Method and system for preventing behavior tracking of mobile terminal user by using pseudo base station

Abstract

The invention belongs to the technical field of mobile communication, and discloses a method and a system for preventing behavior tracking of a mobile terminal user by using a pseudo base station. In the embodiment of the invention, if multiple trial call processes aiming at a certain terminal user are actively found in a short time, the user is actively migrated to an RRC connection state (activated state) through a signaling process, so that a subsequent pseudo base station does not trigger an RRC initial establishment process in the trial call process aiming at the user any more, thereby avoiding the analysis of the relevance of messages by the pseudo base station, and improving the user experience. Furthermore, the pseudo base station is prevented from analyzing the position of the terminal and tracking the terminal by using the messages.

Description

Technical Field

[0001] The present invention belongs to the field of mobile communication technology, and in particular relates to a method and system for preventing a pseudo base station from being used to track the behavior of a mobile terminal user. Background Art

[0002] In mobile communication systems, criminals often use fake base stations to track specific mobile terminals. In early mobile communication technologies, due to the imperfect security system, it was easy for fake base stations to intercept terminal users' information messages and further crack the key information of users, thereby tracking and locating users. In the subsequent development of mobile communication technology, this problem has been gradually improved. With a more complete security system, fake base stations can be prevented from illegally obtaining key information of users in most scenarios, thereby reducing illegal tracking and positioning of terminal users. However, it is still impossible to prevent tracking and positioning methods based on user behavior analysis.

[0003] The so-called tracking and positioning based on user behavior analysis here refers to the use of a pseudo base station to make a trial call to the user to be tracked and located, and to perform statistical analysis on the received information after multiple trial calls. The core is to analyze the relevant messages in the RRC initial establishment process. Because the RRC initial establishment process is the initial establishment process of the connection between the terminal and the base station, it cannot be encrypted. Therefore, the pseudo station can obtain some key information based on this, such as: mobile user temporary identification and wireless network temporary identification, etc. Based on these identifications, the correlation between multiple trial call messages can be analyzed, and further analysis can be made as to which messages are the messages of the users to be tracked and located. Finally, by analyzing the signal strength and direction information of the received messages, the user's location can be gradually determined and tracking can be achieved.

[0004] Through the above analysis, the problems and defects of the prior art are as follows: The RRC initial establishment process is the initial connection establishment process between the terminal and the base station, so it cannot be encrypted; there is a security vulnerability. Summary of the invention

[0005] In view of the problems existing in the prior art, the present invention provides a method for preventing a mobile terminal user from being tracked by a fake base station.

[0006] The present invention is implemented in this way. A method for preventing a mobile terminal user from being tracked by a fake base station includes: Step 1: The fake base station attempts to call the tracked terminal multiple times and attempts to associate these call attempts with data through the user identification information of the initial RRC establishment request message; Step 2: Determine through the network side or the terminal side.

[0007] Further, the network side determines the method: 1) If the mobile core network receives a certain number of calls for a specific purpose exceeding a certain threshold within a short period of time T1, and does not initiate a connection release process to the terminal after the last call is terminated, the terminal will continue to remain in the RRC connection state and start timer T2; 2) When the network receives a call request for the terminal again, because the terminal is already in the RRC connection state, there will be no initial RRC connection establishment process. The network and the terminal directly exchange call signaling and data. The pseudo base station cannot obtain the key information of the user identification, and therefore cannot associate the relevant data, thereby preventing the terminal from being illegally tracked; 3) If a call request is received again or there is any NAS data interaction between the network and the terminal within T2, T2 is restarted; 4) If T2 times out, the network releases the RRC connection of the terminal.

[0008] Furthermore, T1 and T2 are both 60s.

[0009] Furthermore, the threshold is 3 times.

[0010] Furthermore, the NAS is a non-access layer.

[0011] Further, the terminal side determines the method: 1) If the number of pagings received by the terminal with the reason of "being called" exceeds a certain threshold within a short period of time T3, the terminal actively initiates an RRC establishment request and carries the establishment reason as "security reason"; 2) After receiving the RRC establishment request for this reason, the network completes the normal RRC establishment process, moves the terminal into the RRC connected state, and starts timer T2; 3) The subsequent process is the same as the process after starting timer T2 in the network side judgment method.

[0012] Another object of the present invention is to provide a system for preventing a mobile terminal user from being tracked using a fake base station, comprising: An association module, used for the pseudo base station to make multiple attempts to call the tracked terminal and attempt to associate these call attempts with data through the user identification information of the initial RRC establishment request message; The judgment module is used to judge through the network side or the terminal side.

[0013] Another object of the present invention is to provide a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user.

[0014] Another object of the present invention is to provide a computer-readable storage medium storing a computer program, which, when executed by a processor, enables the processor to perform the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user.

[0015] Another object of the present invention is to provide an information data processing terminal, which is used to implement the system for preventing the use of pseudo base stations to track the behavior of mobile terminal users.

[0016] First, in the mobile communication system implemented based on the above scheme, after the pseudo base station roughly determines the user's location, it attempts to call the terminal to be located or tracked multiple times. Because the initial RRC process cannot be encrypted, the pseudo base station can parse the relevant messages in the initial RRC process, obtain the key information such as the temporary identification of the mobile user and the temporary identification of the wireless network of the called terminal, and associate the messages and data of the multiple call attempts based on the information, so as to track and locate the user who attempted to call based on the reception strength of these messages or data signals and the direction and other information. Therefore, the existing technical solutions do not take this situation into consideration enough and have security loopholes. The present invention, by adding judgments to the multiple call attempts scenario, can be determined by the network or based on the user's independent judgment. If multiple call attempts are found for a certain terminal user in a short period of time, the user is actively migrated to the RRC connection state (activated state) through the signaling process, so that the subsequent pseudo base station will no longer trigger the RRC initial establishment process in the call attempt process for the user, thereby avoiding the pseudo base station from analyzing the relevance of the message, and further preventing the pseudo base station from using these messages to analyze the terminal location and track it.

[0017] Second, the technical solution of the present invention fills the technical gap in the industry at home and abroad: The technical solution of the present invention proposes a method for illegally locating and tracking users by using user behaviors to address loopholes in existing mobile communication technical solutions, thus filling the technical gap in this field at home and abroad.

[0018] Third, the technical solution of the present invention proposes an effective protection method for the problem of fake base stations in the prior art tracking the behavior of mobile terminal users. Fake base stations can illegally obtain key identification information of users and track their behavior through repeated calls and data association, which not only threatens user privacy but also causes serious security issues. The prior art lacks an effective protection mechanism for fake base stations, especially in terms of the real-time and effectiveness of identifying and preventing fake base station behavior.

[0019] This problem is significantly solved through the technical solution of the present invention. First, a dual judgment mechanism on the network side and the terminal side is adopted, which can promptly identify abnormal behavior when a fake base station attempts to call a user multiple times, and take corresponding measures to prevent the fake base station from obtaining user identification information. For example, by keeping the terminal in the RRC connection state and starting the timer T2 mechanism, further tracking attempts by the fake base station are effectively avoided; at the same time, the RRC establishment request actively initiated by the terminal side carries a "security reason", which also provides an important basis for the network to identify and protect fake base stations.

[0020] The significant technical advances of the present invention are embodied in the following aspects: 1. Real-time and effectiveness: The dual judgment mechanism provided by the present invention can identify and protect against fake base stations in the early stages of trying to obtain user information, greatly improving the real-time and effectiveness of protection.

[0021] 2. Double protection mechanism: The coordinated protection on the network side and the terminal side forms a multi-level security protection, making it difficult for fake base stations to bypass the protection mechanism, thereby significantly improving the security of user privacy.

[0022] 3. Reduce false alarms and erroneous operations: By setting reasonable time thresholds (such as T1, T2, T3) and call number thresholds, the present invention can reduce false alarms and erroneous operations while providing effective protection, ensuring that the normal operation of the system is not affected.

[0023] 4. Compatibility and practicability: The method of the present invention is compatible with existing communication protocols and network architectures, and does not require large-scale transformation of existing systems. It has high practicability and promotion value.

[0024] In summary, the present invention not only solves the technical problem of insufficient protection against fake base station behavior tracking in the prior art, but also achieves significant technical progress in terms of system security, real-time performance, and protection effectiveness, and has important practical application value. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a flow chart of a method for preventing the use of a fake base station to track the behavior of a mobile terminal user, provided by an embodiment of the present invention.

[0026] Figure 2 It is a block diagram of the system structure for preventing the use of fake base stations to track the behavior of mobile terminal users, provided by an embodiment of the present invention.

[0027] Figure 3 It is a typical call flow (RRC layer) diagram of a mobile communication system provided by an embodiment of the present invention.

[0028] Figure 4 It is a flow chart of tracking and locating a pseudo base station using behavior analysis provided by an embodiment of the present invention.

[0029] Figure 5 It is a diagram of a network side judgment process (T2 not started) provided in an embodiment of the present invention.

[0030] Figure 6 It is a diagram of a network side judgment process (T2 has been started) provided in an embodiment of the present invention.

[0031] Figure 7 It is a diagram of the terminal side judgment process (T2 not started) provided in an embodiment of the present invention.

[0032] Figure 8 It is a block diagram of a test environment provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0034] The following are two specific embodiments of the method for preventing the use of fake base stations to track the behavior of mobile terminal users: Embodiment 1: Network side judgment method In a mobile communication network in a certain city, a network-side judgment method is implemented for the behavior tracking protection mechanism of fake base stations. The system setting of the mobile core network is: within 60 seconds (T1), if a specific user receives more than 3 call requests (the threshold is 3 times), and these call requests fail to complete the normal call establishment process, the network side will not immediately initiate a connection release process to the terminal after the last call is terminated, but will keep the terminal in the RRC connection state and start the timer T2 (60 seconds). When the fake base station tries to initiate a call again, since the terminal is still in the RRC connection state, the initial RRC connection establishment process will not be triggered again. In this way, the fake base station cannot obtain the user's key identification information, cannot associate data, and thus cannot track the terminal. If there is no further call request or NAS data interaction before the T2 timer expires, the network will release the RRC connection of the terminal after T2 times out and return to normal. This embodiment effectively prevents fake base stations from tracking user behavior through frequent calls.

[0035] Embodiment 2: Terminal side judgment method In a mobile communication system in another region, a terminal-side judgment method is deployed to prevent pseudo base stations from tracking user behavior. In this embodiment, if the terminal receives multiple (more than 3 times the threshold) paging requests with the reason of "being called" in a short period of time (T3 is set to 60 seconds), the terminal will actively initiate an RRC establishment request and carry the establishment reason of "security reasons" in the request. After receiving the request, the network side will perform the regular RRC establishment process, migrate the terminal to the RRC connection state, and start timer T2 (60 seconds). During T2, any NAS data interaction from the network or terminal side will cause T2 to restart to ensure that the terminal remains in the RRC connection state. If there is no further call request or data interaction before T2 times out, the network will release the RRC connection of the terminal. This embodiment effectively avoids the possibility of pseudo base stations tracking user behavior through active terminal detection and triggering mechanisms.

[0036] like Figure 1 As shown, a method for preventing a mobile terminal user from being tracked using a fake base station according to an embodiment of the present invention includes the following steps: S101, the fake base station attempts to call the tracked terminal multiple times and attempts to associate these call attempts with data through the user identification information of the initial RRC establishment request message; S102, judging by the network side or the terminal side.

[0037] The working principle of the present invention first involves the identification of multiple call attempts of fake base stations. When a fake base station attempts to track the behavior of a mobile terminal user, it will repeatedly initiate call attempts and disguise itself as a legitimate network base station. During each call attempt, the fake base station attempts to obtain the user's identification information, such as IMSI (International Mobile Subscriber Identity), through an initial RRC (Radio Resource Control) establishment request message. The present invention records these call attempts and their related data, associates all call attempts with the corresponding user identification information, and thus identifies possible fake base station behaviors.

[0038] After identifying multiple call attempts, the network side mechanism of the present invention starts the judgment procedure. By analyzing the associated call attempt data, the network side can identify abnormal call attempt frequencies and patterns. The network side uses this information to determine whether the behavior may be caused by a fake base station. For example, the network side can further confirm the existence of a fake base station by comparing the geographical location, signal strength, frequency and other information of the legitimate base station and the suspicious base station. If it is determined that there is a fake base station, the network side can take measures, such as restricting or blocking the network access of the suspicious base station to prevent it from further obtaining user information.

[0039] In addition to the judgment on the network side, the present invention also provides a judgment mechanism on the terminal side. When the terminal receives the initial RRC establishment request, it can detect the legitimacy of the request in a variety of ways. The terminal can monitor whether the source of the signal is consistent with the expected legal base station, and whether the signal parameters (such as frequency, power, delay, etc.) are abnormal. If an abnormality is detected, the terminal can automatically reject the RRC request, record the information of the suspicious base station, or report the potential threat to the network side.

[0040] The present invention forms a comprehensive defense system through a dual judgment mechanism on the network side and the terminal side. When a fake base station is identified, the network side and the terminal side can jointly take measures to prevent the fake base station from obtaining sensitive information of users. At the same time, the present invention can maintain continuous protection capabilities against fake base stations by regularly updating identification rules and judgment algorithms. Ultimately, this method can effectively prevent fake base stations from tracking the behavior of mobile terminal users, protect the privacy and security of users, and improve the security and reliability of the entire communication network. The network-side judgment method provided in an embodiment of the present invention: 1) If the mobile core network receives a certain number of calls for a specific purpose exceeding a certain threshold within a short period of time T1, then after the last call is terminated, the terminal will continue to remain in the RRC connection state and start timer T2 instead of initiating a connection release process like the terminal. 2) When the network receives a call request for the terminal again, because the terminal is already in the RRC connection state, there will be no initial RRC connection establishment process. The network and the terminal directly exchange call signaling and data. The pseudo base station cannot obtain the key information of the user identification, and therefore cannot associate the relevant data, thereby preventing the terminal from being illegally tracked; 3) If a call request is received again or there is any NAS data interaction between the network and the terminal within T2, T2 is restarted; 4) If T2 times out, the network releases the RRC connection of the terminal.

[0041] The T1 and T2 provided in the embodiment of the present invention are both 60s.

[0042] The threshold provided in the embodiment of the present invention is 3 times.

[0043] The NAS provided in the embodiment of the present invention is a non-access layer.

[0044] The terminal side judgment method provided by the embodiment of the present invention is as follows: 1) If the number of pagings received by the terminal with the reason of "being called" exceeds a certain threshold within a short period of time T3, the terminal actively initiates an RRC establishment request and carries the establishment reason as "security reason"; 2) After receiving the RRC establishment request for this reason, the network completes the normal RRC establishment process, moves the terminal into the RRC connected state, and starts timer T2; 3) The subsequent process is the same as the process after starting timer T2 in the network side judgment method.

[0045] like Figure 2 As shown, a system for preventing a mobile terminal user from being tracked using a fake base station according to an embodiment of the present invention includes: An association module, used for the pseudo base station to make multiple attempts to call the tracked terminal and attempt to associate these call attempts with data through the user identification information of the initial RRC establishment request message; The judgment module is used to judge through the network side or the terminal side.

[0046] Another object of the present invention is to provide a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user.

[0047] Another object of the present invention is to provide a computer-readable storage medium storing a computer program, which, when executed by a processor, enables the processor to perform the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user.

[0048] Another object of the present invention is to provide an information data processing terminal, which is used to implement the system for preventing the use of pseudo base stations to track the behavior of mobile terminal users.

[0049] The present invention is specifically implemented: In the existing mobile communication system, no matter which technical solution is used, once a mobile user is called, in a typical case, a paging process will be initiated for the terminal in the idle state. After receiving the paging, the terminal will actively initiate the RRC connection establishment process and enter the connected state, thereby establishing a wireless connection and completing subsequent session establishment processes based on the wireless connection. Once the session ends, the network will notify the terminal to release the RRC connection, and the terminal will re-enter the idle state. The specific process can be referred to Figure 3 .

[0050] If the fake base station attempts to call multiple times, the process will be the same as Figure 3Similarly, in this process, each time an RRC connection is established, the terminal will carry a temporary identifier in the establishment request message, typically a mobile user temporary identifier; and in the network's RRC connection establishment response message to the terminal, the network will carry a wireless network temporary identifier. These identifiers can help the pseudo base station to associate multiple call attempts to the same terminal, thereby obtaining relevant messages for the terminal, and further use the signal strength and direction information of the received messages to complete the positioning and tracking of a specific terminal, such as Figure 4 .

[0051] The specific scheme of the present invention is as follows: When the fake base station attempts to call the tracked terminal multiple times and attempts to associate these call attempts and data together through the user identification information of the initial RRC establishment request message, two methods can be judged by the network side or the terminal side, which are described below respectively: A. Network side judgment method, the specific process can be found in Figure 5 and Figure 6 : 1) If the network side, such as the mobile core network, receives a certain number of calls for a specific call exceeding a certain threshold (such as 3 times) within a short period of time T1 (such as 60s), and does not initiate a connection release process to the terminal after the last call is terminated, the terminal will continue to remain in the RRC connection state and start timer T2 (such as 60s).

[0052] 2) When the network receives a call request for the terminal again, because the terminal is already in the RRC connection state, there will be no initial RRC connection establishment process. The network and the terminal directly exchange call signaling and data. The fake base station cannot obtain key information such as user identification, and therefore cannot associate related data, thereby preventing the terminal from being illegally tracked.

[0053] 3) If a call request is received again or there is any NAS (non-access layer) data interaction between the network and the terminal within T2, T2 will be restarted. 4) If T2 times out, the network releases the RRC connection of the terminal.

[0054] B. Terminal side judgment method, the specific process can be found in Figure 7 : 1) If the number of pagings received by the terminal with the reason of "being called" exceeds a certain threshold (such as 3 times) within a short period of time T3 (such as 60s), the terminal actively initiates an RRC establishment request and carries the establishment reason as "security reason".

[0055] 2) After receiving the RRC establishment request with this reason, the network completes the normal RRC establishment process, moves the terminal into the RRC connected state, and starts timer T2.

[0056] The subsequent process is the same as the process after starting timer T2 in the network side judgment method.

[0057] 1) When the network receives multiple call messages for a specific terminal in a short period of time, the timer is started. Before the timer expires, the RRC connection of the terminal is not released to ensure that the terminal is always in the RRC connected state.

[0058] 2) When the terminal receives paging messages with the reason of "being called" multiple times in a short period of time, it sends an RRC request message with the reason of "security reason". The network receives the RRC request message with this reason, completes the RRC connection establishment process and starts the timer, and ensures that the RRC connection of the terminal is not released before the timer expires, so that the terminal is always in the RRC connected state.

[0059] 3) If the network receives a call request again or there is any NAS (non-access layer) data interaction between the network and the terminal within the time when the timer is started, the timer will be restarted; after the timer expires, the network releases the RRC connection of the terminal and moves the terminal into the RRC idle state.

[0060] The present invention is applicable to most existing mobile communication systems. The fourth generation mobile communication technology LTE is now taken as an example to illustrate its implementation scheme and test verification results based on this scheme.

[0061] 1. Implementation plan In the 3Gpp TS 36.413 protocol, add the following description: When the MME sends a PAGING message for a specific user to the eNB, it starts the timer T1 (the value of T1 is configured through the management interface). If it is received more than N times within the T1 period (the value of N is configured through the management interface), it starts the timer T2 (the value of T1 is configured through the management interface).

[0062] If the network receives a paging message for the specific user again before T2 times out, the T2 timer is reset.

[0063] Before T2 times out, the MME does not actively initiate the S1 connection release process for the specific user.

[0064] 2. Test method: Use a computer to simulate the MME device and the terminal device, and use a signaling monitor to observe the RRC signaling interaction process between the two, especially the initial RRC establishment request message. Through multiple trial calls, see whether the terminal always initiates the initial RRC connection request message, so as to judge the effectiveness of the solution.

[0065] The test environment diagram is Figure 8 .

[0066] The test results are shown in the following table. Based on the results, it can be seen that under various typical call trial cycles, the terminal will always initiate the initial RRC request establishment message in the existing scheme, but in this scheme, the terminal only initiates the initial RRC request establishment message during the first few call trials. In the subsequent call trials, the terminal did not initiate the initial RRC request establishment message again, which effectively prevented the illegal equipment from associating the intercepted data with the terminal, thereby further preventing the terminal from being located and tracked.

[0067] Serial number T1 N T2 Call trial cycle Is there an existing solution for the initial RRC request message? Is there an initial RRC request message? 1 60S 3 60S 2S have have 2 60S 3 60S 2S have have 3 60S 3 60S 2S have have 4 60S 3 60S 2S have none 5 60S 3 60S 2S have none 6 60S 3 60S 2S have none 7 60S 3 60S 2S have none 8 60S 3 60S 2S have none 9 60S 3 60S 2S have none 10 60S 3 60S 2S have none 1 60S 3 60S 5S have have 2 60S 3 60S 5S have have 3 60S 3 60S 5S have have 4 60S 3 60S 5S have none 5 60S 3 60S 5S have none 6 60S 3 60S 5S have none 7 60S 3 60S 5S have none 8 60S 3 60S 5S have none 9 60S 3 60S 5S have none 10 60S 3 60S 5S have none 1 60S 3 60S 10S have have 2 60S 3 60S 10S have have 3 60S 3 60S 10S have have 4 60S 3 60S 10S have none 5 60S 3 60S 10S have none 6 60S 3 60S 10S have none 7 60S 3 60S 10S have none 8 60S 3 60S 10S have none 9 60S 3 60S 10S have none 10 60S 3 60S 10S have none It should be noted that the embodiments of the present invention can be implemented by hardware, software, or a combination of software and hardware. The hardware part can be implemented using dedicated logic; the software part can be stored in a memory and executed by an appropriate instruction execution system, such as a microprocessor or dedicated design hardware. It can be understood by a person of ordinary skill in the art that the above-mentioned devices and methods can be implemented using computer executable instructions and / or contained in a processor control code, such as a carrier medium such as a disk, CD or DVD-ROM, a programmable memory such as a read-only memory (firmware), or a data carrier such as an optical or electronic signal carrier. Such code is provided on the carrier medium. The device and its modules of the present invention can be implemented by hardware circuits such as very large-scale integrated circuits or gate arrays, semiconductors such as logic chips, transistors, etc., or programmable hardware devices such as field programmable gate arrays, programmable logic devices, etc., can also be implemented by software executed by various types of processors, and can also be implemented by a combination of the above-mentioned hardware circuits and software, such as firmware.

[0068] The above description is only a specific implementation mode of the present invention, but the protection scope of the present invention is not limited thereto. Any modifications, equivalent substitutions and improvements made by any technician familiar with the technical field within the technical scope disclosed by the present invention and within the spirit and principle of the present invention should be covered by the protection scope of the present invention.

Claims

1. A method for preventing the use of fake base stations to track the behavior of mobile terminal users. It is characterized in that The following steps are involved: S101, by recording the user identification information that the fake base station attempts to obtain through the initial RRC establishment request message during multiple call attempts, these call attempts are associated with the data, thereby identifying possible fake base station behaviors; S102, the network side analyzes the associated call attempt data, identifies abnormal call attempt frequencies and patterns by comparing the geographic locations, signal strengths, and frequency information of legitimate base stations and suspicious base stations, determines whether there are fake base stations, and takes measures to restrict or block network access of the suspicious base stations after confirming the existence of fake base stations; S103, when the terminal side receives the initial RRC establishment request, it detects the legitimacy of the request and determines whether the signal comes from the expected legitimate base station by monitoring the geographical location, frequency, power, and delay parameters of the signal source. If an abnormality is detected, the terminal automatically rejects the RRC request and records or reports the suspicious base station information to the network side.

2. The method for preventing a mobile terminal user from being tracked using a fake base station as claimed in claim 1, It is characterized in that The network side judgment method: 1) If the mobile core network receives a certain number of calls for a specific purpose exceeding a certain threshold within a short period of time T1, then after the last call is terminated, the terminal will continue to remain in the RRC connection state and start timer T2 instead of initiating a connection release process like the terminal. 2) When the network receives a call request for the terminal again, because the terminal is already in the RRC connection state, there will be no initial RRC connection establishment process. The network and the terminal directly exchange call signaling and data. The pseudo base station cannot obtain the key information of the user identification, and therefore cannot associate the relevant data, thereby preventing the terminal from being illegally tracked; 3) If a call request is received again or there is any NAS data interaction between the network and the terminal within T2, T2 is restarted; 4) If T2 times out, the network releases the RRC connection of the terminal.

3. The method for preventing a mobile terminal user from being tracked using a fake base station as claimed in claim 2, It is characterized in that The T1 and T2 are both 60s.

4. The method for preventing a mobile terminal user from being tracked using a fake base station as claimed in claim 2, It is characterized in that The threshold is 3 times.

5. The method for preventing a mobile terminal user from being tracked using a fake base station as claimed in claim 2, It is characterized in that The NAS is the non-access stratum.

6. The method for preventing a mobile terminal user from being tracked using a fake base station as claimed in claim 1, It is characterized in that The terminal side determines the method: 1) If the number of pagings received by the terminal with the reason "being called" exceeds a certain threshold within a short period of time T3, the terminal actively initiates an RRC establishment request and carries the establishment reason as "security reason"; 2) After receiving the RRC establishment request for this reason, the network completes the normal RRC establishment process, moves the terminal into the RRC connected state, and starts timer T2; 3) The subsequent process is the same as the process after starting timer T2 in the network side judgment method.

7. A system for preventing a mobile terminal user from being tracked using a fake base station, which implements the method for preventing a mobile terminal user from being tracked using a fake base station as claimed in any one of claims 1 to 6, It is characterized in that The system for preventing the use of a fake base station to track the behavior of a mobile terminal user comprises: An association module, used for the pseudo base station to make multiple attempts to call the tracked terminal and attempt to associate these call attempts with data through the user identification information of the initial RRC establishment request message; The judgment module is used to judge through the network side or the terminal side.

8. A computer device, It is characterized in that The computer device includes a memory and a processor, the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user as described in any one of claims 1-6.

9. A computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the method for preventing the use of a fake base station to track the behavior of a mobile terminal user as described in any one of claims 1 to 6.

10. An information data processing terminal, It is characterized in that The information data processing terminal is used to implement the system for preventing the use of fake base stations to track the behavior of mobile terminal users as described in claim 7.

Images