CN1905408A - Method and apparatus for monitoring message - Google Patents

Method and apparatus for monitoring message Download PDF

Info

Publication number
CN1905408A
CN1905408A CN 200610062011 CN200610062011A CN1905408A CN 1905408 A CN1905408 A CN 1905408A CN 200610062011 CN200610062011 CN 200610062011 CN 200610062011 A CN200610062011 A CN 200610062011A CN 1905408 A CN1905408 A CN 1905408A
Authority
CN
China
Prior art keywords
monitoring
short message
message
unit
smsc
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN 200610062011
Other languages
Chinese (zh)
Other versions
CN100571074C (en
Inventor
杨志军
刘继华
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB2006100620118A priority Critical patent/CN100571074C/en
Publication of CN1905408A publication Critical patent/CN1905408A/en
Application granted granted Critical
Publication of CN100571074C publication Critical patent/CN100571074C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention provides a short message instant monitoring method and device. And the method mainly comprises: a user sends short messages to SMSC (short message scheduling center); before the short messages reach SMSC, they are firstly sent to a short message stage monitoring device; the short message stage monitoring device monitors the short messages by stages; after monitored by stages, the short messages are divided into garbage short messages and normal ones; the users who transmit garbage short messages are processed correspondingly and the garbage short messages are deleted; the normal short message is sent to SMSC, and the flow is counted and when the flow exceeds the given threshold, the user who transmits the normal short message will be correspondingly processed and the unsent normal short message is not sent any more.

Description

A kind of method and apparatus of message monitoring
Technical field
The present invention relates to communication field, more particularly, the present invention relates to a kind of data transport services method for supervising and device.
Background technology
Short message is a present radio communication data transport services commonly used.It utilizes signaling link to realize that point-to-point message transmits, and is a kind of non real-time reliable information transfer service.
Refuse messages is meant certain client MS (Mobile Station outside netting interior or netting, mobile phone, travelling carriage) number sends, have the information of illegal or the unhealthy information content or without the receiver allows to the information of commerce, advertising message or the other guide of mobile phone target group mass-sending.
Along with progress of science and technology, mobile phone universal day by day, short message service is also flourish, and the short message flow shows the explosion type development.Meanwhile, the quantity of refuse messages also increases greatly, brings grievous injury and influence for the note operator.Note operator takes measures refuse messages monitored and meets its vital interests, and can improve its service level.
Note operator is general to be required to provide the note sender is carried out traffic monitoring, short message content is being required under tight each the situation, the measure of specifically taking has per hour flow of the calling subscriber of inspection, every day flow, short message content is being had under the situation of certain requirement for restriction, also will monitor short message content, major measure is for being checked the coupling sensitive words.
In the prior art, at refuse messages, there is the part system to provide to refuse messages immediately monitoring mechanism.As shown in Figure 1, the short message that the sender of the message sends, be not directly to send to SMSC (ShortMessage Service Center, Short Message Scheduling Center), filter but deliver to the message monitoring module earlier, by after the filtration of this module short message being divided into two classes, junk information is with processed, normal message then can be sent to SMSC, accepts the user by the SMSC information of being issued to.
The shortcoming of this method is: along with the increase of present short message service amount, increasing of number of mobile phone users carried out immediately monitoring to all message before the SMSC dispatching down distributing, and monitoring institute consumption can be very serious.The monitoring analysis elapsed time is long; whole message is very obvious from sending to the reception time-delay, and to monitoring analysis machine processing performance, stability requires high; in case handling appears unusual or have little time in preposition monitoring module, SMSC will not receive message or clogged with messages in the monitoring module front.
In the prior art, also have the part system to provide to refuse messages monitoring mechanism afterwards.As shown in Figure 2, after message sends, directly deliver to SMSC and be handed down to message recipient, in the SMSC issuing message or after issuing, the message copying of ticket after short message issuing finished or SMSC distribution sends to monitoring module afterwards, after monitoring module drew analysis result, number was delivered to battalion's account (at this moment this user's SMS is cancelled, and submission can not be successful in violation of rules and regulations respectively.Specifically please refer to related data) or sms center blacklist (at this moment this user can submit message to, but SMSC can not issue this user's message) processing.
The shortcoming of this method is: message is carried out subsequent supervision mechanism, and message analysis finishes when sending to the processing of SMSC blacklist by the time, and rubbish message may issue successfully.Can't in time stop up the propagation of refuse messages.
Summary of the invention
In view of above-mentioned existing in prior technology problem, the method and apparatus that the purpose of this invention is to provide a kind of short message immediately monitoring, thereby can monitor under the not high situation of desired hardware and software requirement, both realized that note system to the monitoring of refuse messages optimization simultaneously, satisfied the stability of short-message system and the validity of monitoring again.
The objective of the invention is to be achieved through the following technical solutions:
A kind of method of message monitoring comprises the first monitoring rule and the second monitoring rule:
A: the short message that the user sends is carried out the contents supervision according to the first monitoring rule;
B: described first monitoring carries out will meeting after the contents supervision handles the short message of the described first monitoring rule, be sent to second monitoring and handle according to the contents supervision in the second monitoring rule, the short message that does not meet the described first monitoring rule sends to the SMSC of Short Message Scheduling Center and normally issues;
C: the short message that will meet the second monitoring rule is handled as junk short message, and the short message that does not meet the second prison rule sends to SMSC and normally issues;
D: all short message information are made a copy for and the message of making a copy for is carried out traffic monitoring according to the first monitoring rule or the second monitoring rule.
The first monitoring principle is handled for carrying out the elementary screening contents supervision of short message information content in the described steps A.
The first monitoring principle is that the individual monitoring keyword of positive integer is retrieved for quantity can be set in the described steps A.
After handling, described first monitoring described short message information can be divided into suspicious short message information and normal short message information.
Described suspicious short message information will be put on suspicious marker bit.
The contents supervision handles the second monitoring principle and/or the traffic monitoring of implementation short message information is handled for implementation short message information content is accurately screened among the described step B.
It is that the individual monitoring keyword of positive integer is retrieved that described accurate screening contents supervision processing can be provided with quantity.
Described accurate screening contents supervision is treated to contents supervision's processing of the short message information content being carried out the analysis of detailed complete.
The contents supervision of described accurate screening handles a positive integer accurately screening contents supervision processing can be set.
After handling, the contents supervision of described accurate screening described short message information can be divided into junk short message and normal short message.
Described traffic monitoring is handled can set a threshold value, and when the short message information quantity of user's transmission in the unit interval surpassed described threshold value, the short message information that described user sends was a junk short message, and the result is fed back to SMSC.
Described traffic monitoring is to make a copy for a to handle to traffic monitoring when short message information is sent to SMSC, or when any one-level of contents supervision is finished dealing with, at once the short message information of finishing contents supervision's processing is carried out traffic monitoring and handle, draw the traffic statistics data value.
Described content accurately screens contents supervision's processing and described short message information traffic monitoring is handled when existing simultaneously, and the priority that described content is accurately screened contents supervision's processing is higher than described short message information traffic monitoring processing.
Described junk short message will directly be deleted, and the user who sends described junk short message will be put into user in violation of rules and regulations, or be put into tent.
A kind of message monitoring device comprises:
First monitoring unit: be used for the short message that the user sends is carried out the first content monitoring, the suspicious short message in the first monitoring back is sent to second monitoring unit, the normal short message after first monitoring is sent to SMSC;
Second monitoring unit: be used for the short message that the user sends is carried out the second content monitoring, the junk short message deletion with after second monitoring sends to SMSC with the normal short message after second monitoring;
Traffic monitoring unit: be used for the short message that the user sends is carried out traffic monitoring.
Described message monitoring device also comprises a message Dispatching Unit, is used for all message is made a copy for to the traffic monitoring unit.
Described message Dispatching Unit can be arranged on the first, the second or flow cell in or be provided with separately.
Described first monitoring unit comprises:
The contents supervision unit: the short message information that is used for that the user is sent is carried out the first content monitoring, and the short message that will meet monitored results sends to suspicious information flag unit, and the message that does not meet monitored results is sent to SMSC;
Suspicious information flag unit: be used for the message from first content monitoring place is marked suspicious mark, the message that indicates suspicious mark is sent to second monitoring.
Described contents supervision unit comprises:
Key search unit: be used for the keyword of setting content monitoring and retrieve short message;
The searching message Dispatching Unit: the short message that is used for meeting result for retrieval is distributed to suspicious information flag unit, the short message that does not meet result for retrieval is distributed to SMSC normally issues.
Described second monitoring unit comprises:
Contents supervision unit: be used for the suspicious short message information that first monitoring unit sends is carried out the second content monitoring, the suspect message that will meet monitored results sends to the message delete cells, the message that does not meet monitored results is sent to suspicious information flag remove the unit;
The unit is removed in suspicious information flag: be used for the message of sending is removed suspicious mark, and send to SMSC.
The message delete cells: the message that is used for sending is carried out deletion action.
Described contents supervision unit comprises:
Key search unit: be used for the keyword of setting content monitoring and retrieve short message;
The searching message Dispatching Unit: the short message that is used for meeting result for retrieval is distributed to the message delete cells, the short message that does not meet result for retrieval is distributed to suspicious information flag removes the unit.
Described traffic monitoring unit comprises:
Short message traffic statistics unit: be used for the quantity of the short message that sends by same user in the statistical unit time, statistics is sent to short message flow judging unit;
Short message flow judging unit: can set the quantity that short message sends in the normal unit interval, be used for being compared with the statistics of short message traffic statistics unit, judge whether to send the user, judged result is sent to statistical message feedback unit as a result sending junk short message;
Statistical message is feedback unit as a result: the transmission user profile that is used for meeting the short message of statistics feeds back to SMSC.
Described traffic monitoring unit can also can dispose with second monitoring with the first monitoring configuration.
Described first monitoring, second monitoring, traffic monitoring can be arranged on SMSC inside.
As seen from the above technical solution provided by the invention, the present invention is by hierarchical monitoring, and most of message can both normally issue, and has only the suspect message after a small amount of one-level is monitored to determine behind secondary analysis that just whether delivering to SMSC issues again.This flow process is few to the short-message system influence, and the one-level monitoring analysis is simply quick, realizes simple, stable high.Operation does not produce the influence of any instability and delay to SMSC for secondary monitoring and SMSC parallel processing, secondary monitoring, satisfies the short-message system requirement, realized both note system being influenced little, again can the effective monitoring rubbish message.In the present invention simultaneously, but one-level monitoring and secondary are monitored all separate configurations, according to different site environments different patterns are set, and flexibly, facility can adapt to the different systems that require.
Description of drawings
Fig. 1 adopts in the prior art short-message system, to refuse messages immediately monitoring schematic diagram of mechanism;
Fig. 2 is for adopting in the prior art short-message system, to refuse messages monitoring mechanism schematic diagram afterwards;
Fig. 3 is provided by the invention, hierarchical monitoring short message immediately monitoring schematic diagram of mechanism;
Fig. 4 for the first content of the present invention narration after the operation workflow figure of flow hierarchical monitoring short message immediately monitoring method.
Fig. 5 for the first flow of the present invention narration after the operation workflow figure of content classification monitoring short message immediately monitoring method.
Fig. 6 is a monitoring module structure chart of the present invention.
Embodiment
The invention provides a kind of method of message monitoring, core of the present invention is: set up a component level monitoring module between user and the SMSC (Short Message Scheduling Center), each hierarchical monitoring module is made up of contents supervision's module and traffic monitoring module, after the user sends SMS message, after short message sends to described hierarchical monitoring module, according to actual needs, the parameter that the hierarchical monitoring module is provided with by inside modules, contents supervision that selection is taked and/or message traffic monitoring are provided with relevant parameters to back one-level hierarchical monitoring module simultaneously.Behind the two-stage hierarchical monitoring, can the junk information that major part is useless be blocked in outside the SMSC, to play instant efficient monitoring rubbish short message effect.Though and do not relate to the information of rubbish keyword for those contents because its continuous mass-sending, the quantity forwarded value surpasses the short message of setting threshold, seriously strengthens the SMSC work load, all can handle accordingly.
Describe the method for the invention in detail below in conjunction with accompanying drawing.
Embodiment 1
As shown in Figure 4, a kind of message monitoring method that adopts capacity monitor after the first content comprises the steps:
Step 401, message before entering into SMSC, are carried out first monitoring after coming up from MS (travelling carriage or SP) submission.First monitoring is set to message content monitoring as required, the rough retrieval keyword is set simultaneously carries out primary screen and be elected to be usefulness.The monitoring of 30 important key characters in the left and right sides can be set short message content such as this grade monitoring;
Step 402, judge each bar short message whether with set keyword and conform to, through after this step, according to result's difference message is become two classes: a class is the first monitoring normal messages, and a class is a suspect message.If message is normal messages, then execution in step 406, if message is suspect message, then execution in step 403, by first monitoring all short messages made a copy for to second monitoring simultaneously;
Step 403 for suspect message, is enclosed a suspicious marker bit with message body, delivers to second monitoring and handles.For normal messages execution in step 406;
Step 404, second monitoring is set to the message content monitoring as required, this message content monitoring is for accurately screening the contents supervision, at first accurate search key need be set, for suspect message a large amount of complete content analysis of process in second monitoring, comprise the analysis of content of short message multiple key, judge further whether the suspect message of sending here is junk information.If through after the detailed content analysis, determine it is not junk short message, remove appended suspicious marker bit, execution in step 406, otherwise execution in step 405;
Step 405 through being defined as rubbish short message, is handled this category information (normally delete, do not allow it be issued to SMSC) accordingly;
Step 406 for the normal messages after the monitoring at different levels, is delivered to SMSC to it and is normally issued;
Step 407, for all short messages that send, traffic statistics are carried out in the traffic monitoring that can send to as required in second monitoring.Traffic monitoring in second monitoring, priority should be less than detailed content analysis monitoring;
Step 408, whether the numerical value of judging the traffic statistics data is greater than pre-set threshold, if less than defined threshold, then execution in step 410, otherwise execution in step 409;
Step 409 determines that this short message is a junk short message, and the sender is user in violation of rules and regulations, and the result of secondary monitoring analysis is in time delivered in the blacklist of SMSC or battalion's account, according to processing rule, cuts off this violation user's message function;
Step 410 determines that this short message is normal short message, and all monitoring flow processs finish.
First monitoring of describing in the step 401 in the present embodiment all can be made up of the monitoring of multistage content, and the monitoring of every grade of content all can be provided with search key voluntarily and determine the quantity of corresponding keyword.The traffic monitoring in second monitoring in the synchronous execution in step 407 after the monitoring of one-level content is finished arbitrarily.
Embodiment 2
As shown in Figure 5, a kind of message monitoring method that adopts flow and content synchronization monitoring comprises the steps:
Step 501, message before entering into SMSC, are carried out first monitoring after coming up from MS (travelling carriage or SP) submission, and first monitoring is set to the message traffic monitoring as required, the contents supervision in a short message information to the first monitoring of making a copy for simultaneously;
Step 502 is provided with the rough retrieval keyword to the contents supervision in first monitoring and carries out primary screen and be elected to be usefulness.The monitoring of 30 important key characters in the left and right sides can be set short message content such as this grade monitoring;
Step 503, judge each bar short message whether with set keyword and conform to, through after this step, according to result's difference message is become two classes: a class is the first monitoring normal messages, and a class is a suspect message.If message is normal messages, then execution in step 507, if message is suspect message, then execution in step 504;
Step 504 for suspect message, is enclosed a suspicious marker bit with message body, delivers to second monitoring and handles.For normal messages execution in step 507;
Step 505, second monitoring is set to the message content monitoring as required, accurate search key is set simultaneously, for suspect message a large amount of complete content analysis of process in second monitoring, comprise the analysis of content of short message multiple key, judge further whether the suspect message of sending here is junk information.If through after the detailed content analysis, determine it is not junk short message, remove appended suspicious marker bit, execution in step 507, otherwise execution in step 506;
Step 506 through being defined as rubbish short message, is handled this category information (normally delete, do not allow it be issued to SMSC) accordingly;
Step 507 for the normal messages after the monitoring at different levels, is delivered to SMSC to it and is normally issued;
Step 508 is carried out traffic statistics to the traffic monitoring in first monitoring.Traffic monitoring in first monitoring, priority should be less than the content analysis monitoring of first, second monitoring;
Step 509, whether the numerical value of judging the traffic statistics data is greater than pre-set threshold, if less than defined threshold, then execution in step 511, otherwise execution in step 510;
Step 510 determines that this short message is a junk short message, and the sender is user in violation of rules and regulations, and the result of secondary monitoring analysis is in time delivered in the blacklist of SMSC or battalion's account, according to processing rule, cuts off this violation user's message function;
Step 511 determines that this short message is normal short message, and all monitoring flow processs finish.
Present embodiment is identical with first embodiment, and described contents supervision also can be made up of the monitoring of multistage content, and its implementation is existing corresponding the description in first embodiment, just no longer repeats at this.
Embodiment 3
Contents supervision in the foregoing description 1 first or second monitoring can make up contents supervision's integral body that the back is formed by multistage contents supervision, and the traffic monitoring in first or second monitoring then can add between the monitoring of any two contents.
Be a specific implementation of present embodiment as shown in Figure 3.In this implementation, the contents supervision has only been adopted in first monitoring, and contents supervision and traffic monitoring have been adopted in second monitoring, the purpose of real monitoring when finishing the present invention to short message by the two stage content monitoring with the one-level traffic monitoring.
Embodiment 4
Contents supervision in the foregoing description 2 first or second monitoring can make up contents supervision's integral body that the back is formed by multistage contents supervision, and the traffic monitoring in first or second monitoring then can add between the monitoring of any two contents.
Embodiment 5
Contents supervision in the foregoing description 1 first or second monitoring can separate separately from first or second monitoring at place, joins in second or first monitoring and goes, and forms the first, the second monitoring by two contents supervision's single current amount monitoring.
Embodiment 6
Contents supervision in the foregoing description 2 first or second monitoring can separate separately from first or second monitoring at place, joins in second or first monitoring and goes, and forms the first, the second monitoring by two contents supervision's single current amount monitoring.
As shown in Figure 6, the present invention also provides a kind of supervising device that adopts content and capacity monitor message, and described device can be arranged among the SMSC, specifically comprises following part:
(1) first monitoring unit:
Form by independently contents supervision unit and traffic monitoring unit, be used for transmission and the short message that comes carries out content, flow or flow, contents supervision; Short message through first monitoring unit is sent to second monitoring unit;
Described contents supervision comprises in the unit:
The key search unit is used for the keyword of setting content monitoring and retrieves short message;
The short message Dispatching Unit is used for all short messages being made a copy for and being distributed to second monitoring unit.
Described traffic monitoring comprises in the unit:
Short message traffic statistics unit is used for the quantity of the short message that sent by same user in the statistical unit time;
Short message flow judging unit can be set the quantity that short message sends in the normal unit interval, is used for being compared with the statistics of short message traffic statistics unit, judges whether send the user is sending junk short message.
(2) second monitoring units:
Be made up of independently contents supervision unit and traffic monitoring unit, the short message that is used for first monitoring unit is sent carries out content, flow or flow, contents supervision;
Described contents supervision comprises in the unit:
The key search unit is used for the keyword of setting content monitoring and retrieves short message;
The short message Dispatching Unit is used for all short messages being made a copy for and being distributed to second monitoring unit;
Described traffic monitoring comprises in the unit:
Short message traffic statistics unit is used for the quantity of the short message that sent by same user in the statistical unit time;
Short message flow judging unit can be set the quantity that short message sends in the normal unit interval, is used for being compared with the statistics of short message traffic statistics unit, judges whether send the user is sending junk short message.
Illustrating this method below is how to carry out effective, instant, the efficient monitoring.As in the configuration of one-level monitoring, certain office has established " wheel of the law " keywords such as " six directions are adopted ".System is in service, and all message that have " six directions is adopted " content are all stamped suspicious sign and delivered to the secondary monitoring.
In the secondary monitoring, set " six directions is adopted+special sign indicating number " (mean in the message and not only comprise " six directions is adopted " but also comprise " special sign indicating number ") keyword.All have all preventions automatically of message secondary supervisory control system of " six directions is adopted+special sign indicating number " so.And being similar to the normal messages (contain " six directions is adopted " but do not have " special sign indicating number ") of " It's lovely day, and we go the six directions to go to gather mushrooms ", system is transferred to SMSC to it and continues to issue.
One-level monitoring normal messages and suspect message all enter in the secondary monitoring as statistics and analyze.Find that in the secondary monitoring certain messages sent by users amount surpasses the threshold values of setting, just can send into this Subscriber Number that (at this moment this user can submit message in the SMSC blacklist according to setting processing method, but SMSC can not issue this user's message) or (at this moment this user's SMS is cancelled, and submission can not be successful to send into the tent processing.Specifically please refer to related data).
For the secondary monitoring, mainly emphasize its promptness.Because secondary monitoring analysis task is heavy, it is long slightly (according to existing message monitoring system performance information on the market to send the processing time, generally to delay time about one minute), sent 300 message as certain user 9:00 to 9:40, should forbid that this user continues to send out message this moment.Because handle time-delay about a minute, to the 9:41 branch, this user will be processed, and at this moment he just can't issuing message.Time-delay in one minute hereto, its time postpones length or acceptable, should forbid immediately unlike the message that has keyword.
Among the present invention, most of message can both normally issue, and have only the suspect message after a small amount of one-level is monitored to determine behind secondary analysis that just whether delivering to SMSC issues again.This flow process is few to the short-message system influence, and the one-level monitoring analysis is simply quick, realizes simple, stable high.Add secondary monitoring and sms center parallel processing, operation does not produce the influence of any instability and delay to sms center in the secondary monitoring, satisfies the short-message system requirement, realized both note system being influenced little, again can the effective monitoring rubbish message.
More crucial a bit is, but monitoring of the one-level among the present invention and secondary monitoring separate configurations are provided with different patterns according to different site environments.
In the comparatively strict occasion of monitoring requirement, can only dispose one-level monitoring analysis module and carry out simple analysis, do not carry out the secondary monitoring analysis, performance loss seldom influences seldom short-message system at this moment.
Big at the short-message system flow, performance requirement and system stability require very high occasion, the i.e. occasion of the monitoring of non real-time only requiring in time, the one-level monitoring can be set, only carry out simple message copying and be distributed to secondary monitoring (being equivalent to message distributor), carry out the parallel monitoring with SMSC by the secondary monitoring, be affected hardly to short-message system this moment.
In the occasion that requires refuse messages is realized the optimization monitoring, can monitor reasonable distributed monitoring task by I and II, realize the Message Processing time-delay seldom, to the short-message system influence seldom, the secondary monitoring realizes complete monitoring.For example: in a small amount of keyword monitoring of one-level monitoring configuration, secondary configuration complete key scanning and traffic monitoring.Through the certain situation that the operator provides, refuse messages has intensive in a period of time, homogeny.Most of refuse messages that needs to monitor all is some identical or similar notes.In the one-level monitoring, dispose about 30 sensitive words, can analyze the refuse messages more than 90%.By the reasonable disposition of firsts and seconds monitoring, can realize flexibly that note system monitors the refuse messages optimization.Not only accomplished the immediately monitoring of refuse messages but also provided the stability that satisfies short-message system and the validity of monitoring, and monitored desired hardware and software requirement is not high.
The above only is a preferred implementation of the present invention, does not constitute the qualification to protection range of the present invention.Any any modification of being made within the spirit and principles in the present invention, be equal to and replace and improvement etc., all should be included within the claim protection range of the present invention.

Claims (24)

1, a kind of method of message monitoring is characterized in that, comprises the first monitoring rule and the second monitoring rule:
A: the short message that the user sends is carried out the contents supervision according to the first monitoring rule;
B: described first monitoring carries out will meeting after the contents supervision handles the short message of the described first monitoring rule, be sent to second monitoring and handle according to the contents supervision in the second monitoring rule, the short message that does not meet the described first monitoring rule sends to the SMSC of Short Message Scheduling Center and normally issues;
C: the short message that will meet the second monitoring rule is handled as junk short message, and the short message that does not meet the second prison rule sends to SMSC and normally issues;
D: all short message information are made a copy for and the message of making a copy for is carried out traffic monitoring according to the first monitoring rule or the second monitoring rule.
According to the method for the described a kind of short message immediately monitoring of claim 1, it is characterized in that 2, the first monitoring rule is handled for carrying out the elementary screening contents supervision of short message information content in the described steps A.
According to the method for the described a kind of short message immediately monitoring of claim 1, it is characterized in that 3, the first monitoring rule is that the individual monitoring keyword of positive integer is retrieved for quantity can be set in the described steps A.
4, according to the method for claim 2 or 3 described a kind of short message immediately monitorings, it is characterized in that, described short message information can be divided into suspicious short message information and normal short message information after described first monitoring is handled.
According to the method for the described a kind of short message immediately monitoring of claim 4, it is characterized in that 5, described suspicious short message information will be put on suspicious marker bit.
According to the method for the described a kind of short message immediately monitoring of claim 1, it is characterized in that 6, second monitoring is regular among the described step B accurately screens contents supervision's processing and/or carry out short message information traffic monitoring processing for carrying out the short message information content.
According to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that 7, it is that the individual monitoring keyword of positive integer is retrieved that described accurate screening contents supervision processing can be provided with quantity.
According to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that 8, described accurate screening contents supervision is treated to the short message information content is carried out contents supervision's processing that complete key is analyzed.
According to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that 9, the contents supervision of described accurate screening handles a positive integer accurately screening contents supervision processing can be set.
10, according to the method for the described a kind of short message immediately monitoring of claim 7,8 or 9, it is characterized in that, described short message information can be divided into junk short message and normal short message after the contents supervision of described accurate screening handles.
11, according to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that, described traffic monitoring is handled can set a threshold value, when the short message information quantity of user's transmission in the unit interval surpasses described threshold value, the short message information that described user sends is a junk short message, and the result is fed back to SMSC.
12, according to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that described traffic monitoring is to make a copy for a to handle to traffic monitoring when short message information is sent to SMSC, or when any one-level of contents supervision is finished dealing with, at once the short message information of finishing contents supervision's processing is carried out traffic monitoring and handle, draw the traffic statistics data value.
13, according to the method for the described a kind of short message immediately monitoring of claim 6, it is characterized in that, described content accurately screens contents supervision's processing and described short message information traffic monitoring is handled when existing simultaneously, and the priority that described content is accurately screened contents supervision's processing is higher than described short message information traffic monitoring processing.
According to the method for the described a kind of short message immediately monitoring of claim 11, it is characterized in that 14, described junk short message will directly be deleted, the user who sends described junk short message will be put into user in violation of rules and regulations, or be put into tent.
15, a kind of message monitoring device is characterized in that comprising:
First monitoring unit: be used for the short message that the user sends is carried out the first content monitoring, the suspicious short message in the first monitoring back is sent to second monitoring unit, the normal short message after first monitoring is sent to SMSC;
Second monitoring unit: be used for the short message that the user sends is carried out the second content monitoring, the junk short message deletion with after second monitoring sends to SMSC with the normal short message after second monitoring;
Traffic monitoring unit: be used for the short message that the user sends is carried out traffic monitoring.
16, message monitoring device according to claim 15 is characterized in that, described message monitoring device also comprises a message Dispatching Unit, is used for all message is made a copy for to the traffic monitoring unit.
17, message monitoring device according to claim 16 is characterized in that, described message Dispatching Unit can be arranged on the first, the second or flow cell in or be provided with separately.
18, message monitoring device according to claim 15 is characterized in that, described first monitoring unit comprises:
The contents supervision unit: the short message information that is used for that the user is sent is carried out the first content monitoring, and the short message that will meet monitored results sends to suspicious information flag unit, and the message that does not meet monitored results is sent to SMSC;
Suspicious information flag unit: be used for the message from first content monitoring place is marked suspicious mark, the message that indicates suspicious mark is sent to second monitoring.
19, message monitoring device according to claim 18 is characterized in that, described contents supervision unit comprises:
Key search unit: be used for the keyword of setting content monitoring and retrieve short message;
The searching message Dispatching Unit: the short message that is used for meeting result for retrieval is distributed to suspicious information flag unit, the short message that does not meet result for retrieval is distributed to SMSC normally issues.
20, message monitoring device according to claim 15 is characterized in that, described second monitoring unit comprises:
Contents supervision unit: be used for the suspicious short message information that first monitoring unit sends is carried out the second content monitoring, the suspect message that will meet monitored results sends to the message delete cells, the message that does not meet monitored results is sent to suspicious information flag remove the unit;
The unit is removed in suspicious information flag: be used for the message of sending is removed suspicious mark, and send to SMSC.
The message delete cells: the message that is used for sending is carried out deletion action.
21, message monitoring device according to claim 20 is characterized in that, described contents supervision unit comprises:
Key search unit: be used for the keyword of setting content monitoring and retrieve short message;
The searching message Dispatching Unit: the short message that is used for meeting result for retrieval is distributed to the message delete cells, the short message that does not meet result for retrieval is distributed to suspicious information flag removes the unit.
22, the device of message monitoring according to claim 15 is characterized in that, described traffic monitoring unit comprises:
Short message traffic statistics unit: be used for the quantity of the short message that sends by same user in the statistical unit time, statistics is sent to short message flow judging unit;
Short message flow judging unit: can set the quantity that short message sends in the normal unit interval, be used for being compared with the statistics of short message traffic statistics unit, judge whether to send the user, judged result is sent to statistical message feedback unit as a result sending junk short message;
Statistical message is feedback unit as a result: the transmission user profile that is used for meeting the short message of statistics feeds back to SMSC.
According to claim 15 or 22 described message monitoring devices, it is characterized in that 23, described traffic monitoring unit can also can dispose with second monitoring with the first monitoring configuration.
24, according to any described message monitoring device in the claim 15~22, it is characterized in that, described first monitoring, second monitoring, traffic monitoring can be arranged on SMSC inside.
CNB2006100620118A 2006-08-04 2006-08-04 A kind of method and apparatus of message monitoring Expired - Fee Related CN100571074C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2006100620118A CN100571074C (en) 2006-08-04 2006-08-04 A kind of method and apparatus of message monitoring

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2006100620118A CN100571074C (en) 2006-08-04 2006-08-04 A kind of method and apparatus of message monitoring

Publications (2)

Publication Number Publication Date
CN1905408A true CN1905408A (en) 2007-01-31
CN100571074C CN100571074C (en) 2009-12-16

Family

ID=37674553

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2006100620118A Expired - Fee Related CN100571074C (en) 2006-08-04 2006-08-04 A kind of method and apparatus of message monitoring

Country Status (1)

Country Link
CN (1) CN100571074C (en)

Cited By (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2009097777A1 (en) * 2008-01-25 2009-08-13 Huawei Technologies Co., Ltd. Flow control method, access equipment and network system
CN101771966A (en) * 2010-03-11 2010-07-07 上海粱江通信系统股份有限公司 Keywords and frequency based method for identifying spam message sources
CN101083802B (en) * 2007-07-18 2010-08-18 中兴通讯股份有限公司 Method for realizing SMS monitoring
CN101848441A (en) * 2010-05-18 2010-09-29 中兴通讯股份有限公司 Suspicious short message deferrable transmitting method, device thereof and system thereof
WO2011006385A1 (en) * 2009-07-15 2011-01-20 中兴通讯股份有限公司 Statistical method and device for bill information performance
CN101159913B (en) * 2007-11-12 2011-03-16 中兴通讯股份有限公司 Entity short message flow control system and method of exterior short message
CN101998305A (en) * 2009-08-19 2011-03-30 中国移动通信集团江苏有限公司 Short message scheduling method and system
CN101335920B (en) * 2008-07-15 2011-04-13 中国联合网络通信集团有限公司 Rubbish short message recognition system and method based on calling number location and transmitted content
CN102075423A (en) * 2011-01-10 2011-05-25 中国人民解放军国防科学技术大学 Hardware multi-level table-based method for controlling output traffic
CN101335968B (en) * 2008-08-04 2012-05-09 中兴通讯股份有限公司 Method and system for rubbish short message monitoring post processing
CN102547607A (en) * 2010-12-15 2012-07-04 中国移动通信集团贵州有限公司 Message interaction control method and system, message interaction system and mobile terminal
CN102905231A (en) * 2011-07-30 2013-01-30 华为技术有限公司 Method and system for message propagation service with content analysis function
CN102111723B (en) * 2009-12-24 2015-07-01 上海粱江通信系统股份有限公司 Method for identifying spam short message user by analyzing short message frequency and content
CN106656736A (en) * 2016-09-14 2017-05-10 广东欧珀移动通信有限公司 Message receiving control method and terminal equipment
CN107277789A (en) * 2017-07-19 2017-10-20 安徽拓通信科技集团股份有限公司 Note data monitoring protection method based on artificial intelligence
CN108243420A (en) * 2016-12-26 2018-07-03 中国移动通信集团公司 A kind of processing method and processing device of fraud text message number
CN111432358A (en) * 2020-03-30 2020-07-17 北京思特奇信息技术股份有限公司 Short message sending method, system, medium and equipment

Cited By (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101083802B (en) * 2007-07-18 2010-08-18 中兴通讯股份有限公司 Method for realizing SMS monitoring
CN101159913B (en) * 2007-11-12 2011-03-16 中兴通讯股份有限公司 Entity short message flow control system and method of exterior short message
WO2009097777A1 (en) * 2008-01-25 2009-08-13 Huawei Technologies Co., Ltd. Flow control method, access equipment and network system
CN101494598B (en) * 2008-01-25 2013-06-05 华为技术有限公司 Flow control method, device and system
CN101335920B (en) * 2008-07-15 2011-04-13 中国联合网络通信集团有限公司 Rubbish short message recognition system and method based on calling number location and transmitted content
CN101335968B (en) * 2008-08-04 2012-05-09 中兴通讯股份有限公司 Method and system for rubbish short message monitoring post processing
WO2011006385A1 (en) * 2009-07-15 2011-01-20 中兴通讯股份有限公司 Statistical method and device for bill information performance
CN101998305A (en) * 2009-08-19 2011-03-30 中国移动通信集团江苏有限公司 Short message scheduling method and system
CN102111723B (en) * 2009-12-24 2015-07-01 上海粱江通信系统股份有限公司 Method for identifying spam short message user by analyzing short message frequency and content
CN101771966B (en) * 2010-03-11 2013-01-23 上海粱江通信系统股份有限公司 Keywords and frequency based method for identifying spam message sources
CN101771966A (en) * 2010-03-11 2010-07-07 上海粱江通信系统股份有限公司 Keywords and frequency based method for identifying spam message sources
CN101848441A (en) * 2010-05-18 2010-09-29 中兴通讯股份有限公司 Suspicious short message deferrable transmitting method, device thereof and system thereof
WO2011143849A1 (en) * 2010-05-18 2011-11-24 中兴通讯股份有限公司 Suspicious short message deferrable transmission method, device and system
CN101848441B (en) * 2010-05-18 2014-12-10 中兴通讯股份有限公司 Suspicious short message deferrable transmitting method, device thereof and system thereof
CN102547607A (en) * 2010-12-15 2012-07-04 中国移动通信集团贵州有限公司 Message interaction control method and system, message interaction system and mobile terminal
CN102547607B (en) * 2010-12-15 2015-02-04 中国移动通信集团贵州有限公司 Message interaction control method and system, message interaction system and mobile terminal
CN102075423B (en) * 2011-01-10 2013-01-02 中国人民解放军国防科学技术大学 Hardware multi-level table-based method for controlling output traffic
CN102075423A (en) * 2011-01-10 2011-05-25 中国人民解放军国防科学技术大学 Hardware multi-level table-based method for controlling output traffic
CN102905231A (en) * 2011-07-30 2013-01-30 华为技术有限公司 Method and system for message propagation service with content analysis function
CN102905231B (en) * 2011-07-30 2015-11-25 华为技术有限公司 Realize message propagation operational approach and the system of content analysis
CN106656736A (en) * 2016-09-14 2017-05-10 广东欧珀移动通信有限公司 Message receiving control method and terminal equipment
CN108243420A (en) * 2016-12-26 2018-07-03 中国移动通信集团公司 A kind of processing method and processing device of fraud text message number
CN107277789A (en) * 2017-07-19 2017-10-20 安徽拓通信科技集团股份有限公司 Note data monitoring protection method based on artificial intelligence
CN111432358A (en) * 2020-03-30 2020-07-17 北京思特奇信息技术股份有限公司 Short message sending method, system, medium and equipment

Also Published As

Publication number Publication date
CN100571074C (en) 2009-12-16

Similar Documents

Publication Publication Date Title
CN1905408A (en) Method and apparatus for monitoring message
CN101069175A (en) Dynamic message filtering
CN1254048C (en) System, tool and method for monitoring network and corresponding network
CN1475935A (en) Method and system used for classifying electronic documents
CN1705299A (en) Method for controlling instant messages in instant messaging system
CN101043656A (en) Method and system for monitoring suspicious user of rubbish SMS
CN101047902A (en) Service process method, device of charging system and charging system
CN1592229A (en) Electronic communications and web pages filtering based on URL
CN1717880A (en) RRC connection request method and apparatus for mobile communications
CN1794868A (en) Method of providing discriminating service in radio access network
CN1961545A (en) Filtering messages comprising spam and/or viruses in a wireless communication
CN101075981A (en) Method and apparatus for filteirng information
CN1798063A (en) Method at network side for obtaining situation of receiving multimedia broadcasting / multicasting service by users
CN1578516A (en) Data flow control system, method and program
CN1507172A (en) Communication system, communication method and mobile station
CN1744559A (en) Method for realizing routing via business attribute or according to business charging type
CN1756389A (en) Method for realizing group short message receiving and transmitting in communication system
CN1960369A (en) Method and system for protecting security of Internet by simulating biological neural network
CN1852471A (en) Method and system for processing garbage shortmessage
CN1214555C (en) Method for unified managing resource in packet network of PLMN
CN1859785A (en) Moving exchanging center switching method of location updating and user imputing
CN1647478A (en) Communication terminal device and communication control method
CN1725690A (en) Method for activating service of multimedia broadcast/group broadcast service
CN1866886A (en) Network monitoring system and method for realizing monitoring
CN101080044A (en) SMS forward and processing method and device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20091216

CF01 Termination of patent right due to non-payment of annual fee