Abnormal broadband user determination method, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an abnormal broadband user determination method, electronic equipment and a storage medium. The method comprises the following steps: acquiring internet address information and transaction information of a broadband user; wherein the internet address information represents an internet address used by the user when the user performs network connection through a broadband within a preset time period, and the transaction information represents a transaction condition between the user and a preset operator; if it is determined that the broadband user is an abnormal user according to the Internet address information and the transaction information, generating and sending out early warning information according to the Internet address information and the transaction information of the broadband user; wherein the early warning information is used for giving an alarm for the abnormal user. The method is used for achieving the effects of quickly and accurately identifying the abnormal broadband user and carrying out early warning.

Description

Technical Field

[0001] The present application relates to the field of network security, and in particular to a method for determining an abnormal broadband user, an electronic device, and a storage medium. Background Art

[0002] With the development of Internet technology, broadband has gradually become an important way for individual users or home users to access the Internet. Broadband can provide users with high-quality network services at a relatively low cost, meeting the Internet needs of a large number of users. At present, there are enterprises or individuals who centrally obtain a large amount of low-priced broadband, access the Internet through dial-up software, frequently change Internet addresses, and constantly change different identities to avoid monitoring, so as to conduct abnormal behaviors such as posting comments, affecting network information security and causing losses to network service operators and ordinary users.

[0003] The methods for identifying such abnormal broadband users mostly rely on manual extraction and verification, which is inefficient and cannot fully and timely detect abnormal users.

[0004] Therefore, how to quickly and accurately identify abnormal broadband users has become a problem that needs to be solved urgently. Summary of the invention

[0005] The embodiments of the present application provide a method for determining an abnormal broadband user, an electronic device, and a storage medium, so as to achieve the effect of quickly and accurately determining the abnormal broadband user.

[0006] In a first aspect, an embodiment of the present application provides a method for determining an abnormal broadband user, including:

[0007] Obtaining the Internet address information and transaction information of broadband users; wherein the Internet address information represents the Internet address used by the user when connecting to the network through broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator;

[0008] If the broadband user is determined to be an abnormal user based on the Internet address information and transaction information, an early warning message is generated and issued based on the Internet address information and transaction information of the broadband user; wherein the early warning message is used to warn the abnormal user.

[0009] In a possible implementation, determining that a broadband user is an abnormal user according to Internet address information and transaction information includes:

[0010] determining the address quantity of the Internet address from the Internet address information, and determining the broadband expenditure information of the broadband user from the transaction information;

[0011] Determine whether a broadband user is an abnormal user based on the number of addresses and broadband expenditure information.

[0012] In a possible implementation, determining whether a broadband user is an abnormal user according to the number of addresses and the broadband expenditure information includes:

[0013] If the number of addresses is greater than a preset number threshold, and the broadband expenditure information is less than a preset expenditure threshold, the broadband user is determined to be an abnormal user.

[0014] In a possible implementation manner, determining the address quantity of the Internet address from the Internet address information includes:

[0015] Obtain the user category corresponding to the broadband user; wherein the user category is a dynamic address user or a static address user, a dynamic address user indicates that the Internet address used by the broadband user each time when the broadband connects to the network is different, and a static address user indicates that the Internet address used by the broadband user each time when the broadband connects to the network is the same;

[0016] If it is determined that the user category of the broadband user is a dynamic address user, the number of Internet addresses is determined from the Internet address information.

[0017] In a possible implementation, determining the broadband expenditure information of the broadband user from the transaction information includes:

[0018] Determining operator service information from the transaction information; wherein the operator service information represents the content of services provided by the operator to the broadband user;

[0019] Determine the broadband user's broadband expenditure information based on the operator's service information.

[0020] In a possible implementation, determining the broadband expenditure information of the broadband user according to the operator service information includes:

[0021] If the operator service information only includes broadband services, the expense information in the operator service information is determined as the broadband expense information of the broadband user.

[0022] In a possible implementation, determining the broadband expenditure information of the broadband user according to the operator service information includes:

[0023] If the operator service information includes other services in addition to the broadband service, obtaining a preset expenditure determination algorithm corresponding to the operator service information; wherein the expenditure determination algorithm is used to determine the expenditure information of the broadband service in the operator service information;

[0024] According to the operator service information, based on a preset expenditure determination algorithm, the broadband expenditure information of the broadband user is determined.

[0025] In a possible implementation, generating and issuing warning information based on the Internet address information and transaction information of the broadband user includes:

[0026] Acquire geographical information of the broadband user; wherein the geographical information represents the geographical location of the broadband user;

[0027] According to the preset association relationship, a target object corresponding to the regional information of the broadband user is determined; wherein the preset association relationship is an association relationship between the preset regional information and the person in charge, and the target object is the person in charge of the abnormal user in the regional information of the broadband user;

[0028] According to the Internet address information and transaction information of the broadband user, the warning information is generated and sent to the target object.

[0029] In a second aspect, an embodiment of the present application provides a device for determining an abnormal broadband user, including:

[0030] An acquisition unit, used to acquire the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network through broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator;

[0031] The early warning unit is used to generate and issue early warning information based on the Internet address information and transaction information of the broadband user if the broadband user is determined to be an abnormal user based on the Internet address information and transaction information; wherein the early warning information is used to warn the abnormal user.

[0032] In a third aspect, an embodiment of the present application provides a device for determining an abnormal broadband user, including: a memory, a processor;

[0033] The memory stores computer-executable instructions;

[0034] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0035] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the first aspect above and / or various possible implementations of the first aspect.

[0036] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the above first aspect and / or various possible implementation methods of the first aspect.

[0037] The method for determining abnormal broadband users, the electronic device, and the storage medium provided in the embodiments of the present application obtain the Internet address information and transaction information of the broadband user, and analyze the Internet address information and the transaction information. If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, an early warning message is generated and issued to warn the abnormal behavior of the abnormal user, thereby achieving the determination of the abnormal behavior of the broadband user from two dimensions of the Internet address information and the transaction information, and effectively identifying the abnormal broadband users, so as to promptly handle the abnormal broadband users, reduce losses, and enhance network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0039] Figure 1 A flowchart of a method for determining an abnormal broadband user provided by an embodiment of the present disclosure;

[0040] Figure 2 A flowchart of a method for determining an abnormal broadband user provided by an embodiment of the present disclosure;

[0041] Figure 3 A flowchart of a method for determining an abnormal broadband user provided by an embodiment of the present disclosure;

[0042] Figure 4 A structural block diagram of a device for determining an abnormal broadband user provided by an embodiment of the present disclosure;

[0043] Figure 5 A structural block diagram of a device for determining an abnormal broadband user provided by an embodiment of the present disclosure;

[0044] Figure 6 A structural block diagram of an electronic device provided in an embodiment of the present disclosure;

[0045] Figure 7 It is a block diagram of an electronic device according to an exemplary embodiment.

[0046] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0047] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0048] With the development of Internet technology, broadband, as a low-cost and high-quality network connection method, has gradually become an important way for individuals or home users to connect to the Internet, and the number of broadband users is increasing year by year. However, there are companies or individuals who concentrate on obtaining a large amount of low-priced broadband, use dial-up Internet software, frequently change Internet addresses, change different identities to avoid monitoring, and engage in abnormal behaviors such as posting comments and online trolls, which damages network security and the Internet environment, and harms the rights and interests of ordinary users and network operators.

[0049] At present, the method of determining such abnormal broadband users mostly relies on manual identification. By analyzing the data generated by the broadband users' network connection, abnormal broadband users are determined among the broadband users. This method is inefficient and has poor accuracy. It is also difficult to identify abnormal broadband users in a timely manner, making it impossible for relevant persons in charge or staff to deal with abnormal broadband users in a timely manner.

[0050] The method for determining abnormal broadband users, electronic device and storage medium provided in the present application are intended to solve the above problems in the prior art.

[0051] The application scenario of the present application is that network operators identify abnormal broadband users. Specifically, it is used to determine whether a broadband user is an abnormal user based on the Internet address information and transaction information of the broadband user, and to generate and issue alarm information based on the Internet address information and transaction information of the abnormal broadband user to warn the abnormal user.

[0052] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0053] Figure 1 A flowchart of a method for determining an abnormal broadband user provided in an embodiment of the present disclosure is provided. The method can be executed by a device for determining an abnormal broadband user.

[0054] like Figure 1 As shown, the method comprises the following steps:

[0055] S101. Obtaining the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network via broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator.

[0056] Exemplarily, the Internet address information and transaction information of the operator's broadband users are obtained from the operator's preset database. The preset database is used to store the Internet address information and transaction information of broadband users; the Internet address information represents the Internet address used by the user when connecting to the network through broadband within a preset time period; the transaction information represents the transaction between the user and the preset operator, for example, it may include the service items and expenditure details of the transaction conducted by the broadband user at the preset operator, and the service items represent the service items provided by the preset operator to the user, and the service items may be, for example, at least one broadband service, call service, etc.

[0057] S102. If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, generate and issue warning information based on the Internet address information and the transaction information of the broadband user; wherein the warning information is used to warn the abnormal user.

[0058] Exemplarily, the Internet address information of broadband users is analyzed. For example, the Internet address information may include the time the user uses the Internet address. The usage time of the Internet address in the Internet address information can be obtained, and the frequency of the user using the Internet address within a preset time period is determined based on the usage time of all Internet addresses. If the frequency of the user using the Internet address within the preset time period exceeds a preset frequency threshold, the user's Internet address information is determined as abnormal information.

[0059] Analyze the transaction information of broadband users. For example, the target items may be pre-set, and the service items traded by the user at the preset operator are determined based on the transaction information. If the service of the preset target item exists in the transaction information, the user's transaction information is determined as abnormal information.

[0060] If the Internet address information of the broadband user is abnormal information and the transaction information is abnormal information, the broadband user is determined as an abnormal user, and based on the Internet address information and transaction information of the abnormal user, based on the preset warning configuration rules, a warning message is generated, and the warning message is sent to the corresponding person in charge. For example, the number of Internet addresses used in the Internet address information can be determined, and based on the preset warning rule configuration information, if the number of Internet addresses used is in a preset numerical interval, the warning information corresponding to the numerical interval is determined as the warning information of the abnormal user; based on the transaction information, the person who handles the broadband service of the abnormal user is determined, and the person who handles the service is determined as the person in charge; the warning information is sent to the person in charge, and the person in charge receives the warning information and responds to the warning information such as broadband speed limit or telephone inquiry. Among them, the preset warning rule configuration information is used to determine the warning information of the abnormal user according to the Internet address information and transaction information of the abnormal user. The warning configuration rule can be, for example, pre-setting at least one numerical interval of the Internet address information, or at least one numerical interval of the transaction information, and setting the warning information corresponding to the numerical interval. When the Internet address information or the transaction information of the broadband user is in the preset numerical interval, the warning information corresponding to the numerical interval is determined as the warning information of the abnormal user. Among them, the warning information can characterize the type of abnormal behavior of the abnormal user. The warning information can be, for example, that the user's abnormal behavior is a network water army.

[0061] The method for determining abnormal broadband users, the electronic device, and the storage medium provided in the embodiments of the present application obtain the Internet address information and transaction information of the broadband user, and analyze the Internet address information and the transaction information. If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, an early warning message is generated and issued to warn the abnormal behavior of the abnormal user, thereby achieving the determination of the abnormal behavior of the broadband user from two dimensions of the Internet address information and the transaction information, and effectively identifying the abnormal broadband users, so as to promptly handle the abnormal broadband users, reduce losses, and enhance network security.

[0062] Figure 2 A flowchart of a method for determining an abnormal broadband user provided in an embodiment of the present disclosure.

[0063] In this embodiment, determining whether a broadband user is an abnormal user based on Internet address information and transaction information includes: determining the address quantity of the Internet address from the Internet address information, and determining the broadband expenditure information of the broadband user from the transaction information; and determining whether the broadband user is an abnormal user based on the address quantity and the broadband expenditure information.

[0064] like Figure 2 As shown, the method comprises the following steps:

[0065] S201. Obtaining the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network via broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator.

[0066] Exemplarily, this step may refer to the above-mentioned step S101 and will not be described in detail.

[0067] S202: Determine the address quantity of the Internet address from the Internet address information, and determine the broadband expenditure information of the broadband user from the transaction information.

[0068] Exemplarily, the number of used Internet addresses is determined from the interconnected address information, for example, the number of Internet addresses obtained from a preset operator when a broadband user connects to the network, and the broadband expenditure information of the broadband user is determined from the transaction information, for example, the billing status of the specific expenditure of the broadband user on the broadband service is determined.

[0069] The beneficial effect of this arrangement is that the number of used Internet addresses can be determined based on Internet address information, and the user's expenditure on broadband services can be determined based on transaction information. This can fully understand the user's broadband usage, facilitate subsequent analysis of broadband user behavior, and determine whether broadband users have abnormal behavior.

[0070] In this embodiment, determining the number of Internet addresses from Internet address information includes: obtaining a user category corresponding to the broadband user; wherein the user category is a dynamic address user or a static address user, a dynamic address user represents that the Internet address used by the broadband is different each time the network is connected, and a static address user represents that the Internet address used by the broadband user each time the network is connected is the same; if it is determined that the user category of the broadband user is a dynamic address user, determining the number of Internet addresses from the Internet address information.

[0071] Specifically, the user category corresponding to the broadband user is obtained. The user type represents the user's use of the Internet address. The user type is a static address user or a dynamic address user. A dynamic address user represents a broadband user who uses a different Internet address each time he or she connects to the network. Each time he or she connects to the network, he or she needs to obtain the Internet address provided by the operator. Dynamic address users are mostly individual or family users. A static address user represents a broadband user who uses the same Internet address each time he or she connects to the network. Each time he or she connects to the network, he or she uses a fixed Internet address. Static address users are mostly corporate users.

[0072] If it is determined that the user category of the broadband user is a dynamic address user, the number of Internet addresses acquired by the broadband user is determined based on the Internet address information of the broadband user.

[0073] The beneficial effect of such a setting is that by determining the user category of broadband users, the number of Internet addresses of broadband users whose user category is dynamic address users is determined. Since abnormal user behavior is mostly due to the frequent switching of Internet addresses using dial-up software, the number of Internet addresses is not determined for users with a low possibility of abnormal behavior, such as static address users, which can effectively improve the efficiency of determining abnormal user behavior.

[0074] In this embodiment, determining the broadband expenditure information of the broadband user from the transaction information includes: determining the operator service information from the transaction information; wherein the operator service information represents the content of the service provided by the operator to the broadband user; and determining the broadband expenditure information of the broadband user based on the operator service information.

[0075] Specifically, the operator service information generated by the broadband user at the operator is determined from the transaction information. The operator service information represents the content of the services provided by the operator to the broadband user, that is, what kind of services the operator provides to the broadband user, and the expenditure incurred by the broadband user for paying for the services provided by the operator. The operator service information may be a preset package provided by the operator to the broadband user.

[0076] The broadband expenditure information of the broadband user is determined according to the operator service information. For example, the expenditure incurred by the broadband user for the service provided by the operator in the operator service information may be determined as the broadband expenditure information of the broadband user.

[0077] The beneficial effect of such a setting is that the expenditure of broadband users can be determined, which facilitates the subsequent identification of abnormal users based on the broadband expenditure information, thereby improving the efficiency and accuracy of identifying abnormal users.

[0078] In this embodiment, the broadband expenditure information of the broadband user is determined according to the operator service information, including: if the operator service information only includes broadband services, the expenditure information in the operator service information is determined as the broadband expenditure information of the broadband user.

[0079] Specifically, the operator service information is analyzed. For example, the operator service information includes service items provided by the operator to broadband users. The service items in the operator service information are determined. If the operator service information only includes broadband services, that is, the user only spends on broadband services, then the user's expenditure at the operator is determined as the user's expenditure on broadband, that is, the expenditure information in the operator service information is determined as the broadband expenditure information of the broadband user.

[0080] The beneficial effect of such a setting is that if the user only has broadband service, the user's expenditure is determined as the expenditure information of the broadband user, and the user's expenditure on the broadband service can be specifically determined, which is convenient for subsequent analysis.

[0081] In this embodiment, the broadband expenditure information of the broadband user is determined based on the operator service information, including: if the operator service information includes services other than broadband service, obtaining a preset expenditure determination algorithm corresponding to the operator service information; wherein the expenditure determination algorithm is used to determine the expenditure information of the broadband service in the operator service information; and determining the broadband expenditure information of the broadband user based on the preset expenditure determination algorithm according to the operator service information.

[0082] Specifically, the operator service information is analyzed to determine the service items in the operator service information. If the operator service information includes other services in addition to broadband services, for example, in addition to broadband services, other services such as call services are included, then according to the association relationship between the preset operator service information and the expenditure algorithm, the preset expenditure algorithm corresponding to the operator service information is obtained from the preset operator. The expenditure algorithm is used to determine the expenditure information of the broadband service in the operator service information according to the operator service information, and there is an association relationship between the operator service information and the preset expenditure algorithm, and the operator service information and the preset expenditure algorithm correspond one to one.

[0083] According to the operator service information, based on a preset expenditure determination algorithm, the expenditure of broadband users on broadband services is determined, which is the broadband expenditure information.

[0084] The beneficial effect of such a setting is that for users whose operator service information includes not only broadband services but also other services, the broadband expenditure information can be determined based on a preset expenditure algorithm, which can determine the user's actual expenditure on broadband services, avoid being affected by other service expenditures, and improve the accuracy of subsequent identification of abnormal users.

[0085] S203: Determine whether the broadband user is an abnormal user based on the number of addresses and the broadband expenditure information.

[0086] Exemplarily, based on the number of addresses and broadband expenditure information, the average broadband expenditure of the broadband user's Internet address is determined. If the average broadband expenditure of the address is less than a preset numerical threshold, the broadband user is determined to be an abnormal user.

[0087] The beneficial effect of such a setting is that by combining the number of addresses and broadband expenditure information to determine whether a broadband user is an abnormal user, the possibility of misjudgment is reduced and the accuracy of identifying whether a user is an abnormal user is improved.

[0088] In this embodiment, whether the broadband user is an abnormal user is determined based on the number of addresses and the broadband expenditure information, including: if the number of addresses is greater than a preset number threshold, and the broadband expenditure information is less than a preset expenditure threshold, the broadband user is determined to be an abnormal user.

[0089] Specifically, a quantity threshold is pre-set, which is the minimum number of addresses used by broadband users for abnormal behavior. For example, the quantity threshold may be 1,000. An expenditure threshold is pre-set, which is the threshold of broadband expenditure information. For example, the expenditure threshold may be 30.

[0090] If the number of addresses exceeds a preset number threshold and the broadband expenditure information is less than a preset expenditure threshold, the broadband user is determined to be an abnormal user.

[0091] The advantage of this setting is that it avoids the misjudgment of whether a user is an abnormal user due to a single reason. Only when the conditions of abnormal number of addresses and abnormal broadband expenditure are met at the same time, the user will be identified as an abnormal user, which improves accuracy.

[0092] S204: If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, generate and issue warning information based on the Internet address information and the transaction information of the broadband user; wherein the warning information is used to warn the abnormal user.

[0093] Exemplarily, this step may refer to the above-mentioned step S102 and will not be described in detail.

[0094] The method for determining abnormal broadband users, the electronic device, and the storage medium provided in the embodiments of the present application obtain the Internet address information and transaction information of the broadband user, and analyze the Internet address information and the transaction information. If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, an early warning message is generated and issued to warn the abnormal behavior of the abnormal user, thereby achieving the determination of the abnormal behavior of the broadband user from two dimensions of the Internet address information and the transaction information, and effectively identifying the abnormal broadband users, so as to promptly handle the abnormal broadband users, reduce losses, and enhance network security.

[0095] Figure 3 A flowchart of a method for determining an abnormal broadband user provided in an embodiment of the present disclosure.

[0096] In this embodiment, based on the Internet address information and transaction information of the broadband user, warning information is generated and issued, including: obtaining the geographical information of the broadband user; wherein the geographical information represents the geographical location of the broadband user; determining the target object corresponding to the geographical information of the broadband user according to a preset association relationship; wherein the preset association relationship is the association relationship between the preset geographical information and the person in charge, and the target object is the person in charge of the abnormal users in the geographical information of the broadband user; generating warning information based on the Internet address information and transaction information of the broadband user, and sending the warning information to the target object.

[0097] S301. Obtaining the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network via broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator.

[0098] Exemplarily, this step may refer to the above-mentioned step S101 and will not be described in detail.

[0099] S302: If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, the geographical information of the broadband user is obtained; wherein the geographical information represents the geographical location of the broadband user.

[0100] Exemplarily, the Internet address information and transaction information are analyzed, and if the Internet address information is abnormal information and the transaction information is abnormal information, the broadband user is determined to be an abnormal user, and the geographical information of the broadband user is obtained. The geographical information represents the geographical location of the broadband user, that is, the geographical location of the province or city where the broadband user is located.

[0101] The beneficial effect of such a setting is that obtaining the geographical location of the broadband user can facilitate the determination of the person in charge corresponding to the geographical location of the broadband user, improve the efficiency of early warning for abnormal users, and reduce the damage caused by the abnormal behavior of abnormal users.

[0102] S303. Determine a target object corresponding to the regional information of the broadband user according to a preset association relationship; wherein the preset association relationship is an association relationship between the preset regional information and a person in charge, and the target object is a person in charge of abnormal users in the regional information of the broadband user.

[0103] Exemplarily, the association relationship between the regional information and the target object is preset, that is, the person in charge corresponding to the geographical location is set. According to the preset association relationship and the regional information of the abnormal user, the person in charge corresponding to the regional information is determined as the target object. Among them, the target object is the person in charge of the abnormal user in the regional information of the broadband user, that is, for any geographical location range, all abnormal users within the geographical location range are handled by the person in charge corresponding to the geographical location range.

[0104] The beneficial effect of such a setting is that the person in charge corresponding to the regional information is determined according to the regional information, so that the person in charge can quickly respond to abnormal users and handle abnormal users, thereby improving the efficiency of early warning of abnormal users.

[0105] S304: Generate warning information based on the Internet address information and transaction information of the broadband user, and send the warning information to the target object.

[0106] Exemplarily, according to the Internet address information and transaction information of broadband users, based on preset warning rule configuration information, warning information of broadband users is generated, and the warning information is sent to the target object, the target object responds to the warning information and handles abnormal users.

[0107] The beneficial effect of such a setting is that the warning information of abnormal users is sent to the corresponding target objects in a timely manner, which improves the efficiency of handling abnormal users and reduces the losses caused by abnormal users.

[0108] The method for determining abnormal broadband users, the electronic device, and the storage medium provided in the embodiments of the present application obtain the Internet address information and transaction information of the broadband user, and analyze the Internet address information and the transaction information. If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, an early warning message is generated and issued to warn the abnormal behavior of the abnormal user, thereby achieving the determination of the abnormal behavior of the broadband user from two dimensions of the Internet address information and the transaction information, and effectively identifying the abnormal broadband users, so as to promptly handle the abnormal broadband users, reduce losses, and enhance network security.

[0109] Figure 4 A structural block diagram of a device for determining an abnormal broadband user provided in an embodiment of the present disclosure.

[0110] For the sake of convenience, only the parts related to the embodiments of the present disclosure are shown. Figure 4 The abnormal broadband user determination device 400 includes: an acquisition unit 401 and an early warning unit 402 .

[0111] The acquisition unit 401 is used to acquire the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network through broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator;

[0112] The warning unit 402 is used to generate and issue warning information based on the Internet address information and the transaction information of the broadband user if the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information; wherein the warning information is used to warn the abnormal user.

[0113] Figure 5 A structural block diagram of a device for determining an abnormal broadband user provided in an embodiment of the present disclosure.

[0114] exist Figure 4 Based on the embodiment shown, Figure 5 As shown, the early warning unit 402 includes a first determination module 4021 and a second determination module 4022 .

[0115] A first determining module 4021, configured to determine the address quantity of the Internet address from the Internet address information, and to determine the broadband expenditure information of the broadband user from the transaction information;

[0116] The second determination module 4022 determines whether the broadband user is an abnormal user according to the number of addresses and the broadband expenditure information.

[0117] The acquisition module 4023 is used to acquire the geographical information of the broadband user; wherein the geographical information represents the geographical location of the broadband user;

[0118] The third determination module 4024 is used to determine the target object corresponding to the regional information of the broadband user according to a preset association relationship; wherein the preset association relationship is an association relationship between the preset regional information and a person in charge, and the target object is a person in charge of abnormal users in the regional information of the broadband user;

[0119] The warning module 4025 is used to generate warning information according to the Internet address information and the transaction information of the broadband user, and send the warning information to the target object.

[0120] In one example, the second determining module 4022 includes:

[0121] The determination submodule is used to determine the broadband user as an abnormal user if the number of addresses is greater than a preset number threshold and the broadband expenditure information is less than a preset expenditure threshold.

[0122] In one example, the first determining module 4021 includes:

[0123] A category submodule, used to obtain the user category corresponding to the broadband user; wherein the user category is a dynamic address user or a static address user, the dynamic address user represents that the Internet address used by the broadband user each time when the network is connected is different, and the static address user represents that the Internet address used by the broadband user each time when the network is connected is the same;

[0124] The quantity submodule is used to determine the quantity of Internet addresses from the Internet address information if it is determined that the user category of the broadband user is a dynamic address user.

[0125] In one example, the first determining module 4021 includes:

[0126] A service submodule, configured to determine operator service information from the transaction information; wherein the operator service information represents the content of services provided by the operator to the broadband user;

[0127] The expenditure submodule is used to determine the broadband expenditure information of the broadband user according to the operator service information.

[0128] In one example, the expenditure submodule is specifically used to:

[0129] If the operator service information only includes broadband services, the expenditure information in the operator service information is determined as the broadband expenditure information of the broadband user.

[0130] In one example, the expenditure submodule is specifically used to:

[0131] If the operator service information includes other services in addition to the broadband service, obtaining a preset expenditure determination algorithm corresponding to the operator service information; wherein the expenditure determination algorithm is used to determine the expenditure information of the broadband service in the operator service information;

[0132] According to the operator service information, based on a preset expenditure determination algorithm, the broadband expenditure information of the broadband user is determined.

[0133] Figure 6 A structural block diagram of an electronic device provided in an embodiment of the present disclosure, the electronic device may be a terminal device or a server, such as Figure 6As shown, the electronic device 600 includes: at least one processor 602; and a memory 601 communicatively connected to the at least one processor 602; wherein the memory stores instructions executable by the at least one processor 602, and the instructions are executed by the at least one processor 602 so that the at least one processor 602 can execute the method for determining abnormal broadband users disclosed in the present invention.

[0134] The electronic device 600 further includes a receiver 603 and a transmitter 604. The receiver 603 is used to receive instructions and data sent by other devices, and the transmitter 604 is used to send instructions and data to external devices.

[0135] According to an embodiment of the present disclosure, the present disclosure also provides an electronic device, a readable storage medium and a computer program product.

[0136] According to an embodiment of the present disclosure, the present disclosure also provides a computer program product, which includes: a computer program, the computer program is stored in a readable storage medium, at least one processor of an electronic device can read the computer program from the readable storage medium, and at least one processor executes the computer program so that the electronic device executes the solution provided by any of the above embodiments.

[0137] Figure 7 It is a block diagram of an electronic device according to an exemplary embodiment, which device may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0138] Device 700 may include one or more of the following components: a processing component 702 , a memory 704 , a power component 706 , a multimedia component 708 , an audio component 711 , an input / output (I / O) interface 712 , a sensor component 714 , and a communication component 716 .

[0139] The processing component 702 generally controls the overall operation of the device 700, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 702 may include one or more processors 720 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 702 may include one or more modules to facilitate the interaction between the processing component 702 and other components. For example, the processing component 702 may include a multimedia module to facilitate the interaction between the multimedia component 708 and the processing component 702.

[0140] The memory 704 is configured to store various types of data to support operations on the device 700. Examples of such data include instructions for any application or method operating on the device 700, contact data, phone book data, messages, pictures, videos, etc. The memory 704 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0141] The power supply component 706 provides power to the various components of the device 700. The power supply component 706 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the device 700.

[0142] The multimedia component 708 includes a screen that provides an output interface between the device 700 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 708 includes a front camera and / or a rear camera. When the device 700 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0143] The audio component 710 is configured to output and / or input audio signals. For example, the audio component 710 includes a microphone (MIC), and when the device 700 is in an operating mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 704 or sent via the communication component 716. In some embodiments, the audio component 710 also includes a speaker for outputting audio signals.

[0144] I / O interface 712 provides an interface between processing component 702 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.

[0145] The sensor assembly 714 includes one or more sensors for providing various aspects of status assessment for the device 700. For example, the sensor assembly 714 can detect the open / closed state of the device 700, the relative positioning of components, such as the display and keypad of the device 700, and the sensor assembly 714 can also detect the position change of the device 700 or a component of the device 700, the presence or absence of user contact with the device 700, the orientation or acceleration / deceleration of the device 700, and the temperature change of the device 700. The sensor assembly 714 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 714 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 714 may also include an accelerometer, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0146] The communication component 716 is configured to facilitate wired or wireless communication between the device 700 and other devices. The device 700 can access a wireless network based on a communication standard, such as WiFi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 716 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 716 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0147] In an exemplary embodiment, the device 700 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above methods.

[0148] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 704 including instructions, and the instructions can be executed by the processor 720 of the device 700 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0149] A non-transitory computer-readable storage medium, when instructions in the storage medium are executed by a processor of a terminal device, enables the terminal device to execute the above-mentioned method for determining abnormal broadband users.

[0150] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0151] It should be further noted that, although the various steps in the flowchart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowchart may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0152] It should be understood that the above-mentioned device embodiments are only illustrative, and the device of the present application can also be implemented in other ways. For example, the division of units / modules in the above-mentioned embodiments is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0153] In addition, unless otherwise specified, each functional unit / module in each embodiment of the present application may be integrated into one unit / module, each unit / module may exist physically separately, or two or more units / modules may be integrated together. The above-mentioned integrated unit / module may be implemented in the form of hardware or in the form of a software program module.

[0154] If the integrated unit / module is implemented in the form of hardware, the hardware may be a digital circuit, an analog circuit, etc. The physical implementation of the hardware structure includes but is not limited to transistors, memristors, etc. Unless otherwise specified, the processor may be any appropriate hardware processor, such as a CPU, a GPU, an FPGA, a DSP, an ASIC, etc. Unless otherwise specified, the storage unit may be any appropriate magnetic storage medium or magneto-optical storage medium, such as a resistive random access memory (RRAM), a dynamic random access memory (DRAM), a static random access memory (SRAM), an enhanced dynamic random access memory (EDRAM), a high-bandwidth memory (HBM), a hybrid memory cube (HMC), etc.

[0155] If the integrated unit / module is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a memory, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned memory includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0156] In the above embodiments, the description of each embodiment has its own emphasis. For parts not described in detail in a certain embodiment, please refer to the relevant description of other embodiments. The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0157] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0158] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A method for determining an abnormal broadband user, characterized in that: include: Obtaining the Internet address information and transaction information of the broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network via broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator; If the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information, an early warning message is generated and issued based on the Internet address information and the transaction information of the broadband user; wherein the early warning message is used to warn the abnormal user.

2. The method according to claim 1, characterized in that Determining the broadband user as an abnormal user according to the Internet address information and the transaction information includes: determining the address quantity of the Internet address from the Internet address information, and determining the broadband expenditure information of the broadband user from the transaction information; It is determined whether the broadband user is an abnormal user according to the number of addresses and the broadband expenditure information.

3. The method according to claim 2, characterized in that Determining whether the broadband user is an abnormal user according to the number of addresses and the broadband expenditure information includes: If the number of addresses is greater than a preset number threshold, and the broadband expenditure information is less than a preset expenditure threshold, the broadband user is determined to be an abnormal user.

4. The method according to claim 2, characterized in that: Determining the address quantity of the Internet address from the Internet address information includes: Obtaining a user category corresponding to the broadband user; wherein the user category is a dynamic address user or a static address user, the dynamic address user represents that the broadband uses a different Internet address each time it connects to the network, and the static address user represents that the broadband user uses the same Internet address each time it connects to the network; If it is determined that the user category of the broadband user is a dynamic address user, the number of Internet addresses is determined from the Internet address information.

5. The method according to claim 2, characterized in that: Determining the broadband expenditure information of the broadband user from the transaction information includes: Determining operator service information from the transaction information; wherein the operator service information represents the content of services provided by the operator to the broadband user; The broadband expenditure information of the broadband user is determined according to the operator service information.

6. The method according to claim 5, characterized in that Determining the broadband expenditure information of the broadband user according to the operator service information includes: If the operator service information only includes broadband services, the expenditure information in the operator service information is determined as the broadband expenditure information of the broadband user.

7. The method according to claim 6, characterized in that Determining the broadband expenditure information of the broadband user according to the operator service information includes: If the operator service information includes other services in addition to the broadband service, obtaining a preset expenditure determination algorithm corresponding to the operator service information; wherein the expenditure determination algorithm is used to determine the expenditure information of the broadband service in the operator service information; According to the operator service information, based on a preset expenditure determination algorithm, the broadband expenditure information of the broadband user is determined.

8. The method according to claim 1, characterized in that Generate and issue warning information according to the Internet address information and the transaction information of the broadband user, including: Acquire the geographical information of the broadband user; wherein the geographical information represents the geographical location of the broadband user; According to a preset association relationship, a target object corresponding to the regional information of the broadband user is determined; wherein the preset association relationship is an association relationship between the preset regional information and a person in charge, and the target object is a person in charge of abnormal users in the regional information of the broadband user; According to the Internet address information and the transaction information of the broadband user, early warning information is generated, and the early warning information is sent to the target object.

9. A device for determining an abnormal broadband user, characterized in that: include: An acquisition unit, used to acquire Internet address information and transaction information of a broadband user; wherein the Internet address information represents the Internet address used by the user when connecting to the network via broadband within a preset time period, and the transaction information represents the transaction between the user and the preset operator; An early warning unit is used to generate and issue early warning information based on the Internet address information and the transaction information of the broadband user if the broadband user is determined to be an abnormal user based on the Internet address information and the transaction information; wherein the early warning information is used to warn the abnormal user.

10. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 8 when executed by a processor.

12. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 8 when being executed by a processor.

Images