CN102857917B - Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis - Google Patents
Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis Download PDFInfo
- Publication number
- CN102857917B CN102857917B CN201210307156.5A CN201210307156A CN102857917B CN 102857917 B CN102857917 B CN 102857917B CN 201210307156 A CN201210307156 A CN 201210307156A CN 102857917 B CN102857917 B CN 102857917B
- Authority
- CN
- China
- Prior art keywords
- mobile phone
- user
- online
- terminal
- request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
Abstract
The invention discloses a method for identifying internet access of a mobile phone through a personal computer (PC) based on signaling analysis, which belongs to the technical field of the mobile communication. The method comprises following steps of collecting original data of all user behaviors on an internet, analyzing an original data signaling and a protocol, acquiring terminal identification information, utilizing the terminal identification information to filter the internet access request transmitted by a mobile phone terminal and the internet access request transmitted by an emulational mobile phone to obtain the internet access request which is transmitted by directly utilizing a PC operation system, further filtering the internet access request transmitted by a small laptop computer and an internet access card, and determining the rest internet access request to bee the internet access utilized by the mobile phone through the PC. According to the method, a hyper text transport protocol (HTTP) characteristic in a mobile network is utilized, the internet access service flow of users in a second-generation/third-generation (2G/3G)) network is collected, a user-agent field in the HTTP is analyzed, and finally the terminal type transmitting the service is accurately judged through a terminal characteristic library.
Description
Technical field
The present invention relates to moving communicating field, particularly a kind of mobile phone based on signalling analysis connects PC online recognition methods.
Background technology
The survey showed that, there is a part and use mobile phone to connect the user group of PC online in existing network, and the appearance of this user behavior illustrates that some user has the tight demand using PC online in specific region.But because the broadband access in these regions is undeveloped, WIFI hot spot does not cover the problems such as position, causing user can only connect PC online by choice for use mobile phone.Therefore, realizing a kind of method that mobile phone connects PC online that identifies, by locating the hotspots of this user behavior, contributing to the region that operator selects WIFI hot spot to build more accurately, better for network O&M provides support.
At present, can realize identifying that mobile phone is connected PC online by IMEI with User-Agent two kinds of methods:
(1) based on the travelling carriage recognition technology of IMEI (International Mobile Equipment Identity, International Mobile Equipment Identity code)
IMEI is made up of " electronics string number " 15 bit digital, it and every platform mobile phone one_to_one corresponding, and this yard is that the whole world is unique, from the production of mobile phone to being delivered for use all by manufactured business institute record.By IMEI identification terminal type, first need to gather Gb and IuPS interface data, and obtain the IMEI mark of travelling carriage by the IMEISV cell of resolving in authentication response message, more finally confirm terminal type by the mapping table searching IMEI and terminal.In current mobile network, the recognition methods based on IMEI accurately can identify terminal type (mobile phone, card of surfing Internet, net book), brand and the model that user used in the network insertion stage.
(2) based on User Agent(user agent) travelling carriage recognition technology
User Agent is a special string head, makes server can identify the operating system that client uses and version, cpu type, browser and version, browser renders engine, browser language, browser plug-in etc.In a mobile network, the mobile phone terminal model of user's use can be obtained by the User-Agent field contents of resolving in user's HTTP request.By User Agent identification terminal type, first need to gather Gb, IuPS interface data, and the User Agent field passed through in parsing HTTP request message obtains the information such as terminal brand, terminal models, operating system, browser that user uses when surfing the Net.
But, based in the recognition technology of IMEI, be merely able to the terminal type identifying that user uses in network insertion process, and cannot the special user's behavior after network insertion be analyzed, as user uses mobile phone terminal to connect PC online etc.; Recognition technology based on User Agent is merely able to identify mobile phone terminal, but also have problems in identification accuracy, if user have modified the acquiescence User Agent information of mobile phone terminal voluntarily, then correctly cannot obtain the information such as terminal models by the method.
Summary of the invention
For the defect existed in prior art, the object of this invention is to provide a kind of mobile phone based on signalling analysis and connect PC and to surf the Net recognition methods, connecting for realizing mobile phone the accuracy and comprehensive that PC online identifies.
For reaching above object, the technical solution used in the present invention is:
Mobile phone based on signalling analysis connects a PC online recognition methods, comprises the following steps:
Gather the initial data of the online all user behaviors of mobile interchange, resolve described initial data signaling and agreement, obtain terminal identification information, utilize described terminal identification information to filter out and use the online request of mobile phone terminal initiation and use the online request of mountain vallage machine initiation, directly used the online request that PC operating system is initiated, from the online request that described direct use PC operating system is initiated, filter out the online request using net book and card of surfing Internet to initiate further, remaining online request connects PC online for using mobile phone.
The present invention is by utilizing the http protocol feature in mobile network, by gathering the operation flow of user's online in 2/3G network, and the User-Agent field in http protocol is resolved and analyzed, the terminal type (mobile terminal, card of surfing Internet, net book, PC) of initiation business is finally accurately judged in conjunction with terminal feature storehouse.
Accompanying drawing explanation
The connection of the mobile phone based on the signalling analysis PC online recognition methods flow chart that Fig. 1 provides for the embodiment of the present invention;
Fig. 2 is the user distribution territorial sampling analysis schematic diagram that embodiment of the present invention Zhong Mou community mobile phone connects notebook online.
Embodiment
Below in conjunction with the drawings and specific embodiments, the invention will be further described.
The method of the identification mobile phone connection PC online that the embodiment of the present invention provides mainly utilizes the http protocol feature in mobile network, by gathering the operation flow of user's online in 2/3G network, and the User-Agent field in http protocol is resolved and analyzed, the terminal type (mobile terminal, card of surfing Internet, net book, PC) of initiation business is finally judged in conjunction with terminal feature storehouse.If do not comprise cell phone manufacturer/model/operating system, net book and card of surfing Internet manufacturer/model in the User-Agent information that user's usage data business is submitted in HTTP request, neither mountain vallage machine when, can judge this user be use mobile phone connect PC online.
As shown in Figure 1, present embodiments provide a kind of mobile phone based on signalling analysis and connect PC online recognition methods, comprising:
Step 101, collection initial data.Gather initial data and refer to that all user behaviors online to mobile interchange gather, these data mainly comprise the reciprocal process of movement of mobile network management process, session management flow process and user and media gateway, SP server.
The present embodiment analyzes realization separately based on to Gb, IuPS interface data of GPRS and TD network, only need gather the initial data of any one interface.Use service switch mirror-image fashion to carry out data acquisition, namely required interface data is mirrored to vacant port in existing network operation exchange and exports, use for collection.This mode only need carry out mirror image data on switches, without the need to interrupting service and newly-increased light splitting kind equipment, and is convenient to later maintenance, as affected former port existing network business in mirror port operation or interruption, runs the safest to existing network.
Step 102, parsing signaling and agreement.Parsing signaling and agreement mainly refer to resolves initial data, and therefrom obtains the important information useful to terminal recognition.Specifically, the content of parsing mainly comprises:
(1) Gb/IuPS interface signaling process: comprise packet authentication flow process, create PDP(user dynamic context) flow process, object is IMEI, IMSI(international mobile subscriber identity obtaining user terminal from these two flow processs), three, IP address information.The method of resolving is:
The signaling message that Gb/IuPS interface GMM type of message is 0x13 is filtered, and intercepts the GMM(management level agreement of this message) layer the 9th to the 20th byte, obtain IMEI information;
To Gb/IuPS interface SM(session management) type of message is that the signaling message of 0x10 filters, and to intercept in this message from 0d 88 two bytes the 1st to the 8th byte backward, obtain IMSI information; Intercept from 2b 06 two bytes the 3rd to the 6th byte backward in this message, obtain the IP address information of user.
(2) Gb/IuPS/Gn interface HTTP operation flow: object is agency (User-Agent) information obtaining user terminal from HTTP request.The method of resolving is:
First identifying the message of carrying 504f and 4,745 two successive byte, be respectively HTTP Post and HTTP Get message, then intercept from the byte 5573 to 0d 0a from this two classes message, is User-Agent information.
The online request that step 103, filtration use mobile phone terminal to initiate.
Step 1031, filtration manufacturer terminal.If user uses the mobile terminal accessing GPRS network usage data business (2G is identical with 3G network filter method) of regular manufacturer, clear and definite manufacturer terminal title (as: " Nokia ", " TCL " etc.) then can be matched in the User-Agent information of Client-initiated HTTP request, if match any one terminal producer, then this HTTP request is labeled as " mobile phone terminal initiation ".
Step 1032, filtration terminal operating system.In specific situation, some mobile phones can not reporting terminal producer and model in the User-Agent information initiating HTTP request, only reporting browser and operating system, now with regard to needing, the operating system of mobile phone being mated, to determine whether as the service request that mobile phone terminal is initiated.The operating system be applied at present on mobile phone has PalmOS, Symbian, Windows mobile, Linux and Android, iPhoneOS, bada, MeeGo, blackberry, blueberry nine kinds, therefore HTTP request belonging to it can be labeled as " mobile phone terminal initiation ".
The online request that step 104, filtration use mountain vallage machine to initiate.If when user uses mountain vallage machine to surf the Net, the information of any mobile phone manufacturer, mobile phone model, mobile phone operating system can not be seen in the User-Agent information of HTTP request.When user uses mountain vallage machine to surf the Net, that report in User-Agent information is " MAUI WAP Browser ", and this is also general mountain vallage machine mark.Therefore, the present embodiment will comprise the user ID of " MAUI WAP Browser " for " mountain vallage machine Internet user " in UA.
The online request that step 105, filtration are directly used PC operating system to initiate.When user uses net book, card of surfing Internet or mobile phone to connect PC online, browser and PC operating system version relevant information can only be seen in the User-Agent information of HTTP request.Carry out string matching to User-Agent field, if match the operating system of PC, this request is that mobile phone terminal is initiated scarcely.This step confirms that HTTP request is initiated by PC further, instead of the other-end equipment except mobile phone is initiated.
But specifically net book/card of surfing Internet is initiated, or mobile phone connection PC mode is initiated, and also needs to do further differentiation.
The online request that step 106, filtration use net book/card of surfing Internet to initiate.Can use no by the user of the IMEI information analysis initiation HTTP request of terminal is net book or card of surfing Internet, and concrete grammar is as follows:
Step 1061, according to the IP address carried in HTTP request, by IP address association PDP(user dynamic context) activation process, the IMSI of user can be obtained.
Step 1062, associate Attach(attachment according to IMSI) flow process, in Client-initiated packet authentication encrypted response message, obtain the IMEI information of equipment.
Step 1063, the IMEI information of acquisition and China Mobile's terminal equipment IMEI information bank are carried out the matching analysis, obtain terminal type (net book, card of surfing Internet, mobile phone terminal), service request belonging to net book, card of surfing Internet is labeled as " net book/card of surfing Internet is initiated ".
Filter through above, remaining user uses mobile phone to connect PC online.
To in 300 2G cell sampling analyses, find that there is the situation that 22 communities exist the online of mobile phone connection notebook, account for 7.3% of sampling sum.Wherein, following 5 community mobile phones are had to connect notebook online generation flow larger:
| Cell name | Mobile phone connects PC surfing flow (Kbyte) |
| Jia Li center J1 | 167851.764 |
| Jia Li center J3 | 140699.22 |
| BTV south G2 | 27788.538 |
| Mansion, Xiushui Street M | 25914.36 |
| Happy standing grain International Building M | 17646.378 |
Wlan network construction is carried out in the community of answering emphasis to connect notebook online phenomenon more serious at mobile phone.
The embodiment of the present invention by the method for IMEI and User-Agent association analysis solve exist in prior art terminal type identification, user's network access identification aspect shortcoming.Compared with prior art, there is following technological merit in this motion:
Can analyze with in recognition network access procedure and business use procedure all sidedly, the information such as the terminal type that user uses, terminal brand, terminal models;
Accurately can identify that mobile phone terminal, card of surfing Internet, net book, mobile phone connect multiple user's network accesses such as PC;
Effectively can solve after user revises mobile phone UA information, accurately cannot be identified the problem of mobile phone model by User-Agent.
In a concrete application example, certain economizes data service Optimized Service project by gathering and analyze Gb Interface signaling, and Hot Spot mobile phone being connected to PC online is located, and provides networking and optimize reference to operator.Sampling analysis has been carried out in user distribution region mobile phone in 2G cell being connected to notebook online, and result as shown in Figure 2.
Method of the present invention is not limited to the embodiment described in embodiment, and those skilled in the art's technical scheme according to the present invention draws and other execution mode belongs to technological innovation scope of the present invention equally.
Claims (5)
1. the mobile phone based on signalling analysis connects a PC online recognition methods, it is characterized in that, comprises the following steps:
Gather the initial data of the online all user behaviors of mobile interchange, resolve described initial data signaling and agreement, obtain terminal identification information, utilize described terminal identification information to filter out and use the online request of mobile phone terminal initiation and use the online request of mountain vallage machine initiation, directly used the online request that PC operating system is initiated, from the online request that described direct use PC operating system is initiated, filter out the online request using net book and card of surfing Internet to initiate further, remaining online request connects PC online for using mobile phone;
The method of described parsing initial data signaling and agreement comprises:
The signaling message that Gb/IuPS interface management layer protocol GMM type of message is 0x13 is filtered, and the GMM layer the 9th intercepting this message is to the 20th byte, obtains IMEI information;
The signaling message that Gb/IuPS interface session management SM type of message is 0x10 is filtered, and to intercept in this message from 0d 88 two bytes the 1st to the 8th byte backward, obtain IMSI information; Intercept from 2b 06 two bytes the 3rd to the 6th byte backward in this message, obtain the IP address information of user;
Identifying HTTP Post and HTTP Get message, intercept from the byte 5573 to 0d 0a from this two classes message, is User-Agent information;
The described method filtering out the online request using net book and card of surfing Internet to initiate specifically comprises:
According to the IP address carried in Client-initiated HTTP request, by IP address associated user dynamic context PDP activation flow process, obtain the IMSI of this user;
According to IMSI association attachment Attach flow process, in Client-initiated packet authentication encrypted response message, obtain the IMEI information of equipment;
The IMEI information of acquisition and China Mobile's terminal equipment IMEI information bank are carried out the matching analysis, obtains terminal type, the HTTP request belonging to net book, card of surfing Internet is labeled as " net book/card of surfing Internet is initiated ".
2. the mobile phone based on signalling analysis according to claim 1 connects PC online recognition methods, and it is characterized in that, the method for the initial data of the online all user behaviors of described collection mobile interchange comprises:
Service switch mirror-image fashion is used to gather Gb or the IuPS interface data of 2G and 3G network.
3. method according to claim 1, is characterized in that, described in filter out the method for online request using mobile phone terminal to initiate and specifically comprise:
If match clear and definite manufacturer terminal title in the User-Agent information of Client-initiated HTTP request, then this HTTP request is labeled as " mobile phone terminal initiation ";
If match the operating system of mobile phone in the User-Agent information of Client-initiated HTTP request, then this HTTP request is labeled as " mobile phone terminal initiation ".
4. method according to claim 3, is characterized in that, described in filter out the online request using mountain vallage machine to initiate method specifically comprise:
If matched " MAUI WAPBrowser " in the User-Agent information of Client-initiated HTTP request, then this HTTP request is labeled as " mountain vallage machine Internet user initiation ".
5. method according to claim 4, is characterized in that, described in directly used PC operating system to initiate the method for online request specifically comprise:
If match the operating system of PC in the User-Agent information of Client-initiated HTTP request, then this HTTP request is the online request directly using PC operating system to initiate.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210307156.5A CN102857917B (en) | 2012-08-24 | 2012-08-24 | Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210307156.5A CN102857917B (en) | 2012-08-24 | 2012-08-24 | Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102857917A CN102857917A (en) | 2013-01-02 |
| CN102857917B true CN102857917B (en) | 2015-06-03 |
Family
ID=47404038
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210307156.5A Active CN102857917B (en) | 2012-08-24 | 2012-08-24 | Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102857917B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104702564A (en) * | 2013-12-05 | 2015-06-10 | 华为技术有限公司 | Tethering user identification method and device |
| CN104023046B (en) * | 2014-05-08 | 2018-03-02 | 深信服科技股份有限公司 | Mobile terminal recognition method and device |
| CN104602274A (en) * | 2014-12-05 | 2015-05-06 | 珠海世纪鼎利通信科技股份有限公司 | Method and system for dynamic identification on terminal brand and terminal type |
| CN105656683B (en) * | 2016-02-03 | 2019-05-21 | 北京星网锐捷网络技术有限公司 | A kind of terminal type recognition methods and device |
| CN106658563A (en) * | 2016-11-18 | 2017-05-10 | 北京派网软件有限公司 | Method and device for obtaining mobile terminal identification information |
| CN107995168A (en) * | 2017-11-21 | 2018-05-04 | 江苏神州信源系统工程有限公司 | A kind of method and apparatus based on Google's browser internet behavior audit |
| CN108235303B (en) * | 2017-12-29 | 2020-12-15 | 中国移动通信集团江苏有限公司 | Method, device, equipment and medium for identifying shared flow users |
| CN109257155B (en) * | 2018-11-21 | 2021-01-05 | 南京安讯科技有限责任公司 | Cluster processing optimization system for 3G and 4G mobile phone internet access signaling |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1874560A (en) * | 2005-06-01 | 2006-12-06 | 英华达(上海)电子有限公司 | Safeguard protection system of handset |
| CN101040279A (en) * | 2004-12-21 | 2007-09-19 | 中兴通讯股份有限公司 | System and method for filter rubbish e-mails faced to connection |
| CN101296256A (en) * | 2008-06-19 | 2008-10-29 | 中国电信股份有限公司 | Method and system for implementing accurate information propelling by internet |
| CN101572700A (en) * | 2009-02-10 | 2009-11-04 | 中科正阳信息安全技术有限公司 | Method for defending HTTP Flood distributed denial-of-service attack |
| CN101697529A (en) * | 2009-10-28 | 2010-04-21 | 北京星网锐捷网络技术有限公司 | Method, device and system for treating authentication message |
-
2012
- 2012-08-24 CN CN201210307156.5A patent/CN102857917B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101040279A (en) * | 2004-12-21 | 2007-09-19 | 中兴通讯股份有限公司 | System and method for filter rubbish e-mails faced to connection |
| CN1874560A (en) * | 2005-06-01 | 2006-12-06 | 英华达(上海)电子有限公司 | Safeguard protection system of handset |
| CN101296256A (en) * | 2008-06-19 | 2008-10-29 | 中国电信股份有限公司 | Method and system for implementing accurate information propelling by internet |
| CN101572700A (en) * | 2009-02-10 | 2009-11-04 | 中科正阳信息安全技术有限公司 | Method for defending HTTP Flood distributed denial-of-service attack |
| CN101697529A (en) * | 2009-10-28 | 2010-04-21 | 北京星网锐捷网络技术有限公司 | Method, device and system for treating authentication message |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102857917A (en) | 2013-01-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102857917B (en) | Method for identifying internet access of mobile phone through personal computer (PC) based on signaling analysis | |
| CN101394646B (en) | Software test method and system | |
| CN102932775A (en) | Method and device for carrying out terminal identification by combining IMEI and UA | |
| CN107623754B (en) | WiFi acquisition system and method based on authenticity MAC identification | |
| CN106911523A (en) | The method and system that mobile interchange network users are positioned by LTE indulging in the internet | |
| CN101964813A (en) | Method and system for detecting terminal information in GPRS network | |
| CN104283918A (en) | Method and system for obtaining wireless local area network (WLAN) terminal types | |
| CN103716921A (en) | Intelligent routing equipment-based WIFI instant messaging system and socializing method | |
| CN102752744A (en) | Problem solving method and device for mobile terminal | |
| CN101354706A (en) | Method and apparatus for collecting web page information | |
| CN103124407B (en) | The defining method of mobile subscriber's network access and device | |
| CN107368334B (en) | Business plug-in interaction system and method | |
| CN103491522A (en) | Terminal adaption method and device | |
| CN105007177A (en) | Mapping method of mobile terminal data and fixed network data | |
| CN110034979A (en) | A kind of proxy resources monitoring method, device, electronic equipment and storage medium | |
| CN102045182B (en) | Service fault localization method, device and system | |
| CN103108310A (en) | Mobile terminal function set identification method and platform | |
| CN103024767A (en) | Mobile communication service end-to-end performance evaluation method and system | |
| CN110659006B (en) | Cross-screen display method and device, electronic equipment and readable storage medium | |
| CN110445934A (en) | Call-information processing method, system, terminal and readable storage medium storing program for executing | |
| CN102469450B (en) | Method and device for recognizing virus characteristics of mobile phone | |
| CN105704153B (en) | Method and system for tracking network access information in real time | |
| CN104065490A (en) | System and method for simulating transceiver signaling based on online charging environment | |
| CN105792265A (en) | Malicious traffic detection method and system and monitoring platform | |
| CN107835190A (en) | A kind of malice SP orders check method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |