CN105451234B - A kind of suspicious number analysis method and device based on Signalling exchange data - Google Patents
A kind of suspicious number analysis method and device based on Signalling exchange data Download PDFInfo
- Publication number
- CN105451234B CN105451234B CN201510757223.7A CN201510757223A CN105451234B CN 105451234 B CN105451234 B CN 105451234B CN 201510757223 A CN201510757223 A CN 201510757223A CN 105451234 B CN105451234 B CN 105451234B
- Authority
- CN
- China
- Prior art keywords
- data
- suspicious
- analysis
- call
- suspicious number
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/04—Arrangements for maintaining operational condition
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The present invention relates to mobile communication network technology fields, disclose a kind of suspicious number analysis method and device based on Signalling exchange data, it include: the Signalling exchange data in taken at regular intervals presumptive area, signaling call data include outgoing call, the duration of call and serving cell；It filters out less than the predetermined duration of call and outgoing call quantity is greater than the calling number of default exhalation amount threshold, and be added in supervisory sequence；The calling number that serving cell quantity is less than preset service cell threshold is filtered out, and is added in suspicious number database labeled as suspicious number；Suspicious number analysis data are generated according to suspicious number database.The present invention can not depend on user's mark or report, and the suspicious number data of active collection can obtain comprehensive suspicious number statistical result in real time by periodically collecting predeterminable area number information.
Description
Technical field
The present invention relates to mobile communication network technology field more particularly to a kind of suspicious numbers based on Signalling exchange data
Analysis method and device.
Background technique
It is shown according to the statistical data of Ministry of Industry and Information, by the end of mobile phone user's quantity nearly 1,300,000,000 people of current China.It is almost every
One mobile phone user was by various making nuisance calls for the purpose of advertisement marketing, swindle, distribution etc., or even many users are therefore
And have lost property.In order to protect personal property, guards against and have dust thrown into the eyes, more business men is proposed the application journey for mobile phone safe
Sequence, these application programs can be marked or report to the unknown number answered.
However whether the user as mobile phone, unknown incoming call are suspicious numbers, the mark dependent on used application program
Note or report summarize data.The suspicious number data that one application program is collected into can not share to other application programs,
The suspicious number data of other application program or website can not equally be obtained.In addition, the suspicious number of application program
Data source again relies on the user of application program itself to carry out label or the report of suspicious number.These factors result in
It is this that the data of suspicious number can not collect in real time comprehensively by application program collection discrimination mode, to can not obtain
To comprehensive suspicious number data in real time.
Summary of the invention
The technical problem to be solved by the present invention is the problem of how collecting suspicious number data in real time comprehensively.
To realize above-mentioned goal of the invention, the present invention provides a kind of suspicious number analysis sides based on Signalling exchange data
Method and device.
According to the present invention in a first aspect, provide a kind of suspicious number analysis method based on Signalling exchange data, wrap
It includes:
Signalling exchange data in taken at regular intervals presumptive area, the signaling call data include outgoing call and call
Duration；
It filters out less than the predetermined duration of call and outgoing call quantity is greater than the calling number of default exhalation amount threshold, and
It is added in supervisory sequence；
The calling number that serving cell quantity is less than preset service cell threshold is filtered out, and is added labeled as suspicious number
In suspicious number database；
Suspicious number analysis data are generated according to the suspicious number database.
Wherein more preferably, described to filter out less than the predetermined duration of call and outgoing call quantity is greater than default exhalation quantity threshold
The calling number of value,
It is to be screened by distributed data processing method or data digging method.
Wherein more preferably, after the suspicious number analysis data step according to the suspicious number database generation, also
Include:
Acquire the ownership place configurations data and network element configurations data in mobile network data.
Wherein more preferably, after the suspicious number analysis data step according to the suspicious number database generation,
Further include:
The calling number is converted into mobile directory number, MDN MDN by international mobile number identification code IMSI.
Wherein more preferably, the suspicious number analysis data include: message registration data and statistical data analysis.
Wherein more preferably,
The message registration data include: outgoing call, the duration of call, called number ownership place.
The mean time that the statistical data analysis includes: the par of outgoing call of calling number, once converses
Long, travel frequency and the serving cell.
Wherein more preferably, the step of further including, the statistical data analysis be applied to suspicious number inquiry, it is specific to wrap
It includes:
It is inquired in the statistical data analysis according to the mobile directory number, MDN MDN of number；
If including the data of the number in the statistical data analysis, being averaged for an outgoing call of number is shown
Quantity, the average duration once conversed, travel frequency and the serving cell；And it is opened up on map according to the serving cell
Show the motion track of the number；
If not including the data of the number in the statistical data analysis, showing does not have number in statistical data analysis
Data record.
It wherein more preferably, further include being disturbed using the message registration data and statistical data analysis as application program judgement
The step of disturbing the reference data of phone.
Second aspect according to the present invention provides a kind of suspicious number analysis using above-mentioned suspicious number analysis method
Device, comprising:
Acquiring unit, for obtaining the Signalling exchange data, ownership place configurations data and network element configurations
Data；
Screening unit is less than the predetermined duration of call and outgoing call quantity and is greater than default exhalation amount threshold for screening
Calling number；
Processing unit, for generating the suspicious number analysis data；
Storage unit, for storing the suspicious number database and suspicious number analysis data.
The suspicious number analysis method and device based on Signalling exchange data that the present invention provides a kind of.It is fixed that this method passes through
Phase acquires the Signalling exchange data of predeterminable area number, and is determined according to Signalling exchange data suspicious number, raw simultaneously
At suspicious number statistical data analysis and be applied to suspicious number inquiry or application program harassing call and determine data ginseng
It passes the examination.Compared with the prior art, the present invention can make the data source collected with the suspicious number data in active collection predeterminable area
It is consistent and comprehensive；Data source objective reality does not depend on user's mark or report；And by periodically collecting, can obtain in real time
Suspicious number statistical result.
Detailed description of the invention
By reading the following detailed description of the preferred embodiment, various other advantages and benefits are common for this field
Technical staff will become clear.The drawings are only for the purpose of illustrating a preferred embodiment, and is not considered as to the present invention
Limitation.And throughout the drawings, the same reference numbers will be used to refer to the same parts.In the accompanying drawings:
Fig. 1 is the suspicious number analysis method and device stream based on Signalling exchange data that first embodiment of the invention provides
Cheng Tu.
Specific embodiment
With reference to the accompanying drawings and examples, specific embodiments of the present invention will be described in further detail.Implement below
Example is not intended to limit the scope of the invention for illustrating the present invention.
The present invention provides a kind of suspicious number analysis method based on mobile network's Signalling exchange data, this method is specific
It include: the Signalling exchange data in taken at regular intervals presumptive area, signaling call data include outgoing call, the duration of call and clothes
Business cell；It filters out less than the predetermined duration of call and outgoing call quantity is greater than the calling number of default exhalation amount threshold, and
It is added in supervisory sequence；The calling number that serving cell quantity is less than preset service cell threshold is filtered out, and labeled as suspicious
Number is added in suspicious number database；Suspicious number analysis data are generated according to suspicious number database.Below to the present invention
Detailed description is unfolded in the suspicious number analysis method and device based on mobile network's Signalling exchange data provided.
Embodiment one
As shown in Figure 1, present embodiments providing a kind of suspicious number analysis side based on mobile network's Signalling exchange data
Method, specific steps are described as follows:
Signalling exchange data in S101, acquisition predeterminable area, specifically include:
Signalling exchange data in taken at regular intervals mobile network in predeterminable area.Wherein, Signalling exchange data include caller
Number, outgoing call and the duration of call.Wherein more preferably, Signalling exchange data further include the letter such as type of service, serving cell
Breath.It is half an hour to one hour that Signalling exchange data, which generally generate file and are delayed to acquisition, parsing in real time and analysis maximum journey
The real-time of the guarantee data of degree.
Obtain the ownership place configurations data and network element configurations data in mobile network data.Wherein, mobile
Ownership place configurations data contain the information of number attribution in network data, carry out ownership place discrimination for checking numbers；
Network element configurations data contain the corresponding relationship of each base station Yu base station covering area, and the position for obtaining number is believed
Breath.
S102, checking numbers carries out conditional filtering, and is added in supervisory sequence.
According to the predeterminable area number Signalling exchange data obtained in S101 step, checks numbers and screened.When will be default
Between in section, filter out less than the predetermined duration of call and outgoing call quantity be greater than the calling number of default exhalation amount threshold, and
It is added in supervisory sequence.Wherein more preferably, the screening of number is using HADOOP distributed data processing method or based on R language
What the data digging method of speech was realized, so that it is guaranteed that the efficiency of data analysis.
It should be noted that preset period, exhalation amount threshold and the predetermined duration of call can be according to reality
Situation is adjusted flexibly.For example, in preset 1 minute, the quantity of number calling number is greater than 50, and caller
Number of the duration of call less than 5 seconds screens.Being adjusted flexibly for threshold value increases practicability of the invention, is applicable to various
The case where number screens.
S103, the quantity according to serving cell, judge whether it is suspicious number.
Since suspicious call is typically mounted on a certain specific location to be harassed other numbers, mobility
It is poor, therefore the serving cell negligible amounts of suspicious call positioning.Therefore according to this actual conditions, by being obtained in S101 step
The serving cell of the number in supervisory sequence taken judges whether the number is suspicious number, specifically: if serving cell
Quantity is less than preset serving cell threshold, then determines that the number is suspicious number, the number of number is suspicious number；If not small
In preset serving cell threshold, then determining the number not is suspicious number.Similarly, preset serving cell threshold here
And can be adjusted flexibly according to the actual situation.The movement of number is judged according to the quantity of number serving cell in supervisory sequence
Frequency can effectively exclude the higher situation of the mobility such as express delivery, food delivery, increase to judge whether it is suspicious number
The reliability of judgement.
S104, the analysis data for generating suspicious number.
The analysis data of suspicious number specifically include: statistical data analysis and message registration data.
Wherein, statistical data analysis includes: that the par of a calling number of calling number, a caller are conversed
Average duration, calling number travel frequency and serving cell；Message registration data include: number that calling number breathes out every time
Code, the duration of call and called number ownership place etc..Wherein, the information of home location of called number is obtained according in S101 step
Ownership place configurations data and network element configurations data obtain.
It should be noted that the number format obtained from Signalling exchange information is international mobile subscriber identity IMSI
(International Mobile Subscriber Identification Number).For the ease of application, by number by
International mobile subscriber identity IMSI is converted to mobile directory number, MDN MDN (Mobile Directory Number), to expand
Application range of the invention.
S105, the analysis data using suspicious number.
It can be by the analysis data application of the suspicious number generated in S104 step in terms of following two:
In a first aspect, statistical data analysis is applied in the inquiry of suspicious number, specifically include:
Input the mobile directory number, MDN MDN (namely we live on ordinary days in common phone number) of number；According to number
Mobile directory number, MDN MDN the related data of the number is searched whether in statistical data analysis；If in statistical data analysis
Data comprising the number then show the mean time that the number, the par of calling number of number, a caller are conversed
Long and travel frequency；And according to the serving cell of number on GIS (Geographic Information System) map
Show the motion track of number；If not including the data of number in statistical data analysis, showing in statistical data analysis does not have
The data record of number.
Statistical data analysis and message registration data application are carried out Conjoint Analysis in application program by second aspect.
Using statistical data analysis and message registration data as reference data, in conjunction with user's mark in application program or
The real information of report information qualitatively analyzes harassing call.Specific analysis method can be according to different application journeys
Sequence flexible setting.
In addition, the step of being based on big data analysis and statistics when method provided in this embodiment and application program connected applications
It is all to be completed in server end, the memory for occupying application program is few, and the requirement to application client is low, applied widely
It is general.
Embodiment two
Present embodiments provide a kind of suspicious number analysis device based on Signalling exchange data.The device Application Example
A kind of method analyzes suspicious number.The device includes:
Acquiring unit, for obtaining Signalling exchange data, ownership place configurations data and network element configurations data；
Screening unit, for screening the caller number for being less than the predetermined duration of call and outgoing call quantity and being greater than default exhalation amount threshold
Code；Processing unit, for generating suspicious number analysis data according to the label result of suspicious number；Storage unit, for storing
By after label suspicious number and suspicious number analysis data.
In conclusion the present invention provides a kind of suspicious number analysis method and device based on Signalling exchange data.It should
Method passes through the Signalling exchange data of taken at regular intervals predeterminable area number, and is sentenced according to Signalling exchange data to suspicious number
It is fixed, while generating the statistical data analysis of suspicious number and being applied to suspicious number inquiry or application program harassing call is sentenced
Determine in data reference.Compared with the prior art, the present invention can keep the data source collected consistent with the suspicious number data of active collection
And comprehensively；Data source objective reality does not depend on user's mark or report；And by periodically collecting, it can obtain and in real time may be used
Doubt number statistical result.
The above embodiments are only used to illustrate the present invention, and not limitation of the present invention, in relation to the common of technical field
Technical staff can also make a variety of changes and modification without departing from the spirit and scope of the present invention, therefore all
Equivalent technical solution also belongs to scope of the invention, and scope of patent protection of the invention should be defined by the claims.
Claims (8)
1. a kind of suspicious number analysis method based on Signalling exchange data characterized by comprising
Signalling exchange data in taken at regular intervals presumptive area, the signaling call data include outgoing call, the duration of call with
And serving cell；
It filters out less than the predetermined duration of call and outgoing call quantity is greater than the calling number of default exhalation amount threshold, and be added
In supervisory sequence；
According to the serving cell of the number in the supervisory sequence, serving cell quantity is filtered out less than preset service cell threshold
Calling number, and be added in suspicious number database labeled as suspicious number；
Suspicious number analysis data are generated according to the suspicious number database.
2. suspicious number analysis method as described in claim 1, which is characterized in that described to filter out less than the predetermined duration of call
And outgoing call quantity is greater than the calling number of default exhalation amount threshold,
It is to be screened by distributed data processing method or data digging method.
3. suspicious number analysis method as described in claim 1, which is characterized in that described according to the suspicious number data
Library generates after suspicious number analysis data step, further includes:
The calling number is converted into mobile directory number, MDN MDN by international mobile number identification code IMSI.
4. suspicious number analysis method as claimed in claim 3, which is characterized in that the suspicious number analysis data include:
Message registration data and statistical data analysis.
5. suspicious number analysis method as claimed in claim 4, which is characterized in that
The message registration data include: outgoing call, the duration of call, called number ownership place；
The statistical data analysis includes: the par of outgoing call of calling number, once converses average duration, shifting
Dynamic frequency and serving cell.
6. suspicious number analysis method as claimed in claim 5, which is characterized in that further include, by the statistical data analysis
It the step of applied to suspicious number inquiry, specifically includes:
It is inquired in the statistical data analysis according to the mobile directory number, MDN MDN of number；
If including the data of the number in the statistical data analysis, the average of an outgoing call of number is shown
Amount, average duration, travel frequency and the serving cell once conversed；And described in being shown on map according to the serving cell
The motion track of number；
If not including the data of the number in the statistical data analysis, show in statistical data analysis do not have number number
According to record.
7. suspicious number analysis method as claimed in claim 5, which is characterized in that further include by the message registration data with
And statistical data analysis determines the step of reference data of harassing call as application program.
8. a kind of suspicious number analysis device using suspicious number analysis method described in claim 1-7 any one, special
Sign is, comprising:
Acquiring unit, for obtaining the Signalling exchange data, ownership place configurations data and network element configurations data；
Screening unit, for screening the caller for being less than the predetermined duration of call and outgoing call quantity and being greater than default exhalation amount threshold
Number；
Processing unit, for generating the suspicious number analysis data；
Storage unit, for storing the suspicious number database and suspicious number analysis data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510757223.7A CN105451234B (en) | 2015-11-09 | 2015-11-09 | A kind of suspicious number analysis method and device based on Signalling exchange data |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510757223.7A CN105451234B (en) | 2015-11-09 | 2015-11-09 | A kind of suspicious number analysis method and device based on Signalling exchange data |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105451234A CN105451234A (en) | 2016-03-30 |
| CN105451234B true CN105451234B (en) | 2019-03-19 |
Family
ID=55560928
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510757223.7A Active CN105451234B (en) | 2015-11-09 | 2015-11-09 | A kind of suspicious number analysis method and device based on Signalling exchange data |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105451234B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107306306B (en) * | 2016-04-25 | 2020-04-07 | 腾讯科技（深圳）有限公司 | Communication number processing method and device |
| CN108540634A (en) * | 2017-03-06 | 2018-09-14 | 中国移动通信集团北京有限公司 | A kind of malicious call detection method and device |
| CN107566664B (en) * | 2017-08-23 | 2020-06-19 | 国家计算机网络与信息安全管理中心 | Method for obtaining real called number in mobile network calling |
| CN107729446B (en) * | 2017-09-30 | 2020-10-16 | 百度在线网络技术（北京）有限公司 | Map telephone discrimination method, apparatus, server and medium |
| CN108833723B (en) * | 2018-06-28 | 2021-03-19 | 中国联合网络通信集团有限公司 | Method and device for identifying card maintenance numbers in same card maintenance device |
| CN109474923B (en) * | 2018-11-23 | 2022-02-01 | 中国联合网络通信集团有限公司 | Object recognition method and device, and storage medium |
| CN110830557B (en) * | 2019-10-22 | 2022-08-23 | 北京市天元网络技术股份有限公司 | Emergency and early warning announcement method and device based on signaling big data analysis tool |
| CN112084239B (en) * | 2020-09-15 | 2023-11-24 | 电信科学技术第五研究所有限公司 | Signaling network security mining analysis method based on big data feature model identification |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2003094562A1 (en) * | 2002-05-03 | 2003-11-13 | Cerebrus Solutions Limited | Local usage monitoring and fraud detection for mobile communication networks |
| EP1672946A1 (en) * | 2004-12-17 | 2006-06-21 | Samsung Electronics Co., Ltd. | User identification method in mobile communication system and mobile station, and mobile communication system therefor |
| CN101449531A (en) * | 2006-05-19 | 2009-06-03 | Nec欧洲有限公司 | Method for identifying undesired telephone calls |
| CN102984738A (en) * | 2011-09-05 | 2013-03-20 | 中国移动通信集团北京有限公司 | A method, a system and an apparatus for reporting signaling |
-
2015
- 2015-11-09 CN CN201510757223.7A patent/CN105451234B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2003094562A1 (en) * | 2002-05-03 | 2003-11-13 | Cerebrus Solutions Limited | Local usage monitoring and fraud detection for mobile communication networks |
| EP1672946A1 (en) * | 2004-12-17 | 2006-06-21 | Samsung Electronics Co., Ltd. | User identification method in mobile communication system and mobile station, and mobile communication system therefor |
| CN101449531A (en) * | 2006-05-19 | 2009-06-03 | Nec欧洲有限公司 | Method for identifying undesired telephone calls |
| CN102984738A (en) * | 2011-09-05 | 2013-03-20 | 中国移动通信集团北京有限公司 | A method, a system and an apparatus for reporting signaling |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105451234A (en) | 2016-03-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105451234B (en) | A kind of suspicious number analysis method and device based on Signalling exchange data | |
| US9165288B2 (en) | Inferring relationships based on geo-temporal data other than telecommunications | |
| US9305110B2 (en) | Method and arrangement for supporting analysis of social networks in a communication network | |
| US20070233861A1 (en) | Method and apparatus for implementing SMS SPAM filtering | |
| EP3132592B1 (en) | Method and system for identifying significant locations through data obtainable from a telecommunication network | |
| US8843157B2 (en) | Dynamic travel behavior estimation in mobile network | |
| CN110337059B (en) | Analysis algorithm, server and network system for family relationship of user | |
| EP2603893A1 (en) | Aggregating demographic distribution information | |
| CN103327443B (en) | Terminal and contact searching method | |
| US9179259B2 (en) | Recognizing unknown actors based on wireless behavior | |
| CN101217820A (en) | An identification system and identification method on disturbance telephone numbers | |
| US20160323767A1 (en) | Enhanced data collection, processing, and analysis facilities | |
| GB2497931A (en) | Inferring repeated journey patterns of a mobile telephone from network data | |
| CN102075850B (en) | Method and device for determining occupational information of mobile subscriber | |
| WO2009012705A1 (en) | Method for generating user attribute information and apparatus thereof | |
| CN104580717A (en) | Incoming call management method and device based on application scenes | |
| CN104902438A (en) | Statistical method and system for analyzing passenger flow characteristic information on the basis of mobile communication terminal | |
| CN103235793A (en) | On-line data processing method, equipment and system | |
| CN103369486A (en) | System and method for preventing fraud SMS (Short message Service) message | |
| CN110536302A (en) | Telecommunication fraud based reminding method and device | |
| CN109859426A (en) | A kind of community security protection management system | |
| Fiadino et al. | Call Detail Records for Human Mobility Studies: Taking Stock of the Situation in the" Always Connected Era" | |
| US9326264B2 (en) | Method of determining location | |
| CN103167502B (en) | Based on the method for the illegal calling of OTA technology regulation | |
| CN106162688B (en) | A kind of pseudo-base station localization method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |