Cloud phone traffic security management system

Abstract

This invention relates to the field of traffic management, specifically a cloud mobile phone traffic security management system. It includes a data acquisition module, a data analysis module, a data comparison and alarm module, and a data management module. The data acquisition module communicates with the cloud server platform on which the cloud mobile phone terminal relies for operation, and is used to collect the operational data generated by the cloud mobile phone terminal during operation. The data analysis module analyzes the operational data of the cloud mobile phone terminal, performs data transformation processing, and transforms the operational data into data to be compared. The data comparison and alarm module compares the data to be compared with a pre-set standard threshold. The data management module manages the cloud server platform permissions required by the cloud mobile phone terminal during operation when an alarm occurs. This invention can monitor and analyze the operational data generated by the cloud mobile phone terminal during operation and issue alarms when the data exceeds a predetermined standard threshold, so as to take timely corresponding measures to ensure the stable and efficient operation of the cloud server platform.

Description

Technical Field

[0001] This invention relates to the field of traffic management, and in particular to a cloud mobile phone traffic security management system. Background Technology

[0002] Cloud phones are devices based on edge-cloud virtualization technology. Leveraging cloud network, security, and AI capabilities, they flexibly adapt to individual user needs, freeing up the phone's hardware resources and allowing for the loading of massive cloud applications on demand. Because cloud phones operate on 5G networks, they can store complex calculations and large amounts of data in the cloud. Users can remotely control cloud phones in real-time via video streaming, ultimately enabling the cloud-based execution of native Android applications and mobile games. By centralizing all data processing needs in cloud data centers, cloud phones allow users to access personal data and use various applications from anywhere with 5G mobile network coverage, without affecting the user experience.

[0003] However, in the environment of cloud phones using cloud computing network applications, the activity levels of servers on the cloud server platform providing services to cloud phone terminals vary. Some servers have high utilization, are busy, and are heavily loaded, while others are offline or even crashed for various reasons. If cloud phone terminals continuously make application requests to the cloud server platform, it will place a heavy operational burden on the cloud server platform, and may even cause the cloud server platform to crash and become unrecoverable. Summary of the Invention

[0004] The purpose of this invention is to address the problems existing in the background technology by proposing a cloud mobile phone traffic security management system that can monitor and analyze the operating data generated by the cloud mobile phone terminal during operation and issue alarms when the data exceeds a predetermined standard threshold, so as to take corresponding measures in a timely manner and thus ensure the stable and efficient operation of the cloud server platform.

[0005] The technical solution of this invention, a cloud mobile phone traffic security management system, includes a data acquisition module, a data analysis module, a data comparison and alarm module, and a data management module;

[0006] The data acquisition module communicates with the cloud server platform on which the cloud mobile terminal relies for operation, and is used to collect the operating data generated by the cloud mobile terminal during operation.

[0007] The data analysis module communicates with the data acquisition module to analyze the operational data of the cloud mobile terminal, perform data transformation processing, and transform the operational data into data to be compared.

[0008] The data comparison alarm module is connected to the data analysis module and is used to compare the data to be compared with a preset standard threshold. When the data to be compared exceeds the standard threshold range, an alarm is triggered.

[0009] The data management module communicates with the data comparison and alarm module to manage the cloud server platform permissions required by the cloud mobile terminal when an alarm occurs.

[0010] Preferably, the data analysis module includes an IP transformation sub-analysis module, a traffic statistics sub-analysis module, and a concurrent request sub-analysis module; the IP transformation sub-analysis module is used to obtain the percentage change data of the IP address to be compared based on the operating data of the cloud mobile terminal; the traffic statistics sub-analysis module is used to obtain the traffic data to be compared based on the operating data of the cloud mobile terminal; and the concurrent request sub-analysis module is used to obtain the concurrent request data to be compared based on the operating data of the cloud mobile terminal.

[0011] Preferably, the data comparison alarm module includes a data comparison submodule and a data alarm submodule. The data comparison submodule is used to compare the data to be compared with a preset standard threshold. The data alarm submodule is connected to the data comparison submodule and receives the comparison result from the data comparison submodule. When the data to be compared exceeds the standard threshold range, an alarm is triggered. When the data to be compared does not exceed the standard threshold range, no alarm is triggered.

[0012] Preferably, it also includes a single data comparison submodule and a comprehensive data comparison submodule;

[0013] The single data comparison submodule is connected to the IP transformation sub-analysis module, the traffic statistics sub-analysis module and the concurrent request sub-analysis module respectively. It is used to compare the IP address change percentage data to be compared with the standard IP address change percentage threshold data separately, to compare the traffic data to be compared with the standard traffic threshold data separately, and to compare the concurrent request data to be compared with the standard concurrent request threshold data separately.

[0014] The comprehensive data comparison submodule communicates with the traffic statistics sub-analysis module and the concurrent request sub-analysis module. It is used to compare the comprehensive data to be compared, which is obtained by integrating the traffic data to be compared and the concurrent request data to be compared in proportion, with the standard comprehensive threshold data.

[0015] Preferably, IP ch Defined as the percentage change data of the IP addresses to be compared, then:

[0016]

[0017] Among them, IP t ′ otal This represents the number of IP addresses at the current moment.total This represents the total number of IPs within the statistical period, where t0 represents the start time of the statistical period and t represents the current time.

[0018] If Tra is defined as the traffic data to be compared, then:

[0019]

[0020] Among them, Bt i Tm represents the total number of bytes in the i-th statistical period. i This represents the duration of the i-th statistical period, and n represents the number of statistical periods.

[0021] If Con is defined as the concurrent request data to be compared, then:

[0022]

[0023] Among them, Rq i Let T represent the total number of requests in the i-th statistical period, T represent the length of the statistical period, and n represent the number of statistical periods.

[0024] Preferably, if M is defined as the aggregated data to be compared, then:

[0025] M = k1 × Tra + k2 × Con

[0026] Where k1 and k2 are proportionality coefficients, 0 < k1 < 1, 0 < k2 < 1, k1 + k2 = 1.

[0027] Preferably, the data management module includes a single-item management sub-module and a comprehensive management sub-module;

[0028] For individual control submodules, if the percentage change data of the IP address to be compared exceeds the standard IP address change percentage threshold data, the IP change permission of the cloud mobile terminal will be cancelled separately; if the traffic data to be compared exceeds the standard traffic threshold data, the network speed of the cloud mobile terminal will be reduced or the network will be disconnected separately; if the concurrent request data to be compared exceeds the standard concurrent request threshold data, the remaining number of requests that the cloud mobile terminal can make will be limited or the request processing will be terminated separately.

[0029] For the comprehensive management and control submodule, if the comprehensive data to be compared exceeds the standard comprehensive threshold data, the cloud mobile terminal will be slowed down or disconnected from the network. At the same time, the remaining number of requests that the cloud mobile terminal can make will be limited or the request process will be terminated.

[0030] Preferably, when the data to be compared exceeds the standard threshold range, the cloud server platform synchronously sends an alarm to the corresponding cloud mobile terminal and the server manager, and stores the alarm data on the cloud server platform.

[0031] Compared with the prior art, the present invention has the following beneficial technical effects:

[0032] This invention monitors and analyzes the operational data generated by cloud mobile terminals during runtime and issues alarms when the data exceeds predetermined standard thresholds, enabling timely intervention to ensure the stable and efficient operation of the cloud server platform and prevent crashes. Specifically, behavioral analysis of the cloud mobile terminal can be performed on its IP address change data, traffic data, and concurrent request data. Higher values ​​for these metrics indicate a heavier load on the cloud server platform. Therefore, by pre-setting standard thresholds to ensure the safe operation of the cloud server platform, and comparing the data generated by the cloud mobile terminal during operation with these thresholds, if the data exceeds the standard thresholds, it indicates that the cloud mobile terminal may endanger the normal operation of the cloud server platform. In this case, timely control measures are needed to keep the cloud mobile terminal within the safe operating range of the cloud server platform. Attached Figure Description

[0033] Figure 1 This is a schematic diagram of the system structure according to an embodiment of the present invention;

[0034] Figure 2 This is a structural block diagram of the data analysis module in an embodiment of the present invention;

[0035] Figure 3 This is a structural block diagram of the data comparison alarm module in an embodiment of the present invention;

[0036] Figure 4 This is a schematic diagram of the comparison objects of the single data comparison submodule and the comprehensive data comparison submodule in an embodiment of the present invention;

[0037] Figure 5 This is a structural block diagram of the data management module in an embodiment of the present invention. Detailed Implementation

[0038] Example 1

[0039] like Figure 1 As shown, the cloud mobile phone traffic security management system proposed in this embodiment includes a data acquisition module, a data analysis module, a data comparison and alarm module, and a data management module. The data acquisition module communicates with the cloud server platform on which the cloud mobile phone terminal relies for operation. The data analysis module communicates with the data acquisition module. The data comparison and alarm module communicates with the data analysis module. The data management module communicates with the data comparison and alarm module. The above communication connection process is to enable the sequential transmission of data generated by each part, thereby realizing sequential data processing.

[0040] The data acquisition module is used to collect runtime data generated by the cloud mobile terminal, including IP change data, traffic data, and concurrent request data.

[0041] The data analysis module is used to analyze the operational data of cloud mobile terminals, perform data transformation processing on it, and transform the operational data into comparison data. The comparison data is the data that can be directly compared with the standard threshold in the subsequent process. The operational data cannot be used directly for comparison and needs to be transformed. Then, the transformed data is used as the comparison data.

[0042] The data comparison and alarm module is used to compare the data to be compared with a pre-set standard threshold. When the data to be compared exceeds the standard threshold range, the cloud server platform synchronously sends an alarm to the corresponding cloud mobile terminal and server management, and stores the alarm data on the cloud server platform for subsequent retrieval of relevant data and analysis of the alarm situation.

[0043] The data management module is used to control the cloud server platform permissions required by the cloud mobile terminal when an alarm occurs, thereby reducing the burden on the cloud server platform caused by the cloud mobile terminal and improving the ability of the cloud server platform to operate normally.

[0044] like Figure 2 As shown, the data analysis module includes an IP transformation sub-analysis module, a traffic statistics sub-analysis module, and a concurrent request sub-analysis module. The IP transformation sub-analysis module obtains the percentage change data of the IP address to be compared based on the cloud mobile terminal's operating data. The traffic statistics sub-analysis module obtains the traffic data to be compared based on the cloud mobile terminal's operating data. The concurrent request sub-analysis module obtains the concurrent request data to be compared based on the cloud mobile terminal's operating data. These three sub-analysis modules can analyze the three main types of data in the cloud mobile terminal's operating data, ultimately obtaining three types of comparison data for subsequent comparisons.

[0045] like Figure 3 As shown, the data comparison alarm module includes a data comparison submodule and a data alarm submodule. The data comparison submodule is used to compare the data to be compared with a preset standard threshold. The data alarm submodule is connected to the data comparison submodule and receives the comparison result from the data comparison submodule. When the data to be compared exceeds the standard threshold range, an alarm is triggered. When the data to be compared does not exceed the standard threshold range, no alarm is triggered.

[0046] This embodiment can monitor and analyze the operational data generated by the cloud mobile terminal during operation and issue alarms when the data exceeds a predetermined standard threshold, so as to take timely corresponding measures to ensure the stable and efficient operation of the cloud server platform and prevent the cloud server platform from crashing. Specifically, when analyzing the behavior of the cloud mobile terminal, IP address change data, traffic data, and concurrent request data can be analyzed. The higher the data in these metrics, the heavier the load on the cloud server platform from the cloud mobile terminal. Therefore, by pre-setting a standard threshold to ensure the safe operation of the cloud server platform, and then comparing the data generated by the cloud mobile terminal during actual operation with the standard threshold, if the data exceeds the standard threshold, it indicates that the cloud mobile terminal may endanger the normal operation of the cloud server platform. In this case, timely control and management of the cloud mobile terminal are required to keep the cloud server platform within the safe operating range.

[0047] Example 2

[0048] like Figure 4 As shown, the cloud mobile phone traffic security management system proposed in this embodiment, compared with the first embodiment, further includes a single data comparison submodule and a comprehensive data comparison submodule.

[0049] The single data comparison submodule communicates with the IP transformation sub-analysis module, traffic statistics sub-analysis module, and concurrent request sub-analysis module, respectively. It is used to compare the IP address change percentage data to be compared with the standard IP address change percentage threshold data, the traffic data to be compared with the standard traffic threshold data, and the concurrent request data to be compared with the standard concurrent request threshold data. For any of these three separate comparison procedures, an alarm is triggered if any of the comparison data exceeds the standard threshold.

[0050] The integrated data comparison submodule communicates with the traffic statistics sub-analysis module and the concurrent request sub-analysis module. It is used to compare the integrated data to be compared, obtained by proportionally integrating the traffic data and concurrent request data, with the standard integrated threshold data. For the above integrated comparison program, an alarm is only triggered when the integrated data exceeds the standard integrated threshold data.

[0051] (I) IP ch Defined as the percentage change data of the IP addresses to be compared, then:

[0052]

[0053] Among them, IP′ total This represents the number of IP addresses at the current moment. totalThis represents the total number of IPs within the statistical period, where t0 represents the start time of the statistical period, and t represents the current time. ch The calculation process can compare the quantitative analysis of the degree of IP address change with the standard IP address change percentage threshold data to obtain a qualitative judgment, that is, whether the degree has reached the level that requires an alarm.

[0054] (ii) If Tra is defined as the traffic data to be compared, then:

[0055]

[0056] Among them, Bt i Tm represents the total number of bytes in the i-th statistical period. i Tra represents the length of the i-th statistical period, and n represents the number of statistical periods. The calculation process of Tra can compare the quantitative analysis of traffic data with the standard traffic threshold data to obtain a qualitative judgment, that is, whether the level of alarm is required.

[0057] (iii) If Con is defined as the concurrent request data to be compared, then:

[0058]

[0059] Among them, Rq i The value of Con represents the total number of requests in the i-th statistical period, T represents the length of the statistical period, and n represents the number of statistical periods. The calculation process of Con can compare the quantitative analysis of concurrent request data with the standard concurrent request threshold data to obtain a qualitative judgment, that is, whether the level of alerting is required.

[0060] (iv) If M is defined as the aggregated data to be compared, then:

[0061] M = k1 × Tra + k2 × Con

[0062] Where k1 and k2 are proportional coefficients, 0 < k1 < 1, 0 < k2 < 1, k1 + k2 = 1. The calculation process of M can obtain the comprehensive data to be compared by weighting the traffic data and concurrent request data to be compared. Based on the comparison of the weighted data and the standard comprehensive threshold data, a qualitative determination is made on how to proceed with subsequent processing. That is, when the threshold is exceeded, the traffic data and concurrent request data are subject to unified access control. When the threshold is not exceeded, the traffic and concurrent requests of the cloud mobile terminal are not controlled.

[0063] like Figure 5 As shown, the data management module includes a single-item management submodule and a comprehensive management submodule.

[0064] For single-item control submodules:

[0065] If the percentage change of the IP address to be compared exceeds the standard threshold for IP address change percentage, the IP change permission of the cloud mobile terminal will be revoked separately. If the traffic data to be compared exceeds the standard threshold for traffic, the network speed of the cloud mobile terminal will be reduced or the network will be disconnected separately. If the concurrent request data to be compared exceeds the standard threshold for concurrent requests, the remaining number of requests that the cloud mobile terminal can make will be limited or the request process will be terminated separately. All three processing methods are based on individual comparison results and are not affected by other processing methods.

[0066] For the integrated control submodule:

[0067] If the data to be compared exceeds the standard comprehensive threshold, the cloud mobile terminal will have its network speed reduced or its network disconnected. At the same time, the remaining number of requests that the cloud mobile terminal can make will be limited or the request processing will be terminated to achieve unified integrated processing.

[0068] The embodiments of the present invention have been described in detail above with reference to the accompanying drawings. However, the present invention is not limited thereto. Various changes can be made within the scope of knowledge possessed by those skilled in the art without departing from the spirit of the present invention.

Claims

1. A cloud phone traffic security management system, characterized in that, include: The data acquisition module communicates with the cloud server platform on which the cloud mobile terminal relies for operation, and is used to collect the operating data generated by the cloud mobile terminal during operation. The data analysis module, which communicates with the data acquisition module, is used to analyze the operating data of the cloud mobile terminal, perform data transformation processing on it, and transform the operating data into data to be compared. The data comparison alarm module is connected to the data analysis module and is used to compare the data to be compared with a preset standard threshold. When the data to be compared exceeds the standard threshold range, an alarm is triggered. The data management module communicates with the data comparison and alarm module and is used to manage the cloud server platform permissions required by the cloud mobile terminal when an alarm occurs. The data analysis module includes an IP transformation sub-analysis module, a traffic statistics sub-analysis module, and a concurrent request sub-analysis module. The IP transformation sub-analysis module is used to obtain the percentage change data of the IP address to be compared based on the operating data of the cloud mobile terminal. The traffic statistics sub-analysis module is used to obtain the traffic data to be compared based on the operating data of the cloud mobile terminal. The concurrent request sub-analysis module is used to obtain the concurrent request data to be compared based on the operating data of the cloud mobile terminal. It also includes a single data comparison submodule and a comprehensive data comparison submodule; The single data comparison submodule is connected to the IP transformation sub-analysis module, the traffic statistics sub-analysis module and the concurrent request sub-analysis module respectively. It is used to compare the IP address change percentage data to be compared with the standard IP address change percentage threshold data separately, to compare the traffic data to be compared with the standard traffic threshold data separately, and to compare the concurrent request data to be compared with the standard concurrent request threshold data separately. The comprehensive data comparison submodule communicates with the traffic statistics sub-analysis module and the concurrent request sub-analysis module. It is used to compare the comprehensive data to be compared, which is obtained by integrating the traffic data to be compared and the concurrent request data to be compared in proportion, with the standard comprehensive threshold data. IP ch Defined as the percentage change data of the IP addresses to be compared, then: Among them, IP′ total This represents the number of IP addresses at the current moment. total This represents the total number of IPs within the statistical period, where t0 represents the start time of the statistical period and t represents the current time. If Tra is defined as the traffic data to be compared, then: Among them, Bt i Tm represents the total number of bytes in the i-th statistical period. i This represents the duration of the i-th statistical period, and n represents the number of statistical periods. If Con is defined as the concurrent request data to be compared, then: Among them, Rq i This represents the total number of requests within the i-th statistical period, where T represents the length of the statistical period and n represents the number of statistical periods. If M is defined as the aggregated data to be compared, then: M = k1 × Tra + k2 × Con Where k1 and k2 are proportionality coefficients, 0 < k1 < 1, 0 < k2 < 1, k1 + k2 = 1; The data management and control module includes a single-item management and control sub-module and a comprehensive management and control sub-module; For individual control submodules, if the percentage change data of the IP address to be compared exceeds the standard IP address change percentage threshold data, the IP change permission of the cloud mobile terminal will be cancelled separately; if the traffic data to be compared exceeds the standard traffic threshold data, the network speed of the cloud mobile terminal will be reduced or the network will be disconnected separately; if the concurrent request data to be compared exceeds the standard concurrent request threshold data, the remaining number of requests that the cloud mobile terminal can make will be limited or the request processing will be terminated separately. For the comprehensive management and control submodule, if the comprehensive data to be compared exceeds the standard comprehensive threshold data, the cloud mobile terminal will be slowed down or disconnected from the network. At the same time, the remaining number of requests that the cloud mobile terminal can make will be limited or the request process will be terminated.

2. The cloud phone traffic security management system according to claim 1, characterized in that, The data comparison alarm module includes a data comparison submodule and a data alarm submodule. The data comparison submodule is used to compare the data to be compared with a pre-set standard threshold. The data alarm submodule is connected to the data comparison submodule and receives the comparison results from the data comparison submodule. When the data to be compared exceeds the standard threshold range, an alarm is triggered. When the data to be compared does not exceed the standard threshold range, no alarm is triggered.

3. The cloud phone traffic security management system according to claim 1, characterized in that, When the data to be compared exceeds the standard threshold range, the cloud server platform will simultaneously send an alarm to the corresponding cloud mobile terminal and the server management, and store the alarm data on the cloud server platform.

Images