Terminal communication security control method and system in multi-network scene

Abstract

The invention relates to the technical field of network security, and provides a terminal communication security management and control method and system in a multi-network scene, and the method comprises the steps: monitoring the operation attribute information of all subordinate application programs of a terminal, thereby determining the external communication process of each application program, and generating a plurality of corresponding external communication messages; dividing all external communication messages into a plurality of message clusters and distributing the message clusters to corresponding communication channels; all available networks which can be connected with the identification terminal are searched, each available network is traced and identified, and link gateway feature information of each available network is obtained, so that message transmission security attribute information of each available network is determined, and a matched network is selected for a communication channel which needs to be externally connected with the network currently; and the network connection state of the communication channel currently needing to be externally connected with the network is automatically changed, so that each communication channel can obtain equal network connection authority, the data transmission advantages of different networks are fully utilized, and the external communication security and reliability of the terminal are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network security, and in particular to a method and system for terminal communication security management and control in a multi-network scenario. Background Art

[0002] In order to avoid data transmission crosstalk, existing terminals such as smart phones are only allowed to connect to a single network at the same time, so that all messages of the terminal can only be sent and transmitted through a single link in a single network during operation. When there are a large number of applications inside the terminal that need to interact with the outside world through messages, all messages can only be arranged according to the corresponding rules to generate a corresponding message queue, and then all messages in the message queue are sent and transmitted one by one in sequence, which will increase the time consumption of message sending. Once the network link currently connected to the terminal fails, the message transmission of the message queue will be interrupted, which will not only increase the time cost of the terminal's message communication, but also delay the task processing progress of the application program inside the terminal, and cannot meet the needs of the terminal to process tasks efficiently and accurately. At present, it is necessary to convert the stable and efficient transmission of messages for the terminal in multi-network scenarios to ensure that the terminal can fully utilize the data transmission advantages of different networks and maximize the security and reliability of the terminal's external communication. Summary of the invention

[0003] In view of the defects of the prior art, the present invention provides a terminal communication security management and control method and system in a multi-network scenario, which monitors the operation attribute information of all applications under the terminal to determine the external communication process of each application, and generates a number of corresponding external communication messages, and timely and directional processing of the external communication needs of different applications; all external communication messages are divided into a number of message clusters and allocated to corresponding communication channels, so as to realize differentiated transmission of different message clusters and ensure that each message cluster can obtain the optimal transmission processing; search and identify all available networks that the terminal can connect to, trace back and identify each available network, and obtain the link gateway feature information of each available network, so as to determine the message transmission security attribute information of each available network, accurately determine the operational security of the available network in different message transmission scenarios, select a matching network for the communication channel that currently needs to connect to the network, and automatically change the network connection status of the communication channel that currently needs to connect to the network, so as to ensure that each communication channel can obtain equal network connection rights, make full use of the data transmission advantages of different networks, and improve the external communication security and reliability of the terminal.

[0004] The present invention provides a terminal communication security management and control method in a multi-network scenario, comprising the following steps: Step S1, monitoring all applications under the terminal to obtain the operation attribute information of all applications; based on the operation attribute information, determining the external communication processes of all applications, thereby generating a number of external communication messages corresponding to all applications; Step 2: based on the message attribute information of all external communication messages, divide all external communication messages into a number of message clusters; based on the working status of all communication channels under the terminal, assign all message clusters to corresponding communication channels respectively; Step S3, performing a multi-network signal search on the environment where the terminal is located to identify all available networks to which the terminal can connect; performing retrospective identification on all available networks to obtain link gateway feature information of each of the available networks; and determining message transmission security attribute information of the available networks based on the link gateway feature information; Step S4, identifying the message receiving status of all communication channels and determining the network connection order of all communication channels; based on the message transmission security attribute information, selecting a matching network for the communication channel that currently needs to connect to the external network; and based on the message sending attribute information of the communication channel that currently needs to connect to the external network, automatically changing the network connection status of the communication channel that currently needs to connect to the external network.

[0005] In one embodiment disclosed in the present application, in the step S1, all applications under the terminal are monitored to obtain the operation attribute information of all the applications; based on the operation attribute information, the external communication processes of all the applications are determined, thereby generating a number of external communication messages corresponding to all the applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated.

[0006] In one embodiment disclosed in the present application, in the step S2, based on the message attribute information of all external communication messages, all external communication messages are divided into a plurality of message clusters; based on the working status of all communication channels under the terminal, all message clusters are respectively assigned to corresponding communication channels, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively.

[0007] In one embodiment disclosed in the present application, in the step S3, a multi-network signal search is performed on the environment where the terminal is located to identify all available networks to which the terminal can connect; all available networks are retroactively identified to obtain link gateway feature information of all available networks; based on the link gateway feature information, message transmission security attribute information of the available networks is determined, including: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

[0008] In one embodiment disclosed in the present application, in the step S4, the message receiving state of all communication channels is identified to determine the network connection order of all communication channels; based on the message transmission security attribute information, a matching network is selected for the communication channel that currently needs to be connected to the network; and based on the message sending attribute information of the communication channel that currently needs to be connected to the network, the network connection state of the communication channel that currently needs to be connected to the network is automatically changed, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it.

[0009] The present invention also provides a terminal communication security management and control system in a multi-network scenario, including: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications; An external communication message generation module, used to determine the external communication processes of all the applications based on the operation attribute information, thereby generating a number of external communication messages corresponding to all the applications; A message cluster division module, used to divide all external communication messages into several message clusters based on message attribute information of all external communication messages; A message cluster allocation module, used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal; An available network identification module, used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect; A message transmission security attribute determination module is used to retroactively identify all available networks respectively, obtain link gateway characteristic information of all available networks respectively; based on the link gateway characteristic information, determine the message transmission security attribute information of the available networks; A network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to connect to the external network based on the message transmission security attribute information; and automatically change the network connection status of the communication channel that currently needs to connect to the external network based on the message sending attribute information of the communication channel that currently needs to connect to the external network.

[0010] In one embodiment disclosed in the present application, the terminal monitoring module is used to monitor all applications under the terminal to obtain the running attribute information of all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; The external communication message generation module is used to determine the external communication processes of all the applications based on the operation attribute information, so as to generate a number of external communication messages corresponding to all the applications, including: Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated.

[0011] In one embodiment disclosed in the present application, the message cluster division module is used to divide all external communication messages into several message clusters based on the message attribute information of all external communication messages, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The message cluster allocation module is used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal, including: The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively.

[0012] In one embodiment disclosed in the present application, the available network identification module is used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect, including: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; The message transmission security attribute determination module is used to retroactively identify all available networks respectively to obtain link gateway feature information of all available networks; based on the link gateway feature information, determine the message transmission security attribute information of the available networks, including: Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

[0013] In one embodiment disclosed in the present application, the network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to be connected to the network based on the message transmission security attribute information; and automatically change the network connection state of the communication channel that currently needs to be connected to the network based on the message sending attribute information of the communication channel that currently needs to be connected to the network, including: Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it.

[0014] Compared with the prior art, the terminal communication security management method and system in the multi-network scenario monitors the operation attribute information of all applications under the terminal, thereby determining the external communication process of each application, and generating a number of corresponding external communication messages, and timely and directional processing of the external communication needs of different applications; all external communication messages are divided into a number of message clusters and allocated to corresponding communication channels, to achieve differentiated transmission of different message clusters, and ensure that each message cluster can obtain the optimal transmission processing; search and identify all available networks that the terminal can connect to, trace back and identify each available network, and obtain the link gateway feature information of each available network, thereby determining the message transmission security attribute information of each available network, and accurately determining the operational security of the available network in different message transmission scenarios, thereby selecting a matching network for the communication channel that currently needs to connect to the network, and automatically changing the network connection status of the communication channel that currently needs to connect to the network, to ensure that each communication channel can obtain equal network connection rights, make full use of the data transmission advantages of different networks, and improve the external communication security and reliability of the terminal.

[0015] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description, claims, and drawings.

[0016] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 A schematic diagram of the process of the terminal communication security management and control method in a multi-network scenario provided by the present invention; Figure 2 A schematic diagram of the framework of the terminal communication security management and control system in a multi-network scenario provided by the present invention. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] See also Figure 1 , is a flow chart of a terminal communication security management method in a multi-network scenario provided by an embodiment of the present invention. The terminal communication security management method in a multi-network scenario includes: Step S1, monitoring all applications under the terminal to obtain the operation attribute information of all applications; based on the operation attribute information, determining the external communication processes of all applications, thereby generating a number of external communication messages corresponding to all applications; Step 2: based on the message attribute information of all external communication messages, divide all external communication messages into a number of message clusters; based on the working status of all communication channels under the terminal, assign all message clusters to corresponding communication channels respectively; Step S3, performing a multi-network signal search in the environment where the terminal is located to identify all available networks to which the terminal can connect; performing retrospective identification on all available networks to obtain link gateway feature information of each available network; and determining message transmission security attribute information of the available network based on the link gateway feature information; Step S4, identifying the message receiving status of all communication channels and determining the network connection order of all communication channels; based on the message transmission security attribute information, selecting a matching network for the communication channel that currently needs to connect to the external network; and based on the message sending attribute information of the communication channel that currently needs to connect to the external network, automatically changing the network connection status of the communication channel that currently needs to connect to the external network.

[0021] The terminal communication security management and control method in the multi-network scenario monitors the operation attribute information of all the applications under the terminal, thereby determining the external communication process of each application, and generating a number of corresponding external communication messages, and timely and directional processing of the external communication needs of different applications; all external communication messages are divided into a number of message clusters and allocated to corresponding communication channels, so as to realize differentiated transmission of different message clusters and ensure that each message cluster can obtain the optimal transmission processing; search and identify all available networks that the terminal can connect to, trace and identify each available network, obtain the link gateway feature information of each available network, thereby determining the message transmission security attribute information of each available network, accurately determining the operational security of the available network in different message transmission scenarios, thereby selecting a matching network for the communication channel that currently needs to connect to the network, and automatically changing the network connection status of the communication channel that currently needs to connect to the network, ensuring that each communication channel can obtain equal network connection rights, making full use of the data transmission advantages of different networks, and improving the external communication security and reliability of the terminal.

[0022] Preferably, in step S1, all applications under the terminal are monitored to obtain the operation attribute information of all applications; based on the operation attribute information, the external communication processes of all applications are determined, thereby generating a number of external communication messages corresponding to all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a number of external communication messages corresponding to the application are generated.

[0023] In the above technical solution, terminals such as smart phones or tablet computers are installed with applications of different types and functions. Each application may need to communicate and interact with other external terminals during operation. At this time, it is necessary to send and transmit external communication messages from the application. In order to ensure that all applications in the terminal can obtain timely external communication message transmission, it is necessary to identify the task processing process of each application during operation. Specifically, the program running log of the terminal is analyzed to obtain all applications in the foreground startup state, and the application currently in the corresponding task processing state is calibrated and identified; then, based on the port address of the application in the foreground startup state, the application is monitored to obtain the application's task processing process attribute information, thereby characterizing all process state attributes that the application needs to execute during the task processing process, so as to accurately identify the external communication needs during the operation of all processes under the application. In addition, based on the attribute information of the task processing process, the execution data packet and execution time of the external communication process of the application are determined, so that the execution time interval of the external communication process of the application included in the task processing process and the data packet that needs to be processed are marked and identified; then, based on the execution data packet and execution time of the external communication process of the application, a number of external communication messages corresponding to the application during its operation are generated, so that the external communication messages required by the application can be generated in a timely and accurate manner, thereby improving the operating efficiency and reliability of the application.

[0024] Preferably, in step S2, based on the message attribute information of all external communication messages, all external communication messages are divided into a plurality of message clusters; based on the working status of all communication channels under the terminal, all message clusters are respectively allocated to corresponding communication channels, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; based on the identity attribute information, classify all external communication messages that need to be sent to the same target terminal into the same message cluster; The working status of all communication channels under the terminal is identified to obtain the communication bandwidth allocated to each communication channel; the communication bandwidth allocated to each communication channel is compared with the maximum message data volume of each message cluster, and all message clusters are allocated to corresponding communication channels.

[0025] In the above technical scheme, different external communication messages generated by the application during the task processing process may need to be sent and transmitted to different external target terminals. In this way, the network links passed by different external communication messages during the sending and transmission process are not the same. In order to facilitate the centralized and unified sending and transmission of external communication messages that need to be sent and transmitted to the same target terminal, the sending target terminals of all external communication messages are identified, and the identity attribute information of the sending target terminals of all external communication messages is obtained, and all external communication messages that need to be sent to the same target terminal are divided into the same message cluster. In this way, all external communication messages under the same message cluster need to be sent and transmitted to the same target terminal in the outside world, and all external communication messages under the same message cluster can be sent and transmitted through the same network link. In addition, the working status of all communication channels under the terminal is identified to obtain the communication bandwidth allocated to each communication channel, that is, to determine the communication bandwidth value allowed to be used by each communication channel, and to compare the communication bandwidth allocated to each communication channel with the maximum message data volume of each message cluster, and to allocate all message clusters to corresponding communication channels respectively, so that message clusters with larger message data volume can be allocated to communication channels with larger communication bandwidth, ensuring that all message clusters can obtain communication channels that match their own data volume, thereby improving the sending and transmission efficiency of message clusters and avoiding the sending and transmission congestion of message clusters.

[0026] Preferably, in step S3, a multi-network signal search is performed on the environment where the terminal is located to identify all available networks to which the terminal can connect; all available networks are retroactively identified to obtain link gateway feature information of all available networks; based on the link gateway feature information, message transmission security attribute information of the available network is determined, including: Perform a multi-network signal search for the environment where the terminal is located to obtain signal strength change information of all network signals existing in the environment within a preset time interval; based on the signal strength change information, determine the signal stability of all networks existing in the environment; based on the signal stability, identify all available networks to which the terminal can connect; Perform link gateway tracing and identification on each available network to obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways to obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then determine the message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

[0027] In the above technical solution, there may be multiple different types of network signals in the environment where the terminal is located, and different network signals correspond to different types of networks. In order to enable the terminal to obtain connection rights to different networks, a multi-network signal search is performed on the environment where the terminal is located, and the signal strength change information of all network signals in the environment within a preset time interval is obtained. Based on the signal strength change information, the average signal strength and signal strength drift rate of all networks in the environment are determined, so as to determine the signal stability of all networks. Generally speaking, the greater the average signal strength and / or the smaller the signal strength drift rate, the higher the corresponding signal stability. Then the signal stability of all networks is compared with the preset stability threshold. When the signal stability exceeds the preset stability threshold, the corresponding network is determined as an available network that the terminal can connect to. In addition, link gateways are traced and identified for each available network, and the location information of all gateways contained in all links under each available network is obtained, so as to retrieve and analyze the historical message transmission records of all gateways, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; wherein the message transmission packet loss occurrence attribute information may include but is not limited to the message transmission packet loss rate and / or the message transmission packet loss occurrence frequency of each gateway during the historical message transmission process. Based on the attribute information of message transmission packet loss, the message transmission integrity of each available network is determined. This is a conventional technical means in this field and will not be introduced in detail here. This can provide a reliable basis for the subsequent matching connection between the communication channel and the network.

[0028] Preferably, in step S4, the message receiving state of all communication channels is identified to determine the network connection order of all communication channels; based on the message transmission security attribute information, a matching network is selected for the communication channel that currently needs to be connected to the network; and based on the message sending attribute information of the communication channel that currently needs to be connected to the network, the network connection state of the communication channel that currently needs to be connected to the network is automatically changed, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; Based on the message transmission security attribute information contained in the available network, the corresponding message transmission completeness of each target terminal and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed.

[0029] In the above technical solution, the message data volume receiving state of each communication channel is identified, and the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received is predicted. When the message data volume allocated to the communication channel reaches the upper limit of the data volume allowed to be received, it indicates that the communication channel has reached the message receiving saturation state, and at this time, the message that the communication channel has received needs to be sent out for transmission. Then, based on the order of the occurrence time corresponding to all communication channels from early to late, the network connection order of all communication channels is determined to ensure that all communication channels can equally and promptly send out the messages they have received. In addition, based on the message transmission security attribute information contained in the available network to transmit the message to each target terminal, the corresponding message transmission integrity and the target terminal to which the communication channel that currently needs to connect to the network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the network, thereby ensuring that each communication channel can obtain equal network connection rights and fully utilize the data transmission advantages of different networks. In addition, based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed. That is to say, if the actual duration of the network connection of the communication channel that currently needs to connect to the external network exceeds the corresponding estimated time length, the connection between the communication channel and the corresponding network is automatically disconnected, so that the corresponding network can be connected to other communication channels, thereby avoiding a communication channel occupying the same network for a long time, resulting in other communication channels being unable to obtain equal connection rights to the corresponding network.

[0030] See also Figure 2 , is a schematic diagram of the framework of a terminal communication security management and control system in a multi-network scenario provided by an embodiment of the present invention. The terminal communication security management and control system in a multi-network scenario includes: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications; An external communication message generation module, used to determine the external communication processes of all the applications based on the running attribute information, thereby generating a number of external communication messages corresponding to all the applications; A message cluster division module, used to divide all external communication messages into several message clusters based on message attribute information of all external communication messages; A message cluster allocation module is used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal; An available network identification module is used to search for multiple network signals in the environment where the terminal is located and identify all available networks to which the terminal can connect; A message transmission security attribute determination module is used to trace back and identify all available networks respectively, obtain link gateway characteristic information of all available networks respectively; based on the link gateway characteristic information, determine the message transmission security attribute information of the available network; A network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to connect to the external network based on the message transmission security attribute information; and based on the message sending attribute information of the communication channel that currently needs to connect to the external network, automatically change the network connection status of the communication channel that currently needs to connect to the external network.

[0031] The terminal communication security management and control system in the multi-network scenario monitors the operation attribute information of all applications under the terminal, thereby determining the external communication process of each application, and generates a number of corresponding external communication messages, and timely and directional processing of the external communication needs of different applications; all external communication messages are divided into a number of message clusters and allocated to corresponding communication channels, so as to realize differentiated transmission of different message clusters and ensure that each message cluster can obtain the optimal transmission processing; search and identify all available networks that the terminal can connect to, trace and identify each available network, and obtain the link gateway feature information of each available network, so as to determine the message transmission security attribute information of each available network, accurately determine the operational security of the available network in different message transmission scenarios, so as to select a matching network for the communication channel that currently needs to connect to the network, and automatically change the network connection status of the communication channel that currently needs to connect to the network, so as to ensure that each communication channel can obtain equal network connection rights, make full use of the data transmission advantages of different networks, and improve the external communication security and reliability of the terminal.

[0032] Preferably, the terminal monitoring module is used to monitor all applications under the terminal to obtain the running attribute information of all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; The external communication message generation module is used to determine the external communication processes of all the applications based on the running attribute information, so as to generate a number of external communication messages corresponding to all the applications, including: Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a number of external communication messages corresponding to the application are generated.

[0033] In the above technical solution, terminals such as smart phones or tablet computers are installed with applications of different types and functions. Each application may need to communicate and interact with other external terminals during operation. At this time, it is necessary to send and transmit external communication messages from the application. In order to ensure that all applications in the terminal can obtain timely external communication message transmission, it is necessary to identify the task processing process of each application during operation. Specifically, the program running log of the terminal is analyzed to obtain all applications in the foreground startup state, and the application currently in the corresponding task processing state is calibrated and identified; then, based on the port address of the application in the foreground startup state, the application is monitored to obtain the application's task processing process attribute information, thereby characterizing all process state attributes that the application needs to execute during the task processing process, so as to accurately identify the external communication needs during the operation of all processes under the application. In addition, based on the attribute information of the task processing process, the execution data packet and execution time of the external communication process of the application are determined, so that the execution time interval of the external communication process of the application included in the task processing process and the data packet that needs to be processed are marked and identified; then, based on the execution data packet and execution time of the external communication process of the application, a number of external communication messages corresponding to the application during its operation are generated, so that the external communication messages required by the application can be generated in a timely and accurate manner, thereby improving the operating efficiency and reliability of the application.

[0034] Preferably, the message cluster division module is used to divide all external communication messages into a number of message clusters based on the message attribute information of all external communication messages, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; based on the identity attribute information, classify all external communication messages that need to be sent to the same target terminal into the same message cluster; The message cluster allocation module is used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal, including: The working status of all communication channels under the terminal is identified to obtain the communication bandwidth allocated to each communication channel; the communication bandwidth allocated to each communication channel is compared with the maximum message data volume of each message cluster, and all message clusters are allocated to corresponding communication channels.

[0035] In the above technical scheme, different external communication messages generated by the application during the task processing process may need to be sent and transmitted to different external target terminals. In this way, the network links passed by different external communication messages during the sending and transmission process are not the same. In order to facilitate the centralized and unified sending and transmission of external communication messages that need to be sent and transmitted to the same target terminal, the sending target terminals of all external communication messages are identified, and the identity attribute information of the sending target terminals of all external communication messages is obtained, and all external communication messages that need to be sent to the same target terminal are divided into the same message cluster. In this way, all external communication messages under the same message cluster need to be sent and transmitted to the same target terminal in the outside world, and all external communication messages under the same message cluster can be sent and transmitted through the same network link. In addition, the working status of all communication channels under the terminal is identified to obtain the communication bandwidth allocated to each communication channel, that is, to determine the communication bandwidth value allowed to be used by each communication channel, and to compare the communication bandwidth allocated to each communication channel with the maximum message data volume of each message cluster, and to allocate all message clusters to corresponding communication channels respectively, so that message clusters with larger message data volume can be allocated to communication channels with larger communication bandwidth, ensuring that all message clusters can obtain communication channels that match their own data volume, thereby improving the sending and transmission efficiency of message clusters and avoiding the sending and transmission congestion of message clusters.

[0036] Preferably, the available network identification module is used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect, including: Perform a multi-network signal search for the environment where the terminal is located to obtain signal strength change information of all network signals existing in the environment within a preset time interval; based on the signal strength change information, determine the signal stability of all networks existing in the environment; based on the signal stability, identify all available networks to which the terminal can connect; The message transmission security attribute determination module is used to retroactively identify all available networks respectively to obtain link gateway feature information of all available networks; based on the link gateway feature information, determine the message transmission security attribute information of the available network, including: Perform link gateway tracing and identification on each available network to obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways to obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then determine the message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

[0037] In the above technical solution, there may be multiple different types of network signals in the environment where the terminal is located, and different network signals correspond to different types of networks. In order to enable the terminal to obtain connection rights to different networks, a multi-network signal search is performed on the environment where the terminal is located, and the signal strength change information of all network signals in the environment within a preset time interval is obtained. Based on the signal strength change information, the average signal strength and signal strength drift rate of all networks in the environment are determined, so as to determine the signal stability of all networks. Generally speaking, the greater the average signal strength and / or the smaller the signal strength drift rate, the higher the corresponding signal stability. Then the signal stability of all networks is compared with the preset stability threshold. When the signal stability exceeds the preset stability threshold, the corresponding network is determined as an available network that the terminal can connect to. In addition, link gateways are traced and identified for each available network, and the location information of all gateways contained in all links under each available network is obtained, so as to retrieve and analyze the historical message transmission records of all gateways, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; wherein the message transmission packet loss occurrence attribute information may include but is not limited to the message transmission packet loss rate and / or the message transmission packet loss occurrence frequency of each gateway during the historical message transmission process. Based on the attribute information of message transmission packet loss, the message transmission integrity of each available network is determined. This is a conventional technical means in this field and will not be introduced in detail here. This can provide a reliable basis for the subsequent matching connection between the communication channel and the network.

[0038] Preferably, the network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to be connected to the network based on the message transmission security attribute information; and automatically change the network connection state of the communication channel that currently needs to be connected to the network based on the message sending attribute information of the communication channel that currently needs to be connected to the network, including: Based on the message transmission security attribute information contained in the available network, the corresponding message transmission completeness of each target terminal and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed.

[0039] In the above technical solution, the message data volume receiving state of each communication channel is identified, and the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received is predicted. When the message data volume allocated to the communication channel reaches the upper limit of the data volume allowed to be received, it indicates that the communication channel has reached the message receiving saturation state, and at this time, the message that the communication channel has received needs to be sent out for transmission. Then, based on the order of the occurrence time corresponding to all communication channels from early to late, the network connection order of all communication channels is determined to ensure that all communication channels can equally and promptly send out the messages they have received. In addition, based on the message transmission security attribute information contained in the available network to transmit the message to each target terminal, the corresponding message transmission integrity and the target terminal to which the communication channel that currently needs to connect to the network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the network, thereby ensuring that each communication channel can obtain equal network connection rights and fully utilize the data transmission advantages of different networks. In addition, based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed. That is to say, if the actual duration of the network connection of the communication channel that currently needs to connect to the external network exceeds the corresponding estimated time length, the connection between the communication channel and the corresponding network is automatically disconnected, so that the corresponding network can be connected to other communication channels, thereby avoiding a communication channel occupying the same network for a long time, resulting in other communication channels being unable to obtain equal connection rights to the corresponding network.

[0040] It can be seen from the contents of the above embodiments that the terminal communication security management method and system in the multi-network scenario monitor the respective running attribute information of all applications under the terminal, thereby determining the external communication process of each application, and generating a corresponding number of external communication messages, and timely and directional processing of the external communication needs of different applications; all external communication messages are divided into a number of message clusters and assigned to corresponding communication channels, so as to realize differentiated transmission of different message clusters and ensure that each message cluster can obtain the optimal transmission processing; search and identify all available networks that the terminal can connect to, trace back and identify each available network, and obtain the link gateway feature information of each available network, so as to determine the message transmission security attribute information of each available network, accurately determine the operational security of the available network in different message transmission scenarios, so as to select a matching network for the communication channel that currently needs to connect to the network, and automatically change the network connection status of the communication channel that currently needs to connect to the network, so as to ensure that each communication channel can obtain equal network connection rights, make full use of the data transmission advantages of different networks, and improve the external communication security and reliability of the terminal.

[0041] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A terminal communication security management and control method in a multi-network scenario, characterized in that: It includes the following steps: Step S1, monitoring all applications under the terminal to obtain the operation attribute information of all applications; based on the operation attribute information, determining the external communication processes of all applications, thereby generating a number of external communication messages corresponding to all applications; Step S2, based on the message attribute information of all external communication messages, all external communication messages are divided into a number of message clusters; based on the working status of all communication channels under the terminal, all message clusters are respectively allocated to corresponding communication channels; Step S3, performing a multi-network signal search on the environment where the terminal is located, and identifying all available networks to which the terminal can connect; All available networks are traced and identified respectively to obtain the link gateway characteristic information of all available networks; Determining message transmission security attribute information of the available network based on the link gateway characteristic information; Step S4, identifying the message receiving status of all communication channels and determining the network connection order of all communication channels; Based on the message transmission security attribute information, selecting a matching network for the communication channel that currently needs to connect to the external network; And based on the message sending attribute information of the communication channel that currently needs to be connected to the external network, the network connection state of the communication channel that currently needs to be connected to the external network is automatically changed.

2. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S1, all applications under the terminal are monitored to obtain the running attribute information of all applications; Based on the operation attribute information, the external communication processes of all the applications are determined, thereby generating a number of external communication messages corresponding to all the applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated.

3. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S2, all external communication messages are divided into a number of message clusters based on the message attribute information of all external communication messages; Based on the working status of all communication channels under the terminal, all message clusters are respectively assigned to corresponding communication channels, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively.

4. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S3, a multi-network signal search is performed on the environment where the terminal is located to identify all available networks to which the terminal can connect; all available networks are retroactively identified to obtain link gateway feature information of all available networks; Determining message transmission security attribute information of the available network based on the link gateway characteristic information includes: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

5. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In step S4, message receiving status of all communication channels is identified to determine the network connection order of all communication channels; Based on the message transmission security attribute information, selecting a matching network for the communication channel that currently needs to connect to the external network; Based on the message sending attribute information of the communication channel that currently needs to connect to the network, the network connection state of the communication channel that currently needs to connect to the network is automatically changed, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it.

6. The terminal communication security management and control system in multi-network scenarios is characterized by: include: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications; An external communication message generation module, used to determine the external communication processes of all the applications based on the operation attribute information, thereby generating a number of external communication messages corresponding to all the applications; A message cluster division module, used to divide all external communication messages into several message clusters based on message attribute information of all external communication messages; A message cluster allocation module, used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal; An available network identification module, used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect; A message transmission security attribute determination module is used to retroactively identify all available networks respectively, obtain link gateway characteristic information of all available networks respectively; based on the link gateway characteristic information, determine the message transmission security attribute information of the available networks; A network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels; A network connection execution and change module, configured to select a matching network for a communication channel that currently needs to connect to an external network based on the message transmission security attribute information; And based on the message sending attribute information of the communication channel that currently needs to be connected to the external network, the network connection state of the communication channel that currently needs to be connected to the external network is automatically changed.

7. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; The external communication message generation module is used to determine the external communication processes of all the applications based on the operation attribute information, so as to generate a number of external communication messages corresponding to all the applications, including: Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated.

8. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The message cluster division module is used to divide all external communication messages into a number of message clusters based on the message attribute information of all external communication messages, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The message cluster allocation module is used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal, including: The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively.

9. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The available network identification module is used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect, including: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; The message transmission security attribute determination module is used to retroactively identify all available networks respectively to obtain link gateway feature information of all available networks; based on the link gateway feature information, determine the message transmission security attribute information of the available networks, including: Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network.

10. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to be connected to the network based on the message transmission security attribute information; and automatically change the network connection state of the communication channel that currently needs to be connected to the network based on the message sending attribute information of the communication channel that currently needs to be connected to the network, including: Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it.

Images