IMS (IP Multimedia Subsystem) network behavior diagnosis and early warning method and device based on active security

Abstract

The invention discloses an IMS (IP Multimedia Subsystem) network behavior diagnosis and early warning method and device based on active security. Through adoption of the IMS network behavior diagnosisand early warning method and device, remote monitoring of IMS access network equipment, advanced sensing of online, registration and authentication states of the equipment, and automatic early warning for the abnormal state of the IMS access network equipment are realized; the security situation of the IMS network equipment is sensed omni-directionally, the health state of the network equipment is diagnosed in real time, and network topological data and running logs are presented visually; and an active security strategy mechanism is provided, network traffic is managed and controlled, and abnormal traffic is filtered in advance.

Description

technical field [0001] The disclosure belongs to the technical field of communication network security, and relates to an active security-based IMS network behavior diagnosis and early warning method and device. Background technique [0002] The statements in this section merely provide background information related to the present disclosure and do not necessarily constitute prior art. [0003] The existing telephone switching network of State Grid Corporation has gradually evolved from program-controlled switching to IMS technology system. The IMS (IP Multimedia Subsystem, IP Multimedia Subsystem) administrative telephone switching network (hereinafter referred to as "IMS network") is carried on the data communication network and supports IP phones. , AG (Access Gateway, access gateway) / IAD (Integrated Access Device, integrated access device) and other terminals access, and the SIP (Session Initiation Protocol, Session Initiation Protocol) message sent by the end user pass...

AI Technical Summary

Problems solved by technology

[0005] First, remote operation and maintenance of IMS access network equipment is difficult

Taking State Grid Shandong Branch as an example, 100,000 lines of access network equipment such as SIP phones and AG / IAD are deployed in the provincial company headquarters, 17 city companies, 98 county companies, and directly affiliated units. The geographical locations are scattered. Due to the IMS Lack of automation methods such as remote configuration update and online monitoring of access network equipment make it impossible to perceive the operating status of equipment in advance

At present, it is time-consuming and labor-intensive to avoid equipment operation risks and manually update equipment configuration files through manual inspections

[0006] Second, it is difficult to capture abnormal status of IMS network equipment

Taking State Grid Shandong Company as an example, there are more than 3,000 CE switches in the IMS network, and there is no effective diagnosis mechanism for the healthy operation status of network equipment, so it is impossible to capture and locate abnormal status of network equipment in advance

[0007] Third, network traffic control is difficult

The IMS network of the company is carried on the data communication network. The IMS core CE equipment of each provincial company not only receives the traffic information of the access side equipment in the province, but also unconditionally receives the S-CSCF (Serving-Call Session Control Function, Serving-Call Session Control Function) from other provinces. Function) network elements, ENS (DNS / Enum Server) network elements, I-CSCF (Interrogating-Call Session Control Function, query-call session control function) network elements signaling and media messages, lack of effective network traffic classification, traffic Restriction and means of authenticity

Images