WO2014121682A1

WO2014121682A1 - Network sharing detection method, apparatus and device

Info

Publication number: WO2014121682A1
Application number: PCT/CN2014/070671
Authority: WO
Inventors: 段海峰
Original assignee: 华为技术有限公司
Priority date: 2013-02-08
Filing date: 2014-01-15
Publication date: 2014-08-14
Also published as: CN103139015A; CN103139015B

Abstract

The embodiments of the present invention provide a network sharing detection method, apparatus and device. The network sharing detection method of the present invention comprises: a network sharing detection device receiving a data stream sent by a terminal device; the network sharing detection device acquiring routing hop information of the data stream; and the network sharing detection device recognizing whether the terminal device uses a network sharing function according to the routing hop information of the data stream. In the embodiments of the present invention, by analyzing the routing hop information of the data stream sent by the terminal device, accurate recognition of whether the terminal device uses the network sharing function is achieved, and the management capability of an operator to network sharing is improved. In a further implementation mode, whether a terminal device is a host device or a non-host device can also be recognized.

Description

Network sharing detection method, device and device

The embodiments of the present invention relate to network technologies, and in particular, to a network sharing detection method, apparatus, and device. Background technique

With the development of network technology, terminal devices can implement wireless Internet access through network sharing (Tethering), which can avoid the traffic charges generated by their own wireless Internet access. However, this has generated many management services for operators. inconvenient.

A network share is a terminal device B (ie, a host device) that is shared by a terminal device A (ie, a non-host device) through a technology such as a Wifi (Wireless Fidelity) wireless LAN or Bluetooth, a Universal Serial Bus (USB), or the like. Connected, sharing the Internet access function of terminal device B (host device). In order to improve the management capabilities of operators in network data services, it is extremely important to determine whether users use network sharing functions. The prior art detects the user agent field (UserAgent) in the data flow of the data service of the terminal device by carrying the hardware manufacturer information and/or the operating system (OS) information, or the data of the data service through the terminal device. The hardware vendor information and/or OS information extracted from the default parameters of the Transmission Control Protocol (TCP)/Internet Protocol (IP) protocol stack is detected in the different IP flows of the same user. When a packet data protocol (PDP) activation is detected and a plurality of different vendor information and/or OS information are concurrently generated, it can be determined that the user uses the network share.

With the above prior art, if a plurality of terminal devices implementing network sharing have the same hardware vendor information and/or OS information, the prior art cannot recognize whether the user uses the network sharing function. Summary of the invention

The embodiment of the invention provides a method, a device and a device for detecting a network sharing, so as to solve the problem that the network sharing function is not recognized by the terminal device, so as to improve the management capability of the network sharing by the operator. The embodiment of the invention provides a method, a device and a device for detecting a network sharing, so as to solve the problem that the network sharing function is not recognized by the terminal device, so as to improve the management capability of the network sharing by the operator.

In a first aspect, an embodiment of the present invention provides a network sharing detection method, including: receiving, by a network sharing detection device, a data stream sent by a terminal device;

The network sharing detecting device acquires route hop count information of the data stream;

The network sharing detecting device identifies, according to the routing hop count information of the data stream, whether the terminal device applies the network sharing function.

In a first possible implementation manner of the first aspect, the network sharing detecting device receives the data stream sent by the terminal device, including:

The network sharing detecting device receives two or more data streams sent by the terminal device;

The network sharing detecting device obtains the routing hop information of the data stream, including:

The network sharing detecting device obtains the actual number of route hops of the two or more data streams, where the actual number of hops of the route is the number of routing network elements that the data stream passes through in the communication network;

The network sharing detecting device identifies, according to the routing hop information of the data stream, whether the terminal device uses the network sharing function, including:

The network sharing detecting device compares whether the actual number of hops of the two or more data streams is different. If different, it determines that the terminal device applies the network sharing function.

According to the first possible implementation manner of the first aspect, in a second possible implementation manner, after determining that the terminal device applies the network sharing function, the method further includes:

The network sharing detecting device compares the actual number of hops of the two or more data streams, and determines that the data stream with a large number of actual hops is initiated by the non-homed device, and the data stream with the small number of actual hops is initiated by the host device.

In a third possible implementation manner of the first aspect, the network sharing detecting device obtains the routing hop information of the data stream, including:

The network sharing detecting device obtains the actual number of route hops of the data stream, where the actual number of hops of the route is the number of routing network elements that the data stream passes through in the communication network;

The network sharing detecting device identifies, according to the routing hop information of the data stream, whether the terminal device applies the network sharing function, including: The network sharing detecting device obtains a default route hop count between the network sharing detecting device and the terminal device, where the default route hop count is a route hopping with the network sharing detecting device when the terminal device establishes a data service channel by itself. number;

The network sharing detecting device compares the actual route hop count of the data stream with the default route hop count. If different, it determines that the terminal device applies the network sharing function.

According to a third possible implementation manner of the first aspect, in a fourth possible implementation manner, after determining that the terminal device applies the network sharing function, the method further includes:

The network sharing detecting device compares whether the actual number of route hops of the data stream is greater than the default route hop count, and if yes, determines that the data stream is initiated by the non-homed device, and if not, determines that the data stream is initiated by the host device.

According to any one of the first to fourth possible implementation manners of the first aspect, in a fifth possible implementation, the actual route hop count is a current lifetime value of the data stream and the terminal device The difference between the initial lifecycle values.

According to the fifth possible implementation manner of the first aspect, in a sixth possible implementation, before the network sharing detecting device acquires the actual number of route hops of the data stream, the method further includes:

The network sharing detecting device acquires the terminal device identification information from the data packet of the data stream; the network sharing detecting device queries the database to obtain an initial life cycle value of the terminal device according to the terminal device identification information.

In a seventh possible implementation manner of the first aspect, the network sharing detecting device receives the data stream sent by the terminal device, including:

The network sharing detecting device acquires a current life cycle value of the two or more data streams. The network sharing detecting device identifies, according to the routing hop information of the data stream, whether the terminal device applies the network sharing function, including:

The network sharing detecting device compares whether the current life cycle values of the two or more data streams are different. If they are different, determining that the terminal device applies the network sharing function. According to the first aspect, the first, the third or the seventh possible implementation manner of the first aspect, in the eighth possible implementation manner, after determining that the terminal device applies the network sharing function, Includes one or a combination of the following steps:

The network sharing detecting device performs one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data stream sent by the terminal device according to the recognition result; or

The network sharing detecting device outputs a report of the information according to the data flow of the terminal device. According to the second or fourth possible implementation manner of the first aspect, in a ninth possible implementation manner, determining that the data flow is initiated by a non-homed device, or determining that the data flow is initiated by a host device After the step, it also includes one or a combination of the following steps:

The network sharing detecting device performs one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data flow initiated by the host device or the data flow initiated by the non-host device according to the identification result; or

The network sharing detecting device outputs the information according to the data flow sent by the host device or the non-host device respectively.

In a second aspect, an embodiment of the present invention provides a network sharing detection apparatus, including: a receiving module, configured to receive a data stream sent by a terminal device;

An obtaining module, configured to obtain routing hop information of the data stream;

The identification module is configured to identify, according to the route hop count information of the data flow, whether the terminal device applies the network sharing function.

In a first possible implementation manner of the second aspect, the receiving module includes:

a first receiving unit, configured to receive two or more data streams sent by the terminal device; the acquiring module includes:

a first acquiring unit, configured to obtain an actual number of hops of the two or more data flows, where the actual number of hops is the number of routing network elements that the data stream passes in the communication network;

The identification module includes:

The first identifying unit is configured to compare whether the actual number of hops of the two or more data streams is different. If different, determine that the terminal device applies the network sharing function.

According to the first possible implementation manner of the second aspect, in a second possible implementation manner, the method further includes: The first comparison module is configured to compare the actual number of hops of the two or more data flows, and determine that the data flow with a large number of actual hops is initiated by the non-homed device, and the data flow with a small actual number of hops is initiated by the host device. .

In a third possible implementation manner of the second aspect, the acquiring module includes:

a second acquiring unit, configured to obtain an actual number of route hops of the data stream, where the actual number of hops of the route is a number of routing network elements that the data stream passes in the communication network;

The identification module includes:

a third acquiring unit, configured to obtain a default route hop count between the network sharing detecting device and the terminal device, where the default route hop count is between the network device and the network sharing detecting device when the terminal device establishes a data service channel Number of route hops;

The second identifying unit is configured to compare whether the actual number of route hops of the data stream and the default route hop count are the same. If not, determine that the terminal device applies the network sharing function.

According to a third possible implementation manner of the second aspect, in a fourth possible implementation manner, the method further includes:

a second comparison module, configured to compare whether the actual route hop count of the data stream is greater than the default route hop count, and if yes, determine that the data flow is initiated by the non-homed device, and if not, determine that the data flow is initiated by the host device of.

According to any one of the first to fourth possible implementation manners of the second aspect, in a fifth possible implementation, the actual route hop count is a current lifetime value of the data stream and the terminal device The difference between the initial lifecycle values.

According to the fifth possible implementation manner of the second aspect, in a sixth possible implementation manner, the method further includes:

a second acquiring subunit, configured to obtain terminal device identification information from the data packet of the data stream before acquiring the actual route hop count of the data stream;

The query subunit is configured to query, according to the terminal device identification information, the initial lifetime value of the terminal device from the database.

In a seventh possible implementation manner of the second aspect, the receiving module includes:

a second receiving unit, configured to receive two or more data streams sent by the terminal device; the acquiring module includes: a fourth acquiring unit, configured to acquire current current period values of the two or more data streams; the identifying module includes:

And a third identifying unit, configured to compare whether current lifetime values of the two or more data streams are different, and if different, determine that the terminal device applies a network sharing function.

According to the second aspect, the first, the third or the seventh possible implementation manner of the second aspect, in the eighth possible implementation manner, the one or the combination of the following modules is further included:

a first control module, configured to perform one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data stream sent by the terminal device according to the identification result; or

The first output module is configured to output a report of the information according to the data flow of the terminal device. According to the second or fourth possible implementation manner of the second aspect, in the ninth possible implementation manner, one or a combination of the following modules is further included:

a second control module, configured to perform one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data flow initiated by the host device or the data flow initiated by the non-host device according to the identification result; Or

The second output module is configured to output the information according to the sending condition of the data stream initiated by the host device or the non-host device, respectively.

The third aspect of the present invention provides a network sharing detecting device, including: a network sharing detecting device provided by any embodiment of the present invention; the network sharing detecting device is integrated in a network access server or an internet gateway device, or is disposed in Network access server and the Internet.

The network sharing detection method, the device, and the network sharing detection device in the embodiment of the present invention analyze the routing hop information of the data stream sent by the terminal device, and solve the problem that the terminal device cannot use the network sharing function in some cases. Enhance the operator's accurate management of the network. In a further embodiment, it can also be identified whether the terminal device is a host device or a non-host device. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor. 1 is a flowchart of Embodiment 1 of a network sharing detection method according to the present invention;

2 is a flowchart of Embodiment 2 of a network sharing detection method according to the present invention;

3 is a flowchart of Embodiment 3 of a network sharing detection method according to the present invention;

4 is a flowchart of Embodiment 4 of a network sharing detection method according to the present invention;

FIG. 5 is a flowchart of Embodiment 5 of a network sharing detection method according to the present invention;

6 is a flowchart of Embodiment 6 of a network sharing detection method according to the present invention;

7 is a flowchart of Embodiment 7 of a network sharing detection method according to the present invention;

8 is a flowchart of Embodiment 8 of a network sharing detection method according to the present invention;

9 is a flowchart of Embodiment 9 of a network sharing detection method according to the present invention;

FIG. 10 is a schematic structural diagram of Embodiment 1 of a network sharing detecting apparatus according to the present invention;

11 is a schematic structural diagram of Embodiment 2 of a network sharing detecting apparatus according to the present invention;

12 is a schematic structural diagram of Embodiment 3 of a network sharing detecting apparatus according to the present invention;

13 is a schematic structural diagram of Embodiment 4 of a network sharing detecting apparatus according to the present invention;

14 is a schematic structural diagram of Embodiment 5 of a network sharing detecting apparatus according to the present invention;

15 is a schematic structural diagram of Embodiment 6 of a network sharing detecting apparatus according to the present invention;

16 is a schematic structural diagram of Embodiment 7 of a network sharing detecting apparatus according to the present invention;

17 is a schematic structural diagram of Embodiment 8 of a network sharing detecting apparatus according to the present invention;

18 is a schematic structural diagram of Embodiment 9 of a network sharing detecting apparatus according to the present invention;

FIG. 19 is another schematic structural diagram of Embodiment 9 of the network sharing detecting apparatus according to the present invention; FIG. 20 is a schematic diagram of the working principle of the embodiment of the network sharing detecting apparatus according to the present invention;

FIG. 21 is a schematic structural diagram of a system for controlling service transmission according to an embodiment of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Embodiment 1

1 is a flowchart of Embodiment 1 of a network sharing detection method according to the present invention, where the method is applicable to determining Whether the user uses the network sharing technology in the network data service, as shown in FIG. 1 , the method in this embodiment may include:

S101. The network sharing detecting device receives the data stream sent by the terminal device.

The terminal device is a type of electronic device that initiates a data service, such as a smart phone or a tablet computer; the data stream is read by the terminal device to a service provider (SP) server in a predetermined order. A sequence of data that is taken once, wherein the data stream includes a plurality of data packets, each of which includes various information such as address information of the sender and the receiver, and may be, for example, an IP packet, which may include a TCP packet. /IP stack default parameters, hardware vendor information and/or OS information carried by the UserAgent; the data stream can be an IP stream. The network sharing detection device is configured to detect whether the user uses the network sharing technology, and may be integrated into an existing network element, such as a gateway device, or may be independently set.

5102. The network sharing detection device acquires route hop count information of the data flow.

Specifically, the number of route hops is the number of routed network elements in the data stream transmission process, that is, the data stream hops once every time a route network element passes, that is, the number of route hops is increased by 1, and the hop count information is recorded in the The data stream is inside certain fields of the packet. If the terminal device adopts the network sharing technology, the terminal device (ie, the host device) that provides the network sharing can be used as a one-hop routing network element of the terminal device (ie, the non-host device) that uses the network share. The route hop count information is information that can be read or parsed in real time from the data packet of the data stream during the data transmission process, and can reflect information about the number of route hops of the data stream, such as a life cycle (Time To Live, TTL) value, etc.

The host device is a device that establishes an actual physical communication link, and shares the data service channel carried by the physical communication link to the non-host device through a communication technology such as USB, Bluetooth, or Wifi. The non-homed device is a device that accesses data services using a data service channel shared by a host device through USB, Bluetooth, or Wifi. This paper refers to the sharing of the above data service channels as network sharing. In the network sharing process, the host device and the non-host device can initiate data services concurrently, or only the host device or the non-host device can initiate data services.

5103. The network sharing detection device identifies, according to the route hop count information of the data flow, whether the terminal device applies the network sharing function.

Specifically, when a data stream sent by the terminal device is transmitted to the network sharing detecting device in a PDP activation, the routing hop information of the data stream is used to identify whether the terminal device applies the network. The network sharing function determines whether the terminal device applies the network sharing function by reading or parsing the routing hop information. For example, the routing hop information can be used for parsing to determine the routing hop count of the data flow, and is activated by one PDP. Comparing different data streams, if there are different routing hops, it indicates that the terminal device uses the network sharing function; it can also be judged by directly reading the hop count information such as the TTL value, if it is sent at the terminal device The existence of different TTL values in multiple data streams indicates that the terminal device applies the network sharing function, but is not limited thereto.

In this embodiment, by reading or parsing the data flow routing hop information, it is possible to accurately identify whether the terminal device applies the network sharing function, and improve the management capability of the operator for network sharing.

Embodiment 2

2 is a flowchart of Embodiment 2 of a network sharing detection method according to the present invention. On the basis of the foregoing embodiment, the network sharing detection device receives a data stream sent by the terminal device, and includes: the network sharing detection device receives the terminal device and sends the data packet. The network share detection device obtains the route hop count information of the data stream, and the network share detection device obtains the actual route hops of the two or more data streams respectively; the network share detection device Determining whether the terminal device uses the network sharing function according to the routing hop information of the data stream, the method includes: comparing, by the network sharing detecting device, whether the actual routing hops of the two or more data flows are different, and if different, determining the terminal device The network sharing function is applied. As shown in FIG. 2, the method in this embodiment may include:

S201. The network sharing detection device receives two or more data streams sent by the terminal device.

S202: The network sharing detection device obtains the actual route hops of the two or more data streams, where the actual route hop count is the number of routing network elements that the data stream passes in the communication network.

The actual number of hops of the route is the number of routed network elements that the data stream passes through in the communication network, that is, the number of routed network elements that the data packet sent by the terminal device actually passes when received by the network share detection device. When the terminal device is a non-homed device, for the non-host device, the host device is also a routing network element.

S203. The network sharing detecting device compares whether the actual number of hops of the two or more data streams is different. If different, determining that the terminal device applies the network sharing function.

Specifically, in a PDP activation, the network sharing detecting device compares actual hops of the two or more data flows, and if it is determined that there are different actual hops, The terminal device that determines the originating data service applies the network sharing function.

In this embodiment, by comparing and analyzing the actual route hops information of different data streams, it is possible to accurately identify whether the terminal device applies the network sharing function, and improve the operator's management capability for network sharing.

Embodiment 3

3 is a flowchart of Embodiment 3 of a network sharing detection method according to the present invention. On the basis of Embodiment 2, after determining that the terminal device applies the network sharing function, the method further includes: comparing, by the network sharing detecting device, the two The actual number of hops of the data stream is determined by the non-homed device. The data stream with the actual number of hops is initiated by the host device. As shown in FIG. 3, the method in this embodiment includes:

5202. The network sharing detection device obtains the actual route hops of the two or more data flows, where the actual route hop count is the number of route network elements that the data stream passes in the communication network.

S203: The network sharing detecting device compares whether the actual number of hops of the two or more data streams is different. If different, determining that the terminal device applies the network sharing function.

S301. The network sharing detection device compares the actual number of hops of the two or more data flows, and determines that the data flow with a large number of actual hops is initiated by the non-homed device, and the data flow with a small actual hop count is initiated by the host device. .

Specifically, after the network sharing detecting device determines that the terminal device applies the network sharing function, the actual number of hops of the two or more data streams is further compared, and the data stream with the actual number of hops is a non-host device. The data flow initiated by the host with a small number of hops is initiated by the host device.

In this embodiment, by comparing the actual number of hops of the two or more data streams, the terminal device is accurately identified as a non-homed device or a host device, and the terminal device is not recognized as a host device during the network sharing process. Or a problem with a non-host device.

Embodiment 4

4 is a flowchart of a fourth embodiment of a network sharing detection method according to the present invention. On the basis of the first embodiment, the network sharing detection device obtains the routing hop information of the data stream, including: The actual number of hops of the data stream. The actual number of hops of the route is the data. The number of the routing network elements that are traversed in the communication network; the network sharing detecting device identifies, according to the routing hop information of the data stream, whether the terminal device applies the network sharing function, and the method includes: the network sharing detecting device acquiring the network sharing detection The default number of route hops between the device and the terminal device. The default route hop count is the number of route hops between the device and the network share detection device when the terminal device establishes a data service channel. The network share detection device compares the data. Whether the actual number of hops of the flow and the number of hops of the default route are the same. If they are different, it is determined that the terminal device applies the network sharing function. The method is not required to compare multiple data streams, and can be separately identified for each data stream. As shown in FIG. 4, the method in this embodiment includes:

Specifically, the data stream may be one or more, and the method of this embodiment may perform judgment for each data stream.

S401. The network share detection device obtains an actual number of route hops of the data stream, where the actual route hop count is the number of route network elements that the data stream passes through in the communication network.

The actual number of hops of the route is the number of routed network elements that the data stream passes through in the communication network, that is, the number of routed network elements actually passed by the data packet sent by the terminal device when the network share detection device receives. When the terminal device is a non-homed device, for the non-host device, the host device is also a routing network element.

5402. The network sharing detection device obtains a default route hop count between the network sharing detection device and the terminal device, where the default route hop count is assumed to be between the network device and the network sharing detection device when the terminal device establishes a data service channel. The number of route hops.

Specifically, the default route hop count is a number of route hops between the terminal and the network sharing detection device when the terminal device establishes a data service channel, that is, the default route hop count is assuming that the terminal device is a host device, and the network share is Detects the number of route hops between the device and the terminal device. When the network access point (APN) of the terminal device is fixed, the default route hop count is a fixed value. Specifically, the network sharing detecting device may obtain the default route hop count by parsing the route hopping information in the data packet sent by the terminal device when the device is actually the physical communication link (that is, when the device is the host device). For example, a route detection or discovery tool such as a traceroute program is used to perform the above analysis.

5403. The network sharing detection device compares the actual number of route hops of the data flow with the default route. Whether the hop count is the same or not, if it is different, it is determined that the terminal device applies the network sharing function.

Specifically, in a PDP activation, the network sharing detecting device compares the actual number of hops of the same data stream with the default number of hops. If not, it determines that the terminal device applies the network sharing function.

In this embodiment, by comparing the actual number of hops of the same data stream with the number of hops of the default route, it is possible to accurately identify whether the terminal device applies the network sharing function, and improve the management capability of the operator for network sharing.

Embodiment 5

5 is a flowchart of Embodiment 5 of a network sharing detection method according to the present invention. On the basis of Embodiment 4, after determining that the terminal device applies the network sharing function, as shown in FIG. 5, the method in this embodiment is shown in FIG. Also includes:

S501: The network sharing detecting device compares whether the actual number of hops of the data stream is greater than the default hop count, and if yes, determining that the data stream is initiated by the non-homed device, and if not, determining that the data stream is initiated by the host device. of.

Specifically, in a PDP activation, when the data stream sent by the terminal device is transmitted to the network sharing detection device, the network sharing detection device parses the actual route hop count of the data stream, and the actual route hop count of the data stream. The default route hop count between the terminal device and the network share detection device is compared to facilitate identification of the terminal device as a host device or a non-host device. If, during a PDP activation, the actual number of hops in the same data stream is greater than the default number of hops, the terminal device is a non-homed device in the PDP activation. If the data stream is in the PDP activation. The actual number of hops of the route is equal to the default number of hops to determine that the terminal device is the host device.

In this embodiment, by comparing the actual number of hops of each data stream with the number of hops of the default route, the terminal device is accurately identified as a non-homed device or a host device, and the terminal device cannot be identified during the network sharing process. A problem with a host device or a non-host device.

Optionally, if it is detected in the PDP activation that the actual number of route hops of each data stream sent by the terminal device is the same as the default route hop count of the terminal device, it indicates that the terminal device does not use the network share in the PDP activation. Features. If the actual number of hops of multiple data streams is different from the default number of hops, it can be determined that these data streams are initiated by non-host devices. Embodiment 6

FIG. 6 is a flowchart of Embodiment 6 of the network sharing detection method of the present invention. In this embodiment, the actual route hop count is the current life cycle value of the data flow and the initial life cycle of the terminal device. The difference between the values. As shown in FIG. 6, the core of the fourth embodiment is taken as an example. The method of this embodiment includes:

S601. The network sharing detection device acquires a current lifetime value of the data packet in the data stream. Specifically, the TTL value is a characterization value in the default parameter of the IP/TCP protocol stack, and indicates the maximum number of routing network elements that the data packet can pass before being discarded. When the data packet passes through a routing network element TTL The value is decremented by 1. When the TTL value is 0, the routing network element discards the data packet. The initial TTL values are different for different terminal devices.

S602. The network sharing detection device calculates a difference between the current lifecycle value and an initial lifetime value of the terminal device as the actual route hop count.

S403. The network sharing detecting device compares the actual number of hops of the data stream with the default number of hops of the default, and if different, determines that the terminal device applies the network sharing function.

In this embodiment, the TTL value in the default parameters of the IP/TCP protocol stack is used to calculate the actual hop count. Since the TTL data has the advantages of high accuracy, difficulty in being modified, and convenient extraction, whether the terminal device is further improved. The ability to use the network sharing function is reduced, and the complexity of the network sharing detection device is reduced.

Example 7

FIG. 7 is a flowchart of Embodiment 7 of a network sharing detection method according to the present invention. On the basis of Embodiment 6, before the network sharing detection device acquires the actual number of hops of the data stream, the network sharing detection device further includes: The detecting device obtains the terminal device identification information from the data packet of the data stream; the network sharing detecting device queries the database to obtain an initial life cycle value of the terminal device according to the terminal device identification information. As shown in Figure 5, the above solution can be selected as follows:

S101. The network sharing detecting device receives the data stream sent by the terminal device. S601. The network sharing detection device acquires a current lifetime value of the data packet in the data stream. S701. The network sharing detecting device acquires terminal device identification information from the data packet of the data stream.

Specifically, the terminal device identification information is a plurality of information, such as hardware vendor information or OS information, corresponding to the terminal device in the data packet, so as to ensure that different terminal devices can correspond to a unique initial TTL value, thereby preventing a reading error. .

S702. The network sharing detecting device queries, according to the terminal device identification information, an initial life cycle value of the terminal device from the database.

Specifically, the database stores an initial TTL value corresponding to the identification information of the electronic device as the terminal device, and the network sharing detection device can read the initial of the terminal device corresponding to the terminal device according to the identification information of the terminal device. TTL value for later use.

In this embodiment, the initial TTL value of the terminal device is obtained by querying the obtained terminal device identification information in the data packet, thereby improving the accuracy of obtaining the initial TTL value, and ensuring whether the terminal device uses the network sharing. Reliability of functional recognition.

Example eight

FIG. 8 is a flowchart of Embodiment 8 of the network sharing detection method of the present invention. On the basis of Embodiment 1, the network sharing detection device receives the data stream sent by the terminal device, and includes: the network sharing detection device receives the terminal device and sends the data packet. The network share detection device obtains the current life cycle value of the two or more data flows; the network share detection device is configured according to the route hop count information of the data flow, where the network share detection device acquires The route hop count information of the data stream identifies whether the terminal device applies the network sharing function, and the method includes: comparing, by the network share detecting device, whether current lifetime values of the two or more data streams are different, and if different, determining the end The end device applies the network sharing function. As shown in FIG. 8, the method in this embodiment may include:

The network sharing detecting device receives two or more data streams sent by the terminal device.

The implementation of S801 is similar to the implementation process of S201, and details are not described herein again.

5802. The network sharing detection device acquires a current lifecycle value of the two or more data streams.

Specifically, the TTL value is a characterization value in the default parameter of the IP/TCP protocol stack, and indicates the maximum number of routing network elements that the data packet can pass before being discarded. When the data packet passes through a routing network element TTL The value is decremented by 1. When the TTL value is 0, the routing network element discards the data packet. The initial TTL values are different for different terminal devices.

S803. The network sharing detecting device compares whether the current lifetime values of the two or more data streams are different. If different, determining that the terminal device applies the network sharing function.

Specifically, in a PDP activation, the network sharing detecting device compares current TTL values of the two or more data streams, and if not, determines that the terminal device applies the network sharing function.

In this embodiment, the current TTL value can be directly extracted from the data packet as the hop count information, and no corresponding calculation is needed. Only the current TTL values in different IP flows need to be compared, and the terminal device can be quickly determined whether the terminal device is The use of network sharing features has improved recognition efficiency. In the above embodiment, if the initial TTL value cannot be obtained, the current shared TTL value can be used to directly identify whether the terminal device uses the network sharing function. If the PDP activation occurs, the network sharing detection device detects different. If there are different current TTL values in the data stream, it indicates that the terminal device uses the network sharing function.

Example 9

FIG. 9 is a flowchart of Embodiment 9 of the network sharing detection method of the present invention. In this embodiment, after determining that the terminal device applies the network sharing function, the method further includes one of the following steps or Combination: the network sharing detecting device performs one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data stream sent by the terminal device according to the identification result; or the network sharing detecting device is configured according to the terminal device The data stream is sent, and the information report is output. As shown in FIG. 9, the method in the first embodiment is taken as an example. The method in this embodiment can be performed as follows: S101. The network sharing detecting device receives the data stream sent by the terminal device.

S901. The network sharing detecting device performs one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data stream sent by the terminal device according to the identification result.

The network sharing detecting device may perform one or any combination of the following control functions according to the preset control policy according to the foregoing method for identifying whether the terminal device uses the network sharing function: charging control, bandwidth control , block control or reminder control.

For example, the control policy may adopt charging control, and may separately charge for the host device traffic and the non-host device traffic, including the flow rate, the duration, and the billing, such as the monthly/package/package week. Traffic and duration accounting can also be performed simultaneously.

For example, the control strategy may also use bandwidth control to perform bandwidth control for the host device traffic and the non-homed device traffic separately, such as providing a larger maximum allowable bandwidth for the host device and a smaller maximum allowable bandwidth for the non-host device. To reduce the load on the network.

For example, the control strategy can also use blocking control, which can be controlled in different ways for host device traffic and non-host device traffic. If you can only block non-host device traffic, you can also block only the host device traffic, or block both host device and non-host device traffic to reduce network load. Specifically, the blocking control may be further based on the foregoing bandwidth control, for example, blocking the traffic of the non-host device exceeding the maximum allowed bandwidth.

For example, the control policy may also adopt a reminder control. After detecting the network sharing technology adopted by the terminal device, the real-time reminding information may be sent to the terminal device in a targeted manner. Specifically, the alerting control may not distinguish whether the terminal device is a host device or a non-host device, or may be only for a host device or a non-host device. The process of sending reminders can be by SMS or Hypertext Transport Protocol (HTTP). The specific content of the reminder information can be: For example, remind the user to subscribe to the network sharing service package in order to continue to use the network sharing service, otherwise the network sharing will be blocked, and so on.

Those skilled in the art can understand that the above control strategies can be used alone or in any combination without causing technical conflicts. S902. The network sharing detection device outputs a report of the information according to the data flow of the terminal device.

Specifically, the network sharing detecting device can output various types of information reports, such as: a network shared traffic report, a network shared user report, and a TOP-N network shared user report. Through the above information report, network sharing can be visually managed in the network management process, which reduces the complexity of communication network management.

It can be understood by those skilled in the art that, for S901 and S902, the S902 output information report may be separately implemented on the cornerstone of the S901 processing control, thereby further implementing accurate management of network sharing and improving management control of the communication network. ability.

Optionally, after the step of determining that the data stream is initiated by the non-host device, or determining that the data stream is initiated by the host device, the method further includes one or a combination of the following steps. The network sharing detecting device performs one or any combination of charging control, bandwidth control, blocking control, and reminder control on the data flow initiated by the host device or the data flow initiated by the non-host device according to the recognition result; or The network sharing detecting device outputs a report of the information according to the sending status of the data stream initiated by the host device or the non-host device.

After the result of identifying the terminal device as a host device or a non-host device, the present embodiment performs different control and information report output for the host device and the non-host device, and the implementation is similar to the implementation process of S901 and S902. Let me repeat.

Example ten

FIG. 10 is a schematic structural diagram of Embodiment 1 of a network sharing detection apparatus according to the present invention. As shown in FIG. 10, the network sharing detection apparatus of this embodiment may include: a receiving module 101, an obtaining module 102, and an identifying module 103, where the receiving module The receiving module 102 is configured to receive the routing hop information of the data stream, and the identifying module 103 is configured to identify, according to the routing hop information of the data stream, whether the terminal device applies the network. Sharing features.

The device in this embodiment may be used to implement the technical solution of the network sharing detection method according to the embodiment of the present invention. The implementation principle and technical effects are similar, and details are not described herein again.

Embodiment 11

FIG. 11 is a schematic structural diagram of Embodiment 2 of a network sharing detecting apparatus according to the present invention. As shown in FIG. 11, the apparatus in this embodiment is on the basis of the apparatus structure shown in Embodiment 1 of the apparatus, and further, the receiving The module 101 includes: a first receiving unit 111, configured to receive two or more data streams sent by the terminal device; the acquiring module 102 includes: a first acquiring unit 112, configured to acquire an actual route hop of the two or more data streams The number of the actual route hops is the number of routing network elements that the data stream passes in the communication network; the identification module 103 includes: a first identifying unit 113, configured to compare the actual number of hops of the two or more data streams Whether it is different, if different, it is determined that the terminal device applies the network sharing function.

The network sharing detection device of this embodiment may be used to perform the technical solution of the network sharing detection method provided by the embodiment of the present invention. The implementation principle and technical effects are similar, and are not described herein again.

Example twelve

12 is a schematic structural diagram of Embodiment 3 of a network sharing detecting apparatus according to the present invention. As shown in FIG. 12, the apparatus of this embodiment is based on the apparatus structure of the apparatus embodiment shown in Embodiment 2. Further, the method further includes: The module 121 is configured to compare the actual number of hops of the two or more data flows, and determine that the data flow with a large number of actual hops is initiated by the non-homed device, and the data flow with a small actual number of hops is initiated by the host device.

Example thirteen

FIG. 13 is a schematic structural diagram of Embodiment 4 of the network sharing detecting apparatus according to the present invention. As shown in FIG. 13, the apparatus in this embodiment is on the basis of the apparatus structure shown in the first embodiment of the apparatus. Further, the obtaining module 102 includes: The second obtaining unit 131 is configured to obtain the actual number of hops of the data stream, where the actual number of hops is the number of routing network elements that the data stream passes in the communication network. The identifying module 103 includes: a third acquiring unit 132. And a second identifying unit 133, wherein the third obtaining unit 132 is configured to obtain a default route hop count between the network sharing detecting device and the terminal device, where the default route hop count is assumed to be a data service channel established by the terminal device itself. Sharing the number of route hops between the detection device and the network; the second identification unit 133 is configured to compare whether the actual number of route hops of the data stream and the default route hop count are the same, and if different, determine that the terminal device is applied. Network sharing function. The network sharing detection apparatus of this embodiment may be used to perform the technical solution of the network sharing detection method provided by the embodiment of the present invention. The implementation principle and technical effects are similar, and details are not described herein again.

Embodiment 14

FIG. 14 is a schematic structural diagram of Embodiment 5 of the network sharing detecting apparatus of the present invention. As shown in FIG. 14, the apparatus of this embodiment is based on the basis of the apparatus structure shown in Embodiment 4 of the apparatus, and further includes: The module 141 is configured to compare whether the actual route hop count of the data stream is greater than the default route hop count, and if yes, determine that the data stream is initiated by the non-host device, and if not, determine that the data stream is initiated by the host device.

Example fifteen

FIG. 15 is a schematic structural diagram of Embodiment 6 of the network sharing detecting apparatus according to the present invention. As shown in FIG. 15, the apparatus in this embodiment is on the basis of the apparatus structure shown in Embodiment 4 of the apparatus, and further, the second acquiring unit 131 The method further includes: a first obtaining subunit 151 and a calculating subunit 152, wherein the first obtaining subunit 151 is configured to obtain a current lifecycle value of the data packet in the data stream; the calculating subunit 152 is configured to calculate the current life The difference between the period value and the initial lifetime value of the terminal device is taken as the actual number of hops of the route.

Example sixteen

FIG. 16 is a schematic structural diagram of Embodiment 7 of the network sharing detecting apparatus according to the present invention. As shown in FIG. 16, the apparatus in this embodiment is on the basis of the apparatus structure shown in Embodiment 6 of the apparatus, and further, the second acquiring unit 131 The method further includes: a second obtaining subunit 161 and a query subunit 162, wherein the second obtaining subunit 161 is configured to obtain a terminal device from the data packet of the data stream before acquiring the actual routing hop count of the data stream. Identification information, the query sub-unit 162 queries and obtains an initial lifetime value of the terminal device from the database according to the terminal device identification information. The network sharing detection apparatus of this embodiment may be used to perform the technical solution of the network sharing detection method provided by the embodiment of the present invention. The implementation principle and technical effects are similar, and details are not described herein again.

Example seventeen

FIG. 17 is a schematic structural diagram of Embodiment 8 of the network sharing detecting apparatus according to the present invention. As shown in FIG. 16, the apparatus in this embodiment is in the cornerstone of the apparatus structure shown in Embodiment 1 of the apparatus. Further, the receiving module 101 includes: The second receiving unit 171 is configured to receive two or more data streams that are sent by the terminal device. The acquiring module 102 includes: a fourth acquiring unit 172, configured to acquire current life cycle values of the two or more data streams; The module 103 includes: a third identifying unit 173, configured to compare whether current lifetime values of the two or more data streams are different, and if different, determine that the terminal device applies a network sharing function.

Example 18

FIG. 18 is a schematic structural diagram of Embodiment 9 of the network sharing detecting apparatus of the present invention. As shown in FIG. 18, the apparatus of this embodiment is based on the apparatus structure of the apparatus embodiment shown in the first embodiment of the apparatus, and further includes: The module 181 and the first output module 182, wherein the first control module 181 is configured to perform one or any of charging control, bandwidth control, blocking control, and reminder control on the data stream sent by the terminal device according to the recognition result. In combination, the first output module 182 is configured to output a report of the information according to the data flow of the terminal device.

Optionally, FIG. 19 is another schematic structural diagram of Embodiment 9 of the network sharing detection apparatus according to the present invention. As shown in FIG. 19, the apparatus of this embodiment is based on the apparatus structure shown in Embodiment 3 of the apparatus, and further, The second control module 191 is further configured to: perform, according to the identification result, a data flow initiated by the host device or a data flow initiated by the non-host device, according to the identification result. Charge control, bandwidth control, blocking control and reminder control In one or any combination, the second output module 192 is configured to output an information report according to the sending status of the data stream initiated by the host device or the non-host device. The network sharing detection apparatus of this embodiment may be used to perform the technical solution of the network sharing detection method provided by the embodiment of the present invention. The implementation principle and technical effects are similar, and details are not described herein again.

Example 19

FIG. 20 is a schematic diagram of the working principle of the network sharing detecting device of the present invention. The network sharing detecting device of this embodiment includes the network sharing detecting device provided by any embodiment of the present invention; the network sharing detecting device is integrated in the network access server ( Network Access Server, NAS) or Internet gateway device, or set between the NAS device and the Internet.

In this embodiment, the network sharing detection device is integrated into the NAS device as an example, as shown in the figure.

As shown at 20, the network share detecting device 201 is integrated in the NSA device 202 and disposed between the host device 204 and the Internet 203. The first non-homed device 205, the second non-homed device 206, and the third non-homed device 207 implement network sharing with the host device 204 via Wifi, Bluetooth, USB, and the like. Among them, the non-host devices may be one or more.

Correspondingly, the network sharing detection device of this embodiment may perform the technical solution of the network sharing detection method provided by any embodiment of the present invention, and the implementation principle and technical effects thereof are similar, and details are not described herein.

Referring to Figure 21, there is provided a block diagram of a system for implementing control traffic transmission for each of the foregoing methods. The system for controlling traffic transmission includes at least one processor 1001, such as a CPU, at least one network interface 1004 or other user interface 1003, memory 1005, and at least one communication bus 1002. Communication bus 1002 is used to implement connection communication between the aforementioned devices. The system for controlling service transmission optionally includes a user interface 1003, such as a display, a keyboard or a pointing device. The memory 1005 may include a high speed RAM memory, and may also include a non-volatile memory such as at least one disk memory. The memory 1005 can optionally include at least one storage device located remotely from the aforementioned CPU 1001. In some embodiments, memory 1005 stores the following elements, modules or data structures, or a subset thereof, or their extension set:

An operating system 1006, including various programs for implementing various basic services and processing hardware-based tasks; The receiving module 101, the obtaining module 102, and the identifying module 103, wherein the receiving module 101 is configured to receive a data stream sent by the terminal device, where the acquiring module 102 is configured to obtain routing hop information of the data stream, and the identifying module 103 is configured to: And determining, according to the route hop count information of the data flow, whether the terminal device applies the network sharing function. For a better description of the working principle of the foregoing module, refer to the specific description in the method shown in Figure 1-10, and details are not described herein. Correspondingly, reference may also be made to FIG. 11-20, and the modules are extended on the basis of the above modules, and details are not described herein again.

It should be understood that, in various embodiments of the present invention, the size of the sequence numbers of the above processes does not mean the order of execution, and the order of execution of each process should be determined by its function and internal logic, and should not be taken to the embodiments of the present invention. The implementation process constitutes any limitation.

Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in a combination of electronic hardware or computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specifics of the technical solutions to achieve the described functions, but such implementations are not considered to be beyond the scope of the present invention.

A person skilled in the art can clearly understand that the specific working process of the system, the device and the unit described above can be referred to the corresponding process in the foregoing method embodiments for the convenience and brevity of the description, and details are not described herein again.

In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or may be Integration into another system, or some features can be ignored, or not executed. In addition, the coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be electrical, mechanical or otherwise.

The units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, i.e., may be located in one place, or may be distributed over multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in various embodiments of the present invention may be integrated into one processing unit In addition, each unit may exist physically separately, or two or more units may be integrated into one unit.

This feature, if implemented as a software functional unit and sold or used as a standalone product, can be stored on a computer readable storage medium. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or a part of the technical solution, may be embodied in the form of a software product, which is stored in a storage medium, including The instructions are used to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method in accordance with various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. .

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention. It is intended to be covered by the scope of the invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

It should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

Rights request

1. A network sharing detection method, characterized by including:

The network sharing detection device receives the data stream sent by the terminal device;

The network sharing detection device obtains the routing hop count information of the data flow;

The network sharing detection device identifies whether the network sharing function is applied to the terminal device according to the routing hop count information of the data flow.

2. The network sharing detection method according to claim 1, characterized in that,

The network sharing detection device receives the data stream sent by the terminal device, including:

The network sharing detection device receives more than two data streams sent by the terminal device;

The network sharing detection device obtains the routing hop count information of the data flow, including: the network sharing detection device obtains the actual routing hop count of the two or more data flows respectively, and the actual routing hop count is the The number of routing network elements that the data flow passes through in the communication network; the network sharing detection device identifies whether the terminal device uses the network sharing function based on the routing hop count information of the data flow, including:

The network sharing detection device compares whether the actual routing hop numbers of the two or more data flows are different. If they are different, it is determined that the network sharing function is applied to the terminal device.

3. The network sharing detection method according to claim 2, characterized in that, after determining that the terminal device has applied the network sharing function, it further includes:

The network sharing detection device compares the actual routing hop counts of the two or more data flows, and determines that the data flow with a larger actual routing hop count is initiated by the non-host device, and the data flow with a smaller actual routing hop count is initiated by the host device. .

4. The network sharing detection method according to claim 1, characterized in that,

The network sharing detection device obtains the routing hop number information of the data flow, including: the network sharing detection device acquires the actual routing hop number of the data flow, and the actual routing hop number is the number of routing hops of the data flow in the communication network The number of routing network elements passed through;

The network sharing detection device identifies whether the terminal device has applied the network sharing function based on the routing hop count information of the data flow, including:

The network sharing detection device obtains the default route hop number between the network sharing detection device and the terminal device. The default route hop number is assuming that the terminal device itself establishes a data service. The number of routing hops between the service channel and the network sharing detection device;

The network sharing detection device compares the actual routing hop number of the data flow and the default routing hop number to see whether they are the same. If they are different, it is determined that the network sharing function is applied to the terminal device.

5. The network sharing detection method according to claim 4, characterized in that, after determining that the terminal device has applied the network sharing function, it further includes:

The network sharing detection device compares whether the actual routing hop count of the data flow is greater than the default routing hop count. If so, determines that the data flow is initiated by a non-host device. If not, determines that the data flow is initiated by a non-host device. Initiated by the host device.

6. The network sharing detection method according to any one of claims 2 to 5, characterized in that the actual routing hop number is between the current life cycle value of the data flow and the initial life cycle value of the terminal device. difference.

7. The network sharing detection method according to claim 6, characterized in that, before the network sharing detection device obtains the actual routing hop count of the data flow, it further includes:

The network sharing detection device obtains terminal device identification information from the data packet of the data flow;

The network sharing detection device queries and obtains the initial life cycle value of the terminal device from the database according to the terminal device identification information.

8. The network sharing detection method according to claim 1, characterized in that,

The network sharing detection device obtains the routing hop count information of the data flow, including: the network sharing detection device obtains the current life cycle value of the two or more data flows; the network sharing detection device obtains the current life cycle value of the data flow according to the data The routing hop count information of the flow identifies whether the network sharing function is applied to the terminal device, including:

The network sharing detection device compares whether the current life cycle values of the two or more data streams are different. If they are different, it is determined that the network sharing function is applied to the terminal device.

9. The network sharing detection method according to any one of claims 1, 2, 4 and 8, characterized in that, after determining that the terminal device has applied the network sharing function, it further includes one or a combination of the following steps: : The network sharing detection device performs one or any combination of charging control, bandwidth control, blocking control and reminder control on the data stream sent by the terminal device based on the identification result; or the network sharing detection device performs one or any combination of charging control, bandwidth control, blocking control and reminder control based on the terminal device. The device's data stream sending status and output information report.

10. The network sharing detection method according to claim 3 or 5, characterized in that, after determining that the data flow is initiated by a non-host device, or determining that the data flow is initiated by a host device, it further includes: One or a combination of the following steps:

The network sharing detection device performs one or any combination of charging control, bandwidth control, blocking control and reminder control on the data flow initiated by the host device or the data flow initiated by the non-host device according to the identification result; or

The network sharing detection device outputs an information table according to the sending status of the data flow initiated by the host device or the non-host device respectively.

11. A network sharing detection device, characterized by including:

The receiving module is used to receive the data stream sent by the terminal device;

An acquisition module, used to acquire the routing hop count information of the data flow;

An identification module, configured to identify whether the terminal device has applied the network sharing function according to the routing hop count information of the data flow.

12. The network sharing detection device according to claim 11, characterized in that the receiving module includes:

The first receiving unit is used to receive more than two data streams sent by the terminal device;

The acquisition module includes:

The first acquisition unit is used to obtain the actual routing hop count of the two or more data flows, where the actual routing hop count is the number of routing network elements that the data flow passes through in the communication network;

The identification module includes:

The first identification unit is used to compare whether the actual routing hop numbers of the two or more data flows are different. If they are different, it is determined that the network sharing function is applied to the terminal device.

13. The network sharing detection device according to claim 12, further comprising: a first comparison module, configured to compare the actual routing hop counts of the two or more data flows, and determine the one with the larger actual routing hop count. The data flow is initiated by a non-host device, and the actual routing hop count is Initiated by the host device.

14. The network sharing detection device according to claim 11, characterized in that the acquisition module includes:

The second acquisition unit is used to obtain the actual routing hop count of the data flow, where the actual routing hop count is the number of routing network elements that the data flow passes through in the communication network;

The identification module includes:

The third obtaining unit is used to obtain the default routing hop number between the network sharing detection device and the terminal device. The default routing hop number is assumed to be shared with the network when the terminal device itself establishes a data service channel. Detect the number of routing hops between devices;

The second identification unit is used to compare whether the actual routing hop number of the data flow and the default routing hop number are the same. If they are different, it is determined that the network sharing function is applied to the terminal device.

15. The network sharing detection device according to claim 14, further comprising: a second comparison module, used to compare whether the actual routing hop count of the data flow is greater than the default routing hop count, and if so, then It is determined that the data flow is initiated by a non-host device, and if not, it is determined that the data flow is initiated by a host device.

16. The network sharing detection device according to any one of claims 12 to 15, characterized in that the actual routing hop number is between the current life cycle value of the data flow and the initial life cycle value of the terminal device. difference.

17. The network sharing detection device according to claim 16, further comprising: a second acquisition subunit, configured to obtain the data packets from the data flow before acquiring the actual route hop count of the data flow. Obtain terminal device identification information;

Query subunit, configured to query and obtain the initial life cycle value of the terminal device from the database according to the terminal device identification information.

18. The network sharing detection device according to claim 11, characterized in that the receiving module includes:

The second receiving unit is used to receive more than two data streams sent by the terminal device;

The acquisition module includes:

The fourth acquisition unit is used to acquire the current life cycle values of the two or more data streams; the identification module includes: The third identification unit is used to compare whether the current life cycle values of the two or more data streams are different. If they are different, it is determined that the network sharing function is applied to the terminal device.

19. The network sharing detection device according to any one of claims 11, 12, 14 and 18, further comprising one or a combination of the following modules:

The first control module is configured to perform one or any combination of charging control, bandwidth control, blocking control and reminder control on the data flow sent by the terminal device according to the identification result; or

The first output module is used to output information reports based on the data flow transmission status of the terminal device.

20. The network sharing detection device according to claim 13 or 15, further comprising one or a combination of the following modules:

The second control module is used to perform one or any combination of charging control, bandwidth control, blocking control and reminder control on the data flow initiated by the host device or the data flow initiated by the non-host device according to the identification result; or

The second output module is used to output the information table according to the sending status of the data flow initiated by the host device or the non-host device respectively.

21. A network sharing detection device, characterized in that it includes the network sharing detection device according to any one of claims 11 to 20; the network sharing detection device is integrated in a network access server or an Internet gateway device, or is provided in Between the network access server and the Internet.