A pseudo base station identification method, device and electronic equipment

Abstract

The method comprises the following steps: sending a preset network strategy to a core network, so that the core network sends the preset network strategy to a base station accessed by a terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network strategy; detecting whether the network of the terminal to be detected is adjusted according to the preset network strategy; if the network of the terminal to be detected is not adjusted according to the preset network strategy, determining that the base station accessed by the terminal to be detected is a pseudo base station. Therefore, the identification efficiency of the pseudo base station is improved.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a method, apparatus and electronic device for identifying fake base stations. Background Technology

[0002] Fake base stations have become a major data security concern for businesses and ordinary users when using network communications. In related technologies, the identification of fake base stations relies on specialized equipment and expertise. For example, professional technicians analyze base station signals using hardware equipment. This places relatively high demands on both the hardware and the technicians, resulting in high identification costs and consequently low identification efficiency for fake base stations. Summary of the Invention

[0003] The purpose of this disclosure is to provide a method, apparatus, and electronic device for identifying fake base stations, so as to improve the efficiency of fake base station identification. The specific technical solution is as follows:

[0004] In a first aspect of this disclosure, a method for identifying fake base stations is provided, the method comprising:

[0005] A preset network policy is sent to the core network, which then sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0006] Detect whether the network of the terminal under test is adjusted according to the preset network strategy;

[0007] If the network of the terminal under test is not adjusted according to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

[0008] In some embodiments, the method further includes:

[0009] Accept network policy selection requests sent by the terminal to be tested;

[0010] The network policy requested in the network policy selection request is determined as the preset network policy;

[0011] After determining that the base station accessed by the terminal to be detected is a fake base station, the method further includes:

[0012] The identification result is sent to the terminal to be detected so that the terminal to be detected can display the identification result.

[0013] In some embodiments, determining that the base station accessed by the terminal under test is a fake base station if the network of the terminal under test is not adjusted according to the preset network policy includes:

[0014] According to the preset strategy verification scheme, the network of the terminal to be tested is verified by the preset network strategy within a preset time, and multiple verification results are obtained.

[0015] If all the verification results indicate that the network of the terminal under test does not conform to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

[0016] In some embodiments, the method further includes:

[0017] If the network of the terminal to be tested is not adjusted according to the preset network policy as verified by the preset policy verification scheme, then return to the step of sending the preset network policy to the core network.

[0018] In some embodiments, determining that the base station accessed by the terminal to be detected is a fake base station includes:

[0019] Acquire multiple new preset network policies;

[0020] The multiple new preset network policies are sent to the core network to detect whether the network of the terminal to be tested is adjusted according to the multiple new preset network policies;

[0021] If the network of the terminal under test is not adjusted according to any of the new preset network strategies, the communication function of the terminal under test is detected.

[0022] If the communication function of the terminal under test is normal, then the base station accessed by the terminal under test is determined to be a fake base station.

[0023] In some embodiments, the preset network policy includes a network speed-up policy or a network speed-down policy for the terminal to be detected.

[0024] In a second aspect of this disclosure, a fake base station identification device is provided, the device comprising:

[0025] The policy sending module is used to send a preset network policy to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0026] The policy detection module is used to detect whether the network of the terminal to be detected is adjusted according to the preset network policy;

[0027] The base station determination module is used to determine that the base station accessed by the terminal under test is a fake base station if the network of the terminal under test is not adjusted according to the preset network policy.

[0028] In some embodiments, the apparatus further includes:

[0029] The request receiving module is used to receive network policy selection requests sent by the terminal to be detected.

[0030] The strategy determination module is used to determine the network policy requested by the network policy selection request as a preset network policy.

[0031] After determining that the base station accessed by the terminal to be detected is a fake base station, the method further includes:

[0032] The result display module is used to send the recognition result to the terminal to be detected, so that the terminal to be detected can display the recognition result.

[0033] In some embodiments, the policy detection module includes:

[0034] The verification scheme determination submodule is used to determine the preset policy verification scheme that matches the preset network policy;

[0035] The verification scheme verification submodule is used to verify whether the network of the terminal to be tested is adjusted according to the preset network policy based on the preset policy verification scheme.

[0036] In some embodiments, the base station determination module includes:

[0037] The multiple verification submodule is used to perform multiple preset network policy verifications on the network of the terminal to be tested within a preset time according to the preset policy verification scheme, and obtain multiple verification results.

[0038] The fake base station determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if all the verification results indicate that the network of the terminal under test does not conform to the preset network policy.

[0039] In some embodiments, the apparatus further includes:

[0040] The re-verification module is used to return to the step of sending the preset network policy to the core network if the network of the terminal to be detected is not adjusted according to the preset network policy as verified by the preset policy verification scheme.

[0041] In some embodiments, the base station determination module includes:

[0042] The new strategy acquisition submodule is used to acquire multiple new preset network strategies;

[0043] The new strategy sending submodule is used to send the multiple new preset network strategies to the core network and detect whether the network of the terminal to be tested is adjusted according to the multiple new preset network strategies.

[0044] The new strategy verification submodule is used to detect the communication function of the terminal under test if the network of the terminal under test is not adjusted according to any of the new preset network strategies.

[0045] The communication function determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if the communication function of the terminal under test is normal.

[0046] In some embodiments, the preset network policy includes a network speed-up policy or a network speed-down policy for the terminal to be detected.

[0047] In a third aspect of this disclosure, an electronic device is also provided, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus.

[0048] Memory, used to store computer programs;

[0049] When a processor executes a program stored in memory, it implements any of the steps described in the first aspect.

[0050] In a fourth aspect of this disclosure, a computer-readable storage medium is also provided, wherein a computer program is stored therein, and when executed by a processor, the computer program implements the steps of any of the methods described in the first aspect.

[0051] Of course, implementing any product or method of this disclosure does not necessarily require achieving all of the advantages described above at the same time. Attached Figure Description

[0052] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this disclosure. For those skilled in the art, other embodiments can be obtained based on these accompanying drawings.

[0053] Figure 1 A flowchart illustrating a method for identifying fake base stations provided in this embodiment of the present disclosure;

[0054] Figure 2 A flowchart illustrating another method for identifying fake base stations provided in this embodiment of the present disclosure;

[0055] Figure 3 A flowchart illustrating another method for identifying fake base stations provided in this embodiment of the present disclosure;

[0056] Figure 4 A flowchart illustrating another method for identifying fake base stations provided in this embodiment of the present disclosure;

[0057] Figure 5 A flowchart illustrating another method for identifying fake base stations provided in this embodiment of the present disclosure;

[0058] Figure 6 A flowchart illustrating another method for identifying fake base stations provided in this embodiment of the present disclosure;

[0059] Figure 7 This is a schematic diagram of the structure of a fake base station identification device provided in an embodiment of the present disclosure;

[0060] Figure 8 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present disclosure. Detailed Implementation

[0061] The technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this disclosure, and not all embodiments. Based on the embodiments of this disclosure, all other embodiments obtained by those skilled in the art based on this disclosure are within the scope of protection of this disclosure.

[0062] As mentioned above, the identification of fake base stations in related technologies requires relatively high levels of hardware and technical expertise, resulting in high identification costs and technical barriers, making timely detection of fake base stations difficult and leading to low identification efficiency. Therefore, this disclosure provides a method for identifying fake base stations. The execution entity of this method can be a software module in the terminal to be detected, or an electronic device independent of the terminal to be detected, such as... Figure 1 As shown, the method includes:

[0063] S101, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0064] S102, Detect whether the network of the terminal under test is adjusted according to the preset network policy.

[0065] S103, if the network of the terminal to be tested is not adjusted according to the preset network policy, then the base station accessed by the terminal to be tested is determined to be a fake base station.

[0066] In this embodiment, the core network can send the received preset network policy to the base station connected to the terminal under test. The base station can adjust the network of the terminal under test according to the preset network policy. It is understood that if the base station accessed by the terminal under test is a fake base station, since the fake base station is not connected to the core network, it cannot receive the preset network policy sent by the core network. Therefore, the fake base station will not adjust the network of the terminal under test according to the preset network policy. Thus, if the network of the terminal under test is not adjusted according to the preset network policy, it indicates that the terminal under test is accessing a fake base station. With this scheme, it is only necessary to send and receive the preset network policy and perform network detection of the terminal under test to identify whether the base station accessed by the terminal under test is a fake base station. The identification process is simple and efficient, thereby improving the identification efficiency of fake base stations.

[0067] In step S101, the execution entity (hereinafter referred to as the execution entity) of the fake base station identification method provided in this disclosure establishes a communication connection with the core network. For example, the PCF (Policy Control Function) / PCRF (Policy Charging Control Function) module of the core network can expose an external interface. The execution entity establishes a communication connection with the core network through this interface and then sends a preset network policy to the core network through this interface. Specifically, if the network accessed by the terminal under test is a 4G network, the execution entity can send the preset network policy to the core network using the Diameter (a basic communication protocol) protocol through the Rx (an interface for data network and user plane functions) interface of the PCF / PCRF module. If the network accessed by the terminal under test is a 5G network, the execution entity can send the preset network policy to the core network using the HTTP / 2 protocol through the N6 (an interface for data network and user plane functions) interface of the PCF / PCRF module. The preset network policy can be selected by the user through the terminal under test, or it can be automatically selected by the execution entity based on the network conditions of the terminal under test. The core network receives preset network policies through the PCF / PCRF module and can process these policies locally, for example, by converting them into instructions recognizable by the base station and sending them to the base station connected to the terminal under test. Specifically, if the network is a 4G network, the core network can send the preset network policies to the base station through the Gx interface (an interface used for charging control and network policy control) of the PCF / PCRF module. If the network is a 5G network, the core network can send the preset network policies to the base station through the N7 interface (used for session management and network policy control functions) of the PCF / PCRF module.

[0068] It is understandable that preset network policies may include identifiers of the terminals to be detected. Therefore, the core network can determine the terminals to be detected based on the identifiers in the preset network policy, thereby determining the base stations accessed by the terminals to be detected, and sending the preset network policy to those base stations. If a base station receives the preset network policy sent by the core network, it can also determine the terminals to be detected accessing that base station based on the preset network policy, and adjust its network accordingly. Specifically, preset network policies may include control over the internet speed and / or duration of the terminals to be detected, as well as control over the internet access permissions and / or data plan fees of the terminals to be detected.

[0069] In some embodiments, the preset network policy includes a network speed-up policy or a network speed-down policy for the terminal to be tested.

[0070] The network speed-up strategy specifically increases the network speed of the terminal under test by adjusting network transmission elements such as uplink and downlink bandwidth, data transmission latency, and command scheduling priority. Conversely, the network speed-down strategy reduces the network speed of the terminal under test. Since different base stations may connect to different numbers of terminals, some base stations, due to a large number of connected terminals and heavy load, may lack the network resources to further speed up the terminal under test. This can lead to the base station being mistakenly identified as a fake base station due to insufficient network resources failing to execute the preset network strategy. Therefore, for such base stations, a network speed-down strategy can be selected as the preset network strategy to ensure that the base station receiving the strategy successfully executes it, thus avoiding such misidentification. Conversely, when the base station load is low and network resources are abundant, a network speed-up strategy can be selected as the preset network strategy to ensure that the base station executes the network strategy for the terminal under test.

[0071] This embodiment takes into account the network resource conditions of different base stations and provides two preset network strategies: a network speed-up strategy and a network speed-down strategy. This avoids misjudgment of fake base stations caused by base station network resource problems, thereby improving the accuracy of fake base station identification.

[0072] In step S102, the preset network policy is the adjustment strategy for the network of the terminal under test. Therefore, after sending the preset network policy to the core network, it is necessary to check whether the network of the terminal under test is adjusted according to the preset network policy. Specifically, it can be checked whether the adjustment process of the network of the terminal under test follows the preset network policy. For example, if the preset network policy is a network speed-up policy, it can be checked whether the network of the terminal under test has undergone a speed-up process. It can also be checked whether the state of the network of the terminal under test is the state specified in the preset network policy. Taking the preset network policy as a network speed-up policy as an example again, it can be checked whether the network speed of the terminal under test reaches the value specified in the preset network policy, such as 2M / S, and whether the packet loss rate is significantly reduced.

[0073] In S103, since the core network can issue customized policies (i.e., preset network policies) to legitimate base stations, if the base station connected to the terminal under test is a fake base station, there will be no Gx or N7 interface between the core network and the fake base station. Therefore, the core network cannot send the preset network policy to the fake base station through the aforementioned interface channel, and the fake base station cannot adjust the network of the terminal under test according to the preset network policy. Thus, if it is detected that the network of the terminal under test has not been adjusted according to the preset network policy, it can be determined that the base station connected to the terminal under test has not received the preset network policy sent by the core network, and this base station is a fake base station.

[0074] In some embodiments, if the network of the terminal under test is adjusted according to a preset network policy, the base station accessed by the terminal under test is determined to be a legitimate base station. It is understood that if the terminal under test adjusts its network according to the preset network policy, it indicates that the base station has adjusted the network of the terminal under test according to the preset network policy. Therefore, it can be determined that the base station has successfully received the preset network policy for the terminal under test sent by the core network. Thus, the base station accessed by the terminal under test is a legitimate base station.

[0075] It is understood that the above embodiments of this disclosure do not require dedicated hardware equipment to analyze base station signals, making them easy for industrial enterprises to implement and deploy in their daily operations. Therefore, while improving the identification efficiency of fake base stations, they also reduce the identification cost of fake base stations.

[0076] Furthermore, some methods for identifying fake base stations rely on differences in configuration parameters and power compared to legitimate base stations. However, this method requires a high level of expertise and has low reliability. For example, relevant personnel need to be familiar with the differences in configuration parameters and power between fake and legitimate base stations. If a fake base station strictly adheres to the standard parameters of a legitimate base station, this method is highly likely to result in misidentification. Additionally, this method increases the time delay of the cell reselection process, making it quite time-consuming.

[0077] The aforementioned scheme does not use the parameters of legitimate base stations as the standard for identifying fake base stations. Therefore, even if a fake base station defines its parameter configuration according to the standard parameters of a legitimate base station, it still lacks a Gx or N7 interface channel with the core network and cannot receive the preset network policies sent by the core network. Consequently, it can detect the network of the terminal under test to determine whether the base station it is connected to is a fake base station. Therefore, using the aforementioned scheme of this disclosure improves the efficiency of fake base station identification while avoiding false identification of fake base stations and accurately identifying them.

[0078] In related technologies, fake base stations are also identified through the interaction process or authentication process between the terminal and the base station. However, this method involves complex calculations and affects the location update and network connection speed of the terminal to be detected. Furthermore, it is greatly affected by network interference, resulting in low reliability of fake base station identification.

[0079] The solution disclosed herein does not rely on the interaction between the terminal under test and the base station to identify fake base stations. Instead, it focuses on the core network side, exploring the international standard definitions of the core network and base stations, and utilizing these features through secondary development (i.e., leveraging the fact that the core network's policy distribution module PCF / PCRF module has no interface channel with fake base stations) to achieve accurate identification of fake base stations. Furthermore, this disclosure utilizes the policy distribution characteristics of the core network to identify fake base stations. This process is directly implemented through an interface, and the entire process occurs within the protected operator's intranet, unaffected by malicious network interference, ensuring high security and reliability. Moreover, the interaction process between the core network and the wireless network (the core network receiving preset network policies and the core network sending preset network policies to the base station) is encapsulated through the aforementioned interface channel, making the solution more convenient to use and readily available anytime, anywhere.

[0080] In some related technologies, fake base stations are identified through whitelists. For example, a whitelist of LAC (location area code) is built in advance, and fake base stations are judged based on the whitelist. However, in this way, because the whitelist is relatively lagging and fixed, it cannot cover all base stations, and the failure to update the whitelist in a timely manner can lead to false identification of fake base stations.

[0081] By using the above embodiments of this disclosure, there is no need to use a whitelist. The terminal can identify fake base stations in a timely and efficient manner through the above scheme of this disclosure, avoiding misjudgments caused by using a fixed and delayed whitelist, and thus has higher practicality.

[0082] In some related technologies, the identification of a base station as a fake base station is determined by analyzing the information transmission and response between the core network and the base station. Specifically, taking the core network sending a preset network policy to the base station as an example, the base station will feed back the execution configuration result of the preset network policy to the core network through an interface response. However, in actual application scenarios, due to the varying construction loads of base stations, different base station manufacturers implement different methods for interface response. For example, there are synchronous responses, where the base station immediately sends a response to the core network after receiving the preset network policy; asynchronous responses, where the base station does not immediately send a response to the core network after receiving the preset network policy; and batch responses, where the base station receives preset network policies within a certain period and sends a unified response to the core network at a predetermined time, indicating whether the preset network policy was executed successfully or failed. Therefore, the method of determining whether a base station is a fake base station by analyzing its interface responses has limitations due to the lack of a unified standard for base station interface responses, and cannot be widely applied to base stations with different standards.

[0083] By employing the embodiments of this disclosure, based on the method for analyzing the interface response of the base station, and combined with the method of detecting whether the network of the terminal under test is adjusted according to the preset network strategy, this method does not solely rely on the analysis of the interface response of the base station. Since verifying the preset network strategy of the network of the terminal under test does not require the standardization and uniformity of the base station, a more applicable method for identifying fake base stations is provided. In the process of specific enterprises or users identifying whether the base station accessed by their terminals is a fake base station, relying on other hardware devices to obtain the initial identification and the identification results still incurs certain costs and inconveniences for enterprises or users. Therefore, this disclosure also provides a method for identifying fake base stations, such as... Figure 2 As shown, the method includes:

[0084] S201, Accept the network policy selection request sent by the terminal to be tested.

[0085] S202, the network policy requested in the network policy selection request is determined as the preset network policy.

[0086] S203, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0087] This step is the same as S101. Please refer to the relevant description of S101 for details. It will not be repeated here.

[0088] S204, Detect whether the network of the terminal under test is adjusted according to the preset network policy.

[0089] This step is the same as S102. Please refer to the relevant description of S102 for details. It will not be repeated here.

[0090] S205, if the network of the terminal under test is not adjusted according to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

[0091] This step is the same as S103. Please refer to the relevant description of S103 for details. It will not be repeated here.

[0092] S206, send the recognition result to the terminal to be tested so that the terminal to be tested can display the recognition result.

[0093] In step S201, if an enterprise or user needs to identify the base station accessed by the terminal to be detected, the terminal to be detected can send a network policy selection request to the execution entity. It is understood that the network policy selection request may include a preset network policy selected by the terminal to be detected. In some embodiments, the network policy selection request may also include the terminal identifier of the terminal to be detected, such as the IP address of the terminal to be detected; if the terminal to be detected is a mobile phone, it may also be the phone number of that mobile phone. Specifically, the process of the terminal to be detected sending the network policy selection request may involve turning off the Wi-Fi network, ensuring a normal connection to the 4G or 5G network, staying in the area where the base station needs to be identified, selecting a preset network policy, and then sending the network policy selection request.

[0094] In some embodiments, the terminal under test can select multiple preset network policies at once and send a network policy selection request. For example, it can select a network speed-up policy and a network speed-down policy. Specifically, it can first increase the network speed of the terminal under test to 2M / S and maintain the network speed at 2M / S for a preset time, and then decrease the network speed of the terminal under test to 1K / S.

[0095] In step S202, the executing entity determines the network policy requested in the network policy selection request sent by the terminal to be detected as the preset network policy corresponding to that terminal. For example, based on the identifier of the terminal to be detected in the network policy selection request, the terminal to be detected that needs to be identified as a fake base station is determined. Then, the preset network policy requested in the network policy selection request is matched with the terminal to be detected, so that the subsequent base station can make network adjustments for the terminal to be detected that corresponds to the preset network policy.

[0096] In S206, whether the base station accessed by the terminal under test is a fake base station has been identified, and the executing entity can send the identification result to the terminal under test, so that the terminal under test can intuitively display the identification result to the user or enterprise.

[0097] By using this embodiment, enterprises or users can identify fake base stations and obtain identification results simply by using the terminal to be detected. This allows enterprises or users to clearly understand the current trust status of the base station, improving the convenience and operability of fake base station identification.

[0098] Specifically, when detecting whether the network of the terminal under test is adjusted according to the preset network policy, if the same detection method is used for different preset network policies, for example, using a network speed test method to detect a preset network policy that controls internet access time, it may not be able to accurately detect whether the terminal under test is adjusting according to the preset network policy. Based on this, this disclosure also provides a method for identifying fake base stations, such as... Figure 3 As shown, the method includes:

[0099] S301, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0100] In S301, this step is the same as in S101. Please refer to the relevant description of S101 for details, which will not be repeated here.

[0101] S302, Determine the preset policy verification scheme that matches the preset network policy.

[0102] S303, verify whether the network of the terminal under test is adjusted according to the preset network policy based on the preset policy verification scheme.

[0103] S304. If the network of the terminal under test is not adjusted according to the preset network policy, the base station accessed by the terminal under test is determined to be a fake base station.

[0104] In S304, this step is the same as in S103. Please refer to the relevant description of S103 for details, which will not be repeated here.

[0105] In step S302, a preset network policy verification scheme can be pre-set to match different preset network policies. For example, if the preset network policy is not related to network speed, the matching preset network verification scheme can be a preset policy verification scheme for data packet transmission, which determines the network connection speed of the terminal to be tested by sending data packets. Since the preset network policy verification scheme already has a matching relationship with the preset network policy, the executing entity can automatically determine its corresponding preset network policy verification scheme according to the preset network policy.

[0106] In S303, once the preset policy verification scheme has been determined, it can be executed according to the content of the preset policy verification scheme to specifically detect the network of the terminal to be detected.

[0107] By using this embodiment, the matching preset strategy verification scheme can be automatically adopted according to different preset network strategies, making the network detection of the terminal to be detected targeted and reliable, and eliminating the need for manual operation, thereby improving the accuracy and convenience of fake base station identification.

[0108] It is understandable that even if the base station accessed by the terminal under test is a legitimate base station, the preset policy verification scheme may fail to execute due to various restrictions. For example, due to a brief network connectivity issue, the base station accessed by the terminal under test may not successfully receive the preset network policy, thus preventing the preset policy verification scheme from executing successfully. In this case, the network detection result for the terminal under test may be inaccurate, leading to a misjudgment of the base station accessed by the terminal under test. Based on this, this disclosure also provides a method for identifying fake base stations, such as... Figure 4 As shown, the method includes:

[0109] S401, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0110] In S401, this step is the same as in S101. Please refer to the relevant description of S101 for details, which will not be repeated here.

[0111] S402, detect whether the network of the terminal under test is adjusted according to the preset network policy.

[0112] In S402, this step is the same as in S102. Please refer to the relevant description of S102 for details, which will not be repeated here.

[0113] S403, according to the preset strategy verification scheme, the network of the terminal to be tested is verified multiple times within a preset time to obtain multiple verification results.

[0114] S404. If all verification results indicate that the network of the terminal under test does not conform to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

[0115] In step S403, the network of the terminal under test is verified multiple times within a preset time according to the same preset policy verification scheme, resulting in multiple verification results. This avoids inaccurate verification results due to the preset policy verification scheme failing to execute successfully. For example, if the preset network policy is a network speed-up policy, multiple data packets can be sent continuously within a preset time to test the network connection speed of the terminal under test and obtain multiple corresponding verification results related to the network speed of the terminal under test.

[0116] In step S404, if multiple verification results indicate that the network of the terminal under test has not been adjusted according to the preset network policy, then the base station accessed by the terminal under test can be determined to be a fake base station. Conversely, if any verification result indicates that the network of the terminal under test has been adjusted according to the preset network policy, then the base station accessed by the terminal under test can be determined to be a legitimate base station.

[0117] By using this embodiment, the network of the terminal to be tested can be verified multiple times, avoiding inaccurate network detection results caused by accidental factors, which could lead to misjudgment of the base station and further improve the accuracy of the fake base station identification method.

[0118] In some embodiments, the network connection of the terminal under test may be poor, and the base station may be unable to successfully control the network of the terminal under test. Furthermore, the network of the terminal under test may not adjust according to a preset network policy, leading to misjudgment of the base station. Based on this, this disclosure also provides a method for identifying fake base stations, such as... Figure 5 As shown, the method includes:

[0119] S501, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0120] In S501, this step is the same as in S101. Please refer to the relevant description of S101 for details, which will not be repeated here.

[0121] S502, determine the preset policy verification scheme that matches the preset network policy.

[0122] In S502, this step is the same as in S302. Please refer to the relevant description of S302 for details, which will not be repeated here.

[0123] S503 verifies whether the network of the terminal under test is adjusted according to the preset network policy based on the preset policy verification scheme.

[0124] In S503, this step is the same as in S303. Please refer to the relevant description of S303 for details, which will not be repeated here.

[0125] S504, if the network of the terminal under test is not adjusted according to the preset network policy according to the preset policy verification scheme, then return to the step of sending the preset network policy to the core network.

[0126] In step S504, the verification result obtained from the first verification of the terminal under test using the preset network policy verification scheme is the initial verification result. This initial verification result can show whether the network of the terminal under test has been adjusted according to the preset network policy. If the initial verification result shows that the network of the terminal under test has not been adjusted according to the preset network policy, it may be due to poor network conditions preventing the preset network policy from being successfully sent to the core network, or poor network connectivity of the terminal under test causing the base station to be unable to successfully adjust the network of the terminal under test. It cannot be completely determined that the verification result is due to the core network's inability to send the preset network policy to the base station. Based on this, the preset network policy can be resent to the core network, thereby re-executing steps S101 to S103 to avoid misjudgment of the base station caused by the preset network policy not being successfully sent due to network reasons.

[0127] By using this embodiment, if the initial verification result shows that the network of the terminal under test does not conform to the preset network policy, the preset network policy is resent to the core network. This avoids misjudgment of the base station accessed by the terminal under test due to the preset network policy not being successfully sent to the core network and the base station not successfully controlling the network of the terminal under test, thereby improving the accuracy of the fake base station identification method.

[0128] As mentioned above, different base stations have different loads. Therefore, some base stations with high loads may not be able to implement the preset network scheme to increase the network speed of the connected terminal under test. If such a base station is identified as a fake base station in this case, it will lead to a misjudgment. Based on this, this disclosure also provides a method for identifying fake base stations, such as... Figure 6 As shown, the method includes:

[0129] S601, the preset network policy is sent to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0130] In S601, this step is the same as in S101. Please refer to the relevant description of S101 for details, which will not be repeated here.

[0131] S602, detect whether the network of the terminal under test is adjusted according to the preset network policy.

[0132] In S602, this step is the same as in S102. Please refer to the relevant description of S102 for details, which will not be repeated here.

[0133] S603 If the network of the terminal to be tested has not been adjusted according to the preset network policy, then multiple new preset network policies are obtained.

[0134] S604 sends multiple new preset network policies to the core network and checks whether the network of the terminal under test is adjusted according to the multiple new preset network policies.

[0135] S605, if the network of the terminal under test is not adjusted according to any new preset network policy, test the communication function of the terminal under test.

[0136] S606 If the communication function of the terminal under test is normal, then the base station accessed by the terminal under test is determined to be a fake base station.

[0137] In S603, if the network of the terminal under test is not adjusted according to the preset network policy sent initially, the executing entity can automatically trigger the acquisition of multiple new preset network policies different from the initial preset network policy. For example, if the preset network policy sent to the core network initially is a network speed-up policy, a network speed-down policy can be subsequently acquired as a new preset network policy.

[0138] In step S604, multiple new preset network policies are sequentially sent to the core network. This allows the core network to sequentially transmit these new preset network policies to the base stations accessed by the terminal under test. The base stations then adjust the network of the terminal under test according to the new preset network policies, thereby sequentially detecting whether the network of the terminal under test has been adjusted according to the new preset network policies. This method avoids misjudgment due to limitations in the base station's own network resources. For example, if the first preset network policy sent to the core network is a network speed-up policy, a subsequent acquired network speed-down policy can be sent to the core network as a new preset network policy. This allows base stations with insufficient network resources to implement the network speed-down policy for the terminal under test, thus avoiding misjudgment of the base station due to insufficient network resources. The specific policy transmission process and network detection process are described in steps S101-S102, and will not be repeated here.

[0139] In S605, if the aforementioned detection determines that the network of the terminal under test has not adjusted according to any new preset network policy, it indicates that the base station's inability to execute the preset network policy is not due to its own network issues, but rather most likely because it is a fake base station and lacks an interface channel with the core network, thus failing to receive the preset network policy sent by the core network. In this case, it can be further determined whether the terminal under test itself has a communication function malfunction, causing the base station to be unable to adjust the network of the terminal under test. For example, whether the communication function is normal can be determined by detecting whether the voice call function of the terminal under test is normal.

[0140] Correspondingly, if the network of the terminal under test is adjusted according to any new preset network policy, it means that the base station can receive the new preset network policy sent by the core network, and thus it can be determined that the base station accessed by the terminal under test is a legitimate base station.

[0141] In S606, if the communication function of the terminal under test is normal, it can be determined that the failure of the network to adjust according to the preset network policy is not due to an abnormality in the terminal under test itself. Therefore, it can be determined that the base station accessed by the terminal under test is a fake base station.

[0142] Correspondingly, if the communication function of the terminal under test is abnormal, it should be considered that the base station is unable to adjust its network according to the preset network strategy due to the problem of the terminal under test itself. In this case, it should not be directly determined that the base station accessed by the terminal under test is a fake base station. Other terminals under test with normal communication functions can be used in the same location as this terminal under test to re-identify fake base stations.

[0143] By using this embodiment, the possibility of misjudging a base station due to network resource issues is eliminated through multiple different preset network strategies. Furthermore, the possibility of misjudging a base station due to communication failures of the terminal under test is eliminated by detecting the communication function of the terminal under test. This further improves the accuracy of fake base station identification.

[0144] In some embodiments, if it is detected that the network of the terminal under test has not been adjusted according to the preset network policy sent in the first transmission, the executing entity can automatically trigger the step of returning to receive the network policy selection request sent by the terminal under test, so that the enterprise or user using the terminal under test can reselect a new preset network policy that is suitable for the base station accessed by the terminal under test, so as to avoid misjudgment of the base station due to insufficient network resources.

[0145] To better illustrate the specific implementation process of the above-mentioned fake base station identification method, the following will explain it in conjunction with specific application scenarios:

[0146] Enterprises or users can prepare the terminals to be tested in advance. Taking a mobile phone as an example, turn off the phone's Wi-Fi network and ensure a normal 4G or 5G network connection. Place the phone in the production area to be inspected. Select a preset network policy on the phone and send a network policy selection request to the executing entity. Specifically, you can access the relevant system of the executing entity through a mobile browser. On the policy management and distribution page of this system, enter the phone number or IP address as an identifier, and select one of the two preset network policies: network speed increase to 2M / S and network speed decrease to 1K / S, as the network policy selection request to be sent to the executing entity.

[0147] Step 1: Upon receiving the network policy selection request, the executing entity calls the Rx interface corresponding to the 4G network or the N6 interface corresponding to the 5G network to send the preset network policy requested in the network policy selection request to the PCF / PCRF module of the core network in the form of a message.

[0148] Step 2: The PCF / PCRF module of the core network receives the message of the preset network policy, processes it locally, and then sends the preset network policy as an instruction to the base station accessed by the terminal to be detected through the Gx interface corresponding to the 4G network or the N7 interface corresponding to the 5G network.

[0149] Step 3: If the terminal under test is connected to a legitimate base station, it can receive preset network policy instructions and adjust the network speed of the corresponding mobile phone according to the preset network policy. If the terminal under test is connected to a fake base station, it cannot receive the preset network policy instructions sent by the core network and therefore cannot make the above adjustments to the mobile phone's network.

[0150] Step 4: After the executing entity sends the preset network policy to the core network, it can automatically select a preset policy verification scheme that matches the preset network policy. Specifically, if the preset network policy is to increase the network speed to 2M / S and decrease the network speed to 1K / S, then the executing entity can automatically match the preset policy verification scheme of "data packet transmission", that is, continuously send data packets within a preset time to test the current mobile phone's network connection speed and obtain the verification result.

[0151] If the initial verification result shows that the mobile phone has not made network adjustments according to the above preset network policy, then repeat step 1 and resend the preset network policy to the core network.

[0152] After resending the preset network policy, the mobile phone's network can be verified multiple times using the preset policy verification scheme. If multiple verification results show that the mobile phone has not adjusted the network according to the above preset network policy, a new preset network policy is determined and sent to the core network, such as changing the original network speed-up policy to a network latency policy.

[0153] Step 5: If the verification results of multiple new preset network strategies all show that the mobile phone has not made network adjustments according to the above preset network strategies, then the probability that the current base station accessed by the mobile phone is a fake base station is high. Further check whether the voice function of the mobile phone is normal. If the voice function is normal, then the current base station is determined to be a fake base station.

[0154] If the verification result of any new preset network policy shows that the mobile phone has made network adjustments according to the above preset network policy, then the base station currently accessed by the mobile phone is determined to be a legitimate base station.

[0155] Step 6: The executing entity sends the above-mentioned base station identification results to the mobile phone, so that the identification results are displayed on the mobile phone interface. Specifically, if the base station accessed by the mobile phone is a legitimate base station, it can display "The currently accessed base station is safe and reliable"; if the base station accessed by the mobile phone is a fake base station, it can display "The currently accessed base station is high-risk. Please contact the operator for security confirmation".

[0156] By using this embodiment, enterprises or users can easily identify fake base stations and obtain the identification results intuitively, while the identification method is efficient and accurate.

[0157] See Figure 7 , Figure 7 The diagram shown is a structural schematic of a fake base station identification device provided in an embodiment of this disclosure. The device includes:

[0158] The policy sending module 701 is used to send a preset network policy to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0159] The policy detection module 702 is used to detect whether the network of the terminal to be detected is adjusted according to the preset network policy;

[0160] The base station determination module 703 is used to determine that the base station accessed by the terminal under test is a fake base station if the network of the terminal under test is not adjusted according to the preset network policy.

[0161] In some embodiments, the apparatus further includes:

[0162] The request receiving module is used to receive network policy selection requests sent by the terminal to be detected.

[0163] The strategy determination module is used to determine the network policy requested by the network policy selection request as a preset network policy.

[0164] After determining that the base station accessed by the terminal to be detected is a fake base station, the method further includes:

[0165] The result display module is used to send the recognition result to the terminal to be detected, so that the terminal to be detected can display the recognition result.

[0166] In some embodiments, the policy detection module 702 includes:

[0167] The verification scheme determination submodule is used to determine the preset policy verification scheme that matches the preset network policy;

[0168] The verification scheme verification submodule is used to verify whether the network of the terminal to be tested is adjusted according to the preset network policy based on the preset policy verification scheme.

[0169] In some embodiments, the base station determination module 703 includes:

[0170] The multiple verification submodule is used to perform multiple preset network policy verifications on the network of the terminal to be tested within a preset time according to the preset policy verification scheme, and obtain multiple verification results.

[0171] The fake base station determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if all the verification results indicate that the network of the terminal under test does not conform to the preset network policy.

[0172] In some embodiments, the apparatus further includes:

[0173] The re-verification module is used to return to the step of sending the preset network policy to the core network if the network of the terminal to be detected is not adjusted according to the preset network policy as verified by the preset policy verification scheme.

[0174] In some embodiments, the base station determination module 703 includes:

[0175] The new strategy acquisition submodule is used to acquire multiple new preset network strategies;

[0176] The new strategy sending submodule is used to send the multiple new preset network strategies to the core network and detect whether the network of the terminal to be tested is adjusted according to the multiple new preset network strategies.

[0177] The new strategy verification submodule is used to detect the communication function of the terminal under test if the network of the terminal under test is not adjusted according to any of the new preset network strategies.

[0178] The communication function determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if the communication function of the terminal under test is normal.

[0179] In some embodiments, the preset network policy includes a network speed-up policy or a network speed-down policy for the terminal to be detected.

[0180] This disclosure also provides an electronic device, such as... Figure 8 As shown, it includes a processor 801, a communication interface 802, a memory 803, and a communication bus 804. The processor 801, communication interface 802, and memory 803 communicate with each other via the communication bus 804.

[0181] Memory 803 is used to store computer programs;

[0182] When processor 801 executes a program stored in memory 803, it performs the following steps:

[0183] A preset network policy is sent to the core network, which then sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy.

[0184] Detect whether the network of the terminal under test is adjusted according to the preset network strategy;

[0185] If the network of the terminal under test is not adjusted according to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

[0186] The communication bus mentioned in the above electronic devices can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0187] The communication interface is used for communication between the aforementioned electronic devices and other devices.

[0188] The memory may include random access memory (RAM) or non-volatile memory (NVM), such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0189] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0190] In another embodiment provided in this disclosure, a computer-readable storage medium is also provided, which stores a computer program that, when executed by a processor, implements the steps of any of the above-described fake base station identification methods.

[0191] In another embodiment provided in this disclosure, a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to execute any of the fake base station identification methods described above.

[0192] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this disclosure are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., a solid-state disk (SSD)).

[0193] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0194] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the embodiments of apparatus, electronic devices, and computer-readable storage media are basically similar to the method embodiments, and therefore the descriptions are relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0195] The above description is merely a preferred embodiment of this disclosure and is not intended to limit the scope of protection of this disclosure. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure are included within the scope of protection of this disclosure.

Claims

1. A method for identifying fake base stations, characterized in that, The method includes: A preset network policy is sent to the core network, which then sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy. Detect whether the network of the terminal under test is adjusted according to the preset network strategy; If the network of the terminal under test is not adjusted according to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

2. The method according to claim 1, characterized in that, The method further includes: Accept network policy selection requests sent by the terminal to be tested; The network policy requested in the network policy selection request is determined as the preset network policy; After determining that the base station accessed by the terminal to be detected is a fake base station, the method further includes: The identification result is sent to the terminal to be detected so that the terminal to be detected can display the identification result.

3. The method according to claim 1, characterized in that, The step of detecting whether the network of the terminal under test is adjusted according to the preset network policy includes: Determine a preset policy verification scheme that matches the preset network policy; The network of the terminal to be tested is verified according to the preset network policy based on the preset policy verification scheme.

4. The method according to claim 3, characterized in that, If the network of the terminal under test is not adjusted according to the preset network policy, then determining that the base station accessed by the terminal under test is a fake base station includes: According to the preset strategy verification scheme, the network of the terminal to be tested is verified multiple times within a preset time to obtain multiple verification results. If all the verification results indicate that the network of the terminal under test does not conform to the preset network policy, then the base station accessed by the terminal under test is determined to be a fake base station.

5. The method according to claim 3, characterized in that, The method further includes: If the network of the terminal to be tested is not adjusted according to the preset network policy as verified by the preset policy verification scheme, then return to the step of sending the preset network policy to the core network.

6. The method according to claim 1, characterized in that, The step of determining that the base station accessed by the terminal to be detected is a fake base station includes: Acquire multiple new preset network policies; The multiple new preset network policies are sent to the core network to detect whether the network of the terminal to be tested is adjusted according to the multiple new preset network policies; If the network of the terminal under test is not adjusted according to any of the new preset network strategies, the communication function of the terminal under test is detected. If the communication function of the terminal under test is normal, then the base station accessed by the terminal under test is determined to be a fake base station.

7. The method according to claim 1, characterized in that, The preset network strategy includes a network speed-up strategy or a network speed-down strategy for the terminal to be detected.

8. A fake base station identification device, characterized in that, The device includes: The policy sending module is used to send a preset network policy to the core network, so that the core network sends the preset network policy to the base station accessed by the terminal to be detected, so that the base station adjusts the network of the terminal to be detected according to the preset network policy. The policy detection module is used to detect whether the network of the terminal to be detected is adjusted according to the preset network policy; The base station determination module is used to determine that the base station accessed by the terminal under test is a fake base station if the network of the terminal under test is not adjusted according to the preset network policy.

9. The apparatus according to claim 8, characterized in that, The device further includes: The request receiving module is used to receive network policy selection requests sent by the terminal to be detected. The strategy determination module is used to determine the network policy requested by the network policy selection request as a preset network policy. After determining that the base station accessed by the terminal to be detected is a fake base station, the method further includes: The result display module is used to send the recognition result to the terminal to be detected, so that the terminal to be detected can display the recognition result.

10. The apparatus according to claim 8, characterized in that, The strategy detection module includes: The verification scheme determination submodule is used to determine the preset policy verification scheme that matches the preset network policy; The verification scheme verification submodule is used to verify whether the network of the terminal to be tested is adjusted according to the preset network policy based on the preset policy verification scheme.

11. The apparatus according to claim 10, characterized in that, The base station determination module includes: The multiple verification submodule is used to perform multiple preset network policy verifications on the network of the terminal to be tested within a preset time according to the preset policy verification scheme, and obtain multiple verification results. The fake base station determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if all the verification results indicate that the network of the terminal under test does not conform to the preset network policy.

12. The apparatus according to claim 10, characterized in that, The device further includes: The re-verification module is used to return to the step of sending the preset network policy to the core network if the network of the terminal to be detected is not adjusted according to the preset network policy as verified by the preset policy verification scheme.

13. The apparatus according to claim 8, characterized in that, The base station determination module includes: The new strategy acquisition submodule is used to acquire multiple new preset network strategies; The new strategy sending submodule is used to send the multiple new preset network strategies to the core network and detect whether the network of the terminal to be detected is adjusted according to the multiple new preset network strategies. The new strategy verification submodule is used to detect the communication function of the terminal under test if the network of the terminal under test is not adjusted according to any of the new preset network strategies. The communication function determination submodule is used to determine that the base station accessed by the terminal under test is a fake base station if the communication function of the terminal under test is normal.

14. The apparatus according to claim 8, characterized in that, The preset network strategy includes a network speed-up strategy or a network speed-down strategy for the terminal to be detected.

15. An electronic device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; Memory, used to store computer programs; A processor, when executing a program stored in memory, implements the steps of the method described in any one of claims 1-7.

16. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the method described in any one of claims 1-7.

Images