A method, device and storage medium for managing online policy

Abstract

A method, device and storage medium for managing an online policy relate to the field of communication technology and are used to solve the technical problem that the security of user privacy cannot be guaranteed. The method is applied to an online policy management server. The online policy management server belongs to an online policy management system including an online policy management server and a terminal. The terminal is configured with a SIM card with multiple numbers. The method includes: after obtaining multiple numbers, a first switching strategy for the multiple numbers can be determined, and the first switching strategy is sent to the terminal. The first switching strategy is used to instruct the terminal to switch different numbers for service access according to a first rule. The present application can improve the security of user privacy.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and in particular, relates to an Internet access policy management method, device and storage medium. Background Art

[0002] Currently, users can access the Internet anytime and anywhere through terminal products such as smartphones and tablets. When accessing the Internet, users generally use the subscriber identity module (SIM) card number configured on these terminal products as an identity identifier to access various service servers to meet service needs. During the access process, the location information, access time, and access content corresponding to the SIM card number will be recorded by various service servers.

[0003] When various business servers are attacked maliciously or relevant staff fail to perform their duties, criminals can easily obtain these access information and profile users, resulting in user privacy leakage. In related technologies, proxy servers or virtual private networks (VPNs) are generally used to access the Internet, which prevents various business servers from recording these access information and reduces the risk of user privacy leakage.

[0004] However, proxy servers or VPN servers will also record this access information and are also at risk of being attacked maliciously or leaked due to negligence of relevant staff, and cannot effectively guarantee the security of user privacy. Summary of the invention

[0005] The present application provides an Internet access policy management method, device and storage medium, which are used to solve the problem that the security of user privacy cannot be guaranteed.

[0006] In order to achieve the above objectives, this application adopts the following technical solutions:

[0007] In a first aspect, an Internet access policy management method is provided, which is applied to an Internet access policy management server. The Internet access policy management server belongs to an Internet access policy management system including an Internet access policy management server and a terminal. The terminal is configured with a SIM card with multiple numbers. The Internet access policy management method includes: after obtaining multiple numbers, a first switching policy for the multiple numbers can be determined, and the first switching policy is sent to the terminal. The first switching policy is used to instruct the terminal to switch different numbers according to a first rule for service access.

[0008] Optionally, the first rule includes: periodically switching different numbers for service access, or switching different numbers for service access according to the area to which the terminal belongs.

[0009] Optionally, the Internet access policy management method further includes: obtaining log information of the terminal using the first switching policy to access services within the first period of time, and determining the second switching policies for the multiple numbers according to the log information.

[0010] Optionally, the log information includes the duration of the first time period and the access information of multiple numbers. The method for determining the second switching strategy for multiple numbers based on the log information specifically includes: when the duration of the first time period is greater than the first preset threshold, determining the second switching strategy for instructing the terminal to switch different numbers for service access according to the second rule. The second rule is different from the first rule. When the duration of the first time period is less than or equal to the first preset threshold, and there is an access record of a blacklisted website in the access information of the first number, determining the second switching strategy for instructing the terminal to switch multiple second numbers for service access according to the first rule. The first number is any one of the multiple numbers. The multiple second numbers are other numbers among the multiple numbers except the first number.

[0011] Optionally, after determining that the second switching strategy is used to instruct the terminal to switch multiple second numbers for service access according to the first rule, the Internet access strategy management method further includes: determining the duration of a second time period for the terminal to access the service using the second switching strategy. When the duration of the second time period is greater than a second preset threshold, determining the second switching strategy is that the terminal switches multiple numbers for service access according to the first rule.

[0012] Optionally, the Internet access policy management method further includes: receiving a number request message sent by the terminal for requesting to use a third number for service access. The third number is any one of the multiple numbers. When the third number meets the first rule, a number confirmation message is sent to the terminal. The number confirmation message is used to indicate that the terminal is allowed to use the third number for service access.

[0013] In a second aspect, an Internet access policy management device is provided, comprising: an acquisition unit, a determination unit, and a sending unit. The acquisition unit is used to acquire multiple numbers. The determination unit is used to determine a first switching policy for the multiple numbers acquired by the acquisition unit. The first switching policy is used to instruct a terminal to switch to different numbers for service access according to a first rule. The sending unit is used to send the first switching policy determined by the determination unit to the terminal.

[0014] Optionally, the first rule includes: periodically switching different numbers for service access, or switching different numbers for service access according to the area to which the terminal belongs.

[0015] Optionally, the acquisition unit is further configured to acquire log information of the terminal using the first switching strategy to access the service in the first time period. The determination unit is further configured to determine the second switching strategy for the plurality of numbers according to the log information.

[0016] Optionally, the log information includes the duration of the first time period and the access information of multiple numbers. The determination unit is specifically used to: when the duration of the first time period is greater than the first preset threshold, determine the second switching strategy for instructing the terminal to switch to different numbers for service access according to the second rule. The second rule is different from the first rule. When the duration of the first time period is less than or equal to the first preset threshold, and there is an access record of the blacklisted website in the access information of the first number, determine the second switching strategy for instructing the terminal to switch to multiple second numbers for service access according to the first rule. The first number is any one of the multiple numbers. The multiple second numbers are other numbers among the multiple numbers except the first number.

[0017] Optionally, the determination unit is further configured to determine the duration of a second time period for the terminal to access the service using a second switching strategy. The determination unit is further configured to determine, when the duration of the second time period is greater than a second preset threshold, that the second switching strategy is for the terminal to switch multiple numbers for service access according to the first rule.

[0018] Optionally, the Internet access policy management device further includes: a receiving unit. The receiving unit is used to receive a number request message sent by the terminal for requesting to use a third number for service access. The third number is any number among multiple numbers. The sending unit is also used to send a number confirmation message to the terminal when the third number meets the first rule. The number confirmation message is used to indicate that the terminal is allowed to use the third number for service access.

[0019] In a third aspect, an Internet access policy management device is provided, comprising a memory and a processor; the memory is used to store computer execution instructions, and the processor and the memory are connected via a bus; when the Internet access policy management device is running, the processor executes the computer execution instructions stored in the memory, so that the Internet access policy management device executes the Internet access policy management method as in the first aspect.

[0020] The Internet access policy management device may be a network device, or a part of a network device, such as a chip system in the network device. The chip system is used to support the network device to implement the functions involved in the first aspect and any possible implementation thereof, such as receiving, determining, and diverting the data and / or information involved in the above-mentioned data processing method. The chip system includes a chip, and may also include other discrete devices or circuit structures.

[0021] In a fourth aspect, a computer-readable storage medium is provided, characterized in that the computer-readable storage medium includes computer execution instructions, and when the computer execution instructions are run on a computer, the computer executes the Internet access policy management method of the first aspect.

[0022] It should be noted that the above computer instructions may be stored in whole or in part on the first computer-readable storage medium. The first computer-readable storage medium may be packaged together with the processor of the Internet access policy management device, or may be packaged separately from the processor of the Internet access policy management device, which is not limited in this application.

[0023] In this application, the name of the above-mentioned Internet access policy management device does not limit the device or functional module itself. In actual implementation, these devices or functional modules may appear with other names. As long as the functions of each device or functional module are similar to those of this application, they fall within the scope of the claims of this application and their equivalent technologies.

[0024] These and other aspects of the present application will become more apparent from the following description.

[0025] The technical solution provided by this application brings at least the following beneficial effects:

[0026] Based on any of the above aspects, in the present application, since the terminal is configured with a SIM card having multiple numbers, and the Internet access policy management server can determine the first switching policy of the multiple numbers after obtaining the multiple numbers, and send the first switching policy to the terminal. Therefore, after receiving the first switching policy, the terminal can switch different numbers according to the first rule to access the service.

[0027] In this way, the access information of each of the multiple numbers used by the terminal to access the service is incoherent. Even if the criminals obtain the access information of one or more numbers, they cannot fully profile the user using the terminal. Compared with the related art, the use of proxy servers or VPNs to access the Internet cannot prevent criminals from profiling users based on access information. This application can prevent criminals from profiling users based on access information. Therefore, this application can improve the security of user privacy. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 A schematic diagram of the structure of an Internet access policy management system provided in an embodiment of the present application;

[0029] Figure 2 A schematic diagram of the structure of a terminal provided in an embodiment of the present application;

[0030] Figure 3 A schematic diagram of the structure of another Internet access policy management system provided in an embodiment of the present application;

[0031] Figure 4 A schematic diagram of the hardware structure of the Internet access policy management server provided in the embodiment of the present application;

[0032] Figure 5A schematic diagram of a method for managing an online policy provided in an embodiment of the present application Figure 1 ;

[0033] Figure 6 A schematic diagram of a process for a terminal to access a service provided in an embodiment of the present application Figure 1 ;

[0034] Figure 7 A schematic diagram of a method for managing an online policy provided in an embodiment of the present application Figure 2 ;

[0035] Figure 8 A schematic diagram of a process for a terminal to access a service provided in an embodiment of the present application Figure 2 ;

[0036] Fig. 9 A schematic diagram of a method for managing an online policy provided in an embodiment of the present application Figure 3 ;

[0037] Fig.10 A schematic diagram of a method for managing an online policy provided in an embodiment of the present application Figure 4 ;

[0038] Fig.11 A schematic diagram of a method for managing an online policy provided in an embodiment of the present application Figure 5 ;

[0039] Fig.12 A schematic diagram of the structure of an Internet access policy management device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] It should be noted that, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0042] In order to facilitate a clear description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and order of execution.

[0043] In addition, the terms "including" and "having" in the embodiments, claims and drawings of the present application are not exclusive. For example, a process, method, system, product or device including a series of steps or modules is not limited to the listed steps or modules, and may also include steps or modules that are not listed.

[0044] When various business servers are attacked maliciously or relevant staff fail to perform their duties, criminals can easily obtain these access information and profile users, resulting in user privacy leakage. In related technologies, proxy servers or VPNs are generally used to access the Internet, which prevents various business servers from recording these access information and reduces the risk of user privacy leakage.

[0045] However, proxy servers or VPN servers will also record this access information and are also at risk of being attacked maliciously or leaked due to negligence of relevant staff, and cannot effectively guarantee the security of user privacy.

[0046] In view of the above problems, the embodiment of the present application provides an Internet access policy management method. Since the terminal is configured with a SIM card with multiple numbers, and the Internet access policy management server can determine the first switching policy of the multiple numbers after obtaining the multiple numbers, and send the first switching policy to the terminal. Therefore, after receiving the first switching policy, the terminal can switch different numbers according to the first rule to access the service.

[0047] In this way, the access information of each of the multiple numbers used by the terminal to access the service is incoherent. Even if the criminals obtain the access information of one or more numbers, they cannot fully profile the user using the terminal. Compared with the related art, the use of proxy servers or VPNs to access the Internet cannot prevent criminals from profiling users based on access information. This application can prevent criminals from profiling users based on access information. Therefore, this application can improve the security of user privacy.

[0048] The online policy management method is applicable to an online policy management system. Figure 1 FIG. 1 shows a structure of the Internet access policy management system. Figure 1 As shown, the Internet access policy management system 100 includes an Internet access policy management server 101 and a terminal 102. The Internet access policy management server 101 and the terminal 102 are connected in communication.

[0049] In actual applications, the Internet access policy management server 101 can be connected to multiple terminals 102 for communication.

[0050] For ease of understanding, the present application is described by taking the communication connection between the online policy management server 101 and a terminal 102 as an example.

[0051] Optional, Figure 1 The terminal 102 in the description may be customer premise equipment (CPE), or may be a device that provides voice and / or data connectivity to a user, a handheld device with wireless connection capability, or other processing device connected to a wireless modem. The wireless terminal may communicate with one or more core networks via a radio access network (RAN). The wireless terminal may be a mobile terminal, such as a computer with a mobile terminal, or may be a portable, pocket-sized, handheld, or computer-built-in mobile device that exchanges language and / or data with a radio access network, such as a mobile phone, tablet computer, laptop computer, netbook, or personal digital assistant (PDA). The embodiments of the present application do not impose any limitation on this.

[0052] Optional, Figure 1 The Internet access policy management server 101 in the embodiment may be a single server, or may be a server cluster composed of multiple servers. In some implementations, the server cluster may also be a distributed cluster. The embodiment of the present application does not impose any limitation on this.

[0053] Combination Figure 1 , Figure 2 FIG. 1 shows a structure of the terminal 102. Figure 2 As shown, Figure 1 The terminal 102 in the embodiment may be configured with an Internet client 21, a display module 22, and an input module 23. The Internet client 21 may be software that can be run on the terminal, and may be used to store switching strategies for multiple numbers (e.g., a first switching strategy and a second switching strategy, etc.). The switching strategies for multiple numbers may be used to instruct the terminal to switch to different numbers for service access. For example, the switching strategy may instruct the terminal to periodically switch to different numbers for service access, or may instruct the terminal to switch to different numbers for service access according to the region to which it belongs. The embodiments of the present application are not limited to this.

[0054] The display module 22 may be a device component such as a liquid crystal display screen, and may be used to display multiple numbers or switching strategies, etc.

[0055] The input module 23 may be a device component such as a keyboard, a touch screen, etc. When a number needs to be selected in the Internet client, the user may perform a selection operation through the input module to select a number from a plurality of numbers.

[0056] Combination Figure 1 , Figure 3 FIG. 2 shows another structure of the Internet access policy management system. Figure 3 As shown, the Internet access policy management system 200 includes: an Internet access policy management server 201, a terminal 202 and a communication management device 203. The Internet access policy management server 201 and the terminal 202 are connected in communication. The terminal 202 and the communication management device 203 are connected in communication.

[0057] Combination Figure 1 ,like Figure 3 As shown, Figure 1 The terminal 102 in the example may be equipped with a SIM card having multiple numbers. The terminal may access various services through any one of the multiple numbers on the SIM card. The SIM card may be used to store the multiple numbers and authentication information of the multiple numbers. The number may be a mobile phone number consisting of 11 digits. The authentication information of the number may be stored in Figure 3 It is pre-registered in the communication management device shown and is used to verify the legitimacy of the number.

[0058] Combination Figure 1 ,like Figure 3 As shown, Figure 1 The Internet access policy management server 103 may be configured with a management module to facilitate management of multiple SIM cards.

[0059] The management module can be used to manage the correspondence between the unique identification of each SIM card and multiple numbers, and can also be used to manage the switching strategy and usage status of multiple numbers possessed by each SIM card, and can also be used to manage the log data of each number when accessing services.

[0060] Optionally, the unique identifier of the SIM card may be an integrated circuit card identity (ICCID).

[0061] Figure 3 The communication management device in the communication management device can be an access network device or a core network device in the operator's mobile network. The communication management device can be used to support the terminal to access various services, and can also be used to store the authentication information of multiple numbers pre-registered, and authenticate multiple numbers.

[0062] In one possible implementation, referring to Figure 3When a terminal needs to establish a communication connection with an operator's communication management device through a number, the terminal can send an authentication application to the operator's communication management device for verifying the authentication information of the number. In response to the terminal's authentication application, the operator's communication management device can read the pre-registered information of the number to verify the legitimacy of the number and send the authentication result to the terminal. When the authentication result is used to confirm the legitimacy of the number, the terminal can establish a communication connection with the operator's communication management device through the number to access services.

[0063] After establishing a communication connection with the operator's communication management device, the terminal can send an activation completion message to the Internet policy management server through the Internet client. Correspondingly, the Internet policy management server can receive the activation completion message from the terminal and parse the activation completion message to determine that the communication status of the terminal is normal. Then, the Internet policy management server manages the SIM card configured by the terminal, the switching strategy and usage status of multiple numbers in the SIM card, and the log data of each number of the multiple numbers when accessing the service through the management module.

[0064] like Figure 4 , which is a schematic diagram of the hardware structure of the Internet access policy management server provided in the embodiment of the present application. The Internet access policy management server includes a processor 41, a memory 42, a communication interface 43, and a bus 44. The processor 41, the memory 42, and the communication interface 43 can be connected through a bus 44.

[0065] The processor 41 is the control center of the Internet access policy management server, which can be a processor or a general term for multiple processing elements. For example, the processor 41 can be a general-purpose central processing unit (CPU) or other general-purpose processors. Among them, the general-purpose processor can be a microprocessor or any conventional processor.

[0066] As an embodiment, the processor 41 may include one or more CPUs, such as Figure 4 CPU0 and CPU1 are shown in the figure.

[0067] The memory 42 may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type of dynamic storage device that can store information and instructions, an electrically erasable programmable read-only memory (EEPROM), a disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0068] In a possible implementation, the memory 42 may exist independently of the processor 41, and the memory 42 may be connected to the processor 41 via a bus 44 to store instructions or program codes. When the processor 41 calls and executes the instructions or program codes stored in the memory 42, the Internet access policy management method provided in the following embodiments of the present application can be implemented.

[0069] In another possible implementation, the memory 42 may also be integrated with the processor 41 .

[0070] The communication interface 43 is used to connect the Internet access policy management server to other devices through a communication network, and the communication network may be Ethernet, wireless access network, wireless local area network (WLAN), etc. The communication interface 43 may include a receiving unit for receiving data and a sending unit for sending data.

[0071] The bus 44 may be an industry standard architecture (ISA) bus, a peripheral component interconnect (PCI) bus, or an extended industry standard architecture (EISA) bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0072] It should be pointed out that Figure 4 The structure shown in does not constitute a limitation on the Internet access policy management server, except Figure 4In addition to the components shown, the Internet access policy management server may include more or fewer components than shown, or combine certain components, or arrange the components differently.

[0073] like Figure 5 The figure is a flow chart of an Internet access policy management method provided by an embodiment of the present application. The Internet access policy management method is applied to Figure 1 The Internet access policy management system shown can be managed by Figure 1 The Internet access policy management server shown is executed. Exemplarily, the hardware implementation of the Internet access policy management server can refer to the aforementioned Figure 4 In some optional implementations, the Internet access policy management server can also be implemented by software. The software structure of the Internet access policy management server can refer to the following Fig.12 The relevant description content will not be repeated here.

[0074] Reference Figure 5 The Internet access policy management method provided in the embodiment of the present application includes: S501-S503.

[0075] S501. The Internet access policy management server obtains multiple numbers.

[0076] Specific, combined Figure 2 After configuring a SIM card with multiple numbers for the terminal, the user can select a number in the Internet client through the input module of the terminal, so that the terminal can establish a communication connection with the operator's communication management device through the number. After establishing a communication connection with the operator's communication management device, the terminal can send an activation completion message to the Internet policy management server through the Internet client.

[0077] Accordingly, the Internet access policy management server can receive the activation completion message from the terminal and parse the activation completion message to determine that the communication status of the terminal is normal. Then, in order to enable the terminal to switch different numbers for service access, the Internet access policy management server can send a request message for obtaining multiple numbers to the terminal. In response to the request message, the terminal can read multiple numbers in the SIM card and send the multiple numbers to the Internet access policy management server through the Internet access client. Accordingly, the Internet access policy management server can receive multiple numbers from the terminal.

[0078] In one achievable approach, combining Figure 3When acquiring multiple numbers, the Internet access policy management server may also send a request message to the terminal for acquiring the unique identifier of the SIM card. In response to the request message, the terminal may read the unique identifier of the SIM card and send the unique identifier of the SIM card to the Internet access policy management server. Accordingly, the Internet access policy management server may receive the unique identifier of the SIM card from the terminal. Then, the Internet access policy management server may read multiple numbers corresponding to the unique identifier from the management module according to the unique identifier of the SIM card.

[0079] S502: The Internet access policy management server determines a first switching policy for multiple numbers.

[0080] The first switching strategy is used to instruct the terminal to switch to different numbers for service access according to a first rule. The first rule includes: periodically switching to different numbers for service access, or switching to different numbers for service access according to the area to which the terminal belongs.

[0081] Exemplarily, when the first rule includes periodically switching different numbers for service access, three numbers, number 1, number 2 and number 3, are preset, and the switching period is 24 hours. When number 1 is used for service access, the terminal can make a duration judgment. When the duration reaches 24 hours, the terminal stops using number 1 for service access and selects number 2 for service access, that is, switches number 1 to number 2. Similarly, when number 2 is used for service access, the terminal can also make a duration judgment. When the duration reaches 24 hours, number 2 is switched to number 3. By analogy, the terminal can periodically and cyclically switch different numbers for service access.

[0082] Alternatively, when the first rule includes switching different numbers for service access according to the region to which the terminal belongs, three numbers, namely, number 4, number 5, and number 6, are preset, and there are three regions, namely, region A, region B, and region C. When number 4 is used to access services in region A, if the terminal recognizes that its region of belonging has changed from region A to region B, number 4 is stopped from being used for service access, and number 5 is selected for service access in region B. Similarly, when number 5 is used to access services in region B, if the terminal recognizes that its region of belonging has changed from region B to region C, number 5 is stopped from being used for service access, and number 6 is selected for service access in region C. By analogy, the terminal can cyclically switch different numbers for service access according to the region to which it belongs.

[0083] S503: The Internet access policy management server sends a first switching policy to the terminal.

[0084] Specifically, after determining the first switching strategy for multiple numbers, the Internet access policy management server can send the first switching strategy to the terminal. Accordingly, the terminal can receive the first switching strategy from the Internet access policy management server and switch different numbers to access services according to the first switching strategy.

[0085] In one possible implementation, Figure 6 As shown, this embodiment provides an implementation method for a terminal to access a service, including: S601-S605.

[0086] S601. The terminal selects an initial number according to an initial Internet access policy and determines authentication information of the initial number.

[0087] Optionally, the Internet access client may pre-store an initial Internet access policy. The initial Internet access policy may be used to instruct the terminal to use an initial number for service access. The initial number may be any one of multiple numbers.

[0088] Combination Figure 2 After configuring a SIM card with multiple numbers for the terminal, the user can perform the operation of selecting the initial Internet access strategy in the Internet access client through the input module of the terminal. Accordingly, the terminal can respond to the user's operation, select the initial number according to the initial Internet access strategy, and determine the authentication information of the initial number.

[0089] S602: The terminal sends a first authentication request to the communication management device.

[0090] Specific, combined Figure 3 In order to establish a communication connection with the operator's communication management device through the initial number, the terminal can send a first authentication request to the communication management device.

[0091] The first authentication request may include authentication information of the initial number.

[0092] S603: The communication management device verifies the authentication information of the initial number.

[0093] Specifically, after receiving the first authentication request from the terminal, the communication management device can parse the first authentication request to determine the authentication information of the initial number. Then, the communication management device can read the information of the pre-registered initial number and verify the legitimacy of the initial number.

[0094] S604: The communication management device sends a first authentication result to the terminal.

[0095] Specifically, after verifying the authentication information of the initial number to determine the first authentication result, the communication management device may send the first authentication result to the terminal.

[0096] The first authentication result may be used to indicate that the authentication information of the initial number is consistent with the pre-registered information. Alternatively, the first authentication result may be used to indicate that the authentication information of the initial number is inconsistent with the pre-registered information.

[0097] S605. The terminal sends a first access message to the communication management device.

[0098] Specifically, after the terminal receives the first authentication result from the communication management device, when the first authentication result can be used to indicate that the authentication information of the initial number is consistent with the pre-registered information, the terminal can establish a communication connection with the operator's communication management device through the initial number, and send a first access message to the communication management device for service access.

[0099] In one possible implementation, in order to make the terminal irregularly switch to different numbers for service access, so as to avoid the Internet habits and behavior data of the user using the terminal being tracked, based on Figure 5 The method embodiment shown in the figure provides a possible implementation method, such as Figure 7 As shown, including: S701-S702.

[0100] S701. An Internet access policy management server obtains log information of a terminal using a first switching policy to access a service within a first period of time.

[0101] Specifically, when the terminal switches to different numbers for service access according to the first switching strategy, the Internet access policy management server can obtain the log information of the terminal in the first time period in real time or periodically, thereby updating the first switching strategy so that the terminal irregularly switches to different numbers for service access.

[0102] The log information includes the duration of the first period and access information of multiple numbers.

[0103] Optionally, the access information of the multiple numbers may include information such as service type information, website information, and time information when the terminal uses each number to access the service.

[0104] It should be understood that the way in which the online policy management server obtains the log information of the terminal using the first switching strategy to access the service in the first period can refer to the way in which the online policy management server obtains multiple numbers in S501, which will not be repeated here.

[0105] S702: The Internet access policy management server determines a second switching policy for multiple numbers according to the log information.

[0106] Specifically, after obtaining the log information, the Internet access policy management server can determine the second switching policy for the multiple numbers according to the log information, and send the second switching policy to the terminal. Accordingly, the terminal can receive the second switching policy from the Internet access policy management server, and replace the first switching policy with the second switching policy, thereby switching different numbers for service access according to the second switching policy.

[0107] Optionally, the Internet access policy management server determines the second switching policies for multiple numbers according to the log information in the following ways, including but not limited to the following two ways.

[0108] The first method is:

[0109] The Internet access policy management server can determine whether to replace the first rule with a second rule different from the first rule, or whether to disable any one or more of the multiple numbers based on the duration of the first period in the log information and the access information of the multiple numbers.

[0110] Specifically, when the duration of the first time period is greater than the first preset threshold, the Internet access policy management server determines a second switching policy for instructing the terminal to switch to a different number for service access according to a second rule.

[0111] When the duration of the first period is less than or equal to the first preset threshold and there is an access record of the blacklisted website in the access information of the first number, the Internet access policy management server determines a second switching policy for instructing the terminal to switch to multiple second numbers for service access according to the first rule.

[0112] The first number is any one of the multiple numbers, and the multiple second numbers are other numbers among the multiple numbers except the first number.

[0113] Optionally, the first preset threshold can be reasonably set by humans based on experience, so as to timely update the rules for terminals to switch to different numbers for service access. For example, the first preset threshold can be one week or one month. This embodiment of the present application is not limited to this.

[0114] In one achievable method, the blacklisted URLs may be manually set and updated based on the URL blacklist in the MIIT filing system.

[0115] The second method is:

[0116] The online policy management server can determine whether it is necessary to change multiple numbers based on the length of the first period in the log information to prevent criminals from tracking the online habits and behavior data of users using the terminal.

[0117] Optionally, the Internet access policy management server may manage multiple SIM cards with multiple numbers. Each of the multiple SIM cards may be used by a different user.

[0118] When the duration of the first time period is greater than the first preset threshold, the Internet access policy management server may determine that the second switching policy is to replace the SIM card configured for the terminal.

[0119] When the duration of the first time period is less than or equal to the first preset threshold, the Internet access policy management server may determine that the second switching policy is the first switching policy, that is, keep the first switching policy unchanged.

[0120] Combination Figure 2 When it is determined that the second switching strategy is to replace the SIM card configured for the terminal, the Internet access policy management server can send a communication message to the terminal for instructing to replace the SIM card. Correspondingly, the terminal can receive the communication message from the Internet access management server and display the communication message on the display module. In this way, the user using the terminal can obtain the communication message through the display module and replace the SIM card for the terminal.

[0121] One possible way to do this is Figure 8 As shown, this embodiment provides another implementation method for a terminal to access a service, including: S801-S808.

[0122] S801. The Internet access policy management server sends a second switching policy to a terminal.

[0123] Combination Figure 3 After the management module determines the second switching strategy for the multiple numbers, the Internet access strategy management server can send the second switching strategy to the terminal. Correspondingly, the terminal can receive the second switching strategy from the Internet access strategy management server.

[0124] S802: The terminal replaces the first switching strategy with the second switching strategy.

[0125] Combination Figure 2 After receiving the second switching policy from the Internet access policy management server, the terminal can store the second switching policy in the Internet access client and replace the first switching policy with the second switching policy.

[0126] S803: The terminal sends a replacement completion message to the Internet access policy management server.

[0127] Specifically, after replacing the first switching policy with the second switching policy, in order to facilitate the Internet access policy management server to manage the switching policies and usage status of multiple numbers, the terminal may send a replacement completion message to the Internet access policy management server.

[0128] S804. The terminal selects a fourth number according to the second switching strategy, and determines authentication information of the fourth number.

[0129] S805. The terminal sends a second authentication request to the communication management device.

[0130] S806. The communication management device verifies the authentication information of the fourth number.

[0131] S807. The communication management device sends a second authentication result to the terminal.

[0132] S808. The terminal sends a second access message to the communication management device.

[0133] It should be understood that the implementation of S804-S808 can refer to the description in S601-S605, and will not be repeated here.

[0134] In one possible implementation, in the above S702, when the Internet access policy management server determines the second switching policy for the plurality of numbers according to the log information, based on Figure 7 The method embodiment shown in the figure provides a possible implementation method, such as Fig. 9 As shown, including: S901-S902.

[0135] S901: When the duration of the first time period is greater than a first preset threshold, the Internet access policy management server determines a second switching policy for instructing the terminal to switch to a different number for service access according to a second rule.

[0136] Specifically, when the duration of the first time period is greater than the first preset threshold, the Internet access policy management server may determine that the first switching policy has been used for too long. In this case, in order to prevent criminals from tracking the Internet access habits and behavior data of users using the terminal, the Internet access policy management server may determine that the second switching policy is that the terminal switches to a different number for service access according to a second rule.

[0137] S902: When the duration of the first time period is less than or equal to the first preset threshold and there is an access record of the blacklisted website in the access information of the first number, the Internet access policy management server determines a second switching policy for instructing the terminal to switch to multiple second numbers for service access according to the first rule.

[0138] Specifically, when the duration of the first time period is less than or equal to the first preset threshold, and there is an access record of a blacklisted website in the access information of the first number, the Internet access policy management server can determine that the access information of the first number is at risk of being tracked by criminals. In this case, the Internet access policy management server can determine that the second switching policy is that the terminal switches to multiple second numbers for service access according to the first rule, that is, the first number is deactivated.

[0139] In one possible manner, when the duration of the first time period is less than or equal to the first preset threshold and there is no access record of the blacklisted website in the access information of the first number, the Internet access policy management server can determine that the second switching policy is the first switching policy, that is, keep the first switching policy unchanged.

[0140] In one possible implementation, in the above S902, after the Internet access policy management server determines that the second switching policy is used to instruct the terminal to switch to multiple second numbers for service access according to the first rule, based on Fig. 9 The method embodiment shown in the figure provides a possible implementation method, such as Fig.10 As shown, including: S1001-S1002.

[0141] S1001. An Internet access policy management server determines the duration of a second time period during which a terminal uses a second switching policy to access a service.

[0142] The second time period is a time period during which the terminal uses the second switching strategy to access the service.

[0143] Specifically, after determining that the second switching strategy is used to instruct the terminal to switch multiple second numbers for service access according to the first rule, the online policy management server may send the second switching strategy to the terminal, so that the terminal switches multiple second numbers for service access according to the first rule. Then, in the process of the terminal switching multiple second numbers for service access according to the first rule, in order to determine whether the access information of the first number still has the risk of being tracked by criminals, the online policy management server may periodically determine the duration of the second time period.

[0144] S1002: When the duration of the second time period is greater than the second preset threshold, the Internet access policy management server determines a second switching policy that the terminal switches to multiple numbers for service access according to the first rule.

[0145] Specifically, when the duration of the second time period is greater than the second preset threshold, the Internet access policy management server can determine that the access information of the first number is no longer at risk of being tracked by criminals. In this case, the Internet access policy management server can determine that the second switching policy is that the terminal switches multiple numbers for service access according to the first rule, that is, the first number is enabled.

[0146] One possible way to do this is based on Figure 5 In the method embodiment shown, after the Internet access policy management server sends the first switching policy to the terminal, in order to ensure that the terminal accesses the service according to the first switching policy, this embodiment provides a possible implementation method, such as Fig.11 As shown, including: S1101-S1102.

[0147] S1101. An Internet access policy management server receives a number request message sent by a terminal for requesting to use a third number for service access.

[0148] Specifically, after receiving the first switching policy from the Internet access policy management server, the terminal can select the third number for service access according to the first switching policy. Before using the third number for service access, the terminal can send a number request message to the Internet access policy management server to verify whether the third number complies with the first switching policy. Correspondingly, the Internet access policy management server can receive the number request message sent by the terminal.

[0149] The number request message is used to request a third number for service access, where the third number is any one of the multiple numbers.

[0150] S1102: When the third number meets the first rule, the Internet access policy management server sends a number confirmation message to the terminal.

[0151] The number confirmation message is used to indicate that the terminal is allowed to use the third number to access the service.

[0152] In one practicable manner, the Internet access policy management server may be configured with a storage module, which may be used to store a corresponding relationship between each number in the plurality of numbers and the first switching policy.

[0153] After receiving the number request message sent by the terminal, the online policy management server can parse the number request message to determine the third number and read the first switching policy corresponding to the third number from the storage module. When the third number meets the first rule, the online policy management server can send a number confirmation message to the terminal.

[0154] In the embodiment of the present application, since the terminal is equipped with a SIM card with multiple numbers, and the Internet access policy management server can determine the first switching policy of the multiple numbers after obtaining the multiple numbers, and send the first switching policy to the terminal. Therefore, after receiving the first switching policy, the terminal can switch different numbers according to the first rule to access the service.

[0155] In this way, the access information of each of the multiple numbers used by the terminal to access the service is incoherent. Even if the criminals obtain the access information of one or more numbers, they cannot fully profile the user using the terminal. Compared with the related art, the use of proxy servers or VPNs to access the Internet cannot prevent criminals from profiling users based on access information. This application can prevent criminals from profiling users based on access information. Therefore, this application can improve the security of user privacy.

[0156] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of the method. In order to realize the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0157] The embodiment of the present application can divide the Internet access policy management server into functional modules according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. Optionally, the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation.

[0158] like Fig.12 As shown, it is a schematic diagram of the structure of an Internet access policy management device provided in an embodiment of the present application. The Internet access policy management device can be used to execute the following Figure 5 and Figure 7 ,as well as Figures 9 to 11 The Internet access policy management method shown. Fig.12 The structure of the Internet access policy management device shown can be the software structure of the Internet access policy management server. The Internet access policy management server belongs to the Internet access policy management system including the Internet access policy management server and the terminal. The Internet access policy management device includes: an acquisition unit 1201, a determination unit 1202 and a sending unit 1203.

[0159] The acquisition unit 1201 is used to acquire multiple numbers. Figure 5 As described above, the acquiring unit 1201 may be used to execute S501.

[0160] The determining unit 1202 is configured to determine a first switching strategy for the multiple numbers acquired by the acquiring unit 1201. The first switching strategy is used to instruct the terminal to switch to different numbers for service access according to a first rule. Figure 5 As described above, the determining unit 1202 may be configured to execute S502.

[0161] The sending unit 1203 is configured to send the first switching strategy determined by the determining unit 1202 to the terminal. Figure 5As described above, the sending unit 1203 may be used to execute S503.

[0162] Optionally, the first rule includes: periodically switching different numbers for service access, or switching different numbers for service access according to the area to which the terminal belongs.

[0163] Optionally, the acquisition unit 1201 is further configured to acquire log information of the terminal using the first switching strategy to access the service within the first time period. Figure 7 As described above, the acquiring unit 1201 may be used to execute S701.

[0164] The determining unit 1202 is further configured to determine a second switching strategy for the plurality of numbers according to the log information. Figure 7 As described above, the determining unit 1202 may be configured to execute S702.

[0165] Optionally, the log information includes the duration of the first period and access information of multiple numbers. The determining unit 1202 is specifically configured to:

[0166] When the duration of the first time period is greater than the first preset threshold, a second switching strategy is determined to instruct the terminal to switch to a different number for service access according to a second rule. The second rule is different from the first rule. For example, Fig. 9 As described above, the determining unit 1202 may be configured to execute S901.

[0167] When the duration of the first time period is less than or equal to the first preset threshold, and there is an access record of the blacklisted website in the access information of the first number, a second switching strategy is determined to instruct the terminal to switch to multiple second numbers for service access according to the first rule. The first number is any one of the multiple numbers. The multiple second numbers are other numbers in the multiple numbers except the first number. For example, Fig. 9 As described above, the determining unit 1202 may be configured to execute S902.

[0168] Optionally, the determining unit 1202 is further configured to determine the duration of the second time period during which the terminal uses the second switching strategy to access the service. Fig.10 As described above, the determining unit 1202 may be configured to execute S1001.

[0169] The determining unit 1202 is further configured to determine, when the duration of the second time period is greater than a second preset threshold, that the second switching strategy is for the terminal to switch multiple numbers for service access according to the first rule. Fig.10 As described above, the determining unit 1202 may be configured to execute S1002.

[0170] Optionally, the Internet access policy management device further includes: a receiving unit 1204.

[0171] The receiving unit 1204 is configured to receive a number request message sent by the terminal for requesting to use a third number for service access. The third number is any one of the multiple numbers. For example, Fig.11 As described above, the receiving unit 1204 may be configured to execute S1101.

[0172] The sending unit 1203 is further configured to send a number confirmation message to the terminal when the third number meets the first rule. The number confirmation message is used to indicate that the terminal is allowed to use the third number to access the service. Fig.11 As described above, the sending unit 1203 may be used to execute S1102.

[0173] Those skilled in the art should be aware that in one or more of the above examples, the functions described in this application can be implemented using hardware, software, firmware, or any combination thereof. When implemented using software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer-readable storage media and communication media, wherein communication media include any media that facilitates the transmission of computer programs from one place to another. Storage media can be any available media that can be accessed by general or special-purpose computers.

[0174] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0175] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the modules or units is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the coupling or direct coupling or communication connection between each other shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms. The unit described as a separate component may or may not be physically separated, and the component displayed as a unit may be a physical unit or multiple physical units, that is, it may be located in one place, or it may be distributed in multiple different places. Some or all of the units can be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0176] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A method for managing Internet access policy, characterized in that: Applied to Internet access policy management server; The online policy management server belongs to an online policy management system including the online policy management server and the terminal; The terminal is equipped with a user identity identification SIM card with multiple numbers; including: Obtaining the multiple numbers; Determine a first switching strategy for the multiple numbers; the first switching strategy is used to instruct the terminal to switch different numbers for service access according to a first rule; the first rule includes: periodically switching different numbers for service access, or switching different numbers for service access according to the area to which the terminal belongs; Sending the first switching strategy to the terminal; Obtaining log information of the terminal using the first switching strategy to access a service within a first time period; the log information includes the duration of the first time period and access information of the multiple numbers; When the duration of the first time period is greater than a first preset threshold, determining that the second switching strategy of the multiple numbers is used to instruct the terminal to switch the first rule to the second rule, and switch different numbers for service access according to the second rule, or determining that the second switching strategy of the multiple numbers is used to instruct the terminal to change the number of other SIM cards for service access; When the duration of the first time period is less than or equal to the first preset threshold and there is an access record of the blacklisted website in the access information of the first number, the second switching strategy is determined to be used to instruct the terminal to switch to multiple second numbers for service access according to the first rule; the first number is any one of the multiple numbers; the multiple second numbers are other numbers among the multiple numbers except the first number.

2. The Internet access policy management method according to claim 1, characterized in that: After determining that the second switching strategy is used to instruct the terminal to switch to multiple second numbers for service access according to the first rule, the method further includes: Determining the duration of a second time period during which the terminal uses the second switching strategy to access the service; When the duration of the second time period is greater than a second preset threshold, it is determined that the second switching strategy is that the terminal switches the multiple numbers to access the service according to the first rule.

3. The Internet access policy management method according to claim 1, characterized in that: Also includes: receiving a number request message sent by the terminal for requesting to use a third number for service access; The third number is any one of the multiple numbers; When the third number meets the first rule, a number confirmation message is sent to the terminal; the number confirmation message is used to indicate that the terminal is allowed to use the third number for service access.

4. A network access policy management device, characterized in that: include: an acquisition unit, a determination unit, and a sending unit; The acquisition unit is used to acquire multiple numbers; The determining unit is configured to determine a first switching strategy for the multiple numbers acquired by the acquiring unit; The first switching strategy is used to instruct the terminal to switch to different numbers for service access according to a first rule; the first rule includes: periodically switching to different numbers for service access, or switching to different numbers for service access according to the area to which the terminal belongs; The sending unit is configured to send the first switching strategy determined by the determining unit to the terminal; The acquisition unit is further used to acquire log information of the terminal using the first switching strategy to access the service within the first time period; the log information includes the duration of the first time period and the access information of the multiple numbers; The determining unit is further configured to, when the duration of the first time period is greater than a first preset threshold, determine that the second switching strategy of the multiple numbers is used to instruct the terminal to switch the first rule to the second rule, and switch different numbers for service access according to the second rule, or determine that the second switching strategy of the multiple numbers is used to instruct the terminal to change the number of other SIM cards for service access; The determination unit is also used to determine that the second switching strategy is used to instruct the terminal to switch to multiple second numbers for service access according to the first rule when the duration of the first time period is less than or equal to the first preset threshold and there is an access record of the blacklisted website in the access information of the first number; the first number is any one of the multiple numbers; and the multiple second numbers are other numbers among the multiple numbers except the first number.

5. The Internet access policy management device according to claim 4, characterized in that: The determining unit is further configured to determine the duration of a second time period during which the terminal uses the second switching strategy to access the service; The determining unit is further configured to determine, when the duration of the second time period is greater than a second preset threshold, that the second switching strategy is for the terminal to switch the multiple numbers for service access according to the first rule.

6. The Internet access policy management device according to claim 4, characterized in that: Also includes: Receiving unit; The receiving unit is used to receive a number request message sent by the terminal for requesting to use a third number for service access; The third number is any one of the multiple numbers; The sending unit is further used to send a number confirmation message to the terminal when the third number meets the first rule; the number confirmation message is used to indicate that the terminal is allowed to use the third number to access the service.

7. An Internet access policy management device, characterized in that: It comprises a memory and a processor; the memory is used to store computer-executable instructions, and the processor is connected to the memory via a bus; when the Internet access policy management device is running, the processor executes the computer-executable instructions stored in the memory, so that the Internet access policy management device executes the Internet access policy management method as described in any one of claims 1 to 3.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes computer-executable instructions. When the computer-executable instructions are executed on a computer, the computer is enabled to execute the Internet access policy management method according to any one of claims 1 to 3.

Images