CN112954667A - Detection method and device for hotspot mobile terminal, computer equipment and storage medium - Google Patents

Detection method and device for hotspot mobile terminal, computer equipment and storage medium Download PDF

Info

Publication number
CN112954667A
CN112954667A CN202110226570.2A CN202110226570A CN112954667A CN 112954667 A CN112954667 A CN 112954667A CN 202110226570 A CN202110226570 A CN 202110226570A CN 112954667 A CN112954667 A CN 112954667A
Authority
CN
China
Prior art keywords
mobile terminal
information
user
devices
target data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202110226570.2A
Other languages
Chinese (zh)
Other versions
CN112954667B (en
Inventor
陈玲
金红
陈晓光
蔡琳
杨满智
刘长永
傅强
王杰
梁彧
田野
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Eversec Beijing Technology Co Ltd
Original Assignee
Eversec Beijing Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Eversec Beijing Technology Co Ltd filed Critical Eversec Beijing Technology Co Ltd
Priority to CN202110226570.2A priority Critical patent/CN112954667B/en
Publication of CN112954667A publication Critical patent/CN112954667A/en
Application granted granted Critical
Publication of CN112954667B publication Critical patent/CN112954667B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/18Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/183Processing at user equipment or user record carrier
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W24/00Supervisory, monitoring or testing arrangements
    • H04W24/08Testing, supervising or monitoring using real traffic

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention discloses a method and a device for detecting a hotspot mobile terminal, computer equipment and a storage medium. The method comprises the following steps: acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data; classifying each item of target data, and identifying the number of devices, the types of the devices and the user identities according to each item of target data; and obtaining a hot spot mobile terminal detection result according to the equipment number, the equipment type and the user identity. By using the technical scheme of the invention, the mobile terminal sharing the mobile traffic through the hot spot can be detected, thereby providing a guiding function for the reasonable distribution and management of the mobile network resources.

Description

Detection method and device for hotspot mobile terminal, computer equipment and storage medium
Technical Field
The embodiment of the invention relates to a data processing technology, in particular to a method and a device for detecting a hot spot mobile terminal, computer equipment and a storage medium.
Background
With the high-speed development of electronic technology, a mobile terminal can not only obtain internet information through a mobile network, but also open a hot spot group private WLAN (Wireless Local Area network) to provide an internet access environment for other mobile terminals or computers, and the other mobile terminals or computers share the traffic of the mobile terminal.
The mobile terminal establishes communication connection with the base station through an air interface, and the base station has limited bandwidth resources which can be borne and the number of users which can support normal internet access. When more and more mobile terminals open hot spots for other mobile terminals or computers to use, the bandwidth load of the base station can be greatly increased, the experience of other mobile terminal users who normally surf the internet is influenced, and meanwhile, the complexity of the base station on the management and safety control of the terminals is increased. However, at present, no technical solution for detecting the hotspot mobile device exists.
Disclosure of Invention
The embodiment of the invention provides a method and a device for detecting a hot spot mobile terminal, computer equipment and a storage medium, which are used for detecting the mobile terminal sharing mobile traffic through the hot spot, thereby providing a guiding function for reasonable distribution and management of mobile network resources.
In a first aspect, an embodiment of the present invention provides a method for detecting a hotspot mobile terminal, where the method includes:
acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data;
classifying each item of target data, and identifying the number of devices, the types of the devices and the user identities according to each item of target data;
and obtaining a hot spot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
In a second aspect, an embodiment of the present invention further provides a device for detecting a hotspot mobile terminal, where the device includes:
the target data acquisition module is used for acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic and acquiring at least one item of target data;
the data classification module is used for classifying various target data and identifying the number of devices, the types of the devices and the user identities according to the various target data;
and the hotspot mobile terminal detection result acquisition module is used for acquiring a hotspot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
In a third aspect, an embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the processor executes the computer program to implement the method for detecting a hotspot mobile terminal according to any one of the embodiments of the present invention.
In a fourth aspect, the present invention further provides a storage medium containing computer-executable instructions, which when executed by a computer processor, are configured to perform the method for detecting a hot spot mobile terminal according to any one of the embodiments of the present invention.
The embodiment of the invention obtains the signaling flow and the internet flow, analyzes the signaling flow and the internet flow to obtain the target data, classifies the target data, identifies the equipment number, the equipment type and the user identity according to the target data, and calculates according to the equipment number, the equipment type and the user identity to obtain the hot spot mobile terminal detection result. The problem of in the prior art when hot spot mobile terminal quantity increases, increase the bandwidth load of base station, influence other normal internet access user's experience, increase the management of base station to the terminal and the safety control complexity is solved, realized carrying out the detection to the mobile terminal through hot spot sharing mobile traffic to provide guiding effect for the reasonable distribution and the management of mobile network resource.
Drawings
Fig. 1 is a flowchart of a method for detecting a hot spot mobile terminal according to a first embodiment of the present invention;
fig. 2a is a flowchart of a method for detecting a hot spot mobile terminal according to a second embodiment of the present invention;
fig. 2b is a schematic structural diagram of a hot spot mobile terminal detection device in a first specific application scenario of the present invention;
fig. 3 is a schematic structural diagram of a detection apparatus of a hotspot mobile terminal in a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of a computer device in the fourth embodiment of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.
Example one
Fig. 1 is a flowchart of a method for detecting a hotspot mobile terminal according to an embodiment of the present invention, where the embodiment is applicable to detecting a situation that a mobile terminal starts a hotspot and allows other devices to surf the internet, and the method may be executed by a detection apparatus of the hotspot mobile terminal, and the apparatus may be implemented by software and/or hardware and is generally integrated in a computer device.
As shown in fig. 1, the technical solution of the embodiment of the present invention specifically includes the following steps:
s110, acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data.
The signaling is a control signal required for ensuring normal communication in a wireless communication system, the signaling flow is the flow required for signaling transmission, and the internet access flow is the flow generated by the mobile terminal accessing the internet. The target data is a plurality of pieces of information which are obtained by analyzing the signaling flow and the internet flow and are matched with the mobile terminal.
Specifically, the signaling traffic and the internet traffic may be obtained in a mirror image and/or light splitting manner, and in the embodiment of the present invention, a suitable traffic collection manner may be selected according to conditions such as a network structure, network traffic, and device characteristics. When the internet traffic is analyzed, if the internet traffic is encapsulated by adopting a tunnel technology, the internet traffic is subjected to the analysis of the target data after the tunnel encapsulation is released.
Optionally, one or more acquisition units may be arranged to acquire traffic, and after each acquisition unit acquires target data, each target data is converted into formatted data in json format and the like, a log is generated, and the log is sent to the analysis unit, so that the analysis unit classifies and analyzes the data in the log.
And S120, classifying the target data, and identifying the number of devices, the types of the devices and the user identities according to the target data.
The device number refers to the number of mobile terminals accessing the internet through the hot spots, the device type refers to the device type of each mobile terminal accessing the internet through the hot spots, and the user identity refers to the identity information of the user corresponding to the mobile terminal accessing the internet through the hot spots.
In the embodiment of the invention, various target data are classified according to different dimensions, and the number of devices, the types of the devices and the identities of users are respectively identified according to the target data of different types. The purpose of identifying the number of devices, the types of the devices and the identities of the users is to comprehensively and specifically identify the information of the devices and the users of the sharing hotspot users, so that data blank in the aspect of hotspot mobile terminal detection is made up.
And S130, obtaining a hot spot mobile terminal detection result according to the number of the devices, the type of the devices and the identity of the user.
The hot mobile terminal detection result is used for reflecting whether the mobile terminal corresponding to the signaling flow and the internet flow is the hot mobile terminal or not, and specific equipment information and user information when the mobile terminal is the hot mobile terminal.
In the embodiment of the invention, the number of devices sharing flow through the hot spot and the detailed use information of the hot spot can be quickly detected by identifying the number of the devices, the type of the devices and the identity of the user, so that the hot spot sharing condition can be comprehensively evaluated.
According to the technical scheme of the embodiment, the target data is obtained by obtaining the signaling flow and the internet flow and analyzing the signaling flow and the internet flow, the target data is classified, the number of devices, the type of the devices and the identity of the user are identified according to the target data, and the hot spot mobile terminal detection result is obtained by calculation according to the number of the devices, the type of the devices and the identity of the user. The problem of in the prior art when hot spot mobile terminal quantity increases, increase the bandwidth load of base station, influence other normal internet access user's experience, increase the management of base station to the terminal and the safety control complexity is solved, realized carrying out the detection to the mobile terminal through hot spot sharing mobile traffic to provide guiding effect for the reasonable distribution and the management of mobile network resource.
Example two
Fig. 2a is a flowchart of a detection method for a hotspot mobile terminal according to a second embodiment of the present invention, where the embodiment of the present invention further embodies a process of analyzing signaling traffic and internet traffic, a process of classifying target data, a process of identifying the number of devices, the device type, and the user identity, and a process of calculating a detection result of the hotspot mobile terminal, and adds a step of obtaining a cell location, a connection duration of a transmission control protocol, and a consumed traffic to generate a hotspot mobile terminal detection report.
Correspondingly, as shown in fig. 2a, the technical solution of the embodiment of the present invention specifically includes the following steps:
and S210, acquiring signaling traffic and internet traffic in real time.
In the embodiment of the invention, a mirror image and light splitting mode is adopted, and the flow is connected in parallel through the bypass to copy the flow, so that the signaling flow and the internet flow are obtained.
S220, analyzing the signaling flow to obtain the mobile user information.
The Mobile Subscriber information is MSISDN (Mobile Subscriber International ISDN number), and the MSISDN is a number that can uniquely identify a Mobile Subscriber.
Optionally, the signaling traffic may also be analyzed to obtain the cell location.
The Cell location may be a TAC (Tracking Area Code) or an ECI (E-UTRAN Cell Identifier), and both the TAC and the ECI are unique identifiers for locating the mobile subscriber.
In the embodiment of the invention, the purpose of identifying and obtaining the mobile user information in the signaling flow is to conveniently associate the data identified and obtained from the internet flow with the mobile user information, so that the target data is classified on the dimension of the mobile user information.
The purpose of identifying and obtaining the cell location is to comprehensively obtain the detailed information of the hot spot use condition, thereby improving the management capability of the base station on the hot spot mobile terminal and optimizing the network resource allocation.
And S230, analyzing the internet traffic to obtain a transmission control protocol option, timestamp information, user agent information, mail address information and user identity identification information.
The Transmission Control Protocol option is also a TCP (Transmission Control Protocol) option, and the TCP option is also TCP Options, and the timestamp information can be obtained by analyzing the TCP Options. The TimeStamp information, namely TimeStamp, is the time value of the current clock when the TCP message sender sends the message.
User agent information, that is, UA (User-agent information), mail address information, that is, address information of Email, and User identification information may be an account number of application software, etc. In the embodiment of the present invention, the application Protocol type and the application program type are identified according to the internet traffic, UA information is extracted when the application Protocol type is HTTP (Hypertext Transfer Protocol), and Mail address information is identified when the application Protocol type is SMTP (Simple Mail Transfer Protocol) or POP3(Post Office Protocol-Version 3) Protocol, or the like. And identifying the type of the application program according to the internet traffic, and identifying user identity identification information such as an account number of the application software according to the type of the application program.
Optionally, the maximum length of the TCP Options is 40 bytes, and after the TCP Options are identified, in order to improve the efficiency of subsequent target data classification and identification, the TCP Options may be compressed and converted, option values are filtered, option types and combination sequences are reserved, and the TCP Options are compressed into integers.
Optionally, the internet traffic may also be analyzed to obtain the connection duration and the consumed traffic of the transmission control protocol.
In the embodiment of the invention, the TCP connection duration and the consumed flow are identified, and the hotspot sharing condition can be comprehensively evaluated.
S240, classifying each item of target data according to the mobile user information, the transmission control protocol options and the data types.
In the embodiment of the invention, each item of target data is classified from three dimensions of mobile user information, TCP options and data types.
The data types include timestamp information, user agent information, mail address information, and user identification information.
And S250, acquiring the number of the devices according to the timestamp information.
In the embodiment of the invention, the number of the mobile terminals accessing the internet through the hot spot is analyzed according to each timestamp obtained by analyzing the internet traffic.
Accordingly, S250 may further include:
and S251, distributing each timestamp to at least one timestamp set according to a preset numerical value difference range.
In the embodiment of the invention, the signaling flow comprises a plurality of pieces of mobile user information, for one piece of mobile user information, the internet flow comprises a plurality of TCP options matched with one piece of mobile user information, and the TCP options are matched with the range of the preset value difference.
After the target data are classified according to the mobile user information, the TCP options and the data types, for the same mobile user information and the same TCP options, a preset value difference range can be determined according to the TCP options, so that the time stamps of the data corresponding to the same mobile user information and the same TCP options are distributed to a plurality of time stamp sets.
The purpose of distributing each timestamp to a plurality of timestamp sets according to the preset value difference range is that when a user surfs the internet through the same mobile terminal, the TCP messages sent or received by the mobile terminal within a certain time are continuous, that is, the timestamps are relatively continuous. The time stamps in a period of time are distributed into a set, and the number of the time stamps is compared with the number of the standard time stamps in the period of time, so that whether the period of time can correspond to one mobile terminal or not can be determined.
And S252, counting the target duration time of each timestamp in the target timestamp set for the target timestamp set, and calculating the number of the standard timestamps according to the target duration time, the unit time conservative number and the unit time slicing.
And calculating the target duration of each timestamp in the target timestamp set according to the earliest time value and the latest time value. And dividing the product of the target duration time and the conservative number of the unit time by the unit time slice, and calculating the number of the standard time stamps.
And S253, judging whether the number of the time stamps in the target time stamp set is greater than or equal to the standard time stamp number, if so, executing S254, otherwise, executing S255.
And when the number of the timestamps in the target timestamp set is greater than or equal to the standard timestamp number, determining that the target timestamp set corresponds to a target device.
And S254, determining that the target timestamp set corresponds to one target device.
And S255, judging whether the processing of all the timestamp sets is finished, if so, executing S256, otherwise, returning to execute S252.
And for each timestamp set, counting the number of the corresponding devices as the number of the devices.
And S256, counting the number of the devices corresponding to each timestamp set.
And S260, acquiring the equipment type according to the user agent information and the comparison table of the user agent information and the equipment type.
In the embodiment of the invention, the device type can be obtained according to the pre-stored comparison table of the user agent information and the device type and the user agent information obtained by identification.
Alternatively, the device type may be represented by a numerical value.
S270, obtaining the user identity according to the mail address information and the user identity identification information.
In the embodiment of the invention, the equipment information of the mobile terminal can be obtained according to the timestamp and the UA, and the identity information of the user using the mobile terminal can be obtained according to the mail address information and the user identity identification information.
And S280, calculating to obtain hot spot mobile terminal detection results under different mobile user information and transmission control protocol options according to the number of the devices, the types of the devices, the identities of the users and the weights corresponding to the devices.
Alternatively, the user identity may be represented by a numerical value. When the hot spot mobile terminal detection result is calculated according to the equipment number, the equipment type, the user identity and the respective weight thereof, the weight of the equipment number, the equipment type and the user identity can be adjusted in order to improve the fitting degree of the detection result of each hot spot mobile terminal and the accuracy of the detection result of the hot spot mobile terminal in different scenes.
In the embodiment of the invention, whether the mobile terminal shares the flow through the hot spot can be judged according to the detection result of the hot spot mobile terminal.
Optionally, a hotspot mobile terminal detection report may be generated according to a hotspot mobile terminal detection result, a cell location, a tcp connection duration, and a consumed traffic.
In the embodiment of the invention, the hot spot mobile terminal detection result can be combined with the cell position, the connection duration of the transmission control protocol and the consumed flow, so that the hot spot sharing condition of the mobile terminal can be comprehensively evaluated.
According to the technical scheme of the embodiment, signaling flow and internet flow are obtained, the signaling flow is analyzed to obtain mobile user information, the internet flow is analyzed to obtain a transmission control protocol option, timestamp information, user agent information, mail address information and user identity identification information, target data are classified in three dimensions of the mobile user information, the transmission control protocol option and data types, the number of devices is identified according to the timestamp information, the device type is identified according to the user agent information, the user identity is identified according to the mail address information and the user identity identification information, and hot mobile terminal detection results under different mobile user information and transmission control protocol options are calculated according to the device number, the device type and the user identity. The problem of in the prior art when hot spot mobile terminal quantity increases, increase the bandwidth load of base station, influence other normal internet access user's experience, increase the management of base station to the terminal and the safety control complexity is solved, realized carrying out the detection to the mobile terminal through hot spot sharing mobile traffic to provide guiding effect for the reasonable distribution and the management of mobile network resource.
Specific application scenario 1
Fig. 2b is a schematic structural diagram of a hot spot mobile terminal detection device in a first specific application scenario of the present invention, and as shown in fig. 2b, the hot spot mobile terminal detection device includes a plurality of acquisition units and an analysis unit, where:
the collecting unit is used for collecting signaling flow and internet flow, extracting mobile user information from the signaling flow and storing the mobile user information in a user table, extracting TCP option and timestamp information from a TCP message in the internet flow, extracting UA (user agent) or mail address information according to an application protocol type, extracting user identity identification information according to an application program type, counting TCP connection time and consumed flow, storing the information in a connection tracking table, and associating the connection tracking table with the user table. And aggregating various data, performing formatting conversion, generating a log, sending the log to an analysis unit, and deleting the data in the connection tracking table.
And the analysis unit is used for processing the logs sent by the acquisition unit according to the time sequence. And data classification is carried out on the information in the log from three dimensions of mobile user information, TCP options and data types. The data type comprises timestamp information, UA, mail address information and user identity identification information. The number of devices which access the internet through hotspot sharing is analyzed through timestamp information, the known type of the hot spot connection device corresponding to the mobile terminal is identified through UA, and the identity information of the mobile terminal user is further determined through mail address information and user identity identification information. And adjusting the weight coefficient of each data type until the deviation of the detection result of the hotspot mobile terminal is within an allowable range, and determining the sharing position, the sharing object, the equipment information and the like of the mobile terminal hotspot according to the finally calculated detection result of the hotspot mobile terminal, the cell position obtained by analyzing the signaling flow, the TCP connection duration and the consumed flow, thereby comprehensively and specifically evaluating the mobile terminal sharing hotspot.
EXAMPLE III
Fig. 3 is a schematic structural diagram of a detection apparatus for a hotspot mobile terminal in a third embodiment of the present invention, where the apparatus includes: a target data obtaining module 310, a data classifying module 320, and a hot spot mobile terminal detection result obtaining module 330. Wherein:
a target data obtaining module 310, configured to obtain signaling traffic and internet traffic in real time, and analyze the signaling traffic and the internet traffic to obtain at least one item of target data;
the data classification module 320 is used for classifying various target data and identifying the number of devices, the types of the devices and the identities of users according to the various target data;
the hotspot mobile terminal detection result obtaining module 330 is configured to obtain a hotspot mobile terminal detection result according to the number of devices, the device type, and the user identity.
According to the technical scheme of the embodiment, the target data is obtained by obtaining the signaling flow and the internet flow and analyzing the signaling flow and the internet flow, the target data is classified, the number of devices, the type of the devices and the identity of the user are identified according to the target data, and the hot spot mobile terminal detection result is obtained by calculation according to the number of the devices, the type of the devices and the identity of the user. The problem of in the prior art when hot spot mobile terminal quantity increases, increase the bandwidth load of base station, influence other normal internet access user's experience, increase the management of base station to the terminal and the safety control complexity is solved, realized carrying out the detection to the mobile terminal through hot spot sharing mobile traffic to provide guiding effect for the reasonable distribution and the management of mobile network resource.
On the basis of the above embodiment, the target data obtaining module 310 includes:
the signaling flow analysis unit is used for analyzing the signaling flow to obtain the information of the mobile user;
and the internet traffic analyzing unit is used for analyzing the internet traffic to obtain a transmission control protocol option, timestamp information, user agent information, mail address information and user identity identification information.
On the basis of the above embodiment, the data classification module 320 includes:
the target data classification unit is used for classifying each item of target data according to the mobile user information, the transmission control protocol options and the data types;
the data types include timestamp information, user agent information, mail address information, and user identification information.
On the basis of the above embodiment, the data classification module 320 includes:
the equipment number acquiring unit is used for acquiring the equipment number according to the timestamp information;
the device type obtaining unit is used for obtaining the device type according to the user agent information and the comparison table of the user agent information and the device type;
and the user identity acquisition unit is used for acquiring the user identity according to the mail address information and the user identity identification information.
On the basis of the foregoing embodiment, the device number obtaining unit is specifically configured to:
distributing each timestamp to at least one timestamp set according to a preset value difference range;
counting the target duration time of each timestamp in the target timestamp set according to the target timestamp set, and calculating the number of standard timestamps according to the target duration time, the unit time conservative number and the unit time slicing;
if the number of the timestamps in the target timestamp set is greater than or equal to the number of the standard timestamps, determining that the target timestamp set corresponds to a target device;
and counting the number of the devices corresponding to each timestamp set.
On the basis of the above embodiment, the hotspot mobile terminal detection result obtaining module 330 includes:
and the hot spot mobile terminal detection result calculation unit is used for calculating hot spot mobile terminal detection results under different mobile user information and transmission control protocol options according to the equipment number, the equipment type, the user identity and the weights corresponding to the equipment number, the equipment type and the user identity.
On the basis of the above embodiment, the apparatus further includes:
a cell location acquisition module, configured to analyze the signaling traffic to acquire a cell location;
the connection duration acquisition module is used for analyzing the internet traffic to acquire the connection duration and the consumed traffic of the transmission control protocol;
the device, still include:
and the hot spot mobile terminal detection report generating module is used for generating a hot spot mobile terminal detection report according to the hot spot mobile terminal detection result, the cell position, the transmission control protocol connection duration and the consumed flow.
The detection device of the hotspot mobile terminal provided by the embodiment of the invention can execute the detection method of the hotspot mobile terminal provided by any embodiment of the invention, and has corresponding functional modules and beneficial effects of the execution method.
Example four
Fig. 4 is a schematic structural diagram of a computer apparatus according to a fourth embodiment of the present invention, as shown in fig. 4, the computer apparatus includes a processor 70, a memory 71, an input device 72, and an output device 73; the number of processors 70 in the computer device may be one or more, and one processor 70 is taken as an example in fig. 4; the processor 70, the memory 71, the input device 72 and the output device 73 in the computer apparatus may be connected by a bus or other means, and the connection by the bus is exemplified in fig. 4.
The memory 71 is used as a computer-readable storage medium, and can be used for storing software programs, computer-executable programs, and modules, such as modules corresponding to the detection method of the hotspot mobile terminal in the embodiments of the present invention (for example, the target data obtaining module 310, the data classifying module 320, and the hotspot mobile terminal detection result obtaining module 330 in the detection device of the hotspot mobile terminal). The processor 70 executes various functional applications and data processing of the computer device by running software programs, instructions and modules stored in the memory 71, that is, implements the above-mentioned detection method of the hotspot mobile terminal. The method comprises the following steps:
acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data;
classifying each item of target data, and identifying the number of devices, the types of the devices and the user identities according to each item of target data;
and obtaining a hot spot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
The memory 71 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created according to the use of the terminal, and the like. Further, the memory 71 may include high speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device. In some examples, the memory 71 may further include memory located remotely from the processor 70, which may be connected to a computer device over a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The input device 72 may be used to receive input numeric or character information and generate key signal inputs relating to user settings and function controls of the computer apparatus. The output device 73 may include a display device such as a display screen.
EXAMPLE five
An embodiment of the present invention further provides a storage medium containing computer-executable instructions, where the computer-executable instructions are executed by a computer processor to perform a method for detecting a hotspot mobile terminal, where the method includes:
acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data;
classifying each item of target data, and identifying the number of devices, the types of the devices and the user identities according to each item of target data;
and obtaining a hot spot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
Of course, the storage medium containing the computer-executable instructions provided by the embodiments of the present invention is not limited to the method operations described above, and may also perform related operations in the detection method for the hotspot mobile terminal provided by any embodiment of the present invention.
From the above description of the embodiments, it is obvious for those skilled in the art that the present invention can be implemented by software and necessary general hardware, and certainly, can also be implemented by hardware, but the former is a better embodiment in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which can be stored in a computer-readable storage medium, such as a floppy disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a FLASH Memory (FLASH), a hard disk or an optical disk of a computer, and includes several instructions for enabling a computer device (which may be a personal computer, a server, or a network device) to execute the methods according to the embodiments of the present invention.
It should be noted that, in the embodiment of the detection apparatus for a hotspot mobile terminal, each unit and each module included in the detection apparatus are only divided according to functional logic, but are not limited to the above division, as long as corresponding functions can be implemented; in addition, specific names of the functional units are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present invention.
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims (10)

1. A method for detecting a hotspot mobile terminal is characterized by comprising the following steps:
acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic, and acquiring at least one item of target data;
classifying each item of target data, and identifying the number of devices, the types of the devices and the user identities according to each item of target data;
and obtaining a hot spot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
2. The method of claim 1, wherein analyzing the signaling traffic and the internet traffic to obtain at least one item of target data comprises:
analyzing the signaling flow to obtain the information of the mobile user;
and analyzing the internet traffic to obtain a transmission control protocol option, timestamp information, user agent information, mail address information and user identity identification information.
3. The method of claim 2, wherein classifying the items of target data comprises:
classifying each item of target data according to the mobile user information, the transmission control protocol options and the data types;
the data types include timestamp information, user agent information, mail address information, and user identification information.
4. The method of claim 3, wherein identifying the device number, device type, and user identity based on the types of object data comprises:
acquiring the number of devices according to the timestamp information;
acquiring the equipment type according to the user agent information and a comparison table of the user agent information and the equipment type;
and acquiring the user identity according to the mail address information and the user identity identification information.
5. The method of claim 4, wherein obtaining the number of devices based on the timestamp information comprises:
distributing each timestamp to at least one timestamp set according to a preset value difference range;
counting the target duration time of each timestamp in the target timestamp set according to the target timestamp set, and calculating the number of standard timestamps according to the target duration time, the unit time conservative number and the unit time slicing;
if the number of the timestamps in the target timestamp set is greater than or equal to the number of the standard timestamps, determining that the target timestamp set corresponds to a target device;
and counting the number of the devices corresponding to each timestamp set.
6. The method of claim 3, wherein obtaining the hot spot mobile terminal detection result according to the device number, the device type, and the user identity comprises:
and calculating to obtain hot spot mobile terminal detection results under different mobile user information and transmission control protocol options according to the number of the devices, the types of the devices, the identities of the users and the weights corresponding to the devices.
7. The method of claim 1, wherein after analyzing the signaling traffic and the internet traffic to obtain at least one item of target data, the method further comprises:
analyzing the signaling flow to obtain the position of the cell;
analyzing the internet traffic to obtain the connection duration and the consumed traffic of a transmission control protocol;
after the detection result of the hotspot mobile terminal is obtained according to the number of the devices, the type of the devices and the identity of the user, the method further comprises the following steps:
and generating a hot spot mobile terminal detection report according to the hot spot mobile terminal detection result, the cell position, the transmission control protocol connection duration and the consumed flow.
8. A detection device for a hotspot mobile terminal is characterized by comprising:
the target data acquisition module is used for acquiring signaling traffic and internet traffic in real time, analyzing the signaling traffic and the internet traffic and acquiring at least one item of target data;
the data classification module is used for classifying various target data and identifying the number of devices, the types of the devices and the user identities according to the various target data;
and the hotspot mobile terminal detection result acquisition module is used for acquiring a hotspot mobile terminal detection result according to the equipment number, the equipment type and the user identity.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the method for detecting a hotspot mobile terminal according to any one of claims 1 to 7 when executing the program.
10. A storage medium containing computer-executable instructions, which when executed by a computer processor, are configured to perform the method for hot spot mobile terminal detection according to any of claims 1-7.
CN202110226570.2A 2021-03-01 2021-03-01 Detection method and device for hotspot mobile terminal, computer equipment and storage medium Active CN112954667B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110226570.2A CN112954667B (en) 2021-03-01 2021-03-01 Detection method and device for hotspot mobile terminal, computer equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110226570.2A CN112954667B (en) 2021-03-01 2021-03-01 Detection method and device for hotspot mobile terminal, computer equipment and storage medium

Publications (2)

Publication Number Publication Date
CN112954667A true CN112954667A (en) 2021-06-11
CN112954667B CN112954667B (en) 2023-01-17

Family

ID=76246959

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110226570.2A Active CN112954667B (en) 2021-03-01 2021-03-01 Detection method and device for hotspot mobile terminal, computer equipment and storage medium

Country Status (1)

Country Link
CN (1) CN112954667B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114900452A (en) * 2022-05-05 2022-08-12 中国联合网络通信集团有限公司 Internet of things connection state monitoring method and device, electronic equipment and medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109429262A (en) * 2017-09-04 2019-03-05 ***通信有限公司研究院 A kind of detection method of hot spot, the network equipment and computer readable storage medium
CN110177024A (en) * 2019-05-06 2019-08-27 北京奇安信科技有限公司 Monitoring method and client, server-side, the system of hotspot device
CN111343034A (en) * 2018-12-19 2020-06-26 ***通信集团辽宁有限公司 Terminal hotspot opening identification method, device, equipment and storage medium

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109429262A (en) * 2017-09-04 2019-03-05 ***通信有限公司研究院 A kind of detection method of hot spot, the network equipment and computer readable storage medium
CN111343034A (en) * 2018-12-19 2020-06-26 ***通信集团辽宁有限公司 Terminal hotspot opening identification method, device, equipment and storage medium
CN110177024A (en) * 2019-05-06 2019-08-27 北京奇安信科技有限公司 Monitoring method and client, server-side, the system of hotspot device

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114900452A (en) * 2022-05-05 2022-08-12 中国联合网络通信集团有限公司 Internet of things connection state monitoring method and device, electronic equipment and medium
CN114900452B (en) * 2022-05-05 2023-06-27 中国联合网络通信集团有限公司 Internet of things connection state monitoring method and device, electronic equipment and medium

Also Published As

Publication number Publication date
CN112954667B (en) 2023-01-17

Similar Documents

Publication Publication Date Title
CN111414416B (en) Data processing method, device, equipment and storage medium
CA2845413C (en) Radio resource optimizing method, apparatus, and system
CN112311617A (en) Configured data monitoring and alarming method and system
CN111954173B (en) Method, device, server and computer readable storage medium for sending short message
CN106162714A (en) A kind of calling information processing method and processing device
CN108616389B (en) Network evaluation method, equipment, storage medium and device based on cloud server
CN111726456B (en) Data processing method and related device
CN108574627B (en) SDN network multi-control-domain cooperative management method and system
CN108901035B (en) Identification method and device for terminal of Internet of things
CN110856188B (en) Communication method, apparatus, system, and computer-readable storage medium
CN112784992A (en) Network data analysis method, functional entity and electronic equipment
CN111901396B (en) Resource request response method, redirection server and decision distribution server
CN112954667B (en) Detection method and device for hotspot mobile terminal, computer equipment and storage medium
CN110611937B (en) Data distribution method and device, edge data center and readable storage medium
WO2014101706A1 (en) User-generated content mentioned harassment shielding method, device and system
CN113423120A (en) Data distribution processing method and device based on private network terminal and electronic equipment
CN113220522A (en) Automatic positioning method and device for service abnormity
CN108989244B (en) Data processing method, data processing device, storage medium and electronic equipment
EP4280561A1 (en) Information flow identification method, network chip, and network device
CN111988271B (en) Communication flow processing method and device
CN113727092B (en) Video monitoring quality inspection method and device based on decision tree
CN115665259A (en) Encrypted HTTP request acquisition device, system and method
CN110430098B (en) Data processing system
CN110869910A (en) Search resource recommendation method and related product
CN108966160B (en) Short message processing method and device and computer readable storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant