An active safety-based IMS network behavior diagnosis and early warning method and device

Abstract

The invention discloses an active safety-based IMS network behavior diagnosis and early warning method and device, which realizes remote monitoring of IMS access network equipment, advances perception of equipment online, registration and authentication status, and automatically warns of abnormal status of IMS access network equipment; Perceive the security situation of IMS network equipment in an all-round way, diagnose the health status of network equipment in real time, and visualize network topology data and operation logs; provide active security policy mechanisms, control network traffic, and filter abnormal traffic in advance.

Description

technical field [0001] The disclosure belongs to the technical field of communication network security, and relates to an active security-based IMS network behavior diagnosis and early warning method and device. Background technique [0002] The statements in this section merely provide background information related to the present disclosure and do not necessarily constitute prior art. [0003] The existing telephone switching network of State Grid Corporation has gradually evolved from program-controlled switching to IMS technology system. The IMS (IP Multimedia Subsystem, IP Multimedia Subsystem) administrative telephone switching network (hereinafter referred to as "IMS network") is carried on the data communication network and supports IP phones. , AG (Access Gateway, access gateway) / IAD (Integrated Access Device, integrated access device) and other terminals access, and the SIP (Session Initiation Protocol, session initiation protocol) message sent by the end user pass...

AI Technical Summary

Problems solved by technology

[0005] First, remote operation and maintenance of IMS access network equipment is difficult

Taking State Grid Shandong Branch as an example, 100,000 lines of access network equipment such as SIP phones and AG / IAD are deployed in the provincial company headquarters, 17 city companies, 98 county companies, and directly affiliated units. The geographical locations are scattered. Due to the IMS Lack of automation methods such as remote configuration update and online monitoring of access network equipment make it impossible to perceive the operating status of equipment in advance

At present, it is time-consuming and labor-intensive to avoid equipment operation risks and manually update equipment configuration files through manual inspections

[0006] Second, it is difficult to capture abnormal status of IMS network equipment

Taking State Grid Shandong Company as an example, there are more than 3,000 CE switches in the IMS network, and there is no effective diagnosis mechanism for the healthy operation status of network equipment, so it is impossible to capture and locate abnormal status of network equipment in advance

[0007] Third, network traffic control is difficult

The IMS network of the company is carried on the data communication network. The IMS core CE equipment of each provincial company not only receives the traffic information of the access side equipment in the province, but also unconditionally receives the S-CSCF (Serving-Call Session Control Function, Serving-Call Session Control Function) from other provinces. Function) network elements, ENS (DNS / Enum Server) network elements, I-CSCF (Interrogating-Call Session Control Function, query-call session control function) network elements signaling and media messages, lack of effective network traffic classification, traffic Restriction and means of authenticity

Images