CN104506591A - Target IP (Internet protocol) geographic position locating method based on nearest common router - Google Patents

Abstract

The invention relates to a target IP (Internet protocol) geographic position locating method based on a nearest common router. The method can effectively solve the problems that the errors are great, the precision is low, and the actual requirements cannot be met. The method comprises the following steps that a time delay detection packet and a path detection packet are used, and the time delay and the path information from a detection source to a target IP and a landmark node are measured; the path information from the detection source to the target landmark node is used for finding a landmark with the nearest common router as the target; the time delay from the detection source to the landmark and the router is used, and the time delay between the landmark and the router is calculated; the time delay and the position information of the landmark are used, and a conversion coefficient of the distance restraint and the time delay between the router and the landmark are calculated on the basis of the cosine law; the time delay and the conversion coefficient are used for calculating the distance between the router and the landmark; the position of the nearest router is calculated on the basis of three-point locating, and is used as the locating value of the located position of the target IP. The method has the advantages that the operation is easy, the use is convenient, the effect is good, and the locating precision on the target IP can be improved.

Description

A kind of Target IP geographic position locating method based on nearest common router

Technical field

The present invention relates to field of information security technology, particularly a kind of Target IP geographic position locating method based on nearest common router.

Background technology

Network entity geo-location is a kind of important network application new technology, can provide a network node in the geographical position of certain granularity level, locate also referred to as IP.IP location technology, as the basis of facing position service (location-based service, LBS), is widely used, as provided the targeted ads for region crowd according to the geographical position of user; Based on self-adaptative adjustment website, the geographical position display language of visitor, analyze Web page access log and extract marketing data, the deployment strategy of formulation network infrastructure and trouble-shooting node etc.Therefore, carry out IP location technology and there is important research meaning.

The existing open instrument that positioning service is provided on the Internet, as IP2Location, Maxmind, Quova and Geobytes etc., the usual poor reliability of positioning result of these instruments, error is larger, its positioning result obtained on national granularity level is believable, but cannot ensure the accuracy at City-level.The existing research about IP location technology can be divided into two classes, and a class is the localization method having cooperation, and a class is the localization method without cooperation.The former depends on the geographical position that existing log-on message (as the data that Whois database, domain-name information and Virtual network operator provide) obtains Target IP, and these class methods are subject to the impacts such as log-on message is incomplete, poor in timeliness, and position error is larger; The latter can under the condition helped without Virtual network operator, come to locate it with the time delay of destination node by measuring, sometimes also can in conjunction with other information of topological sum, orient the geographical position of Target IP, but these class methods exist in actual applications, and error is large, precision is low, can not meet actual needs, therefore, develop new localization method imperative.

Summary of the invention

For above-mentioned situation, for overcoming the defect that prior art exists, the object of the present invention is just to provide a kind of Target IP geographic position locating method based on nearest common router, and effectively can solve error large, precision is low, meets unpractiaca needs problem.

The technical scheme that the present invention solves is, in actual the Internet, Target IP is all distributed in around last-hop Router usually, and the center that the geographical position of this router normally Target IP may distribute, the present invention proposes the Target IP location positioning method based on nearest common router, its basic thought is: when the terrestrial reference number that the common recently router when between target with terrestrial reference is connected is no less than 3, according to the time delay between this router and coupled terrestrial reference, the geographical position of router can be determined, and this position can be used as the position locator value of Target IP, the Geographic mapping of realize target IP.Accordingly, the technical scheme that the present invention solves utilizes delay detection bag and path detection bag, records from detection source to Target IP and the internodal time delay of terrestrial reference and routing information; Utilize detection source to the routing information of target and terrestrial reference, find out the terrestrial reference with target with common router recently; Utilize from detection source to terrestrial reference and the time delay of this router, calculate the time delay between terrestrial reference and this router; Utilize the positional information of time delay and terrestrial reference, calculate the conversion coefficient of time delay and distance restraint between this router and terrestrial reference based on the cosine law; Utilize time delay and conversion coefficient, calculate the distance between this router and terrestrial reference; Calculate the position of common router recently based on three-point fix, and it can be used as the locator value of Target IP position.

The inventive method is easy to operate, easy to use, effective, for each common router recently calculates the conversion coefficient of its time delay to distance restraint respectively, is expected to overcome the position error problem bigger than normal adopting fixed conversion coefficient to bring to a certain extent; Utilize common time delay between router and terrestrial reference recently to calculate distance restraint, eliminate the cumulative errors adopting and bring relative time delay; The terrestrial reference that the nearest common router of utilization directly connects is to calculate the position of this router, and avoid existing method and adopt locate the error caused minimum relative time delay, experiment shows that the method has validity, can improve the positioning precision to Target IP.

Accompanying drawing explanation

Fig. 1 is router of the present invention and terrestrial reference positioning relation figure.

Fig. 2 is the Target IP position location algorithms error analysis figure that the present invention is based on nearest router.

Fig. 3 is the network coordinate range prediction figure of the present invention's two dimension Euclidean space.

Fig. 4 is hierarchy schematic diagram of the present invention.

Embodiment

Below in conjunction with concrete condition, the specific embodiment of the present invention is elaborated.

Shown in Fig. 1-4, the present invention, in concrete enforcement, is provide by with under type:

Based on a Target IP geographic position locating method for nearest common router, be utilize delay detection bag and path detection bag, record from detection source to Target IP and the internodal time delay of terrestrial reference and routing information; Utilize detection source to the routing information of target and terrestrial reference, find out the terrestrial reference with target with common router recently; Utilize from detection source to terrestrial reference and the time delay of this router, calculate the time delay between terrestrial reference and this router; Utilize the positional information of time delay and terrestrial reference, calculate the conversion coefficient of time delay and distance restraint between this router and terrestrial reference based on the cosine law; Utilize time delay and conversion coefficient, calculate the distance between this router and terrestrial reference; Calculate the position of common router recently based on three-point fix, and it can be used as the locator value of Target IP position;

Concrete steps are as follows:

(1), measure from detection source to terrestrial reference and the path of Target IP, obtain the intermediate router interface message from detection source to destination node, identify and multiple interface IP addresses of merging router;

(2), find all common routers appeared on terrestrial reference and destination path, the router that wherein the upper distance objective of topology is nearest is common router recently;

(3), to measure from detection source to terrestrial reference, the time delay of common router and Target IP recently, when having multiple terrestrial reference with when common router is directly connected recently, therefrom select the terrestrial reference alternatively terrestrial reference that 3 time delays are less;

(4) time delay of common router recently and distance conversion coefficient, is calculated:

Target IP entity is denoted as T, and common router is denoted as R recently, and 3 terrestrial references chosen are denoted as A, B and C, and the distance of A and B is d ₁, the distance of A and C is d ₂, the distance of B and C is d ₃, the relative time delay of R and A, B, C is respectively t ₁, t ₂and t ₃if the relative time delay between R and terrestrial reference and the conversion coefficient of distance restraint are δ, then the distance of R and A, B, C is respectively δ t ₁, δ t ₂with δ t ₃, ∠ BAR=α, ∠ RAC=β, the position due to A, B, C is known, then triangle ABC is well-determined, and namely ∠ BAC is constant, then from the cosine law:

α=arccos ((d ₁ ²+ (δ t ₁) ²-(δ t ₂) ²)/(2 δ d ₁t ₁)) formula (1)

β=arccos (((δ t ₁) ²+ d ₂ ²-(δ t ₃) ²)/(2 δ d ₂t ₁)) formula (2)

∠ BAC=arccos ((d ₁ ²+ d ₂ ²-d ₃ ²)/(2d ₁d ₂)) formula (3)

Because ∠ BAC=∠ BAR+ ∠ RAC=alpha+beta, bring formula (1 ~ 3) into, can equation be obtained:

Arccos ((d ₁ ²+ d ₂ ²-d ₃ ²)/(2d ₁d ₂))=arccos ((d ₁ ²+ (δ t ₁) ²-(δ t ₂) ²)/(2 δ d ₁t ₁))+arccos (((δ t ₁) ²+ d ₂ ²-(δ t ₃) ²)/(2 δ d ₂t ₁)) formula (4)

In formula (4), only have conversion coefficient δ to be unknown number, solve this equation, the conversion coefficient of recently common time delay between router and terrestrial reference and distance can be obtained, when equation obtains multiple explanation, only get equation normal solution, choose the value of minimum positive number solution as conversion coefficient δ;

(5), location common router recently:

Calculate the common time delay of router and the conversion coefficient of distance restraint recently, obtain following 3 listed equations:

Distance (lat ₁, lng ₁, x, y) and=r ₁formula (5)

Distance (lat ₂, lng ₂, x, y) and=r ₂formula (6)

Distance (lat ₃, lng ₃, x, y) and=r ₃formula (7)

Wherein lat ₁for the latitude of terrestrial reference A, lng ₁for the longitude of terrestrial reference A; lat ₂for the latitude of terrestrial reference B, lng ₂for the longitude of terrestrial reference B; lat ₃for the latitude of terrestrial reference C, lng ₃for the longitude of terrestrial reference C; r ₁for the distance of R to A, be designated as r ₁=δ t ₁; r ₂for the distance of R to B, be designated as r ₂=δ t ₂; r ₃for the distance of R to C, be designated as r ₃=δ t ₃; Distance (lat _i, lng _i, lat _j, lng _j) be adopt Vincenty ' s formulae discovery point (lat _i, lng _i) and point (lat _j, lng _j) between distance, solution of equations x, y are respectively latitude and the longitude of recently common router R, and carry out multiple bearing calculating, obtain mean error, to reduce position error, ensure registration.

In order to ensure registration, will analyze mean error, the computational methods of mean error are as follows: to as shown in Figure 2, the localization method based on the shortest relative time delay be by target localization to a certain terrestrial reference position dropped in circle, when there being n terrestrial reference, be denoted as L ₁... L _n, i-th terrestrial reference L _ibe d with the distance of target T _e(L _i, T), the distribution due to terrestrial reference can regard and be uniformly distributed then have d as _e(L _i, T) and ∈ [0, ε+r], can by d _e(L _i, T) and regard one group of even value on [0, ε+r] as, and the probability of each value is 1/n, therefore, when the mean error of the location algorithm based on the shortest relative time delay is d _mean, then have:

$\begin{array}{c}{d}_{\mathrm{mean}}=E\left(d_e(L_i,T)\right)=\frac{1}{n}\underset{i=1}{\overset{n}{\mathrm{\Σ}}}\mathrm{de}(\mathrm{Li},T)=\frac{1}{n}\underset{i=1}{\overset{n}{\mathrm{\Σ}}}\frac{i(\mathrm{\ϵ}+r)}{n}\\ =\frac{1}{n}(\frac{\mathrm{\ϵ}+r}{n}+\frac{2(\mathrm{\ϵ}+r)}{n}+...+(\mathrm{\ϵ}+r))\\ =\frac{1}{n}\left(\frac{\mathrm{\ϵ}+r}{n}(1+2+...+n)\right)\\ =\frac{(\mathrm{\ϵ}+r)(n+1)}{2n}\end{array}$ Formula (8)

Different from the algorithm based on the shortest relative time delay, based on the Target IP position location algorithms of nearest common router, for router R calculates the conversion coefficient of its time delay and distance restraint, thus the distance r that can obtain between each terrestrial reference and R, when the terrestrial reference number be connected with R is no less than 3, the location, position of R can be obtained based on three-point fix, and using the positioning result of this position locator value as target T, location, Target IP position based on nearest common router is to R position by target localization, position error is ε, due to ε≤r, therefore have:

$\mathrm{\&epsiv;}\&le;\frac{\mathrm{\&epsiv;}+r}{2}<\frac{(\mathrm{\&epsiv;}+r)(n+1)}{2n}=d_{\mathrm{mean}}$ Formula (9)

Namely the location algorithm based on the shortest relative time delay is less than based on the mean error of the nearest Target IP position location algorithms of common router.

The present invention is through practical application, and prove that Target IP position position error is little, precision is high, through cumulative errors analysis, shows the time delay value t adopted based on the localization method in relative time delay _i' (i=1,2,3), be terrestrial reference and the time delay t recently between common router _i' (i=1,2,3) add target and the time delay t gained recently between common router, in actual the Internet, the impact of the factor such as network congestion and Routing Protocol, t _iinherently there is error with the location of t, the addition of above-mentioned two time delays can produce more cumulative errors, this cause tradition based on relative time delay position error comparatively, and based on the present invention propose method, only utilize t _iimplement location, only introduce first-order error, therefore can improve the precision of location;

Analyzed by worst error simultaneously, show not consider the angle of target relative to terrestrial reference and common router based on the method in the shortest relative time delay, to terrestrial reference, the distribution situation as shown in Figure 1 of target and recently common router, when being less than the relative time delay with other four terrestrial references of T in relative time delay of target T and terrestrial reference L, based on method in the shortest relative time delay, target T is navigated to terrestrial reference L position, but in fact terrestrial reference L is five terrestrial reference mid-range objectives terrestrial references farthest, the now corresponding worst error ε+r of positioning result, for the situation shown in Fig. 1 equally, Target IP location positioning method based on nearest common router chooses 3 terrestrial references in figure, relative time delay according to these three terrestrial references and R locates R position, again using the position locator value of this position as target T, position error is ε, because ε < ε+r obviously sets up, the worst error based on the Target IP location positioning method of common router recently that known the present invention proposes is less than based on method in the shortest relative time delay.In order to verification algorithm validity, test respectively in same city, detection source and target in detection source and target in the situation of two kinds, different cities, regarding assay checking situation data is as follows:

Detection source and target are in same city: to target 120.194.19.227 and 120.194.19.229, there are 6 to have the terrestrial reference of common router with target, thus can be calculated the conversion coefficient δ of two groups of time delays and distance according to equation (4), be respectively [30.2704,-30.2704,21.2643 ,-21.2643] and [7.4086 ,-7.4086,2.5137,-2.5137], because transformation ratio can not be negative, therefore the normal solution of equation is got.By four positive number solutions [30.2704, .2643,7.4086,2.5137] equation (5 ~ 7) is brought into, the position of the nearest common router one 20.194.30.42 of gained is respectively (34.4394,112.8683), (34.3076,112.6946), (34.255,113.274) and (34.3885,113.2277), in this, as positioning result and the position error (unit of error is km) as shown in table 1 that the shortest relative time delay, algorithm obtained of two Target IPs.

Table 1 120.194.19.227 and 120.194.19.229 is based on the position error of the shortest relative time delay with nearest common router

Because δ refers to the conversion coefficient of relative time delay and distance, only get the normal solution of equation, based on the position error display of the target that positive number solution obtains, the value of δ is less, and position error is less.Therefore, when equation (4) obtains multiple solution, the value of minimum positive number solution as δ is chosen.

Detection source and target are positioned at different cities: for target 218.78.244.151 and 218.78.244.158, 3 are had to have the terrestrial reference of common router with target, thus be [1.3921 according to the conversion coefficient δ that formula (4) can be calculated time delay and distance,-1.3921, 1.2856,-1.2856], by normal solution [1.3921, 1.2856] formula (5 ~ 7) is brought into, the position obtaining common router two 18.78.244.253 is recently respectively (31.2844, 121.53225) and (31.2661, 121.53165), position in this, as 2 Target IPs is located, corresponding position error (unit of error is km) as shown in table 2.

The positioning result of table 2 218.78.244.151 and 218.78.244.158

From the above, the present invention be directed to the existing problem excessive based on the Target IP positioning method error in the shortest relative time delay, its core technology is that relative time delay is located with nearest common router with the calculating of distance conversion coefficient, the present invention considers in actual internet environment, Target IP entity is all distributed in around last-hop Router usually, and the center that the geographical position of this router normally Target IP may distribute, propose the Target IP location positioning method based on common router recently.Its basic thought is: when being no less than 3 with (between Target IP with terrestrial reference IP) terrestrial reference number that common router is connected recently, according to the time delay between this router and coupled terrestrial reference, can determine the geographical position of router, and this position can be used as the position locator value of Target IP.Error analysis and experimental result show, the method that the present invention proposes can eliminate cumulative errors, effectively can reduce the mean error of positioning result, improve the positioning precision to Target IP, have very strong practicality, easy to operate, error is little, precision is high, is that on Target IP geographic position locating method innovates greatly.

Claims (3)

1. the Target IP geographic position locating method based on nearest common router, it is characterized in that, in actual the Internet, Target IP is all distributed in around last-hop Router usually, and the center that the geographical position of this router normally Target IP may distribute, the present invention proposes the Target IP location positioning method based on nearest common router, its basic thought is: when the terrestrial reference number that the common recently router when between target with terrestrial reference is connected is no less than 3, according to the time delay between this router and coupled terrestrial reference, the geographical position of router can be determined, and this position can be used as the position locator value of Target IP, the Geographic mapping of realize target IP.

2. the Target IP geographic position locating method based on nearest common router according to claim 1, is characterized in that, comprise the following steps:

(1), measure from detection source to terrestrial reference and the path of Target IP, obtain the intermediate router interface message from detection source to destination node, identify and multiple interface IP addresses of merging router;

(2), find all common routers appeared on terrestrial reference and destination path, the router that wherein the upper distance objective of topology is nearest is common router recently;

(3), to measure from detection source to terrestrial reference, the time delay of common router and Target IP recently, when having multiple terrestrial reference with when common router is directly connected recently, therefrom select the terrestrial reference alternatively terrestrial reference that 3 time delays are less;

(4) time delay of common router recently and distance conversion coefficient, is calculated:

Target IP entity is denoted as T, and common router is denoted as R recently, and 3 terrestrial references chosen are denoted as A, B and C, and the distance of A and B is d ₁, the distance of A and C is d ₂, the distance of B and C is d ₃, the relative time delay of R and A, B, C is respectively t ₁, t ₂and t ₃if the relative time delay between R and terrestrial reference and the conversion coefficient of distance restraint are δ, then the distance of R and A, B, C is respectively δ t ₁, δ t ₂with δ t ₃, ∠ BAR=α, ∠ RAC=β, the position due to A, B, C is known, then triangle ABC is well-determined, and namely ∠ BAC is constant, then from the cosine law:

α=arccos ((d ₁ ²+ (δ t ₁) ²-(δ t ₂) ²)/(2 δ d ₁t ₁)) formula (1)

β=arccos (((δ t ₁) ²+ d ₂ ²-(δ t ₃) ²)/(2 δ d ₂t ₁)) formula (2)

∠ BAC=arccos ((d ₁ ²+ d ₂ ²-d ₃ ²)/(2d ₁d ₂)) formula (3)

Because ∠ BAC=∠ BAR+ ∠ RAC=alpha+beta, bring formula (1 ~ 3) into, can equation be obtained:

arccos((d ₁ ²+d ₂ ²-d ₃ ²)/(2d ₁d ₂))＝arccos((d ₁ ²+(δt ₁) ²-(δt ₂) ²)/(2δd ₁t ₁))+

Arccos (((δ t ₁) ²+ d ₂ ²-(δ t ₃) ²)/(2 δ d ₂t ₁)) formula (4)

In formula (4), only have conversion coefficient δ to be unknown number, solve this equation, the conversion coefficient of recently common time delay between router and terrestrial reference and distance can be obtained, when equation obtains multiple explanation, only get equation normal solution, choose the value of minimum positive number solution as conversion coefficient δ;

(5), location common router recently:

Calculate the common time delay of router and the conversion coefficient of distance restraint recently, obtain following 3 listed equations:

Distance (lat ₁, lng ₁, x, y) and=r ₁formula (5)

Distance (lat ₂, lng ₂, x, y) and=r ₂formula (6)

Distance (lat ₃, lng ₃, x, y) and=r ₃formula (7)

Wherein lat ₁for the latitude of terrestrial reference A, lng ₁for the longitude of terrestrial reference A; lat ₂for the latitude of terrestrial reference B, lng ₂for the longitude of terrestrial reference B; lat ₃for the latitude of terrestrial reference C, lng ₃for the longitude of terrestrial reference C; r ₁for the distance of R to A, be designated as r ₁=δ t ₁; r ₂for the distance of R to B, be designated as r ₂=δ t ₂; r ₃for the distance of R to C, be designated as r ₃=δ t ₃; Distance (lat _i, lng _i, lat _j, lng _j) be adopt Vincenty ' s formulae discovery point (lat _i, lng _i) and point (lat _j, lng _j) between distance, solution of equations x, y are respectively latitude and the longitude of recently common router R, and carry out multiple bearing calculating, obtain mean error, to reduce position error, ensure registration.

3. the Target IP geographic position locating method based on nearest common router according to claim 2, it is characterized in that, the computational methods of described mean error are, localization method based on the shortest relative time delay is to a certain terrestrial reference position dropped in circle by target localization, when there being n terrestrial reference, be denoted as L ₁... L _n, i-th terrestrial reference L _ibe d with the distance of target T _e(L _i, T), the distribution due to terrestrial reference can regard and be uniformly distributed then have d as _e(L _i, T) and ∈ [0, ε+r], can by d _e(L _i, T) and regard one group of even value on [0, ε+r] as, and the probability of each value is 1/n, therefore, when the mean error of the location algorithm based on the shortest relative time delay is d _mean, then have:

$\begin{array}{c}{d}_{\mathrm{mean}}=E\left(d_e(L_i,T)\right)=\frac{1}{n}\underset{i=1}{\overset{n}{\mathrm{\&Sigma;}}}\mathrm{de}(\mathrm{Li},T)=\frac{1}{n}\underset{i=1}{\overset{n}{\mathrm{\&Sigma;}}}\frac{i(\mathrm{\&epsiv;}+r)}{n}\\ =\frac{1}{n}(\frac{\mathrm{\&epsiv;}+r}{n}+\frac{2(\mathrm{\&epsiv;}+r)}{n}+...+(\mathrm{\&epsiv;}+r))\\ =\frac{1}{n}\left(\frac{\mathrm{\&epsiv;}+r}{n}(1+2+...+n)\right)\\ =\frac{(\mathrm{\&epsiv;}+r)(n+1)}{2n}\end{array}$ Formula (8)

Different from the algorithm based on the shortest relative time delay, based on the Target IP position location algorithms of nearest common router, for router R calculates the conversion coefficient of its time delay and distance restraint, thus the distance r that can obtain between each terrestrial reference and R, when the terrestrial reference number be connected with R is no less than 3, the location, position of R can be obtained based on three-point fix, and using the positioning result of this position locator value as target T, location, Target IP position based on nearest common router is to R position by target localization, position error is ε, due to ε≤r, then:

$\mathrm{\&epsiv;}\&le;\frac{\mathrm{\&epsiv;}+r}{2}<\frac{(\mathrm{\&epsiv;}+r)(n+1)}{2n}=d_{\mathrm{mean}}$ Formula (9)

Namely the location algorithm based on the shortest relative time delay is less than based on the mean error of the nearest Target IP position location algorithms of common router.