CN102083089A - Access business monitoring method, system and apparatus thereof - Google Patents

Access business monitoring method, system and apparatus thereof Download PDF

Info

Publication number
CN102083089A
CN102083089A CN2009102242004A CN200910224200A CN102083089A CN 102083089 A CN102083089 A CN 102083089A CN 2009102242004 A CN2009102242004 A CN 2009102242004A CN 200910224200 A CN200910224200 A CN 200910224200A CN 102083089 A CN102083089 A CN 102083089A
Authority
CN
China
Prior art keywords
access service
user side
identification information
information
visit
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2009102242004A
Other languages
Chinese (zh)
Inventor
赵建福
崔可升
范鹏翔
曹璐
李世冲
朱祥磊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Group Shandong Co Ltd
Original Assignee
China Mobile Group Shandong Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Group Shandong Co Ltd filed Critical China Mobile Group Shandong Co Ltd
Priority to CN2009102242004A priority Critical patent/CN102083089A/en
Publication of CN102083089A publication Critical patent/CN102083089A/en
Pending legal-status Critical Current

Links

Images

Abstract

The present invention discloses a monitoring method for access business, a system and an apparatus thereof, in order to solve the problem in the prior art that low real-time property influences the performance of a mobile communication system in the process of the access to external systems. Based on the corresponding relation between user side identification information carried in access information and access business identification information as well as on preserved information, the monitoring method and apparatus determine whether the user side can execute the access business. Depending on the determination result, operations of the user side execution of the access business are controlled. In the embodiment of the invention, the monitor on the feasibility of a user side executing operation of the access business is implemented and the user side executing operation of the access business based on the monitoring result is controlled when the monitoring device obtains the access information, so the real time property of monitoring on the access business of the external system is enhanced, thereby improving the performance of the mobile communication system.

Description

A kind of access service method for supervising, system and device
Technical field
The present invention relates to the business support technical field, relate in particular to a kind of business monitoring method, system and device.
Background technology
Because developing rapidly of mobile communication technology, mobile communication business has obtained swift and violent development, therefore system's (for example banking system) of mobile communication system outside is more and more higher to the attention rate of mobile communication business, the system of mobile communication system outside wishes the log information by the visit mobile communication system, understand the user side information in the mobile communication, set up business relations with the respective user end.Thereby mobile communication system opened up the interface of a lot of connection external systems, and external system can be obtained its required user side information by the interface accessing mobile communication system of opening up.
The interface quantity of opening up when mobile communication system increases, and when external system increases the visit capacity of mobile communication system, the difficulty of the security audit of external system is also increased accordingly.Security audit work is generally carried out the fail safe of mobile communication system access service at external system in the prior art, after access service finishes the potential safety hazard of this access service is audited.
And after access service finishes, audit, determine whether this access service exists the execution mode of potential safety hazard, because its real-time is relatively poor, can't the access service of external system be monitored in real time, therefore influenced the performance of mobile communication system.
Summary of the invention
In view of this, the embodiment of the invention provides a kind of access service method for supervising, system and device, and in order to solve in the access process of prior art to external system, real-time is not high, influences the problem of performance of mobile communication system.
A kind of access service method for supervising that the embodiment of the invention provides comprises:
Supervising device receives visit information;
Described supervising device is the identification information of the user side of the described visit information of transmission that carries in the described visit information and the corresponding relation of access service identification information, mates with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information;
According to the result of coupling, control the described access service of described user side.
A kind of access service supervisory control system that the embodiment of the invention provides comprises:
User side is used for sending visit information to supervising device, comprises the identification information and the access service identification information of described user side in the wherein said visit information;
Supervising device, be used to receive described visit information, corresponding relation with the identification information of the identification information of described user side and access service, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information, according to the result of coupling, control the described access service of described user side.
A kind of access service supervising device that the embodiment of the invention provides comprises:
Receiver module is used to receive visit information, wherein, carries the identification information and the access service identification information of the user side that sends described visit in the described visit information;
Matching module, be used for the identification information of user side of the described visit information of transmission that will carry and the corresponding relation of access service identification information, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information;
Control module is used for the result according to coupling, controls the described access service of described user side.
The embodiment of the invention provides a kind of access service method for supervising, system and device, this method comprises: supervising device is according to the corresponding relation of user side identification information that carries in the visit information and access service identification information and the information of preservation, judge whether described user side can carry out described access service, according to the result who judges, user side being carried out the operation of this access service controls, because in embodiments of the present invention when supervising device has obtained visit information, the operation whether enforcement can carry out this access service to user side is monitored, result according to monitoring controls the operation of user side execution access service, therefore this execution mode has improved the real-time to the monitoring of external system access service, thereby improves the performance of mobile communication system.
Description of drawings
The implementation process of the business monitoring that conducts interviews that Fig. 1 provides for the embodiment of the invention;
The specific implementation process of the business monitoring that conducts interviews that Fig. 2 provides for the embodiment of the invention;
Another specific implementation process of the business monitoring that conducts interviews that Fig. 3 provides for the embodiment of the invention;
The structural representation of a kind of access service supervisory control system that Fig. 4 provides for the embodiment of the invention;
The structural representation of a kind of access service supervising device that Fig. 5 provides for the embodiment of the invention.
Embodiment
The embodiment of the invention is during for the visit mobile communication system of system externally, raising is to the real-time of external system access service monitoring, thereby improve the performance of mobile communication system, a kind of access service method for supervising is provided, this method comprises: supervising device is according to the corresponding relation of user side identification information that carries in the visit information and access service identification information, and the identification information of the user side in the illegal identification information group of preserving and the corresponding relation of access service identification information, judge whether described user side can carry out described access service, according to the result who judges, user side being carried out the operation of this access service controls, because in embodiments of the present invention when supervising device has obtained visit information, the operation that whether can carry out this access service to user side is in real time monitored, result according to monitoring controls the operation of user side execution access service, therefore this execution mode has improved the real-time to the monitoring of external system access service, thereby improves the performance of mobile communication system.
Below in conjunction with Figure of description, the embodiment of the invention is elaborated.
In embodiments of the present invention, user side comprises the access service of mobile communication business: user side to the inquiry of mobile communication user information, user side to the paying the fees of mobile communication subscriber, operation and associative operations thereof such as rollback that user side is paid the fees to mobile communication subscriber.And there is unique sign in each user side, every kind of business, and for example also all there are unique sign in inquiry business, fee payment service, the rollback business of paying the fees etc.
The implementation process of the business monitoring that conducts interviews that Fig. 1 provides for the embodiment of the invention, this process may further comprise the steps:
S101: supervising device receives the visit information that user side sends, and wherein, carries the identification information of user side in this visit information, and the access service identification information.
The identification information of user side itself can be the job number identification information of user side, or the IP address information of user side.Wherein can also comprise in the identification information of this user side: the identification information of this external system and user's identification information itself.
S102: supervising device is the identification information of the user side that carries in the visit information and the corresponding relation of access service identification information, mates with the expression information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information.
Can also comprise in this visit information: user totem information, this user totem information can be the identification information of the subscriber card in user's the portable terminal.
Whether above-mentioned matching process also comprises: judge the corresponding relation of described user totem information and access service identification information, mate with the user totem information in the illegal identified group of preserving and the corresponding relation of access service identification information.
S103: according to the result of coupling, this access service of control user side.
The process of this access service of concrete control transmitting terminal comprises: when the identification information of the described user side that carries and the corresponding relation of access service identification information, when mating with the corresponding relation of the identification information of user side described in the illegal identification information group of preserving and access service identification information, described supervising device forbids that described user side carries out described access service; When the identification information of the described user side that carries and the corresponding relation of access service identification information, when not matching with the corresponding relation of the identification information of user side described in the illegal identification information group of preserving and access service identification information, described supervising device is controlled described user side and is carried out described access service.
Preserve the identification information of illegal user side and the corresponding relation of access service identification information in the supervising device of the embodiment of the invention, the process of wherein obtaining the corresponding relation of the identification information of this illegal user side and access service identification information can comprise:
Supervising device is according to the time interval of setting, and the log information of mobile communication system record, gather the information of every kind of access service of interior each user side visit of the time interval of this setting, at each user side, judge in the time interval of this setting, the number of times of every kind of business of each user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold, this user side is visited the number of times of a certain access service in the time interval of this setting, or the ratio between the number of times of per two kinds of access service of visiting is when surpassing corresponding first threshold, and supervising device is preserved the corresponding relation of this user side identification information and access service identification information;
Perhaps, supervising device also can be when receiving the visit information of user side transmission in embodiments of the present invention, according to the time that receives this user side visit information, and the log information of mobile communication system record, this user side is visited the number of times of this access service in the statistics setting-up time length, or visit ratio between described access service and other access service number of times, judge that this user side in this setting-up time length visits the number of times of this access service, or whether the ratio of visiting between described access service and other access service number of times surpasses corresponding first threshold, this user side is visited the number of times of this access service in this setting-up time length, or the ratio between described access service and other access service number of times of visiting is when surpassing corresponding first threshold, and supervising device is preserved the corresponding relation of this user side identification information and this access service identification information.
The ratio of visiting in embodiments of the present invention between described access service and other access service number of times comprises: to the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber; Or, to the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber.
In embodiments of the present invention, in order to increase the fault-tolerant ability of this supervising device, improve the monitoring capacity of this supervising device to user side access business, the credit value of every kind of access service of each user side visit can also be set, judge a certain user side when supervising device and visit the number of times of certain access service, or the ratio between described access service and other access service number of times of visiting is when surpassing corresponding first threshold, can directly in illegal identification information group, not add the identification information of this user side and the corresponding relation of this access service identification information, supervising device can lower the credit value that described user side is visited certain access service, and whether this credit value after the judgement reduction is less than second threshold value that is provided with, credit value after this reduces is just preserved the identification information of this user terminal and the corresponding relation of access service identification information during less than second threshold value that is provided with.
Because this user side can be arbitrary PC (the Personal Computer in the banking system in embodiments of the present invention, PC) clients entities, also can be for comprising the banking system of at least two pc client entities, when this user side is clients entities, supervising device can be monitored the process of each access business of this client-access, determine whether this client can visit this access service, for example supervising device can be monitored the query manipulation of a certain client to mobile communication user information, or a certain client is to the operation of paying the fees of mobile communication subscriber, when this user side is when comprising the banking system of at least two clients entities, supervising device can be monitored the process of this banking system by every kind of access service of every client-access, with the process of banking system by every a certain access service of client-access, visit the process of described access service as described banking system, thereby determine whether this banking system can visit this access service, for example monitor in the banking system query manipulation of every client to mobile communication user information, with every client to the number of times of the query manipulation of mobile communication user information and, as the number of times of this banking system to the query manipulation of mobile communication user information.
Supervising device also can be monitored the process of user capture access service in the embodiment of the invention.For example the process of himself information of user inquiring is monitored, and the process that the user pays the fees to himself is monitored etc., owing to comprise user totem information in the visit information that supervising device receives, when supervising device receives this visit information, according to the user totem information that comprises in this visit information, and the access service identification information of visit, judge the corresponding relation of user totem information and access service identification information, whether mate with the user totem information in the illegal identification information group of preserving and the corresponding relation of access service identification information, when coupling, forbid carrying out this user's described access service, when not matching, control this user and carry out described access service.
The supervising device that the embodiment of the invention provides can supervisory user end access business process, the number of times of the inquiry mobile communication user information in setting-up time length that for example can the supervisory user end, can in setting-up time length, inquire about the number of times of mobile communication user information and the number of times ratio that mobile communication subscriber is paid the fees by the supervisory user end, the number of times of can also the supervisory user end in setting-up time mobile communication subscriber being paid the fees and the number of times of void compare or the like, with the number of times that obtains or number of times than comparing with corresponding first threshold, thereby realize monitoring to user side access business procedure.This supervising device can also be according to the access characteristic of user side in the different time sections simultaneously, determines corresponding first threshold, and for example the first threshold that is provided with in the operating time (daytime) is bigger, on one's own time (night) with this first threshold be provided with less or the like.By supervising device the process of user side access business is monitored, determined the illegal operation of user side in real time, and forbid the illegal operation of this user side, thereby improve the performance of mobile communication system.
With the inquiry to mobile communication user information in the supervising device supervisory user end setting-up time length is that example describes, and Fig. 2 is the conduct interviews specific implementation process of business monitoring of the embodiment of the invention, and this process may further comprise the steps:
S201: when access is professional, user side sends visit information to supervising device, the identification information that wherein comprises this user side in this visit information, and the identification information of the access service of visit, the identification information of this access service is the identification information of inquiry mobile communication user information in this embodiment.
S202: supervising device receives this visit information, the number of times of this user side inquiry mobile communication user information in the statistics setting-up time length.
S203: supervising device judges whether the number of times of this user side inquiry mobile communication user information in the setting-up time length count on surpasses the first threshold of setting, when judged result when being, carry out step S204, otherwise, carry out step S207.
S204: supervising device lowers the credit worthiness of this user side inquiry mobile communication user information.
S205: whether the credit worthiness after judge reducing less than second threshold value of setting, when judged result when being, carry out step S206, otherwise, carry out step S207.
Can corresponding credit worthiness value be set every kind of access service of corresponding each user side visit in embodiments of the present invention, each the credit worthiness value that is provided with can be the same or different, second threshold value that is provided with at every kind of access service of each user side visit can be identical equally, also can be different, can set flexibly as required.
S206: supervising device is forbidden this user side inquiry mobile communication user information, and adds the identification information of this user side and the corresponding relation of inquiry business identification information in the illegal identification information group of preserving.
S207: supervising device is controlled this user side inquiry mobile communication user information.
Above-mentioned implementation process is that example describes with supervising device supervisory user end inquiry mobile communication user information, when user side is visited other access service, its implementation process and said process are similar, and in this implementation process, when supervising device receives the visit information of user side, with the time that receives this visit information be time point, adding up this time point is starting point, the number of times of this user side inquiry mobile communication user information in the setting-up time length, result according to statistics judges, controls the process of this user side inquiry mobile communication user information.
Simultaneously in above-mentioned implementation process, also can be in step S203, when the number of times of this user side inquiry mobile communication user information in the setting-up time length surpasses the first threshold of setting, supervising device is forbidden this user side inquiry mobile communication user information, and in the illegal identification information group of preserving, add the identification information of this user side and the corresponding relation of inquiry business identification information, otherwise, supervising device is controlled this user side inquiry mobile communication user information, be that supervising device can be controlled the process of this user side inquiry mobile communication user information directly according to the judged result of step S203.
Because user side is to the visit of mobile communication business, the capital is recorded in the log information in the mobile communication system, comprises in the log information of mobile communication system record: information such as the identification information of the access service of the identification information of external system, the identification information of user terminal, visit and access time information.Supervising device in embodiments of the present invention, also can regularly add up the number of times of each user side statistics information of mobile user according to the time interval of setting, and determine whether in illegal identification information group, to preserve the user side identification information and inquire about the corresponding relation that identifies, Fig. 3 is for being that example is elaborated to the process of monitoring access service in the embodiment of the invention with this process, and this process may further comprise the steps:
S301: when access is professional, user side sends visit information to supervising device, the identification information that wherein comprises this user side in this visit information, and the identification information of the access service of visit, this access service is the identification information of inquiry mobile communication user information in this embodiment.
S302: supervising device receives this visit information, according to the information in disabled user's identification information group of preserving, determine the user side identification information in this visit information and the corresponding relation of inquiry business identification information, whether with the illegal identification information group of preserving in user side sign and inquiry business sign corresponding relation be complementary, when coupling, carry out step S303, otherwise, carry out step S304.
S303: supervising device is forbidden this user side inquiry mobile communication user information.
S304: supervising device is controlled this user side inquiry mobile communication user information.
The foregoing description is when obtaining illegal identification information group information, supervising device is according to the time interval of setting, when satisfying the condition in the time interval, supervising device is according to the log information of preserving, add up each user side and visit the information of each access service, for example add up the information of each user side inquiry mobile communication user information, the information such as rollback information that each user side is paid the fees to mobile communication subscriber, and judge the number of times of every kind of access service of each user side visit, or whether the ratio between every kind of access service of each user side visit and other access service number of times is above corresponding first threshold, visit the number of times of a certain access service when a certain user side, or the ratio between every kind of access service of each user side visit and other access service number of times is during above corresponding first threshold, in the illegal identification information group of preserving, add the corresponding relation of this user side sign and access service sign, so that when next moment, this user side was visited this access service, forbid this accessing operation of this user side.Perhaps in order to increase the fault-tolerant ability of supervising device, further improve the monitoring capacity of supervising device, also can visit the number of times of a certain access service at a certain user side of judgement, or this user side ratio between described access service and other access service number of times of visiting surpass to set first threshold the time, reduce this user side and visit the credit worthiness of this access service, whether the credit worthiness after judgement reduces is less than second threshold value of setting, credit worthiness after judge reducing is during less than second threshold value set, in the illegal identification information group of preserving, add the corresponding relation of this user side sign and access service sign, so that when next moment, this user side was visited this access service, forbid this accessing operation of this user side.
Same this supervising device also can carry out according to above-mentioned implementation process when the access service of supervisory user, does not here just give unnecessary details one by one, believes that those skilled in the art can determine concrete monitor procedure according to the description of the embodiment of the invention.
A kind of access service supervisory control system that Fig. 4 provides for the embodiment of the invention, this system comprises:
User side 41 is used for sending visit information to supervising device, comprises the identification information and the access service identification information of described user side in the wherein said visit information;
Supervising device 42, be used to receive described visit information, corresponding relation with the identification information of the identification information of described user side and access service, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information, according to the result of coupling, control the described access service of described user side.
In this supervisory control system, specifically comprise when the identification information of supervising device 42 user side in preserving illegal identification information group and the corresponding relation of access service identification information:
According to the time interval of setting, and the log information of mobile communication system record, add up the information of every kind of access service of each user side visit, at each user side, judge the number of times of every kind of access service of described user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold, when the number of times of described user side access business or the ratio between the number of times of per two kinds of access service of visiting surpass corresponding first threshold, preserve the corresponding relation of described user side identification information and described access service identification information.
Specifically comprise when the identification information of described supervising device 42 user side in preserving illegal identification information group and the corresponding relation of access service identification information:
Log information according to the mobile communication system record, add up described user side and visit the information of described access service, judge that described user side is in the time span of setting, visit the number of times of described access service, or whether the ratio of visiting between described access service and other access service number of times surpasses corresponding first threshold, visit the number of times of described access service when described user side, or the ratio between described access service and other access service number of times of visiting is preserved the corresponding relation of described user side identification information and described access service identification information when surpassing corresponding first threshold.
Described user side 41 comprises:
Banking system, or the arbitrary client in the banking system.
Ratio in the described supervising device 42 between the described access service of visit and other access service number of times comprises:
To the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber; Or,
To the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber.
Described supervising device 42 specifically comprises when preserving the corresponding relation of described user side identification information and described access service identification information:
Reduce described user side and visit the credit value of described access service, whether the credit value after judgement reduces is less than second threshold value that is provided with, when the credit value after the described reduction during, preserve the corresponding relation of described user side identification information and described access service identification information less than described second threshold value that is provided with.
A kind of access service supervising device that Fig. 5 provides for the embodiment of the invention, this device comprises:
Receiver module 51 is used to receive visit information, wherein, carries the identification information and the access service identification information of the user side that sends described visit in the described visit information;
Matching module 52, be used for the identification information of user side of the described visit of transmission that will carry and the corresponding relation of access service identification information, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information;
Control module 53 is used for the result according to coupling, controls the described access service of described user side.
Described control module 53 comprises:
First control unit 531, be used at the identification information of the described user side of determining to carry and the corresponding relation of access service identification information, when mating, forbid that described user side carries out described access service with the corresponding relation of the identification information of user side described in the illegal identification information group of preserving and access service identification information;
Second control unit 532, be used at the identification information of the described user side of determining to carry and the corresponding relation of access service identification information, when not matching, control described user side and carry out described access service with the corresponding relation of the identification information of user side described in the illegal identification information group of preserving and access service identification information.
Described matching module 52 comprises:
Memory cell 521 is used for preserving the identification information of illegal identification information group user side and the corresponding relation of access service identification information;
Matching unit 522 is used for mating with the identification information of the user side of storing in the described memory cell and the corresponding relation of access service identification information sending the identification information and the access service identification information corresponding relation of the user side of described visit information.
Described memory cell 521 comprises:
Gather subelement 5211, be used for according to the time interval of setting, and the log information of mobile communication system record, the information that each user side is visited every kind of access service gathered;
Judgment sub-unit 5212 is used to judge the number of times of every kind of access service of described each user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold;
Storing sub-units 5213 is used for the number of times when user side access business, or the ratio between the number of times of per two kinds of access service of visiting is preserved the corresponding relation of described user side identification information and described access service identification information when surpassing corresponding first threshold.
Described storing sub-units 5213 specifically is used for,
Reduce described user side and visit the credit value of described access service, whether the credit value after judgement reduces is less than second threshold value that is provided with, when the credit value after the described reduction during, preserve the corresponding relation of described user side identification information and described access service identification information less than described second threshold value that is provided with.
When also comprising user totem information in the described visit information, described matching module 52 also is used for,
Judge the corresponding relation of described user totem information and access service identification information, whether mate with the user totem information in the illegal identified group of preserving and the corresponding relation of access identities information.
Described control module 53 also is used for,
When determining described matching module output match information, forbid that user side carries out the described access service of described user, when determining that described matching module output does not match information, control the described access service that described user side is carried out described user.
When described user side is a banking system, or described user side is when being arbitrary client in the banking system, and the ratio that the described user side of judging in the described judgment sub-unit 5212 is visited between the number of times of per two kinds of access service comprises:
To the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber; Or,
To the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber.
The embodiment of the invention provides a kind of access service method for supervising, system and device, this method comprises: supervising device is according to the corresponding relation of user side identification information that carries in the visit information and access service identification information and the information of preservation, judge whether described user side can carry out described access service, according to the result who judges, user side being carried out the operation of this access service controls, because in embodiments of the present invention when supervising device has obtained visit information, the operation whether enforcement can carry out this access service to user side is monitored, result according to monitoring controls the operation of user side execution access service, therefore this execution mode has improved the real-time to the monitoring of external system access service, thereby improves the performance of mobile communication system.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.

Claims (18)

1. an access service method for supervising is characterized in that, comprising:
Supervising device receives visit information;
Described supervising device is the identification information of the user side of the described visit information of transmission that carries in the described visit information and the corresponding relation of access service identification information, mates with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information;
According to the result of coupling, control the described access service of described user side.
2. the method for claim 1 is characterized in that, the identification information of user side and the corresponding relation of access service identification information comprise in the illegal identification information group of described preservation:
Described supervising device is according to the time interval of setting, and the log information of mobile communication system record, adds up the information of every kind of access service of each user side visit;
At each user side, judge the number of times of every kind of access service of described user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold;
When the number of times of described user side access business, or the ratio between the number of times of per two kinds of access service of visiting is preserved the corresponding relation of described user side identification information and described access service identification information when surpassing corresponding first threshold.
3. the method for claim 1 is characterized in that, the identification information of user side and the corresponding relation of access service identification information comprise in the illegal identification information group of described preservation:
According to the log information of mobile communication system record, described supervising device is added up the information that described user side is visited described access service;
Judge that described user side in the time span of setting, visits the number of times of described access service, or whether the ratio between described access service and other access service number of times of visiting is above corresponding first threshold;
When described user side visit the number of times of described access service or visit described access service and other access service number of times between ratio when surpassing corresponding first threshold, preserve the corresponding relation of described user side identification information and described access service identification information.
4. as claim 2 or 3 described methods, it is characterized in that described access service comprises:
To the inquiry of mobile communication user information, to the rollback of paying the fees and mobile communication subscriber being paid the fees of mobile communication subscriber.
5. method as claimed in claim 4 is characterized in that, the ratio between the described access service of described visit and other access service number of times comprises:
To the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber; Or,
To the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber.
6. as claim 2 or 3 described methods, it is characterized in that described user side comprises:
Banking system, or the arbitrary client in the banking system.
7. as claim 2 or 3 described methods, it is characterized in that the corresponding relation of preserving described user side identification information and described access service identification information comprises:
Reduce described user side and visit the credit value of described access service, whether the credit value after judgement reduces is less than second threshold value that is provided with;
When the credit value after the described reduction during, preserve the corresponding relation of described user side identification information and described access service identification information less than described second threshold value that is provided with.
8. an access service supervisory control system is characterized in that, described system comprises:
User side is used for sending visit information to supervising device, comprises the identification information and the access service identification information of described user side in the wherein said visit information;
Supervising device, be used to receive described visit information, corresponding relation with the identification information of the identification information of described user side and access service, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information, according to the result of coupling, control the described access service of described user side.
9. system as claimed in claim 8 is characterized in that, specifically comprises when the identification information of described supervising device user side in preserving illegal identification information group and the corresponding relation of access service identification information:
According to the time interval of setting, and the log information of mobile communication system record, add up the information of every kind of access service of each user side visit, at each user side, judge the number of times of every kind of access service of described user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold, when the number of times of described user side access business or the ratio between the number of times of per two kinds of access service of visiting surpass corresponding first threshold, preserve the corresponding relation of described user side identification information and described access service identification information.
10. system as claimed in claim 8 is characterized in that, specifically comprises when the identification information of described supervising device user side in preserving illegal identification information group and the corresponding relation of access service identification information:
Log information according to the mobile communication system record, add up described user side and visit the information of described access service, judge that described user side is in the time span of setting, visit the number of times of described access service, or whether the ratio of visiting between described access service and other access service number of times surpasses corresponding first threshold, visit the number of times of described access service when described user side, or the ratio between described access service and other access service number of times of visiting is preserved the corresponding relation of described user side identification information and described access service identification information when surpassing corresponding first threshold.
11., it is characterized in that described user side comprises as claim 9 or 10 described systems:
Banking system, or the arbitrary client in the banking system.
12., it is characterized in that the ratio in the described supervising device between the described access service of visit and other access service number of times comprises as claim 9 or 10 described systems:
To the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber; Or,
To the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber.
13., it is characterized in that described supervising device specifically comprises as claim 9 or 10 described systems when preserving the corresponding relation of described user side identification information and described access service identification information:
Reduce described user side and visit the credit value of described access service, whether the credit value after judgement reduces is less than second threshold value that is provided with, when the credit value after the described reduction during, preserve the corresponding relation of described user side identification information and described access service identification information less than described second threshold value that is provided with.
14. an access service supervising device is characterized in that, described device comprises:
Receiver module is used to receive visit information, wherein, carries the identification information and the access service identification information of the user side that sends described visit in the described visit information;
Matching module, be used for the identification information of user side of the described visit of transmission that will carry and the corresponding relation of access service identification information, mate with the identification information of user side in the illegal identification information group of preserving and the corresponding relation of access service identification information;
Control module is used for the result according to coupling, controls the described access service of described user side.
15. device as claimed in claim 14 is characterized in that, described matching module comprises:
Memory cell is used for preserving the identification information of illegal identification information group user side and the corresponding relation of access service identification information;
Matching unit is used for mating with the identification information of the user side of storing in the described memory cell and the corresponding relation of access service identification information sending the identification information of user side of described visit information and the corresponding relation of access service identification information.
16. device as claimed in claim 15 is characterized in that, described memory cell comprises:
Gather subelement, be used for according to the time interval of setting, and the log information of mobile communication system record, the information that each user side is visited every kind of access service gathered;
Judgment sub-unit is used to judge the number of times of every kind of access service of described each user side visit, or whether the ratio that described user side is visited between the number of times of per two kinds of access service surpasses corresponding first threshold;
Storing sub-units is used for the number of times when user side access business, or the ratio between the number of times of per two kinds of access service of visiting is preserved the corresponding relation of described user side identification information and described access service identification information when surpassing corresponding first threshold.
17. device as claimed in claim 16, it is characterized in that, described storing sub-units specifically is used for, reduce described user side and visit the credit value of described access service, whether the credit value after judgement reduces is less than second threshold value that is provided with, when the credit value after the described reduction during, preserve the corresponding relation of described user side identification information and described access service identification information less than described second threshold value that is provided with.
18. device as claimed in claim 16, it is characterized in that, when described user side is a banking system, or described user side is when being arbitrary client in the banking system, and the ratio that the described user side of judging in the described judgment sub-unit is visited between the number of times of per two kinds of access service comprises:
To the inquiry times of described mobile communication user information and to the ratio between the number of times of paying the fees of mobile communication subscriber; Or,
To the ratio between the rollback number of times of paying the fees number of times and mobile communication subscriber being paid the fees of described mobile communication subscriber.
CN2009102242004A 2009-11-27 2009-11-27 Access business monitoring method, system and apparatus thereof Pending CN102083089A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2009102242004A CN102083089A (en) 2009-11-27 2009-11-27 Access business monitoring method, system and apparatus thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2009102242004A CN102083089A (en) 2009-11-27 2009-11-27 Access business monitoring method, system and apparatus thereof

Publications (1)

Publication Number Publication Date
CN102083089A true CN102083089A (en) 2011-06-01

Family

ID=44088801

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2009102242004A Pending CN102083089A (en) 2009-11-27 2009-11-27 Access business monitoring method, system and apparatus thereof

Country Status (1)

Country Link
CN (1) CN102083089A (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103699417A (en) * 2013-12-27 2014-04-02 宇龙计算机通信科技(深圳)有限公司 Method and system for prompting users to switch seLinux mode intelligently
CN104869155A (en) * 2015-04-27 2015-08-26 腾讯科技(深圳)有限公司 Data auditing method and device
CN105282047A (en) * 2015-09-25 2016-01-27 小米科技有限责任公司 Access request processing method and device
CN105353641A (en) * 2015-12-16 2016-02-24 江苏嘉泽建设有限公司 Smart home control system
CN107426231A (en) * 2017-08-03 2017-12-01 北京奇安信科技有限公司 A kind of method and device for identifying user behavior
CN108200180A (en) * 2018-01-08 2018-06-22 武汉斗鱼网络科技有限公司 A kind of method, apparatus and computer equipment for being used to limit request frequency
CN109756528A (en) * 2017-11-01 2019-05-14 广州腾讯科技有限公司 Control method for frequency and device, equipment, storage medium, server

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101064604A (en) * 2006-04-29 2007-10-31 西门子公司 Remote access process, system and equipment
CN101453394A (en) * 2007-12-03 2009-06-10 华为技术有限公司 Method, system and equipment for access control

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101064604A (en) * 2006-04-29 2007-10-31 西门子公司 Remote access process, system and equipment
CN101453394A (en) * 2007-12-03 2009-06-10 华为技术有限公司 Method, system and equipment for access control

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103699417A (en) * 2013-12-27 2014-04-02 宇龙计算机通信科技(深圳)有限公司 Method and system for prompting users to switch seLinux mode intelligently
CN104869155A (en) * 2015-04-27 2015-08-26 腾讯科技(深圳)有限公司 Data auditing method and device
CN104869155B (en) * 2015-04-27 2018-09-18 腾讯科技(深圳)有限公司 Data Audit method and device
CN105282047A (en) * 2015-09-25 2016-01-27 小米科技有限责任公司 Access request processing method and device
CN105353641A (en) * 2015-12-16 2016-02-24 江苏嘉泽建设有限公司 Smart home control system
CN107426231A (en) * 2017-08-03 2017-12-01 北京奇安信科技有限公司 A kind of method and device for identifying user behavior
CN107426231B (en) * 2017-08-03 2020-05-01 奇安信科技集团股份有限公司 Method and device for identifying user behavior
CN109756528A (en) * 2017-11-01 2019-05-14 广州腾讯科技有限公司 Control method for frequency and device, equipment, storage medium, server
CN109756528B (en) * 2017-11-01 2022-03-11 广州腾讯科技有限公司 Frequency control method and device, equipment, storage medium and server
CN108200180A (en) * 2018-01-08 2018-06-22 武汉斗鱼网络科技有限公司 A kind of method, apparatus and computer equipment for being used to limit request frequency
CN108200180B (en) * 2018-01-08 2020-09-08 武汉斗鱼网络科技有限公司 Method and device for limiting request frequency and computer equipment

Similar Documents

Publication Publication Date Title
CN102083089A (en) Access business monitoring method, system and apparatus thereof
US8331904B2 (en) Apparatus and a security node for use in determining security attacks
CN104376274B (en) The guard method of mobile terminal payment interface and device
DE112015001416B4 (en) Detection of an unauthorized wireless communication device
CN101257678A (en) Method, terminal and system for realizing mobile terminal software safe detection
CN104486138A (en) Flow monitoring method and device and monitoring server
CN106156619A (en) Application safety means of defence and device
CN103368904A (en) Mobile terminal, and system and method for suspicious behavior detection and judgment
CA2272894A1 (en) Information security method and apparatus
JP5363305B2 (en) Method for determining the ID of an electronic device
CN101594248A (en) The remote assistance method of information security and system maintenance, system and server
CN111224846B (en) Flow monitoring method and device applied to power acquisition system
CN106096450A (en) A kind of application program freezing method and mobile terminal
CN110661863B (en) Request processing method and device, electronic equipment and storage medium
CN103391547A (en) Information processing method and terminal
CN105260660A (en) Monitoring method, device and system of intelligent terminal payment environment
CN107046516B (en) Wind control method and device for identifying mobile terminal identity
CN106357807A (en) Data processing method, device and system
CN104866782A (en) Data processing method and apparatus
CN101127634B (en) A method and system for secure update and upgrade of mobile station
CN103839309A (en) Community entrance guard method and system
CN105916181A (en) Network switching method and device
CN116090015B (en) Intelligent authority application management system and method based on big data
CN105516093B (en) A kind of method and router of anti-loiter network
CN105741444A (en) Application authentication method and device for financial self-service equipment based on Linux system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20110601

RJ01 Rejection of invention patent application after publication