Authentication method and device of vocoder, nonvolatile storage medium and electronic equipment

Abstract

The invention discloses a vocoder authentication method and device, a nonvolatile storage medium and electronic equipment. The method comprises the steps that under the condition that a voice call is established between core network equipment and terminal equipment, a mute information description frame sent by a vocoder of the terminal equipment is received, and the mute information description frame is used for carrying and describing a mute frame in voice data in the voice call; and under the condition that the mute information description frame comprises target vocoder identification information of the terminal equipment, searching the target vocoder identification information in a preset vocoder identification information set, and if the target vocoder identification information is searched in the preset vocoder identification information set, determining that the vocoder of the terminal equipment passes authentication. According to the method and the device, the technical problem that the overhead of the NAS signaling is increased due to the fact that the identification information of the vocoder is transmitted through the NAS signaling to realize the authentication of the vocoder in the related technology is solved.

Description

Technical Field

[0001] The present application relates to the field of satellite communication technology, and in particular to a method and device for authenticating a vocoder, a non-volatile storage medium, and an electronic device. Background Art

[0002] In the relevant technology for authenticating the vocoder, the vocoder in the terminal device is given a unique identifier when it is produced or initialized. The identifier can be a number, a letter or a combination thereof, which is used to uniquely identify the vocoder in the satellite communication system. The vocoder in the terminal device is given a unique identifier when it is produced or initialized. The identifier can be a number, a letter or a combination thereof, which is used to uniquely identify the vocoder in the satellite communication system. After receiving the communication request of the terminal device, the satellite communication system will perform a series of signaling interactions with the terminal device to establish a communication connection. The signaling involved in this process is Non Access Stratum (NAS) signaling. In the process of establishing a communication connection, the terminal device will encapsulate the acquired vocoder identifier in the NAS signaling. The terminal device sends the NAS signaling encapsulated with the vocoder identifier to the base station or satellite transponder of the satellite communication system through a wireless link. After receiving the NAS signaling, the base station or satellite transponder of the satellite communication system will forward it to the core network for processing. After the core network receives the NAS signaling forwarded from the base station or satellite transponder, it will parse the signaling and extract the encapsulated vocoder identifier. The relevant authentication module in the core network will obtain this vocoder identifier and compare it with the pre-stored legal vocoder identifier list to determine whether the vocoder is authenticated. In the above-mentioned scheme of uploading the vocoder identifier in NAS signaling to authenticate the vocoder, the overhead of NAS signaling will be increased.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present application provide a method and device for authenticating a vocoder, a non-volatile storage medium, and an electronic device to at least solve the technical problem of increasing the NAS signaling overhead caused by the related technology transmitting the identification information of the vocoder through NAS signaling to achieve the authentication of the vocoder.

[0005] According to one aspect of an embodiment of the present application, a method for authenticating a vocoder is provided, comprising: in a case where a core network device and a terminal device have established a voice call, receiving a silence information description frame sent by a vocoder of the terminal device, wherein the silence information description frame is used to carry and describe silence frames in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; in a case where the silence information description frame includes target vocoder identification information of the terminal device, searching for the target vocoder identification information in a preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication.

[0006] Optionally, a preset vocoder identification information set is stored in the first database in the mobile management entity in the core network device; the target vocoder identification information is searched in the preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication, including: the mobile management entity searches for the target vocoder identification information in the preset vocoder identification information set in the first database; if the target vocoder identification information is found in the preset vocoder identification information set in the first database, it is determined that the vocoder of the terminal device has passed the authentication, and if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication; the authentication result is stored by the mobile management entity.

[0007] Optionally, a preset vocoder identification information set is stored in a second database in a target network element or a target network server in a core network device, wherein the target network element does not include a mobile management entity; searching for the target vocoder identification information in the preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication, including: the mobile management entity sends the received target vocoder identification information to the target network element or the target network server, wherein the target network element or the target network server is used to search for the target vocoder identification information in the preset vocoder identification information set in the second database, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication, and if the target vocoder identification information is not found in the preset vocoder identification information set, determining that the vocoder of the terminal device has not passed the authentication, and the target network element or the target network server is further used to send the authentication result to the mobile management entity; the mobile management entity receives and stores the authentication result.

[0008] Optionally, if it is determined that the voice coder of the terminal device has not passed the authentication, the core network device refuses to decode and encode the voice data, refuses to send the voice data to the target device for voice call with the terminal device, and refuses to forward the voice data sent by the target device to the terminal device.

[0009] Optionally, the silence information description frame includes: silence frame information, identification content information and identification type information, wherein the silence frame information includes: silence frame and description information of the silence frame, the identification content information includes: voice coder identification information of the terminal device, and the identification type information is used to characterize the type of the identification content information.

[0010] Optionally, when a voice call has been established between the core network device and the terminal device, a silence information description frame sent by the voice coder of the terminal device is received, including: when a voice call has been established between the core network device and the terminal device, within a preset time length from a first moment, a silence information description frame sent by the voice coder of the terminal device is received, wherein the first moment is the moment when the core network device and the terminal device successfully establish a voice call.

[0011] Optionally, when the silence information description frame does not include the target vocoder identification information of the terminal device, it is determined that the vocoder of the terminal device has not passed the authentication.

[0012] According to another aspect of the embodiment of the present application, a device for authenticating a vocoder is also provided, including: a receiving module, for receiving a silence information description frame sent by a vocoder of a terminal device when a core network device and a terminal device have established a voice call, wherein the silence information description frame is used to carry and describe silence frames in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; a determining module, for searching for target vocoder identification information in a preset vocoder identification information set when the silence information description frame includes target vocoder identification information of the terminal device, and determining that the vocoder of the terminal device has passed the authentication if the target vocoder identification information is found in the preset vocoder identification information set.

[0013] According to another aspect of the embodiments of the present application, a non-volatile storage medium is provided, the storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above vocoder authentication method.

[0014] According to another aspect of the embodiments of the present application, there is further provided an electronic device, including: a memory and a processor, wherein the processor is configured to run a program stored in the memory, wherein the above vocoder authentication method is executed when the program is run.

[0015] According to yet another aspect of the embodiments of the present application, a computer program is further provided, wherein when the computer program is executed by a processor, the above vocoder authentication method is implemented.

[0016] According to another aspect of the embodiments of the present application, a computer program product is provided, which includes a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above vocoder authentication method is implemented.

[0017] In an embodiment of the present application, when a core network device and a terminal device have established a voice call, a silence information description frame sent by a vocoder of the terminal device is received, wherein the silence information description frame is used to carry and describe the silence frame in the voice data in the voice call, and the terminal device is used to add the vocoder identification information to the silence information description frame; when the silence information description frame includes the target vocoder identification information of the terminal device, the target vocoder identification information is searched in a preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication. The method of carrying the identification information of the vocoder through the silence information description frame during the voice call achieves the purpose of transmitting the identification information of the vocoder through a non-coded data frame to realize the authentication of the vocoder, thereby realizing the technical effect of reducing the overhead of NAS signaling, and further solving the technical problem of increasing the overhead of NAS signaling due to the related technology transmitting the identification information of the vocoder through NAS signaling to realize the authentication of the vocoder. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 is a flow chart of a method for authenticating a vocoder according to an embodiment of the present application;

[0020] Figure 2 is a schematic diagram of a silence information description frame according to an embodiment of the present application;

[0021] Figure 3 is a structural diagram of a vocoder authentication device according to an embodiment of the present application;

[0022] Figure 4 The present invention is a hardware structure block diagram of a computer terminal for a method for authenticating a vocoder according to an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] According to an embodiment of the present application, a method embodiment of a method for authenticating a vocoder is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0026] is a flow chart of a method for authenticating a vocoder according to an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:

[0027] Step S102, when a voice call has been established between the core network device and the terminal device, a mute information description frame sent by the vocoder of the terminal device is received, wherein the mute information description frame is used to carry and describe the mute frame in the voice data in the voice call, and the terminal device is used to add the vocoder identification information to the mute information description frame.

[0028] The silence information description frame is a special non-coded data frame, which is mainly used to provide necessary information during silence (i.e., a period of time without voice activity) to maintain voice quality or synchronization. When using a vocoder with VAD (Voice Activity Detection) function (such as G.723.1), when VAD detects that the voice signal stops (i.e., silence period), the vocoder will not continue to encode the noise, but send a silence information description frame to describe the current silence state.

[0029] Preferably, the vocoder comprises: a low-rate vocoder.

[0030] Step S104, when the silence information description frame includes the target vocoder identification information of the terminal device, the target vocoder identification information is searched in the preset vocoder identification information set. If the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication.

[0031] For example, assume that the core network device and the terminal device have successfully established a voice call, and the call is using a low-speed vocoder for data compression and transmission. In this scenario, both the core network device (such as MME) and the terminal device support VAD technology, which can detect and mark silent segments in the call. When a silent segment is detected, the vocoder of the terminal device will generate a silent information description frame, which not only describes the silent frame, but also carries the identification information (VCID) of the vocoder.

[0032] In the satellite communication system, the core network equipment and the terminal equipment follow the normal process to establish a voice call. The vocoder on the terminal side continuously detects the voice data in the call. Once a silent segment is detected, the vocoder will generate a silent information description frame. The silent information description frame includes data such as the flag bit, identification type, and vocoder identification information (VCID). Among them, the flag bit: is used to identify whether the current SIDF carries a VCID. Identification type: clearly indicates that the current SIDF carries the VCID of the vocoder. Vocoder VCID: specifically represents the identification information of the vocoder used by the terminal, which is used for subsequent compliance verification.

[0033] The vocoder of the terminal device inserts the silence information description frame into the normal voice data stream and transmits it to the core network equipment via the satellite link.

[0034] After receiving the mute information description frame, the core network device first parses the flag bit to determine whether there is a VCID carried in the SIDF. If so, it further parses the identification type and VCID to prepare for compliance verification. The core network MME (or other network elements responsible for authentication) compares the received VCID with the list of legal VCIDs built into the database. If a match is successful, the verification is successful; otherwise, the verification fails.

[0035] After successful verification, the core network equipment does not take any additional restrictive measures to ensure normal encoding, decoding, conversion and forwarding of voice data. On the contrary, if the verification fails, the core network needs to intercept the voice data received from the terminal, not perform encoding and decoding conversion, and not forward it to the other end, thereby achieving voice control of non-compliant terminals and saving system resources.

[0036] This application utilizes the characteristics of the vocoder silent frame to avoid additional signaling overhead while ensuring the compliance and security of voice services. Without increasing the system burden, it realizes real-time monitoring and control of terminal devices and their vocoders, which is particularly suitable for high-orbit satellite narrowband communication systems, where system capacity and bandwidth resources are key factors.

[0037] It should be noted that the G.723.1 speech codec is a high-efficiency speech codec standard with a dual rate of 5.3kbps / 6.3kbps proposed by ITU-T in 1996. Satellite communication systems, especially high-orbit (GEO) satellite systems, have very precious bandwidth resources compared to ground communication systems. Although G.723.1 is an efficient speech codec standard that provides coding rates of 5.3kbps and 6.3kbps, it may still occupy relatively more bandwidth resources in some extreme cases, such as high bit error rate, long delay or narrow bandwidth limitation of satellite links, thus affecting the overall system capacity and efficiency. In satellite communication systems, especially when narrowband communication is involved, the system needs to transmit as much voice or other data as possible within a limited bandwidth. Narrowband systems may not be able to support the minimum data rate required by G.723.1, or even if they can support it, the additional overhead during transmission (such as header compression, error correction coding, etc.) makes the actual occupied bandwidth exceed the system design capacity. In summary, due to factors such as system capacity, G.723.1 cannot be used in high-orbit satellite narrowband communication systems. Through the above steps, this application proposes a method for verifying a low-speed vocoder by reporting identification information through a low-speed vocoder silent frame, thereby achieving more flexible voice control.

[0038] The present application adopts a method of receiving a silence information description frame sent by a vocoder of a terminal device when a voice call has been established between a core network device and a terminal device, wherein the silence information description frame is used to carry and describe silence frames in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; when the silence information description frame includes target vocoder identification information of the terminal device, the target vocoder identification information is searched in a preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication. The method of carrying the identification information of the vocoder through the silence information description frame during the voice call achieves the purpose of authenticating the vocoder by transmitting the identification information of the vocoder through a non-coded data frame, thereby achieving the technical effect of reducing the overhead of NAS signaling.

[0039] The following Figure 1 The steps shown are exemplary and explanatory.

[0040] According to some optional embodiments of the present application, a preset vocoder identification information set is stored in the first database of the mobile management entity in the core network device. Further, searching for target vocoder identification information in the preset vocoder identification information set, if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication, which can be achieved by the following method: the mobile management entity searches for the target vocoder identification information in the preset vocoder identification information set in the first database; if the target vocoder identification information is found in the preset vocoder identification information set in the first database, it is determined that the vocoder of the terminal device has passed the authentication, if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication; the authentication result is stored by the mobile management entity.

[0041] Specifically, a first database is set in the internal memory of the mobile management entity MME for storing a preset vocoder identification information set. The set includes all legal vocoder VCIDs, which are pre-configured and updated by the operator according to security policies and business requirements. During or after the voice call establishment process, the MME receives the target vocoder identification information (VCID) transmitted by the terminal device through a mute frame.

[0042] The MME searches for the target VCID in the preset vocoder identification information set in the first database. If the target VCID exists in the preset set, the MME immediately determines that the vocoder of the terminal device has passed the authentication. If the target VCID is not found in the preset set, the MME determines that the vocoder of the terminal device has not passed the authentication.

[0043] The MME stores the search result (ie, the authentication status of the vocoder) in its own database for subsequent voice control policy calls.

[0044] Preferably, in addition to storing the authentication result in the local database, the MME can also interact with other network elements of the core network or external network servers to share the authentication result. The specific process is as follows: the MME sends the authentication result together with the target VCID to other key network elements in the core network or pre-configured network servers.

[0045] In the above steps, by setting a preset vocoder identification information set inside the MME, the vocoder identification information can be quickly searched and authenticated, improving the system response speed. Decoupling the authentication logic from other functions of the core network avoids repeated storage and search of vocoder identification in each network element, saving network resources. The preset vocoder identification information set can be dynamically updated according to the network operation strategy to meet the management and control needs in different scenarios.

[0046] On the other hand, a preset vocoder identification information set is stored in a second database in a target network element or a target network server in a core network device, wherein the target network element does not include a mobile management entity. Further, searching for the target vocoder identification information in the preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication can be achieved by the following method: the mobile management entity sends the received target vocoder identification information to the target network element or the target network server, wherein the target network element or the target network server is used to search for the target vocoder identification information in the preset vocoder identification information set in the second database, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication, and if the target vocoder identification information is not found in the preset vocoder identification information set, determining that the vocoder of the terminal device has not passed the authentication, and the target network element or the target network server is also used to send the authentication result to the mobile management entity; the mobile management entity receives and stores the authentication result.

[0047] It can be understood that the core network device includes multiple network elements, such as a service gateway (SGW), a PDN gateway (PGW), an authentication server (AS), etc. In this embodiment, the preset vocoder identification information set is stored in a second database in the target network element or network server, rather than the database of the MME. During a voice call, the terminal device reports the vocoder VCID to the core network through a silent frame, and this reporting process is received by the MME. After receiving the VCID, the MME does not directly perform authentication, but forwards the VCID information to the above-mentioned target network element or network server. The target network element or network server searches for the received VCID in the second database, and the preset vocoder identification information set is stored in the second database. If the target VCID is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication; conversely, if it is not found, it is determined that the vocoder has not passed the authentication. The target network element or network server sends the authentication result back to the MME, and the MME is responsible for receiving and storing the authentication result, and then performing subsequent voice control operations. If the authentication result received by the MME indicates that the vocoder has passed the authentication, the MME will not impose additional restrictions on the received and sent voices, and the voice call will proceed normally. If the authentication result indicates that the vocoder has not passed the authentication, the MME will intercept the voice of the terminal device, not perform codec conversion, not send it to the peer end, and also not send the peer end's voice to the terminal, ensuring that non-compliant terminals cannot use voice services, thereby protecting network resources and voice service quality.

[0048] By using the target network element or network server to authenticate the VCID, the computing load that may be caused by the MME directly querying the database can be avoided, and the resource allocation of the core network equipment can be optimized. In addition, distributing the authentication process to the target network element or network server can improve the authentication efficiency, reduce the authentication pressure of a single MME, and speed up the authentication process. By feeding back the authentication results to the MME for storage and management, the control capability of illegal terminals or vocoders is enhanced, and the network security is improved.

[0049] According to other optional embodiments of the present application, when it is determined that the voice coder of the terminal device has not passed the authentication, the core network device refuses to decode and encode the voice data, refuses to send the voice data to the target device for conducting a voice call with the terminal device, and refuses to forward the voice data sent by the target device to the terminal device.

[0050] During a call, the core network device continuously monitors the identification ID information in the silent frame. When it is found that the VCID of the vocoder carried in the silent frame does not match the legal VCID set stored in the database, the core network device determines that the vocoder is non-compliant. Once the vocoder is determined to be non-compliant, the core network device immediately stops decoding the voice data sent by the terminal device, and also stops encoding the voice data sent by the target device. This means that the voice data sent by the terminal device will not be converted into understandable audio, and similarly, the voice data of the target device will not be converted into a data format suitable for transmission. The core network device further takes measures to refuse to forward the undecoded voice data sent by the terminal device to the target device, and at the same time refuses to forward the unencoded voice data sent by the target device to the terminal device. This effectively prevents the exchange of voice data between the two devices, ensuring that the terminal device with a non-compliant vocoder cannot participate in the call normally.

[0051] Through the above control strategies, the core network can avoid wasting decoding and encoding resources on non-compliant vocoders, while reducing bandwidth usage and ensuring effective use of network resources.

[0052] Figure 2 It is a schematic diagram of a silence information description frame according to an embodiment of the present application. Preferably, the silence information description frame includes: silence frame information, identification content information and identification type information, wherein the silence frame information includes: silence frame and description information of the silence frame, the identification content information includes: the voice coder identification information of the terminal device, and the identification type information is used to characterize the type of the identification content information.

[0053] The silence information description frame is used to transmit additional information during silent periods in satellite communication systems without increasing additional bandwidth consumption. The description frame is mainly composed of the following three parts: 1. Silence frame information: Silence frame: that is, the data frame during the silent period, which is generated by the vocoder when no voice activity is detected, and is transmitted instead of normal voice coding data. Description information of the silence frame: contains information such as the duration and type of the silence frame, so that the receiving vocoder can correctly process and interpret the silence segment. 2. Identification content information: The vocoder identification information (VCID) of the terminal device: used to uniquely identify the vocoder used by the terminal device, and is the core data for implementing the management and control strategy of the present invention. 3. Identification type information: Identification type: used to distinguish the type of identification content information, such as VCID, user IMSI, terminal IMEI, chip CPID, etc.

[0054] In the specific implementation, the structure of the silent information description frame is as follows: Flag bit: This bit is used to indicate whether the current frame carries identification information. If this bit is "1", it means that the current silent frame carries identification information; if it is "0", it means that this frame is an ordinary silent frame and does not contain additional information. Identification type: used to identify the type of identification information contained in the current description frame. For example, if the type is "VCID", it means that the frame contains the identification information of the voice coder. Identification ID: According to the identification type, it contains specific values ​​such as the voice coder VCID of the terminal device, the user IMSI, the terminal IMEI, the chip CPID, etc.

[0055] The above method does not rely on a specific identification type and can be flexibly selected according to network policies (such as VCID, IMSI, IMEI, CPID, etc.), providing multi-dimensional control possibilities.

[0056] In some optional embodiments of the present application, when a voice call has been established between a core network device and a terminal device, receiving a silence information description frame sent by a voice coder of a terminal device can be achieved by the following method: when a voice call has been established between a core network device and a terminal device, within a preset time length from a first moment, receiving a silence information description frame sent by a voice coder of a terminal device, wherein the first moment is the moment when a voice call is successfully established between the core network device and the terminal device.

[0057] The core network device and the terminal device have successfully established a voice call. The core network device starts timing from the first moment, which is defined as the moment when the voice call is successfully established, that is, the time point when both parties start normal voice communication. In order to implement voice control based on the vocoder silence frame, the core network device needs to receive and parse the silence information description frame sent by the vocoder of the terminal device within a preset time from the first moment. The preset time can be flexibly set according to network configuration and requirements. For example, it can be set to 30 seconds to ensure that the identification ID can be authenticated in time at the beginning of the call.

[0058] The specific steps are as follows: the core network device confirms at the first moment that the voice call between the core network device and the terminal device has been successfully established. From the first moment, the core network device starts the timer to record the preset duration after the call starts. Within the time range recorded by the timer, the core network device monitors and receives the silence information description frame sent by the vocoder during the silence period. These silence periods can be non-voice activity periods automatically detected by the VAD technology. The core network device parses the received silence information description frame and extracts the flag bit, identification type and identification ID data therein. The flag bit is used to confirm whether the silence frame carries the identification ID; the identification type is used to determine the specific type of the identification ID, such as user IMSI, terminal IMEI, chip CPID or vocoder VCID; the identification ID contains specific user or device information. The core network device performs compliance authentication on the identification ID according to the extracted identification ID type. If the authentication is successful, the call is allowed to continue; if the authentication fails, the voice of the terminal is intercepted according to the voice control method in Example 2, and subsequent encoding, decoding and sending operations are not performed. Based on the authentication result, the core network device executes the corresponding voice control strategy. If the ID authentication is successful, the call will not be affected; if the authentication fails, voice interception will be implemented immediately and the transmission of voice data will be stopped to reduce the waste of network resources.

[0059] Figure 3 is a structural diagram of a vocoder authentication device according to an embodiment of the present application, such as Figure 3 As shown, the device comprises:

[0060] The receiving module 32 is used to receive a silence information description frame sent by the vocoder of the terminal device when a voice call has been established between the core network device and the terminal device, wherein the silence information description frame is used to carry and describe the silence frame in the voice data in the voice call, and the terminal device is used to add the vocoder identification information to the silence information description frame.

[0061] The determination module 34 is used to search for the target vocoder identification information in a preset vocoder identification information set when the target vocoder identification information of the terminal device is included in the silence information description frame, and if the target vocoder identification information is found in the preset vocoder identification information set, determine that the vocoder of the terminal device has passed the authentication.

[0062] Optionally, a preset vocoder identification information set is stored in the first database of the mobile management entity in the core network device. The determination module 34 is further used to perform the following steps: the mobile management entity searches for the target vocoder identification information in the preset vocoder identification information set in the first database; if the target vocoder identification information is found in the preset vocoder identification information set in the first database, it is determined that the vocoder of the terminal device has passed the authentication; if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication; and the authentication result is stored by the mobile management entity.

[0063] Optionally, a preset vocoder identification information set is stored in a second database in a target network element or a target network server in the core network device, wherein the target network element does not include a mobile management entity; the determination module 34 is also used to perform the following steps: the mobile management entity sends the received target vocoder identification information to the target network element or the target network server, wherein the target network element or the target network server is used to search for the target vocoder identification information in the preset vocoder identification information set in the second database, if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication, if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication, and the target network element or the target network server is also used to send the authentication result to the mobile management entity; the mobile management entity receives and stores the authentication result.

[0064] Optionally, the authentication device of the vocoder is also used to perform the following steps: when it is determined that the vocoder of the terminal device has not passed the authentication, the core network device refuses to decode and encode the voice data, refuses to send the voice data to a target device for a voice call with the terminal device, and refuses to forward the voice data sent by the target device to the terminal device.

[0065] Optionally, the silence information description frame includes: silence frame information, identification content information and identification type information, wherein the silence frame information includes: silence frame and description information of the silence frame, the identification content information includes: voice coder identification information of the terminal device, and the identification type information is used to characterize the type of the identification content information.

[0066] Optionally, the receiving module 32 is also used to perform the following steps: when a voice call has been established between the core network device and the terminal device, a silence information description frame sent by the voice coder of the terminal device is received within a preset time length from a first moment, wherein the first moment is the moment when the core network device and the terminal device successfully establish a voice call.

[0067] Optionally, the vocoder authentication device is further configured to perform the following step: when the silence information description frame does not include the target vocoder identification information of the terminal device, determining that the vocoder of the terminal device has not passed the authentication.

[0068] It should be noted that the above Figure 3 The modules in the embodiment may be program modules (e.g., a set of program instructions for implementing a specific function) or hardware modules. For the latter, they may be expressed in the following forms, but are not limited thereto: the expression form of the above modules is a processor, or the functions of the above modules are implemented by a processor.

[0069] It should be noted that Figure 3 The preferred implementation of the illustrated embodiment can be found in Figure 1 The relevant description of the illustrated embodiment will not be repeated here.

[0070] Figure 4 FIG. 1 shows a hardware structure block diagram of a computer terminal for implementing a method for authenticating a vocoder. Figure 4 As shown, the computer terminal 40 may include one or more (402a, 402b, ..., 402n are used to illustrate) processors 402 (the processor 402 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 404 for storing data, and a transmission module 406 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 4 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 4 More or fewer components as shown, or with Figure 4 Different configurations shown.

[0071] It should be noted that the one or more processors 402 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 40. As involved in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0072] The memory 404 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the authentication method of the vocoder in the embodiment of the present application. The processor 402 executes various functional applications and data processing by running the software programs and modules stored in the memory 404, that is, the authentication method of the vocoder described above is realized. The memory 404 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 404 may further include a memory remotely arranged relative to the processor 402, and these remote memories may be connected to the computer terminal 40 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0073] The transmission module 406 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 40. In one example, the transmission module 406 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission module 406 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0074] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 40 .

[0075] It should be noted that, in some optional embodiments, the above Figure 4 The computer terminal shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. It should be noted that Figure 4 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the computer terminal described above.

[0076] It should be noted that Figure 4 The computer terminal shown is used to execute Figure 1 The authentication method of the vocoder shown in the figure, therefore the relevant explanations in the execution method of the above command are also applicable to the electronic device and will not be repeated here.

[0077] The embodiment of the present application further provides a non-volatile storage medium, which includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above vocoder authentication method.

[0078] A program for a non-volatile storage medium to perform the following functions: in a case where a core network device and a terminal device have established a voice call, receiving a silence information description frame sent by a vocoder of the terminal device, wherein the silence information description frame is used to carry and describe silence frames in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; in a case where the silence information description frame includes target vocoder identification information of the terminal device, searching for the target vocoder identification information in a preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication.

[0079] An embodiment of the present application further provides an electronic device, including: a memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the above vocoder authentication method is executed when the program is run.

[0080] The processor is used to run a program that performs the following functions: when a core network device and a terminal device have established a voice call, receiving a silence information description frame sent by a vocoder of the terminal device, wherein the silence information description frame is used to carry and describe silence frames in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; when the silence information description frame includes target vocoder identification information of the terminal device, searching for the target vocoder identification information in a preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device has passed the authentication.

[0081] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0082] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0083] In the above-mentioned embodiments of the present application, the collected information is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary protection measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0084] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0085] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0086] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0087] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.

[0088] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for authenticating a vocoder, characterized in that: include: In the case where a voice call has been established between the core network device and the terminal device, receiving a silence information description frame sent by a vocoder of the terminal device, wherein the silence information description frame is used to carry and describe a silence frame in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; In the case where the target vocoder identification information of the terminal device is included in the silence information description frame, the target vocoder identification information is searched in a preset vocoder identification information set. If the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication.

2. The method according to claim 1, characterized in that The preset vocoder identification information set is stored in a first database in the mobility management entity in the core network device; searching for the target vocoder identification information in the preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device passes the authentication includes: The mobile management entity searches for the target vocoder identification information in the preset vocoder identification information set in the first database; if the target vocoder identification information is found in the preset vocoder identification information set in the first database, it is determined that the vocoder of the terminal device has passed the authentication; if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication; and the authentication result is stored by the mobile management entity.

3. The method according to claim 1, characterized in that The preset vocoder identification information set is stored in a second database in a target network element in the core network device or a target network server, wherein the target network element does not include a mobility management entity; searching for the target vocoder identification information in the preset vocoder identification information set, and if the target vocoder identification information is found in the preset vocoder identification information set, determining that the vocoder of the terminal device passes the authentication includes: The mobile management entity sends the received target vocoder identification information to the target network element or the target network server, wherein the target network element or the target network server is used to search for the target vocoder identification information in the preset vocoder identification information set in the second database; if the target vocoder identification information is found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has passed the authentication; if the target vocoder identification information is not found in the preset vocoder identification information set, it is determined that the vocoder of the terminal device has not passed the authentication; the target network element or the target network server is further used to send the authentication result to the mobile management entity; the mobile management entity receives and stores the authentication result.

4. The method according to claim 1, characterized in that: The method also includes: when it is determined that the voice coder of the terminal device has not passed the authentication, the core network device refuses to decode and encode the voice data, refuses to send the voice data to a target device for a voice call with the terminal device, and refuses to forward the voice data sent by the target device to the terminal device.

5. The method according to claim 1, characterized in that The silence information description frame includes: silence frame information, identification content information and identification type information, wherein the silence frame information includes: the silence frame and description information of the silence frame, the identification content information includes: the voice coder identification information of the terminal device, and the identification type information is used to characterize the type of the identification content information.

6. The method according to claim 1, characterized in that In a case where a voice call has been established between a core network device and a terminal device, receiving a silence information description frame sent by a voice coder of the terminal device, comprising: in a case where a voice call has been established between the core network device and the terminal device, receiving the silence information description frame sent by the voice coder of the terminal device within a preset time length from a first moment, wherein the first moment is the moment when the core network device and the terminal device successfully establish the voice call.

7. The method according to claim 1, characterized in that The method further includes: determining that the vocoder of the terminal device has not passed the authentication when the target vocoder identification information of the terminal device is not included in the silence information description frame.

8. A vocoder authentication device, characterized in that: include: A receiving module, configured to receive a silence information description frame sent by a vocoder of the terminal device when a voice call has been established between the core network device and the terminal device, wherein the silence information description frame is used to carry and describe a silence frame in voice data in the voice call, and the terminal device is used to add vocoder identification information to the silence information description frame; A determination module is used to search for the target vocoder identification information in a preset vocoder identification information set when the target vocoder identification information of the terminal device is included in the silence information description frame, and if the target vocoder identification information is found in the preset vocoder identification information set, determine that the vocoder of the terminal device has passed the authentication.

9. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored program, wherein when the program is executed, the device where the non-volatile storage medium is located is controlled to execute the method for authenticating a vocoder according to any one of claims 1 to 7.

10. An electronic device, characterized in that: include: A memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the program executes the vocoder authentication method according to any one of claims 1 to 7 when running.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the vocoder authentication method according to any one of claims 1 to 7 is implemented.

Images