WO2012151929A1 - 一种短消息监控方法及装置 - Google Patents
一种短消息监控方法及装置 Download PDFInfo
- Publication number
- WO2012151929A1 WO2012151929A1 PCT/CN2011/082561 CN2011082561W WO2012151929A1 WO 2012151929 A1 WO2012151929 A1 WO 2012151929A1 CN 2011082561 W CN2011082561 W CN 2011082561W WO 2012151929 A1 WO2012151929 A1 WO 2012151929A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- short message
- sender
- length
- reaches
- threshold
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/212—Monitoring or handling of messages using filtering or selective blocking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/58—Message adaptation for wireless communication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/12—Messaging; Mailboxes; Announcements
- H04W4/14—Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
Definitions
- the present invention relates to the field of communications, and in particular, to a short message monitoring method and apparatus. Background technique
- the short message monitoring system can be used to monitor the garbage short message, identify and shield the garbage short message sender in the short message system as much as possible, and reduce the harm of the garbage short message, and the monitoring rule is the short message monitoring system design. key.
- garbage short message senders There are various garbage short message senders in the short message system, and a well-designed monitoring system needs to formulate corresponding multiple garbage short message monitoring rules for the typical characteristics of different types of garbage short message senders.
- junk messages contain a continuous sequence of numbers (ie, a series of digital messages).
- marketing-type short messages usually contain contact phones, and short messages containing bank accounts to spoof users' remittances are also common.
- Such junk messages can be called A garbage message with a continuous numeric array type.
- the existing short message monitoring system lacks targeted monitoring rules for junk short messages containing consecutive digital sequences.
- traffic rules and keyword rules are the two main general monitoring rules.
- the former is based on the feature that the spammer short message sender sends a short message in a short time, and the latter identifies the spam short message based on some pre-configured keyword or keyword combination that often appears in the spam short message.
- garbage short message including the continuous digital sequence type, it is difficult for the traffic rule to quantify the frequency index, and it is difficult for the keyword rule to accurately set the common keyword in advance, so that it is difficult for both to comprehensively and accurately identify the garbage containing the continuous digital sequence. short message, It is also impossible to identify and block spammers with short serials in the short message system. Summary of the invention
- the embodiment of the invention provides a short message monitoring method and device, which is used to solve the problem that the prior art cannot comprehensively and accurately identify the garbage short message of the continuous digital sequence type, and it is difficult to identify and shield the garbage of the continuous digital sequence type in the short message system.
- the sender of the short message is used to solve the problem that the prior art cannot comprehensively and accurately identify the garbage short message of the continuous digital sequence type, and it is difficult to identify and shield the garbage of the continuous digital sequence type in the short message system.
- the sender of the short message is used to solve the problem that the prior art cannot comprehensively and accurately identify the garbage short message of the continuous digital sequence type, and it is difficult to identify and shield the garbage of the continuous digital sequence type in the short message system.
- a short message monitoring method comprising:
- the sender When the total number of short messages sent by the sender reaches the set value within the monitoring period duration, it is determined that the length of the consecutive digital sequence included in the short message sent by the sender reaches the threshold value within the monitoring period duration. If the ratio of the number of messages to the total number of short messages sent by the sender reaches a set threshold, the sender is determined to be the spam short message sender.
- the monitoring period duration refers to a period of time in which the start time and the end time are arbitrarily set; or the monitoring period duration refers to determining that the sender sends a short message including a continuous sequence of numbers, and The period of time from the moment when the length of the consecutive digital sequence reaches the threshold.
- the sender of the short message that determines the length of the consecutive digital sequence included in the short message to reach the threshold includes:
- the short message is determined to be a short message containing the length of the consecutive digital sequence reaching the threshold.
- the The method further includes: transmitting a monitoring result that determines that the sender is a spam short message sender to a database save.
- the method further includes:
- a short message monitoring device comprising:
- a first determining module configured to determine a sender of the short message that sends the length of the consecutive digital sequence included in the short message to reach a threshold
- a second determining module configured to determine that the total number of short messages sent by the sender reaches a set value within a monitoring period duration
- a third determining module configured to determine, during the monitoring period duration, the number of short messages whose length of the consecutive digital sequence included in the short message sent by the sender reaches the threshold, and the total number of short messages sent by the sender If the ratio reaches the set threshold, the sender is determined to be the spam short message sender.
- the first determining module is configured to scan the content of the short message for each short message, determine that the content of the short message includes a consecutive number sequence, and determine each content included in the content of the short message.
- the length of the consecutive digital sequence and the maximum length of the length, and the determined maximum length reaches the threshold, the short message is determined to be a short message containing the length of the consecutive digital sequence reaching the threshold.
- the apparatus further includes a sending module, configured to send, to the database, the monitoring result that determines that the sender is a spam short message sender.
- the sending module is further configured to send all short messages sent by the sender within the monitoring period duration to a database for saving.
- the sender of the short message containing the digital information exceeding a certain length is first determined, and then when the total number of short messages sent by the sender within the monitoring period duration reaches the set value, it is determined that the sender sends the sender during the monitoring period.
- the sender of the garbage short message transmitting the continuous digital sequence type can be identified and shielded, and the identification and shielding precision of the garbage short message sender can be improved.
- FIG. 1 is a flow chart of steps of a short message monitoring method according to Embodiment 1 of the present invention
- FIG. 2 is a flowchart of steps of a short message monitoring method according to Embodiment 2 of the present invention
- a schematic structural diagram of a short message monitoring device is provided.
- the short message monitoring solution that comprehensively considers the short message frequency and short message content, the main idea is: Continuously track and analyze all short messages in the short message system, if a sender is found to send consecutive numbers with higher frequency and ratio The sequence of short messages outputs the sender as a spam short message sender.
- a first embodiment of the present invention provides a method for monitoring a short message.
- the process of the method is as shown in FIG. 1 , and specifically includes:
- Step 101 Determine to send a sender that includes a short message whose serial number sequence length reaches a threshold. After collecting the short message, the short message content, the calling number, and the like may be extracted from the collected short message, and the short message is determined according to the short message content, and the short message is determined, and the short message may be determined according to the calling number. The sender.
- the short message content may be scanned to determine whether the short message content contains consecutive digital series:
- the length of each consecutive number sequence included in the content of the short message may be determined, the length of the consecutive number sequence being a number of bits of a series of consecutive digit sequences, such as the length of a consecutive number sequence of 138123789 being 9,
- the serial number sequence of 9789458717 is 10 in length.
- determining a maximum length from the length of each consecutive digit sequence included in the short message content, and determining a short message whose maximum length reaches the threshold value is a short message that includes a continuous digital sequence length reaching a threshold value, for example, If a short message includes consecutive digital sequence numbers 138123789 and 9789458717, the maximum length of the consecutive digital sequence corresponding to the short message is 10.
- the threshold is 8
- the short message may be determined to be a continuous digital sequence included.
- the short message is not necessarily a short message containing a continuous digital sequence length reaching a threshold.
- the threshold value may be set to 8, that is, only a sequence of up to 8 digits in length is identified to reduce the monitoring error.
- the sender of the short message After determining the short message that the length of the consecutive digital sequence included reaches the threshold, the sender of the short message can be correspondingly determined.
- Step 102 Determine a total number of short messages sent by the sender within a monitoring period duration to reach a set value.
- the sender After determining that the short message containing the continuous digital sequence length reaches the threshold is sent After that, it may be determined whether the total number of short messages sent by the sender during the monitoring period duration reaches a set value, and if so, it is determined that the sender may be a spam short message sender.
- the start and end time of the monitoring period duration can be arbitrarily set.
- the start time of the monitoring period duration can be set to determine the time at which the sender sends a short message that includes a continuous digital sequence length reaching a threshold value, thereby avoiding When a junk short message containing a continuous sequence of numbers is sent periodically, the spammer is missed.
- Step 103 Determine a spammer short message sender.
- the step specifically includes: determining, within the duration of the monitoring period, that the sender of the number of consecutive short digits that have reached the threshold value and the total number of short messages sent to reach the set threshold is determined to be garbage The sender of the message.
- Step 104 Save the monitoring result.
- the step includes: sending the monitoring result of the sender to the spam short message sender to the database for storage, so as to subsequently perform shielding, interception, and the like on the sender.
- the method provided by the embodiment of the present invention may further include:
- Step 105 Perform manual audit and arbitration on the monitoring result.
- the step specifically includes: sending all the short messages sent by the sender within the monitoring period duration to the database for saving, and performing manual review and arbitration on the monitoring result according to the all short messages.
- the short message monitoring rule provided by the specific example may include the following attributes: a maximum length of consecutive digital series (MaxContiNumLen), a monitoring period duration (MonitorPeriod), a total number of short message settings (TotalThred), and a maximum length of consecutive digital series included.
- the ratio of the number of short messages for the threshold to the total number of short messages sent (ContiNumProportionThred).
- Embodiment 2 A second embodiment of the present invention provides a method for monitoring a short message. The process of the method is as shown in FIG. 2, and specifically includes:
- Step 201 Collect a short message, and extract information such as a calling number, a short message content, and the like.
- the calling number can be identified by CallerlSDN.
- Step 202 Count the total number of short messages sent by the calling user during the monitoring period duration.
- the calling user refers to the user corresponding to the calling number extracted in step 201.
- the total number of short messages sent by the user during the monitoring period (MonitorPeriod) is counted.
- the counting may be implemented by setting the first counter, and the initial value may be 0.
- the first counter is incremented by 1 every time the determined calling user sends a short message within the monitoring period duration.
- Step 203 Scan the content of the short message, and obtain the maximum length of the consecutive digital sequence included in the short message.
- the maximum length is 0.
- the maximum length can be identified by MaxContiNumLen.
- Step 204 Determine whether the content of the short message includes a consecutive number sequence that reaches a limited length. In this step, it may be determined whether the maximum length of the consecutive digital sequence included in the short message reaches the set threshold requirement, that is, whether the MaxContiNumLen reaches the set threshold, and if yes, step 205 is performed; otherwise, the step is performed. 206.
- Step 205 Count the number of short messages sent by the calling user and including consecutive digital series of a limited length during the monitoring period duration.
- the second counter is sent every time the determined calling user sends a short message including a continuous number sequence of a limited length. plus 1.
- Step 206 Determine whether the total number of short messages sent by the calling user is within the monitoring period duration. The set value is reached.
- step 207 it is determined whether the total number of short messages sent by the calling user reaches the set total short message setting value (TotalThred). If yes, step 207 is performed; otherwise, the monitoring process ends.
- Step 207 Determine, in the duration of the monitoring period, a ratio of the number of short messages including the consecutive digital sequence sent by the calling user to the total number of short messages.
- the number of short messages containing consecutive digital sequences sent by the calling user during the monitoring period duration can be obtained by reading the value of the first counter to obtain the duration of the monitoring period. The total number of short messages sent by the user.
- step 208 it may be determined whether the determined ratio reaches a set value: a ratio threshold (ContiNumProportionThred) of the number of short messages including the maximum length of the continuous digital sequence reaching the threshold value and the total number of short messages sent, if yes, Then step 208 is performed, otherwise, the monitoring process ends.
- a ratio threshold ContiNumProportionThred
- Step 208 Output a monitoring result.
- the calling user is determined to be a spam short message sender, and the monitoring result is outputted, so as to perform corresponding identification, shielding, and the like on the calling user according to the monitoring result.
- the short message including the continuous digital sequence length reaching the threshold is determined as a garbage short message, and the continuous digital sequence type garbage is not required to be set by setting a specific keyword.
- the short message avoids the problem that it is difficult to accurately set the common keyword in the keyword rule, and at the same time determines that the total number of short messages sent by the sender reaches the set value within the monitoring period duration, and further determines the monitoring.
- the third embodiment of the present invention provides a short message monitoring apparatus.
- the structure of the apparatus is shown in FIG. 3, and specifically includes: the first determining module 11 is configured to determine that the length of the consecutive digital sequence included in the sending short message reaches a threshold.
- the second determining module 12 is configured to determine that the total number of short messages sent by the sender reaches the set value within the monitoring period duration;
- the third determining module 13 is configured to determine that within the monitoring period duration, the If the ratio of the number of short messages whose length of the consecutive digit sequence contained in the short message sent by the sender reaches the threshold value and the total number of short messages sent by the sender reaches a set threshold, the sender is determined to be a garbage short message. sender.
- the first determining module 11 is specifically configured to scan the content of the short message for each short message, determine that the content of the short message includes a consecutive number sequence, and determine each consecutive number included in the content of the short message. The length of the sequence and the maximum length of the length. If the determined maximum length reaches the threshold, the short message is determined as a short message containing the length of the consecutive digital sequence reaching the threshold.
- the first determining module 11 is specifically configured to scan the short message content, and when the short message content does not include the consecutive digital sequence, determine that the length of the consecutive digital sequence included in the short message content is 0.
- the apparatus also includes a transmitting module 14 for transmitting a monitoring result determining that the sender is a spammer to the database.
- the sending module 14 is further configured to send all short messages sent by the sender within the monitoring period duration to a database for saving.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Telephonic Communication Services (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明实施例提供一种短消息监控方法及装置，包括：针对包含连续数字数列的短消息，首先从中确定包含超过一定长度的数字信息的短消息的发送者，然后在该发送者在监控周期时长内发送的短消息总数量达到设定值时，继续确定在监控周期时长该发送者发送的包含超过一定长度的数字信息的短消息的数量与该发送者发送的短消息的总数量是否达到设定的比率，若达到，则确定该发送者为垃圾短消息发送者，从而在全面、精确地识别连续数字数列类型的垃圾短消息的基础上，可以对发送连续数字数列类型的垃圾短消息发送者进行识别和屏蔽，提高对垃圾短消息发送者的识别和屏蔽精度。
Description
一种短消息监控方法及装置 技术领域
本发明涉及通信领域， 尤其涉及一种短消息监控方法及装置。 背景技术
目前， 在短消息系统中传播的海量短消息中存在相当比例的垃圾短消 息， 涵盖各种促销甚至恶意短消息， 给用户造成困扰的同时， 也对短消息 系统的运营形成了挑战。
现有技术中可以利用短消息监控系统对垃圾短消息进行监控， 尽可能 地识别、 屏蔽短消息系统中的垃圾短消息发送者， 减少垃圾短消息的危害， 而监控规则是短消息监控系统设计的关键。 短消息系统中存在各种各样的 垃圾短消息发送者， 设计良好的监控系统， 需要针对不同类型垃圾短消息 发送者的典型特征制定相应的多种垃圾短消息监控规则。
许多垃圾短消息中包含连续数字数列 （即一连串数字信息）， 例如， 营 销类短消息通常包含联系电话， 包含银行账号用以诈骗用户汇款的短消息 也很常见， 这种垃圾短消息可以称为连续数字数列类型的垃圾短消息。 目 前已有的短消息监控系统缺乏对包含连续数字数列的垃圾短消息的有针对 性的监控规则。
而在现有的短消息监控规则中， 流量规则与关键字规则是两种主要的 通用监控规则。 前者基于垃圾短消息发送者短时间高频度发送短消息的特 征， 后者基于一些预先配置的在垃圾短消息中经常出现的关键字或关键字 组合来识别垃圾短消息。 对于前述包含连续数字数列类型的垃圾短消息， 流量规则难以量化频度指标， 而关键字规则难以预先准确设定通用的关键 字， 因而两者都难以全面、 精准地识别包含连续数字数列的垃圾短消息，
也就无法识别、 屏蔽短消息系统中包含连续数字数列的垃圾短消息发送者。 发明内容
本发明实施例提供一种短消息监控方法及装置， 用于解决现有技术无 法全面、 精确地识别连续数字数列类型的垃圾短消息， 以及难以识别、 屏 蔽短消息系统中连续数字数列类型的垃圾短消息发送者的问题。
一种短消息监控方法， 所述方法包括：
确定发送短消息中包含的连续数字数列的长度达到门限值的短消息的 发送者；
确定监控周期时长内该发送者发送的短消息总数量达到设定值时， 在 所述监控周期时长内， 确定该发送者发送的短消息中包含的连续数字数列 的长度达到门限值的短消息数量、 与该发送者发送的短消息总数量的比率 达到设定阈值， 则将该发送者确定为垃圾短消息发送者。
在上述方案中， 所述监控周期时长是指起始时间和结束时间均任意设 定的一段时间； 或者所述监控周期时长是指在确定该发送者发送了包含连 续数字数列的短消息， 且该连续数字数列的长度达到门限值时刻起的一段 时间。
在上述方案中， 所述确定发送短消息中包含的连续数字数列的长度达 到门限值的短消息的发送者， 包括：
针对每一短消息， 扫描该短消息的内容， 确定该短消息的内容中包含 有连续数字数列；
确定该短消息的内容中包含的每个连续数字数列的长度， 确定最大长 度；
若确定的最大长度达到门限值， 则将该短消息确定为包含的连续数字 数列的长度达到门限值的短消息。
在上述方案中， 所述将该发送者确定为垃圾短消息发送者之后， 所述
方法还包括： 将确定所述发送者为垃圾短消息发送者的监控结果发送至数 据库保存。
在上述方案中， 所述将该发送者确定为垃圾短消息发送者之后， 所述 方法还包括：
将所述发送者在所述监控周期时长内发送的全部短消息发送至数据库 保存。
一种短消息监控装置， 该装置包括：
第一确定模块， 用于确定发送短消息中包含的连续数字数列的长度达 到门限值的短消息的发送者；
第二确定模块， 用于确定监控周期时长内该发送者发送的短消息总数 量达到设定值；
第三确定模块， 用于确定在所述监控周期时长内， 该发送者发送的短 消息中包含的连续数字数列的长度达到门限值的短消息数量、 与该发送者 发送的短消息总数量的比率达到设定阈值， 则将该发送者确定为垃圾短消 息发送者。
在上述方案中， 第一确定模块， 用于针对每一短消息， 扫描该短消息 的内容， 确定该短消息的内容中包含有连续数字数列， 并确定该短消息的 内容中包含的每个连续数字数列的长度及该长度中的最大长度， 确定的最 大长度达到门限值， 则将该短消息确定为包含的连续数字数列的长度达到 门限值的短消息。
在上述方案中， 所述装置还包括发送模块， 用于将确定所述发送者为 垃圾短消息发送者的监控结果发送至数据库保存。
在上述方案中， 所述发送模块， 还用于将所述发送者在所述监控周期 时长内发送的全部短消息发送至数据库保存。
根据本发明实施例提供的方案， 针对包含连续数字数列的短消息， 首
先从中确定包含超过一定长度的数字信息的短消息的发送者， 然后在该发 送者在监控周期时长内发送的短消息总数量达到设定值时， 继续确定在监 控周期时长该发送者发送的包含超过一定长度的数字信息的短消息的数量 与该发送者发送的短消息的总数量是否达到设定的比率， 若达到， 则确定 该发送者为垃圾短消息发送者， 从而在全面、 精确地识别连续数字数列类 型的垃圾短消息的基础上， 可以对发送连续数字数列类型的垃圾短消息发 送者进行识别和屏蔽， 提高对垃圾短消息发送者的识别和屏蔽精度。 附图说明
图 1为本发明实施例一提供的一种短消息监控方法的步驟流程图； 图 2为本发明实施例二提供的一种短消息监控方法的步驟流程图； 图 3为本发明实施例三提供的一种短消息监控装置的结构示意图。 具体实施方式 针对现有技术中无法精确、 全面地识别连续数字数列类型的垃圾短消 息， 也难以识别、 屏蔽短消息系统中连续数字数列类型的垃圾短消息发送 者， 本发明实施例提供一种综合考虑短消息频度与短消息内容的短消息监 控解决方案， 主要思想为： 持续跟踪分析短消息系统中的所有短消息， 若 发现某发送者以较高的频度和比率发送包含连续数字数列的短消息， 则将 该发送者作为垃圾短消息发送者输出。
下面结合说明书附图和各实施例对本发明技术方案进行说明。
实施例一
本发明实施例一提供一种短消息监控方法， 该方法的步驟流程如图 1 所示， 具体包括：
步驟 101、确定发送包含连续数字数列长度达到门限值的短消息的发送 者。
在采集到短消息后， 可以从采集到的短消息提取短消息内容、 主叫号 码等信息， 根据短消息内容来判断该短消息是否为垃圾短消息， 并可以根 据主叫号码确定该短消息的发送者。
在本步驟中， 具体的， 可以扫描短消息内容， 确定短消息内容中是否 包含连续数字数列：
若包括， 可以确定该短消息内容中包含的每个连续数字数列的长度， 该连续数字数列的长度是指， 一串连续的数字序列的位数， 如 138123789 的连续数字数列的长度为 9, 9789458717的连续数字数列的长度为 10。 并 从该短消息内容中包含的每个连续数字数列的长度中， 确定最大长度， 将 最大长度达到门限值的短消息确定为包含的连续数字数列长度达到门限值 的短消息， 如， 若一条短消息中同时包括连续数字数列 138123789 和 9789458717, 则该短消息对应的连续数字数列的最大长度为 10, 若所述门 限值为 8, 则可以确定该短消息为包含的连续数字数列最大长度（ 10 )达到 门限值 ( 8 ) 的短消息；
若不包括， 确定该短消息内容中包含的连续数字数列的最大长度为 0。 由于所述门限值为正整数， 因此， 该短消息必然不是包含的连续数字数列 长度达到门限值的短消息。
为了避免将正常携带的连续数字数列的短消息误识别为垃圾短消息， 可以设定所述门限值为 8, 即仅识别长度达到 8个数字的序列， 以减小监控 误差。
在确定出包含的连续数字数列长度达到门限值的短消息后， 可以对应 地确定该短消息的发送者。
步驟 102、确定监控周期时长内， 该发送者发送的短消息总数量达到设 定值。
在确定出发送了包含的连续数字数列长度达到门限值的短消息的发送
者之后， 可以确定该发送者在监控周期时长内发送的短消息总数量是否达 到设定值， 若达到， 则判断该发送者有可能为垃圾短消息发送者。
所述监控周期时长的起止时间可以任意设定， 特殊的， 监控周期时长 的起始时间可以设定为确定该发送者发送包含连续数字数列长度达到门限 值的短消息的时刻， 从而避免在包含连续数字数列的垃圾短消息为阶段性 发送时， 对垃圾短消息发送者漏检。
步驟 103、 确定垃圾短消息发送者。
本步驟具体包括： 将所述监控周期时长内， 发送的包含的连续数字数 列长度达到门限值的短消息的数量与发送的短消息总数量的比率达到设定 阈值的发送者确定为垃圾短消息发送者。
步驟 104、 保存监控结果。
本步驟包括， 将确定该发送者为垃圾短消息发送者的监控结果发送至 数据库保存， 以便于后续对该发送者进行屏蔽、 拦截等处理。
为了保证监控结果的准确性， 本发明实施例提供的方法还可以进一步 包括：
步驟 105、 对监控结果进行人工审核仲裁。
本步驟具体包括， 将该发送者在所述监控周期时长内发送的全部短消 息发送至数据库保存， 根据所述全部短消息对所述监控结果进行人工审核 仲裁。
下面通过一个具体的实例对本发明实施例一的方案进行详细说明。 该 具体的实例提供的短消息监控规则可以包括以下属性： 连续数字数列最大 长度（MaxContiNumLen )、 监控周期时长（ MonitorPeriod )、 短消息总数量 设定值（TotalThred )、 包含的连续数字数列最大长度达到门限值的短消息 的数量与发送的短消息总数量的比率阈值（ ContiNumProportionThred )。
实施例二
本发明实施例二提供一种短消息监控方法， 该方法的步驟流程如图 2 所示， 具体包括：
步驟 201、 采集短消息， 并从中提取主叫号码、 短消息内容等信息。 所述主叫号码可以用 CallerlSDN来标识。
步驟 202、对主叫用户在监控周期时长内所发送的短消息总条数进行计 数。
所述主叫用户是指步驟 201 中提取出的主叫号码对应的用户。 在本步 驟中， 统计该用户在监控周期时长（MonitorPeriod )内所发送的短消息总条 数。
具体的， 可以通过设定第一计数器来实现计数， 其初始值可以为 0, 在 监控周期时长内， 每确定主叫用户发送一条短消息， 则该第一计数器加 1。
步驟 203、扫描短消息内容， 获取短消息中包含的连续数字数列的最大 长度。
若短消息内容中不包含任何连续数字数列， 则最大长度为 0。
所述最大长度可以用 MaxContiNumLen来标识。
步驟 204、 判定短消息内容中是否包含达到限定长度的连续数字数列。 在本步驟中， 可以判断该短消息包含的连续数字数列的最大长度是否 达到设定的门限值要求， 即判断 MaxContiNumLen是否达到设定门限值， 若是， 则执行步驟 205, 否则， 执行步驟 206。
步驟 205、在监控周期时长内，对主叫用户发送的包含达到限定长度的 连续数字数列的短消息条数进行计数。
具体的， 可以通过设定第二计数器来实现， 其初始值可以为 0, 在监控 周期时长内， 每确定主叫用户发送一条包含达到限定长度的连续数字数列 的短消息， 则该第二计数器加 1。
步驟 206、在监控周期时长内， 判定主叫用户发送的短消息总条数是否
达到设定值。
在本步驟中， 判断主叫用户发送的短消息总条数是否达到设定的短消 息总数量设定值（TotalThred ), 若达到， 则执行步驟 207, 否则， 监控流程 结束。
步驟 207、在监控周期时长内，确定主叫用户发送的包含连续数字数列 的短消息条数占短消息总条数的比率。
可以通过读取第二计数器的数值来获得在监控周期时长内 , 主叫用户 发送的包含连续数字数列的短消息条数， 通过读取第一计数器的数值来获 得在监控周期时长内， 主叫用户发送的短消息总条数。
在本步驟中， 可以判断确定出的比率是否达到设定的： 包含的连续数 字数列最大长度达到门限值的短消息的数量与发送的短消息总数量的比率 阈值（ContiNumProportionThred ), 若达到， 则执行步驟 208, 否则， 监控 流程结束。
步驟 208、 输出监控结果。
确定该主叫用户为垃圾短消息发送者， 并将该监控结果输出， 以便于 后续根据该监控结果， 对该主叫用户进行相应的识别、 屏蔽等处理。
根据本发明实施例一和实施例二提供的方案， 将包含的连续数字数列 长度达到门限值的短消息确定为垃圾短消息， 无需通过设定具体的关键字 来确定连续数字数列类型的垃圾短消息， 避免了关键字规则中难以预先准 确设定通用关键字的问题， 同时在确定在监控周期时长内， 发送者发送的 短消息总数量达到设定值的基础上， 通过进一步确定在监控周期时长内， 该发送者发送的连续数字数列类型的垃圾短消息与该发送者发送的短消息 总数量的比率是否达到设定的阈值来确定该发送者是否为垃圾短消息发送 者， 避免单纯流量规则难以量化流量门限值的缺点， 从而解决了本发明提 出的技术问题。
实施例三
本发明实施例三提供一种短消息监控装置， 该装置的结构示意如图 3 所示， 具体包括： 第一确定模块 11用于确定发送短消息中包含的连续数字 数列的长度达到门限值的短消息的发送者； 第二确定模块 12用于确定监控 周期时长内该发送者发送的短消息总数量达到设定值； 第三确定模块 13用 于确定在所述监控周期时长内， 该发送者发送的短消息中包含的连续数字 数列的长度达到门限值的短消息数量、 与该发送者发送的短消息总数量的 比率达到设定阈值， 则将该发送者确定为垃圾短消息发送者。
其中， 第一确定模块 11具体用于针对每一短消息， 扫描该短消息的内 容， 确定该短消息的内容中包含有连续数字数列， 并确定该短消息的内容 中包含的每个连续数字数列的长度及该长度中的最大长度， 若确定的最大 长度达到门限值， 则将该短消息确定为包含的连续数字数列的长度达到门 限值的短消息。
这里， 第一确定模块 11具体用于扫描短消息内容， 在短消息内容中不 包含连续数字数列时， 确定该短消息内容中包含的连续数字数列的长度为 0。
所述装置还包括发送模块 14:发送模块 14用于将确定所述发送者为垃 圾短消息发送者的监控结果发送至数据库保存。
这里， 所述发送模块 14还用于将所述发送者在所述监控周期时长内发 送的全部短消息发送至数据库保存。
显然， 本领域的技术人员可以对本发明进行各种改动和变型而不脱离 本发明的精神和范围。 这样， 倘若本发明的这些修改和变型属于本发明权 利要求及其等同技术的范围之内， 则本发明也意图包含这些改动和变型在 内。
Claims
1、 一种短消息监控方法， 其特征在于， 所述方法包括：
确定发送短消息中包含的连续数字数列的长度达到门限值的短消息的 发送者；
确定监控周期时长内所述发送者发送的短消息总数量达到设定值， 且 确定在所述监控周期时长内， 所述发送者发送的短消息中包含的连续数字 数列的长度达到门限值的短消息数量、 与所述发送者发送的短消息总数量 的比率达到设定阈值时， 将所述发送者确定为垃圾短消息发送者。
2、 如权利要求 1所述的方法， 其特征在于， 所述监控周期时长为起始 时间和结束时间均任意设定的一段时间； 或者， 所述监控周期时长为在确 定所述发送者已发送包含连续数字数列的短消息， 且所述连续数字数列的 长度达到门限值时刻起的一段时间。
3、 如权利要求 1所述的方法， 其特征在于， 所述确定发送短消息中包 含的连续数字数列的长度达到门限值的短消息的发送者， 包括：
针对每一条短消息， 扫描所述短消息的内容， 确定所述短消息的内容 中包含有连续数字数列；
确定所述短消息的内容中包含的每个连续数字数列的长度， 确定最大 长度；
确定的最大长度达到门限值时， 将所述短消息确定为包含的连续数字 数列的长度达到门限值的短消息。
4、 如权利要求 1至 3任一项所述的方法， 其特征在于， 所述将所述发 送者确定为垃圾短消息发送者之后， 所述方法还包括： 将确定所述发送者 为垃圾短消息发送者的监控结果发送至数据库保存。
5、 如权利要求 4所述的方法， 其特征在于， 所述将所述发送者确定为 垃圾短消息发送者之后， 所述方法还包括： 将所述发送者在所述监控周期时长内发送的全部短消息发送至数据库 保存。
6、 一种短消息监控装置， 其特征在于， 所述装置包括：
第一确定模块， 用于确定发送短消息中包含的连续数字数列的长度达 到门限值的短消息的发送者；
第二确定模块， 用于确定监控周期时长内所述发送者发送的短消息总 数量达到设定值；
第三确定模块， 用于确定在所述监控周期时长内， 所述发送者发送的 短消息中包含的连续数字数列的长度达到门限值的短消息数量、 与所述发 送者发送的短消息总数量的比率达到设定阈值时， 将所述发送者确定为垃 圾短消息发送者。
7、 如权利要求 6所述的装置， 其特征在于， 第一确定模块， 用于针对 每一条短消息， 扫描所述短消息的内容， 确定所述短消息的内容中包含有 连续数字数列， 并确定所述短消息的内容中包含的每个连续数字数列的长 度及所述长度中的最大长度， 确定的最大长度达到门限值时， 将所述短消 息确定为包含的连续数字数列的长度达到门限值的短消息。
8、 如权利要求 6或 7所述的装置， 其特征在于， 所述装置还包括发送 模块， 用于将确定所述发送者为垃圾短消息发送者的监控结果发送至数据 库保存。
9、 如权利要求 8所述的装置， 其特征在于， 所述发送模块， 还用于将 所述发送者在所述监控周期时长内发送的全部短消息发送至数据库保存。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110210547.0 | 2011-07-26 | ||
| CN201110210547.0A CN102421074B (zh) | 2011-07-26 | 2011-07-26 | 一种短消息监控方法及装置 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2012151929A1 true WO2012151929A1 (zh) | 2012-11-15 |
Family
ID=45945267
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2011/082561 WO2012151929A1 (zh) | 2011-07-26 | 2011-11-21 | 一种短消息监控方法及装置 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN102421074B (zh) |
| WO (1) | WO2012151929A1 (zh) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104010284A (zh) * | 2014-05-30 | 2014-08-27 | 可牛网络技术（北京）有限公司 | 对垃圾短信进行处理的方法和装置 |
| WO2017215553A1 (zh) * | 2016-06-14 | 2017-12-21 | 中兴通讯股份有限公司 | 一种短消息监控方法、装置和监控中心 |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102761872A (zh) * | 2012-08-01 | 2012-10-31 | 成都四方信息技术有限公司 | 一种垃圾短信拦截方法 |
| CN103856944A (zh) * | 2012-12-03 | 2014-06-11 | 上海粱江通信系统股份有限公司 | 一种结合数字特征和发送频次识别诈骗短信的方法 |
| CN106656736B (zh) * | 2016-09-14 | 2019-10-18 | Oppo广东移动通信有限公司 | 消息接收控制方法、及终端设备 |
| CN109726312B (zh) * | 2018-12-25 | 2021-10-08 | 广州虎牙信息科技有限公司 | 一种正则表达式检测方法、装置、设备和存储介质 |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101222718A (zh) * | 2008-01-25 | 2008-07-16 | 中兴通讯股份有限公司 | 一种可拦截垃圾短消息的移动通信终端及方法 |
| CN101340693A (zh) * | 2008-08-12 | 2009-01-07 | 中兴通讯股份有限公司 | 一种基于内容长度监控垃圾短信息的系统与实现方法 |
| US20100035639A1 (en) * | 2008-08-11 | 2010-02-11 | Embarq Holdings Company, Llc | Message Filtering System Using Profiles |
| CN102045652A (zh) * | 2009-10-21 | 2011-05-04 | 深圳市彩讯科技有限公司 | 基于特征相似度的垃圾短信拦截方法 |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101784022A (zh) * | 2009-01-16 | 2010-07-21 | 北京炎黄新星网络科技有限公司 | 短信过滤、分类方法及系统 |
| CN101697620A (zh) * | 2009-10-30 | 2010-04-21 | 中兴通讯股份有限公司 | 一种垃圾短信的确定方法和系统 |
-
2011
- 2011-07-26 CN CN201110210547.0A patent/CN102421074B/zh active Active
- 2011-11-21 WO PCT/CN2011/082561 patent/WO2012151929A1/zh active Application Filing
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101222718A (zh) * | 2008-01-25 | 2008-07-16 | 中兴通讯股份有限公司 | 一种可拦截垃圾短消息的移动通信终端及方法 |
| US20100035639A1 (en) * | 2008-08-11 | 2010-02-11 | Embarq Holdings Company, Llc | Message Filtering System Using Profiles |
| CN101340693A (zh) * | 2008-08-12 | 2009-01-07 | 中兴通讯股份有限公司 | 一种基于内容长度监控垃圾短信息的系统与实现方法 |
| CN102045652A (zh) * | 2009-10-21 | 2011-05-04 | 深圳市彩讯科技有限公司 | 基于特征相似度的垃圾短信拦截方法 |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104010284A (zh) * | 2014-05-30 | 2014-08-27 | 可牛网络技术（北京）有限公司 | 对垃圾短信进行处理的方法和装置 |
| WO2017215553A1 (zh) * | 2016-06-14 | 2017-12-21 | 中兴通讯股份有限公司 | 一种短消息监控方法、装置和监控中心 |
| CN107509190A (zh) * | 2016-06-14 | 2017-12-22 | 中兴通讯股份有限公司 | 一种短消息监控方法、装置和监控中心 |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102421074B (zh) | 2017-05-10 |
| CN102421074A (zh) | 2012-04-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2012151929A1 (zh) | 一种短消息监控方法及装置 | |
| EP2009858B1 (en) | Method and apparatus for creating predictive filters for messages | |
| US8601065B2 (en) | Method and apparatus for preventing outgoing spam e-mails by monitoring client interactions | |
| WO2011153744A1 (zh) | 垃圾短信监控方法和系统 | |
| CN103428183B (zh) | 恶意网址的识别方法和装置 | |
| CN105704685B (zh) | 一种短信安全处理方法及装置 | |
| CN101909261A (zh) | 一种垃圾短信监控的方法和系统 | |
| US10574658B2 (en) | Information security apparatus and methods for credential dump authenticity verification | |
| CA2478299A1 (en) | Systems and methods for enhancing electronic communication security | |
| CN104753760A (zh) | 即时通讯群消息的控制方法和控制装置 | |
| US10572664B2 (en) | Technique for detecting suspicious electronic messages | |
| CN1878141A (zh) | 网络控制装置及其控制方法 | |
| CN102510563A (zh) | 一种移动互联网恶意软件检测的方法及系统 | |
| EP4293550A1 (en) | Traffic processing method and protection system | |
| CN110061998B (zh) | 一种攻击防御方法及装置 | |
| CN103139730B (zh) | 用于识别大量号码低频发送垃圾短信情况的方法 | |
| CN108566382B (zh) | 基于规则生命周期检测的防火墙自适应能力提升方法 | |
| Yan et al. | Sms-watchdog: Profiling social behaviors of sms users for anomaly detection | |
| WO2016062090A1 (zh) | 短信过滤方法及短信过滤装置 | |
| CN108063764B (zh) | 一种网络流量处理方法和装置 | |
| US20130191474A1 (en) | Electronic Messaging Recovery Engine | |
| CN106899947A (zh) | 短消息清理方法和装置 | |
| CN111930808B (zh) | 一种利用键值匹配模型提高黑名单准确率的方法及系统 | |
| WO2015054993A1 (zh) | 垃圾信息处理方法及装置 | |
| CN101771575A (zh) | 一种处理ip分片报文的方法、装置及系统 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 11865099 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 11865099 Country of ref document: EP Kind code of ref document: A1 |