User position verification method and device, electronic equipment and storage medium

Abstract

Embodiments of the present application provide a user position verification method and device, electronic equipment and a storage medium, the method comprising: obtaining first call information based on WiFi call and second call information based on cellular cell call; determining first time information and first position information of accessing WiFi according to the first call information, and determining second time information and second position information of accessing cellular cell according to the second call information; using the first time information, the first position information, the second time information and the second position information to calculate the access speed between accessing WiFi and accessing cellular cell; if the access speed is greater than or equal to a speed threshold, the position of the user is verified to be abnormal. Embodiments of the present application can effectively enhance the traceability of VoIP, accurately trace the position of VoWiFi user, meet the "anti-remote" regulatory requirements, and greatly enhance the network security capability.

Description

Technical Field

[0001] This invention relates to the field of emerging information technology, and in particular to a user location verification method, a user location verification device, an electronic device, and a computer-readable storage medium. Background Technology

[0002] Indoor wireless signal coverage has always been a challenge for operators. Insufficient indoor coverage leads to problems such as poor voice call quality. Providing wireless network coverage in high-density urban residential areas requires a huge amount of manpower, material resources, and financial resources.

[0003] Thanks to the rapid development of the WiFi (Wireless Fidelity) industry, WiFi has been applied to all aspects of life. Utilizing WiFi as a coverage extension of mobile cellular networks, WiFi provides a smooth service experience through seamless bidirectional switching between the two networks.

[0004] VoWiFi (Voice over WiFi) refers to operators providing voice services to users using WiFi hotspots. As the VoWiFi terminal industry chain matures, VoWiFi is becoming increasingly popular. However, according to regulatory requirements, basic telecommunications companies are strengthening caller ID authentication and call tracing. They are strictly regulating the range of number segments that enterprise customers can use, and must retain communication data according to relevant regulations and time limits, cooperating in call tracing and retrospective investigations. Because VoWiFi's basic solutions lack the tracing capabilities required by regulations, it is not yet commercially available. Summary of the Invention

[0005] In view of the above problems, embodiments of the present invention are proposed to provide a user location verification method that overcomes or at least partially solves the above problems.

[0006] This invention also provides a user location verification device, an electronic device, and a storage medium to ensure the implementation of the above method.

[0007] To address the aforementioned problems, this invention discloses a user location verification method, the method comprising:

[0008] Obtain the first call detail record (CDR) information of the user based on Wi-Fi, and obtain the second CDR information of the user based on cellular calls;

[0009] Based on the first call detail record (CDR) information, the first access point information for accessing the WiFi is determined, and based on the second CDR information, the second access point information for accessing the cellular network is determined; wherein, the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information;

[0010] Using the first time information, the first location information, the second time information, and the second location information, the access speed between accessing the WiFi and accessing the cellular network is calculated;

[0011] Determine whether the access speed is greater than or equal to the speed threshold;

[0012] If the access speed is greater than or equal to the speed threshold, then the user's location is detected as abnormal.

[0013] Optionally, determining the first access point information for accessing the WiFi based on the first call detail record (CDR) information includes:

[0014] Extract the first time information and broadband account information from the first call detail record (CDR) information; the first time information is the time when the user makes the WiFi call.

[0015] Query the first location information corresponding to the broadband account information;

[0016] The first time information and the first location information are determined as the first access point information for accessing the WiFi.

[0017] Optionally, determining the second access point information for accessing the cellular cell based on the second call detail record (CDR) information includes:

[0018] Extract the second time information and base station cell information from the second call detail record information; the second time information is the time when the user makes a call based on the cellular cell.

[0019] Query the second location information corresponding to the base station cell information;

[0020] The second time information and the second location information are determined as the second access point information for accessing the cellular cell.

[0021] Optionally, calculating the access speed between accessing the WiFi and accessing the cellular network using the first time information, the first location information, the second time information, and the second location information includes:

[0022] Using the first location information and the second location information, calculate the access distance interval between accessing the WiFi and accessing the cellular cell;

[0023] Using the first time information and the second time information, calculate the access time interval between accessing the WiFi and accessing the cellular cell;

[0024] The access speed between accessing the WiFi and accessing the cellular network is calculated using the access distance interval and the access time interval.

[0025] Optionally, before determining whether the access speed is greater than or equal to the speed threshold, the method further includes:

[0026] Based on the first location information, obtain the corresponding first road traffic information; the first road traffic information includes a first speed limit.

[0027] Based on the second location information, obtain the corresponding second road traffic information; the second road traffic information includes a second speed limit.

[0028] Calculate the average speed of the first speed limit and the second speed limit;

[0029] The average speed is determined as the speed threshold.

[0030] Optionally, after determining whether the access speed is greater than or equal to the speed threshold, the method further includes:

[0031] If the access speed is less than the speed threshold, it is determined that the user's location is not abnormal.

[0032] Optionally, the step of verifying that the user's location is abnormal if the access speed is greater than or equal to the speed threshold includes:

[0033] If the access speed is greater than or equal to the speed threshold, then determine whether the access time interval is greater than or equal to the time threshold;

[0034] If the access time interval is greater than or equal to the time threshold, then the user's location is found to be abnormal.

[0035] Optionally, after determining whether the access time interval is greater than or equal to a time threshold, the method further includes:

[0036] If the access time interval is less than the time threshold, it is verified that the user's location is not abnormal.

[0037] This invention also discloses a user location verification device, the device comprising:

[0038] The call detail record (CDR) information acquisition module is used to acquire the first CDR information of the user based on WiFi calls, and to acquire the second CDR information of the user based on cellular calls.

[0039] The access point information determination module is used to determine first access point information for accessing the WiFi based on the first call detail record (CDR) information, and to determine second access point information for accessing the cellular network based on the second CDR information; wherein the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information;

[0040] The access speed calculation module is used to calculate the access speed between accessing the WiFi and accessing the cellular network using the first time information, the first location information, the second time information, and the second location information.

[0041] The first judgment module is used to determine whether the access speed is greater than or equal to the speed threshold.

[0042] The first verification module is used to verify that the user's location is abnormal if the access speed is greater than or equal to the speed threshold.

[0043] Optionally, the access point information determination module includes:

[0044] The first extraction submodule is used to extract first time information and broadband account information from the first call detail record information; the first time information is the time when the user makes the WiFi call.

[0045] The first query submodule is used to query the first location information corresponding to the broadband account information;

[0046] The first access point information determination submodule is used to determine the first time information and the first location information as the first access point information for accessing the WiFi.

[0047] Optionally, the access point information determination module includes:

[0048] The second extraction submodule is used to extract second time information and base station cell information from the second call detail record information; the second time information is the time when the user makes a call based on the cellular cell.

[0049] The second extraction submodule is used to query the second location information corresponding to the base station cell information;

[0050] The second extraction submodule is used to determine the second time information and the second location information as the second access point information for accessing the cellular cell.

[0051] Optionally, the access speed calculation module includes:

[0052] An access distance interval calculation submodule is used to calculate the access distance interval between accessing the WiFi and accessing the cellular cell using the first location information and the second location information.

[0053] The access time interval calculation submodule is used to calculate the access time interval between accessing the WiFi and accessing the cellular cell using the first time information and the second time information.

[0054] The access speed calculation submodule is used to calculate the access speed between accessing the WiFi and accessing the cellular network using the access distance interval and the access time interval.

[0055] Optionally, before determining whether the access speed is greater than or equal to the speed threshold, the method further includes:

[0056] The first road traffic information acquisition module is used to acquire corresponding first road traffic information based on the first location information; the first road traffic information includes a first speed limit.

[0057] The second road traffic information acquisition module is used to acquire corresponding second road traffic information based on the second location information; the second road traffic information includes a second speed limit.

[0058] The speed average calculation module is used to calculate the speed average between the first speed limit and the second speed limit;

[0059] A speed threshold determination module is used to determine the average speed as a speed threshold.

[0060] Optionally, after determining whether the access speed is greater than or equal to the speed threshold, the method further includes:

[0061] The second verification module is used to verify that the user's location is not abnormal if the access speed is less than the speed threshold.

[0062] Optionally, the first verification module includes:

[0063] The second judgment submodule is used to determine whether the access time interval is greater than or equal to the time threshold if the access speed is greater than or equal to the speed threshold.

[0064] The first verification submodule is used to verify that the user's location is abnormal if the access time interval is greater than or equal to the time threshold.

[0065] Optionally, after determining whether the access time interval is greater than or equal to a time threshold, the method further includes:

[0066] The third verification module is used to verify that the user's location is not abnormal if the access time interval is less than the time threshold.

[0067] This invention also discloses an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0068] The memory is used to store computer programs;

[0069] When the processor executes the program stored in the memory, it implements the user location verification method as described in the embodiments of the present invention.

[0070] This invention also discloses one or more computer-readable media storing instructions that, when executed by one or more processors, cause the processors to perform the user location verification method as described in this invention.

[0071] Compared with the prior art, the embodiments of the present invention have the following advantages:

[0072] In this embodiment of the invention, first call detail record (CDR) information of a user's WiFi-based call and second call detail record (CDR) information of a user's cellular-based call are obtained. Based on the first CDR information, first access point information for WiFi access is determined, and based on the second CDR information, second access point information for cellular access is determined. The first access point information includes first time information and first location information, and the second access point information includes second time information and second location information. Using the first time information, first location information, second time information, and second location information, the access speed between the WiFi access and the cellular access is calculated. It is determined whether the access speed is greater than or equal to a speed threshold. If the access speed is greater than or equal to the speed threshold, the user's location is verified to be abnormal. This embodiment of the invention verifies whether a user's location is abnormal based on the access speed between the WiFi access and the cellular access, which can effectively enhance the traceability capability of VoIP, accurately trace the location of VoWiFi users, meet the "anti-remote-tracing" regulatory requirements, and greatly enhance cybersecurity capabilities. Attached Figure Description

[0073] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0074] Figure 1 This is a flowchart of the steps of a user location verification method provided in an embodiment of the present invention;

[0075] Figure 2 This is an interactive schematic diagram of the source tracing scheme based on fixed-mobile fusion provided in an embodiment of the present invention;

[0076] Figure 3 This is a schematic diagram of the coordinate system provided in an embodiment of the present invention;

[0077] Figure 4 This is a flowchart of the speed threshold calculation method provided in the embodiments of the present invention;

[0078] Figure 5 This is a schematic diagram of the speed marker map provided in an embodiment of the present invention;

[0079] Figure 6 This is a flowchart of the user location verification process provided in an embodiment of the present invention;

[0080] Figure 7 This is a structural block diagram of a user location verification device provided in an embodiment of the present invention. Detailed Implementation

[0081] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0082] Indoor Wi-Fi coverage has always been a challenge for telecom operators. Insufficient indoor coverage leads to poor voice call quality and is a major source of user complaints. Statistics show that approximately 70% of user calls occur indoors. However, providing wireless network coverage in high-density urban residential areas requires enormous manpower, resources, and financial investment. Therefore, operators urgently need a cost-effective method to supplement coverage.

[0083] Thanks to the rapid development of the WiFi industry, WiFi has been applied to all aspects of life. As a non-3GPP (3rd Generation Partnership Project) access method, WiFi can access the mobile core network. Compared with coverage enhancement solutions such as indoor distributed antenna systems and small cells (low-power wireless access nodes), using WiFi as a coverage extension of the mobile cellular network can solve voice and SMS problems caused by weak coverage in urban and rural areas. It is an economical and efficient solution. Furthermore, WiFi can provide a smooth service experience through seamless bidirectional switching with the mobile cellular network.

[0084] After certain types of mobile terminals implemented VoWiFi support, many chip manufacturers subsequently launched chips that supported VoWiFi, and the VoWiFi terminal industry chain gradually matured. Furthermore, many mainstream device manufacturers have also subsequently supported VoWiFi features.

[0085] According to 3GPP definitions and different mobility management protocols, VoWiFi networking has three main schemes: trusted domain access, untrusted domain access, and direct connection to IMS (IP Multimedia Subsystem) access. The VoWiFi industry is favored by many countries and operators, with some mainstream operators adopting an untrusted domain ePDG (Evolved Packet Data Gateway) access scheme based on S2b (Supply chain platform to business, serving SMEs' supply chain platform).

[0086] However, according to regulatory requirements, basic telecommunications companies are strengthening caller ID authentication and call tracing. They are strictly regulating the range of number segments that enterprise customers can use, and must retain communication data according to relevant regulations and time limits, cooperating in call tracing and retrospective investigations. Because VoWiFi's basic solution lacks the tracing capabilities required by regulations, it is not yet commercially available.

[0087] To address the aforementioned issues, this invention provides a user location verification method. This method verifies whether a user's location is abnormal based on the access speed between the access WiFi and the access cellular cell. This effectively enhances the traceability capability of VoIP, accurately traces the location of VoWiFi users, meets the "anti-remote access" regulatory requirements, and greatly enhances cybersecurity capabilities.

[0088] Reference Figure 1The diagram illustrates a user location verification method according to an embodiment of the present invention. The method may specifically include the following steps:

[0089] Step 101: Obtain the first call detail record (CDR) information of the user based on WiFi calls, and obtain the second CDR information of the user based on cellular calls.

[0090] In this embodiment of the invention, it can be applied to an anti-remote call module, which can be a module on the traceability gateway side used to perform the anti-remote call function. The anti-remote call module can obtain the first call detail record (CDR) information of a user's WiFi-based call and the second CDR information of a user's cellular-based call. Specifically, the first CDR information can refer to the CDR information generated when the user makes a call after accessing WiFi, and the second CDR information can refer to the CDR information generated when the user makes a call after accessing cellular data. The first and second CDR information can be generated adjacently, that is, the user's two adjacent calls are respectively based on WiFi and cellular data.

[0091] The first call detail record (CDR) can be a VoWiFi CDR, and the second CDR can be a VoLTE CDR or a VoNR CDR.

[0092] VoWiFi (Voice over WiFi) refers to a service provided by mobile internet operators using WiFi hotspots to offer voice services to users. Through VoWiFi technology, users can access WiFi and make and receive voice or video calls while using mobile internet.

[0093] VoLTE (Voice over LTE) is a voice service based on IMS. It is an IP data transmission technology that does not require 2G / 3G networks. All services are carried on the 4G network, enabling the unification of data and voice services on the same network.

[0094] VoNR (Voice over New Radio) is a new radio interface for voice communication, and it's the target voice solution for 5G networks. In other words, the radio access portion of 5G is called NR, and voice services based on 5G are called VoNR. This means that NR users can directly conduct voice services on the NR network without falling back to the LTE (Long Term Evolution) network, thus obtaining a higher quality voice service experience and a higher data service experience.

[0095] VoWiFi, VoLTE, and VoNR can all be implemented based on IMS. IMS (IP Multimedia Subsystem) is a brand-new form of multimedia service that can meet the newer and more diversified multimedia service needs of today's end customers.

[0096] Reference Figure 2 This diagram illustrates the interaction of the fixed-mobile convergence-based tracing scheme provided in this embodiment of the invention. The anti-remote module can obtain IMS call detail records from IMS through ePDG (Evolved Packet Data Gateway), EPC (Evolved Packet Core) / 5GC (5G Core Network) on the tracing gateway side. The IMS call detail records may include VoWiFi call detail records for user WiFi-based calls, as well as VoLTE call detail records or VoNR call detail records for user cellular-based calls.

[0097] Step 102: Based on the first call detail record (CDR) information, determine the first access point information for accessing the WiFi, and based on the second CDR information, determine the second access point information for accessing the cellular network; wherein the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information.

[0098] In this embodiment of the invention, the anti-remote-access module can analyze IMS call detail records (CDRs), extract information based on fields, and generate CDR statistics. Specifically, the first CDR information includes the first access point information for the user's WiFi access. The first access point information may include first time information and first location information. Therefore, the anti-remote-access module can extract the first time information and first location information for the user's WiFi access from the first CDR information. Similarly, the second CDR information includes the second access point information for the user's cellular access. The second access point information may include second time information and second location information. Therefore, the anti-remote-access module can extract the second time information and second location information for the user's cellular access from the second CDR information.

[0099] In an optional embodiment of the present invention, step 102 may include the following sub-steps:

[0100] Sub-step S11: Extract first time information and broadband account information from the first call detail record (CDR) information; the first time information is the time when the user makes the WiFi call.

[0101] Sub-step S12: Query the first location information corresponding to the broadband account information;

[0102] Sub-step S13: Determine the first time information and the first location information as the first access point information for accessing the WiFi.

[0103] In this embodiment of the invention, when a user makes a VoWiFi call through a terminal, the user's location information can be included in the VoWiFi call detail record (CDR) in the form of broadband account information or IP (Internet Protocol Address) address + port number. The VoWiFi CDR is the first CDR information of the user's WiFi-based call.

[0104] It should be noted that the broadband account information was obtained from the fixed-line AAA / traceability system. For example... Figure 2 As shown, a new RESTful API (Application Programming Interface) has been added to the fixed-line AAA / tracing system. The tracing gateway uses this API to obtain the administrative region code and broadband account information of the user's currently connected home gateway from the fixed-line AAA / tracing system. RESTful (Representational State Transfer) is a software architectural style or design style that provides a set of design principles and constraints. Software designed based on this style can be more concise, more layered, and easier to implement mechanisms such as caching.

[0105] In its implementation, the anti-remote call module can extract the first-time information and broadband account information from the first call detail record (CDR) information, as well as the user identifier. The first-time information can be the time the user made the WiFi call, i.e., the VoWiFi call time.

[0106] In one example, a user made a VoWiFi call at 8:52 AM on June 20th. At this time, the location information was entered into the VoWiFi call detail record (CDR) in the form of broadband account information. The main information that the anti-remote call module needs to extract and process from the VoWiFi CDR includes: user identifier, VoWiFi call time, and broadband account information, as shown in Table 1 below.

[0107] User ID VoWiFi call time Broadband account information 18900001111 6 / 208:52 AD01

[0108] Table 1

[0109] Broadband account information may include the broadband number. The anti-remote-traffic module can query the user's home gateway installation address from relevant databases in the operator's or other systems, and then process the installation address to obtain the primary location information corresponding to the broadband account information. This primary location information may include the broadband's latitude and longitude coordinates.

[0110] After obtaining the first time information and the first location information, the anti-remote module can determine the first time information and the first location information as the first access point information for the user to access WiFi.

[0111] In addition, such as Figure 2 As shown, the ePDG can obtain the first location information from the tracing gateway. Specifically, an extended SWf interface is added to the ePDG side. The ePDG obtains the first location information of the user's current home gateway from the anti-remote-access module on the tracing gateway side through the SWf interface. This information is used to represent the user's location information, as well as the administrative region code information and broadband account information of the user's current home gateway. The ePDG can then transmit the user's location information, administrative region code information, and broadband account information to the mobile core network for use in subsequent number completion functions.

[0112] In an optional embodiment of the present invention, step 102 may include the following sub-steps:

[0113] Sub-step S21: Extract second time information and base station cell information from the second call detail record (CDR) information; the second time information is the time when the user makes a call based on the cellular cell.

[0114] Sub-step S22: Query the second location information corresponding to the base station cell information;

[0115] Sub-step S23: The second time information and the second location information are determined as the second access point information for accessing the cellular cell.

[0116] In this embodiment of the invention, VoLTE and VoNR are the main modes of cellular cell communication. When a user makes a VoLTE call through a terminal, the 4G or 5G access base station cell information can be used as the user's location information and included in the VoLTE call detail record (CDR). Similarly, when a user makes a VoNR call through a terminal, the 4G or 5G access base station cell information can be used as the user's location information and included in the VoNR CDR. Both VoLTE and VoNR CDRs are secondary CDR information based on cellular cell calls.

[0117] In its implementation, the anti-remote-call module can extract second time information and base station cell information from the second call detail record (CDR) information, as well as the user identifier. The second time information can be the time of the user's call based on the cellular cell, i.e., the VoLTE call time or the VoNR call time.

[0118] In one example, a user made a VoLTE call at 8:35 AM on June 20th. At this time, the location information is recorded in the VoLTE call detail record (CDR) in the form of base station cell information. The main information that the anti-remote call module needs to extract and process from the VoLTE CDR includes: user identifier, VoLTE call time, and base station cell information, as shown in Table 2 below.

[0119] User ID VoLTE call time Base station cell information 18900001111 6 / 208:35 3836

[0120] Table 2

[0121] The base station cell information can include the base station identifier. The anti-remote module can query the relevant database and process the base station identifier to obtain the second location information corresponding to the base station cell information. This second location information can include the base station's latitude and longitude coordinates.

[0122] After obtaining the second time information and the second location information, the anti-remote module can determine the second time information and the second location information as the second access point information for the user to access the cellular cell.

[0123] Step 103: Using the first time information, the first location information, the second time information, and the second location information, calculate the access speed between accessing the WiFi and accessing the cellular network.

[0124] The first location information may include the latitude and longitude information of the broadband, and the second location information may include the latitude and longitude information of the base station, as shown in Table 3 below:

[0125]

[0126] Table 3

[0127] Once the latitude and longitude information of the broadband and the base station is obtained, users accessing WiFi and those accessing cellular access can be included in the same coordinate system. (Refer to...) Figure 3 The diagram illustrates the coordinate system provided in this embodiment of the invention. In the VoWiFi call process, the terminal accesses the network via WiFi and reports broadband account information such as IP address and port number. The anti-remote-access module queries and obtains the location information of broadband AD01, which is a location point with longitude 120.53113 and latitude 31.33131. In the VoLTE call process, the terminal accesses the network via cellular and reports the base station cell identifier. The anti-remote-access module queries and obtains the location information of base station 3836, which is a location point with longitude 121.13123 and latitude 30.53113.

[0128] The anti-remote-pulling module can use first time information, first location information, second time information, and second location information to calculate the access speed between the access WiFi and the access cell. The access speed is the moving speed of the VoWiFi user's location, and this speed is used as the basis for verifying the user's location.

[0129] In an optional embodiment of the present invention, step 103 may include the following sub-steps:

[0130] Sub-step S31: Using the first location information and the second location information, calculate the access distance interval between accessing the WiFi and accessing the cellular cell;

[0131] Sub-step S32: Using the first time information and the second time information, calculate the access time interval between accessing the WiFi and accessing the cellular cell;

[0132] Sub-step S33: Using the access distance interval and the access time interval, calculate the access speed between accessing the WiFi and accessing the cellular network.

[0133] The anti-distance-distance module can use first and second location information to calculate the access distance interval s between the access WiFi and the access cell. Specifically, the first location information includes the latitude and longitude information of the broadband and the second location information includes the latitude and longitude information of the base station. Therefore, the anti-distance-distance module can calculate the access distance interval s between the access broadband AD01 and the access base station 3836 using the spherical calculation formula based on the obtained latitude and longitude information, such as the longitude of broadband AD01 being 120.53113 and the latitude being 31.33131 in Table 3 above, and the longitude of base station 3836 being 121.13123 and the latitude being 30.53113. The result is that the distance between the two calls is 105.7 km.

[0134] The anti-remote-access module can use first and second time information to calculate the access time interval t between the access WiFi and the access cell. Specifically, the first time information includes the VoWiFi call time, and the second time information includes the VoLTE call time. Therefore, the anti-remote-access module can calculate the access time interval t between the access broadband AD01 and the access base station 3836 based on the obtained call times, such as 8:52 for the VoWiFi call time and 8:35 for the VoLTE call time in Table 3 above, and obtain a time interval of 17 minutes between the two calls.

[0135] The anti-remote-distance module can calculate the access speed v between the accessed WiFi and the accessed cellular cell using the access distance interval s and the access time interval t. Specifically, the anti-remote-distance module can calculate the access speed v between the accessed WiFi and the accessed cellular cell using a speed formula, as follows:

[0136] v=s / t=105.7(km) / 17(min)=373(km / h)

[0137] Therefore, the access speed v between WiFi and cellular access is 373 km / h.

[0138] In an optional embodiment of the present invention, reference is made to Figure 4 The flowchart illustrates the steps of a speed threshold calculation method provided in an embodiment of the present invention. Before determining whether the access speed is greater than or equal to the speed threshold, the method may further include:

[0139] Step 401: Obtain the corresponding first road traffic information based on the first location information; the first road traffic information includes a first speed limit.

[0140] Before determining whether the access speed is greater than or equal to a speed threshold, the anti-distance module can set a speed threshold. Specifically, based on the acquired latitude and longitude information, the anti-distance module can determine the specific location of the access point. By combining this information with known map information, it can determine the road conditions near the access point, thereby identifying the speed of the access point.

[0141] In its implementation, the anti-distance-traffic module can determine the specific location of the broadband access point based on the first location information, namely the latitude and longitude information of the broadband. By combining this with known map information, it can determine the corresponding first road traffic information, and based on this first road traffic information, it can determine the road conditions near the broadband access point. The first road traffic information may include a first speed limit, which the anti-distance-traffic module can use to identify the speed of the broadband access point.

[0142] In one example, assuming the broadband access point is located on a road in the city center, the first road traffic information can be obtained by referring to the relevant traffic laws. The first road traffic information includes a first speed limit, which is 70 km / h. Then the anti-remote module can identify the broadband access point as 70 km / h.

[0143] Step 402: Obtain the corresponding second road traffic information based on the second location information; the second road traffic information includes a second speed limit.

[0144] Before determining whether the access speed is greater than or equal to a speed threshold, the anti-distance module can set a speed threshold. Specifically, based on the acquired latitude and longitude information, the anti-distance module can determine the specific location of the access point. By combining this information with known map information, it can determine the road conditions near the access point, thereby identifying the speed of the access point.

[0145] In its implementation, the anti-remote-travel module can determine the specific location of the base station access point based on the second location information, namely the latitude and longitude information of the base station. By combining this with known map information, it can determine the corresponding second road traffic information, and based on this second road traffic information, it can determine the road conditions near the base station access point. The second road traffic information may include a second speed limit, which the anti-remote-travel module can use to identify the speed of the base station access point.

[0146] In one example, assuming there is a highway near the base station access point, the second road traffic information can be obtained by referring to the relevant traffic laws. The second road traffic information includes a second speed limit, which is 120 km / h. Then the anti-remote module can identify the base station access point as 120 km / h.

[0147] Step 403: Calculate the average speed of the first restricted speed and the second restricted speed.

[0148] The anti-remote-pull module can map the speed identifiers of broadband access points and base station access points onto a map, thereby creating a speed identifier map. (See reference...) Figure 5 The diagram shows a speed marker map provided in an embodiment of the present invention. The anti-distance module queries the speed marker map and finds that the speed markers of the two access points are 70km / h and 120km / h, respectively. That is, the first speed limit is 70km / h and the second speed limit is 120km / h. The anti-distance module can calculate the average speed of the first speed limit and the second speed limit, that is, calculate the arithmetic mean of the first speed limit and the second speed limit, and thus obtain an average speed of 95km / h.

[0149] Step 404: Determine the average speed as the speed threshold.

[0150] The anti-remote-range module can determine the speed threshold between a broadband access point with an average speed of 95 km / h and a base station access point with a speed of 120 km / h, and the speed threshold between a broadband access point with a speed of 70 km / h and the base station access point with a speed of 120 km / h.

[0151] It should be noted that the speed threshold can be set with reference to the speed limits set by relevant traffic laws, and can be dynamically adjusted according to weather conditions. For example, the speed threshold for rainy days is lower than that for sunny days. Therefore, the speed marking map can be flexibly adjusted according to weather conditions to reflect actual conditions.

[0152] Furthermore, in this embodiment of the invention, before step 401, it can be determined whether the locations of two adjacent calls made by the user are in the same province, that is, whether the broadband access point and the base station access point are in the same province. This is because the speed threshold is set with reference to the speed limit set by relevant traffic laws. If the user is traveling by high-speed rail or airplane, the actual speed may exceed the speed limit set by the relevant traffic laws, so the speed threshold setting is not very accurate, affecting subsequent judgments. Therefore, to avoid this situation, before referring to the relevant traffic laws, that is, before step 401, it can be determined whether the broadband access point and the base station access point are in the same province.

[0153] If the broadband access point and the base station access point are located in the same province, the influence of high-speed rail and airplanes can be ruled out. Therefore, the speed threshold can be set with reference to the speed limits set by relevant traffic laws.

[0154] If the broadband access point and the base station access point are not located in the same province, the impact of high-speed rail and airplanes can be considered. Specifically, if the broadband access point and the base station access point are located in different provinces, the speed threshold can be set with reference to the speed of high-speed rail; for example, a high-speed rail speed of 350 km / h can be used as the speed threshold. If the broadband access point and the base station access point are located in different countries, the speed threshold can be set with reference to the speed of commercial airplanes; for example, a commercial airplane speed of 900 km / h can be used as the speed threshold.

[0155] Step 104: Determine whether the access speed is greater than or equal to the speed threshold.

[0156] In this embodiment of the invention, after calculating the access speed and the speed threshold, the anti-remote module can compare the access speed and the speed threshold to determine whether the access speed is greater than or equal to the speed threshold.

[0157] Step 105: If the access speed is greater than or equal to the speed threshold, then the user's location is found to be abnormal.

[0158] In this embodiment of the invention, if the access speed is greater than or equal to the speed threshold, it can be verified that the user's location is abnormal, and thus it can be determined that the user is at risk of being moved away.

[0159] Specifically, since this embodiment of the invention uses the location of the broadband access point to represent the user's location, if a user remotely accesses broadband in another location using a remote access technique, then that user is at risk of remote access. For example, if a user in province A accesses broadband in province B using a remote access technique, then the user's location can be detected as abnormal, and thus it can be determined that the user is at risk of remote access.

[0160] In an optional embodiment of the present invention, after determining whether the access speed is greater than or equal to the speed threshold, the method may further include:

[0161] If the access speed is less than the speed threshold, it is determined that the user's location is not abnormal.

[0162] In this embodiment of the invention, if the access speed is less than the speed threshold, it can be verified that the user's location is not abnormal, that is, the user's location is normal, and thus it can be determined that the user does not pose a risk of being moved away.

[0163] In an optional embodiment of the present invention, step 105 may include the following sub-steps:

[0164] Sub-step S41: If the access speed is greater than or equal to the speed threshold, then determine whether the access time interval is greater than or equal to the time threshold.

[0165] Sub-step S42: If the access time interval is greater than or equal to the time threshold, then the user's location is found to be abnormal.

[0166] Due to the characteristics of wireless signals, in high-rise residential buildings, users may receive signals from a relatively distant location, resulting in large-scale movement within a short period of time.

[0167] Specifically, residents of high-rise buildings will receive signals from multiple base station cells, and may receive signals from a distant base station, such as two or three kilometers, five kilometers, or even ten kilometers away. Therefore, the signal at high-rise buildings is more mixed and the signal is not very good.

[0168] Generally, when a user is walking on the street and making a call based on a cellular network, they receive the signal from a base station within a few hundred meters, or even closer. However, in high-rise buildings, because the signal coverage is narrower, a user might receive a signal from several kilometers away. In this case, the user's previous call might have used the signal of a base station five kilometers away, and then the user's next call would be a VoWiFi call. For example, user A, living on the 18th floor, might have used the signal of base station X, five kilometers away, in their previous call, and then made a VoWiFi call in their next call.

[0169] To avoid situations where high-rise users sometimes occupy the signal of a base station 5 kilometers away and then switch to VoWiFi, this invention can optimize and eliminate outliers. In engineering practice, the strong signal that high-rise users can receive is generally not within 5 kilometers; therefore, a 5-minute time threshold can be set to compensate for errors.

[0170] In the actual implementation, if the access speed is greater than or equal to the speed threshold, the next step is to determine whether the access time interval t is greater than or equal to the time threshold. If the access time interval t is greater than or equal to the time threshold, then it can be verified that the user's location is abnormal, and thus it can be determined that the user is at risk of being moved further away.

[0171] In an optional embodiment of the present invention, after determining whether the access time interval is greater than or equal to a time threshold, the method may further include:

[0172] If the access time interval is less than the time threshold, it is verified that the user's location is not abnormal.

[0173] In the specific implementation, if the access speed is greater than or equal to the speed threshold, the next step is to determine whether the access time interval t is greater than or equal to the time threshold. If the access time interval t is less than the time threshold, it can be verified that the user's location is not abnormal, that is, the user's location is normal, and therefore it can be determined that the user does not pose a risk of being moved away.

[0174] In summary, in this embodiment of the invention, first call detail record (CDR) information of a user's WiFi-based call and second CDR information of a user's cellular-based call are obtained. Based on the first CDR information, first access point information for WiFi access is determined, and based on the second CDR information, second access point information for the cellular access is determined. The first access point information includes first time information and first location information, and the second access point information includes second time information and second location information. Using the first time information, first location information, second time information, and second location information, the access speed between the WiFi access and the cellular access is calculated. It is determined whether the access speed is greater than or equal to a speed threshold. If the access speed is greater than or equal to the speed threshold, the user's location is verified to be abnormal. This embodiment of the invention verifies whether a user's location is abnormal based on the access speed between the WiFi access and the cellular access, which can effectively enhance the traceability capability of VoIP, accurately trace the location of VoWiFi users, meet the "anti-remote-tracing" regulatory requirements, and greatly enhance cybersecurity capabilities.

[0175] To enable those skilled in the art to better understand the embodiments of the present invention, the embodiments of the present invention are illustrated below through the following two examples:

[0176] Example 1, for reference Figure 6 The flowchart of the user location verification process provided in the embodiment of the present invention is shown. The user location verification process is as follows:

[0177] 1. The user dials VoWiFi;

[0178] 2. VoWiFi call detail records are generated in the core network elements;

[0179] 3. The anti-remote-pull module extracts VoWiFi call timestamps, broadband account information, etc. from VoWiFi call detail records (CDRs); at the same time, the anti-remote-pull module obtains neighboring VoLTE / VoNR CDRs and extracts VoLTE / VoNR call timestamps, access base station information, etc. from the VoLTE / VoNR CDRs.

[0180] 4. The anti-remote-traffic module extracts the time difference between two calls, and at the same time, obtains the latitude and longitude information of the access broadband account and the access base station.

[0181] 5. The anti-distance module calculates the distance between the access broadband and the access base station based on the obtained latitude and longitude information;

[0182] 6. The anti-remote-distance module calculates the speed between the access broadband and the access base station based on the distance and time difference between the two points;

[0183] 7. The anti-distance module determines whether the speed is within the threshold; if yes, proceed to step 9; if no, proceed to step 8.

[0184] 8. If the speed is not within the threshold, the anti-remote module determines whether the access interval time is within the threshold, that is, whether the time difference between two calls is within the threshold; if yes, proceed to step 9; if no, proceed to step 10.

[0185] 9. Once the anti-remote-location module verifies that the user's location is normal, the process ends.

[0186] 10. The anti-distance-shifting module detects that the user's location is abnormal and there is a risk of distance shifting, so the process ends.

[0187] Example 2, taking VoWiFi service as an example:

[0188] User A is located in country M and connects to broadband in city h of country Z via VPN (Virtual Private Network). User A makes a VoWiFi call from country M. During the VoWiFi call process, the terminal connects via WiFi and reports broadband account information such as IP address and port number. The anti-remote connection module queries and obtains the latitude and longitude of the broadband connection, which is the latitude and longitude of the broadband connection in city h of country Z.

[0189] When user A dials VoLTE / VoNR or switches from VoWiFi to VoLTE, the terminal accesses the cellular network and reports the base station cell identifier. The anti-remote module queries and obtains the latitude and longitude of the access base station, which is the latitude and longitude of the access base station in country M.

[0190] The anti-distance-travel module calculates the access distance between the access WiFi and the access cell using a spherical calculation formula, and combines this with the access time interval between two calls to calculate the access speed between the access WiFi and the access cell. If this access speed exceeds the speed threshold set in the speed identification map, i.e., the access speed is abnormal, then it verifies that user A's location is abnormal, and thus filters out user A as having a risk of remote access.

[0191] refer to Figure 7 The diagram shows a structural block diagram of a user location verification device provided in an embodiment of the present invention, which may specifically include the following modules:

[0192] The call detail record (CDR) information acquisition module 701 is used to acquire the first CDR information of a user based on WiFi calls, and to acquire the second CDR information of the user based on cellular calls.

[0193] The access point information determination module 702 is used to determine first access point information for accessing the WiFi based on the first call detail record (CDR) information, and to determine second access point information for accessing the cellular network based on the second CDR information; wherein the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information;

[0194] The access speed calculation module 703 is used to calculate the access speed between accessing the WiFi and accessing the cellular network using the first time information, the first location information, the second time information, and the second location information.

[0195] The first judgment module 704 is used to determine whether the access speed is greater than or equal to the speed threshold.

[0196] The first verification module 705 is used to verify that the user's location is abnormal if the access speed is greater than or equal to the speed threshold.

[0197] In an optional embodiment of the present invention, the access point information determination module 702 may include:

[0198] The first extraction submodule is used to extract first time information and broadband account information from the first call detail record information; the first time information is the time when the user makes the WiFi call.

[0199] The first query submodule is used to query the first location information corresponding to the broadband account information;

[0200] The first access point information determination submodule is used to determine the first time information and the first location information as the first access point information for accessing the WiFi.

[0201] In an optional embodiment of the present invention, the access point information determination module 702 may include:

[0202] The second extraction submodule is used to extract second time information and base station cell information from the second call detail record information; the second time information is the time when the user makes a call based on the cellular cell.

[0203] The second extraction submodule is used to query the second location information corresponding to the base station cell information;

[0204] The second extraction submodule is used to determine the second time information and the second location information as the second access point information for accessing the cellular cell.

[0205] In an optional embodiment of the present invention, the access speed calculation module 703 may include:

[0206] An access distance interval calculation submodule is used to calculate the access distance interval between accessing the WiFi and accessing the cellular cell using the first location information and the second location information.

[0207] The access time interval calculation submodule is used to calculate the access time interval between accessing the WiFi and accessing the cellular cell using the first time information and the second time information.

[0208] The access speed calculation submodule is used to calculate the access speed between accessing the WiFi and accessing the cellular network using the access distance interval and the access time interval.

[0209] In an optional embodiment of the present invention, before determining whether the access speed is greater than or equal to the speed threshold, the method may further include:

[0210] The first road traffic information acquisition module is used to acquire corresponding first road traffic information based on the first location information; the first road traffic information includes a first speed limit.

[0211] The second road traffic information acquisition module is used to acquire corresponding second road traffic information based on the second location information; the second road traffic information includes a second speed limit.

[0212] The speed average calculation module is used to calculate the speed average between the first speed limit and the second speed limit;

[0213] A speed threshold determination module is used to determine the average speed as a speed threshold.

[0214] In an optional embodiment of the present invention, after determining whether the access speed is greater than or equal to the speed threshold, the method may further include:

[0215] The second verification module is used to verify that the user's location is not abnormal if the access speed is less than the speed threshold.

[0216] In an optional embodiment of the present invention, the first verification module 705 may include:

[0217] The second judgment submodule is used to determine whether the access time interval is greater than or equal to the time threshold if the access speed is greater than or equal to the speed threshold.

[0218] The first verification submodule is used to verify that the user's location is abnormal if the access time interval is greater than or equal to the time threshold.

[0219] In an optional embodiment of the present invention, after determining whether the access time interval is greater than or equal to a time threshold, the method may further include:

[0220] The third verification module is used to verify that the user's location is not abnormal if the access time interval is less than the time threshold.

[0221] In this embodiment of the invention, first call detail record (CDR) information of a user's WiFi-based call and second call detail record (CDR) information of a user's cellular-based call are obtained. Based on the first CDR information, first access point information for WiFi access is determined, and based on the second CDR information, second access point information for cellular access is determined. The first access point information includes first time information and first location information, and the second access point information includes second time information and second location information. Using the first time information, first location information, second time information, and second location information, the access speed between the WiFi access and the cellular access is calculated. It is determined whether the access speed is greater than or equal to a speed threshold. If the access speed is greater than or equal to the speed threshold, the user's location is verified to be abnormal. This embodiment of the invention verifies whether a user's location is abnormal based on the access speed between the WiFi access and the cellular access, which can effectively enhance the traceability capability of VoIP, accurately trace the location of VoWiFi users, meet the "anti-remote-tracing" regulatory requirements, and greatly enhance cybersecurity capabilities.

[0222] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0223] This invention also provides an electronic device, including: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, it implements the various processes of the above-described user location verification method embodiments and achieves the same technical effect. To avoid repetition, it will not be described again here.

[0224] This invention also provides a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, it implements the various processes of the above-described user location verification method embodiments and achieves the same technical effect. To avoid repetition, it will not be described again here.

[0225] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0226] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0227] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0228] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0229] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0230] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0231] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0232] The user location verification method, apparatus, electronic device, and computer-readable storage medium provided by this invention have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this invention. The descriptions of the embodiments above are only for the purpose of helping to understand the method and its core ideas. Furthermore, those skilled in the art will recognize that, based on the ideas of this invention, there will be changes in specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this invention. Regarding the apparatus embodiments, since they are basically similar to the method embodiments, the descriptions are relatively simple; relevant details can be found in the descriptions of the method embodiments.

Claims

1. A user location verification method, characterized in that, The method includes: Obtain the first call detail record (CDR) information of the user based on Wi-Fi, and obtain the second CDR information of the user based on cellular calls; Based on the first call detail record (CDR) information, the first access point information for accessing the WiFi is determined, and based on the second CDR information, the second access point information for accessing the cellular network is determined; wherein, the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information; Using the first time information, the first location information, the second time information, and the second location information, the access speed between accessing the WiFi and accessing the cellular network is calculated; Determine whether the access speed is greater than or equal to the speed threshold; If the access speed is greater than or equal to the speed threshold, then the user's location is detected as abnormal.

2. The method according to claim 1, characterized in that, The step of determining the first access point information for accessing the WiFi based on the first call detail record (CDR) information includes: Extract the first time information and broadband account information from the first call detail record (CDR) information; the first time information is the time when the user makes the WiFi call. Query the first location information corresponding to the broadband account information; The first time information and the first location information are determined as the first access point information for accessing the WiFi.

3. The method according to claim 1, characterized in that, The step of determining the second access point information for accessing the cellular cell based on the second call detail record (CDR) information includes: Extract the second time information and base station cell information from the second call detail record information; the second time information is the time when the user makes a call based on the cellular cell. Query the second location information corresponding to the base station cell information; The second time information and the second location information are determined as the second access point information for accessing the cellular cell.

4. The method according to any one of claims 1-3, characterized in that, The step of calculating the access speed between accessing the WiFi and accessing the cellular network using the first time information, the first location information, the second time information, and the second location information includes: Using the first location information and the second location information, calculate the access distance interval between accessing the WiFi and accessing the cellular cell; Using the first time information and the second time information, calculate the access time interval between accessing the WiFi and accessing the cellular cell; The access speed between accessing the WiFi and accessing the cellular network is calculated using the access distance interval and the access time interval.

5. The method according to claim 4, characterized in that, Before determining whether the access speed is greater than or equal to the speed threshold, the method further includes: Based on the first location information, obtain the corresponding first road traffic information; the first road traffic information includes a first speed limit. Based on the second location information, obtain the corresponding second road traffic information; the second road traffic information includes a second speed limit. Calculate the average speed of the first speed limit and the second speed limit; The average speed is determined as the speed threshold.

6. The method according to claim 1, characterized in that, After determining whether the access speed is greater than or equal to the speed threshold, the method further includes: If the access speed is less than the speed threshold, it is determined that the user's location is not abnormal.

7. The method according to claim 4, characterized in that, If the access speed is greater than or equal to the speed threshold, then the user's location is detected as abnormal, including: If the access speed is greater than or equal to the speed threshold, then determine whether the access time interval is greater than or equal to the time threshold; If the access time interval is greater than or equal to the time threshold, then the user's location is found to be abnormal.

8. The method according to claim 7, characterized in that, After determining whether the access time interval is greater than or equal to the time threshold, the method further includes: If the access time interval is less than the time threshold, it is verified that the user's location is not abnormal.

9. A user location verification device, characterized in that, The device includes: The call detail record (CDR) information acquisition module is used to acquire the first CDR information of the user based on WiFi calls, and to acquire the second CDR information of the user based on cellular calls. The access point information determination module is used to determine first access point information for accessing the WiFi based on the first call detail record (CDR) information, and to determine second access point information for accessing the cellular network based on the second CDR information; wherein the first access point information includes first time information and first location information, and the second access point information includes second time information and second location information; The access speed calculation module is used to calculate the access speed between accessing the WiFi and accessing the cellular network using the first time information, the first location information, the second time information, and the second location information. The first judgment module is used to determine whether the access speed is greater than or equal to the speed threshold. The first verification module is used to verify that the user's location is abnormal if the access speed is greater than or equal to the speed threshold.

10. An electronic device, characterized in that, include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the user location verification method as described in any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the user location verification method as described in any one of claims 1 to 8.

Images