CN102300230A - Method, device and system for realizing monitoring of Internet information - Google Patents

Method, device and system for realizing monitoring of Internet information Download PDF

Info

Publication number
CN102300230A
CN102300230A CN2011102835308A CN201110283530A CN102300230A CN 102300230 A CN102300230 A CN 102300230A CN 2011102835308 A CN2011102835308 A CN 2011102835308A CN 201110283530 A CN201110283530 A CN 201110283530A CN 102300230 A CN102300230 A CN 102300230A
Authority
CN
China
Prior art keywords
terminal called
message
mobile terminating
terminating message
mobile
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2011102835308A
Other languages
Chinese (zh)
Inventor
李昕杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN2011102835308A priority Critical patent/CN102300230A/en
Publication of CN102300230A publication Critical patent/CN102300230A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The invention relates to a monitoring system in the field of communication, in particular to a monitoring system based on the Internet information of a signaling switching point and a realization method thereof. By adopting an Internet information monitoring method, device and system, safe monitoring of the Internet information is realized. The Internet information monitoring method comprises the following steps of: receiving and forwarding a routing information request, forwarding the routing information request to a home location register (HLR) and acquiring the identifier of a mobile switching center to which a called terminal belongs, the identifier of the called terminal and the state of the called terminal from returned routing information request response; configuring the routing information request response according to the state of the called terminal and forwarding to a short message service center to which a calling terminal belongs; and when the called terminal is in a state that a mobile terminating message can be received, receiving a mobile terminating message of the short message service center to which the calling terminal belongs and monitoring the security of the contents of the mobile terminating message.

Description

A kind of monitoring implementation method of internet information, Apparatus and system
Technical field
The present invention relates to the supervisory control system in the communications field, relate in particular to a kind of based on Signalling Transfer Point (Signaling Transfer Point, the supervisory control system of internet information STP) and implementation method.
Background technology
At present, supervisory control system is fully used in various different field, and message monitoring system is a kind of supervisory control system in the communications field.The data source of existing message monitoring system is from SMS service center (Short Message Service Center, SMSC), by SMS service center the note that the user sends is sent to message monitoring system, message monitoring system is tackled refuse messages in violation of rules and regulations etc.Carry out monitoring spam and interception for common employing of this note inside the province in the sms center side, or carry out the interception of refuse messages signaling procedure, as connecing (Mobile originated, MO) interception of message moving the beginning at signaling network; Adopt signaling network to carry out SMS interception for internet note, as to mobile terminating (Mobile Terminated, MT) interception of message more.
Internet SMS interception mainly is to tackle after the Signalling Transfer Point STP of this province of terminal called receives the note in other provinces in the prior art, tackles and deletes for the short breath of rubbish; If normal note then enters follow-up Signalling Transfer Point smoothly, and via the mobile switching centre of this province (Mobile Switching Center, MSC) note is delivered to travelling carriage (Mobile Station, MS).But signal processing method can cause the waste of signaling and transmission channel in the prior art when terminal is in shutdown or can't receives information unusually.
Summary of the invention
The present invention is by a kind of internet information monitoring method, supervising device and supervisory control system, realize the security monitoring of internet information, when the information spy device receives the routing iinformation request, by the analysis that the routing iinformation request of returning is responded, the response message of sending message for affiliated mobile switching centre's transmission transmission mobile terminating message of calling terminal or termination.
The present invention includes a kind of internet information monitoring method, comprise: receive and transmit the routing iinformation request, transmit the routing iinformation request to attaching position register (Home Location Register, and from the routing iinformation request returned response, obtain mobile switching centre's sign under the terminal called, terminal called sign and terminal called state HLR); According to the terminal called state, dispose described routing iinformation request response, and be transmitted to the affiliated SMS service center of calling terminal; At described terminal called state is in the time of can receiving mobile terminating message, reception is from the mobile terminating message of SMS service center under the calling terminal, described mobile terminating message content is carried out security monitoring, dispose mobile terminating message or the mobile terminating message response that needs are transmitted according to described security monitoring result.
Also comprise a kind of information spy device in the present invention, comprising: receiver module, be used to receive routing iinformation request and reception from the routing iinformation request response of HLR, reach and receive mobile terminating message; Analysis module is used to analyze the routing iinformation request response from receiver module, and therefrom obtains the terminal called state, and responds according to the request of terminal called state configuration routing iinformation; Memory module, the terminal called sign and the affiliated mobile switching centre of terminal called that are used for needing in the inventory analysis module routing iinformation request response to preserve identify; Monitoring module carries out security monitoring to the mobile terminating message content in the receiver module, and disposes mobile terminating message or the mobile terminating message response that needs are transmitted according to monitored results; Sending module is used to send the routing iinformation request response that analysis module passes over, and also is used to send the forwarding mobile terminating message of monitoring module configuration.
In addition also the invention still further relates to a kind of information spy system, comprising: Signalling Transfer Point is used to transmit routing iinformation request and routing iinformation request response; The information spy device, mobile switching centre's sign under the terminal called, terminal called sign and terminal called state are obtained in the routing iinformation request response that is used for returning from attaching position register, and according to described terminal called state configuration routing iinformation request response; At the terminal called state is that described information spy device is also used the content of described mobile terminating message is carried out security monitoring in the time of can receiving mobile terminating message, and disposes mobile terminating message or the mobile terminating message response that needs are transmitted according to monitored results; Attaching position register receives described routing iinformation request, returns the routing iinformation request response of carrying the affiliated exchange of terminal called Route Distinguisher, terminal called sign and terminal called state.
The present invention when realizing information spy, has reduced volume of transmitted data in the signaling link by the processing to route information request and response thereof.
Description of drawings
The method embodiment signaling process figure of the monitoring of Fig. 1, a kind of internet information of the present invention;
A method embodiment method flow diagram of the monitoring of Fig. 2, a kind of internet information of the present invention;
A method embodiment signaling process figure of the monitoring of Fig. 3, a kind of internet information of the present invention;
A method embodiment signaling process figure of the monitoring of Fig. 4, a kind of internet information of the present invention;
A method embodiment signaling process figure of the monitoring of Fig. 5, a kind of internet information of the present invention;
The device example structure schematic diagram of the monitoring of Fig. 6, a kind of internet information of the present invention;
The system embodiment structural representation of the monitoring of Fig. 7, a kind of internet information of the present invention.
Specific embodiments
In the present embodiment, be mainly concerned with a kind of method of monitoring of internet information, its signaling process figure as shown in Figure 1, in the present embodiment, what this embodiment described is the signaling process of information security authentication device, step comprises:
S101, reception also transmit the routing iinformation request, transmit the routing iinformation request to attaching position register HLR, and obtain mobile switching centre's sign under the terminal called, terminal called sign and terminal called state from the routing iinformation request response of returning;
Wherein exchanging the MSC sign that Route Distinguisher can this province of terminal called, also can be the MSC sign in terminal called other provinces at place when being in roaming; The terminal called sign is at least in the following sign a kind of: phone number, Electronic Serial Number (ESN), Mobile Identification Number (MIN) and system banner code (SID); Terminal called can be portable digital-assistant (PDA), Wireless Telecom Equipment, smart phone or the terminal equipment with function of receiving and sending short message.
S102, according to the terminal called state, dispose described routing iinformation request response, and be transmitted to SMS service center under the calling terminal;
Wherein the terminal called state can be that terminal called can receive message, also can be that terminal called can not receive message.Under terminal called can not reception condition, can be one of following state: call barred Call Barred, telecommunication service is not provided Teleservice Not Provisioned, the user Absent Subscriber that does not deposit, equipment is not supported Facility Not Supported, thrashing System failure, uncertain data Unexpected Data Value, loss of data Data missing, the information spy device specifically can be to replace network node sign indicating number and international mobile subscriber identification code corresponding with it in the routing iinformation request response with described information spy device with self sign and false terminal iidentification with self sign and false terminal iidentification configuration routing iinformation request response.Be in to receive message the time at terminal called, enter step S103; Be in to receive message the time process ends at terminal called.
S103, at described terminal called state for can receive mobile terminating message the time, reception is from the mobile terminating message of SMS service center under the calling terminal, described mobile terminating message content is carried out security monitoring, dispose mobile terminating message or the mobile terminating message response that needs are transmitted according to described security monitoring result.
Wherein mobile terminating message can can also be derived from External Short Message Entity (ESME) and comprise: manual board, automatic station, WEB Server, E-mail Server or WAP gateway from the SMSC of CDMA networking from the SMSC of GSM networking.Its mobile terminating message called end also can be GSM networking or CDMA networking, and concrete terminal called can be conventional Short Message Entity or External Short Message Entity; Security monitoring to message content, disposing forwarding message according to described security monitoring result comprises: then dispose mobile terminating message with sign of the MSC under the terminal called that is stored in the information spy device and terminal called sign for the mobile terminating message by security monitoring, specifically can be to replace in the mobile terminating message and corresponding network node sign indicating number and the international mobile subscriber identification code of described sign, be transmitted to terminal called then; Then filter or delete processing for refuse messages in the information monitoring process, and return that terminal called receives successfully or with undefined user, equipment do not support, one of them deceptive information of authorization failure, IMEI verification failure, thrashing responds as MT, and be transmitted to the affiliated SMSC of calling terminal, make described SMSC stop continuing to send the process of MT to current terminal called.
Present embodiment was analyzed and is disposed before transmitting routing iinformation request response to SMSC under the calling terminal by the information spy device, be in to receive information state the time at terminal called, transmit described SMSC and make it no longer send follow-up mobile terminating message; And information spy be derived as can not by the time, utilize to receive successfully or to transmit error message as the terminating message response, stop the supervention of the terminating message of described SMSC; Thereby effectively avoided terminal called to be in the time of can not receiving message status, described SMSC still sends the phenomenon of terminating message, has avoided unnecessary signaling transmission active channel resource, has simplified the transmission course of signaling.
One embodiment of the present of invention have been described the monitoring of internet information security, and its method flow diagram as shown in Figure 2.In the present embodiment, terminal called shows as called MS, and concrete implementation procedure is as follows:
S201, information spy device receive from internet routing iinformation request.Wherein, internet routing iinformation request is that the Signalling Transfer Point by this province is transmitted to the information spy device, has comprised the SMSC sign of calling terminal in the routing iinformation request;
S202, the request of forwarding routing iinformation are to HLR, and the mobile switching centre that obtains from the routing iinformation response of returning under called MS state, called MS sign and the called MS identifies.Wherein, the information spy device is transmitted the routing iinformation request to HLR, and described HLR sends to the information spy device with the mobile switching centre's sign under called MS state, called MS sign and the called MS of storage with routing iinformation request response mode; Wherein the mobile switching centre's sign under called MS state, called MS sign and the called MS all belongs to called end information;
S203, judge whether called MS can receive mobile terminating message.Particularly, the called MS state that the information spy device analysis gets access to: but when called MS is in accepting state, jump to step S205; When called MS is in can not accepting state the time, jump to step S204;
S204, directly transmit routing iinformation request response.Particularly, information spy device analysis called MS is can not accepting state the time, does not then change the setting of routing iinformation request response, and directly transmits back SMSC under the calling terminal by Signalling Transfer Point.Described SMSC receives routing iinformation request response, and understanding that terminal called is in can not accepting state, then stops to send follow-up mobile terminating message, terminal procedure;
Information parameter during S205, the received routing iinformation request of preservation respond, configuration information safety monitoring device sign and false called MS are identified to routing iinformation request response and are transmitted to the affiliated SMS service center of calling terminal.Particularly, but when information spy device analysis called MS is accepting state, preserve MISI, the sign of the MSC under the terminal called of terminal called in the routing iinformation request response; With the sign and the false called MS sign configuration routing iinformation request response of information spy device self, specifically can be to replace network node sign indicating number and international mobile subscriber identification code corresponding with it in the routing iinformation request response with self sign and false terminal iidentification then with described information spy device; The routing iinformation request of transmitting after having disposed responds to SMSC under the calling terminal then.Wherein false called MS sign can be to store in the information spy device, also can be interim the generation, can also just adopt the real called MS sign that gets access to;
S206, reception mobile terminating message, and message content is carried out security monitoring handle.Particularly, SMSC under the calling terminal is receiving routing iinformation request response, but and analyze called MS when being in accepting state, just send mobile terminating message MT to the information spy device, the information spy device is after receiving MT message, message content is carried out security monitoring to be handled, specifically can be at frequency traffic characteristic, receiving number feature, send the number feature, send the place feature and send content characteristic, more than the combination of certain feature or several characteristic come message content is carried out security monitoring.The information spy result be can by the time execution in step S208; The information spy result be can not by the time execution in step S207;
S207, directly generate and transmit and receive successfully or transmit wrong mobile terminating message response.The information spy device is according to the conclusion of monitoring for passing through, and generation comprises the mobile terminating message response that receives successfully or transmit mistake, and is transmitted to the affiliated SMSC of calling terminal, makes it no longer continue to transmit described mobile terminating message;
Mobile switching centre's sign and called MS are identified to mobile terminating message and are transmitted to called MS under S208, the configuration called MS.The information spy device, according to the conclusion of monitoring for passing through, reconfigure MT with mobile switching centre's sign under the called MS that is kept at self before and called MS sign, specifically can be to replace network node sign indicating number and international mobile subscriber identification code corresponding with it in the MT message, and forwarding be finished the MT message of replacement to terminal called with described called MS affiliated mobile switching centre sign and called MS sign.
One embodiment of the present of invention have been described the monitoring of internet information security, and its signaling process figure as shown in Figure 3.Internetly in the present embodiment be represented as inter-provincial form, terminal called is that B economizes the local user, terminal called specifically can be mobile phone terminal, PDA, panel computer or PC, can also be that External Short Message Entity (ESME) comprising: manual board, automatic station, WEB Server, E-mail Server or WAP gateway.Signalling Transfer Point comprises HSTP High Signaling Transport Point HSTP and Low Level Signaling Transfer Point LSTP LSTP, and terminal called shows as called MS, and the A that the networking at terminal called and calling terminal place is represented as this terminal place economizes and B province.In the SMS system, calling terminal only need be finished the process that source message MO sends to SMSC, the submission Submit of information afterwards and transmit Delivery and realize by SMSC, so the process of signaling also is simplified to from SMSC and begins to describe.The information spy device is specially SMS Firewall in the present embodiment, the routing iinformation required list be shown (Send Radio Information, SRI), concrete implementation procedure is as follows:
The SMSC that S301, A economize sends earlier and carries service centre address (Service Centre Address, SCA) and the routing iinformation request of the SM-RP-SMEA identifier word of Short Message Entity address, specifically be SRI message in the present embodiment, in SRI message, also comprised the request of obtaining the IMSI identifier word of called MS;
S302-S304, via signaling link by HSTP High Signaling Transport Point HSTP, SRI message economized by A is delivered to the HSTP that B economizes, the HSTP that B economizes is redirected the SMS Firewall that SRI message is economized to B;
After the SMS Firewall that S305-S308, B economize receives and has resolved SRI message, do not return earlier the SMSC that SRI_RESP message is economized to A, but send the HLR that SRI message is economized to B earlier, obtain marked network node sign indicating number (the Network Node number of the affiliated mobile switching centre of called MS state and called MS, NNN) and the sign international mobile subscriber identification code of called MS (International Mobile Subscriber Identification Number, IMSI);
The called MS state that S309, analysis get access to from the HLR that B economizes, if being in, called MS can not receive the mobile terminating message status, then directly transmitting the SRI_RESP that receives economizes to A, the content that User error identifier word correspondence among the routing iinformation request response SRI_RESP perhaps is set finishes signaling process, for example is set to telecommunication service and is not provided Teleservice Not Provisioned or call barred Call Barred or user and does not have Absent Subscriber; If being in, called MS can receive the mobile terminating message status, SMS Firewall preserves from HLR and obtains the affiliated MSC sign of the called MS of getting and the sign of called MS, and identify the NNN and the IMSI that dispose respectively among the SRI_RESP with the false IMSI that the NNN of SMS Firewall self sign and SMS Firewall distribute to called MS and describe the character corresponding parameters, and be transmitted to A and economize SMSC, wherein configuration operation can be to replace or increase, and NNN is mainly used to specify the ISDN value of MSC, SGSN or SMS Firewall;
S310-S313, SMS Firewall transmit SRI_RESP via inter-provincial HSTP link to the SMSC that A economizes, and SMSC determines subsequent operation according to the called MS state: can receive the mobile terminating message status if called MS is in, then enter step 314; Can not receive the mobile terminating message status if called MS is in, then finish this programme process;
The SMSC that 314-317, A economize issues the SMS Firewall of the MT message content of its storage to B province according to the false IMSI sign that NNN identifies and SMS Firewall distributes to called MS of SMS Firewall among the SRI_RESP self by signaling link.SMS Firewall false IMSI that provides and the network node sign indicating number NNN that points to SMS Firewall have been provided MT message;
The SMS Firewall that S318, B economize finds the message text among the MT according to the false IMSI in the MT message, carries out information spy then.If allow the MT message text to issue, then SMSFirewall uses the live network node sign indicating number NNN of the B province MSC under the B that gets access in the S308 step economizes called MS real information IMSI and called MS, the MT message corresponding parameter that configuration receives, execution in step S319; If do not allow the MT message text to issue, then execution in step S325;
S319-S323, issue MT message, transmit mobile terminating message by LSTP and MSC and give called MS, and return the mobile terminating message response MT_ACK of called MS.When the information security authentication module is arranged under the present embodiment situation in the mode that is attempted by on the Signalling Transfer Point, at step S323 according to SMSFirewall in configuration and when transmitting MT message, if on the S318 configure base, preserved the SCA identifier word value of the sign A province SMSC among the MT_ACK, and with the SCA identifier word content among the identifier word value replacement MT of SMS Firewall self, then MT_ACK arrives step S324 via step S323; If do not carry out above-mentioned additional configuration, then skip S324 and directly arrive step S325;
S324, SMS Firewall receive MT_ACK, and use the SCA identifier word of the SCA identifier word value configuration MT_ACK of the SMSC that the sign A that stored economizes, enter step S325 then;
S325-S328, obstructed out-of-date in step 318 security monitoring, then information spy device SMSFirewall directly economizes SMSC to A and returns MT_ACK and contain the information that band received successfully or transmitted mistake, avoids the repeating transmission of the SMSC of A province to MT message.When security monitoring was passed through, then normal switching returned to the SMSC that A economizes from the MT_ACK of called MS.
The signaling process figure of one embodiment of the present of invention has described the monitoring of internet information security, internetly in the present embodiment is expressed as inter-provincially, and terminal called is in roaming state, as shown in Figure 4.This is that terminal called belongs to B province in the present embodiment, and is in the information spy process under the C province roaming condition.Present embodiment signaling process figure as shown in Figure 4, in the present embodiment, terminal called is expressed as called MS, the A that the networking at terminal called and calling terminal place is represented as this terminal place economizes, B economizes and C economizes, idiographic flow is as follows:
The SMSC that S401, A economize sends the SRI message that carries SCA and SM-RP-SMEA identifier word earlier, has also comprised the request of obtaining to the IMSI identifier word of called MS in SRI message;
S402-S403, via signaling link by STP, SRI economized by A is delivered to the STP that B economizes, the STP that B economizes is redirected to the SMS Firewall that B economizes with SRI message;
After the SMS Firewall that S404-S405, B economize receives and has resolved SRI message, do not return earlier the SMSC that SRI_RESP message is economized to A, but send the HLR that SRI message is economized to B earlier, the network node sign indicating number NNN of MSC under the real state of acquisition called MS, the called MS and the IMSI of called MS, this moment, called MS was in C province roaming state, wherein NNN is mainly used to specify the ISDN value of MSC or SGSN, then this moment NNN pointed be the MSC that C economizes;
The called MS state that S406, analysis get access to from the HLR that B economizes can not receive the mobile terminating message status if called MS is in, and then just economizes to A and returns real state information, directly transmits the SRI_RESP that receives; If called MS can be used, SMS Firewall preserves the NNN and the IMSI of the called MS that gets access to from HLR, and the false IMSI configuration SRI_RESP that distributes to called MS with the network node sign indicating number NNN of SMS Firewall oneself and SMS Firewall, be transmitted to A then and economize SMSC, then the NNN identifier word intrinsic parameter among the SRI_RESP is to be used for specifying SMS Firewall self ISDN here;
S407-S409, SMS Firewall transmit SRI_RESP via inter-provincial STP link to the SMSC that A economizes, and SMSC can receive the mobile terminating message status according to the called MS state if called MS is in, and then enters step S410; Can not receive the mobile terminating message status if called MS is in, then finish this programme signaling process;
The SMSC that S410-S412, A economize issues the SMS Firewall of the MT message content of its storage to B province according to the network node sign indicating number NNN of false IMSI that provides corresponding to SMS Firewall among the SRI_RESP and sensing SMS Firewall by signaling link.SMS Firewall false IMSI that provides and the network node sign indicating number NNN that points to SMS Firewall have been provided MT message;
The SMS Firewall that S413, B economize finds the message text among the MT according to the false IMSI in the MT message, carries out information spy then.If allow the MT message text to issue, the live network node sign indicating number NNN of the MSC that economizes of the SMSFirewall C that uses the B in the S406 step, get access to economize called MS real information IMSI and MS roaming of living in then, the MT signaling corresponding parameter that configuration receives also issues MT message; If do not allow the MT message text to issue execution in step S422;
S414-421, issue the MT signaling, by the signaling transmission link that B economizes and C economizes, the STP that economizes via B is transferred to the STP that C economizes and is issued to the MSC that C economizes and finishes the transmission that MT arrives called MS, and returns the mobile terminating message response MT_ACK of called MS;
S422-S434, step S413 security monitoring result be can not by the time, then the information spy device is directly economized SMSC to A and is returned MT_ACK and contain the band error message that receives successfully or transfer, and avoids the repeating transmission of the SMSC of A province to MT.The security monitoring result be can by the time, then normal switching returns to the SMSC that A economizes from the MT_ACK of called MS.
The signaling process figure of one embodiment of the present of invention has described the monitoring of internet information security, internet in the present embodiment with the performance of inter-provincial form as shown in Figure 5.The SMS service center economized of A is via the information spy device in the present embodiment, sends the process of the terminal called that note economizes to B, and wherein the information spy device can be integrated in B and economizes in existing HSTP, LSTP or the SMSC device.It is example that present embodiment just is integrated in SMSC with SMS Firewall, signaling diagram as shown in Figure 5, in the present embodiment, Signalling Transfer Point comprises HSTP High Signaling Transport Point HSTP and Low Level Signaling Transfer Point LSTP LSTP, terminal called is expressed as called MS, the A that the networking at terminal called and calling terminal place is represented as this terminal place economizes and B province, and idiographic flow is as follows:
The SMSC that S501, A economize sends the SRI message that carries SCA and SM-RP-SMEA identifier word earlier, has also comprised the response request to the IMSI identifier word in SRI message;
S502-S504, via signaling link by HSTP High Signaling Transport Point HSTP, SRI message economized by A is delivered to the HSTP that B economizes, the HSTP that B economizes is redirected to the SMSFirewall/SMSC that B economizes to SRI message;
After the SMS Firewall/SMSC that S505-S508, B economize receives and resolved SRI message, do not return earlier the SMSC that SRI_RESP message is economized to A.Arrive the HLR that B economizes but send SRI message earlier, the network node sign indicating number NNN of the MSC under acquisition real state of called MS and the called MS and the IMSI of called MS, wherein NNN is the ISDN sign indicating number that points to the MSC of B province;
The called MS state that S509, analysis get access to from the HLR that B economizes can not receive the mobile terminating message status if called MS is in, and then economizes to A and returns real state information, directly transmits the SRI_RESP that receives; If being in, called MS can receive the mobile terminating message status, SMS Firewall/SMSC preserves the NNN of the MSC under the called MS of getting from HLR and the IMSI of called MS self, and economize SMSC to A and return the network node sign indicating number NNN of SMS Firewall/SMSC oneself and the false IMSI that SMSFirewall/SMSC distributes to called MS, NNN is used for specifying the ISDN sign indicating number of SMSFirewall/SMSC here; Concrete NNN can be the sign of former SMSC.
S510-S513, SMS Firewall/SMSC transmit SRI_RESP via inter-provincial HSTP link to the SMSC that A economizes, and SMSC can receive the mobile terminating message status according to the called MS state if called MS is in, and then enters step S514; Can not receive the mobile terminating message status if called MS is in, then finish this programme process;
The SMSC that S514-S517, A economize according among the SRI_RESP corresponding to the IMSI identifier word of called MS with corresponding to the NNN identifier word of MSC under the called MS, issue the SMS Firewall/SMSC that the MT message of its storage is economized to B by signaling link.SMS Firewall/SMSC false IMSI that provides and the network node sign indicating number NNN that points to SMS Firewall/SMSC have been provided MT message;
The SMS Firewall that S518, B economize finds the message text among the MT according to the false IMSI in the MT message, carries out information spy then.If allow the MT message text to issue, then SMSFirewall uses the B that gets access in the S508 step to economize the live network node sign indicating number NNN of called MS real information IMSI and B province MSC, and the MT message corresponding parameter that configuration receives also issues MT message; If do not allow the MT message text to issue execution in step S525;
S519-S524, issue MT message, transmit mobile terminating message by LSTP and MSC and give called MS, and return the mobile terminating message response MT_ACK of called MS;
S525-S528, step 518 security monitoring be MT can not by the time, then the information spy device is directly economized SMSC to A and is returned MT_ACK and contain the band error message that receives successfully or transfer, and avoids the repeating transmission of the SMSC of A province to MT.Security monitoring be MT can by the time, then normal switching returns to the SMSC that A economizes from the MT_ACK of called MS.
As shown in Figure 6, described a kind of information spy device, having comprised:
Receiver module 601 is used to receive the routing iinformation request and receives routing iinformation request response from HLR.Concrete, drawing the terminal called state at analysis module is that receiver module is used to receive mobile terminating message in the time of can receiving mobile terminating message;
Analysis module 602 is used to analyze the routing iinformation request response from receiver module 601, and therefrom obtains the terminal called state, and responds according to the request of terminal called state configuration routing iinformation.Concrete, terminal called is in the time of can receiving mobile terminating message, analysis module passes to memory module 603 with mobile switching centre's sign under the terminal called in the routing iinformation request response and terminal called sign and is used for preserving, and replaces in the routing iinformation request response network node sign indicating number and the international mobile subscriber identification code of correspondence with it with the sign of information spy device self and false terminal iidentification;
Memory module 603, the terminal called sign and the affiliated mobile switching centre of terminal called that are used for needing in the inventory analysis module 602 routing iinformation requests response to preserve identify; The concrete SCA that can also preserve the affiliated SMS service center of calling terminal;
Monitoring module 604 is used for the mobile terminating message content of receiver module is carried out security monitoring, and message is transmitted in configuration according to monitored results.Be specially, when the security monitoring result for can pass through the time, monitoring module obtains the sign of the mobile switching centre under terminal called sign and the terminal called from memory module 603, replace international mobile subscriber identification code and network node sign indicating number corresponding with it in the mobile terminating message, and pass to sending module 605 and transmit; When the security monitoring result be can not by the time, monitoring module generates to receive successfully or to transmit mistake and to pass to sending module 605 and transmits.
Sending module 605 is used to send the routing iinformation request response that analysis module passes over, and also is used to send the forwarding message of monitoring module configuration.
A kind of internet information spy system, comprise Signalling Transfer Point, information spy device, attaching position register and mobile switching centre in the system, provided the structural representation of the information spy system of called terminal side among Fig. 7, the information spy device exists in the mode that is attempted by on the Signalling Transfer Point, and system realizes being specially:
Be in routing iinformation when mutual in system, wherein, Signalling Transfer Point 701 is transmitted routing iinformation request and routing iinformation request response; Information spy device 702, receive described routing iinformation request, and be transmitted to attaching position register 703 by Signalling Transfer Point 701, from the routing iinformation request response that attaching position register returns, obtain the terminal called state, when the terminal called state is in the time of can receiving mobile terminating message, preserve affiliated exchange Route Distinguisher and the terminal called sign of terminal called in the described routing iinformation request response, and be transmitted to Signalling Transfer Point 701; When the terminal called state is in the time of can receiving mobile terminating message, information spy device 702, also use the content of described mobile terminating message is carried out security monitoring, and mobile terminating message or the mobile terminating message response transmitted according to monitored results configuration needs, security monitoring mobile terminating message is specially: when can not be passed through, to be stored in the data configuration mobile terminating message in the information spy device, the SMS service center under calling terminal is transmitted and is comprised the whole mobile terminating message response that receives successfully or transmit error message; Security monitoring mobile terminating message can by the time, being stored in the data configuration mobile terminating message in the information spy device, and transmit to described mobile switching centre; Attaching position register 703 receives described routing iinformation request, returns the routing iinformation request response of carrying terminal called affiliated exchange Route Distinguisher and terminal called sign;
When system was in the mobile terminating interacting message, wherein, described Signalling Transfer Point 701 was transmitted mobile terminating message and mobile terminating message response; Described information spy device 702, receive described mobile terminating message, message content is carried out security monitoring, be specially: when the security monitoring result can not pass through for described mobile terminating message, information spy device 702 was directly transmitted to Signalling Transfer Point 701 and is received successfully or transmit the whole mobile terminating message response of error message; When the security monitoring result passes through for described mobile terminating message, information spy device 702 is replaced network node sign indicating number and international mobile subscriber identification code corresponding with it in the routing iinformation request response with mobile switching centre's sign under the terminal called that is stored in self and terminal called sign, and transmits to described mobile switching centre; Described mobile switching centre 704 receives the mobile terminating message from the information spy device, and is transmitted to terminal called; Receive the mobile terminating message response of terminal called, and be transmitted to Signalling Transfer Point 701, be forwarded to SMSC under the calling terminal by the signal switching described mobile terminating message response of naming a person for a particular job.
Be attempted by the more transmission of each signaling of flexible processing of mode on the Signalling Transfer Point, thereby can change substitute mode by the signaling in the redirecting signaling transit point without the information monitoring device.
In information spy of the present invention system, the information spy device can be integrated in Signalling Transfer Point or be integrated in short message service center or exist with the self-contained unit form.The information spy device is when being serially connected in the Signalling Transfer Point upper type, main process is identical with mode on being attempted by Signalling Transfer Point, but in transit route information request, routing iinformation request response, mobile terminating message and mobile terminating message response, need not repeat through Signalling Transfer Point, so therefore the mode mode that is serially connected on the Signalling Transfer Point is more succinct.In for example described mode that is attempted by on the Signalling Transfer Point: information spy device 702 receives described routing iinformation request, and is transmitted to attaching position register 703 by Signalling Transfer Point 701.More than operation is achieved as follows by the mode that is serially connected on the Signalling Transfer Point: the information spy device, receive described routing iinformation request, and be transmitted to attaching position register.Therefore when being transmitted to location register, can pass through Signalling Transfer Point once more.
Contents such as the information interaction between said apparatus and intrasystem each module, implementation and since with the inventive method embodiment based on same design, particular content can repeat no more referring to the narration among the inventive method embodiment herein.
One of ordinary skill in the art will appreciate that all or part of flow process that realizes in the foregoing description method, be to instruct relevant hardware to finish by computer program, above-mentioned program can be stored in the computer read/write memory medium, this program can comprise the flow process as the embodiment of above-mentioned each side method when carrying out.Wherein, above-mentioned storage medium can be magnetic disc, CD, read-only storage memory body (ROM:Read-Only Memory) or stores memory body (RAM:Random Access Memory) etc. at random.
Used specific case herein principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and thought thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that all can change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention

Claims (12)

1. the method for supervising of an internet information is characterized in that, comprising:
Receive the routing iinformation request of also transmitting, transmit the routing iinformation request, and from the routing iinformation request response of returning, obtain mobile switching centre's sign under the terminal called, terminal called sign and terminal called state to attaching position register HLR;
According to the terminal called state, dispose described routing iinformation request response, and be transmitted to the affiliated SMS service center of calling terminal;
At described terminal called state is in the time of can receiving mobile terminating message, reception is from the mobile terminating message of SMS service center under the calling terminal, described mobile terminating message content is carried out security monitoring, dispose mobile terminating message or the mobile terminating message response that needs are transmitted according to described security monitoring result.
2. according to the method in the claim 1, it is characterized in that the described affiliated mobile switching centre of terminal called sign, terminal called sign and the terminal called state of obtaining advances one and comprise:
At the terminal called state is that terminal called is in can receive mobile terminating message the time, the sign of the terminal called that the storage of information spy device is obtained and the sign of the mobile switching centre under the terminal called.
3. according to the method in the claim 1, it is characterized in that, described according to the terminal called state, dispose described routing iinformation request response, specifically comprise:
The terminal called state is that terminal called is in the time of can receiving mobile terminating message, and the information spy device is replaced network node sign indicating number and international mobile subscriber identification code corresponding with it in the routing iinformation request response with self sign and false terminal iidentification.
4. according to the method in the claim 1, it is characterized in that, described according to the terminal called state, dispose described routing iinformation request response, and be transmitted to the affiliated mobile switching centre of calling terminal, specifically comprise:
The terminal called state is that terminal called is in the time of can not receiving mobile terminating message, and the information spy device is further directly transmitted back routing iinformation request response the short message service center of calling terminal.
5. according to the method in claim 1 or 2, it is characterized in that described mobile terminating message or the mobile terminating message response that disposes the needs forwarding according to described security monitoring result specifically comprises:
When the security monitoring result can pass through for described mobile terminating message, the information spy device sign of the affiliated mobile switching centre of the terminal called sign of being stored and terminal called is replaced international mobile subscriber identification code and the network node sign indicating number in the described mobile terminating message and is transmitted terminal called.
6. according to the method in claim 1 or 2, it is characterized in that described mobile terminating message or the mobile terminating message response that disposes the needs forwarding according to described security monitoring result specifically comprises:
When the security monitoring result can not pass through for described mobile terminating message, the information spy device is transmitted the short message service center that the mobile terminating message response is given calling terminal, described mobile terminating message response comprises and receives successfully or transmit error message, makes described short message service center not repeat to send mobile terminating message.
7. according to the method in the claim 5, it is characterized in that the mobile switching centre under the described terminal called specifically comprises:
When terminal called during at Home Network, affiliated mobile switching centre is the mobile switching centre of Home Network;
When terminal called roamed into outer net, affiliated mobile switching centre changed to the mobile switching centre of the outer net at terminal called place.
8. an information spy device is characterized in that, comprising:
Receiver module is used to receive routing iinformation request and reception from the routing iinformation request response of HLR, reaches and receives mobile terminating message;
Analysis module is used to analyze the routing iinformation request response from receiver module, and therefrom obtains the terminal called state, and responds according to the request of terminal called state configuration routing iinformation;
Memory module, the terminal called sign and the affiliated mobile switching centre of terminal called that are used for needing in the inventory analysis module routing iinformation request response to preserve identify;
Monitoring module carries out security monitoring to the mobile terminating message content in the receiver module, and disposes mobile terminating message or the mobile terminating message response that needs are transmitted according to monitored results;
Sending module is used to send the routing iinformation request response that analysis module passes over, and also is used to send the forwarding mobile terminating message of monitoring module configuration.
9. device according to Claim 8 is characterized in that, and is described according to monitored results configuration forwarding mobile terminating message, specifically comprises:
When mobile terminating message can be passed through through security monitoring, utilize the terminal called sign of the preservation in the memory module and the sign of the mobile switching centre under the terminal called, replace international mobile subscriber identification code and network node sign indicating number in the described mobile terminating message, and transfer to sending module and be forwarded to terminal called;
When mobile terminating message cannot be passed through through security monitoring, dispose the mobile terminating message response for to receive successfully or to transmit mistake, and transfer to the SMS service center that sending module is forwarded to calling terminal.
10. an information spy system is characterized in that, comprising:
Signalling Transfer Point is used to transmit routing iinformation request and routing iinformation request response;
The information spy device, mobile switching centre's sign under the terminal called, terminal called sign and terminal called state are obtained in the routing iinformation request response that is used for returning from attaching position register, and according to described terminal called state configuration routing iinformation request response; At the terminal called state is that described information spy device is also used the content of described mobile terminating message is carried out security monitoring in the time of can receiving mobile terminating message, and disposes mobile terminating message or the mobile terminating message response that needs are transmitted according to monitored results;
Attaching position register receives described routing iinformation request, returns the routing iinformation request response of carrying the affiliated exchange of terminal called Route Distinguisher, terminal called sign and terminal called state.
11. the system according in the claim 10 is characterized in that:
Described Signalling Transfer Point also is used to transmit mobile terminating message and mobile terminating message response;
Described mobile switching centre is used to receive the mobile terminating message from the information spy device, and is transmitted to terminal called; Receive the mobile terminating message response of terminal called, and be transmitted to Signalling Transfer Point.
12. the system according to claim 10 or 11 is characterized in that,
The information spy device can be integrated in Signalling Transfer Point or be integrated in short message service center or exist with the self-contained unit form, and is serially connected on the Signalling Transfer Point or be attempted by dual mode on the Signalling Transfer Point.
CN2011102835308A 2011-09-22 2011-09-22 Method, device and system for realizing monitoring of Internet information Pending CN102300230A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2011102835308A CN102300230A (en) 2011-09-22 2011-09-22 Method, device and system for realizing monitoring of Internet information

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2011102835308A CN102300230A (en) 2011-09-22 2011-09-22 Method, device and system for realizing monitoring of Internet information

Publications (1)

Publication Number Publication Date
CN102300230A true CN102300230A (en) 2011-12-28

Family

ID=45360324

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2011102835308A Pending CN102300230A (en) 2011-09-22 2011-09-22 Method, device and system for realizing monitoring of Internet information

Country Status (1)

Country Link
CN (1) CN102300230A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103327457A (en) * 2012-03-20 2013-09-25 中兴通讯股份有限公司 Method and device for processing short message route and short message examination processing device
CN107135251A (en) * 2017-04-18 2017-09-05 北京思特奇信息技术股份有限公司 A kind of home location register instruction agency retransmission method and system
CN109819409A (en) * 2017-11-22 2019-05-28 中兴通讯股份有限公司 A kind of SMS sending method, device, equipment and computer storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080167024A1 (en) * 2003-11-12 2008-07-10 Redknee Inc. Method And System For The Prevention Of Unwanted Wireless Telecommunications
CN101635899A (en) * 2009-08-28 2010-01-27 中兴通讯股份有限公司 Method and system and signaling gateway for realizing message intercommunication of GSM and CDMA
CN101730055A (en) * 2008-10-24 2010-06-09 华为技术有限公司 Method, device and system for acquiring user status information and applications thereof in service
CN101742445A (en) * 2008-11-06 2010-06-16 华为技术有限公司 Method, device and system for identifying messages

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080167024A1 (en) * 2003-11-12 2008-07-10 Redknee Inc. Method And System For The Prevention Of Unwanted Wireless Telecommunications
CN101730055A (en) * 2008-10-24 2010-06-09 华为技术有限公司 Method, device and system for acquiring user status information and applications thereof in service
CN101742445A (en) * 2008-11-06 2010-06-16 华为技术有限公司 Method, device and system for identifying messages
CN101635899A (en) * 2009-08-28 2010-01-27 中兴通讯股份有限公司 Method and system and signaling gateway for realizing message intercommunication of GSM and CDMA

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103327457A (en) * 2012-03-20 2013-09-25 中兴通讯股份有限公司 Method and device for processing short message route and short message examination processing device
CN103327457B (en) * 2012-03-20 2018-09-28 中兴通讯股份有限公司 Short message route processing method, apparatus and system and short message check processing unit
CN107135251A (en) * 2017-04-18 2017-09-05 北京思特奇信息技术股份有限公司 A kind of home location register instruction agency retransmission method and system
CN107135251B (en) * 2017-04-18 2020-07-31 北京思特奇信息技术股份有限公司 Home location register instruction proxy forwarding method and system
CN109819409A (en) * 2017-11-22 2019-05-28 中兴通讯股份有限公司 A kind of SMS sending method, device, equipment and computer storage medium
CN109819409B (en) * 2017-11-22 2022-03-04 中兴通讯股份有限公司 Short message sending method, device, equipment and computer storage medium

Similar Documents

Publication Publication Date Title
CN103858517A (en) Communication system, method and apparatus
US8934927B2 (en) Method and apparatus for routing short messages in mobile telephone networks
CN103249011B (en) The sending method and system of short message
CN103329594B (en) Circuit switched fallback paging for mobility management entity pool
CN103796188A (en) Method and device for transmitting downlink data
CN104350807A (en) Method, device, and system for opening voice over long term evolution service
JP2020058074A (en) First device, first core network node, and method thereof
CN101742429A (en) Instant message and short message interworking method, device and system
CN101247569B (en) Method and system for dispatching message, message center equipment
CN107318158A (en) A kind of message sends, recognized and mobility, the method for session management and node
CN101448217A (en) Short message service implementation system and sending and receiving method
CN105474688A (en) Congestion control for short message service in 3rd generation partnership project (3GPP) systems
CN103384380A (en) Machine-type communication event reporting method and corresponding device
CN1926892B (en) Method and apparatus for sending message to mobile station by addressing the hardware part
CN105635934A (en) Method and device for opening service, and HSS
CN102300230A (en) Method, device and system for realizing monitoring of Internet information
CN102812771A (en) Serving Gateway For Handling Communications Of Mobile Terminal
CN102104882A (en) Entire user or equipment service flow tracing method and system
CN102870489B (en) For the method and apparatus of receiving mobility management entity title
CN102056104A (en) SM (Short Message) sending control method as well as device and system
CN101047969B (en) Method for channel call in mobile communication network
CN101527888B (en) Method for achieving one-card multi-number short message service and device for managing one-card multi-number short message service
JP4237134B2 (en) Network, network system and network system communication method
CN104145488A (en) Service processing method, system and related device
CN102984761B (en) A kind of transmission of device capability information and acquisition methods, device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20111228