, the GGSN
Server is the GGSN servers 1 in the WAP flow quantity detecting systems that above-described embodiment one is provided, the inspection for carrying out WAP flows
Survey, the GGSN servers 1 include：First receiver module 11, the first parsing module 12, the first enquiry module 13 and first send mould
Block 14.
Wherein, the first receiver module 11 is used to receive the HTTP request of mobile terminal transmission.
First parsing module 12 is used for basis and receives the URL included in HTTP request to parse
Corresponding first domain name.
First enquiry module 13 is used to inquire corresponding first IP address of the first domain name to dns server 3.
First sending module 14 is used to send HTTP request and the first IP address to WAP gateway 2, for WAP gateway 2
Corresponding second domain name is parsed according to the URL included in HTTP request is received, and to DNS service
Device 3 inquires corresponding second IP address of the second domain name, and judges whether the first IP address is identical with the second IP address, wherein,
If WAP gateway 2 judges that the first IP address is identical with the second IP address, detect that the corresponding flowing of access of mobile terminal is
Normal WAP flows, if WAP gateway 2 judges that the first IP address is different from the second IP address, detect mobile terminal correspondence
Flowing of access be exception WAP flows.
Alternatively, the GGSN servers 1 also include：First judge module 15, the first judge module 15 is used in the first solution
After analysis module 12 parses corresponding first domain name, according to default free flow list of websites judge the first domain name whether be
The domain name of free flow website；If the first enquiry module 13 judges that the first domain name is free specifically for the first judge module 15
During the domain name of flow website, corresponding first IP address of the first domain name is inquired to dns server 3；First sending module 14 is also
If for the first judge module 15 judge the first domain name for free flow website domain name, by HTTP request send to
WAP gateway 2.
Alternatively, the GGSN servers 1 also include：Accounting module 16, the accounting module 16 is used for mobile terminal correspondence
Flowing of access carry out charging.
For the specific descriptions of the GGSN servers 1 in the present embodiment, reference can be made to corresponding contents in above-described embodiment one, this
Place repeats no more.
Embodiment five
Fig. 5 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention five is provided, as shown in figure 5, the WAP
Flow rate testing methods are based on GGSN servers, and the GGSN servers are using the GGSN servers in above-described embodiment four, WAP streams
Quantity measuring method includes：
Step 201, the first receiver module receive the HTTP request that mobile terminal sends.
Step 202, the first parsing module are according to receiving the URL included in HTTP request to parse
Go out corresponding first domain name.
Step 203, the first enquiry module inquire corresponding first IP address of the first domain name to dns server.
Step 204, the first sending module send to WAP gateway HTTP request and the first IP address, for WAP gateway root
Corresponding second domain name is parsed according to the URL included in HTTP request is received, and to DNS service
Device inquires corresponding second IP address of the second domain name, and judges whether the first IP address is identical with the second IP address.
Wherein, if WAP gateway judges that the first IP address is identical with the second IP address, mobile terminal correspondence is detected
Flowing of access be normal WAP flows, if WAP gateway judges that the first IP address is different from the second IP address, detect mould
Block detects that the corresponding flowing of access of mobile terminal is exception WAP flows.
For the description of 201~step 204 of above-mentioned steps, reference can be made to step 101~step 104 in above-described embodiment two
Corresponding description, here is omitted.
Embodiment six
Fig. 6 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention six is provided, as shown in fig. 6, in this reality
Applying the GGSN servers in example not only includes that the first receiver module, the first parsing module, the first enquiry module and first send mould
Block, also includes：First judge module, the WAP flow rate testing methods not only include 201~step 204 of above-mentioned steps, and in step
Also include step 202a and step 202b after S202, only step 202a and step 202b are described in detail below.
Step 202a, the first judge module judge whether the first domain name is free according to default free flow list of websites
The domain name of flow website.
Wherein, if the first judge module judges the domain name that the first domain name is free flow website, step is performed
203；If the first judge module judges the first domain name not for the domain name of free flow website, step 202b is performed.
Step 202b, the first sending module send to WAP gateway HTTP request.
In the present embodiment, when the first judge module judges the first domain name not for the domain name of free flow website, nothing
Need whether test access flow is abnormal WAP flows.Now, WAP gateway carries out URL parsings, DNS query, for mobile terminal
Corresponding website is accessed, detailed process is not be described in detail herein.
Embodiment seven
Fig. 7 is a kind of structural representation of WAP gateway that the embodiment of the present invention seven is provided, as shown in fig. 7, the WAP gateway
WAP gateway 2 in the WAP flow quantity detecting systems that above-described embodiment one is provided, the detection for carrying out WAP flows, the WAP gateway
2 include：Second receiver module 21, the second parsing module 22, the second enquiry module 23, the second judge module 24 and detection module
25。
Wherein, the second receiver module 21 is used to receive the HTTP request and the first IP address of the transmission of GGSN servers 1, first
IP address be GGSN servers 1 in the URL according to included in HTTP request parsing corresponding first domain
After name, the corresponding IP address of the first domain name inquired to dns server 3.
Second parsing module 22 is used for basis and receives the URL included in HTTP request to parse
Corresponding second domain name.
Second enquiry module 23 is used to inquire corresponding second IP address of the second domain name to dns server 3.
Second judge module 24 is used to judge whether the first IP address is identical with the second IP address.
If detection module 25 judges that the first IP address is identical with the second IP address for the second judge module 24, examine
The corresponding flowing of access of mobile terminal is measured for normal WAP flows；And if the second judge module 24 judges the first IP address
When different from the second IP address, then detect that the corresponding flowing of access of mobile terminal is exception WAP flows.
For the specific descriptions of the WAP gateway 2 in the present embodiment, reference can be made to corresponding contents in above-described embodiment one, herein
Repeat no more.
Embodiment eight
Fig. 8 is a kind of flow chart of WAP flow rate testing methods that the embodiment of the present invention eight is provided, as shown in figure 8, the WAP
Flow rate testing methods are based on WAP gateway, and the WAP gateway is using the WAP gateway in above-described embodiment seven, the WAP flow detection sides
Method includes：
Step 301, the second receiver module receive the HTTP request and the first IP address that GGSN servers send.
Wherein, the first IP address be GGSN servers in the URL according to included in HTTP request solving
After separating out corresponding first domain name, the corresponding IP address of the first domain name inquired to dns server.
Step 302, the second parsing module are according to receiving the URL included in HTTP request to parse
Go out corresponding second domain name.
Step 303, the second enquiry module inquire corresponding second IP address of the second domain name to dns server.
Step 304, the second judge module judge whether the first IP address is identical with the second IP address.
Wherein, if the second judge module judges that the first IP address is identical with the second IP address, detection module detection
Go out the corresponding flowing of access of mobile terminal for normal WAP flows；If the second judge module judges the first IP address and the 2nd IP
When address is different, then detection module detects that the corresponding flowing of access of mobile terminal is exception WAP flows.
For the description of 301~step 304 of above-mentioned steps, reference can be made to step 105~step 108 in above-described embodiment two
Corresponding description, here is omitted.
It is understood that the embodiment of above principle being intended to be merely illustrative of the present and the exemplary implementation for using
Mode, but the invention is not limited in this.For those skilled in the art, essence of the invention is not being departed from
In the case of god and essence, various changes and modifications can be made therein, and these variations and modifications are also considered as protection scope of the present invention.
Claims (10)
1. a kind of WAP flow rate testing methods, it is characterised in that including：
Second receiver module receives the HTTP request and the first IP address that GGSN servers send, and first IP address is described
GGSN servers after the URL according to included in the HTTP request is to parse corresponding first domain name,
The corresponding IP address of first domain name inquired to dns server；
Second parsing module is according to receiving the URL included in the HTTP request to parse phase
The second domain name answered；
Second enquiry module inquires corresponding second IP address of second domain name to the dns server；
Second judge module judges whether first IP address is identical with second IP address；Wherein, if judging described
When first IP address is identical with second IP address, then detection module detects that the corresponding flowing of access of mobile terminal is normal
WAP flows；If judge that first IP address is different from second IP address, detection module detects the movement
The corresponding flowing of access of terminal is exception WAP flows.
2. a kind of WAP gateway, it is characterised in that including：
Second receiver module, HTTP request and the first IP address for receiving the transmission of GGSN servers, first IP address
For the GGSN servers in the URL according to included in the HTTP request parsing corresponding first
After domain name, the corresponding IP address of first domain name inquired to dns server；
Second parsing module, the URL included in the HTTP request is received to parse for basis
Go out corresponding second domain name；
Second enquiry module, for inquiring corresponding second IP address of second domain name to the dns server；
Whether the second judge module is identical with second IP address for judging first IP address；
Detection module, if judging that first IP address is identical with second IP address for second judge module
When, then detect the corresponding flowing of access of mobile terminal for normal WAP flows, and if second judge module judge institute
State the first IP address it is different from second IP address when, then detect the corresponding flowing of access of the mobile terminal for abnormal
WAP flows.
3. a kind of WAP flow rate testing methods, it is characterised in that including：
First receiver module receives the HTTP request that mobile terminal sends；
First parsing module is according to receiving the URL included in the HTTP request to parse phase
The first domain name answered；
First enquiry module inquires corresponding first IP address of first domain name to dns server；
First sending module sends to the WAP gateway HTTP request and first IP address, for the WAP nets
Close basis and receive the URL included in the HTTP request to parse corresponding second domain name, with
And corresponding second IP address of second domain name is inquired to the dns server, and judge first IP address and institute
Whether identical state the second IP address, wherein, if judge that first IP address is identical with second IP address, detect
Go out the corresponding flowing of access of the mobile terminal for normal WAP flows, if judging first IP address with the 2nd IP
When address is different, then detect that the corresponding flowing of access of the mobile terminal is exception WAP flows.
4. WAP flow rate testing methods according to claim 3, it is characterised in that first parsing module is according to reception
To the URL included in the HTTP request to parse corresponding first domain name the step of after also
Including：
First judge module judges whether first domain name is free flow website according to default free flow list of websites
Domain name；
If first judge module judges the domain name that first domain name is free flow website, described first is performed
The step of enquiry module inquires first domain name corresponding first IP address to dns server；
If first judge module judges first domain name not for the domain name of free flow website, perform first and send out
The step of sending module to send to the WAP gateway HTTP request.
5. a kind of GGSN servers, it is characterised in that including：
First receiver module, the HTTP request for receiving mobile terminal transmission；
First parsing module, the URL included in the HTTP request is received to parse for basis
Go out corresponding first domain name；
First enquiry module, for inquiring corresponding first IP address of first domain name to dns server；
First sending module, for the HTTP request and first IP address to be sent to the WAP gateway, for described
WAP gateway is according to receiving the URL included in the HTTP request to parse corresponding second domain
Name, and corresponding second IP address of second domain name is inquired to the dns server, and judge first IP address
It is whether identical with second IP address, wherein, if judge that first IP address is identical with second IP address,
The corresponding flowing of access of the mobile terminal is detected for normal WAP flows, if judging first IP address with described the
When two IP address are different, then detect that the corresponding flowing of access of the mobile terminal is exception WAP flows.
6. GGSN servers according to claim 5, it is characterised in that also include：
First judge module, after parsing corresponding first domain name in first parsing module, exempts from according to default
Expense flow list of websites judge first domain name whether be free flow website domain name；
If first enquiry module judges that first domain name is free flow network specifically for first judge module
During the domain name stood, corresponding first IP address of first domain name is inquired to dns server；
If first sending module is additionally operable to first judge module judges that first domain name is not free flow network
During the domain name stood, the HTTP request is sent to the WAP gateway.
7. a kind of WAP flow rate testing methods, it is characterised in that the detection method of the WAP flow rate testing methods is based on WAP flows
Detecting system, the WAP flow quantity detecting systems include：GGSN servers and WAP gateway, the GGSN servers include：First
Receiver module, the first parsing module, the first enquiry module and the first sending module, the WAP gateway include：Second receives mould
Block, the first parsing module, the first enquiry module, the second judge module and detection module, the WAP flow rate testing methods include：
First receiver module receives the HTTP request that mobile terminal sends；
First parsing module is according to receiving the URL included in the HTTP request to parse phase
The first domain name answered；
First enquiry module inquires corresponding first IP address of first domain name to dns server；
First sending module sends to the WAP gateway HTTP request and first IP address；
Second receiver module receives the HTTP request and the first IP address that GGSN servers send；
Second parsing module is according to receiving the URL included in the HTTP request to parse phase
The second domain name answered；
Second enquiry module inquires corresponding second IP address of second domain name to the dns server；
Second judge module judges whether first IP address is identical with second IP address；Wherein, if judging described
When first IP address is identical with second IP address, then detection module detects that the corresponding flowing of access of mobile terminal is normal
WAP flows；If judge that first IP address is different from second IP address, detection module detects the movement
The corresponding flowing of access of terminal is exception WAP flows.
8. WAP flow rate testing methods according to claim 7, it is characterised in that the GGSN servers also include：First
Judge module；
First parsing module is according to receiving the URL included in the HTTP request to parse
Also include after the step of going out corresponding first domain name：
First judge module judges whether first domain name is free flow according to default free flow list of websites
The domain name of website；
If first judge module judges the domain name that first domain name is free flow website, described first is performed
The step of enquiry module inquires first domain name corresponding first IP address to dns server；
If first judge module judges first domain name not for the domain name of free flow website, perform first and send out
The step of sending module to send to the WAP gateway HTTP request.
9. a kind of WAP flow quantity detecting systems, it is characterised in that including：GGSN servers and WAP gateway；
Wherein, the GGSN servers include：
First receiver module, the HTTP request for receiving mobile terminal transmission；
First parsing module, the URL included in the HTTP request is received to parse for basis
Go out corresponding first domain name；
First enquiry module, for inquiring corresponding first IP address of first domain name to dns server；
First sending module, for the HTTP request and first IP address to be sent to the WAP gateway；
The WAP gateway includes：
Second receiver module, HTTP request and the first IP address for receiving the transmission of GGSN servers；
Second parsing module, the URL included in the HTTP request is received to parse for basis
Go out corresponding second domain name；
Second enquiry module, for inquiring corresponding second IP address of second domain name to the dns server；
Whether the second judge module is identical with second IP address for judging first IP address；
Detection module, if judging that first IP address is identical with second IP address for second judge module
When, then detect the corresponding flowing of access of mobile terminal for normal WAP flows, and if second judge module judge institute
State the first IP address it is different from second IP address when, then detect the corresponding flowing of access of the mobile terminal for abnormal
WAP flows.
10. WAP flow quantity detecting systems according to claim 9, it is characterised in that the GGSN servers also include：
First judge module, after parsing corresponding first domain name in first parsing module, exempts from according to default
Expense flow list of websites judge first domain name whether be free flow website domain name；
If first enquiry module judges that first domain name is free flow network specifically for first judge module
During the domain name stood, corresponding first IP address of first domain name is inquired to dns server；
If first sending module is additionally operable to first judge module judges that first domain name is not free flow network
During the domain name stood, the HTTP request is sent to the WAP gateway.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710093531.3A CN106789124A (en) | 2017-02-21 | 2017-02-21 | WAP flow rate testing methods and its system, GGSN servers and WAP gateway |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710093531.3A CN106789124A (en) | 2017-02-21 | 2017-02-21 | WAP flow rate testing methods and its system, GGSN servers and WAP gateway |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106789124A true CN106789124A (en) | 2017-05-31 |
Family
ID=58957617
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710093531.3A Pending CN106789124A (en) | 2017-02-21 | 2017-02-21 | WAP flow rate testing methods and its system, GGSN servers and WAP gateway |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106789124A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108347443A (en) * | 2018-02-11 | 2018-07-31 | 中国联合网络通信集团有限公司 | Malice exempts from the discovery method and system of traffic server |
| CN108846096A (en) * | 2018-06-15 | 2018-11-20 | 中国联合网络通信集团有限公司 | Reminding method, terminal, gateway and the customer edge of webpage |
| CN107809752B (en) * | 2017-10-16 | 2020-08-21 | 南京网元通信技术有限公司 | Mobile network flow fraud verification method based on software simulation |
| CN111770159A (en) * | 2020-06-26 | 2020-10-13 | 中信银行股份有限公司 | Service discovery system, method, first server and storage medium |
| CN116016284A (en) * | 2022-12-09 | 2023-04-25 | 中国联合网络通信集团有限公司 | Data analysis method, device, electronic equipment and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050090230A1 (en) * | 2003-10-28 | 2005-04-28 | Sheng-Hsuan Liao | Mobile network content based charging and access control system |
| CN103404182A (en) * | 2012-12-26 | 2013-11-20 | 华为技术有限公司 | Method and apparatus for preventing illegal access of business |
| CN105208598A (en) * | 2015-08-18 | 2015-12-30 | 中国联合网络通信集团有限公司 | Network access method and apparatus |
-
2017
- 2017-02-21 CN CN201710093531.3A patent/CN106789124A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050090230A1 (en) * | 2003-10-28 | 2005-04-28 | Sheng-Hsuan Liao | Mobile network content based charging and access control system |
| CN103404182A (en) * | 2012-12-26 | 2013-11-20 | 华为技术有限公司 | Method and apparatus for preventing illegal access of business |
| CN105208598A (en) * | 2015-08-18 | 2015-12-30 | 中国联合网络通信集团有限公司 | Network access method and apparatus |
Non-Patent Citations (1)
| Title |
|---|
| 黄焕成等: "WAP业务多Host漏洞的原因及解决方案", 《电信技术》 * |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107809752B (en) * | 2017-10-16 | 2020-08-21 | 南京网元通信技术有限公司 | Mobile network flow fraud verification method based on software simulation |
| CN108347443A (en) * | 2018-02-11 | 2018-07-31 | 中国联合网络通信集团有限公司 | Malice exempts from the discovery method and system of traffic server |
| CN108347443B (en) * | 2018-02-11 | 2021-02-02 | 中国联合网络通信集团有限公司 | Method and system for discovering malicious traffic-free server |
| CN108846096A (en) * | 2018-06-15 | 2018-11-20 | 中国联合网络通信集团有限公司 | Reminding method, terminal, gateway and the customer edge of webpage |
| CN111770159A (en) * | 2020-06-26 | 2020-10-13 | 中信银行股份有限公司 | Service discovery system, method, first server and storage medium |
| CN111770159B (en) * | 2020-06-26 | 2023-08-22 | 中信银行股份有限公司 | Service discovery system, method, first server and storage medium |
| CN116016284A (en) * | 2022-12-09 | 2023-04-25 | 中国联合网络通信集团有限公司 | Data analysis method, device, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106789124A (en) | WAP flow rate testing methods and its system, GGSN servers and WAP gateway | |
| CN108702397B (en) | Method and system for acquiring and collecting local DNS (Domain name Server) server of client | |
| CN102884764B (en) | Message receiving method, deep packet inspection device, and system | |
| US8688074B2 (en) | Service classification of web traffic | |
| KR101769222B1 (en) | Method and device for preventing service illegal access | |
| CN103269479B (en) | A kind of call bill processing method, device and system | |
| EP2627032B1 (en) | Method, policy server and gateway for determining policies | |
| JP5947403B2 (en) | Method and apparatus for performing billing control on application layer data | |
| US9197714B2 (en) | User interest and identity control on internet | |
| CN103780714B (en) | The detection method of a kind of dns server and device | |
| JP5989134B2 (en) | Method and apparatus for performing billing control for sponsored data applications | |
| CN105516165A (en) | Method, device and system for identifying illegal proxy for charging fraud | |
| CN101981572A (en) | Request routing | |
| CN111294798B (en) | Data interaction method, device, terminal equipment and medium | |
| CN107135236A (en) | A kind of detection method and system of target Domain Hijacking | |
| CN107636722B (en) | Management method and management server for utilizing multiple SIM cards | |
| CN101662464A (en) | System for realizing HTTP request service and method thereof | |
| CN103167044A (en) | Intelligent analysis method of domain name system (DNS) and poking measurement device and system | |
| CN109039775A (en) | Quality of service monitoring method, apparatus and system | |
| CN104836812A (en) | Portal authentication method, device and system | |
| CN114124452B (en) | Terminal authentication method, related equipment and authentication system | |
| EP2387845A1 (en) | System and method for providing identity correlation for an over the top service in a telecommunications network | |
| CN109309907B (en) | Method and device for charging flow and related equipment | |
| CN102142925B (en) | Method, equipment and system for filtering deep packet inspection | |
| CN106506675A (en) | A kind of page reorientation method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170531 |