User account blocking method and device, electronic equipment and storage medium

Abstract

Embodiments of the present application provide a user account blocking method and device, electronic equipment and storage medium, and relate to the technical field of information processing. In the embodiments of the present application, the base station identifier and the mobile phone number of the base station currently accessed by the client are obtained, and the mobile phone number is blocked through HSS cluster verification. In the embodiments of the present application, the base station location information of the user real-time access is introduced when analyzing and judging whether it is a malicious user access, so as to ensure that the malicious user cannot replace the IP by switching the IP (proxy) and other means to bypass the malicious user analysis and disposal identifier. Correspondingly, in the embodiments of the present application, the base station location of the user real-time access is introduced in the stage of disposing the malicious user, which is efficient, safe and controllable, so that the malicious user cannot bypass the safe blocking.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of information processing technology, and in particular to a method, apparatus, electronic device and storage medium for blocking user accounts. Background Technology

[0002] With the promotion of online services, it is inevitable that there will be many malicious users on the Internet (referring to users who transmit malicious information, carry out malicious behavior, and pose a threat to the ecosystem of the network system and the privacy and property security of normal users in the system). Identifying and banning malicious users is an indispensable and important part of the network.

[0003] Traditional methods for identifying and blocking malicious users involve the business system analyzing and identifying abnormal operations through a WAF (Web Application Firewall) or its built-in security sensitivity modules, and then blocking users at the front-end gateway based on their IP address, user account, and user-agent. This traditional method is simplistic in its judgment and handling, lacks access to dynamic user information, and is susceptible to bypass risks, making it insufficiently secure and controllable.

[0004] Therefore, a new method for banning user accounts is urgently needed. Summary of the Invention

[0005] This invention provides a user account blocking method, apparatus, electronic device, and storage medium to at least partially solve the problems existing in related technologies.

[0006] The first aspect of this invention provides a user account blocking method applied to a server, the method comprising:

[0007] Obtain the client's mobile phone number and the base station identifier of the base station currently accessed by the client;

[0008] Based on the base station identifier, obtain the real mobile phone number from the HSS trunking system;

[0009] Verify whether the real mobile phone number is the same as the mobile phone number of the client;

[0010] If the real mobile phone number is different from the mobile phone number of the client, the mobile phone number of the client will be blocked.

[0011] Optionally, based on the base station identifier, the real mobile phone number is obtained from the HSS trunking system, including:

[0012] Based on the base station identifier, request the IMSI corresponding to the client's mobile phone number from the base station currently accessed by the client;

[0013] Based on the IMSI obtained from the base station currently accessed by the client, the client requests the mobile phone number corresponding to the IMSI from the HSS cluster system.

[0014] Optionally, the method further includes:

[0015] If the client's mobile phone number is blocked if no IMSI is requested from the base station it is currently connected to.

[0016] Optionally, the method further includes:

[0017] If no mobile phone number is obtained from the HSS cluster system, the client's mobile phone number is blocked.

[0018] Optionally, the method further includes:

[0019] If the mobile phone number corresponding to the IMSI is the same as the mobile phone number of the client, a unique identifier is generated for the client based on the base station identifier and the IMSI;

[0020] The access behavior data generated by the client using the unique identifier is analyzed to obtain the analysis results;

[0021] If the analysis results indicate that the access behavior data corresponding to the unique identifier includes malicious access behavior data, the mobile phone number of the client will be blocked.

[0022] Optionally, after generating a unique identifier for the client, the method further includes:

[0023] The client receives a new base station identifier, which indicates that the client has disconnected from the base station it previously connected to and has now connected to a new base station.

[0024] Based on the new base station identifier, a new unique identifier is generated for the client;

[0025] The access behavior data generated by the client using the new unique identifier is analyzed to obtain the analysis results;

[0026] If the analysis results indicate that the access behavior data corresponding to the new unique identifier includes malicious access behavior data, the client's mobile phone number will be blocked.

[0027] Optionally, the method further includes:

[0028] Receive a source verification request from the mobile phone number blocking system, wherein the source verification request carries a target identifier;

[0029] Verify whether the target identifier is a unique identifier generated by the server;

[0030] If the target identifier is a unique identifier generated by the server, a source verification pass message is sent to the mobile phone number blocking system so that the mobile phone number blocking system blocks the mobile phone number corresponding to the target identifier.

[0031] A second aspect of this invention provides a user account blocking device applied to a server, the device comprising:

[0032] The first acquisition module is used to acquire the client's mobile phone number and the base station identifier of the base station currently accessed by the client;

[0033] The second acquisition module is used to obtain the real mobile phone number from the HSS cluster system based on the base station identifier;

[0034] The verification module is used to verify whether the real mobile phone number is the same as the mobile phone number of the client.

[0035] The first blocking module is used to block the client's mobile phone number when the real mobile phone number is different from the client's mobile phone number.

[0036] Optionally, the second acquisition module is specifically used for:

[0037] Based on the base station identifier, request the IMSI corresponding to the client's mobile phone number from the base station currently accessed by the client;

[0038] Based on the IMSI obtained from the base station currently accessed by the client, the client requests the mobile phone number corresponding to the IMSI from the HSS cluster system.

[0039] Optionally, the device further includes:

[0040] The second blocking module is used to block the client's mobile phone number if no IMSI is requested from the base station currently accessed by the client.

[0041] Optionally, the device further includes:

[0042] The third blocking module is used to block the client's mobile phone number if no mobile phone number is requested from the HSS cluster system.

[0043] Optionally, the device further includes:

[0044] The first generation module is used to generate a unique identifier for the client based on the base station identifier and the IMSI, when the mobile phone number corresponding to the IMSI is the same as the mobile phone number of the client.

[0045] The first analysis module is used to analyze the access behavior data generated by the client using the unique identifier and obtain the analysis results;

[0046] The fourth blocking module is used to block the client's mobile phone number when the analysis results show that the access behavior data corresponding to the unique identifier includes malicious access behavior data.

[0047] Optionally, after generating a unique identifier for the client, the apparatus further includes:

[0048] The receiving module is used to receive a new base station identifier sent by the client, the new base station identifier indicating that the client has disconnected from the base station it previously connected to and has now connected to a new base station;

[0049] The second generation module is used to generate a new unique identifier for the client based on the new base station identifier;

[0050] The second analysis module is used to analyze the access behavior data generated by the client using the new unique identifier and obtain the analysis results;

[0051] The fifth blocking module is used to block the client's mobile phone number when the analysis results show that the access behavior data corresponding to the new unique identifier includes malicious access behavior data.

[0052] Optionally, the device further includes:

[0053] The verification request receiving module is used to receive source verification requests sent by the mobile phone number blocking system, wherein the source verification request carries a target identifier;

[0054] The verification module is used to verify whether the target identifier is a unique identifier generated by the server;

[0055] The sixth blocking module is used to send a source verification pass message to the mobile phone number blocking system when the target identifier is a unique identifier generated by the server, so that the mobile phone number blocking system blocks the mobile phone number corresponding to the target identifier.

[0056] A third aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps described in the first aspect of the present invention.

[0057] A fourth aspect of the present invention provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executed, implements the steps of the method described in the first aspect of the present invention.

[0058] In this embodiment of the invention, the base station identifier and mobile phone number of the base station currently accessed by the client are obtained, verified through the HSS cluster, and the mobile phone number is blocked if the verification fails. This embodiment incorporates the real-time location information of the base station accessed by the user when analyzing whether malicious user access is possible, ensuring that malicious users cannot bypass the malicious user analysis and handling identifier by changing their IP address (using a proxy). Correspondingly, this embodiment incorporates the real-time location of the base station accessed by the user during the malicious user handling phase, ensuring high efficiency, security, and controllability, preventing malicious users from bypassing security blocking. Therefore, this embodiment, based on the client's collected phone number and the base station identifier of the currently accessed base station, combined with the HSS cluster system, directly provides an analysis mechanism for analyzing malicious users, preventing users from bypassing the detection mechanism, effectively blocking malicious users, and ensuring security, reliability, and tamper-proof operation. Attached Figure Description

[0059] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0060] Figure 1 This is a flowchart of a user account blocking method according to an embodiment of the present invention;

[0061] Figure 2 This is a schematic diagram of the gimbal architecture corresponding to a user account blocking method according to an embodiment of the present invention;

[0062] Figure 3 This is a flowchart of another user account blocking method according to an embodiment of the present invention;

[0063] Figure 4 This is a flowchart of another user account blocking method according to an embodiment of the present invention;

[0064] Figure 5 This is a structural block diagram of a user account blocking device according to an embodiment of the present invention. Detailed Implementation

[0065] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0066] Reference Figure 1 The flowchart illustrates a user account blocking method according to an embodiment of the present invention. The user account blocking method provided by the present invention is applied to a server and may specifically include the following steps:

[0067] S101, Obtain the client's mobile phone number and the base station identifier of the base station currently accessed by the client.

[0068] In this embodiment of the invention, the client can be a web application or an app.

[0069] In this embodiment of the invention, the server is a server corresponding to the client and used for user authentication.

[0070] In this embodiment of the invention, the server can proactively obtain the client's mobile phone number and the base station identifier of the base station currently accessed by the client.

[0071] In this embodiment of the invention, the server may also passively receive the client's mobile phone number and the base station identifier of the base station currently accessed by the client, which are uploaded by the client.

[0072] In this embodiment of the invention, before accessing the network, the client can first upload the client's mobile phone number and the base station identifier of the base station currently accessing the client to the server for identity verification.

[0073] In this embodiment of the invention, the client may also send a network access request along with its mobile phone number and the base station identifier of the base station it is currently accessing. The server can then obtain the client's mobile phone number and the base station identifier from the network access request for authentication.

[0074] Specifically, in this embodiment of the invention, the client can obtain the SIM card information (e.g., mobile phone number) and base station information (e.g., base station identifier CELLID) corresponding to the current device and upload them to the server.

[0075] In this embodiment of the invention, the base station accessed by a normal user's client should be the base station closest to the client's current location. However, in order to bypass security blocking, a malicious user's base station information may be forged fake base station information, or it may be base station information from a base station in another area accessed by changing the IP address.

[0076] S102, Obtain the real mobile phone number from the HSS trunking system based on the base station identifier.

[0077] In this embodiment of the invention, the HSS (Home Subscriber Server) cluster is a user database that contains user profiles, performs user authentication and authorization, and provides information about the user's physical location. Therefore, the mapping between real mobile phone numbers and real base stations can be queried through the HSS cluster.

[0078] In this embodiment of the invention, if the base station is a real base station, the real mobile phone number can be obtained from the HSS cluster system; if the base station is a fake base station, the real mobile phone number cannot be obtained from the HSS cluster system.

[0079] In this embodiment of the invention, a real mobile phone number refers to a mobile phone number that has been genuinely opened online and is actually in use.

[0080] S103, verify whether the real mobile phone number is the same as the mobile phone number of the client.

[0081] In this embodiment of the invention, if a malicious user attempts to bypass security blocking by changing the base station information of a base station in another region via IP access, they can obtain the real mobile phone number from the HSS cluster system. However, this real mobile phone number cannot correspond to the client's mobile phone number.

[0082] Therefore, in this embodiment of the invention, it can be further verified whether the real mobile phone number obtained from the HSS cluster system is the same as the mobile phone number of the client.

[0083] S104, if the real mobile phone number is different from the mobile phone number of the client, the mobile phone number of the client is blocked.

[0084] In this embodiment of the invention, when the real mobile phone number and the client's mobile phone number are different, it indicates that the correspondence between the base station identifier and the mobile phone number stored in the HSS cluster system is different from the base station identifier and mobile phone number obtained from the client. This indicates that the client is an abnormal user and the client's mobile phone number needs to be blocked.

[0085] Therefore, in this embodiment of the invention, the base station identifier and mobile phone number of the base station currently accessed by the client are obtained, verified through the HSS cluster, and the mobile phone number is blocked if the verification fails. In this embodiment, the real-time location information of the base station accessed by the user is introduced when analyzing whether malicious user access is possible, ensuring that malicious users cannot bypass the malicious user analysis and handling identifier by changing their IP address (proxy) or other means. Correspondingly, in the malicious user handling stage, the real-time location of the base station accessed by the user is introduced, which is efficient, secure, and controllable, preventing malicious users from bypassing security blocking. Thus, this embodiment of the invention, based on the client's collected number and the base station identifier of the currently accessed base station, combined with the HSS cluster system, directly provides an analysis mechanism for analyzing malicious users, preventing users from bypassing it, effectively blocking malicious users, and is secure, reliable, and tamper-proof.

[0086] Reference Figure 2The flowchart illustrates a user account blocking method according to an embodiment of the present invention. The user account blocking method provided by the present invention is applied to a server and may specifically include the following steps:

[0087] S201, Obtain the client's mobile phone number and the base station identifier of the base station currently accessed by the client.

[0088] Step S201 is similar to step S101 described above, and will not be repeated here in this embodiment of the invention.

[0089] S202, based on the base station identifier, request the IMSI corresponding to the client's mobile phone number from the base station currently accessed by the client.

[0090] In this embodiment of the invention, the IMSI corresponding to the client's mobile phone number can be requested from the corresponding base station based on the base station identifier obtained from the client.

[0091] Optionally, in this embodiment of the invention, if the mobile phone number is not requested from the HSS cluster system, the mobile phone number of the client is blocked.

[0092] Specifically, if the client's current access base station is through a base station in another area accessed via a different IP address, then the base station identified as such is considered a legitimate base station. Since this base station does not actually record the client's phone number, it cannot request the IMSI from this legitimate base station. In this case, it can be directly determined that the client's phone number needs to be blocked.

[0093] S203, based on the IMSI obtained from the base station currently accessed by the client, request the mobile phone number corresponding to the IMSI from the HSS cluster system.

[0094] In this embodiment of the invention, after obtaining the IMSI from the base station, the collection number for registration and network access can be obtained from the HSS cluster based on the IMSI.

[0095] Optionally, in this embodiment of the invention, if the mobile phone number is not requested from the HSS cluster system, the mobile phone number of the client is blocked.

[0096] Specifically, if the base station currently accessed by the client is a fake base station, the fake base station can return a fake IMSI in step S202. However, since the IMSI is fake, it may not have been registered and joined the network. Therefore, the HSS cluster system cannot request the mobile phone number corresponding to the IMSI. At this time, it can be determined that the client's mobile phone number needs to be blocked.

[0097] Alternatively, if the fake IMSI is a genuine IMSI registered on the HSS cluster, then the phone number corresponding to that IMSI can be obtained from the HSS cluster. This allows for further verification of whether the phone number requested from the HSS cluster system is the same as the client's phone number. In different situations, it can be determined that the client's phone number needs to be blocked.

[0098] S204, if the mobile phone number corresponding to the IMSI is the same as the mobile phone number of the client, generate a unique identifier for the client based on the base station identifier and the IMSI.

[0099] In this embodiment of the invention, the hash value obtained by combining the national cryptographic standard SM3 (CELLID+IMSI+key) can be used as the unique identifier of the client and saved. For specific generation methods, please refer to the relevant operation procedures of the national cryptographic standard SM3.

[0100] S205, Analyze the access behavior data generated by the client using the unique identifier to obtain the analysis results.

[0101] In this embodiment of the invention, the unique identifier is used as the client's identity identifier on the network. Access behavior data is collected and analyzed based on the unique identifier, thereby further preventing malicious users from bypassing user behavior analysis by switching proxies after entering the network.

[0102] In this embodiment of the invention, the access behavior data may specifically include: access time, access frequency, access object, etc.

[0103] S206, if the analysis results indicate that the access behavior data corresponding to the unique identifier includes malicious access behavior data, the mobile phone number of the client is blocked.

[0104] In this embodiment of the invention, after the client accesses the network, the access behavior of the client is further analyzed using the unique identifier generated for it. If the access behavior data is found to include malicious access behavior data, the client's mobile phone number is blocked.

[0105] In this embodiment of the invention, the specific access behavior data analysis method can refer to mature big data analysis methods in related technologies. For example, if a client accesses a certain object too frequently, the client can be regarded as a suspected malicious user and further analyzed.

[0106] Reference Figure 3This diagram illustrates a device architecture diagram corresponding to a user account blocking method according to an embodiment of the present invention, including: a client, a server, an HSS cluster system, a mobile phone number blocking system, and a big data analysis system. The client and server can interact bidirectionally to obtain the client's mobile phone number and the base station identifier of the base station currently accessed by the client. The server and the HSS cluster system can interact bidirectionally to obtain the real mobile phone number corresponding to the base station identifier. After confirming that the current client has passed verification, the server can directly send the generated unique identifier to the big data analysis system, enabling the big data analysis system to continue monitoring and analyzing the current client's access behavior data based on this unique identifier. Upon discovering a malicious user, the big data analysis system can send the corresponding unique identifier to the mobile phone number blocking system, which can then verify the unique identifier through bidirectional interaction with the server.

[0107] Specifically, such as Figure 4 As shown, Figure 4 The flowchart illustrates a user account blocking method according to an embodiment of the present invention. The user account blocking method provided by the embodiment of the present invention may include the following steps:

[0108] S401, the server obtains the client's mobile phone number and the base station identifier of the base station currently accessed by the client.

[0109] Step S401 is similar to step S101 above, and will not be described again here.

[0110] S402, the server requests the IMSI corresponding to the client's mobile phone number from the base station currently accessed by the client, based on the base station identifier.

[0111] In this embodiment of the invention, the server can interact with the base station to request the IMSI corresponding to the client's mobile phone number from the base station currently connected to the client, based on the base station identifier.

[0112] S403, the server requests the mobile phone number corresponding to the IMSI from the HSS cluster system based on the IMSI obtained from the base station currently accessed by the client.

[0113] In this embodiment of the invention, when the server requests the IMSI from the base station currently accessed by the client, it can interact with the HSS cluster system to request the mobile phone number corresponding to the IMSI.

[0114] S404, if the mobile phone number corresponding to the IMSI is different from the mobile phone number of the client, notify the mobile phone number blocking system to block the mobile phone number of the client.

[0115] In this embodiment of the invention, the mobile phone number blocking system is a system that performs mobile phone number blocking processing.

[0116] In this embodiment of the invention, if the current client fails verification during the server's verification process, the server can directly notify the mobile number blocking system to block the current client's mobile number.

[0117] S405, if the mobile phone number corresponding to the IMSI is the same as the mobile phone number of the client, generate a unique identifier for the client based on the base station identifier and the IMSI, and send the unique identifier to the big data analysis system.

[0118] In this embodiment of the invention, after the client passes the verification, the server can generate a unique identifier for the client and send the unique identifier to the big data analysis system.

[0119] S406, The big data analysis system analyzes the access behavior data generated by the client using the unique identifier and obtains the analysis results.

[0120] In this embodiment of the invention, the big data analysis system can combine the client's unique identifier, IP address, user-agen, access behavior, etc., to perform user behavior analysis in order to discover malicious users.

[0121] In this embodiment of the invention, the specific access behavior data analysis method of the big data analysis system can refer to mature big data analysis methods in related technologies. For example, if a client accesses a certain object too frequently, the client can be regarded as a suspected malicious user and further analyzed.

[0122] S407, when the analysis results indicate that the access behavior data corresponding to the unique identifier includes malicious access behavior data, the big data analysis system notifies the mobile phone number blocking system to block the mobile phone number of the client.

[0123] In this embodiment of the invention, the big data analysis system can send the client's unique identifier to the automatic blocking system so that the mobile phone number blocking system can block the client's mobile phone number.

[0124] Specifically, since the unique identifier is composed of the base station identifier of the base station to which the current client is connected and its IMSI, the mobile phone number blocking system can directly obtain the IMSI corresponding to the client from the unique identifier, and further obtain the mobile phone number corresponding to the IMSI based on the IMSI, and then block it.

[0125] S408, the mobile phone number blocking system sends a source verification request to the server to verify whether the unique identifier was generated by the server.

[0126] In this embodiment of the invention, for the security of the entire user account blocking system, the mobile phone number blocking system can further determine whether the unique identifier received from the big data analysis system originates from the server.

[0127] S409, the server receives a source verification request from the mobile phone number blocking system, the source verification request carrying a target identifier.

[0128] S410, the server verifies whether the target identifier is a unique identifier generated by the server.

[0129] In this embodiment of the invention, after receiving the source verification request from the mobile phone number blocking system, the server verifies the target unique identifier to determine whether the unique identifier is a unique identifier generated by the server.

[0130] S411, if the target identifier is a unique identifier generated by the server, the server sends a source verification pass message to the mobile phone number blocking system so that the mobile phone number blocking system blocks the mobile phone number corresponding to the target identifier.

[0131] In this embodiment of the invention, if the source verification is successful, indicating that the unique identifier is genuinely generated by the server, the mobile phone number blocking system blocks the mobile phone number corresponding to the target identifier.

[0132] In this embodiment of the invention, after the base station accessed by the client changes, the client needs to be re-verified, and a new unique identifier needs to be generated after successful verification. Specifically, this includes the following steps:

[0133] S1, the server receives a new base station identifier sent by the client, the new base station identifier indicating that the client has disconnected from the base station it previously connected to and has now connected to a new base station.

[0134] S2, the server generates a new unique identifier for the client based on the new base station identifier.

[0135] S3, the big data analysis system analyzes the access behavior data generated by the client using the new unique identifier and obtains the analysis results.

[0136] S4, when the analysis results indicate that the access behavior data corresponding to the new unique identifier includes malicious access behavior data, the big data analysis system notifies the mobile phone number blocking system to block the client's mobile phone number.

[0137] In this embodiment of the invention, the unique identifier generated after server verification is used in the stage of analyzing and processing the client's access behavior, which is more secure and effective.

[0138] In this embodiment of the invention, after the client disconnects from its original access base station, the previously verified unique identifier automatically becomes invalid, requiring re-verification and updating the unique identifier upon successful verification. Therefore, in this embodiment of the invention, every user request is verified in real time, enabling timely detection of malicious users and further improving network security.

[0139] In this embodiment of the invention, a breakthrough is made in the traditional malicious user access analysis and handling mechanism. In the analysis and handling stage, base station-related CELLID and IMSI are innovatively introduced. Combined with HSS cluster system, base station near-source verification technology is adopted to realize the true and effective source tracing of malicious user access judgment, and to fundamentally prevent malicious users from bypassing the blocking through IP proxy software and other means.

[0140] Based on the same inventive concept, embodiments of the present invention provide a user account blocking device, see reference. Figure 5 , Figure 5 This is a schematic diagram of a user account blocking device provided in an embodiment of the present invention. The device is applied to a server, such as... Figure 5 As shown, the device includes:

[0141] The first acquisition module 501 is used to acquire the client's mobile phone number and the base station identifier of the base station currently accessed by the client;

[0142] The second acquisition module 502 is used to obtain the real mobile phone number from the HSS cluster system based on the base station identifier;

[0143] The verification module 503 is used to verify whether the real mobile phone number is the same as the mobile phone number of the client.

[0144] The first blocking module 504 is used to block the client's mobile phone number when the real mobile phone number is different from the client's mobile phone number.

[0145] Optionally, the second acquisition module 502 is specifically used for:

[0146] Based on the base station identifier, request the IMSI corresponding to the client's mobile phone number from the base station currently accessed by the client;

[0147] Based on the IMSI obtained from the base station currently accessed by the client, the client requests the mobile phone number corresponding to the IMSI from the HSS cluster system.

[0148] Optionally, the device further includes:

[0149] The second blocking module is used to block the client's mobile phone number if no IMSI is requested from the base station currently accessed by the client.

[0150] Optionally, the device further includes:

[0151] The third blocking module is used to block the client's mobile phone number if no mobile phone number is requested from the HSS cluster system.

[0152] Optionally, the device further includes:

[0153] The first generation module is used to generate a unique identifier for the client based on the base station identifier and the IMSI, when the mobile phone number corresponding to the IMSI is the same as the mobile phone number of the client.

[0154] The first analysis module is used to analyze the access behavior data generated by the client using the unique identifier and obtain the analysis results;

[0155] The fourth blocking module is used to block the client's mobile phone number when the analysis results show that the access behavior data corresponding to the unique identifier includes malicious access behavior data.

[0156] Optionally, after generating a unique identifier for the client, the apparatus further includes:

[0157] The receiving module is used to receive a new base station identifier sent by the client, the new base station identifier indicating that the client has disconnected from the base station it previously connected to and has now connected to a new base station;

[0158] The second generation module is used to generate a new unique identifier for the client based on the new base station identifier;

[0159] The second analysis module is used to analyze the access behavior data generated by the client using the new unique identifier and obtain the analysis results;

[0160] The fifth blocking module is used to block the client's mobile phone number when the analysis results show that the access behavior data corresponding to the new unique identifier includes malicious access behavior data.

[0161] Optionally, the device further includes:

[0162] The verification request receiving module is used to receive source verification requests sent by the mobile phone number blocking system, wherein the source verification request carries a target identifier;

[0163] The verification module is used to verify whether the target identifier is a unique identifier generated by the server;

[0164] The sixth blocking module is used to send a source verification pass message to the mobile phone number blocking system when the target identifier is a unique identifier generated by the server, so that the mobile phone number blocking system blocks the mobile phone number corresponding to the target identifier.

[0165] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0166] Based on the same inventive concept, embodiments of the present invention provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps in the user account blocking method described in any of the above embodiments.

[0167] Based on the same inventive concept, embodiments of the present invention provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the steps of the user account blocking method described in any of the above embodiments.

[0168] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0169] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0170] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0171] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0172] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0173] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0174] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0175] The above provides a detailed description of a user account blocking method, apparatus, electronic device, and storage medium provided by the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for blocking a user account, characterized by, The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client.

2. The user account banning method of claim 1, wherein, The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; 3. The user account banning method of claim 2, wherein, checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client.

4. The user account banning method of claim 2, wherein, The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; 5. The method of claim 2, wherein, obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises:

6. The user account banning method according to any of claims 1-5, characterized by, obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises:

7. The user account banning method of claim 1, wherein, obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client.

8. A user account blocking apparatus, characterized by comprising: The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The method applied to a server comprises: obtaining a mobile phone number of a client and a base station identifier of a base station currently accessed by the client; obtaining a real mobile phone number from an HSS cluster system according to the base station identifier; checking whether the real mobile phone number is same as the mobile phone number of the client; in a case where the real mobile phone number is different from the mobile phone number of the client, banning the mobile phone number of the client. The first blocking module is configured to block the mobile phone number of the client when the real mobile phone number is different from the mobile phone number of the client. The second obtaining module is specifically configured to: request, according to the base station identifier, an IMSI corresponding to the mobile phone number of the client from a base station currently accessed by the client; request, according to the IMSI requested from the base station currently accessed by the client, a mobile phone number corresponding to the IMSI from a HSS cluster system.

9. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, The processor executes the program to implement the steps of the user account blocking method in any one of claims 1-7.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the steps of the user account blocking method in any one of claims 1-7.

Images