Signaling tracking system and method

Abstract

The application discloses a signaling tracking system and method. The system comprises a signaling management center and multiple network elements. The signaling management center is configured to issue a signaling tracking instruction to the multiple network elements, and determine a signaling transmission process according to first signaling and a global identifier fed back by the multiple network elements. Each network element is configured to acquire signaling log information in response to the signaling tracking instruction, determine the first signaling processed by the network element, first identifier information of the network element, second identifier information of a previous process network element of the network element, and third identifier information of a next process network element of the network element according to the signaling log information, generate the global identifier in a linked list form by using the second identifier information, the first identifier information and the third identifier information, encrypt the global identifier, and send the encrypted global identifier and the first signaling to the signaling management center. The application solves the technical problem that the global identifier generated in the signaling tracking process lacks flexibility and is easy to be leaked.

Description

Technical Field

[0001] This application relates to the field of wireless communication technology, and more specifically, to a signaling tracking system and method. Background Technology

[0002] In current signaling tracing solutions, most global identifiers are generated by using meaningless unique identifiers as the basis for tracing the entire process and associating context requests. For example, the Universally Unique Identifier (UUID) scheme is used, or the strong association method is used to directly set the trajectory of the process and the relationship between the preceding and following parts, and each process has a corresponding strong association context implementation.

[0003] However, existing global identifiers lack the ability to proactively associate with context, requiring an additional request to be sent to subsequent requests to inform them of the identifier. This poses a risk of information leakage. Obtaining the global identifier provides information about the entire process. The UU identifier solution has high storage costs, is insecure, and is unordered, making it unsuitable for applications requiring sorting. Furthermore, some related solutions require generating identifiers based on device information, but this requires informing the next network element of the generated identifier after each tracking step, which is inflexible.

[0004] There is currently no effective solution to the above problems. Summary of the Invention

[0005] This application provides a signaling tracing system and method to at least solve the technical problem in the related art that the global identifier generated during the signaling tracing process lacks flexibility and is easily leaked.

[0006] According to one aspect of the embodiments of this application, a signaling tracing system is provided, including: a signaling management center and multiple network elements, wherein the signaling management center is used to issue signaling tracing instructions to the multiple network elements and determine the signaling transmission process based on the first signaling and global identifier fed back by the multiple network elements; each network element is used to respond to the signaling tracing instructions, obtain signaling log information, determine the first signaling processed by the network element, the first identifier information of the network element, the second identifier information of the network element's previous process network element, and the third identifier information of the network element's next process network element based on the signaling log information, generate a global identifier in the form of a linked list using the second identifier information, encrypt the global identifier, and send the encrypted global identifier and the first signaling to the signaling management center.

[0007] Optionally, the signaling tracing system also includes a reverse proxy server, used to record log information of each network element processing the first signaling during the signaling transmission process.

[0008] Optionally, each network element is used to respond to signaling tracing commands, obtain the corresponding signaling log information from the reverse proxy server through a log data collection tool, and store the signaling log information in the Kafka system; consume the signaling log information in the Kafka system, parse the signaling log information, and obtain the first signaling, the first identification information, the second identification information, and the third identification information.

[0009] Optionally, each network element is used to sequentially use the second identification information, the first identification information, and the third identification information as three nodes in a linked list, and the resulting linked list is used as the global identifier corresponding to the network element.

[0010] Optionally, each network element is used to encrypt the global identifier according to a symmetric encryption algorithm, wherein the first key used by the symmetric encryption algorithm is obtained by negotiation between the network element and the signaling management center.

[0011] Optionally, each network element is used to encrypt the first signaling using the encrypted global identifier as a second key, and send the encrypted global identifier and the encrypted first signaling to the signaling management center.

[0012] Optionally, the signaling management center is used to decrypt the encrypted first signaling based on the encrypted global identifier, and to decrypt the encrypted global identifier based on the first key, to obtain the first signaling and global identifier of multiple network elements; and to sort the multiple first signaling according to the linked list node relationship in each global identifier to obtain the signaling transmission process.

[0013] According to another aspect of the embodiments of this application, a signaling tracing method applied to a network element is also provided, comprising: responding to a signaling tracing instruction issued by a signaling management center, obtaining signaling log information; determining, based on the signaling log information, a first signaling processed by the network element, a first identification information of the network element, a second identification information of the network element's previous process network element, and a third identification information of the network element's next process network element; generating a global identifier by linking the second identification information, the first identification information, and the third identification information in the form of a linked list, and encrypting the global identifier; and sending the encrypted global identifier and the first signaling to the signaling management center.

[0014] According to another aspect of the embodiments of this application, a signaling tracing method applied to a signaling management center is also provided, comprising: issuing signaling tracing instructions to multiple network elements, wherein each network element is used to respond to the signaling tracing instructions and obtain signaling log information; determining, based on the signaling log information, a first signaling processed by the network element, a first identification information of the network element, a second identification information of the network element's previous process network element, and a third identification information of the network element's next process network element; generating a global identifier by linking the second identification information, the first identification information, and the third identification information in the form of a linked list, and encrypting the global identifier; sending the encrypted global identifier and the first signaling to the signaling management center; and determining the signaling transmission process based on the first signaling fed back by the multiple network elements and the encrypted global identifier.

[0015] According to another aspect of the embodiments of this application, an electronic device is also provided, the electronic device including: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the above-described signaling tracing method through the computer program.

[0016] In this embodiment, the signaling management center issues signaling tracing instructions to multiple network elements. Each network element responds to the signaling tracing instructions, obtains signaling log information, and determines the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element preceding it, and the third identification information of the network element following it based on the signaling log information. The second, first, and third identification information are then linked together to generate a global identifier, which is then encrypted. The encrypted global identifier and the first signaling are sent to the signaling management center. The signaling management center determines the signaling transmission flow based on the first signaling and the global identifier fed back by multiple network elements. The generation of a global identifier by each network element in the form of a linked list, including the source network element identifier, the current network element identifier, and the identifier of the next network element in the next flow, provides greater flexibility. Encrypting and transmitting this global identifier to the signaling management center ensures the security of the global identifier transmission process. After decryption, the signaling management center can determine the complete signaling flow based on the linked list, effectively solving the technical problems of the lack of flexibility and easy leakage of the global identifier generated during the signaling tracing process in related technologies. Attached Figure Description

[0017] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0018] Figure 1 This is a schematic diagram of an optional signaling tracing system according to an embodiment of this application;

[0019] Figure 2 This is a schematic diagram of an optional linked list structure for a global identifier of a network element according to an embodiment of this application;

[0020] Figure 3 This is a schematic diagram of the structure of an optional computer terminal according to an embodiment of this application;

[0021] Figure 4 This is a flowchart illustrating an optional signaling tracing method according to an embodiment of this application;

[0022] Figure 5 This is a flowchart illustrating another optional signaling tracing method according to an embodiment of this application. Detailed Implementation

[0023] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first," "second," etc., used in the specification, claims, and drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0025] To better understand the embodiments of this application, the following is a translation and explanation of some nouns or terms that appear in the description of the embodiments of this application:

[0026] Microservices: A software architecture pattern that breaks down a large application and service into several or even dozens of supporting microservices. Each microservice is independent and can be deployed, scaled, and managed independently, communicating and collaborating with each other through lightweight communication mechanisms.

[0027] Signaling is information used to control and manage communication traffic during communication. It includes control signals and procedures required to establish, maintain, and terminate communication connections. It is primarily used to instruct both communicating parties to start, end, or change the communication state, and to transmit necessary communication parameters and protocol information. Simply put, when one end of a communication is undergoing a state transition, it sends signaling to notify the other end to synchronize its state.

[0028] Symmetric encryption algorithms: These are algorithms that use the same key for both encryption and decryption. In symmetric encryption, the sender and receiver must share the same key, which is used to convert data into ciphertext and to restore the ciphertext to plaintext when the receiver decrypts it. Common symmetric encryption algorithms include:

[0029] 1) DES (Data Encryption Standard) algorithm: It is an algorithm that uses a 56-bit key to encrypt data into 64-bit blocks. Because the DES key length is short, it is vulnerable to brute-force attacks and has been gradually replaced by more secure algorithms.

[0030] 2) 3DES (Triple Data Encryption Standard) algorithm: It is an improvement on the DES algorithm, which uses three 56-bit keys to encrypt the data three times with the DES algorithm to achieve higher security.

[0031] 3) AES (Advanced Encryption Standard) algorithm: It is a symmetric encryption algorithm that uses 128-bit, 192-bit or 256-bit keys. AES is currently widely used in various fields, including e-commerce, network communication and data storage.

[0032] 4) IDEA (International Data Encryption Algorithm): is a symmetric encryption algorithm that uses a 128-bit key to encrypt data.

[0033] Example 1

[0034] In the signaling tracing process of 5G mobile communication networks, each network element generates its own unique global identifier as the basis for the entire signaling tracing process and for requesting context association. This global identifier and the signaling are then sent to the aggregation center. Upon receiving the signaling, the aggregation center matches each signaling based on the global identifier to perform signaling tracing and analysis. However, the global identifier in this scheme does not have the function of proactively associating with context; it requires sending an additional request in advance to inform the next request of the identifier information, which lacks flexibility, and the global identifier information is at risk of being leaked.

[0035] To address the aforementioned problems, embodiments of this application provide a signaling tracing system, such as... Figure 1 As shown, the system includes at least: a signaling management center 11 and multiple network elements 12 (1 to n), wherein:

[0036] The signaling management center can proactively issue signaling tracing commands to multiple network elements;

[0037] Each network element can respond to the signaling tracing command to obtain signaling log information; based on the signaling log information, it can determine the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element preceding it, and the third identification information of the network element following it; it can generate a global identifier by linking the second, first, and third identification information into a linked list and encrypt the global identifier; and it can send the encrypted global identifier and the first signaling to the signaling management center.

[0038] The signaling management center can determine the signaling transmission process based on the first signaling and global identifier fed back by multiple network elements.

[0039] In a clustered deployment system, the aforementioned network elements can be independent microservices.

[0040] Optionally, the signaling tracing system in this embodiment further includes a reverse proxy server, which can record log information of each network element processing the first signaling during the signaling transmission process. Specifically, the reverse proxy server can be an nginx component.

[0041] The following section describes the functions of each module of the signaling tracing system in conjunction with the specific implementation process.

[0042] To reflect the contextual relationship of signaling processed by each network element, this application embodiment proposes to generate the global identifier of the current network element by combining the source network element identifier, the current network element identifier, and the next flowing network element identifier in the form of a linked list when generating the global identifier of the current network element.

[0043] Specifically, after the signaling management center issues a signaling tracing command, each network element can respond to the command, obtain the corresponding signaling log information from the reverse proxy server using a log data collection tool, and store the signaling log information in the Kafka system. The log data collection tool can be Filebeat. The network element consumes the signaling log information from the Kafka system, parses it, and obtains the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element preceding it, and the third identification information of the network element following it.

[0044] Afterwards, each network element can use the parsed second identifier, first identifier, and third identifier as three nodes in a linked list, and use the resulting linked list as the global identifier corresponding to the network element.

[0045] Optionally, to ensure transmission security, each network element can encrypt the global identifier using a symmetric encryption algorithm. The first key used in this symmetric encryption algorithm is negotiated between the network element and the signaling management center. Specifically, the network element uses the first key to encrypt the plaintext of the global identifier into ciphertext, and the signaling management center uses the same first key to decrypt the ciphertext. Different network elements can use different first keys. The specific symmetric encryption algorithm used can be DES, 3DES, AES, IDEA, etc.

[0046] To further ensure transmission security, each network element can use the encrypted global identifier as a second key to encrypt the first signaling, and then send the encrypted global identifier and the encrypted first signaling to the signaling management center.

[0047] The above encryption method can prevent the global identifier and the first signaling message from being leaked during signaling tracing. Even if the key of the current network element is cracked, it will not affect the global identifier and the first signaling message transmitted by other network elements in the future, thus effectively ensuring the information security of signaling tracing.

[0048] Optionally, the signaling management center can decrypt the encrypted first signaling based on the encrypted global identifier and decrypt the encrypted global identifier based on the first key to obtain the first signaling and global identifier of multiple network elements; then, the multiple first signalings can be sorted according to the linked list node relationship in each global identifier to obtain the signaling transmission process.

[0049] by Figure 2 For example, the signaling management center receives global identifiers in a linked list structure for the first, second, and third network elements. If the first network element's first identifier (pre-ID1) is the same as the second network element's second identifier (last-ID2), and the first network element's third identifier (next-ID1) is the same as the second network element's first identifier (pre-ID2), then the first network element is determined to be the preceding network element in the second process. Similarly, if the second network element's first identifier (pre-ID2) is the same as the third network element's second identifier (last-ID3), and the second network element's third identifier (next-ID2) is the same as the third network element's first identifier (pre-ID3), then the third network element is determined to be the following network element in the second process. By sorting the corresponding first signaling messages according to the network element relationships, the complete signaling transmission process can be obtained.

[0050] In this embodiment, the signaling management center issues signaling tracing instructions to multiple network elements. Each network element responds to the signaling tracing instructions, obtains signaling log information, and determines the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element preceding it, and the third identification information of the network element following it based on the signaling log information. The second, first, and third identification information are then linked together to generate a global identifier, which is then encrypted. The encrypted global identifier and the first signaling are sent to the signaling management center. The signaling management center determines the signaling transmission flow based on the first signaling and the global identifier fed back by multiple network elements. The generation of a global identifier by each network element in the form of a linked list, including the source network element identifier, the current network element identifier, and the identifier of the next network element in the next flow, provides greater flexibility. Encrypting and transmitting this global identifier to the signaling management center ensures the security of the global identifier transmission process. After decryption, the signaling management center can determine the complete signaling flow based on the linked list, effectively solving the technical problems of the lack of flexibility and easy leakage of the global identifier generated during the signaling tracing process in related technologies.

[0051] Example 2

[0052] Based on the signaling tracing system provided in Embodiment 1, this application embodiment provides a signaling tracing method implemented by a network element. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order than that shown here.

[0053] Among them, network elements can be mobile terminals, computer terminals, or similar computing devices. Figure 3 A hardware block diagram of a computer terminal (or mobile device) for implementing a signaling tracing method is shown. Figure 3 As shown, the computer terminal 30 (or mobile device 30) may include one or more processors 302 (shown as 302a, 302b, ..., 302n in the figure) (processor 302 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 304 for storing data, and a transmission device 306 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 3 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 30 may also include... Figure 3 The more or fewer components shown, or having the same Figure 3 The different configurations shown.

[0054] It should be noted that the aforementioned one or more processors 302 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 30 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0055] The memory 304 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the signaling tracing method in this embodiment. The processor 302 executes various functional applications and data processing by running the software programs and modules stored in the memory 304, thereby implementing the aforementioned application vulnerability detection method. The memory 304 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 304 may further include memory remotely located relative to the processor 302, and these remote memories can be connected to the computer terminal 30 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0056] The transmission device 306 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 30. In one example, the transmission device 306 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 306 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0057] The display may be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 30 (or mobile device).

[0058] Under the above operating environment, this application provides a signaling tracing method, such as... Figure 4 As shown, the method includes the following steps:

[0059] Step S402: In response to the signaling tracing instruction issued by the signaling management center, obtain signaling log information;

[0060] Step S404: Based on the signaling log information, determine the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element in the previous process, and the third identification information of the network element in the next process.

[0061] Step S406: Generate a global identifier by linking the second identifier information, the first identifier information, and the third identifier information into a linked list, and encrypt the global identifier;

[0062] Step S408: Send the encrypted global identifier and the first signaling to the signaling management center.

[0063] The following section explains each step of the signaling tracing method in conjunction with the specific implementation process.

[0064] Specifically, after the signaling management center issues a signaling tracing command, each network element can respond to the command, obtain the corresponding signaling log information from the reverse proxy server using a log data collection tool, and store the signaling log information in the Kafka system. The log data collection tool can be Filebeat. The network element consumes the signaling log information from the Kafka system, parses it, and obtains the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element preceding it, and the third identification information of the network element following it.

[0065] Afterwards, each network element can use the parsed second identifier, first identifier, and third identifier as three nodes in a linked list, and use the resulting linked list as the global identifier corresponding to the network element.

[0066] Optionally, to ensure transmission security, each network element can encrypt the global identifier using a symmetric encryption algorithm. The first key used in this symmetric encryption algorithm is negotiated between the network element and the signaling management center. Specifically, the network element uses the first key to encrypt the plaintext of the global identifier into ciphertext, and the signaling management center uses the same first key to decrypt the ciphertext. Different network elements can use different first keys. The specific symmetric encryption algorithm used can be DES, 3DES, AES, IDEA, etc.

[0067] To further ensure transmission security, each network element can use the encrypted global identifier as a second key to encrypt the first signaling, and then send the encrypted global identifier and the encrypted first signaling to the signaling management center.

[0068] The above encryption method can prevent the global identifier and the first signaling message from being leaked during signaling tracing. Even if the key of the current network element is cracked, it will not affect the global identifier and the first signaling message transmitted by other network elements in the future, thus effectively ensuring the information security of signaling tracing.

[0069] Afterwards, the signaling management center can decrypt the encrypted first signaling based on the encrypted global identifier, and decrypt the encrypted global identifier based on the first key to obtain the first signaling and global identifier of multiple network elements; then, the multiple first signalings are sorted according to the linked list node relationship in each global identifier to obtain the signaling transmission process.

[0070] In this embodiment, the network element responds to the signaling tracing instruction issued by the signaling management center and obtains signaling log information. Based on the signaling log information, it determines the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's predecessor, and the third identification information of the network element's next successor. It then generates a global identifier using the second, first, and third identification information in a linked list and encrypts the global identifier. Finally, it sends the encrypted global identifier and the first signaling to the signaling management center. Each network element generates a global identifier in the form of a linked list, including the source network element identifier, the current network element identifier, and the identifier of the next successor network element. This provides greater flexibility. Encrypting and transmitting the global identifier to the signaling management center ensures the security of the global identifier transmission process. After decryption, the signaling management center can determine the complete signaling process based on the linked list, effectively solving the technical problems of the lack of flexibility and easy leakage of the global identifier generated during the signaling tracing process in related technologies.

[0071] Example 3

[0072] Based on the signaling tracing system provided in Embodiment 1, this application embodiment also provides a signaling tracing method implemented by a signaling management center. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0073] The signaling management center can also be a mobile terminal, computer terminal, or similar computing device, with a specific structure as follows: Figure 2 As shown.

[0074] Figure 5 This is a flowchart illustrating an optional signaling tracing method according to an embodiment of this application, as shown below. Figure 5 As shown, the method includes at least the following steps:

[0075] S502: A signaling tracing command is issued to multiple network elements. Each network element responds to the signaling tracing command and obtains signaling log information. Based on the signaling log information, the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process element, and the third identification information of the network element's next process element are determined. The second identification information, the first identification information, and the third identification information are generated into a global identifier in the form of a linked list, and the global identifier is encrypted. The encrypted global identifier and the first signaling are sent to the signaling management center.

[0076] S504 determines the signaling transmission process based on the first signaling feedback from multiple network elements and the encrypted global identifier.

[0077] The following section explains each step of the signaling tracing method in conjunction with the specific implementation process.

[0078] Specifically, the signaling management center first issues signaling tracing instructions to multiple network elements.

[0079] Each network element can respond to signaling tracing commands, obtain signaling log information corresponding to the network element from the reverse proxy server through a log data collection tool, and store the signaling log information in the Kafka system. The log data collection tool can be Filebeat. The network element consumes the signaling log information from the Kafka system, parses the signaling log information, and obtains the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element in the previous process, and the third identification information of the network element in the next process.

[0080] Afterwards, each network element can use the parsed second identifier, first identifier, and third identifier as three nodes in a linked list, and use the resulting linked list as the global identifier corresponding to the network element.

[0081] Optionally, to ensure transmission security, each network element can encrypt the global identifier using a symmetric encryption algorithm. The first key used in this symmetric encryption algorithm is negotiated between the network element and the signaling management center. Specifically, the network element uses the first key to encrypt the plaintext of the global identifier into ciphertext, and the signaling management center uses the same first key to decrypt the ciphertext. Different network elements can use different first keys. The specific symmetric encryption algorithm used can be DES, 3DES, AES, IDEA, etc.

[0082] To further ensure transmission security, each network element can use the encrypted global identifier as a second key to encrypt the first signaling, and then send the encrypted global identifier and the encrypted first signaling to the signaling management center.

[0083] Afterwards, the signaling management center can decrypt the encrypted first signaling based on the encrypted global identifier, and decrypt the encrypted global identifier based on the first key to obtain the first signaling and global identifier of multiple network elements; then, the multiple first signalings are sorted according to the linked list node relationship in each global identifier to obtain the signaling transmission process.

[0084] In this embodiment, the signaling management center sends signaling tracing instructions to multiple network elements. Each network element responds to the signaling tracing instructions, obtains signaling log information, and determines the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's predecessor, and the third identification information of the network element's next successor based on the signaling log information. The second, first, and third identification information are then linked together to generate a global identifier, which is then encrypted. The encrypted global identifier and the first signaling are sent to the signaling management center. The signaling management center determines the signaling transmission flow based on the first signaling from multiple network elements and the encrypted global identifier. The generation of a global identifier by each network element in the form of a linked list, including the source network element identifier, the current network element identifier, and the identifier of the next successor network element, offers greater flexibility. Encrypting and transmitting this global identifier to the signaling management center ensures the security of the global identifier transmission process. After decryption, the signaling management center can determine the complete signaling flow based on the linked list, effectively solving the technical problems of the lack of flexibility and easy leakage of the global identifier generated during the signaling tracing process in related technologies.

[0085] Example 4

[0086] According to an embodiment of this application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the signaling tracing method in embodiment 2 or embodiment 3 by running the computer program.

[0087] According to an embodiment of this application, a processor is also provided for running a computer program, wherein the computer program executes the signaling tracing method in embodiment 2 or embodiment 3 during runtime.

[0088] According to an embodiment of this application, an electronic device is also provided, comprising: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the signaling tracing method of embodiment 2 or embodiment 3 through the computer program.

[0089] Optionally, the computer program executes the following steps: in response to a signaling tracing instruction issued by the signaling management center, it obtains signaling log information; based on the signaling log information, it determines the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process network element, and the third identification information of the network element's next process network element; it generates a global identifier by linking the second identification information, the first identification information, and the third identification information in the form of a linked list, and encrypts the global identifier; and it sends the encrypted global identifier and the first signaling to the signaling management center.

[0090] Optionally, the computer program may also execute the following steps: issuing signaling tracing instructions to multiple network elements, wherein each network element responds to the signaling tracing instructions and obtains signaling log information; determining, based on the signaling log information, the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process network element, and the third identification information of the network element's next process network element; generating a global identifier from the second identification information, the first identification information, and the third identification information in the form of a linked list, and encrypting the global identifier; sending the encrypted global identifier and the first signaling to the signaling management center; and determining the signaling transmission process based on the first signaling fed back by multiple network elements and the encrypted global identifier.

[0091] The sequence numbers of the above embodiments are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0092] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0093] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0094] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0095] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0096] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0097] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A signaling tracing system, characterized in that, include: The signaling management center and multiple network elements, among which, The signaling management center is used to issue signaling tracing instructions to multiple network elements; and to determine the signaling transmission process based on the first signaling and global identifier fed back by the multiple network elements. Each network element is configured to respond to the signaling tracing instruction and obtain signaling log information; determine the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process network element, and the third identification information of the network element's next process network element based on the signaling log information; sequentially use the second identification information, the first identification information, and the third identification information as three nodes in a linked list, use the resulting linked list as the global identifier corresponding to the network element, and encrypt the global identifier; and send the encrypted global identifier and the first signaling to the signaling management center.

2. The system according to claim 1, characterized in that, The system also includes: A reverse proxy server is used to record log information of each network element processing the first signaling during the signaling transmission process.

3. The system according to claim 2, characterized in that, Each network element is configured to respond to the signaling tracing command, obtain the signaling log information corresponding to the network element from the reverse proxy server through a log data collection tool, and store the signaling log information in the Kafka system; consume the signaling log information in the Kafka system, parse the signaling log information, and obtain the first signaling, the first identification information, the second identification information, and the third identification information.

4. The system according to claim 1, characterized in that, Each of the network elements is used to encrypt the global identifier according to a symmetric encryption algorithm, wherein the first key used by the symmetric encryption algorithm is obtained by the network element and the signaling management center through negotiation.

5. The system according to claim 4, characterized in that, Each of the network elements is used to encrypt the first signaling using the encrypted global identifier as a second key, and to send the encrypted global identifier and the encrypted first signaling to the signaling management center.

6. The system according to claim 5, characterized in that, The signaling management center is used to decrypt the encrypted first signaling based on the encrypted global identifier, and to decrypt the encrypted global identifier based on the first key, to obtain the first signaling and the global identifier of multiple network elements; and to sort the multiple first signaling according to the linked list node relationship in each global identifier to obtain the signaling transmission process.

7. A signaling tracing method, applied to a network element, characterized in that, include: In response to the signaling tracing command issued by the signaling management center, obtain signaling log information; Based on the signaling log information, determine the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process network element, and the third identification information of the network element's next process network element; The second identification information, the first identification information, and the third identification information are sequentially used as three nodes in a linked list. The resulting linked list is used as the global identifier corresponding to the network element, and the global identifier is encrypted. The encrypted global identifier and the first signaling are sent to the signaling management center.

8. A signaling tracing method, applied in a signaling management center, characterized in that, include: A signaling tracing instruction is issued to multiple network elements, wherein each network element responds to the signaling tracing instruction and obtains signaling log information; based on the signaling log information, the first signaling processed by the network element, the first identification information of the network element, the second identification information of the network element's previous process network element, and the third identification information of the network element's next process network element are determined; the second identification information, the first identification information, and the third identification information are sequentially used as three nodes in a linked list, and the resulting linked list is used as the global identifier corresponding to the network element, and the global identifier is encrypted; the encrypted global identifier and the first signaling are sent to the signaling management center. The signaling transmission process is determined based on the first signaling fed back by multiple network elements and the encrypted global identifier.

9. An electronic device, characterized in that, include: A memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the signaling tracing method of claim 7 or 8 through the computer program.

Images