CN114867023B - Information acquisition method and device of virtual dialing device and electronic device - Google Patents

Information acquisition method and device of virtual dialing device and electronic device Download PDF

Info

Publication number
CN114867023B
CN114867023B CN202111643045.7A CN202111643045A CN114867023B CN 114867023 B CN114867023 B CN 114867023B CN 202111643045 A CN202111643045 A CN 202111643045A CN 114867023 B CN114867023 B CN 114867023B
Authority
CN
China
Prior art keywords
address
card
goip
information
communication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111643045.7A
Other languages
Chinese (zh)
Other versions
CN114867023A (en
Inventor
陈源
郑植
廖伟军
梁思
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN202111643045.7A priority Critical patent/CN114867023B/en
Publication of CN114867023A publication Critical patent/CN114867023A/en
Application granted granted Critical
Publication of CN114867023B publication Critical patent/CN114867023B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud
    • H04W12/128Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227Filtering policies
    • H04L63/0236Filtering by address, protocol, port number or service, e.g. IP-address or URL
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40Security arrangements using identity modules

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Telephonic Communication Services (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention provides an information acquisition method and device of virtual dialing equipment and electronic equipment, wherein the method comprises the following steps: acquiring fixed offset characteristic data to be utilized; identifying a plurality of target messages carrying the fixed offset characteristic data from a target network data stream; acquiring communication characteristics of preset virtual dialing equipment; based on the communication characteristics and a plurality of target messages, the address information of the virtual dialing device is obtained, wherein the address information GOIP gateway device comprises an IP address, a card pool IP address and a card pool management server IP address. Through the scheme, in the process of communication of the GOIP equipment separated by the machine card, communication information can be acquired for the GOIP equipment separated by the machine card.

Description

Information acquisition method and device of virtual dialing device and electronic device
Technical Field
The present invention relates to the field of communications security technologies, and in particular, to an information obtaining method and apparatus for a virtual dialing device, and an electronic device.
Background
GOIP (Gsm Over Internet Protocol) is a virtual dial-up device for network communications that can convert traditional telephone signals into network signals. Currently, the machine-card separated GOIP device mainly used in society comprises a plurality of components: GOIP gateway equipment, card pond and card pond management server, wherein, GOIP gateway equipment and card pond place in different regions, and SIM (Subscriber Identity Module, user identification module) card inserts in the card pond, and the card pond passes through card pond management server and gives GOIP gateway equipment with conversation data transmission, and then is connected the basic station by GOIP gateway equipment, dials the phone out.
In the related art, an IP address of a GOIP gateway device is identified by acquiring a data stream of a specified communication network, for example, a data stream of a telephone dialed by the GOIP device, thereby locating the location of the GOIP gateway device. However, for the GOIP equipment with separated machine and card, as the GOIP gateway equipment and the card pool are placed in different areas, only the GOIP gateway equipment of the appointed data stream can be found by the method provided by the related technology, but the card pool and the card pool management server can not be found, and the method belongs to post judgment and has poor timeliness in the process of identifying and finding the GOIP gateway equipment.
For the GOIP equipment with separated machine and card, if the IP addresses of the GOIP gateway equipment, the card pool and the card pool management server can be obtained at the same time, each component of the GOIP equipment with separated machine and card can be effectively monitored and positioned. Therefore, how to obtain communication information from the GOIP device separated from the machine and card and quickly find a card pool and a card pool management server that are in communication with each other in the process of communicating by using the GOIP device separated from the machine and card is a problem to be solved.
Disclosure of Invention
The embodiment of the invention aims to provide an information acquisition method, an information acquisition device and electronic equipment of virtual dialing equipment, wherein in the process of communication of GOIP equipment separated from a machine card, communication characteristic identification acquisition is carried out on the GOIP equipment separated from the machine card, so that GOIP gateway equipment, a card pool and a card pool management server separated from the machine card are rapidly discovered and acquired. The specific technical scheme is as follows:
In a first aspect, an embodiment of the present invention provides an information obtaining method of a virtual dialing device, where the method includes:
Acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
identifying a plurality of target messages carrying the fixed offset characteristic data from a target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
Acquiring address information of the virtual dialing device based on the communication characteristics and the target messages; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
Optionally, the obtaining address information of the virtual dialing device based on the communication features of the virtual dialing device and the multiple target messages includes:
Selecting each message matched with the line characteristics in the communication characteristics of the virtual dialing device from the target messages;
Acquiring a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server;
Determining a source IP address of the first data packet as an IP address of the card pool, and determining a destination IP address of the first data packet as an IP address of the card pool management server;
and determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment.
Optionally, the types of the line features include:
one or more of a link mode, a type of network application used, a port number, a latency, a traffic size, a server connection mode, a time synchronization mode, and a website access behavior.
Optionally, the method further comprises:
acquiring uplink and downlink network data streams matched with the address information from the target network data streams;
Identifying target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code, call record information of the GOIP gateway equipment, card number information of an SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
Optionally, the identifying, based on the uplink and downlink network data flows, target information of the virtual dialing device includes:
determining that a source IP address is the IP address of the GOIP gateway equipment from the uplink and downlink network data streams, and a destination IP address is the data stream of the IP address of the card pool management server as a first network data stream;
acquiring the equipment identification code and call record information of the GOIP gateway equipment from the message information of the first network data stream;
determining that a source IP address is the IP address of the card pool from the uplink and downlink network data streams, and a destination IP address is the data stream of the IP address of the card pool management server as a second network data stream;
and acquiring card number information of the SIM card inserted in the card pool and a card slot number corresponding to the SIM card from the message information of the second network data stream.
In a second aspect, an embodiment of the present invention further provides an information obtaining apparatus for a virtual dialing device, where the apparatus includes:
the first acquisition module is used for acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
The first identification module is used for identifying a plurality of target messages carrying the fixed offset characteristic data from the target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
the second acquisition module is used for acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
The third acquisition module is used for acquiring the address information of the virtual dialing device based on the communication characteristics and the target messages; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
Optionally, the third obtaining module includes:
A selecting sub-module, configured to select, from the plurality of target messages, each message that matches a line feature in the communication features of the virtual dialing device;
the first acquisition sub-module is used for acquiring a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from the data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server;
A first determining sub-module, configured to determine a source IP address of the first data packet as an IP address of the card pool, and determine a destination IP address of the first data packet as an IP address of the card pool management server;
and the second determining submodule is used for determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment.
Optionally, the types of the line features include:
one or more of a link mode, a type of network application used, a port number, a latency, a traffic size, a server connection mode, a time synchronization mode, and a website access behavior.
Optionally, the apparatus further comprises:
a fourth obtaining module, configured to obtain, from the target network data stream, an uplink and downlink network data stream that matches the address information;
the second identification module is used for identifying the target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code, call record information of the GOIP gateway equipment, card number information of an SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
Optionally, the second identifying module includes:
A third determining submodule, configured to determine, from the uplink and downlink network data streams, that a source IP address is an IP address of the GOIP gateway device, and that a destination IP address is a data stream of an IP address of the card pool management server, as a first network data stream;
a second obtaining sub-module, configured to obtain, from the message information of the first network data stream, an equipment identification code of the GOIP gateway equipment and call record information;
A fourth determining submodule, configured to determine, from the uplink and downlink network data flows, a data flow with a source IP address being an IP address of the card pool and a destination IP address being an IP address of the card pool management server, as a second network data flow;
And the third acquisition sub-module is used for acquiring the card number information of the SIM card inserted in the card pool and the card slot number corresponding to the SIM card from the message information of the second network data stream.
In a third aspect, an embodiment of the present invention further provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete communication with each other through the communication bus;
a memory for storing a computer program;
and the processor is used for realizing the information acquisition method of the virtual dialing device when executing the program stored in the memory.
In a fourth aspect, an embodiment of the present invention further provides a computer readable storage medium, where a computer program is stored, where the computer program, when executed by a processor, implements the method for obtaining information of a virtual dialing device described above.
The embodiment of the invention also provides a computer program product containing instructions, which when run on a computer, cause the computer to execute the information acquisition method of the virtual dialing device.
The embodiment of the invention has the beneficial effects that:
the embodiment of the invention provides an information acquisition method of virtual dialing equipment, which comprises the steps of firstly acquiring fixed offset characteristic data to be utilized; acquiring a target message carrying fixed offset characteristic data from a target network data stream; and acquiring address information of the virtual dialing device based on the communication characteristics of the virtual dialing device and the target message. In the scheme, in the process of communicating by using the GOIP equipment separated by the machine card, the address information of each component of the GOIP equipment separated by the machine card can be acquired, so that the positions of each component of the GOIP equipment can be rapidly positioned. Therefore, through the scheme, communication information can be acquired for the GOIP equipment separated from the machine card in the process of communication of the GOIP equipment separated from the machine card.
Of course, it is not necessary for any one product or method of practicing the invention to achieve all of the advantages set forth above at the same time.
Drawings
In order to more clearly illustrate the embodiments of the invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the invention, and other embodiments may be obtained according to these drawings to those skilled in the art.
Fig. 1 is a communication network of a GOIP device separated by a set-top box according to an embodiment of the present invention;
fig. 2 is a schematic diagram of a communication process between each component of a GOIP device with separated cards according to an embodiment of the present invention;
fig. 3 is a flowchart of a method for obtaining information of a virtual dialing device according to an embodiment of the present invention;
fig. 4 is another flowchart of a method for obtaining information of a virtual dialing device according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a machine-card separation GOIP device identification system according to an embodiment of the present invention;
Fig. 6 is a schematic structural diagram of an information obtaining apparatus of a virtual dialing device according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
The following description of the embodiments of the present application will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present application, but not all embodiments. Based on the embodiments of the present application, all other embodiments obtained by the person skilled in the art based on the present application are included in the scope of protection of the present application.
GOIP equipment is a hardware equipment for network communication, supports mobile phone card access, can convert traditional telephone signals into network signals, can operate hundreds of mobile phone SIM cards simultaneously, is equivalent to the collection of a plurality of mobile phone terminals, and is initially used for constructing a call center of a large enterprise. In the related technology, main indexes such as SIM mobile phone card moving track condition, base station resident quantity comparison condition, user basic information in a charging ticket, user calling characteristics and the like can be extracted from signaling through GOIP monitoring equipment for analysis, and information sources of the GOIP equipment are positioned.
And by using the GOIP equipment in the machine-card separation mode, a cloud server can be erected between the GOIP gateway equipment and the card pool, and the card pool management system is arranged on the cloud server, so that the separation of the GOIP gateway equipment and the card pool in the physical position is realized. As shown in fig. 1, a communication network of the GOIP device separated by a set-top box includes a downstream network and an upstream network. The downstream networking equipment group comprises GOIP gateway equipment, accesses the Internet through a home broadband network or a card inserting wireless route, and can also remotely monitor through cloud control, the GOIP gateway equipment communicates with the card pool through the Internet and a card pool management server, and the card pool management server manages and sets the card pool and the GOIP gateway equipment; the upstream network comprises an upstream SIP terminal, an upstream user can call a SIP (Session Initiation Protocol ) server service through the upstream SIP terminal, call out a phone by using a card pool SIM card, and communicate with a base station through home broadband or wireless routing by a downstream GOIP gateway device to reach a downstream communication terminal, wherein the upstream SIP terminal is mostly a SIP soft terminal, and the downstream communication terminal can be an electronic device with a communication function, such as a mobile phone, a fixed phone and the like.
The communication process between each component of the GOIP equipment with separated machine and card is shown in fig. 2. The first step: the equipment registration, the GOIP gateway equipment registers with a card pool management server, and the card pool registers with the management server; and a second step of: pushing card information, namely enabling the card Chi Tuisong to send SIM card information to a card pool management server after the SIM card is inserted into a certain card slot of the card pool; and a third step of: the method comprises the steps that a card reading is carried out, the GOIP gateway equipment applies for using the SIM card to a card pool management server according to a configuration strategy, and the card pool management server distributes the card to the GOIP gateway equipment for network registration to a base station; fourth step: SIP outbound, the SIP service initiates a call to the GOIP gateway device through a standard SIP or h.323 protocol, where h.323 is a standard audio/video transmission protocol, and can implement a remote review function, and the GOIP gateway device is connected to the base station to convert a traditional telephone signal into a network signal; fifth step: initiating a network call, and completing the call continuous and disconnection process of a subsequent downstream communication terminal according to the mobile network communication service flow of an operator; sixth step: and after the call is ended, the GOIP gateway equipment uploads the ticket to the card pool management server.
The various components of the GOIP device communicate with the following messaging features: (1) The GOIP gateway equipment and the card pool transparently transmit commands, and data in the process are not decoded; (2) using binary messages, the message header length is fixed; (3) The TCP connection data packet of communication adopts specific method attribute; (4) In the communication message from the GOIP gateway device to the card pool management server, the device identification code of the GOIP gateway device, namely IMEI (International Mobile Equipment Identity, international mobile equipment identification code), ICCID (INTEGRATE CIRCUIT CARD IDENTITY, integrated circuit card identification code) information of the SIM card, card slot number, calling direction, SIP number, outbound opposite terminal number and time information are carried; (5) The communication information from the card pool to the card pool management server carries card inserting channel information, card inserting ICCID information and card IMSI (International Mobile Subscriber Identity ) information when a new card is inserted, a card is replaced and a card inserting channel is replaced; (6) The device will initiate registration periodically, negotiated by the heartbeat signal.
In the related art, the IP address of the GOIP gateway device may be identified by acquiring the data stream of the telephone dialed by the GOIP device, so as to locate the location of the GOIP gateway device, but the IP addresses of the card pool device and the card pool management server of the GOIP cannot be found.
Based on the above description, the embodiments of the present invention provide an information obtaining method and apparatus for a virtual dialing device, and an electronic device, so as to perform communication feature identification and obtaining on a GOIP device separated by a machine-card in a process of performing communication by using the GOIP device separated by the machine-card, thereby rapidly discovering and obtaining the GOIP gateway device, the card pool, and the card pool management server separated by the machine-card.
The following first describes an information acquisition method of a virtual dialing device provided by an embodiment of the present invention.
The information acquisition method of the virtual dialing device provided by the embodiment of the invention can be applied to electronic devices, and in an exemplary implementation manner, the electronic devices can be servers for monitoring network data flows or terminal devices, such as smart phones, tablet computers and desktop computers, which are all reasonable.
The information acquisition method of the virtual dialing device provided by the embodiment of the invention can comprise the following steps:
Acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
identifying a plurality of target messages carrying the fixed offset characteristic data from a target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
Acquiring address information of the virtual dialing device based on the communication characteristics and the target messages; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
The embodiment of the invention provides an information acquisition method of virtual dialing equipment, which comprises the steps of firstly acquiring fixed offset characteristic data to be utilized; acquiring a target message carrying fixed offset characteristic data from a target network data stream; and acquiring address information of the virtual dialing device based on the communication characteristics of the virtual dialing device and the target message. In the scheme, in the process of communication of the GOIP equipment with separated machine and card, the address information of each component of the GOIP equipment with separated machine and card can be obtained, so that the positions of each component of the GOIP equipment can be rapidly positioned. Therefore, through the scheme, communication information can be acquired for the GOIP equipment separated from the machine card in the process of communication of the GOIP equipment separated from the machine card.
The following describes information acquisition of a virtual dialing device according to an embodiment of the present invention with reference to the accompanying drawings.
As shown in fig. 3, the method for obtaining information of a virtual dialing device according to the embodiment of the present invention may include the following steps:
S301, acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
The fixed offset feature data is a feature which is necessarily carried when the GOIP equipment separated from the machine card communicates. Can be identified from the monitored network traffic data stream by DPI (DEEP PACKET Inspection) technology. The fixed offset characteristic data of the GOIP devices produced by the same manufacturer are the same, for example: the communication data connection between the GOIP gateway device and the card pool of the GOIP device manufactured by a manufacturer adopts a TCP (Transmission Control Protocol ) connection mode, the fixed offset occurs in a TCP header, the fixed offset characteristic data is a data block with the length of 16 bytes from the 16 th byte of the TCP data packet, the data is equal to '7 b2250524f544f223a22455350502f 32', and the 16 th byte of the offset and the characteristic data '7 b2250524f544f223a22455350502f 32' are the fixed offset characteristic data of the GOIP device manufactured by the manufacturer and separated by the machine card.
In order to acquire the fixed offset characteristic data, the use environment of the GOIP equipment separated by the machine card can be built by combining a card pool, a cloud server, a broadband, a test SIM card, an exchanger, SIP service and the like for the GOIP gateway equipment, and the SIM card can be registered, plugged in and out by using two different modes of ICCID and IMSI, and meanwhile, packet capturing analysis is performed. Therefore, the method and the device can analyze and identify the basic message body structure and main message types such as device registration, registration response, card slot state release, card opening, card closing, card information acquisition and the like, and acquire ICCID and IMSI information transmitted in the message. Finally, from the TCP header of these messages, and the data content, fixed offset characteristic data of the type of GOIP device can be obtained.
Before communication information is acquired for the GOIP equipment separated from the machine card, the GOIP equipment produced by each manufacturer can be subjected to pre-analysis and acquisition of fixed offset characteristic data.
S302, identifying a plurality of target messages carrying the fixed offset characteristic data from a target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
The monitoring area may be a region, and the message carrying the fixed offset characteristic data is identified from the network communication data stream monitored by the region.
S303, acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
among them, the inventors have studied in the course of carrying out the invention to find that: the various components of the GOIP device have the following features when communicating:
(1) Adopting a TCP long-chain connection mode for communication; (2) the type of network application used is single; (3) the port number used for source/destination IP communications is relatively fixed; (4) The data packet belongs to a small packet, has low time delay and accompanies periodic heartbeat messages; (5) connecting the SIP server using both SIP and h.323 protocols; (6) Periodic NTP (Network Time Protocol ) time synchronization; (7) daily visits to legitimate hot spot websites are less behaving.
Based on the above description, exemplary types of line features may include one or more of a link style, a type of network application used, a port number, a latency, a traffic size, a time synchronization style, a data transfer style, and a website access behavior. Accordingly, exemplary, line features may include: the method adopts a TCP long-link mode, the type of the used network application program is single, the port number used by source/destination IP communication is fixed, the time delay of a data packet is lower than a preset time threshold, the size of the data packet is smaller than a preset data volume threshold, the SIP server is connected by adopting SIP and H.323 protocols, the time synchronization of periodical NTP is realized, and the frequency of visiting legal websites is lower than the preset threshold. The predetermined data amount threshold, the predetermined time threshold, the predetermined frequency threshold, and the like may be obtained through empirical or experimental analysis, which is not limited in the embodiment of the present invention.
The content characteristics of the data packet may be characterized in that the data packet is a data packet registered by the card pool to the management server, or a data packet registered by the GOIP gateway device to the card pool management server.
Illustratively, a network packet:
{"PROTO":"ESPP/2.0","MSG":"REG","DID":51,"CSEQ":49, "USERNAME":"cattsoft","EXPIRES":180,"NAME":"","MAX-PORTS":128, "MAC":"00-30-f1-00-f3-5b","IP":"192.168.1.68", "VERSION":"SP128-400-061-050-000-020", "SIM-STATUS":"00000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000000 00000000","NONCE":"8f0f3b780b5b46cc51a64ac1b8837389","NC":48, "RESPONSE":"028A796CC2C6C7AD29DF203056823C38"};
The message types of MSG are REG and SIM-STATUS, namely the content characteristics of the data packet, the data packet is registered by the card pool represented by the MSG to the management server, the source IP address of the network data packet is the card pool IP address, and the destination IP address is the IP address of the card pool management server.
The other network data packet is:
{"PROTO":"ESPP/2.2","MSG":"REG","DID":52,"CSEQ":69, "EXPIRES":120,"NAME":"","MAC":"00-30-F1-00-DE-6F", "VERSION":"532-606-924-041-100-020","MAX-PORTS":32,"TIMEZONE":480, "STATUS":"00000000000000000000000000000000","IP":"192.168.1.67", "USERNAME":"cattgoip","NONCE":"f554d819fcf0819a3b9854f6c5892ce6","NC" :68,"RESPONSE":"E4FBDA506CFA0C41283A874FC69BBB6E"},
The message types of MSG REG and STATUS are that the content characteristics of the data packet represent the data packet registered by the GOIP gateway to the card pool management server, the source IP 124.226.215.86 address of the message can be obtained as the IP address of the GOIP gateway equipment, and the destination IP 222.84.24.220 address is the IP address of the card pool management server.
Communication characteristics of the virtual dialing device can be preset according to the line characteristics and the content characteristics, the identified multiple target messages can be screened, and address information can be acquired, and the specific process is described in an exemplary manner below.
S304, acquiring address information of the virtual dialing device based on the communication characteristics and the target messages; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
Specifically, in one implementation manner, based on the communication characteristics of the virtual dialing device and the multiple target messages, obtaining address information of the virtual dialing device may include the following steps:
a1, selecting each message matched with the line characteristics in the communication characteristics of the virtual dialing equipment from the plurality of target messages;
Screening the identified target messages according to the line characteristics, and selecting each message matched with the line characteristics.
Step A2, obtaining a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server;
A3, determining the source IP address of the first data packet as the IP address of the card pool, and determining the destination IP address of the first data packet as the IP address of the card pool management server;
And step A4, determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment.
Address information of each component of the GOIP device is determined, and the location of each component can be located according to the IP address of each component. The data flow matched with the address information can be monitored, so that each component of the GOIP equipment and the Application (Application) Application of remote management can be monitored.
The embodiment of the invention provides an information acquisition method of virtual dialing equipment, which comprises the steps of firstly acquiring fixed offset characteristic data to be utilized; acquiring a target message carrying fixed offset characteristic data from a target network data stream; and acquiring address information of the virtual dialing device based on the communication characteristics of the virtual dialing device and the target message. In the scheme, in the process of communicating by using the GOIP equipment separated by the machine card, the address information of each component of the GOIP equipment separated by the machine card can be acquired, so that the positions of each component of the GOIP equipment can be rapidly positioned. Therefore, through the scheme, communication information can be acquired for the GOIP equipment separated from the machine card in the process of communication of the GOIP equipment separated from the machine card.
Optionally, in another embodiment, as shown in fig. 4, the method for obtaining information of the virtual dialing device further includes:
S305, acquiring uplink and downlink network data streams matched with the address information from the target network data streams;
because the communication data packet which is primarily obtained through the fixed offset feature only has part of the information data of the GOIP equipment separated by the machine card, the monitored network communication data stream is required to be secondarily grabbed through the IP addresses of the GOIP gateway equipment, the card pool and the card pool management server, and all the uplink and downlink network data streams of the GOIP gateway equipment, the card pool and the card pool management server separated by the machine card are obtained, wherein the uplink and downlink network data streams, namely the data streams received and transmitted through the IP addresses of the GOIP gateway equipment, the card pool and the card pool management server, are analyzed, and then more information can be obtained.
S306, identifying target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code of the GOIP gateway equipment, card number information of the SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
Specifically, based on the uplink and downlink network data flows, identifying target information of the virtual dialing device includes steps B1-B4:
Step B1, determining that a source IP address is an IP address of GOIP gateway equipment from uplink and downlink network data streams, wherein a destination IP address is a data stream of an IP address of a card pool management server as a first network data stream;
Step B2, obtaining the equipment identification code of the GOIP gateway equipment and the call record information from the message information of the first network data stream;
step B3, determining that the source IP address is the IP address of the card pool from the uplink and downlink network data streams, and the destination IP address is the data stream of the IP address of the card pool management server as a second network data stream;
And step B4, acquiring the card number information of the SIM card inserted in the card pool and the card slot number corresponding to the SIM card from the message information of the second network data stream.
The GOIP gateway device registers with the card pool management server, and after the call is ended, the GOIP gateway device further uploads a ticket to the card pool management server, so that the source IP address is the IP address of the GOIP gateway device, the destination IP address is the device identification code of the GOIP gateway device in the first network data stream of the IP address of the card pool management server, and call record information CDR (CALL DETAIL Records, call detail record), where the call record information includes ICCID information and IMSI information of the SIM card of the outgoing phone, call direction, SIP number, outgoing call opposite end number, call time, and the like, and these information can correspond to the call record of the SIM recorded by the operator, and the signaling ticket. Specifically, the line characteristics may be used to screen the first network data stream, and then the content characteristics of the call records of the GOIP gateway device are represented to obtain the call record information. For example, the identified message type of a data packet is "CALLEE", i.e. the content characteristic of the call record of the GOIP gateway device, and the data packet is the data packet to which the call record belongs.
Similarly, after the SIM card is inserted into the card slot of the card pool, the card pool pushes the SIM card information to the card pool management server, so that the card number information of the SIM card inserted into the card pool, including ICCID information and IMSI information, and the card slot number corresponding to the SIM card, can be obtained from the second network data stream with the source IP address being the IP address of the card pool and the destination IP address being the IP address of the card pool management server.
In this embodiment, an uplink and downlink network data stream matched with the address information is obtained from a target network data stream; based on the uplink and downlink network data streams, identifying target information of the virtual dialing device, wherein the target information comprises one or more of a device identification code of the GOIP gateway device, call record information, card number information of an SIM card inserted in a card pool and a card slot number corresponding to the SIM card. Therefore, in the scheme, more target information is obtained by analyzing the uplink and downlink network data streams of the GOIP equipment separated by the machine card.
In order to better illustrate the content of the embodiment of the present invention, the content of the embodiment of the present invention is described below with reference to fig. 5.
Fig. 5 shows a structure of a machine-card separation GOIP device identification system. The system comprises a strategy setting module, a characteristic flow filtering module and a network characteristic analysis module.
The distribution equipment distributes a target network data stream from the internet traffic; the characteristic flow filtering module matches a message carrying the fixed offset characteristic data in the target network data flow according to the fixed offset characteristic data set by the strategy setting module; obtaining address information of the GOIP gateway equipment, the card pool and the card pool management server from the matched message according to line characteristics of uplink and downlink broadband line internet communication data packets and content characteristics of flow data packets among the GOIP gateway equipment, the card pool and the card pool management server and unpacking analysis; the address information is transmitted to a strategy setting module to set the source/destination IP address, and the strategy setting module can set the source/destination IP address manually;
According to the source/destination address IP set by the strategy setting module, matching GOIP gateway equipment, a card pool and a card pool management server uplink and downlink network data streams with separated machine cards sent and received by the IP address in the target network data stream;
The network feature analysis module obtains the original flow of communication among all parts of the GOIP equipment according to the communication features among all parts of the GOIP equipment, analyzes and identifies the original flow, and identifies the data packet when the card is registered, called and uploaded, so as to obtain the equipment identification code of the GOIP gateway equipment, the ICCID of the registered SIM card, the IMSI information of the SIM card and the card slot number corresponding to the SIM card; the calling direction, the SIP number, the outbound counter number, the calling time, etc. in the call record information. Further, the network feature analysis module can push the IP addresses of the GOIP gateway device, the card pool and the card pool management server to the preset platform, help relevant staff to lock the position of the card pool, screen the SIM card and receive an adjustment strategy fed back by the preset platform, and is used for setting the strategy setting module.
The embodiment of the invention provides an information acquisition method of virtual dialing equipment, which comprises the steps of firstly acquiring fixed offset characteristic data to be utilized; acquiring a target message carrying fixed offset characteristic data from a target network data stream; and acquiring address information of the virtual dialing device based on the communication characteristics of the virtual dialing device and the target message. In the scheme, in the process of communicating by using the GOIP equipment separated by the machine card, the address information of each component of the GOIP equipment separated by the machine card can be acquired, so that the positions of each component of the GOIP equipment can be rapidly positioned. Therefore, through the scheme, communication information can be acquired for the GOIP equipment separated from the machine card in the process of communication of the GOIP equipment separated from the machine card.
The embodiment of the invention also provides an information acquisition device of the virtual dialing device, as shown in fig. 6, the device comprises:
A first obtaining module 610, configured to obtain fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
A first identifying module 620, configured to identify, from a target network data stream, a plurality of target packets carrying the fixed offset characteristic data; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
a second obtaining module 630, configured to obtain a preset communication characteristic of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
A third obtaining module 640, configured to obtain address information of the virtual dialing device based on the communication characteristics and the multiple target packets; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
Optionally, the third obtaining module includes:
A selecting sub-module, configured to select, from the plurality of target messages, each message that matches a line feature in the communication features of the virtual dialing device;
the first acquisition sub-module is used for acquiring a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from the data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server;
A first determining sub-module, configured to determine a source IP address of the first data packet as an IP address of the card pool, and determine a destination IP address of the first data packet as an IP address of the card pool management server;
and the second determining submodule is used for determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment.
Optionally, the types of the line features include:
one or more of a link mode, a type of network application used, a port number, a latency, a traffic size, a server connection mode, a time synchronization mode, and a website access behavior.
Optionally, the apparatus further comprises:
a fourth obtaining module, configured to obtain, from the target network data stream, an uplink and downlink network data stream that matches the address information;
the second identification module is used for identifying the target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code, call record information of the GOIP gateway equipment, card number information of an SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
Optionally, the second identifying module includes:
A third determining submodule, configured to determine, from the uplink and downlink network data streams, that a source IP address is an IP address of the GOIP gateway device, and that a destination IP address is a data stream of an IP address of the card pool management server, as a first network data stream;
And the second acquisition sub-module is used for acquiring the equipment identification code and the call record information of the GOIP gateway equipment from the message information of the first network data stream.
A fourth determining submodule, configured to determine, from the uplink and downlink network data flows, a data flow with a source IP address being an IP address of the card pool and a destination IP address being an IP address of the card pool management server, as a second network data flow;
And the third acquisition sub-module is used for acquiring the card number information of the SIM card inserted in the card pool and the card slot number corresponding to the SIM card from the message information of the second network data stream.
The embodiment of the present invention further provides an electronic device, as shown in fig. 7, including a processor 701, a communication interface 702, a memory 703 and a communication bus 704, where the processor 701, the communication interface 702, and the memory 703 perform communication with each other through the communication bus 704,
A memory 703 for storing a computer program;
The processor 701 is configured to implement the information acquisition method of the virtual dialing device when executing the program stored in the memory 703.
The communication bus mentioned above for the electronic device may be a peripheral component interconnect standard (PERIPHERAL COMPONENT INTERCONNECT, PCI) bus or an extended industry standard architecture (Extended Industry Standard Architecture, EISA) bus, etc. The communication bus may be classified as an address bus, a data bus, a control bus, or the like. For ease of illustration, the figures are shown with only one bold line, but not with only one bus or one type of bus.
The communication interface is used for communication between the electronic device and other devices.
The Memory may include random access Memory (Random Access Memory, RAM) or may include Non-Volatile Memory (NVM), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the aforementioned processor.
The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; but may also be a digital signal Processor (DIGITAL SIGNAL Processor, DSP), application SPECIFIC INTEGRATED Circuit (ASIC), field-Programmable gate array (Field-Programmable GATE ARRAY, FPGA) or other Programmable logic device, discrete gate or transistor logic device, discrete hardware components.
In still another embodiment of the present invention, there is also provided a computer readable storage medium having stored therein a computer program which, when executed by a processor, implements the steps of the information acquisition method of a virtual dialing device described above.
In yet another embodiment of the present invention, there is also provided a computer program product containing instructions that, when run on a computer, cause the computer to perform the information acquisition method of the virtual dialing device in the above embodiment.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, produces a flow or function in accordance with embodiments of the present invention, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another, for example, by wired (e.g., coaxial cable, optical fiber, digital Subscriber Line (DSL)), or wireless (e.g., infrared, wireless, microwave, etc.). The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk Solid STATE DISK (SSD)), etc.
It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The foregoing description is only of the preferred embodiments of the present invention and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims (10)

1. An information acquisition method of a virtual dialing device, the method comprising:
Acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
identifying a plurality of target messages carrying the fixed offset characteristic data from a target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
Based on the communication characteristics and the plurality of target messages, obtaining address information of the virtual dialing device comprises the following steps: selecting each message matched with the line characteristics in the communication characteristics of the virtual dialing device from the target messages; acquiring a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server; determining a source IP address of the first data packet as an IP address of the card pool, and determining a destination IP address of the first data packet as an IP address of the card pool management server; determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment; the address information comprises an IP address of the GOIP gateway device, an IP address of the card pool and an IP address of the card pool management server.
2. The method of claim 1, wherein the type of line feature comprises:
one or more of a link mode, a type of network application used, a port number, a latency, a traffic size, a server connection mode, a time synchronization mode, and a website access behavior.
3. The method according to claim 1, wherein the method further comprises:
acquiring uplink and downlink network data streams matched with the address information from the target network data streams;
Identifying target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code, call record information of the GOIP gateway equipment, card number information of an SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
4. A method according to claim 3, wherein said identifying the destination information of the virtual dialing device based on the upstream and downstream network data flows comprises:
Determining that a source IP address is the IP address of the GOIP gateway equipment from the uplink and downlink network data streams, and a destination IP address is the data stream of the IP address of the card pool management server as a first network data stream;
acquiring the equipment identification code and call record information of the GOIP gateway equipment from the message information of the first network data stream;
determining that a source IP address is the IP address of the card pool from the uplink and downlink network data streams, and a destination IP address is the data stream of the IP address of the card pool management server as a second network data stream;
and acquiring card number information of the SIM card inserted in the card pool and a card slot number corresponding to the SIM card from the message information of the second network data stream.
5. An information acquisition apparatus of a virtual dial device, the apparatus comprising:
the first acquisition module is used for acquiring fixed offset characteristic data to be utilized; the fixed offset characteristic data is characteristic data which is provided by a virtual dialing device provided by a specified manufacturer and used for identifying the manufacturer to which the virtual dialing device belongs; the virtual dialing device is a GOIP device with separated machine and card, and the GOIP device comprises: GOIP gateway equipment, a card pool and a card pool management server;
The first identification module is used for identifying a plurality of target messages carrying the fixed offset characteristic data from the target network data stream; wherein the target network data stream is a network communication data stream monitored in a monitoring area;
the second acquisition module is used for acquiring preset communication characteristics of the virtual dialing device; the communication characteristics comprise line characteristics of all components in the virtual dialing device during communication and content characteristics of data packets;
The third acquisition module is used for acquiring the address information of the virtual dialing device based on the communication characteristics and the target messages; wherein the address information includes an IP address of the GOIP gateway device, an IP address of the card pool, and an IP address of the card pool management server, and the third obtaining module includes: a selecting sub-module, configured to select, from the plurality of target messages, each message that matches a line feature in the communication features of the virtual dialing device; the first acquisition sub-module is used for acquiring a first data packet matched with a first content feature in the communication features and a second data packet matched with a second content feature in the communication features from the data packets to which each message belongs; the first content feature is used for representing a message type of a data packet registered by the card pool to the card pool management server; the second content feature is used for representing the message type of the data packet registered by the GOIP gateway equipment to the card pool management server; a first determining sub-module, configured to determine a source IP address of the first data packet as an IP address of the card pool, and determine a destination IP address of the first data packet as an IP address of the card pool management server; and the second determining submodule is used for determining the source IP address of the second data packet as the IP address of the GOIP gateway equipment.
6. The apparatus of claim 5, wherein the type of line feature comprises:
one or more of a link mode, a type of network application used, a port number, a latency, a traffic size, a server connection mode, a time synchronization mode, and a website access behavior.
7. The apparatus of claim 5, wherein the apparatus further comprises:
a fourth obtaining module, configured to obtain, from the target network data stream, an uplink and downlink network data stream that matches the address information;
the second identification module is used for identifying the target information of the virtual dialing device based on the uplink and downlink network data streams; the target information comprises one or more of an equipment identification code, call record information of the GOIP gateway equipment, card number information of an SIM card inserted in the card pool and a card slot number corresponding to the SIM card.
8. The apparatus of claim 7, wherein the second identification module comprises:
A third determining submodule, configured to determine, from the uplink and downlink network data streams, that a source IP address is an IP address of the GOIP gateway device, and that a destination IP address is a data stream of an IP address of the card pool management server, as a first network data stream;
A second obtaining sub-module, configured to obtain, from the message information of the first network data stream, an equipment identification code of the GOIP gateway equipment and call record information;
A fourth determining submodule, configured to determine, from the uplink and downlink network data flows, a data flow with a source IP address being an IP address of the card pool and a destination IP address being an IP address of the card pool management server, as a second network data flow;
And the third acquisition sub-module is used for acquiring the card number information of the SIM card inserted in the card pool and the card slot number corresponding to the SIM card from the message information of the second network data stream.
9. The electronic equipment is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are communicated with each other through the communication bus;
a memory for storing a computer program;
a processor for implementing the steps of the method of any one of claims 1-4 when executing a program stored on a memory.
10. A computer readable storage medium, characterized in that the computer readable storage medium has stored therein a computer program which, when executed by a processor, implements the steps of the method of any of claims 1-4.
CN202111643045.7A 2021-12-29 2021-12-29 Information acquisition method and device of virtual dialing device and electronic device Active CN114867023B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111643045.7A CN114867023B (en) 2021-12-29 2021-12-29 Information acquisition method and device of virtual dialing device and electronic device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111643045.7A CN114867023B (en) 2021-12-29 2021-12-29 Information acquisition method and device of virtual dialing device and electronic device

Publications (2)

Publication Number Publication Date
CN114867023A CN114867023A (en) 2022-08-05
CN114867023B true CN114867023B (en) 2024-06-28

Family

ID=82627197

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111643045.7A Active CN114867023B (en) 2021-12-29 2021-12-29 Information acquisition method and device of virtual dialing device and electronic device

Country Status (1)

Country Link
CN (1) CN114867023B (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110995745A (en) * 2019-12-17 2020-04-10 武汉绿色网络信息服务有限责任公司 Method and device for separating and identifying illegal machine card of Internet of things
CN111885270A (en) * 2020-07-09 2020-11-03 恒安嘉新(北京)科技股份公司 Abnormal communication detection method, device, equipment and storage medium

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107318110A (en) * 2016-04-26 2017-11-03 中兴通讯股份有限公司 Wifi cut-in methods and device based on virtual SIM card
CN113660721A (en) * 2021-08-11 2021-11-16 恒安嘉新(北京)科技股份公司 GOIP device positioning method and device, computer device and storage medium
CN113794805A (en) * 2021-09-16 2021-12-14 上海欣方智能***有限公司 Detection method and detection system for GOIP fraud telephone

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110995745A (en) * 2019-12-17 2020-04-10 武汉绿色网络信息服务有限责任公司 Method and device for separating and identifying illegal machine card of Internet of things
CN111885270A (en) * 2020-07-09 2020-11-03 恒安嘉新(北京)科技股份公司 Abnormal communication detection method, device, equipment and storage medium

Also Published As

Publication number Publication date
CN114867023A (en) 2022-08-05

Similar Documents

Publication Publication Date Title
CN101171809B (en) Method and system for transmitting a multicast stream in data exchange network
US8102879B2 (en) Application layer metrics monitoring
US8761757B2 (en) Identification of communication devices in telecommunication networks
US20150312296A1 (en) Method and device for pushing multimedia resource and display terminal
CN106534289B (en) Automatic testing method, device and system
CN104348811A (en) Method and device for detecting attack of DDoS (distributed denial of service)
CN100466560C (en) Method, system, device for detecting service quality, and charging and fault detecting system
JP2013520885A (en) Method and apparatus for processing ECM packets
CN108901035B (en) Identification method and device for terminal of Internet of things
CN114339719A (en) DPI data acquisition method and related device
CN110324291B (en) Communication method and related product
US9077662B2 (en) Service linkage control system and method
CN104284142A (en) Communication method, device and system
CN111404975A (en) Message transmission method, device, equipment and computer storage medium
CN114867023B (en) Information acquisition method and device of virtual dialing device and electronic device
CN103414836B (en) Access processing method and the device of IP-based videoconference
CN114520804A (en) IMS registration method, terminal device and storage medium
CN110830419B (en) Access control method and device for internet protocol camera
CN201928397U (en) Audio-video transmission system based on real time streaming protocol (RTSP) and compatible with various video coding terminals access
CN109429262A (en) A kind of detection method of hot spot, the network equipment and computer readable storage medium
CN115544324A (en) User data analysis method and device and storage medium
Soós et al. User group behavioural pattern in a cellular mobile network for 5G use-cases
US20220103680A1 (en) System and method for classifying and handling voice over ip traffic
Soos et al. Analyzing group behavior patterns in a cellular mobile network for 5G use‐cases
CN112866101A (en) Equipment networking method and device, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant