CN107070887B - Network behavior information processing method and device and cache equipment - Google Patents
Network behavior information processing method and device and cache equipment Download PDFInfo
- Publication number
- CN107070887B CN107070887B CN201710136251.6A CN201710136251A CN107070887B CN 107070887 B CN107070887 B CN 107070887B CN 201710136251 A CN201710136251 A CN 201710136251A CN 107070887 B CN107070887 B CN 107070887B
- Authority
- CN
- China
- Prior art keywords
- network
- monitoring
- base station
- monitored object
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/30—Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/56—Provisioning of proxy services
- H04L67/568—Storing data temporarily at an intermediate stage, e.g. caching
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W8/00—Network data management
- H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
- H04W8/20—Transfer of user or subscriber data
Abstract
The invention discloses a method and a device for processing network behavior information and a cache device. Wherein, the method comprises the following steps: the method comprises the steps that cache equipment acquires network resource information of a monitored object, wherein the cache equipment has an incidence relation with a base station to which the monitored object belongs; the cache device sends the network resource information to the base station, wherein the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to a core network. The invention solves the technical problem that the network access data of the monitored object cannot be accurately acquired when the cache equipment exists.
Description
Technical Field
The invention relates to the technical field of network communication, in particular to a method and a device for processing network behavior information and a cache device.
Background
LI (Law Intercept) refers to interception of telecommunications traffic (including network traffic) within legal limits. Currently, a GSM (Global System for Mobile Communication, Global System for Mobile communications) System, a CDMA (code division multiple access) System, and the like all provide a monitoring interface for implementing lawful monitoring, and a lawful monitoring device is connected with a telecommunication network device in a Mobile Communication System through the monitoring interface to implement monitoring on a user equipment. The monitoring interface mainly comprises a signaling interface and a service interface. In the prior art, when a monitoring object (such as a user terminal device) is monitored by a device such as a base station in a wireless network, the monitoring object directly acquires network resource information from a cache device due to the existence of the cache device, so that the monitoring device cannot accurately monitor data of the monitoring object, and the monitored data is incomplete. For example, the conventional lawful interception operation mode is shown in fig. 1: the LI Gateway (LI Gateway) sends a monitoring task to a Core Network (Core Network) in a signaling (LI Signal) mode, for example, the monitoring task is to monitor a certain terminal, firstly, the Core Network monitors the on-line condition of the terminal, and after the terminal is on-line, the signaling (User Signal) and data (User Traffic) of a data plane are reported to the LI monitoring Gateway in a reporting (LI Report) mode through an interface between the Core Network and the LI monitoring Gateway, so that the whole legal monitoring process is completed.
However, when a Cache (Cache memory) device exists in the network, the original lawful interception process is damaged to some extent, as shown in fig. 2, due to the existence of the Cache device, data (User Traffic) of the terminal data plane may be blocked, that is, the data Traffic of the intercepted terminal may not pass through the core network, the terminal cannot acquire the required network resource information from the Internet, and directly acquire the required network resource information from the Cache device, and the Cache device provides a service for the terminal, so that the core network cannot intercept the data information of the User plane, that is, the original lawful interception process has a problem.
Aiming at the problem that the network access data of the monitored object cannot be accurately acquired when the cache device exists in the prior art, an effective solution is not provided at present.
Disclosure of Invention
The embodiment of the invention provides a method and a device for processing network behavior information, which are used for at least solving the technical problem that network access data of a monitored object cannot be accurately acquired when cache equipment exists.
According to an aspect of the embodiments of the present invention, there is provided a method for processing network behavior information, including: the method comprises the steps that cache equipment acquires network resource information of a monitored object, wherein the cache equipment has an incidence relation with a base station to which the monitored object belongs; the cache device sends the network resource information to the base station, wherein the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to a core network.
Further, the network resource information includes a terminal identifier and an access resource list, where the access resource list is used to record the network resource acquired by the monitoring object from the cache device.
Further, the base station acquires a radio identification code corresponding to the terminal identifier, and generates the network behavior information carrying the radio identification code, the terminal identifier and the access resource list.
Further, the network resource information further includes: and the monitoring object acquires the resource address and/or the resource content of the network resource from the cache device.
Further, when the monitoring objects are multiple and the network resource information of the multiple monitoring objects includes the same resource address, the resource content of the same resource address is obtained, and the network behavior information of the multiple monitoring objects carries a copy of the resource content of the same resource address.
Further, the wireless identification code includes: the International Mobile Subscriber Identity (IMSI) of the monitored object and/or the SIM number of the monitored object.
Further, the step of the cache device obtaining the network resource information of the monitored object includes: detecting whether the cache device generates confirmation information in response to the access request or not under the condition that the monitoring object is monitored to send the access request for accessing the network and the base station is detected to have the cache device; and if the cache device is detected to respond to the access request to generate the confirmation information, acquiring the network resource information from the cache device.
Further, the caching device comprises a cache memory and a device with caching capability.
According to another aspect of the embodiments of the present invention, there is also provided a device for processing network behavior information, including: the system comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for cache equipment to acquire network resource information of a monitored object, and the cache equipment has an association relation with a base station to which the monitored object belongs; and the sending unit is used for sending the network resource information to the base station by the cache device, wherein the base station is used for generating the network behavior information of the monitored object based on the network resource information and reporting the network behavior information of the monitored object to a core network.
According to another aspect of the embodiments of the present invention, there is also provided a cache device, including: a memory, a processor coupled with the memory, the memory and the processor communicating over a bus system; the memory stores a software program; the processor, by executing the software program, is to: acquiring network resource information of a monitored object; and sending the network resource information to a base station.
By the embodiment, the cache device can acquire the network resource information of the monitored object and send the network resource information to the base station after acquiring the network resource information, wherein the base station is used for generating the network behavior information of the monitored object based on the network resource information and reporting the network behavior information of the monitored object to the core network, and the cache device is a cache device having an association relationship with the base station to which the monitored object belongs. According to the embodiment of the invention, the network behavior information of the monitored object can be generated by the base station under the condition that the cache equipment exists, and the network behavior information of the monitored object is reported to the core network, namely, the core network can still acquire the network behavior information of the monitored object, so that the technical problem that the network access data of the monitored object cannot be accurately acquired when the cache equipment exists is solved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:
FIG. 1 is a schematic diagram of a method of processing network behavior information according to the prior art;
FIG. 2 is a schematic diagram of another method of processing network behavior information according to the prior art;
fig. 3 is a first flowchart of an alternative method for processing network behavior information according to an embodiment of the present invention;
FIG. 4 is a schematic diagram of another network behavior information processing method according to an embodiment of the invention;
FIG. 5 is a flow chart diagram two of another alternative network behavior information processing method according to an embodiment of the invention;
FIG. 6 is a block diagram of an alternative network behavior information processing apparatus according to an embodiment of the present invention; and
fig. 7 is a block diagram of another alternative caching device according to embodiments of the invention.
Detailed Description
In order to make the technical solutions of the present invention better understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the invention described herein are capable of operation in sequences other than those illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
In accordance with an embodiment of the present invention, there is provided an embodiment of a method for processing network behavior information, it being noted that the steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer-executable instructions and that, although a logical order is illustrated in the flowchart, in some cases, the steps illustrated or described may be performed in an order different than here.
The terms in the present invention are explained:
cache equipment: the most frequently browsed webpage content is stored at the user terminal and is provided for the user to access at any time, and the source of the content can be monitored at the same time to detect whether the webpage is updated or not and update the stored content synchronously.
A base station: a common mobile communication base station is a form of radio station, which refers to a radio transceiver station that performs information transfer with a mobile phone terminal through a mobile communication switching center in a certain radio coverage area.
IMSI: the International mobile Subscriber Identity is the unique identification number assigned to the mobile Subscriber by the GSM system, is valid in the roaming area, is stored in the SIM card, HLR and VLR, and is transmitted over the wireless access port, i.e. the MAP interface.
A core network: the mobile network can be divided into three parts, namely a base station subsystem, a network subsystem and a system support, and the functions of the mobile network are mainly to provide user connection, user management and service completion bearing and serve as an interface provided by a bearing network to an external network.
Fig. 3 is a first flowchart of an alternative method for processing network behavior information according to an embodiment of the present invention, as shown in fig. 3, the method includes the following steps:
step S302, a cache device obtains network resource information of a monitored object, wherein the cache device is a cache device which has an association relation with a base station to which the monitored object belongs;
step S304, the cache device sends the network resource information to a base station, wherein the base station is used for generating the network behavior information of the monitored object based on the network resource information and reporting the network behavior information of the monitored object to a core network.
By the above embodiment, a cache device (e.g., a cache device) may obtain network resource information of a monitored object, and after obtaining the network resource information, send the network resource information to a base station, where the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to a core network, where the cache device is a cache device having an association relationship with a base station to which the monitored object belongs. According to the embodiment of the invention, the network behavior information of the monitored object can be generated by the base station under the condition that the cache equipment exists, and the network behavior information of the monitored object is reported to the core network, namely, the core network can still acquire the network behavior information of the monitored object, so that the technical problem that the network access data of the monitored object cannot be accurately acquired when the cache equipment exists is solved.
The monitoring object can be a terminal, and the terminal can be a mobile terminal, such as a smart phone, a computer and the like; the base station equipment can acquire the network resource information of the cache equipment, and can acquire the network resource information in an access mode; the Cache device may be a device that stores network resource information within a predetermined time period (e.g., 20 minutes), such as a Cache device, and the Cache device may provide the network resource information to the monitored object, where the cached network resource information may be temporarily stored information, and the stored network resource information may be directly obtained from the internet or may be pre-stored information. Optionally, the network resource information may be network information, such as resource information of texts, videos, pictures and the like in the network; the resource information may be displayed in various ways, for example, in a web page manner, each web page may have corresponding page content, and each web page may have a corresponding IP address or wireless identification number.
Optionally, the core network may be a place where network resource information is stored, the core network may be accessed by a base station, a mobile terminal, and other devices, and the base station device may transmit information content to the core network, where the information content may be network behavior information of a monitored object; the monitoring device, which may be a monitoring gateway such as an LI monitoring gateway, may view network behavior information of the monitored object by accessing the core network. The monitoring gateway may send a monitoring instruction to the core network, where the monitoring instruction is an instruction to perform network behavior monitoring on the monitoring object, and the network behavior may be a behavior of the monitoring object in the network, for example, accessing a web page. After receiving the monitoring instruction, the core network may send a monitoring instruction to the base station device, where the monitoring instruction is used to instruct the base station device to monitor the network behavior of the monitoring device. Optionally, after receiving the monitoring instruction, the base station may determine whether there is a cache device providing network resource information to the monitored object, and if it is determined that there is no cache device, may directly report a network resource access behavior of the monitored object in the internet or the core network to the core network; if the fact that the cache device provides the network resource information for the monitored object is judged, the monitored object can be continuously monitored by the scheme provided by the embodiment of the invention.
Optionally, the monitoring object may perform wireless network communication with the base station device, and may also obtain network resource information from the cache device; the base station device may transmit wireless network information with the monitoring object and the core network, may receive information of the core network, and transmit the information transmitted by the core network to the monitoring object, the base station device may receive an instruction for the monitoring object to acquire network resource information, and may send the instruction for acquiring the network resource information to the core network after receiving the instruction of the monitoring object, or may directly acquire the network resource information from the internet. The buffer device may be a unit or a module in the base station device, or may be a device independent from the base station device.
In another optional implementation manner, in the technical solution provided in step S302, the cache device obtains the network resource information of the monitored object, where the cache device is a cache device that has an association relationship with a base station to which the monitored object belongs. After the monitoring object (such as an intelligent terminal) accesses the network resource information stored in the cache device, the cache device may acquire the network resource information accessed by the monitoring object and send the network resource information to the base station device. Before the cache device sends the network resource information to the base station, the base station device may send a request instruction to the cache device, where the request instruction is used to obtain the network resource information of the monitoring object, and after receiving the instruction, the cache device may send the network resource information accessed by the monitoring object to the cache device, where the network resource information accessed by the monitoring object may be the network information accessed by the monitoring object in a predetermined time period (for example, 10 minutes before receiving the instruction), and an expression form of the instruction may be a code or data.
Optionally, the monitoring object in the above embodiment may include a closed state and an open state, and if the monitoring object is in the closed state, the base station device does not need to obtain the network resource information of the monitoring object from the cache device, and the base station device may be in a rest state; if the monitored object is started, the base station equipment can be started and starts to acquire the network resource information of the monitored object. Alternatively, the base station device may obtain the network resource information of the cache device after obtaining the monitoring instruction (the core network sends the monitoring instruction to the base station device for monitoring the monitored object).
In the technical scheme provided in step S304, the cache device sends the network resource information to the base station, where the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to the core network. The base station device may analyze each piece of network behavior information of the network resource information after acquiring the network resource information, for example, after the monitoring object accesses a web page of the cache device, the cache device may send information of the monitoring object, content of the web page accessed by the monitoring object, and an IP address of the web page to the base station device, where the web page accessed by the monitoring object may be a plurality of web pages, and the cache device may process the content of each web page and the corresponding IP address after acquiring the content and the IP address of each web page to form an access content table and an IP address table, and send the access content table and the IP address table to the base station device; the base station device may generate network behavior information corresponding to information that the monitoring object accesses the network resource after acquiring the content table and the IP address table, where the network behavior information may include basic information of the network resource that the monitoring object accesses, and the basic information includes content or address of the network resource. For example, after acquiring the access content table and the IP address table sent by the cache device, the base station device generates information such as the access content table, the IP address table, and a radio identification number (e.g., IMSI) of the monitoring object corresponding to the monitoring object access network resource information. Optionally, the core network may store the network behavior information, analyze the network behavior information to obtain network resource information accessed by the monitoring object, and send the returned instruction information (e.g., signaling), the network behavior information, or the network interface of the monitoring device to the monitoring center (e.g., an LI monitoring gateway). Here, the instruction information may be an instruction corresponding to a monitoring instruction transmitted from the monitoring center to the core network.
Optionally, the network resource information includes a terminal identifier and an access resource list, where the access resource list is used to record the network resource acquired by the monitoring object from the cache device.
When the monitoring object accesses the network resource information from the cache device, the cache device may record resource information accessed by a terminal in the monitoring object and identification information of the terminal, where the identification information may include a physical address of the terminal, a terminal number (e.g., 001), a terminal name, an identification number (e.g., IMSI), and the like, and send the acquired identification information of the monitoring object and the access resource list to the base station device. Optionally, the accessed resource list may include a list of accessed web page content and IP addresses. The content list in the access resource list comprises content information such as the subject, abstract and main content of the accessed content.
In another alternative embodiment, the base station acquires a radio identifier corresponding to the terminal identifier, and generates network behavior information carrying the radio identifier, the terminal identifier, and the access resource list. The wireless identification code corresponding to the terminal identifier may be an identification code unique to the terminal, and the wireless identification code may be used to indicate the terminal device, that is, when the cache device generates the network behavior information of the monitored object, the cache device may identify which terminal device the network behavior information corresponds to, and each terminal device has a unique identification code (e.g., a 001). When the base station generates the network behavior information according to the network resource information of the monitored object, the base station can form a resource table by the wireless identification code, the terminal identification and the network resource information, and the resource table records the wireless identification code of the terminal equipment, the terminal identification and the network resource information accessed by the terminal, so that the resource table can be sent to the base station.
In another optional implementation, the network resource information further includes: and monitoring the resource address and/or resource content of the network resource acquired by the object from the cache device. In the network resource information, it may be a resource address of a network accessed by the monitoring object and a resource content of the network, and the address and the content may be the resource content and the resource address of the above embodiment, which are not described herein again.
Optionally, when there are multiple monitoring objects, generating the network behavior information carrying the radio identifier, the terminal identifier, and the network resource information includes: and under the condition that the network resource information of the multiple monitoring objects contains the same resource address, acquiring the resource content of the same resource address, wherein the network behavior information of the multiple monitoring objects carries a resource content of the same resource address. In this embodiment, the number of the monitoring objects may be one or more, in the case that there are multiple monitoring objects, networks accessed by the monitoring objects may be the same or different, if the networks accessed by the multiple monitoring objects are different, the network resource information of each monitoring object is recorded, and the recorded network resource information is sent to the base station device, and the base station device may generate the network behavior information of the multiple monitoring objects according to the resource information; if multiple monitoring objects access the network, the network is repeatedly accessed, that is, multiple monitoring objects access the same network, or the number of networks accessed by multiple monitoring objects is the same, for example, 2 monitoring objects access the network a, 3 monitoring objects access the network B, and 2 monitoring objects access the network C. When the network resource information of the multiple monitoring objects contains the same resource address, the resource content or address of the same network can be acquired, the same network resource information corresponding to each monitoring object is formed, and the network resource information is generated into the network behavior information corresponding to each monitoring object. If a plurality of monitoring objects access the same network, the resource information of the monitoring objects accessing the network may be sent to the base station device only once.
Optionally, when the cache device sends the network resource information to the base station device, the cache device may send a part of the resource of the network accessed by the monitoring object, for example, send a title of the network resource, form a title resource table of a main body of the resource of the network accessed by each monitoring object, and send the title resource table, the identification information of the monitoring object, and the identification code to the base station device.
Wherein the wireless identification code includes: the international mobile subscriber identity IMSI of the monitoring object and/or the SIM number of the monitoring object. The wireless identification code may represent basic information of the monitored object and may also identify the monitored object.
In another optional implementation manner, the obtaining, by the cache device, the network resource information of the monitored object includes: detecting whether the cache equipment responds to the access request to generate confirmation information or not under the condition that the monitoring object sends the access request for accessing the network and the base station is detected to have the cache equipment; and if the cache device is detected to generate confirmation information in response to the access request, acquiring the network resource information from the cache device. The base station may include a cache device, or may not include a cache device, and if the base station includes a cache device, it may be detected whether the cache device generates the determination information in response to the access request, where the access request may be a request for the monitoring object to request the cache device of the base station to access the network, and the cache device may determine whether to determine to respond to the request after receiving the request, and after determining the request, may obtain the network resource information when detecting that the cache device generates the determination information in response to the access request; if the base station device does not include the cache device, after receiving the instruction for monitoring the monitored object, the base station device can directly detect the network resource information accessed by the monitored object and generate corresponding network behavior information according to the network resource information.
Further, the caching device includes a cache memory and a device having caching capabilities. The buffer memory may be a memory for storing network resources and basic information of the monitored object, where the basic information may include a wireless identification code, a terminal identifier, and the like of the monitored object, and the buffer memory may store certain network resources and basic information of the monitored object within a predetermined time period, where the predetermined time period may be preset, for example, 20 minutes.
In another optional embodiment, before detecting whether the base station has the cache device, a monitoring task for monitoring the monitored object may also be received, where the monitoring task is sent to the base station after the core network receives the monitoring task of the monitoring gateway and the monitored object is online; and responding to the monitoring task, and monitoring whether the monitoring object sends an access request for accessing the network.
The monitoring task may represent a monitoring instruction sent by the monitoring center, and the monitoring center may monitor the monitored object and send the monitoring instruction to each core network, so that the core network can monitor each monitored object, and the monitoring center may be a monitoring gateway. After receiving the monitoring task, the base station can judge whether the monitored object is online, that is, whether the monitored object opens the network and the behavior of accessing the network exists, if the monitored object is judged to be online, the base station can respond to the monitoring task and monitor whether the monitored object sends a request for accessing the network, and if the monitored object is judged not to be online, the base station equipment does not need to monitor the monitored object.
The present invention is illustrated by the following specific examples.
Fig. 4 is a schematic diagram of another network behavior information processing method according to an embodiment of the present invention, and as shown in fig. 4, in the schematic diagram, a monitoring object may be a terminal 41, a base station device may be a base station 42, a Cache device may be a Cache device 43, a core network 44, a monitoring center is an LI monitoring gateway 45, and an internet 46. In this embodiment of the present invention, the LI monitoring gateway 45 may send a monitoring instruction (LI Signal signaling) to the core network 44, the core network sends the monitoring instruction to the base station 42 after receiving the instruction 44, the base station 42 may receive the monitoring instruction and send a request instruction for acquiring network resource information of the terminal 41 to the cache device 43, the cache device 43 may generate a list of network resources accessed by the terminal 41 after receiving the request instruction, and send the list, the identifier of the terminal 41, and the infinite code to the base station device, where the terminal 41 may send a request (user Signal signaling) for accessing the network to the base station 42, and the cache device 43 in the base station 42 may send the corresponding network resource to the terminal 41 (i.e., user traffic signaling) in response to the network request. After receiving the network resource information of the monitored object of the cache device 43, the base station 41 may sort the network resource information into network behavior information, and report the network behavior information to the core network 44. Alternatively, the core network 44 may send the network behavior of the terminal 41 to the LI monitoring gateway 45 (i.e., LI Report signaling).
Through the above embodiment, after receiving the instruction of the core network 44, the base station may obtain corresponding network behavior information by obtaining the resource information of the access network of the terminal 41 stored in the cache device 43, send the network behavior information of the monitored object to the core network 44, and send the sorted network behavior of the monitored object to the LI monitoring gateway 45.
Fig. 5 is a flowchart of a second alternative method for processing network behavior information according to an embodiment of the present invention, and as shown in fig. 5, the method may be applied to the embodiment shown in fig. 4, and the method includes the following steps:
step S501, the monitoring gateway sends the object and task to be monitored to the core network. The monitored object may be a user terminal, the user terminal may have a user unique identifier such as an IMSI number, a mobile phone number, and the like, the core network starts monitoring the user terminal according to the monitoring task, and the monitoring gateway issues the monitoring task and monitors the network behavior of the user terminal.
Step S503, the core network is responsible for monitoring the online information of the monitored object.
Step S505, the core network issues the corresponding monitoring task to all base stations.
Step S507, monitoring whether the monitored object is online. When the monitored object is on-line, step S509 is executed, the monitored object registers in the core network, and the core network issues a corresponding monitoring task to the base station serving the terminal. When the task is issued, the identification of the monitored object can be mapped to an IP address by the core network for monitoring, and if the task sent to the base station is to monitor a terminal with an IP address of 132.10.3.23, the base station can report the network behavior information of the terminal to the core network. If the monitored object is not on-line, step S511 may be executed.
Step S509, determine whether the base station has a bound or registered Cache device. When a monitored user goes online and performs network activities, if a certain website resource is requested, the base station firstly judges whether the base station has a bound or registered Cache device. If the base station is judged to have the Cache device, step S513 is executed, and if the base station is judged to have no Cache device, step S521 is executed.
The method comprises the steps that whether a base station is bound with a Cache device or not is judged, and the method can be determined by various mechanisms, for example, the Cache and the base station are built together before the network is built, so that the base station can be determined to have the bound Cache device, and the Cache can also be registered on the base station, so that the Cache device and the base station can be determined to be bound; or in the use process of the base station, the corresponding equipment with the Cache capability registers in the base station and informs that the equipment has the Cache capability.
And step S511, not obtaining the network resource information of the Cache equipment.
Step S513, the Cache device receives the network request of the monitored object, and determines whether a network resource corresponding to the network request exists in the device. If the network resource corresponding to the network request exists in the Cache device, step S515 is executed, and if the network resource corresponding to the network request does not exist in the Cache device, step S517 is executed.
Step S515, the network resource content table is sent to the base station. And forming a network resource content table by the address and the access content of the network accessed by the monitoring object, and sending the network resource content table to the base station. The Cache device may respond to the network request sent by the monitored object after acquiring the network request, and send the network resource content to the monitored object, and when serving the monitored object, first, the Cache device turns the network request of the monitored object to the Cache device, so that the Cache device responds to the network request, and sends the network resource information needed by the monitored object to the monitored object.
Optionally, the Cache device sends the user IP and the accessed content resource information to the base station, and the base station receives information such as the corresponding monitoring object IP and IMSI, the mobile phone number, and reports the use network condition of the monitored object to the core network. The reported content can be a user and content list, and the content does not need to be reported directly, so that when a plurality of monitoring objects access the same content, only one piece of content needs to be reported; or downloading a piece of content from the source webpage as data reported by the core network according to the list content.
And step S517, the Cache equipment does not send the resource information of the monitored object to the base station. The base station does not do any action, and the monitoring of the monitored object is completed by the core network.
In step S519, the core network reports the acquired network behavior of the monitored object to the monitoring gateway.
The core network integrates the acquired network resource information with the network resource information uploaded by the Cache equipment and reported by the base station according to the traditional flow, and reports the network behavior of the monitored object to the monitoring gateway to complete the whole monitoring flow.
In step S521, the monitoring information of the user is completed and reported by the core network.
The invention provides a method for accurately monitoring a monitored object by using Cache equipment (namely the Cache equipment) to provide network resources for the monitored object, and simultaneously saving the monitored flow and reducing the network load in the monitoring process.
The Cache device may obtain network resource information of the monitored object after receiving the monitoring instruction, and send the network resource information to the base station after obtaining the network resource information, and the base station may generate network behavior information of the monitored object based on the network resource information and report the network behavior information to the core network. According to the embodiment of the invention, the network behavior information (namely the information of accessing network data) of the monitored object can still be acquired under the condition that the Cache equipment exists, so that the network behavior information of the monitored object is sent to the monitoring network, and the technical problem that the data of the monitored object cannot be accurately acquired due to the existence of the Cache equipment is solved.
Fig. 6 is a block diagram of another alternative network behavior information processing apparatus according to an embodiment of the present invention, as shown in fig. 6, the apparatus includes: an obtaining unit 61, configured to obtain, by a cache device, network resource information of a monitored object, where the cache device is a cache device that has an association relationship with a base station to which the monitored object belongs; and a sending unit 63, configured to send the network resource information to the base station by the cache device, where the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to the core network.
Through the above embodiment, the cache device may obtain the network resource information of the monitored object through the obtaining unit 61, and after obtaining the network resource information, send the network resource information to the base station through the sending unit 63, where the base station is configured to generate the network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to the core network, and the cache device is a cache device having an association relationship with the base station to which the monitored object belongs. According to the embodiment of the invention, the network behavior information of the monitored object can be generated by the base station under the condition that the cache equipment exists, and the network behavior information of the monitored object is reported to the core network, namely, the core network can still acquire the network behavior information of the monitored object, so that the technical problem that the network access data of the monitored object cannot be accurately acquired when the cache equipment exists is solved.
Optionally, the network resource information includes a terminal identifier and an access resource list, where the access resource list is used to record the network resource acquired by the monitoring object from the cache device.
In another alternative embodiment, the base station acquires a radio identifier corresponding to the terminal identifier, and generates network behavior information carrying the radio identifier, the terminal identifier, and the access resource list.
Further, the network resource information further includes: and monitoring the resource address and/or resource content of the network resource acquired by the object from the cache device.
Optionally, when the monitoring objects are multiple and the network resource information of the multiple monitoring objects includes the same resource address, the resource content of the same resource address is obtained, and the network behavior information of the multiple monitoring objects carries a copy of the resource content of the same resource address.
Wherein the wireless identification code includes: the international mobile subscriber identity IMSI of the monitoring object and/or the SIM number of the monitoring object.
In another optional implementation, the obtaining unit includes: the first detection module is used for detecting whether the cache device responds to the access request to generate confirmation information or not under the condition that the monitoring object sends the access request for accessing the network and the base station is detected to have the cache device; the first obtaining module is used for obtaining the network resource information from the cache device under the condition that the cache device is detected to generate the confirmation information in response to the access request.
Optionally, the caching device comprises a cache memory and a device with caching capability.
In another alternative embodiment, the apparatus further comprises: the device comprises a receiving unit and a monitoring unit, wherein the receiving unit is used for receiving a monitoring task for monitoring a monitoring object before a cache device is detected in a base station, and the monitoring task is sent to the base station after a core network receives the monitoring task of a monitoring gateway and the monitoring object is on-line; and the monitoring unit is used for responding to the monitoring task and monitoring whether the monitoring object sends an access request for accessing the network.
Fig. 7 is a structural diagram of another alternative caching device according to an embodiment of the present invention, including: a memory 71, a processor 73 coupled to the memory, the memory 71 and the processor 73 communicating via a bus system; the memory 71 stores a software program; the processor 73 operates by running a software program for: acquiring network resource information of a monitored object; and sending the network resource information to the base station.
Optionally, the processor is further configured to perform the following steps: detecting whether the cache equipment responds to the access request to generate confirmation information or not under the condition that the monitoring object sends the access request for accessing the network and the base station is detected to have the cache equipment; and if the cache device is detected to generate the confirmation information in response to the access request, acquiring the network resource information from the cache device to acquire the network resource information of the monitored object.
The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.
In the above embodiments of the present invention, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.
In the embodiments provided in the present application, it should be understood that the disclosed technology can be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units may be a logical division, and in actual implementation, there may be another division, for example, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, units or modules, and may be in an electrical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic or optical disk, and other various media capable of storing program codes.
The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.
Claims (11)
1. A method for processing network behavior information is characterized by comprising the following steps:
the method comprises the steps that cache equipment acquires network resource information of a monitored object, wherein the cache equipment is equipment which has an incidence relation with a base station to which the monitored object belongs, the network resource information comprises a terminal identifier and an access resource list, and the access resource list is used for recording network resources acquired by the monitored object from the cache equipment;
the cache device sends the network resource information to the base station, wherein the base station is used for generating the network behavior information of the monitored object based on the network resource information and reporting the network behavior information of the monitored object to a core network;
the base station acquires a wireless identification code corresponding to the terminal identification and generates the network behavior information carrying the wireless identification code, the terminal identification and the access resource list;
the cache device obtaining the network resource information of the monitored object comprises:
detecting whether the cache device generates confirmation information in response to the access request or not under the condition that the monitoring object is monitored to send the access request for accessing the network and the base station is detected to have the cache device;
if the cache device is detected to respond to the access request to generate the confirmation information, the network resource information is obtained from the cache device;
before detecting that the base station has the buffer device, the method further includes:
receiving a monitoring task for monitoring the monitored object, wherein the monitoring task is sent to the base station after the core network receives the monitoring task of the monitoring gateway and the monitored object is online;
and responding to the monitoring task, and monitoring whether the monitoring object sends an access request for accessing the network.
2. The method of claim 1, wherein the network resource information further comprises: and the monitoring object acquires the resource address and/or the resource content of the network resource from the cache device.
3. The method according to claim 2, wherein when the monitoring objects are multiple and the network resource information of the multiple monitoring objects includes the same resource address, the resource content of the same resource address is obtained, and the network behavior information of the multiple monitoring objects carries a copy of the resource content of the same resource address.
4. The method of claim 1, wherein the wireless identification code comprises: the International Mobile Subscriber Identity (IMSI) of the monitored object and/or the SIM number of the monitored object.
5. The method of claim 1, wherein the caching device comprises a cache memory and a device with caching capability.
6. An apparatus for processing network behavior information, comprising:
an obtaining unit, configured to obtain, by a cache device, network resource information of a monitored object, where the cache device is a cache device that has an association relationship with a base station to which the monitored object belongs, and the network resource information includes a terminal identifier and an access resource list, where the access resource list is used to record network resources obtained by the monitored object from the cache device;
a sending unit, configured to send the network resource information to the base station by the cache device, where the base station is configured to generate network behavior information of the monitored object based on the network resource information, and report the network behavior information of the monitored object to a core network;
the base station acquires a wireless identification code corresponding to the terminal identification and generates the network behavior information carrying the wireless identification code, the terminal identification and the access resource list;
the acquisition unit includes:
a first detection module, configured to detect whether the cache device generates acknowledgement information in response to an access request when it is monitored that the monitored object sends the access request for accessing the network and it is detected that the base station has the cache device;
a first obtaining module, configured to obtain the network resource information from the cache device when it is detected that the cache device generates the confirmation information in response to the access request;
a receiving unit, configured to receive a monitoring task for monitoring the monitored object before the base station is detected to have the cache device, where the monitoring task is sent to the base station after the core network receives the monitoring task of the monitoring gateway and the monitored object is online;
and the monitoring unit is used for responding to the monitoring task and monitoring whether the monitoring object sends an access request for accessing the network.
7. The apparatus of claim 6, wherein the network resource information further comprises: and the monitoring object acquires the resource address and/or the resource content of the network resource from the cache device.
8. The apparatus according to claim 7, wherein when the monitoring objects are multiple and the network resource information of the multiple monitoring objects includes the same resource address, the resource content of the same resource address is obtained, and the network behavior information of the multiple monitoring objects carries a copy of the resource content of the same resource address.
9. The apparatus of claim 6, wherein the wireless identification code comprises: the International Mobile Subscriber Identity (IMSI) of the monitored object and/or the SIM number of the monitored object.
10. The apparatus of claim 6, wherein the caching device comprises a cache memory and a device with caching capability.
11. A cache device, comprising:
a memory, a processor coupled with the memory, the memory and the processor communicating over a bus system;
the memory stores a software program;
the processor, by executing the software program, is to:
acquiring network resource information of a monitored object, wherein the network resource information comprises a terminal identifier and an access resource list, and the access resource list is used for recording network resources acquired by the monitored object from the cache device;
sending the network resource information to a base station, wherein the base station is used for generating the network behavior information of the monitored object based on the network resource information and reporting the network behavior information of the monitored object to a core network;
the base station acquires a wireless identification code corresponding to the terminal identification and generates the network behavior information carrying the wireless identification code, the terminal identification and the access resource list;
the processor is further configured to, by executing the software program:
detecting whether the cache device generates confirmation information in response to the access request or not under the condition that the monitoring object is monitored to send the access request for accessing the network and the base station is detected to have the cache device;
if the cache device is detected to respond to the access request to generate the confirmation information, the network resource information is obtained from the cache device;
before the cache device is detected in the base station, receiving a monitoring task for monitoring the monitored object, wherein the monitoring task is sent to the base station after the core network receives the monitoring task of the monitoring gateway and the monitored object is on-line;
and responding to the monitoring task, and monitoring whether the monitoring object sends an access request for accessing the network.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710136251.6A CN107070887B (en) | 2017-03-08 | 2017-03-08 | Network behavior information processing method and device and cache equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710136251.6A CN107070887B (en) | 2017-03-08 | 2017-03-08 | Network behavior information processing method and device and cache equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107070887A CN107070887A (en) | 2017-08-18 |
| CN107070887B true CN107070887B (en) | 2020-12-11 |
Family
ID=59622604
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710136251.6A Active CN107070887B (en) | 2017-03-08 | 2017-03-08 | Network behavior information processing method and device and cache equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107070887B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116456277B (en) * | 2023-05-12 | 2023-10-27 | 广东工贸职业技术学院 | 5G mobile communication control method |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102204324A (en) * | 2011-04-27 | 2011-09-28 | 华为技术有限公司 | Method and device for improving user access speed of mobile broadband internet |
| CN104023355A (en) * | 2014-05-15 | 2014-09-03 | 北京邮电大学 | Wireless communication network system based on centralized control and content distribution |
| CN105744519A (en) * | 2016-03-17 | 2016-07-06 | 北京佰才邦技术有限公司 | Monitoring method, core network device and base station |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP2856734A1 (en) * | 2012-06-04 | 2015-04-08 | Interdigital Patent Holdings, Inc. | Lawful interception for local selected ip traffic offload and local ip access performed at a non-core gateway |
-
2017
- 2017-03-08 CN CN201710136251.6A patent/CN107070887B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102204324A (en) * | 2011-04-27 | 2011-09-28 | 华为技术有限公司 | Method and device for improving user access speed of mobile broadband internet |
| CN104023355A (en) * | 2014-05-15 | 2014-09-03 | 北京邮电大学 | Wireless communication network system based on centralized control and content distribution |
| CN105744519A (en) * | 2016-03-17 | 2016-07-06 | 北京佰才邦技术有限公司 | Monitoring method, core network device and base station |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107070887A (en) | 2017-08-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102917425B (en) | Operator network switching method and device | |
| JP3686038B2 (en) | Method and system for obtaining identification information about a party monitored in a communication network | |
| CN103209402A (en) | Method and system for determining accessibility of terminal group | |
| CN108200568B (en) | Mobile communication electronic SIM card data processing method and device | |
| CN104113842B (en) | Method, device, server and mobile terminal for identifying pseudo wireless network access point | |
| CN105307169A (en) | Access method, device and system for guest network | |
| CN104219671A (en) | Base station detection method and device and server | |
| CN104954431A (en) | Network selection method, device and system | |
| CN107182098A (en) | For realizing the method and apparatus that user equipment switches between WAP | |
| CN110868436B (en) | Internet of things data acquisition method and device | |
| US10045175B2 (en) | Handling device generated data | |
| CN104348841A (en) | Content delivery method, analysis and management and control system and content delivery network system | |
| CN108901035A (en) | The recognition methods of internet-of-things terminal and device | |
| CN107241300A (en) | The hold-up interception method and device of user's request | |
| CN107070887B (en) | Network behavior information processing method and device and cache equipment | |
| CN102918877B (en) | A kind of method of lower short-message sending, system and SMS service center | |
| CN105246125B (en) | A kind of access control method and terminal | |
| CN103313245B (en) | Based on the Network access method of mobile phone terminal, equipment and system | |
| EP2725830B1 (en) | Method and system for triggering response of terminal, terminal and network side | |
| CN101867934A (en) | System and method for detecting clone machine | |
| CN104284335A (en) | Identification method and system for pseudo source garbage multimedia message | |
| CN110719586B (en) | Service establishing method, device and server | |
| CN109429262A (en) | A kind of detection method of hot spot, the network equipment and computer readable storage medium | |
| CN102572807A (en) | Device and method for automatically acquiring mobile phone terminal equipment model | |
| CN104753969B (en) | The synchronous method and device of Contents of clipboard information |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address |
Address after: Floors 9 and 10, building 1, zone 1, No. 81, Beiqing Road, Haidian District, Beijing 100085 Patentee after: Beijing baicaibang Technology Co.,Ltd. Address before: 100085 Beijing Haidian District city information industry base development road 1, 3 tier 3001 Patentee before: Beijing Bai Caibang Technology Co.,Ltd. |
|
| CP03 | Change of name, title or address |