CN1997058A - A method for monitoring of the high-traffic short message - Google Patents
A method for monitoring of the high-traffic short message Download PDFInfo
- Publication number
- CN1997058A CN1997058A CN 200510135260 CN200510135260A CN1997058A CN 1997058 A CN1997058 A CN 1997058A CN 200510135260 CN200510135260 CN 200510135260 CN 200510135260 A CN200510135260 A CN 200510135260A CN 1997058 A CN1997058 A CN 1997058A
- Authority
- CN
- China
- Prior art keywords
- note
- statistics
- short message
- node
- measurement period
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Telephonic Communication Services (AREA)
Abstract
This invention discloses one high flow short message monitor method, which comprises the following steps: real time getting electro communication short message platform original data; analyzing the data and extracting data characteristic values according to different business agreement and integrating short message record composed of main call number and content; making statistics of main call number and high flow gate values in one circle accordingly and storing the results to the record list afterwards.
Description
Technical field
The present invention relates to note method for supervising in a kind of communication field, the method that high-flow short message is monitored in real time in particular a kind of communication network.
Background technology
Along with development of Communication Technique, SMS has become a kind of very important communication of people and converter tools, however people enjoy freely exchange in, the harassing and wrecking of the refuse messages of having to face at any time.
So-called refuse messages, be meant without the recipient and agree, comprising be bad law regulation or have advertisement information contents or with malice make reprisals his artificial purpose, infringement recipient freedom of correspondence, peaceful life or run counter to the short message of social kindhearted custom or the like.Refuse messages is divided into following three classes in general:
1, has the note of criminal information content, as do false evidence, sell gun, propagate illegal information such as Falun Gong;
2, the information with advertisement character of the issue of agreeing without the recipient company is promoted its product or service etc. by note as so-and-so;
3, to have the information of character such as harassing and wrecking, revenge, for example the stolen back of mobile phone sends the mobile phone harassing and wrecking property note in the address list.
Refuse messages generally all has certain illegal, is mainly reflected in the following aspects:
1. agree to issue refuse messages without the recipient, encroached on recipient's peaceful life;
2. refuse messages has been encroached on recipient's the freedom of correspondence and the right of the privacy of correspondence;
3. part refuse messages mass-sending in a large number at short notice causes malicious overdraft, causes the tremendous economic loss to operator.
In order to safeguard normal communication order, to guarantee that self economic interests is inviolable, operator presses for positive searce way, and refuse messages is carried out monitoring and interception.But present short message service platform main equipment does not possess the monitoring spam function, mainly is to handle according to user's complaint for the strike of refuse messages afterwards, has passivity and non-timely.
Proposed to monitor and search for two kinds of refuse messages monitoring methods fully according to the content erotic keyword according to calling number, called number in patent " short message monitoring system in the GSM/GPRS mobile radio communication " (application number is CN03131604), refuse messages can be monitored and find to these methods to a certain extent.But the calling number of refuse messages, called number and short message content all are Protean, can not cover all refuse messages by preset number and keyword, thereby the former statistics is inaccurate and incomplete, have certain limitation.
Therefore, prior art awaits to continue development.
Summary of the invention
At the deficiency of conventional garbage message monitoring method, the objective of the invention is to propose a kind ofly come monitoring rubbish note, binding analysis short message content to locate the method for refuse messages according to the note transmission frequency.
Technical scheme of the present invention comprises:
A kind of method of high-flow short message monitoring comprises step:
A, obtain communication network short message service platform primary data information (pdi) in real time;
B, the data that get access to are analyzed, extracted the characteristic value of data, the synthetic note detail record that contains note calling number and short message content according to the short message service different agreement;
C, according to synthetic note detail record, in certain measurement period, carry out the statistics of high-flow short message based on note calling number and high flow capacity threshold value, after measurement period finishes, statistics is saved in the tabulation of note record.
Described method, wherein, described step C also comprises:
C1, definition measurement period and high flow capacity threshold value;
C2, the note transmission number of times to the calling subscriber in this definition measurement period are added up;
C6, according to default measurement period and current time, judge whether current measurement period finishes, if not then continue to carry out described step C2, otherwise execution in step C7;
C7, traversal statistics Hash table successively, note of checking each statistics node sends time numerical value and whether surpasses default high flow capacity threshold value;
Surpass the high flow capacity threshold value if the note of the current statistics node of C8 sends number of times, then preserve all note detail records of its statistics and present node correspondence, current statistics node is deleted from Hash table; Do not exceed standard if note sends number of times, then do not need to carry out the preservation of statistics;
Whether C9, inspection Hash table have been empty, if also have node in the Hash table, then continue execution in step C7; Otherwise current measurement period finishes, and changes step C2 and begins a new measurement period.Described method, wherein, described step C2 also comprises:
C21, from the tabulation of note to be analyzed record, take out a note detail record and carry out statistical analysis;
C3, the calling number of taking out the note detail record are that key assignments is searched the statistics node of whether setting up this number in the statistics Hash table with the calling number;
If C4 does not find, then be key assignments with the calling number, in the statistics Hash table, set up the statistics node, and sending number of times to the note of this statistics node, to compose initial value be 1, and preserve the note detail record and tabulate to the detail record of this node, change described step C6;
If C5 finds this statistics node, then the note transmission time numerical value to this statistics node adds 1, and preserves the detail record tabulation of note detail record to this node.
Described method, wherein, described statistics comprises calling number at least, number of times and short message content exceed standard.
The inventive method has following advantage:
1) monitored results is accurate comprehensively.The feature that the overclocking that this method generally has at refuse messages sends, go out to send from the angle of note transmission frequency and monitor, removed the influence of variable factor, compared with traditional method of monitoring according to variable factors such as number and keywords, statistics is more accurate.
2) initiative is strong, and real-time is good.By the operator SMS business platform is carried out continual continuous monitoring, can in the very first time, find to exceed standard high-flow short message, the identification refuse messages.
3) implement simply, cost is low.As long as this method guarantees to get access to the short message service platform data in real time, utilize a high-flow short message statistical module to realize.Compared with realize this function on the short message service main equipment, not only implementation method is simple, and it is cheap many that cost is also wanted.
Description of drawings
Fig. 1 is the overview flow chart of high-flow short message method for supervising of the present invention.
Fig. 2 is the high-flow short message statistical analysis process chart based on calling number and high flow capacity threshold value of the present invention.
Embodiment
Below in conjunction with accompanying drawing, will be described in further detail high-flow short message method for supervising of the present invention.
The method of high-flow short message monitoring of the present invention, its basis is that refuse messages generally has a common trait: a large amount of at short notice bulk SMSs of same calling number, for this same number a large amount of notes of sending of overclocking at short notice, be called high-flow short message in the industry.From this common trait of refuse messages,, can filter and discern refuse messages by to the monitoring of high-flow short message and the further analysis of short message content.
The basic scheme of the inventive method comprises the steps:
The first step is obtained communication network short message service platform primary data information (pdi) in real time;
Second step, the data that get access to are analyzed, according to the short message service different agreement extract data characteristic value, syntheticly contain the note detail record that the note calling number is number of sender and short message content.
The 3rd step, according to synthetic note detail record, in certain measurement period based on note calling number and high flow capacity threshold value, carry out the statistics of high-flow short message, after measurement period finishes,, comprise calling number, the number of times that exceeds standard, short message content preserve with statistics.
As shown in Figure 1, describe the embodiment of 3 steps below respectively in detail.
In the first step, obtain the data message of communication network short message service platform.Can there be multiple mode to obtain data message,, perhaps directly extracts short message service data information from the exchange machine such as gathering the short message service signaling from the short message service platform by signaling monitoring system from the short message service platform.This step is not an emphasis of the present invention, is not described in detail here.
In second step, note detail record synthesis module synthesizes the note detail record that contains calling number and short message content according to certain rule, and is saved in the note record to be analyzed tabulation.Existing open in the note record synthetic method prior art, the specific implementation method can be referring to patent " Signaling System Number 7 detailed call recording events synthetic method " (application number be CN200310113550.6).
The 3rd step is according to synthetic note detail record, the statistics of the high-flow short message that exceeds standard.This is a core of the present invention, and it comprises following step, referring to shown in Figure 2:
1) definition measurement period and high flow capacity threshold value, this is the basis that statistics is carried out, and can make amendment according to actual conditions.
2) from note record to be analyzed tabulation, take out a note record and carry out statistical analysis.
3) taking out the calling number that note writes down, is that key assignments is searched the statistics node of whether setting up this number with the calling number in the statistics Hash table.
4) if do not find, then be key assignments with the calling number, in the statistics Hash table, set up the statistics node, composing initial value to the note transmission number of times of this statistics node is 1, and preserves the detail record tabulation of note detail record to this node, commentaries on classics step 6).
5) if find the statistics node, then the note transmission time numerical value to this statistics node adds 1, and preserves the detail record tabulation of note detail record to this node.
6) according to default measurement period and current time, judge whether current measurement period finishes, if not would continue execution in step 2), otherwise execution in step 7).
7) traversal is added up Hash table successively, checks that whether the note of each node sends time numerical value above default high flow capacity threshold value.
8) surpass the high flow capacity threshold value if the note of current statistics node sends number of times, then the active user belongs to the high-flow short message user that exceeds standard, and preserves all note detail records of statistics and present node correspondence, at last present node is deleted from Hash table.Do not exceed standard if note sends number of times, then have only and to delete in the present node Hash table, do not need to carry out the preservation of statistics.
9) check whether Hash table has been empty.If also have node in the Hash table, then continue execution in step 7); Otherwise current measurement period finishes, and changes step 2) new measurement period of beginning.
The high-flow short message statistics of the inventive method is saved in database or the file according to the incident needs, and operator can determine whether high-flow short message is refuse messages by analyzing high-flow short message exceed standard number of times and short message content.User for sending refuse messages can stop its short message service function, prevents that it from sending refuse messages once more, thereby has realized shielding and interception to refuse messages.In addition, by the analysis-by-synthesis of note detail record that high flow capacity is exceeded standard, the area distribution that can effectively study, analyze high-flow short message, time distribution and development and change trend, help operator to make the effective supervisory method that tackles refuse messages.
In conjunction with the accompanying drawings the execution mode of the inventive method is described above, but the inventive method is not limited to above-mentioned embodiment; Above-mentioned embodiment only is schematic; rather than it is restrictive; those of ordinary skill in the art is under the enlightenment of this method; do not breaking away under the scope situation that the inventive method aim and claim protect; can also make a lot of distortion, these all should belong within the protection of the present invention.
Claims (4)
1, a kind of method of high-flow short message monitoring comprises step:
A, obtain communication network short message service platform primary data information (pdi) in real time;
B, the data that get access to are analyzed, extracted the characteristic value of data, the synthetic note detail record that contains note calling number and short message content according to the short message service different agreement;
C, according to synthetic note detail record, in certain measurement period, carry out the statistics of high-flow short message based on note calling number and high flow capacity threshold value, after measurement period finishes, statistics is saved in the tabulation of note record.
2, method according to claim 1 is characterized in that, described step C also comprises:
C1, definition measurement period and high flow capacity threshold value;
C2, the note transmission number of times to the calling subscriber in this definition measurement period are added up;
C6, according to default measurement period and current time, judge whether current measurement period finishes, if not then continue to carry out described step C2, otherwise execution in step C7;
C7, traversal statistics Hash table successively, note of checking each statistics node sends time numerical value and whether surpasses default high flow capacity threshold value;
Surpass the high flow capacity threshold value if the note of the current statistics node of C8 sends number of times, then preserve all note detail records of its statistics and present node correspondence, current statistics node is deleted from Hash table; Do not exceed standard if note sends number of times, then do not need to carry out the preservation of statistics;
Whether C9, inspection Hash table have been empty, if also have node in the Hash table, then continue execution in step C7; Otherwise current measurement period finishes, and changes step C2 and begins a new measurement period.
3, method according to claim 2 is characterized in that, described step C2 also comprises:
C21, from the tabulation of note to be analyzed record, take out a note detail record and carry out statistical analysis;
C3, the calling number of taking out the note detail record are that key assignments is searched the statistics node of whether setting up this number in the statistics Hash table with the calling number;
If C4 does not find, then be key assignments with the calling number, in the statistics Hash table, set up the statistics node, and sending number of times to the note of this statistics node, to compose initial value be 1, and preserve the note detail record and tabulate to the detail record of this node, change described step C6;
If C5 finds this statistics node, then the note transmission time numerical value to this statistics node adds 1, and preserves the detail record tabulation of note detail record to this node.
4, method according to claim 1 is characterized in that, described statistics comprises calling number at least, number of times and short message content exceed standard.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2005101352600A CN1997058B (en) | 2005-12-29 | 2005-12-29 | A method for monitoring of the high-traffic short message |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2005101352600A CN1997058B (en) | 2005-12-29 | 2005-12-29 | A method for monitoring of the high-traffic short message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1997058A true CN1997058A (en) | 2007-07-11 |
| CN1997058B CN1997058B (en) | 2010-09-29 |
Family
ID=38251972
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2005101352600A Expired - Fee Related CN1997058B (en) | 2005-12-29 | 2005-12-29 | A method for monitoring of the high-traffic short message |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1997058B (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101702794A (en) * | 2009-11-09 | 2010-05-05 | 王铭温 | Reminder system of user content of telecommunication short messages |
| CN102231888A (en) * | 2011-06-24 | 2011-11-02 | 中兴通讯股份有限公司 | Monitoring method and device |
| CN102438233A (en) * | 2011-08-22 | 2012-05-02 | 中国科学院计算技术研究所 | Detection method for mobile phone worms |
| CN102547619A (en) * | 2010-12-13 | 2012-07-04 | 中国移动通信集团贵州有限公司 | Method and device for controlling spam messages |
| CN101909318B (en) * | 2009-06-04 | 2013-02-13 | 中兴通讯股份有限公司 | Method and device for determining high-flow short message cell |
| CN104053136A (en) * | 2014-06-26 | 2014-09-17 | 北京思特奇信息技术股份有限公司 | Short message virus interception method and system |
| CN105893501A (en) * | 2016-03-30 | 2016-08-24 | 中国联合网络通信集团有限公司 | Information inquiry short-message processing method and system |
| CN106792593A (en) * | 2016-12-29 | 2017-05-31 | 江西博瑞彤芸科技有限公司 | The statistical analysis technique of short message |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1455616A (en) * | 2003-05-30 | 2003-11-12 | 蔡键龙 | Short message monitoring system in GSM/GPRS mobile communication network |
| CN1314293C (en) * | 2003-08-15 | 2007-05-02 | 中兴通讯股份有限公司 | System and method for intelligent monitoring message center |
-
2005
- 2005-12-29 CN CN2005101352600A patent/CN1997058B/en not_active Expired - Fee Related
Cited By (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101909318B (en) * | 2009-06-04 | 2013-02-13 | 中兴通讯股份有限公司 | Method and device for determining high-flow short message cell |
| CN101702794A (en) * | 2009-11-09 | 2010-05-05 | 王铭温 | Reminder system of user content of telecommunication short messages |
| CN102547619A (en) * | 2010-12-13 | 2012-07-04 | 中国移动通信集团贵州有限公司 | Method and device for controlling spam messages |
| CN102547619B (en) * | 2010-12-13 | 2015-04-22 | 中国移动通信集团贵州有限公司 | Method and device for controlling spam messages |
| CN102231888A (en) * | 2011-06-24 | 2011-11-02 | 中兴通讯股份有限公司 | Monitoring method and device |
| CN102438233A (en) * | 2011-08-22 | 2012-05-02 | 中国科学院计算技术研究所 | Detection method for mobile phone worms |
| CN102438233B (en) * | 2011-08-22 | 2015-06-24 | 中国科学院计算技术研究所 | Detection method for mobile phone worms |
| CN104053136A (en) * | 2014-06-26 | 2014-09-17 | 北京思特奇信息技术股份有限公司 | Short message virus interception method and system |
| CN105893501A (en) * | 2016-03-30 | 2016-08-24 | 中国联合网络通信集团有限公司 | Information inquiry short-message processing method and system |
| CN106792593A (en) * | 2016-12-29 | 2017-05-31 | 江西博瑞彤芸科技有限公司 | The statistical analysis technique of short message |
| CN106792593B (en) * | 2016-12-29 | 2019-11-19 | 江西博瑞彤芸科技有限公司 | The statistical analysis technique of short message |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1997058B (en) | 2010-09-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1997058B (en) | A method for monitoring of the high-traffic short message | |
| CN106550155B (en) | Swindle sample is carried out to suspicious number and screens the method and system sorted out and intercepted | |
| CN103026345B (en) | For the dynamic multidimensional pattern of event monitoring priority | |
| Becker et al. | Fraud detection in telecommunications: History and lessons learned | |
| McMillan et al. | Investigating the increase in mobile phone evidence in criminal activities | |
| CN103246735B (en) | A kind of method for processing abnormal data and system | |
| CN107360118B (en) | Advanced persistent threat attack protection method and device | |
| CN108133061A (en) | A kind of swindle Stock discrimination system | |
| CN111741472B (en) | GoIP fraud telephone identification method, system, medium and equipment | |
| CN101510879A (en) | Method and apparatus for filtering rubbish contents | |
| CN101335968B (en) | Method and system for rubbish short message monitoring post processing | |
| CN111918226B (en) | Real-time signaling-based method and device for analyzing international high-settlement embezzlement behavior | |
| CN111917574B (en) | Social network topology model and construction method, user confidence and affinity calculation method and telecom fraud intelligent interception system | |
| CN101389085B (en) | Rubbish short message recognition system and method based on sending behavior | |
| KR102200253B1 (en) | System and method for detecting fraud usage of message | |
| CN102546992A (en) | Junk voice message filtering method, filtering device and filtering system | |
| CN102111723B (en) | Method for identifying spam short message user by analyzing short message frequency and content | |
| CN103024206A (en) | Method for preventing suspected telephone fraudulence on basis of telecommunication network | |
| CN112528325B (en) | Data information security processing method and system | |
| KR20130083286A (en) | System for processing spam for mobile phone | |
| CN113067835B (en) | Integrated self-adaptive collapse index processing system | |
| CN116320159A (en) | Harassment fraud number identification processing method and device, electronic equipment and medium | |
| CN102231874A (en) | Short message processing method, device and system | |
| CN112511360B (en) | Multi-source service platform data security component monitoring method and system | |
| CN114339639A (en) | Call identification method and device, storage medium and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20100929 Termination date: 20141229 |
|
| EXPY | Termination of patent right or utility model |