Network locking method and device, management platform and readable storage medium

Abstract

The invention relates to a network locking method and device, a management platform and a readable storage medium. The method comprises the following steps: acquiring network subscription information of target FTTR (Fiber To The Room) equipment in a target communication mechanism and network communication information of a target network to which the target FTTR equipment is currently accessed; wherein the network communication information comprises a wide area network internet protocol WAN IP address and network communication quality; according to the network subscription information and / or the network communication information, determining whether the target FTTR equipment is used abnormally; and if yes, controlling the target FTTR equipment to perform network locking processing on the target network.

Description

Technical Field

[0001] The present application relates to the field of fixed network access technology, and in particular to a network locking method, device, management platform and readable storage medium. Background Art

[0002] FTTR-B (Fiber To The Room-Business) equipment, as an advanced fiber-to-the-room network solution provided by telecom operators to corporate customers, involves a lot of capital and technical investment in its deployment and operation and maintenance. These devices not only provide high-speed and stable network connections, but also carry the commercial interests and technical advantages of operators.

[0003] Telecom operators provide enterprise customers with installation and configuration services for FTTR-B equipment based on the needs of the enterprise and the network environment. These devices include master gateways, slave gateways, active optical splitters, and optoelectronic composite cables, which together constitute the enterprise's internal all-optical network. Once installed and put into use, these FTTR-B devices become the assets of the telecom operator.

[0004] However, in actual operation, there may be loss due to business closure, relocation or network switching. In order to ensure the legal use of equipment and protect one's own commercial interests, it is urgent to effectively manage FTTR-B equipment. Summary of the invention

[0005] Based on this, it is necessary to provide a network locking method, device, management platform and readable storage medium that can effectively manage FTTR-B equipment in response to the above technical problems.

[0006] In a first aspect, the present application provides a network locking method, comprising:

[0007] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0008] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0009] If it exists, the target FTTR device is controlled to lock the target network.

[0010] In one embodiment, determining whether the target FTTR device has abnormal usage according to the network contract information includes:

[0011] If it is determined based on the network contract information that the network service subscribed by the target FTTR device has expired, or the target FTTR device has not subscribed to the network service from the target communications agency, it is determined that there is an abnormal use of the target FTTR device.

[0012] In one embodiment, determining whether the target FTTR device has abnormal usage according to the network communication information includes:

[0013] If the WAN IP address does not fall within the preset network range provided by the target communication agency, or the network communication quality does not meet the communication quality threshold, it is determined that there is an abnormal use of the target FTTR equipment.

[0014] In one of the embodiments, if it is determined based on the network contract information that the network service subscribed by the target FTTR device is valid, it is determined whether the WAN IP address falls within a preset network range provided by the target communication organization;

[0015] If so, determining whether the network communication quality meets the communication quality threshold;

[0016] If so, it is determined that there is no abnormal use of the target FTTR equipment.

[0017] In one of the embodiments, obtaining network communication information of a target network currently accessed by the target FTTR device includes: sending a network status query instruction to the target FTTR device through a communication middleware between the management platform and the target FTTR device;

[0018] Through the communication middleware, the network communication information of the currently connected target network fed back by the target FTTR device based on the network status query instruction is obtained.

[0019] In one embodiment, controlling the target FTTR device to lock the target network includes:

[0020] Through the communication middleware, a network lock instruction is sent to the target FTTR device, so that the target FTTR device closes the network connection function connected to the target network.

[0021] In one of the embodiments, the communication middleware includes meter bus MBUS middleware.

[0022] In one embodiment, after controlling the target FTTR device to perform network locking processing on the target network, the method further includes:

[0023] When an access request initiated by a target FTTR device is obtained, an authentication page is fed back to the target FTTR device;

[0024] Obtain the user information added by the target user corresponding to the target FTTR device in the authentication page;

[0025] When the target user is determined to be a trusted user based on the user information, network access information of the available network provided by the target communication is fed back to the target FTTR device, so that the target FTTR device can access the available network based on the network access information.

[0026] In a second aspect, the present application further provides a network locking device, which is configured on a management platform of a target communication organization, and includes:

[0027] An acquisition module is used to acquire network contract information of a target fiber-to-the-room FTTR device in a target communication institution and network communication information of a target network currently accessed by the target FTTR device; wherein the network communication information includes a wide area network Internet Protocol (WAN) IP address and network communication quality;

[0028] An abnormality determination module, used to determine whether there is any abnormality in the use of the target FTTR device based on the network contract information and / or the network communication information;

[0029] The network lock processing module is used to control the target FTTR device to lock the target network when it is determined that the target FTTR device is used abnormally.

[0030] In a third aspect, the present application further provides a management platform, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0031] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0032] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0033] If it exists, the target FTTR device is controlled to lock the target network.

[0034] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the following steps are implemented:

[0035] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0036] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0037] If it exists, the target FTTR device is controlled to lock the target network.

[0038] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0039] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0040] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0041] If it exists, the target FTTR device is controlled to lock the target network.

[0042] The above-mentioned network locking method, device, management platform and readable storage medium, by obtaining the network contract information and network communication information of the target FTTR equipment, can grasp the use status and network connection status of the equipment in real time. This information provides an important basis for the target communication agency to judge whether there is any abnormal use of the equipment, so that potential problems can be discovered and handled in time. When it is determined that the target FTTR equipment has abnormal use (such as illegal access, illegal occupation or abnormal network communication quality, etc.), the method of the present application can quickly control the device to lock the target network. This immediate response mechanism effectively prevents security risks such as network attacks and data leakage, and protects the network security of the target communication agency and corporate customers. As an important asset of the operator, the legal use and protection of FTTR-B equipment is crucial to the commercial interests of the operator. The method of the present application reduces the economic losses caused by equipment loss, illegal occupation, etc. by effectively managing the equipment, and protects the legitimate rights and interests of the operator. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0044] FIG1 is a schematic diagram of a process flow of a network locking method in one embodiment;

[0045] FIG2 is a flow chart of steps for obtaining network communication information of a target network currently accessed by a target FTTR device in one embodiment;

[0046] FIG3 is a diagram showing the communication between the management platform and the communication middleware in the target FTTR device in one embodiment;

[0047] FIG4 is a flowchart of a step of determining whether a target FTTR device has abnormal usage in one embodiment;

[0048] FIG5 is a schematic flow chart of steps for feeding back an authentication page to a target FTTR device in one embodiment;

[0049] FIG6 is a structural block diagram of a network locking device in one embodiment;

[0050] FIG. 7 is a diagram showing the internal structure of a management platform in one embodiment. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0052] In an exemplary embodiment, as shown in FIG1 , a network locking method is provided, which is described by taking the method applied to a management platform of a target communication organization as an example, and includes:

[0053] S101, obtaining network contract information of a target fiber-to-the-room FTTR device in a target communication organization and network communication information of a target network currently accessed by the target FTTR device.

[0054] It is understandable that the target communication institutions can be operators, which are responsible for building and maintaining communication networks and providing basic communication services such as telephone, data, and Internet access. They maintain operations by charging fees and continuously innovate technologies and services to meet user needs.

[0055] The network contract information of the target FTTR equipment in the target communication institution refers to the service agreement and related information signed between the user and the operator for the FTTR service. This information specifies in detail the key terms such as the specific content, fees, validity period, rights and obligations of both parties, such as validity period, fee standards, etc.

[0056] Among them, the network communication information of the target network currently accessed by the target FTTR device usually refers to the connection status, network parameters, performance of the FTTR device in the operator's network, and communication details between the FTTR device and the user device.

[0057] In this embodiment, the network communication information includes a wide area network Internet Protocol (WAN) IP address and network communication quality.

[0058] It is understandable that the WAN IP address refers to the IP address of the wide area network port. In a local area network, the IP address of the local port is generally used, while a different IP address is required on the wide area network port to achieve connection with the external network. These IP addresses are called the IP addresses of the wide area network port. The WAN IP address is the only external identifier of the entire network, which allows data packets to enter the network from the outside world and find the correct portal. Usually a public IP address assigned by an Internet service provider ISP is used. The public IP address is unique throughout the entire Internet, and devices can communicate directly on the Internet through this address.

[0059] It is understandable that the network communication quality of the target network currently accessed by the target FTTR device may include network communication speed, network communication stability, network delay, packet loss rate, bandwidth utilization, etc.

[0060] S102: Determine whether there is any abnormal usage of the target FTTR device according to the network contract information and / or the network communication information.

[0061] It is understandable that whether the target FTTR equipment is illegally occupied is determined based on the network contract information and / or the network communication information.

[0062] Specifically, when analyzing network contract information, you can check the service agreement signed between the target FTTR device and the operator to understand key information such as the network type, bandwidth, and IP address allocation range that the device should access. Compare the network settings of the current device with the provisions in the service agreement to see if there are any anomalies. Confirm whether the device is in a normal online state, that is, whether the device has successfully connected to the operator's network in accordance with the agreement.

[0063] Specifically, when analyzing network communication information, you can verify whether the WAN IP address of the target FTTR device belongs to the legal IP address range assigned by the operator. If the WAN IP address is abnormal, such as belonging to an unknown network or a public network, it may indicate that the device has been connected to an illegal network. Monitor the network communication quality of the device in real time, including indicators such as speed, latency, and packet loss rate. If the communication quality suddenly drops and the cause of the device or network failure cannot be eliminated, it may indicate that the device is being illegally occupied or used for illegal activities, that is, there is abnormal use.

[0064] S103: If yes, control the target FTTR device to lock the target network.

[0065] It can be understood that the target FTTR device locking the target network refers to a security or management policy implemented on the target network through the target FTTR device to restrict or control network access.

[0066] Optionally, the network lock process may include the target FTTR device actively disabling or disconnecting from the WiFi wireless network and LAN wired network, so that the target FTTR device cannot access the target network through these two methods. For example, turning off the WiFi function means that the device (such as a computer, mobile phone, etc.) will stop searching, connecting or communicating with any WiFi network and cannot access the Internet through wireless signals. Turning off the LAN function means disabling the Ethernet interface on the device so that it cannot be connected to LAN devices such as routers and switches through a network cable, and thus cannot access resources within the LAN or through the Internet.

[0067] Optionally, controlling the target FTTR device to lock the target network may include: the management platform sends a network lock instruction to the target FTTR device, so that the target FTTR device actively disables or cuts off the connection with the WiFi wireless network and the LAN wired network.

[0068] The above-mentioned network locking method, this application can grasp the usage status and network connection status of the equipment in real time by obtaining the network contract information and network communication information of the target FTTR equipment. This information provides an important basis for the target communication agency to judge whether there is any abnormal use of the equipment, so that potential problems can be discovered and handled in time. When it is determined that the target FTTR equipment has abnormal use (such as illegal access, illegal occupation or abnormal network communication quality, etc.), the method of this application can quickly control the device to lock the target network. This immediate response mechanism effectively prevents security risks such as network attacks and data leakage, and protects the network security of the target communication agency and corporate customers. As an important asset of the operator, the legal use and protection of FTTR-B equipment is crucial to the commercial interests of the operator. The method of this application reduces economic losses caused by equipment loss, illegal occupation, etc. by effectively managing the equipment, and protects the legitimate rights and interests of the operator.

[0069] In an exemplary embodiment, as shown in FIG2 , obtaining network communication information of a target network currently accessed by a target FTTR device includes:

[0070] S201, sending a network status query instruction to the target FTTR device through the communication middleware between the management platform and the target FTTR device.

[0071] It can be understood that the communication middleware is the bridge between the management platform and the target FTTR equipment. It is responsible for transmitting information between the two and ensuring that instructions and data can be exchanged accurately and efficiently.

[0072] Exemplarily, as shown in Fig. 3, the communication middleware in this embodiment includes metering bus MBUS middleware. MBUS middleware is based on MBUS protocol, which is an international standard communication protocol for remotely reading metering instrument data. The middleware is responsible for transmitting data between smart metering instruments and management systems or data centers.

[0073] Specifically, the management platform sends a network status query instruction to the target FTTR device through the communication middleware. The purpose of this instruction is to request the FTTR device to provide detailed information about its current access network. The network status query instruction usually contains some specific parameters or identifiers to tell the FTTR device what specific network communication information is needed. These may include network type (such as WiFi, wired LAN), connection status, IP address, network speed, signal strength, etc.

[0074] S202, obtaining, through the communication middleware, network communication information of the currently connected target network fed back by the target FTTR device based on the network status query instruction.

[0075] Optionally, after receiving the network status query instruction, the target FTTR device will collect and organize the communication information of its current access network according to the requirements of the instruction. The target FTTR device transmits this network communication information back to the management platform through the communication middleware. This information may include key indicators such as the detailed status of the network connection, data transmission rate, network delay, error rate, etc. After receiving the network communication information fed back by the FTTR device, the management platform can further process, analyze or display it.

[0076] On the basis of having the above middleware, controlling the target FTTR device to lock the target network includes: sending a network lock instruction to the target FTTR device through the communication middleware, so that the target FTTR device closes the network connection function of connecting to the target network.

[0077] Specifically, the management platform sends a clear network lock instruction to the target FTTR device through the communication middleware. This instruction tells the FTTR device that it needs to immediately shut down or disconnect from the target network. The network lock instruction usually contains specific commands or codes to ensure that the FTTR device can accurately identify and execute the instruction. After receiving the network lock instruction, the target FTTR device will parse the instruction content and perform the corresponding operations according to the instruction requirements. After executing the network lock operation, the FTTR device may send a confirmation message to the management platform through the communication middleware, indicating that the network lock operation has been successfully completed. This confirmation message can contain some status information, such as network lock status, device status, etc., to help the management platform verify the validity of the network lock operation.

[0078] In this embodiment, a network lock instruction is sent to the target FTTR device through the communication middleware, thereby realizing remote management of the target FTTR device.

[0079] In an exemplary embodiment, S102, based on the network contract information and / or the network communication information, it is determined whether the target FTTR device has abnormal usage, including the following situations:

[0080] In one implementable method, it is determined whether there is any abnormal usage of the target FTTR device based on the network contract information, including: if it is determined based on the network contract information that the network service subscribed by the target FTTR device has expired, or the target FTTR device has not subscribed to the network service from the target communication agency, then it is determined that there is any abnormal usage of the target FTTR device.

[0081] It is understandable that in the network management process of FTTR (Fiber to the Room) equipment, if it is determined based on the network contract information that the network service subscribed by the target FTTR equipment has expired, or the equipment has never subscribed to the network service at the target communication agency, then it can be considered that there is an abnormality in the use of the FTTR equipment. The "abnormal use" here may refer to the illegal access of the equipment to the network, the equipment configuration error, or other situations that do not comply with the normal network service usage regulations.

[0082] Specifically, the management platform or relevant personnel will query the network contract information of the target FTTR equipment, which usually includes the service status of the equipment, the type of service ordered, the service period, etc. Based on the queried network contract information, it will be determined whether the network service ordered by the target FTTR equipment is still valid.

[0083] Use of the device may be considered abnormal if the service has expired, been cancelled, or is otherwise inactive.

[0084] In addition, we will check whether the target FTTR equipment has a legal order record in the target communication agency. If no corresponding order record is found, it also indicates that there is an abnormality in the use of the equipment.

[0085] (2) In another possible implementation, determining whether there is any abnormal usage of the target FTTR device is performed based on the network communication information, including: if the WAN IP address does not fall within a preset network range provided by the target communication organization, or the network communication quality does not meet the communication quality threshold, then determining that there is any abnormal usage of the target FTTR device.

[0086] It is understandable that each communications organization provides its customers with a specific range of IP addresses that are used by customer devices to access the Internet. If the WAN IP address of the target FTTR device does not fall within the preset network range provided by the target communications organization, then this may mean that the device is mistakenly connected to another network or there is unauthorized access. In this case, it will be determined that the target FTTR device is used abnormally.

[0087] In addition, network communication quality is an important indicator for measuring the stability of network connection and data transmission efficiency, which usually includes parameters such as delay, packet loss rate, and jitter. The target communication agency may set a communication quality threshold as a standard for judging whether the network connection is normal. If the network communication quality of the target FTTR device does not meet this threshold, such as too high delay or too high packet loss rate, the system will consider that there is an abnormality in the use of the device.

[0088] (3) In another possible implementation, determining whether the target FTTR equipment has any abnormal usage based on the network contract information and the network communication information includes:

[0089] On the basis of (1) and (2) above, if the WAN IP address does not fall within the preset network range provided by the target communications organization, or the network communications quality does not meet the communications quality threshold, and based on the network contract information, it is determined that the network service subscribed by the target FTTR device has expired, or the target FTTR device has not subscribed to the network service from the target communications organization, then it is determined whether there is any abnormal use of the target FTTR device.

[0090] (4) In other possible implementations, as shown in FIG4 , determining whether the target FTTR device has abnormal usage based on the network contract information and the network communication information includes:

[0091] S401, if it is determined based on the network contract information that the network service subscribed by the target FTTR device is valid, then it is determined whether the WAN IP address falls within a preset network range provided by the target communication organization.

[0092] It is understandable that the network contract information verifies whether the network service subscribed by the target FTTR device is valid. For details, please refer to the above (1). If valid, it is determined whether the WAN IP address falls within the preset network range provided by the target communication agency. For details, please refer to the above (2).

[0093] S402: If yes, determine whether the network communication quality meets the communication quality threshold.

[0094] If the WAN IP address is within the preset range, the network communication quality is further evaluated. By checking whether the communication quality meets the set threshold, it can be determined whether there is any abnormality in the network communication of the device.

[0095] S403: If the conditions are met, it is determined that there is no abnormal use of the target FTTR device.

[0096] Finally, if the network communication quality meets the communication quality threshold, it can be determined that there is no usage abnormality in the target FTTR device.

[0097] In this embodiment, through comprehensive analysis of the above dimensions, it can be effectively determined whether the target FTTR device has any usage abnormality, thereby ensuring the normal operation of the device and the user's network experience.

[0098] In an exemplary embodiment, as shown in FIG5 , after controlling the target FTTR device to perform network locking processing on the target network, the method further includes:

[0099] S501: When an access request initiated by a target FTTR device is obtained, an authentication page is fed back to the target FTTR device.

[0100] Exemplarily, the authentication page may be a Portal page. In the field of computer networks and communications, a Portal page generally refers to a specific web page or interface that serves as an entrance or portal between a user and a network service. When a user attempts to access restricted network resources or services, the system redirects the user to the Portal page and requires the user to authenticate or provide other necessary authentication information.

[0101] It is understandable that when the target FTTR device attempts to access the network in a locked state (perhaps due to an illegal attempt to reconnect or other reasons), the access request will be captured, and instead of directly denying or allowing access, an authentication page will be fed back to the device.

[0102] Optionally, the target FTTR device can request to obtain an IP address through DHCP and initiate an access request. The MAC address of the target FTTR device and its associated SSID information identify whether the user has been authorized. If not, an authentication page is fed back to the target FTTR device.

[0103] Furthermore, the authentication page usually contains some verification information or requirements, such as username, password, verification code, etc., to confirm whether the user or device attempting to access the network has legitimate authority. Only when the user or device provides the correct authentication information will the system unlock the network access rights and allow the target FTTR device to reconnect to the network.

[0104] S502, obtaining user information added by a target user corresponding to the target FTTR device in an authentication page.

[0105] Specifically, when the target FTTR device attempts to access restricted network resources, the management platform will redirect the device to the authentication page. The target user (i.e., the user or manager of the FTTR device) enters or selects the corresponding user information in the authentication page for identity verification. After the user completes the information input, clicks the submit button or performs other submission operations to send the user information to the management platform.

[0106] S503, when it is determined that the target user is a trusted user according to the user information, network access information of the available network provided by the target communication is fed back to the target FTTR device, so that the target FTTR device can access the available network according to the network access information.

[0107] Optionally, the user information submitted by the user on the authentication page will first be verified. This usually includes checking the correctness of information such as username, password, verification code, and confirming whether this information matches the trusted user information stored in the management platform. If the user information is successfully verified, the management platform will identify the user as a trusted user. Trusted users are those who have passed identity authentication and have been granted specific network access rights.

[0108] Once the user is confirmed to be a trusted user, the management platform will feedback the network access information of the available network provided by the target communication agency to the target FTTR device. This information usually includes the network's IP address, subnet mask, gateway, DNS server, etc., which is necessary for the device to access the network. After receiving the network access information, the target FTTR device will configure its own network interface based on this information and try to connect to the available network. If the configuration is correct and the network is available, the device will successfully access the network and resume normal network communication.

[0109] In this embodiment, even if the target FTTR device is in a locked state, the network connection can be restored through a legitimate authentication process, which not only ensures the security of the network (preventing unauthorized access) but also provides flexibility (allowing legitimate users or devices to restore access when needed).

[0110] In an exemplary embodiment, a network locking system of a network locking method is provided, the system comprising:

[0111] (I) Equipment locking mechanism: The communication middleware between the management platform and the target FTTR equipment sends a network status query instruction to the target FTTR equipment, and obtains the network communication information of the target network currently connected to the target FTTR equipment based on the feedback of the network status query instruction through the communication middleware; if it is determined that there is an abnormal use of the target FTTR equipment based on the network contract information and / or network communication information, the network lock operation is triggered, and a network lock instruction is sent to the target FTTR equipment through the communication middleware, so that the target FTTR equipment closes the network connection function of connecting to the target network. At this time, the target FTTR equipment is in a network lock state.

[0112] (II) Status query and processing: The management platform periodically queries the network lock status of the target FTTR device through the MBUS middleware. If the target FTTR device is in the network lock status, the management platform can run the target FTTR device again to establish a network connection under the target scenario, and then determine whether the target FTTR device needs to be automatically unlocked based on the network contract information and / or network communication information of the target FTTR device in this network connection;

[0113] Specifically, if it is determined whether there is no usage abnormality of the target FTTR device based on the network contract information and / or network communication information of the target FTTR device in this network connection, it is determined whether the target FTTR device needs to be automatically unlocked.

[0114] (III) Network lock display and user prompt: When the target FTTR device enters the network lock state, the target FTTR device will turn off the WiFi and LAN side Internet access functions, and pop up the Portal page through the management platform to prompt the user of the network lock information, requiring authentication or contacting the original operator to resolve the issue.

[0115] The above-mentioned locking network system introduces MBUS middleware, which serves as a bridge between the device and the operator's management platform. It not only realizes efficient communication between the device and the management platform, but also gives the system greater flexibility and customizability. Traditional locking network technology mostly relies on hardware-level control or independent software platforms, which often limits the flexibility and scalability of the system.

[0116] MBUS middleware can obtain and update the status information of the device in real time, including network connection status, device configuration, working parameters, etc. This enables operators to keep track of the operating status of the device at any time and promptly discover and deal with potential problems. Through MBUS middleware, operators can remotely control the locking and unlocking status of the device without relying on physical contact or independent software platforms. This flexibility enables operators to respond quickly to network changes as needed to ensure the security and compliance of the device. Unlike traditional static locking mechanisms, this system can dynamically adjust the locking status based on device status, network conditions or operator policies. For example, when a device attempts to connect to an unauthorized network, the system can automatically trigger the locking mechanism to prevent illegal access to the device. At the same time, when the device returns to the authorized network range or meets specific conditions, the system can automatically unlock the device and restore its normal network access rights.

[0117] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0118] Based on the same inventive concept, the embodiment of the present application also provides a network locking device for implementing the network locking method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in one or more network locking device embodiments provided below can refer to the limitations of the network locking method above, and will not be repeated here.

[0119] In an exemplary embodiment, as shown in FIG6 , a network locking device is provided, which is configured on a management platform of a target communication organization, and includes: an acquisition module 11, an abnormality determination module 12, and a network locking processing module 13, wherein:

[0120] The acquisition module 11 is used to acquire the network contract information of the target fiber-to-the-room FTTR device in the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0121] The abnormality determination module 12 is used to determine whether there is any abnormality in the use of the target FTTR device according to the network contract information and / or the network communication information;

[0122] The network locking processing module 13 is used to control the target FTTR device to perform network locking processing on the target network when it is determined that the target FTTR device has abnormal use.

[0123] In one embodiment, the abnormality determination module 12 is further used to: if it is determined based on the network contract information that the network service subscribed by the target FTTR device has expired, or the target FTTR device has not subscribed to the network service from the target communication agency, then determine that there is an abnormality in the use of the target FTTR device.

[0124] In one embodiment, the abnormality determination module 12 is further used to: if the WAN IP address does not fall within the preset network range provided by the target communication organization, or the network communication quality does not meet the communication quality threshold, determine that there is a usage abnormality in the target FTTR device.

[0125] In one embodiment, the abnormality determination module 12 is further configured to: if it is determined based on the network contract information that the network service subscribed by the target FTTR device is valid,

[0126] Determine whether the WAN IP address falls within the preset network range provided by the target communication agency;

[0127] If so, determining whether the network communication quality meets the communication quality threshold;

[0128] If so, it is determined that there is no abnormal use of the target FTTR equipment.

[0129] In one of the embodiments, the acquisition module 11 is further used to: send a network status query instruction to the target FTTR device through the communication middleware between the management platform and the target FTTR device;

[0130] Through the communication middleware, the network communication information of the currently connected target network fed back by the target FTTR device based on the network status query instruction is obtained.

[0131] In one embodiment, the network lock processing module 13 is further used to: send a network lock instruction to the target FTTR device through the communication middleware, so that the target FTTR device closes the network connection function of connecting to the target network.

[0132] In one of the embodiments, the communication middleware includes meter bus MBUS middleware.

[0133] In one of the embodiments, the apparatus further comprises a verification module, which is used to: feedback an authentication page to the target FTTR device when an access request initiated by the target FTTR device is obtained;

[0134] Obtain the user information added by the target user corresponding to the target FTTR device in the authentication page;

[0135] When the target user is determined to be a trusted user based on the user information, network access information of the available network provided by the target communication is fed back to the target FTTR device, so that the target FTTR device can access the available network based on the network access information.

[0136] Each module in the above-mentioned locking network device can be implemented in whole or in part by software, hardware or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the management platform in the form of hardware, or can be stored in the memory in the management platform in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0137] In an exemplary embodiment, a management platform is provided, which can be a terminal, and its internal structure diagram can be shown in Figure 7. The management platform includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the management platform is used to provide computing and control capabilities. The memory of the management platform includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the management platform is used to exchange information between the processor and the external device. The communication interface of the management platform is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (Near Field Communication, NFC) or other technologies. When the computer program is executed by the processor, a locking method is implemented. The display unit of the management platform is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the management platform can be a touch layer covering the display screen, or a button, trackball or touchpad set on the management platform shell, or an external keyboard, touchpad or mouse.

[0138] Those skilled in the art will understand that the structure shown in FIG. 7 is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the management platform on which the scheme of the present application is applied. The specific management platform may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0139] In an exemplary embodiment, a management platform is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0140] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0141] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0142] If it exists, the target FTTR device is controlled to lock the target network.

[0143] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0144] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0145] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0146] If it exists, the target FTTR device is controlled to lock the target network.

[0147] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0148] Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication organization and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol WAN IP address and the network communication quality;

[0149] Determine whether the target FTTR equipment has abnormal usage based on the network contract information and / or network communication information;

[0150] If it exists, the target FTTR device is controlled to lock the target network.

[0151] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0152] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0153] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0154] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A network locking method, characterized in that: Applied to a management platform of a target communication organization, the method comprises: Obtaining the network contract information of the target fiber-to-the-room FTTR device at the target communication institution and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes the wide area network Internet Protocol (WANIP) address and the network communication quality; Determining whether the target FTTR device has abnormal usage according to the network contract information and / or the network communication information; If so, the target FTTR device is controlled to perform network locking processing on the target network.

2. The method according to claim 1, characterized in that Determining whether the target FTTR device has abnormal usage according to the network contract information includes: If it is determined based on the network contract information that the network service subscribed by the target FTTR device has expired, or the target FTTR device has not subscribed to the network service from the target communication agency, it is determined that there is an abnormal use of the target FTTR device.

3. The method according to claim 1, characterized in that: Determining whether the target FTTR device has abnormal usage according to the network communication information includes: If the WAN IP address does not fall within the preset network range provided by the target communication mechanism, or the network communication quality does not meet the communication quality threshold, it is determined that the target FTTR device has a usage abnormality.

4. The method according to claim 1, characterized in that: Determining whether the target FTTR device has abnormal usage according to the network contract information and the network communication information includes: If it is determined based on the network contract information that the network service subscribed by the target FTTR device is valid, then Determining whether the WAN IP address falls within a preset network range provided by the target communication organization; If yes, determining whether the network communication quality meets the communication quality threshold; If so, it is determined that there is no abnormal use of the target FTTR device.

5. The method according to claim 1, characterized in that Obtaining network communication information of the target network currently accessed by the target FTTR device, including: Sending a network status query instruction to the target FTTR device through the communication middleware between the management platform and the target FTTR device; The communication middleware is used to obtain the network communication information of the currently connected target network fed back by the target FTTR device based on the network status query instruction.

6. The method according to claim 5, characterized in that The controlling the target FTTR device to lock the target network includes: A network lock instruction is sent to the target FTTR device through the communication middleware, so that the target FTTR device closes the network connection function of connecting to the target network.

7. The method according to claim 5 or 6, characterized in that: The communication middleware includes a metering bus MBUS middleware.

8. The method according to any one of claims 1 to 4, characterized in that After controlling the target FTTR device to perform network locking processing on the target network, the method further includes: When an access request initiated by the target FTTR device is obtained, feeding back an authentication page to the target FTTR device; Obtain user information added by a target user corresponding to the target FTTR device in the authentication page; When it is determined that the target user is a trusted user based on the user information, network access information of the available network provided by the target communication is fed back to the target FTTR device, so that the target FTTR device accesses the available network based on the network access information.

9. A net locking device, characterized in that: The device is configured on a management platform of a target communication organization, and includes: An acquisition module is used to acquire the network contract information of the target fiber-to-the-room FTTR device at the target communication institution and the network communication information of the target network currently accessed by the target FTTR device; wherein the network communication information includes a wide area network Internet Protocol (WAN) IP address and network communication quality; an abnormality determination module, used to determine whether the target FTTR device has a usage abnormality according to the network contract information and / or the network communication information; The network locking processing module is used to control the target FTTR device to perform network locking processing on the target network when it is determined that the target FTTR device is used abnormally.

10. A management platform, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 8 are implemented.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

12. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images