A terminal rights confirmation monitoring method based on bypass monitoring

Abstract

The present invention relates to a terminal rights confirmation monitoring method based on bypass monitoring, which belongs to the field of telecommunications operator support technology and solves the problem that the existing technology cannot realize advance rights confirmation behavior monitoring. The method includes: when a call center needs to obtain service authorization, it sends a user key request matching the service authorization to the user terminal, and receives user key confirmation information from the user terminal in response to the user key request, and also generates a service request instruction based on the user key confirmation information and sends it to the service management platform; the rights confirmation monitoring platform bypasses the communication process between the call center and the user terminal, and generates service rights confirmation information when the user key confirmation information is monitored; the service management platform determines whether the service request instruction is legal based on the service rights confirmation information, and if it is legal, generates a service rights confirmation response result, and feeds back the service rights confirmation response result to the call center; the call center obtains corresponding service authorization based on the service rights confirmation response result.

Description

Technical Field

[0001] The present invention relates to the field of telecommunication operator support technology, and in particular to a terminal rights confirmation and monitoring method based on bypass monitoring. Background Art

[0002] When a mobile phone user calls the call center customer service number of an enterprise (such as insurance, bank, etc.), the user will perform confirmation operations as needed (for example, whether the user agrees to the enterprise's real-time active positioning of the terminal's location, allows the enterprise to obtain the current location of the terminal, etc.). If the user confirms, he will be asked to press a specific button on the mobile phone to complete the confirmation (for example, 999#).

[0003] Since some of the company's operations involve the acquisition of user privacy, the information provision platform that provides this information needs to ensure that each business operation of the company has obtained the user's confirmation and authorization in advance.

[0004] Under the current circumstances, there is no feasible technical solution for monitoring prior property rights confirmation behavior, and the only way is to conduct post-event spot checks through user follow-up visits and other means. Summary of the Invention

[0005] In view of the above analysis, the embodiment of the present invention aims to provide a terminal rights confirmation monitoring method based on bypass monitoring, so as to solve the problem that the existing technology cannot realize the monitoring of the rights confirmation behavior in advance.

[0006] A terminal authentication and monitoring method based on bypass monitoring, comprising:

[0007] When the call center needs to obtain service authorization, it sends a user key press request matching the service authorization to the user terminal, receives user key press confirmation information from the user terminal in response to the user key press request, and generates a service request instruction based on the user key press confirmation information and sends it to the service management platform;

[0008] The right confirmation monitoring platform monitors the communication process between the call center and the user terminal in a bypass manner, and generates service right confirmation information when the user presses a key to confirm information;

[0009] The service management platform determines whether the service request instruction is legal based on the service right confirmation information. If legal, it generates a service right confirmation response result based on the service request instruction and feeds back the service right confirmation response result to the call center.

[0010] The call center obtains corresponding service authorization based on the service authorization response result.

[0011] On the basis of the above solution, the present invention also makes the following improvements:

[0012] Furthermore, the call center needs to establish communication with the user terminal before obtaining service authorization.

[0013] Furthermore, when the call center needs to obtain service authorization, it generates a service request instruction by performing the following operations:

[0014] Receive the user's key confirmation information and record the service request time and service request user number;

[0015] Determine whether the received user key confirmation information matches the standard key confirmation information in the user key request,

[0016] If there is no match, the user is prompted to re-enter the user key confirmation information;

[0017] If there is a match, the corresponding service request type is queried based on the key confirmation information to obtain the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information.

[0018] Furthermore, the rights confirmation monitoring platform monitors the communication process in a side channel and generates business rights confirmation information by performing the following operations:

[0019] Record the user key confirmation completion time, monitoring user number, and user key confirmation information when the user key confirmation information is monitored;

[0020] Determine whether the monitored user key confirmation information matches the standard key confirmation information in the user key request. If so, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed.

[0021] The service authorization information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the authorization status is obtained.

[0022] Furthermore, the right confirmation monitoring platform obtains the user key confirmation completion time, monitoring user number, and user key confirmation information by performing the following operations:

[0023] The rights confirmation monitoring platform monitors the call center link carrying the communication process in a bypass manner to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information;

[0024] Parsing the call control information, and parsing the user key confirmation information from the DTMF information in the call control information;

[0025] The time when the monitored user key confirmation information is inputted is used as the user key confirmation completion time;

[0026] The monitored user number is used as the monitored user number.

[0027] Furthermore, the service management platform determines whether the service request instruction is legal by performing the following operations:

[0028] If the confirmation status is confirmed, and the service request user number is consistent with the monitoring user number, and the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal;

[0029] otherwise,

[0030] Illegal.

[0031] Furthermore, the business management platform performs the following operations to obtain the business right confirmation response result:

[0032] The service management platform calls the service authorization platform corresponding to the service request type, obtains service response information based on the service request user number and the service request type, and obtains a service authorization response result consisting of the service response information, service request user number, service request type and user key confirmation information.

[0033] Furthermore, if it is illegal, the business management platform will feedback to the call center that no business right confirmation response result has been received.

[0034] Furthermore, the service authorization is a positioning service, the service request type is to obtain the real-time location information of the user, and the service authorization platform corresponding to the service request type is a real-time positioning platform.

[0035] Furthermore, it also includes:

[0036] The business management platform queries the historical business rights confirmation information stored in the rights confirmation monitoring platform:

[0037] The business management platform specifies a time period and obtains business ownership information within the specified time period by querying the ownership monitoring platform;

[0038] The service management platform specifies a user number and obtains service right confirmation information of the specified user number by querying the right confirmation monitoring platform;

[0039] The business management platform specifies key confirmation information, and obtains the business right confirmation information of the specified user key confirmation information by querying the right confirmation monitoring platform;

[0040] The business management platform specifies the right confirmation status and obtains the business right confirmation information under the right confirmation status by querying the right confirmation monitoring platform.

[0041] Compared with the prior art, the present invention can achieve at least one of the following beneficial effects:

[0042] The terminal authentication and monitoring method based on bypass monitoring provided by the present invention is

[0043] On the one hand, the communication process between the call center and the user terminal is monitored in real time by using the rights confirmation monitoring platform, which can realize the pre-emptive monitoring of the terminal's rights confirmation behavior, solving the problem that there is no feasible technical solution for pre-emptive rights confirmation behavior monitoring in the existing technology;

[0044] On the other hand, the business management platform is used to determine whether the business request instruction is legal based on the business confirmation information, and a business confirmation response result is generated only when it is legal. This avoids the low security problems in the process of generating business confirmation response results by relying solely on business request instructions, or the reduced reliability of business confirmation response results due to malicious tampering with business request instructions, and can effectively improve the security and reliability of the terminal confirmation monitoring process.

[0045] In addition, the terminal rights confirmation and monitoring method based on bypass monitoring provided by the present invention has a clear execution process, and the interaction process is fast, simple and easy to implement. It can effectively improve the terminal rights confirmation and monitoring process, and has no impact on the communication process between the call center and the user terminal.

[0046] In the present invention, the above-mentioned technical solutions can be combined with each other to achieve more preferred combinations. Other features and advantages of the present invention will be described in the following description, and some advantages will become apparent from the description or be learned through practice of the present invention. The objectives and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The accompanying drawings are only for the purpose of illustrating particular embodiments and are not to be considered limiting of the present invention. Like reference symbols denote like parts throughout the drawings.

[0048] Figure 1 Flowchart of a terminal authentication and monitoring method based on bypass monitoring provided by an embodiment of the present invention;

[0049] Figure 2 A flow chart of another terminal authentication and monitoring method based on bypass monitoring provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0050] The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, and are not used to limit the scope of the present invention.

[0051] Example 1

[0052] A specific embodiment of the present invention discloses a terminal authentication monitoring method based on bypass monitoring, the flow chart is as follows: Figure 1 and Figure 2 As shown, the method involves information interaction between a call center, a user terminal, a rights confirmation monitoring platform, and a business management platform; the method includes the following steps:

[0053] Step S1: When the call center needs to obtain service authorization, it sends a user key press request matching the service authorization to the user terminal, receives user key press confirmation information from the user terminal in response to the user key press request, and generates a service request instruction based on the user key press confirmation information and sends it to the service management platform;

[0054] Step S2: The rights confirmation monitoring platform monitors the communication process between the call center and the user terminal in a bypass manner, and generates service rights confirmation information when the user presses a key to confirm information;

[0055] Step S3: The service management platform determines whether the service request instruction is legal based on the service right confirmation information. If legal, it generates a service right confirmation response result based on the service request instruction and feeds back the service right confirmation response result to the call center.

[0056] Step S4: The call center obtains corresponding service authorization based on the service authorization response result.

[0057] Compared with the prior art, the terminal authentication monitoring method based on bypass monitoring provided by this embodiment can realize the advance monitoring of terminal authentication behavior by setting up an authentication monitoring platform to conduct real-time bypass monitoring of the communication process between the call center and the user terminal, solving the problem that there is no feasible technical solution for monitoring the authentication behavior in advance in the prior art; at the same time, the business management platform determines whether the business request instruction is legal based on the business authentication information, and only generates a business authentication response result when it is legal, avoiding the low security in the process of generating the business authentication response result by relying solely on the business request instruction, or the reduced reliability of the business authentication response result caused by malicious tampering with the business request instruction, and can effectively improve the security and reliability of the terminal authentication monitoring process. In addition, the terminal authentication monitoring method based on bypass monitoring provided by this embodiment has a clear execution process, a fast, simple and easy-to-implement interactive process, can effectively improve the terminal authentication monitoring process, and has no impact on the communication process between the call center and the user terminal.

[0058] Before executing step S1 , that is, before the call center needs to obtain service authorization, communication between the call center and the user terminal is first established.

[0059] In this embodiment, the call center refers to a customer service call center that interacts with user terminals; the title confirmation monitoring platform refers to a third-party monitoring platform that monitors the communication process; and the business management platform refers to a comprehensive business management platform for centrally managing the title confirmation monitoring process. For example, when this method is applied to insurance claims, the call center can be an insurance claims customer service call center, and the business management platform can be an insurance claims business management platform.

[0060] It should be noted that the call center stores a first mapping relationship table: used to store the mapping relationship between service authorization-standard key confirmation information-service request type. For example, for the specific service of positioning service, the following contents are stored in the mapping relationship table:

[0061] Business authorization: positioning business;

[0062] Standard key confirmation information: 123# (for example only, other designated keys or key combinations can be preset according to specific circumstances);

[0063] Service request type: obtain the real-time location information of the user.

[0064] During a call between a user terminal and a call center, the call center may need to obtain authorization for a specific service. In this case, the call center can query the first mapping table to obtain the standard key confirmation information corresponding to the current service authorization. Based on the standard key confirmation information, the call center forms a user key request and sends it to the user terminal. A common method for user key requests is voice, such as prompting the user to press a specified key or key combination. Upon receiving the user key request, the user terminal executes the key operation according to the voice prompt and feeds back the complete key operation performed by the user as user key confirmation information to the call center.

[0065] In step S1, when the call center needs to obtain service authorization, it generates a service request instruction by performing the following operations:

[0066] Step S11: receiving the user's key confirmation information and recording the service request time and service request user number;

[0067] Step S12: Obtain the standard key confirmation information in the user key request by querying the first mapping relationship table; determine whether the received user key confirmation information matches the standard key confirmation information in the user key request,

[0068] Step S13: If there is no match, prompt the user to re-enter the user key confirmation information;

[0069] Step S14: If there is a match, query the first mapping relationship table based on the key confirmation information to obtain the corresponding service request type, and obtain the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information.

[0070] It should be noted that the right confirmation monitoring platform stores a second mapping relationship table: which is used to store the mapping relationship between business authorization and standard key confirmation information.

[0071] Preferably, in step S2, the ownership confirmation monitoring platform performs the following operations to generate business ownership confirmation information:

[0072] Step S21: Recording the user key confirmation completion time, the monitored user number, and the user key confirmation information when the user key confirmation information is monitored;

[0073] Specifically, the right confirmation monitoring platform obtains the user key confirmation completion time, the monitored user number and the user key confirmation information by performing the following operations:

[0074] In a side channel, the call center link carrying the communication process is monitored to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information;

[0075] Parse the call control information, and derive user key confirmation information from the DTMF (Dual Tone MultiFrequency) information in the call control information; use the time when the monitored user key confirmation information is input as the user key confirmation completion time; and use the monitored user number as the monitored user number.

[0076] The bypass monitoring process described above is based on DTMF signals. DTMF signals, also known as dual-tone signals, were first used in program-controlled telephone exchange systems to replace dial pulse signals. After the calling user picks up the phone and dials the number, the DTMF signal corresponding to the phone number is transmitted through the telephone line to the DTMF receiving circuit in the program-controlled exchange. The microcomputer in the exchange recognizes the called number and connects the calling and called users to complete the conversation. There are three ways to transmit DTMF in signaling:

[0077] Method 1: Out-of-band detection uses DTMF data transmitted through the signaling channel. VoIP calls, such as SIP and H.323, generally use out-of-band detection. For example, in SIP signaling, DTMF digits are transmitted in SIP INFO messages.

[0078] Method 2: In-band detection, transmitted via RTP, uses a special rtpPayloadType (TelephonyEvent) to identify RFC2833 (RTP Payload for DTMF Digits, Telephony Tones and Telephony Signals) packets. The same DTMF key press often corresponds to multiple RTP packets, each with the same timestamp, which can be used to identify the same key press. The end flag in the last RTP packet is set to 1, indicating the end of the DTMF data.

[0079] Method 3: In-band detection, DTMF is transmitted mixed with regular voice packets. The only way to perform in-band DTMF detection is to extract the voice packets and perform spectrum analysis. This analysis determines the high and low frequencies, and then uses a table lookup to determine the corresponding keystrokes. The spectrum analysis algorithm is typically Goertzel. This transmission method can cause distortion after complex encoding and decoding, resulting in DTMF detection errors or failures. It is not recommended. Calls controlled by ISUP often use in-band detection.

[0080] Regardless of the above DTMF transmission method, the keystroke behavior of the user terminal can be collected and analyzed through signaling monitoring. The corresponding monitoring method can be selected according to the specific application scenario.

[0081] Step S22: Obtain the standard key confirmation information in the user key request by querying the second mapping relationship table; determine whether the monitored user key confirmation information matches the standard key confirmation information in the user key request; if so, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed;

[0082] Step S23: Obtain the service authorization information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the authorization status.

[0083] It should be noted that the service management platform stores a third mapping relationship table: used to store the mapping relationship between service authorization-standard key confirmation information-service request type-service authorization platform. For example, for the specific service of positioning service, the following contents are stored in the mapping relationship table:

[0084] Business authorization: positioning business;

[0085] Standard key confirmation information: 123# (for example only, other designated keys or key combinations can be preset according to specific circumstances);

[0086] Service request type: obtain the real-time location information of the user.

[0087] Business authorization platform: real-time positioning platform.

[0088] It should be emphasized that there is some identical mapping information in the first to third mapping tables. When a mapping table updates the same part of the mapping information, the other mapping tables are updated synchronously to ensure the consistency of the same mapping information in different mapping tables.

[0089] Preferably, step 3 includes:

[0090] Step 31: The service management platform determines whether the service request instruction is legal based on the service right confirmation information:

[0091] If the authorization status is confirmed, and the service request user number is consistent with the monitoring user number, and at the same time, the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal; otherwise, it is illegal.

[0092] Step 32: The business management platform performs the following operations to obtain the business right confirmation response result:

[0093] The service management platform obtains the service authorization platform corresponding to the service request type by querying the third mapping relationship table, and calls the service authorization platform to obtain service response information based on the service request user number and the service request type, thereby obtaining a service authorization response result consisting of the service response information, the service request user number, the service request type, and user key confirmation information. For example, when the service authorization is a positioning service, the location of the service request user number can be located, and the positioning result can be used as the service response information.

[0094] Step S33: The business management platform feeds back the business right confirmation response result to the call center.

[0095] Preferably, in order to facilitate the service management platform to check or query the ownership information of a certain user number, a certain period of time, a certain service authorization or a certain ownership status, the method may further include the following steps:

[0096] Step S5: The business management platform queries the historical business ownership confirmation information stored in the ownership confirmation monitoring platform:

[0097] The business management platform specifies a time period and obtains business ownership information within the specified time period by querying the ownership monitoring platform;

[0098] The service management platform specifies a user number and obtains service right confirmation information of the specified user number by querying the right confirmation monitoring platform;

[0099] The business management platform specifies key confirmation information, and obtains the business right confirmation information of the specified user key confirmation information by querying the right confirmation monitoring platform;

[0100] The business management platform specifies the right confirmation status and obtains the business right confirmation information under the right confirmation status by querying the right confirmation monitoring platform.

[0101] The above steps can be implemented based on setting an interface. Specifically, the interface can be a title confirmation query interface, for the business management platform to query the historical business title confirmation information stored in the title confirmation monitoring platform based on the title confirmation query interface. Exemplarily, the title confirmation query interface includes:

[0102] The time setting sub-interface allows the business management platform to query business rights confirmation information within a specified time period;

[0103] User number setting sub-interface, for the service management platform to query the service right confirmation information of the specified user number;

[0104] The key confirmation information sub-interface is used by the business management platform to query the business right confirmation information of the specified user's key confirmation information;

[0105] The confirmation status sub-interface is used by the business management platform to query the business confirmation information under the specified confirmation status.

[0106] Those skilled in the art will appreciate that all or part of the process steps of the above-described embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, such as a magnetic disk, an optical disk, a read-only memory, or a random access memory.

[0107] The above description is only a preferred specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by any technician familiar with this technical field within the technical scope disclosed by the present invention should be covered by the scope of protection of the present invention.

Claims

1. A terminal authentication and monitoring method based on bypass monitoring, characterized in that: include: When the call center needs to obtain service authorization, it sends a user key press request matching the service authorization to the user terminal, receives user key press confirmation information from the user terminal in response to the user key press request, and generates a service request instruction based on the user key press confirmation information and sends it to the service management platform; The right confirmation monitoring platform monitors the communication process between the call center and the user terminal in a bypass manner, and generates service right confirmation information when the user presses a key to confirm information; The service management platform determines whether the service request instruction is legal based on the service right confirmation information. If legal, it generates a service right confirmation response result based on the service request instruction and feeds back the service right confirmation response result to the call center. The call center obtains corresponding service authorization based on the service right confirmation response result; The call center stores a first mapping relationship table for storing mapping relationships between service authorization, standard key confirmation information, and service request types. When the call center needs to obtain service authorization, it generates a service request instruction by performing the following operations: Receive the user's key confirmation information and record the service request time and service request user number; Determine whether the received user key confirmation information matches the standard key confirmation information in the user key request, If there is no match, the user is prompted to re-enter the user key confirmation information; If there is a match, the corresponding service request type is queried based on the key confirmation information to obtain the service request instruction consisting of the service request time, service request user number, service request type and user key confirmation information; The right confirmation monitoring platform stores a second mapping relationship table for storing a mapping relationship between service authorization and standard key confirmation information; the right confirmation monitoring platform monitors the communication process in a bypass channel and generates service right confirmation information by performing the following operations: Record the user key confirmation completion time, monitoring user number, and user key confirmation information when the user key confirmation information is monitored; Determine whether the monitored user key confirmation information matches the standard key confirmation information in the user key request. If so, the confirmation status is confirmed; otherwise, the confirmation status is unconfirmed. Obtain the service authorization information consisting of the user key confirmation completion time, the monitoring user number, the user key confirmation information and the authorization status; The service management platform determines whether the service request instruction is legal by performing the following operations: If the confirmation status is confirmed, and the service request user number is consistent with the monitoring user number, and the time deviation between the service request time and the user key confirmation completion time is within the set time deviation range, then the service request instruction is legal; otherwise, Illegal.

2. The terminal authentication and monitoring method based on bypass monitoring according to claim 1 is characterized in that: Before the call center needs to obtain service authorization, it first establishes communication between the call center and the user terminal.

3. The terminal authentication and monitoring method based on bypass monitoring according to claim 1, characterized in that: The right confirmation monitoring platform obtains the user key confirmation completion time, monitoring user number, and user key confirmation information by performing the following operations: The rights confirmation monitoring platform monitors the call center link carrying the communication process in a bypass manner to obtain a monitoring signaling protocol; the monitoring signaling protocol includes call control information; Parsing the call control information, and parsing the user key confirmation information from the DTMF information in the call control information; The time when the monitored user key confirmation information is inputted is used as the user key confirmation completion time; The monitored user number is used as the monitored user number.

4. The terminal authentication and monitoring method based on bypass monitoring according to claim 3 is characterized in that: The business management platform performs the following operations to obtain the business right confirmation response result: The service management platform calls the service authorization platform corresponding to the service request type, obtains service response information based on the service request user number and the service request type, and obtains a service authorization response result consisting of the service response information, service request user number, service request type and user key confirmation information.

5. The terminal authentication and monitoring method based on bypass monitoring according to claim 1 or 4, characterized in that: If it is illegal, the business management platform will feedback to the call center that no business right confirmation response result has been received.

6. The terminal authentication and monitoring method based on bypass monitoring according to claim 4 is characterized in that: The service authorization is a positioning service, the service request type is to obtain the real-time location information of the user, and the service authorization platform corresponding to the service request type is a real-time positioning platform.

7. The terminal authentication and monitoring method based on bypass monitoring according to claim 1, characterized in that: Also includes: The business management platform queries the historical business rights confirmation information stored in the rights confirmation monitoring platform: The business management platform specifies a time period and obtains business ownership information within the specified time period by querying the ownership monitoring platform; The service management platform specifies a user number and obtains service right confirmation information of the specified user number by querying the right confirmation monitoring platform; The business management platform specifies key confirmation information, and obtains the business right confirmation information of the specified user key confirmation information by querying the right confirmation monitoring platform; The business management platform specifies the right confirmation status and obtains the business right confirmation information under the right confirmation status by querying the right confirmation monitoring platform.

Images