WO2014205703A1

WO2014205703A1 - Method and device for detecting shared access, and terminal device

Info

Publication number: WO2014205703A1
Application number: PCT/CN2013/078078
Authority: WO
Inventors: 张仲虎; 高晓峰; 张翀
Original assignee: 华为技术有限公司
Priority date: 2013-06-26
Filing date: 2013-06-26
Publication date: 2014-12-31
Also published as: CN103650457B; CN103650457A

Abstract

Disclosed are a method and device for detecting shared access, and a terminal device, which relate to the field of mobile communications, and can accurately determine the number of shared access devices under the same IP address. The method comprises: receiving a data message sent by a first terminal device, the data message comprising device identifier encryption information and a source IP address allocated for the first terminal device by a server; decrypting the device identifier encryption information to obtain a first device identifier of the first terminal device or a second device identifier of a second terminal device; and if it is determined that a pre-set IP address record table comprises the first device identifier or the second device identifier corresponding to the source IP address, then acquiring the number of all the device identifiers corresponding to the source IP address in the IP address record table, and thus determining the number of devices sharing access under the source IP address.

Description

Method, device and terminal device for detecting shared access

The present invention relates to the field of mobile communications, and in particular, to a method, a device, and a terminal device for sharing access.

Background technique

In the era of mobile broadband, the popularity of smart terminal devices has made peer-to-peer network applications more and more common. Because peer-to-peer network applications consume a large amount of network resources, in order to enable the terminal devices accessing the local area network to use the network resources fairly and reasonably, the operator needs to know the shared access terminal devices to manage the shared access terminal devices. The amount of information and so on.

The so-called shared access means that multiple terminal devices are connected to the network through one line. In a scenario where multiple terminal devices are connected to the network through the same line, when the terminal device is to connect to the network or request data from the network, the interconnection protocol between the networks of the multiple terminal devices is usually required through the routing device (Internet Protocol) , IP ) The address is translated to the IP address assigned by the server to the routing device.

In the prior art, the gateway device can determine the number of shared access devices by detecting the Transmission Control Protocol (TCP)/IP header feature information of the packet sent by the terminal device, for example, the time to live (Time) To Live, TTL) Detection, IP packet identification detection, serial number detection, Maximum Transmission Unit (MTU) detection, etc. The gateway device may also determine the number of shared access devices, such as timestamp detection and clock crystal detection, by detecting the system time of the message sent by the terminal device. However, when the gateway device detects the number of shared access devices by using the TCP/IP header specific information of the packet sent by the terminal device and the system time, the terminal device or the routing device can easily transmit the packet to the gateway device. The /IP header feature and system time are modified, so that the gateway device cannot accurately determine whether there is shared access under the same IP address, and thus cannot accurately determine the number of shared access terminal devices. Summary of the invention

The embodiments of the present invention provide a method, a device, and a terminal device for detecting a shared access, so that the shared access detecting device can accurately determine the number of shared access devices under the same IP address.

To achieve the above objective, the embodiment of the present invention uses the following technical solution: In a first aspect, a method for detecting a shared access is provided, where the method includes: receiving a data packet sent by a first terminal device, where the datagram is The device includes the device identifier encryption information and an internet protocol IP address between the source networks allocated by the server for the first terminal device, where the device identifier encryption information is the device identifier encryption information of the first terminal device or The device identification encryption information of the second terminal device of the first terminal device accessing the network;

Decrypting the device identification encryption information, obtaining a first device identifier of the first terminal device or a second device identifier of the second terminal device;

If it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address, obtaining the IP address record table corresponding to the source IP address The number of all device identifiers, which in turn determines the number of shared access devices under the source IP address.

In a first possible implementation manner of the first aspect, according to the first aspect, the decrypting the device identification encryption information, obtaining the first device identifier of the first terminal device or the second terminal device After the second device is identified, the method further includes: if it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address, Corresponding relationship between the source IP address and the first device identifier or the second device identifier,

The number of all device identifiers corresponding to the source IP address in the IP address record table, and further determines the number of shared access devices in the source IP address.

In a second possible implementation manner of the first aspect, in combination with the first aspect or the first possible implementation manner of the first aspect, after the determining the number of access devices in the source IP address, The method also includes:

If the number of shared access devices under the source IP address is greater than 1, determining the There is shared access under the source IP address;

If the number of the shared access devices in the source IP address is equal to 1, the device identifier of the shared access device corresponding to the source IP address is further determined to be the device identifier corresponding to the source IP address in the preset bearer context. the same;

If they are the same, it is determined that there is no shared access under the source IP address;

If not, it is determined that there is a shared access under the source IP address.

In a third possible implementation of the first aspect, in combination with the first aspect or the first possible implementation, the method further includes:

Determining, by the preset bearer context record table, a device identifier corresponding to the source IP address as a shared access master device;

In the device identifier corresponding to the source IP address in the IP record table, the device identifier other than the device identifier of the master device is determined as the slave device sharing the access.

In a fourth possible implementation manner of the first aspect, in combination with the first aspect or the first possible implementation manner of the first aspect, the third possible implementation manner of the first aspect, After the data packet sent by the device, it also includes:

And deleting the device identifier encryption information in the data packet.

A second aspect provides a method for detecting a shared access, where the method includes: acquiring a device identifier;

Encrypting the device identifier to obtain device identifier encryption information;

Generating a data packet including the device identifier encryption information;

Send the data message.

A third aspect provides a detecting device for sharing access, where the detecting device includes: a receiving unit, a decrypting unit, and a determining unit;

The receiving unit is configured to receive a data packet sent by the first terminal device, where the data packet includes the device identifier encryption information and an internet protocol IP address between the source networks allocated by the server for the first terminal device, The device identifier encryption information is the device identifier encryption information of the first terminal device or the device identifier encryption information of the second terminal device that is accessed by the first terminal device to the network;

The decrypting unit is configured to decrypt the device identification encryption information, and obtain the first a first device identifier of the terminal device or a second device identifier of the second terminal device; the determining unit, configured to: if it is determined that the preset IP address record table includes the identifier corresponding to the source IP address And obtaining, by the first device identifier or the second device identifier, the number of all device identifiers corresponding to the source IP address in the IP address record table, and determining the number of shared access devices in the source IP address. .

In a first possible implementation manner of the third aspect, the determining unit is further configured to: if it is determined that the preset IP address record table does not include the identifier corresponding to the source IP address, And storing, by the first device identifier or the second device identifier, a correspondence between the source IP address and the first device identifier or the second device identifier, and acquiring the source IP address in the IP address record table The number of all device identifiers corresponding to the address, and further determines the number of shared access devices under the source IP address.

In a second possible implementation manner of the third aspect, in combination with the third aspect or the first possible implementation manner of the third aspect, the determining unit is further used to

If the number of shared access devices in the source IP address is greater than 1, it is determined that there is a shared access under the source IP address;

If the number of the shared access devices in the source IP address is equal to 1, determining whether the device identifier of the shared access device corresponding to the source IP address is the device identifier corresponding to the source IP address in the preset bearer context. the same;

In a third possible implementation manner of the third aspect, in combination with the third aspect or the first possible implementation manner, the determining unit is further used to

A device identifier other than the device identifier of the master device in the device identifier corresponding to the source IP address in the IP record table is determined as a slave device that is shared.

In a fourth possible implementation manner of the third aspect, in combination with the third aspect or the first possible implementation manner of the third aspect, the third possible implementation manner of the third aspect, the detecting device further includes: Delete unit; The deleting unit is configured to delete the device identifier encryption information in the data packet.

A fourth aspect provides a terminal device, where the terminal device includes: an acquiring unit, an encryption unit, a generating unit, and a sending unit;

The obtaining unit is configured to acquire a device identifier.

The encryption unit is configured to encrypt the device identifier, and obtain device identifier encryption information;

The generating unit is configured to generate a data message including the device identifier encryption information;

The sending unit is configured to send the data packet.

The method, device, and terminal device for detecting a shared access provided by the embodiment of the present invention receive a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and the server is the first terminal. The source IP address of the device, the device identifier encryption information is the device identifier encryption information of the first terminal device or the device identifier encryption information of the second terminal device accessing the network by the first terminal device; The device identifies the encrypted information, and obtains the first device identifier of the first terminal device or the second device identifier of the second terminal device; if it is determined that the preset IP address record table includes the source IP address corresponding to the source IP address Obtaining, by the first device identifier or the second device identifier, the number of all device identifiers corresponding to the source IP address in the IP address record table, and determining the shared access device under the source IP address quantity. With the solution, the data packet sent by the terminal device to the detecting device of the shared access includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is some embodiments of the present invention, and it can be used by those skilled in the art without creative efforts. Other figures are obtained from these figures.

FIG. 1 is a schematic flowchart of a method for detecting shared access according to an embodiment of the present disclosure;

FIG. 2 is a schematic flowchart of another method for detecting shared access according to an embodiment of the present disclosure;

FIG. 3 is a schematic diagram of interaction of a method for detecting shared access according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of an interaction of another method for detecting shared access according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a shared access detecting apparatus according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of another detection device for shared access according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a terminal device according to an embodiment of the present invention; FIG. 8 is a schematic structural diagram of another detecting device for shared access according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of another terminal device according to an embodiment of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The term "and/or" in this context is merely an association describing the associated object, indicating that there can be three relationships, for example, A and / or B, which can mean: A exists separately, and both A and B exist separately. B these three situations. In addition, the character " / " in this article generally indicates that the contextual object is an "or" relationship.

Embodiment 1

An embodiment of the present invention provides a method for detecting shared access, as shown in FIG. Methods include:

1 01. The shared access detecting device receives a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and a source IP address allocated by the server to the first terminal device, where the device identifier is The encrypted information is the device identity encryption information of the first terminal device or the device identity encryption information of the second terminal device accessed by the first terminal device.

It should be noted that, before the second terminal device requests to access the network or request data from the network, or the first terminal device requests data from the network, the first terminal device first needs to perform information interaction with the network side (including a gateway, a server, etc.). The source IP address assigned by the server to the first terminal device is obtained, and user activation is completed.

When the second terminal device requests access to the network or requests data from the network, the second terminal device first acquires the second terminal device identifier of the second terminal device, encrypts the device identifier of the second terminal device, and obtains the device identifier and the encrypted information. Generating a data packet including the device identifier encryption information of the second terminal device, and transmitting the data packet to the first terminal device, and performing source IP on the data packet sent by the second terminal device by the first terminal device After the address conversion operation is performed, the first terminal device sends the processed data packet to the shared access detecting device after obtaining the processed data packet. When the first terminal device requests the data from the network, the device identifier of the first terminal device is encrypted, the device identifier is encrypted, and the data packet including the device identifier of the first terminal device is generated and shared. The incoming detection device sends the generated data message.

The detection device of the shared access device decrypts the device identification encryption information, and obtains the first device identifier of the first terminal device or the second device identifier of the second terminal device.

After the shared access detecting device receives the data packet sent by the first terminal device, the data packet is decrypted.

It will be understood by those skilled in the art that to decrypt the device identification encrypted information, it is first necessary to determine the decryption function and the decryption key. The decryption function and the decryption key may be the second terminal device or the first terminal device and the shared access The testing equipment is agreed upon.

103. If it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address, the shared access detecting device acquires the IP address. Recording the number of all device identifiers corresponding to the source IP address in the table, and determining the number of shared access devices under the source IP address.

Corresponding relationship between the active IP address and the first device identifier or the second device identifier is stored in the preset IP address record table in the shared access detecting device.

An embodiment of the present invention provides a method for detecting a shared access, which receives a data packet sent by a first terminal device, where the data packet includes device identifier encryption information and a source IP address allocated by the server for the first terminal device. The device identifier encryption information is the device identifier encryption information of the first terminal device or the device identifier encryption information of the second terminal device that is accessed by the first terminal device to the network; decrypting the device identifier encryption information, obtaining The first device identifier of the first terminal device or the second device identifier of the second terminal device; if it is determined that the preset IP address record table includes the first device identifier corresponding to the source IP address Or the second device identifier, the number of all device identifiers corresponding to the source IP address in the IP address record table is obtained, and the number of shared access devices in the source IP address is determined. The data packet sent by the terminal device to the detecting device of the shared access device includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

Embodiment 2

The embodiment of the present invention provides a method for detecting a shared access. The method is performed by the terminal device, and the terminal device may be a second terminal device or a first terminal device. As shown in FIG. 2, the method includes:

201. The terminal device acquires a device identifier.

Specifically, the terminal device may obtain an International Mobile Subscriber Identification Number (IMSI) or a Mobile Subscriber Integrated Service Digital Network (Mobile Subscriber) of the terminal device. International Integrated Service Digital Network, MSISDN). 202. The terminal device encrypts the device identifier, and obtains device identifier encryption information.

Specifically, the terminal device may encrypt the device identifier of the terminal device by using a symmetric encryption algorithm or an asymmetric encryption algorithm to obtain device identifier encryption information.

It should be noted that the symmetric encryption algorithm refers to an algorithm in which the same key is used for encryption and decryption, and the encryption function and the decryption function are a pair of inverse functions. An asymmetric encryption algorithm refers to an algorithm that encrypts and decrypts different keys. The asymmetric encryption algorithm usually has two keys: a public key and a private key. The public key is sent to the corresponding decryption device or encryption device by the encryption device or the decryption device, and the private key is saved by the encryption device or the decryption device itself without being publicized. of.

203. The terminal device generates a data packet that includes the device identifier encryption information.

The terminal device may generate a data packet according to a format of a data packet defined by the protocol.

Specifically, the terminal device may add the device identifier encryption information to a location agreed with the shared access detecting device when generating the data packet including the device identifier encryption information.

204. The terminal device sends the data packet.

It should be noted that when the terminal device is the second terminal device, any information sent to the detecting device of the shared access needs to pass through the first terminal device. That is, the terminal device sends the data packet to the first terminal device, and the first terminal device processes the data packet and sends the data packet to the shared access detecting device.

When the terminal device is the first terminal device, the first terminal device sends the data packet to the shared access detection device directly after generating the data packet.

An embodiment of the present invention provides a method for detecting a shared access, which acquires a device identifier, encrypts a device identifier, and obtains device identifier encryption information. Identifying a data message of the encrypted information; sending the data message. The data packet sent by the terminal device to the detection device of the shared access device includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

Embodiment 3

An embodiment of the present invention provides a method for detecting a shared access. As shown in FIG. 3, when the terminal device is a second terminal device, the method includes:

301. The second terminal device acquires a device identifier.

The device identifier may be an IMS I or MS I SDN of the second terminal device.

Specifically, the second terminal device can read the device identifier of the second terminal device.

302. The second terminal device encrypts the device identifier, and obtains device identifier encryption information.

When the second terminal device requests to access the network or request data from the network, the device identifier of the second terminal device is encrypted, and the device identifier encrypted information is obtained.

Specifically, the second terminal device may encrypt the device identifier by using a symmetric encryption algorithm or an asymmetric encryption algorithm to obtain device identifier encryption information.

When the second terminal device encrypts the device identifier by using a symmetric encryption algorithm, the second terminal device needs to perform the device identifier according to a key and an encryption algorithm agreed with the shared access detecting device. Encrypt, obtain device ID encryption information. When the second terminal device encrypts the device identifier by using an asymmetric encryption algorithm, the second terminal device may first determine a public key, and then use the public key. Generating a private key, encrypting the device identifier by using the generated private key, acquiring device identification encryption information, and transmitting the public key and the device identification encryption information to the shared access detection device, so that the The detecting device of the shared access generates the private key by using the public key, and decrypts the received device identification encrypted information by using the generated private key.

303. The second terminal device generates a data packet that includes the device identifier encryption information.

The second terminal device may generate a data packet according to a format of a data packet defined by the protocol.

It can be understood by those skilled in the art that the data message generated by the second terminal device or the first terminal device has a certain format, and when the second terminal device generates the data packet including the device identifier encryption information, The device identifier encryption information may be added to a location agreed by the second terminal device or the first terminal device and the shared access detection device, for example, after the appointment location is a TCP/IP header of the data packet.

304. The second terminal device sends a data packet including the device identifier encryption information to the first terminal device.

The first terminal device may specifically be a routing device.

305. The first terminal device processes the data packet to obtain a processed data packet.

After the first terminal device performs a source IP address conversion operation on the data packet sent by the second terminal device, the first terminal device obtains the processed data packet.

306. The first terminal device sends the processed data packet to the shared access detection device, where the data packet includes device identifier encryption information and a source allocated by the server to the first terminal device. IP address, the device identifier encryption information Encrypting information for the device identification of the second terminal device that accesses the network through the first terminal device.

307. The shared access detection device decrypts the device identifier encryption information, and obtains a first device identifier of the first terminal device or a second device identifier of the second terminal device.

It should be noted that, when the detecting device of the shared access processes the received data packet, the device identifier may be extracted according to the added location of the device identifier encryption information, and then The device identifies the encrypted information for decryption. The adding location of the device identification information may be that the second terminal device or the first terminal device is agreed with the detecting device of the shared access, or may be a default location. For example, when the agreed location or the default location is after the TCP or UDP header of the data packet, the shared access detecting device may extract the information after the TCP or UDP header of the data packet to obtain the Device identification encryption information.

It will be understood by those skilled in the art that to decrypt the device identification encryption information, it is first necessary to determine the decryption function and the decryption key. The decryption function and the decryption key may be agreed by the second terminal device or the first terminal device with the shared access detection device.

If the device identification encryption information is obtained by using a symmetric encryption algorithm, the detecting device of the shared access pairs the device according to a decryption key and a decryption function agreed with the second terminal device or the first terminal device Identify the encrypted information for decryption. If the device identification encryption information is obtained by using an asymmetric encryption algorithm, the shared access detecting device generates a private key according to the received public key, and decrypts the device identification encrypted information by using the generated private key.

308. If it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address, the shared access detecting device acquires the IP address. Recording the number of all device identifiers corresponding to the source IP address in the table, and determining the number of shared access devices under the source IP address. The corresponding IP address record table in the shared access detection device stores a correspondence between the active IP address and the first device identifier or the second device identifier.

309. If it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address, the shared access detecting device stores the source. Obtaining the number of all the device identifiers corresponding to the source IP address in the IP address record table, and determining the source IP address, by the corresponding relationship between the IP address and the first device identifier or the second device identifier. The number of shared access devices.

For example, the preset IP address record table does not include a correspondence between the active IP address of 123.138.26.112 and the device identifier of 46000391221.101, and the shared access detection device first uses the source IP address and the device. The identifier is stored in a corresponding location in the preset IP address record table, and then the number of all device identifiers corresponding to the source IP address in the IP address record table is obtained, thereby determining the source IP address. The number of shared access devices. For example, when the source IP address is 123.138.26.112 and the corresponding device identifier is 460030912121001, 460030912121002, and 460030912121003, the number of shared access devices is

3.

Specifically, the detecting device of the shared access may query the number of device identifiers corresponding to the source IP address in the preset IP address record table to obtain the source IP address in the IP address record table. The number of all the corresponding device identifiers, which is the number of shared access devices under the source IP address. Of course, the detecting device of the shared access may obtain the number of device identifiers corresponding to the source IP address in the IP address record table by using other methods, which is not specifically limited in this embodiment of the present invention.

An embodiment of the present invention provides a method for detecting a shared access. As shown in FIG. 4, when the terminal device is a first terminal device, the method includes:

401. The first terminal device acquires a device identifier.

The device identifier may be an IMSI or an MSISDN of the first terminal device.

Specifically, the first terminal device can read the device of the first terminal device Logo.

4 02. The first terminal device encrypts the device identifier, and obtains device identifier encryption information.

When the first terminal device requests data from the network, the device identifier of the first terminal device is encrypted, and the device identifier is encrypted.

Specifically, the first terminal device may encrypt the device identifier by using a symmetric encryption algorithm or an asymmetric encryption algorithm to obtain device identifier encryption information.

4 03. The first terminal device generates a data packet that includes the device identifier encryption information.

The first terminal device may generate a data packet according to a format of a data packet defined by the protocol.

It can be understood by those skilled in the art that the data message generated by the second terminal device or the first terminal device has a certain format, and when the first terminal device generates the data packet including the device identifier encryption information, The device identification encryption information may be added to any location of the original data message format.

Of course, in order to reduce the modification of the existing data packet-related protocol, the device identifier encryption information may be added after the TCP or UDP header of the data packet.

4, the first terminal device sends the data packet to the shared access detection device, where the data packet includes device identifier encryption information and a source IP address allocated by the server for the first terminal device. The device identifier encryption information is device identifier encryption information of the first terminal device.

It should be noted that, before the first terminal device requests data from the network, the first terminal device first needs to perform information interaction with the network side (including a gateway, a server, etc.), and obtain the server to allocate the first terminal device. Source IP address, complete user activation.

308. If it is determined that the preset IP address record table includes the source IP address. Corresponding to the first device identifier or the second device identifier, the shared access detecting device acquires the number of all device identifiers corresponding to the source IP address in the IP address record table, and further determines The number of shared access devices under the source IP address.

Further, after the shared access device determines the number of shared access devices in the source IP address, whether the shared access exists under the IP address may be determined according to the number of the shared access devices. Specifically, the shared access device may determine whether the number of shared access devices in the source IP address is greater than 1; if the number of shared access devices in the source IP address is greater than 1, determining the source IP address. If the number of shared access devices in the source IP address is equal to 1, it is further determined whether the device identifier of the shared access device corresponding to the source IP address is the source in the preset bearer context. The device IDs of the IP addresses are the same. If they are the same, it is determined that there is no shared access under the source IP address. If they are not the same, it is determined that there is shared access under the source IP address.

Further, after the detecting device of the shared access determines the number of shared access devices under the source IP address, the number of the master device and the slave device that are shared access may be further determined.

Specifically, the detecting device of the shared access determines the device identifier corresponding to the source IP address in the preset bearer context record table as the master device for shared access; and the IP record table and the In the device identifier corresponding to the source IP address, the device identifier other than the device identifier of the master device is determined as the slave device that is shared.

It should be noted that, after the first terminal device interacts with the network side, after the user is activated, the preset bearer context record table in the shared access detection device stores the device of the first terminal device. Correspondence between the identifier and the source IP address. In order to ensure normal communication between the device and the network without modifying the existing protocol, after the detecting device of the shared access receives the data packet sent by the first terminal device, the data may be deleted. The device in the message identifies the encrypted information.

Specifically, the detecting device for the shared access may be a gateway device, such as a Gateway General Packet Radio Service (GPRS) Support Node (GGSN).

Embodiment 4

The embodiment of the present invention provides a detecting device for shared access. As shown in FIG. 5, the detecting device 50 for shared access includes: a receiving unit 51, a decrypting unit 52, and a determining unit 53.

The receiving unit 51 is configured to receive a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and a source IP address allocated by the server for the first terminal device, where the device identifier is encrypted. The information is the device identification encryption information of the first terminal device or the second access to the network by the first terminal device The device identification encryption information of the terminal device.

The decrypting unit 52 is configured to decrypt the device identification encryption information, and obtain the first device identifier of the first terminal device or the second device identifier of the second terminal device.

The determining unit 53 is configured to obtain the IP address record table if it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address. The number of all device identifiers corresponding to the source IP address, and further determines the number of shared access devices under the source IP address.

Optionally, the determining unit 53 is further configured to: if it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address, The corresponding relationship between the source IP address and the first device identifier or the second device identifier, obtaining the number of all device identifiers corresponding to the source IP address in the IP address record table, and determining the Number of shared access devices under the source IP address.

Optionally, the determining unit 53 is further configured to:

Further, as shown in FIG. 6, the detecting device 50 further includes: deleting the unit

54. The deleting unit 54 is configured to delete the device identifier encryption information in the data packet.

The embodiment of the present invention provides a shared access detecting device, where the receiving unit receives a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and the server allocates the first terminal device. The source IP address, the device identifier encryption information is the device identifier encryption information of the first terminal device or the device identifier encryption information of the second terminal device accessing the network by the first terminal device; the decryption unit decrypts The device identifies the encrypted information, and obtains the first device identifier of the first terminal device or the second device identifier of the second terminal device; if it is determined that the preset IP address record table includes the source IP address Corresponding to the first device identifier or the second device identifier, the determining unit acquires the number of all device identifiers corresponding to the source IP address in the IP address record table, and further determines the source IP address. Number of shared access devices under the address. The data packet sent by the terminal device to the detecting device of the shared access device includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

Embodiment 5

The embodiment of the present invention provides a terminal device. As shown in FIG. 7, the terminal device 70 includes: an obtaining unit 71, an encryption unit 72, a generating unit 73, and a sending unit 74.

The obtaining unit 71 is configured to acquire a device identifier.

The encryption unit 72 is configured to encrypt the device identifier, and obtain device identifier encryption information.

The generating unit 7 3 is configured to generate a data packet including the device identifier encryption information.

The sending unit 74 is configured to send the data packet.

An embodiment of the present invention provides a terminal device, where the acquiring unit acquires a device identifier, the encryption unit encrypts the device identifier, and obtains device identifier encryption information. The generating unit generates a data packet including the device identifier encryption information. Said hair The sending unit sends the data message. With the solution, the data packet sent by the terminal device to the detecting device of the shared access includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

Embodiment 6

The embodiment of the present invention provides a detection device for shared access. As shown in FIG. 8, the detection device 80 includes: a receiver 81 and a processor 82.

The receiver 81 is configured to receive a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and a source IP address allocated by the server for the first terminal device, where the device identifier is encrypted. The information is the device identity encryption information of the first terminal device or the device identity encryption information of the second terminal device that accesses the network by using the first terminal device.

The processor 82 is configured to decrypt the device identifier and obtain the first device identifier of the first terminal device or the second device identifier of the second terminal device.

The processor 82 is further configured to acquire the IP address record if it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address. The number of all device identifiers corresponding to the source IP address in the table, and further determining the number of shared access devices in the source IP address.

Optionally, the processor 82 is further configured to: if it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address, Obtaining the number of all device identifiers corresponding to the source IP address in the IP address record table, and determining the number of the source IP address and the first device identifier or the second device identifier. Number of shared access devices under the source IP address.

Optionally, the processor 82 is further configured to:

If the number of shared access devices under the source IP address is equal to 1, then further Whether the device identifier of the shared access device corresponding to the source IP address is the same as the device identifier corresponding to the source IP address in the preset bearer context;

Optionally, the processor 82 is further configured to:

Further, the processor 82 is further configured to delete the device identifier encryption information in the data packet.

The embodiment of the present invention provides a shared access detecting device, where the receiver receives a data packet sent by the first terminal device, where the data packet includes device identifier encryption information and the server allocates the first terminal device. The source IP address, the device identifier encryption information is the device identifier encryption information of the first terminal device or the device identifier encryption information of the second terminal device accessed by the first terminal device to the network; the processor decrypts The device identifies the encrypted information, and obtains the first device identifier of the first terminal device or the second device identifier of the second terminal device; if it is determined that the preset IP address record table includes the source IP address Corresponding to the first device identifier or the second device identifier, the processor acquires the number of all device identifiers corresponding to the source IP address in the IP address record table, and further determines the source IP address. Number of shared access devices under the address. The data packet sent by the terminal device to the detecting device of the shared access device includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

Example VII.

The embodiment of the present invention provides a terminal device. As shown in FIG. 9, the terminal device 90 includes: a processor 91 and a transmitter 92. The processor 9 1 is configured to acquire a device identifier.

The processor 9 1 is further configured to encrypt the device identifier, and obtain device identifier encryption information.

The processor 9 1 is further configured to generate a data packet including the device identifier encryption information.

The transmitter 92 is configured to send the data packet.

An embodiment of the present invention provides a terminal device, where the processor acquires a device identifier, the processor encrypts the device identifier, and obtains device identifier encryption information, where the processor generates a data packet including the device identifier encryption information. The transmitter sends the data message. With the solution, the data packet sent by the terminal device to the detecting device of the shared access includes the device identifier encryption information of the terminal device, and the terminal device cannot modify the device identifier of the shared access device, so that the shared access detection is performed. The device can accurately determine the number of shared access devices under the same IP address.

It will be clearly understood by those skilled in the art that for the convenience and brevity of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed. The internal structure of the device is divided into different functional modules to perform all or part of the functions described above. For the specific working process of the system, the device and the unit described above, reference may be made to the corresponding process in the foregoing method embodiments, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be used. Combined or can be integrated into another system, or some features can be ignored, or not executed. Alternatively, the coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, ie It can be located in one place, or it can be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product in the form of a software product, or a part of the technical solution, which is stored in a storage medium. The instructions include a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform all or part of the steps of the methods of the various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. .

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

claims

1. A shared access detection method, characterized in that the method includes: receiving a data message sent by a first terminal device, the data message including device identification encryption information and the server being the first terminal The interconnection protocol IP address between the source networks assigned by the device, and the device identification encrypted information is the device identification encrypted information of the first terminal device or the device identification of the second terminal device that accesses the network through the first terminal device. encrypted information;

Decrypt the device identification encrypted information to obtain the first device identification of the first terminal device or the second device identification of the second terminal device;

If it is determined that the preset IP address record table includes the first device identifier or the second device identifier corresponding to the source IP address, then obtain the IP address record table corresponding to the source IP address. The number of all device identifiers is determined, and the number of shared access devices under the source IP address is determined.

2. The method according to claim 1, characterized in that, during the decryption of the device identification encrypted information, the first device identification of the first terminal device or the second device identification of the second terminal device is obtained. Afterwards, the method further includes:

If it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address, then store the source IP address and the first device identifier or The corresponding relationship between the second device identifiers is to obtain the number of all device identifiers corresponding to the source IP address in the IP address record table, and then determine the number of shared access devices under the source IP address.

3. The method according to claim 1 or 2, characterized in that, after determining the number of shared access devices under the source IP address, the method further includes: if the number of shared access devices under the source IP address is If the number of incoming devices is greater than 1, it is determined that there is shared access under the source IP address;

If the number of shared access devices under the source IP address is equal to 1, then further determine whether the device identification of the shared access device corresponding to the source IP address is the same as the device identification corresponding to the source IP address in the preset bearer context. same;

If they are the same, it is determined that there is no shared access under the source IP address; If they are not the same, it is determined that there is shared access under the source IP address.

4. The method according to claim 1 or 2, characterized in that the method further includes:

Determine the device identification corresponding to the source IP address in the preset bearer context record table as the primary device for shared access;

Among the device identifiers corresponding to the source IP address in the IP record table, the device identifiers other than the device identifier of the master device are determined as slave devices for shared access.

5. The method according to any one of claims 1 to 4, characterized in that, after receiving the data message sent by the first terminal device, it further includes:

Delete the device identification encrypted information in the data message.

6. A shared access detection method, characterized in that the method includes: obtaining a device identification;

Encrypt the device identification and obtain device identification encrypted information;

Generate a data message including the device identification encrypted information;

Send the data message.

7. A detection device for shared access, characterized in that the detection device includes: a receiving unit, a decryption unit and a determination unit;

The receiving unit is configured to receive a data message sent by a first terminal device, where the data message includes device identification encryption information and an interconnection protocol IP address between source networks assigned by the server to the first terminal device, The device identification encrypted information is the device identification encrypted information of the first terminal device or the device identification encrypted information of a second terminal device that accesses the network through the first terminal device;

The decryption unit is used to decrypt the device identification encrypted information to obtain the first device identification of the first terminal device or the second device identification of the second terminal device; the determination unit is used to determine if the predetermined Assume that the IP address record table includes the first device identification or the second device identification corresponding to the source IP address, then obtain all the IP address records corresponding to the source IP address. The number of device identifiers is used to determine the number of shared access devices under the source IP address.

8. The detection equipment according to claim 7, characterized in that, the determination unit element, and is further configured to store the source IP address and the second device identifier if it is determined that the preset IP address record table does not include the first device identifier or the second device identifier corresponding to the source IP address. Correspondence relationship between the first device identifier or the second device identifier, obtain the number of all device identifiers corresponding to the source IP address in the IP address record table, and then determine the shared access device under the source IP address quantity.

9. The detection equipment according to claim 7 or 8, characterized in that the determining unit is also used to

If the number of shared access devices under the source IP address is greater than 1, it is determined that there is shared access under the source IP address;

If they are not the same, it is determined that there is shared access under the source IP address.

10. The detection equipment according to claim 7 or 8, characterized in that the determining unit is also used to

11. The detection device according to any one of claims 7-10, characterized in that, the detection device further includes: a deletion unit;

The deletion unit is used to delete the device identification encrypted information in the data message.

12. A terminal device, characterized in that the terminal device includes: an acquisition unit and a power. Encryption unit, generation unit and sending unit;

The acquisition unit is used to acquire device identification;

The encryption unit is used to encrypt the device identification and obtain device identification encryption information; The generating unit is configured to generate a data message including the device identification encryption information;

The sending unit is used to send the data message.