A terminal rights confirmation monitoring system based on bypass monitoring
Through the bypass monitoring technology that monitors the communication process in real time between the call center and the user terminal, it generates business authorization information and determines the legality of business request instructions, which solves the problem of inability to monitor the prior authorization behavior in the existing technology. Improved the security and reliability of terminal authorization monitoring.
Patent Information
- Application Number
- CN202110713104.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-06-25
- Publication Date
- 2025-01-21
- Estimated Expiration
- 2041-06-25
AI Technical Summary
The existing technology cannot realize monitoring of pre-right confirmation behavior, resulting in the lack of an effective pre-authorization monitoring mechanism for enterprises when obtaining user privacy.
A terminal authorization monitoring system based on bypass monitoring is adopted. The authorization monitoring platform monitors the communication process between the call center and the user terminal in real time, generates business authorization information, and the business management platform determines the legality of the business request instructions.
It realizes ex-ante monitoring of terminal authorization behavior, improves the security and reliability of the terminal authorization monitoring process, and avoids the problem of reduced reliability of business authorization response results caused by malicious tampering with business request instructions.
Smart Images

Figure CN115529385B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of telecommunication operator support technology, and in particular to a terminal rights confirmation monitoring system based on bypass monitoring. Background Art
[0002] When a mobile phone user calls the call center customer service number of an enterprise (such as insurance, bank, etc.), the user will perform confirmation operations as needed (for example, whether the user agrees to the enterprise's real-time active positioning of the terminal, allows the enterprise to obtain the current location of the terminal, etc.). If the user confirms, he will be asked to press a specific button on the mobile phone to complete the confirmation (for example, 999#).
[0003] Since some of the company's operations involve the acquisition of user privacy, the information provision platform that provides this information needs to ensure that each business operation of the company has obtained the user's confirmation and authorization in advance.
[0004] Under the current circumstances, there is no feasible technical solution for monitoring prior property rights confirmation behavior, and the only way is to conduct post-event spot checks through user follow-up visits and other means. Summary of the invention
[0005] In view of the above analysis, the embodiments of the present invention aim to provide a terminal rights confirmation monitoring system and method based on bypass monitoring, so as to solve the problem that the prior art cannot realize the monitoring of the rights confirmation behavior in advance.
[0006] A terminal rights confirmation monitoring system based on bypass monitoring, the system comprising:
[0007] The call center is used to send a user key press request matching the service authorization to the user terminal when a service authorization is required, and receive user key press confirmation information of the user terminal in response to the user key press request, and generate a service request instruction based on the user key press confirmation information;
[0008] A rights confirmation monitoring platform, used for monitoring the communication process between the call center and the user terminal in a bypass manner, and generating service rights confirmation information when monitoring the user's key confirmation information;
[0009] The business management platform is used to determine whether the business request instruction is legal based on the business confirmation information. If it is legal, it generates a business confirmation response result based on the business request instruction, and feeds back the business confirmation response result to the call center so that the call center obtains the business authorization based on the business confirmation response result.
[0010] On the basis of the above scheme, the present invention also makes the following improvements:
[0011] Further, the call center performs the following operations to generate a service request instruction:
[0012] Receive the user's key confirmation information, and record the service request time and service request user number;
[0013] Determine whether the received user key confirmation information matches the standard key confirmation information in the user key request,
[0014] If they do not match, the user is prompted to re-enter the user key confirmation information;
[0015] If there is a match, the corresponding service request type is queried based on the key confirmation information to obtain the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information.
[0016] Furthermore, the ownership confirmation monitoring platform performs the following operations to generate business ownership confirmation information:
[0017] Record the user key confirmation completion time, the monitored user number, and the user key confirmation information when the user key confirmation information is monitored;
[0018] Determine whether the monitored user key confirmation information matches the standard key confirmation information in the user key request. If so, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed;
[0019] The service confirmation information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the confirmation status is obtained.
[0020] Further, the business management platform determines whether the business request instruction is legal based on the business confirmation information, including:
[0021] If the confirmation status is confirmed, and the service request user number is consistent with the monitoring user number, and at the same time, the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal;
[0022] otherwise,
[0023] Illegal.
[0024] Further, the business management platform performs the following operations to obtain the business confirmation response result:
[0025] The business management platform calls the business authorization platform corresponding to the business request type, obtains business response information based on the business request user number and the business request type, and obtains a business confirmation response result consisting of the business response information, business request user number, business request type and user key confirmation information.
[0026] Furthermore, if it is illegal, the business management platform will feedback to the call center that no business confirmation response result has been received.
[0027] Furthermore, the right confirmation monitoring platform monitors the call center link carrying the communication process in a bypass mode to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information;
[0028] Parsing the call control information, and parsing the user key confirmation information from the DTMF information in the call control information;
[0029] The time at which the monitored user key confirmation information is inputted is used as the user key confirmation completion time;
[0030] The monitored user number is used as the monitored user number.
[0031] Furthermore, the service authorization is a positioning service, the service request type is to obtain the real-time location information of the user, and the service authorization platform corresponding to the service request type is a real-time positioning platform.
[0032] Furthermore, the system also includes a title confirmation query interface, for the business management platform to query the historical business title confirmation information stored in the title confirmation monitoring platform based on the title confirmation query interface.
[0033] Furthermore, the title confirmation query interface includes:
[0034] The time setting sub-interface allows the business management platform to query the business right confirmation information within a specified time period;
[0035] User number setting sub-interface, for the service management platform to query the service confirmation information of the specified user number;
[0036] The key confirmation information sub-interface is used by the business management platform to query the business confirmation information of the specified user's key confirmation information;
[0037] The confirmation status sub-interface is used by the business management platform to query the business confirmation information under the specified confirmation status.
[0038] Compared with the prior art, the present invention can achieve at least one of the following beneficial effects:
[0039] The terminal authentication monitoring system based on bypass monitoring provided by the present invention,
[0040] On the one hand, by setting up a rights confirmation monitoring platform to conduct real-time bypass monitoring of the communication process between the call center and the user terminal, it is possible to implement advance monitoring of the terminal's rights confirmation behavior, solving the problem that there is no feasible technical solution for monitoring the prior rights confirmation behavior in the prior art;
[0041] On the other hand, the business management platform determines whether the business request instruction is legal based on the business confirmation information, and generates a business confirmation response result only when it is legal. This avoids the low security in the process of generating business confirmation response results relying solely on business request instructions, or the reduced reliability of business confirmation response results caused by malicious tampering with business request instructions. It can effectively improve the security and reliability of the terminal confirmation monitoring process.
[0042] In the present invention, the above-mentioned technical solutions can also be combined with each other to achieve more preferred combination solutions. Other features and advantages of the present invention will be described in the subsequent description, and some advantages can become obvious from the description, or can be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0043] The drawings are only for the purpose of illustrating particular embodiments and are not to be considered limiting of the present invention. Like reference symbols denote like components throughout the drawings.
[0044] Figure 1 A schematic diagram of the structure of a terminal authentication monitoring system based on bypass monitoring provided in an embodiment of the present invention. DETAILED DESCRIPTION
[0045] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.
[0046] Example 1
[0047] A specific embodiment of the present invention discloses a terminal authentication monitoring system based on bypass monitoring, the structural diagram of which is shown in FIG. Figure 1 As shown, the system involves information interaction between a call center, a user terminal, a rights confirmation monitoring platform, and a business management platform; wherein,
[0048] The call center is used to send a user key request matching the service authorization to the user terminal when it is necessary to obtain service authorization, and receive user key confirmation information from the user terminal in response to the user key request, and generate a service request instruction based on the user key confirmation information; the confirmation monitoring platform is used to bypass the communication process between the call center and the user terminal, and generate service confirmation information when the user key confirmation information is monitored; the service management platform is used to determine whether the service request instruction is legal based on the service confirmation information, and if legal, generate a service confirmation response result based on the service request instruction, and feed back the service confirmation response result to the call center, so that the call center obtains the service authorization based on the service confirmation response result; if illegal, the service management platform feeds back to the call center that the service confirmation response result was not received.
[0049] Compared with the prior art, the terminal rights confirmation monitoring system based on bypass monitoring provided in this embodiment can realize ex ante monitoring of terminal rights confirmation behavior by setting up a rights confirmation monitoring platform to perform real-time bypass monitoring of the communication process between the call center and the user terminal, thereby solving the problem that there is no feasible technical solution for ex ante monitoring of rights confirmation behavior in the prior art; at the same time, the business management platform determines whether the business request instruction is legal based on the business rights confirmation information, and generates a business rights confirmation response result only when it is legal, thereby avoiding the low security in the process of generating business rights confirmation response results relying solely on business request instructions, or the reduced reliability of business rights confirmation response results caused by malicious tampering with business request instructions, and can effectively improve the security and reliability of the terminal rights confirmation monitoring process.
[0050] In this embodiment, the call center refers to a customer service call center that interacts with user terminals; the title confirmation monitoring platform refers to a third-party monitoring platform that monitors the above communication process in a bypass manner; and the business management platform refers to a comprehensive business management platform for centrally managing the title confirmation monitoring process. Exemplarily, when the system is applied to insurance claims business, the call center can be an insurance claims customer service call center, and the business management platform is an insurance claims business management platform.
[0051] It should be noted that the call center stores a first mapping relationship table: a mapping relationship between service request types for storing service authorization and standard key confirmation information. For example, for the specific service of positioning service, the following contents are stored in the mapping relationship table:
[0052] Business authorization: positioning business;
[0053] Standard key confirmation information: 123# (for example only, other designated keys or key combinations can be preset according to specific circumstances);
[0054] Service request type: obtain the real-time location information of the user.
[0055] During a call between a user terminal and a call center, the call center may need to obtain authorization for a certain service. At this time, the call center can obtain the standard key confirmation information corresponding to the current service authorization by querying the first mapping relationship table, and form a user key request based on the standard key confirmation information and send it to the user terminal. A common user key request method is voice, such as prompting the user to press a specified key or key combination; when the user terminal receives the user key request, it will perform the key operation according to the voice prompt, and feed back the complete key operation content performed by the user as user key confirmation information to the call center. After receiving the user key confirmation information, the call center generates a service request instruction by performing the following operations:
[0056] Receive the user's key confirmation information, and record the service request time and service request user number;
[0057] By querying the first mapping relationship table, the standard key confirmation information in the user key request is obtained; and it is determined whether the received user key confirmation information matches the standard key confirmation information in the user key request.
[0058] If they do not match, the user is prompted to re-enter the user key confirmation information;
[0059] If there is a match, the first mapping relationship table is queried based on the key confirmation information to obtain the corresponding service request type, and the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information is obtained.
[0060] It should be noted that the right confirmation monitoring platform stores a second mapping relationship table: used to store the mapping relationship between business authorization and standard key confirmation information. Preferably, the right confirmation monitoring platform performs the following operations to generate business right confirmation information:
[0061] Record the user key confirmation completion time, the monitored user number, and the user key confirmation information when the user key confirmation information is monitored;
[0062] By querying the second mapping relationship table, the standard key confirmation information in the user key request is obtained; whether the monitored user key confirmation information matches the standard key confirmation information in the user key request is determined, if it matches, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed;
[0063] The service confirmation information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the confirmation status is obtained.
[0064] It should be noted that the service management platform stores a third mapping relationship table: used to store the mapping relationship between service authorization-standard key confirmation information-service request type-service authorization platform. Exemplarily, for the specific service of positioning service, the following contents are stored in the mapping relationship table:
[0065] Business authorization: positioning business;
[0066] Standard key confirmation information: 123# (for example only, other designated keys or key combinations can be preset according to specific circumstances);
[0067] Service request type: obtain the real-time location information of the user.
[0068] Business authorization platform: real-time positioning platform.
[0069] It should be emphasized that there is some identical mapping information in the first to third mapping tables. When a mapping table updates the same part of the mapping information, the other mapping tables are updated synchronously to ensure the consistency of the same mapping information in different mapping tables.
[0070] Preferably, the business management platform determines whether the business request instruction is legal based on the business confirmation information, including:
[0071] If the confirmation status is confirmed, and the service request user number is consistent with the monitoring user number, and at the same time, the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal; otherwise, it is illegal.
[0072] Preferably, the business management platform performs the following operations to obtain the business confirmation response result:
[0073] The service management platform obtains the service authorization platform corresponding to the service request type by querying the third mapping relationship table, and calls the service authorization platform to obtain service response information based on the service request user number and the service request type, and obtains the service confirmation response result composed of the service response information, the service request user number, the service request type and the user key confirmation information. For example, when the service authorization is a positioning service, the location of the service request user number can be located, and the positioning result is used as the service response information.
[0074] Preferably, in order to facilitate the business management platform to check or query the confirmation information of a certain user number, a certain period of time, a certain business authorization or a certain confirmation status, the system also includes a confirmation query interface, for the business management platform to query the historical business confirmation information stored by the confirmation monitoring platform based on the confirmation query interface. Exemplarily, the confirmation query interface includes:
[0075] The time setting sub-interface allows the business management platform to query the business right confirmation information within a specified time period;
[0076] User number setting sub-interface, for the service management platform to query the service confirmation information of the specified user number;
[0077] The key confirmation information sub-interface is used by the business management platform to query the business confirmation information of the specified user's key confirmation information;
[0078] The confirmation status sub-interface is used by the business management platform to query the business confirmation information under the specified confirmation status.
[0079] Specifically, the right confirmation monitoring platform obtains the user key confirmation completion time, the monitored user number and the user key confirmation information by performing the following operations:
[0080] In a bypass mode, the call center link carrying the communication process is monitored to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information;
[0081] Parse the call control information, and parse the user key confirmation information from the DTMF (Dual Tone MultiFrequency) information in the call control information; use the time when the monitored user key confirmation information is input and completed as the user key confirmation completion time; and use the monitored user number as the monitored user number.
[0082] The above bypass monitoring process is based on DTMF signals. DTMF signals are dual audio signals, which were first used in program-controlled telephone exchange systems to replace the number plate pulse signal. After the calling user picks up the phone and dials the number, the DTMF signal corresponding to the phone number is transmitted to the DTMF receiving circuit in the program-controlled exchange through the telephone line. After the microcomputer in the exchange recognizes the called phone number, it connects the calling and called users to realize the conversation. There are three ways to transmit DTMF in signaling:
[0083] Method 1: Out-of-band detection, which transmits DTMF data through the signaling channel. VoIP calls such as SIP and H.323 basically use out-of-band detection. Taking SIP signaling as an example, DTMF digits are transmitted by SIP INFO messages.
[0084] Method 2: In-band detection, transmitted through RTP, with RFC2833 (RTP Payload for DTMF Digits, Telephony Tones and Telephony Signals) data packets marked by a special rtpPayloadType, namely TeleponeEvent. The same DTMF key usually corresponds to multiple RTP packets, and the timestamps of these RTP packets are the same, which can be used as a basis for identifying the same key. The end flag of the last RTP packet is set to 1 to indicate the end of the DTMF data.
[0085] Method 3: In-band detection, DTMF is mixed with ordinary voice packets for transmission. The only way to perform INBANDDTMF detection is to extract the voice data packet for spectrum analysis, obtain the high and low frequencies through spectrum analysis, and then look up the table to get the corresponding keys. The algorithm for spectrum analysis is generally Goertzel. This transmission method will produce distortion after complex encoding and decoding, causing deviation or failure of DTMF detection. It is recommended not to use it. Calls based on ISUP control mostly use the in-band detection method.
[0086] Regardless of the above DTMF transmission method, the keystroke behavior of the user terminal can be collected and analyzed through signaling monitoring. The corresponding monitoring method can be selected according to the specific application scenario.
[0087] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.
[0088] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.
Claims
1. A terminal rights confirmation monitoring system based on bypass monitoring, characterized in that: The system comprises: The call center is used to send a user key press request matching the service authorization to the user terminal when a service authorization is required, and receive user key press confirmation information of the user terminal in response to the user key press request, and generate a service request instruction based on the user key press confirmation information; A rights confirmation monitoring platform, used for monitoring the communication process between the call center and the user terminal in a bypass manner, and generating service rights confirmation information when monitoring the user's key confirmation information; The service management platform is used to determine whether the service request instruction is legal based on the service confirmation information, and if legal, generate a service confirmation response result based on the service request instruction, and feed back the service confirmation response result to the call center, so that the call center obtains the service authorization based on the service confirmation response result; The call center stores a first mapping relationship table for storing a mapping relationship between service authorization and service request types of standard key confirmation information; the call center performs the following operations to generate a service request instruction: Receive the user's key confirmation information, and record the service request time and service request user number; Determine whether the received user key confirmation information matches the standard key confirmation information in the user key request, If they do not match, the user is prompted to re-enter the user key confirmation information; If there is a match, query the corresponding service request type based on the key confirmation information to obtain the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information; The right confirmation monitoring platform stores a second mapping relationship table for storing the mapping relationship between business authorization and standard key confirmation information; the right confirmation monitoring platform performs the following operations to generate business right confirmation information: Record the user key confirmation completion time, the monitored user number, and the user key confirmation information when the user key confirmation information is monitored; Determine whether the monitored user key confirmation information matches the standard key confirmation information in the user key request. If so, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed; Obtain the service confirmation information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the confirmation status; The business management platform determines whether the business request instruction is legal based on the business confirmation information, including: If the confirmation status is confirmed, and the service request user number is consistent with the monitoring user number, and at the same time, the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal; otherwise, Illegal.
2. The terminal authentication monitoring system based on bypass monitoring according to claim 1 is characterized in that: The business management platform performs the following operations to obtain the business confirmation response result: The business management platform calls the business authorization platform corresponding to the business request type, obtains business response information based on the business request user number and the business request type, and obtains a business confirmation response result consisting of the business response information, business request user number, business request type and user key confirmation information.
3. The terminal authentication monitoring system based on bypass monitoring according to claim 2 is characterized in that: If it is illegal, the business management platform will feedback to the call center that no business confirmation response result has been received.
4. The terminal authentication monitoring system based on bypass monitoring according to claim 3 is characterized in that: The rights confirmation monitoring platform monitors the call center link carrying the communication process in a bypass channel to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information; Parsing the call control information, and parsing the user key confirmation information from the DTMF information in the call control information; The time at which the monitored user key confirmation information is inputted is used as the user key confirmation completion time; The monitored user number is used as the monitored user number.
5. The terminal authentication monitoring system based on bypass monitoring according to claim 4 is characterized in that: The service authorization is a positioning service, the service request type is to obtain the real-time location information of the user, and the service authorization platform corresponding to the service request type is a real-time positioning platform.
6. The terminal authentication monitoring system based on bypass monitoring according to claim 5 is characterized in that: The system also includes a rights confirmation query interface, for the business management platform to query the historical business rights confirmation information stored in the rights confirmation monitoring platform based on the rights confirmation query interface.
7. The terminal authentication monitoring system based on bypass monitoring according to claim 6 is characterized in that: The title confirmation query interface includes: The time setting sub-interface allows the business management platform to query the business right confirmation information within a specified time period; User number setting sub-interface, for the service management platform to query the service confirmation information of the specified user number; The key confirmation information sub-interface is used by the business management platform to query the business confirmation information of the specified user's key confirmation information; The confirmation status sub-interface is used by the business management platform to query the business confirmation information under the specified confirmation status.
Citation Information
Patent Citations
User-triggered mobile positioning authority control method and system
CN102685773A
Method and device for immediately positioning calling terminal
CN104683943A
Terminal right confirmation monitoring method based on bypass monitoring
CN115604711A