Number detection method and device, storage medium and program product

Abstract

The invention provides a number detection method and device, a storage medium and a program product. The method comprises the following steps: acquiring first class attribute information of a to-be-detected number; according to the first type of attribute information, performing first screening processing on the to-be-detected number set to obtain a first screened number set; the first screening number set comprises a plurality of first screening numbers; obtaining second type attribute information of the first screening number; performing second screening processing on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set comprises a plurality of second screening numbers; acquiring third class attribute information of the second screening number; and performing third screening processing on the second screening number set according to the third type of attribute information to obtain an abnormal number. The method is used for improving the accuracy of number detection.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a number detection method, device, storage medium, and program product. Background Art

[0002] With the development of communication technology, the abuse of abnormal numbers has become increasingly serious. These abnormal numbers are mainly used in scenarios such as bulk registration and fraudulent transactions, leading to privacy leaks, the proliferation of spam, and increased network security risks.

[0003] At present, abnormal numbers are mainly detected by analyzing the specific call behavior characteristics of the numbers (such as high-frequency calls, concentrated calls at night, short-term contacts with multiple numbers, and other abnormal patterns).

[0004] However, the call behavior characteristics in existing detection methods have limitations, resulting in low accuracy of number detection. Summary of the Invention

[0005] The present application provides a number detection method, device, storage medium and program product to solve the problem that the call behavior characteristics in the existing detection method have limitations, resulting in low accuracy of number detection.

[0006] In a first aspect, the present application provides a number detection method, comprising:

[0007] Obtain a set of numbers to be detected; the set of numbers to be detected includes multiple numbers to be detected;

[0008] Obtaining first type of attribute information of the number to be detected;

[0009] performing a first screening process on the to-be-detected number set according to the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers;

[0010] Obtaining second type of attribute information of the first screening number;

[0011] performing a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers;

[0012] Obtaining third type of attribute information of the second screening number;

[0013] According to the third type of attribute information, a third screening process is performed on the second screening number set to obtain abnormal numbers.

[0014] In one possible implementation, the first type of attribute information includes number network access attributes and number package attributes; accordingly, the first screening process is performed on the number set to be detected based on the first type of attribute information to obtain a first screened number set, including: determining the network activation coefficient of the number to be detected based on the number network access attributes; determining the number credibility parameter of the number to be detected based on the number package attributes; screening out good numbers and / or whitelist numbers in the number set to be detected based on the network activation coefficient and the number credibility parameter; and deleting the good numbers and / or the whitelist numbers from the number set to be detected to obtain the first screened number set.

[0015] In a possible implementation, the number network access attributes include the number's current network access time, the most recent network access time, and the number's historical outage times; accordingly, determining the network activation coefficient of the number to be detected based on the number network access attributes includes: if the most recent network access time is 0, then the network activation coefficient of the number to be detected is equal to the number's current network access time; if the most recent network access time is not 0, then the network activation coefficient of the number to be detected is equal to the difference obtained by subtracting the ratio of the number's historical outage times to the most recent network access time from the number's current network access time.

[0016] In a possible implementation, the second category of attribute information includes threshold-given attribute information and threshold-adaptive adjustment attribute information; the threshold-given attribute information includes at least one of the following: there has been a caller on at most 1 day in the past 30 days, and if the calling number is 1 day, its network access time must be within 30 days; the number of applications used by users in the past 7 days is 0; the adaptive adjustment attribute information includes at least one of the following: the number of days in the past T days in which more than N text messages are sent does not exceed M; the number of days in the past T days in which more than N point-to-point text messages are sent per day does not exceed M; the maximum number of point-to-point text messages received in the past T days does not exceed M; the average daily number of text messages received on active days in the past T days is greater than M; wherein T, N and M are any positive integers.

[0017] In one possible implementation, performing a second screening process on the first screening number set based on the second type of attribute information to obtain a second screening number set includes: screening out an alternative number set from the first screening number set based on the threshold given attribute information; the alternative number set includes multiple alternative numbers; constructing a multivariate combination based on the adaptive adjustment attribute information; and screening the alternative number set based on the multivariate combination to obtain the second screening number set.

[0018] In one possible implementation, the third type of attribute information includes at least one of the following:

[0019] The base station location to which the current number belongs when receiving messages has the characteristics of multiple numbers gathering to receive messages within a unit of time; the terminal update frequency of the number in the past 30 days * the number of connected base stations; the maximum number of industry text messages received in the past 15 days.

[0020] In a possible implementation, after performing a third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers, the method further includes: generating abnormal push information according to the abnormal numbers; and displaying the abnormal push information.

[0021] In a second aspect, the present application provides a number detection device, comprising:

[0022] A first acquisition module is configured to acquire a set of numbers to be detected; the set of numbers to be detected includes a plurality of numbers to be detected;

[0023] A second acquisition module is used to obtain the first type of attribute information of the number to be detected;

[0024] a first screening module configured to perform a first screening process on the set of numbers to be detected based on the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers;

[0025] a third obtaining module, configured to obtain the second type of attribute information of the first screening number;

[0026] a second screening module configured to perform a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers;

[0027] a fourth obtaining module, configured to obtain third attribute information of the second screening number;

[0028] The third screening module is used to perform a third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers.

[0029] In a third aspect, the present application provides a number detection device, comprising: a memory, a processor;

[0030] The memory stores computer-executable instructions;

[0031] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0032] In a fourth aspect, the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the above first aspect and / or various possible implementations of the first aspect.

[0033] In a fifth aspect, the present application provides a computer program product, comprising a computer program, which, when executed by a processor, implements the above first aspect and / or various possible implementations of the first aspect.

[0034] The number detection method, device, storage medium and program product provided in the present application perform a first screening process on a set of numbers to be detected based on a first type of attribute information to obtain a first screened number set; perform a second screening process on the first screened number set based on a second type of attribute information to obtain a second screened number set; and perform a third screening process on the second screened number set based on a third type of attribute information to obtain abnormal numbers. By performing layer-by-layer screening on the set of numbers to be detected through attribute information, the accuracy of number detection can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0036] Figure 1 A schematic diagram of a scenario of a number detection method provided in an embodiment of the present application;

[0037] Figure 2 A flowchart of a number detection method provided in one embodiment of the present application;

[0038] Figure 3 A schematic diagram of the structure of a number detection device provided in an embodiment of the present application;

[0039] Figure 4 A schematic diagram of the structure of the number detection device provided in an embodiment of the present application.

[0040] The above drawings illustrate specific embodiments of the present application, which will be described in more detail below. These drawings and the textual description are not intended to limit the scope of the present application in any way, but rather to illustrate the concepts of the present application to those skilled in the art by reference to specific embodiments. DETAILED DESCRIPTION

[0041] Exemplary embodiments will be described in detail herein, with examples illustrated in the accompanying drawings. In the following description, when referring to the drawings, identical numerals in different figures represent identical or similar elements, unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.

[0042] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0043] Figure 1 A schematic diagram of a scenario of a number detection method provided in an embodiment of the present application, such as Figure 1 As shown, the specific application scenario of this application includes: a receiving device 101, a processor 102 and a display device 103.

[0044] It is understood that the structure illustrated in the embodiments of this application does not constitute a specific limitation on the object identification method. In other feasible implementations of this application, the above architecture may include more or fewer components than shown, or combine or split certain components, or arrange the components differently. The specific configuration can be determined based on the actual application scenario and is not limited here. Figure 1 The components shown can be implemented in hardware, software, or a combination of software and hardware.

[0045] In a specific implementation process, the receiving device 101 may be an input / output interface or a communication interface, and may obtain a set of numbers to be detected.

[0046] The processor 102 may process the set of numbers to be detected to determine abnormal numbers.

[0047] The display device 103 can be used to display the above-mentioned abnormal numbers and the like.

[0048] The display device may also be a touch screen display, which is used to receive user instructions while displaying the above content to achieve interaction with the user.

[0049] It should be understood that the above-mentioned processor can be implemented by the processor reading instructions in the memory and executing the instructions, or it can be implemented by a chip circuit.

[0050] In addition, the network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Ordinary technicians in this field can know that with the evolution of network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0051] The following specific embodiments describe in detail the technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0052] Figure 2 This is a flow chart of a number detection method provided by an embodiment of the present application. Figure 2 As shown, the method includes:

[0053] S201: Acquire a set of numbers to be detected; the set of numbers to be detected includes multiple numbers to be detected.

[0054] S202: Obtain first-category attribute information of the number to be detected.

[0055] Among them, the first type of attribute information includes number network access attributes and number package attributes.

[0056] S203: Performing a first screening process on the number set to be detected according to the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers.

[0057] Specifically, S203 includes S2031 to S2034:

[0058] S2031: Determine the network activation coefficient of the number to be detected according to the number network access attributes.

[0059] Among them, the number network attributes include the number's current network access time, the most recent online time, and the number's historical shutdown times.

[0060] It should be noted that the most recent online time refers to the online time before the number was last activated; the number's current online time is calculated from the most recent activation time.

[0061] Specifically, S2031 includes Sa~Sb:

[0062] Sa: If the most recent online time is 0, the online activation coefficient of the number to be detected is equal to the current time the number has been online.

[0063] The formula for calculating the online activation coefficient is:

[0064] ActT=T now (T last =0)

[0065] Where ActT is the network activation coefficient; T now T is the current network access time of the number; last The time it was most recently online.

[0066] Sb: If the most recent online time is not 0, the online activation coefficient of the number to be tested is equal to the difference between the number's current network access time and the ratio of the number's historical downtime times and the most recent online time.

[0067] The formula for calculating the online activation coefficient is:

[0068]

[0069] Where ActT is the network activation coefficient; T now T is the current network access time of the number; last A is the most recent online time; B is the number of times the number has been offline in history.

[0070] S2032: Determine the number credibility parameter of the number to be detected based on the number package attributes.

[0071] Among them, the number package attributes include: number payment type, number level and number package type, etc.

[0072] Specifically, S2032 specifically includes Sc~Sf:

[0073] Sc: Initialize the number credibility parameter to 0.

[0074] Sd: Determines whether the number type is an eSIM (Embedded Subscriber Identity Module) card. If the number type is not an eSIM card, calculates the number credibility parameter according to the preset number type increment formula.

[0075] The number type increment formula is:

[0076] Rel n =Rel o +1

[0077] In the formula, Rel n Rel is the calculated number credibility parameter; o is the code credibility parameter before calculation.

[0078] Se: Determine whether the number level is a low-level user; if the number level is determined to meet the preset number level conditions, determine whether the number payment type is postpaid; if the number payment type is determined to be postpaid, calculate the number credibility parameter according to the preset payment type increase formula.

[0079] The preset number level condition may be that the number level is level 0 or level 1.

[0080] The formula for the payment type increase is:

[0081] Rel n =Rel o +2*userlevel+1

[0082] In the formula, Rel n Rel is the calculated number credibility parameter; o is the number credibility parameter before calculation; userlevel is the number level.

[0083] Sf: Determine whether the number is a non-personal ID and the number package type is a fusion package; if the number is determined to be a non-personal ID and the number package type is not a fusion package, the number credibility parameter is calculated according to the first package type increase formula; if the number is determined to be a non-personal ID and the number package type is a fusion package, the number credibility parameter is calculated according to the second package type increase formula; if the number is determined to be a personal ID, the number credibility parameter is calculated according to the ID type increase formula.

[0084] Among them, the increase formula for the first package type is:

[0085] Rel n =Rel o +3

[0086] In the formula, Rel n Rel is the calculated number credibility parameter; o is the number credibility parameter before calculation.

[0087] Among them, the formula for the increase in the second package type is:

[0088] Rel n =Rel o +2

[0089] In the formula, Rel n Rel is the calculated number credibility parameter; o is the number credibility parameter before calculation.

[0090] The formula for the increase in the certificate type is:

[0091] Reln =Rel o +1

[0092] In the formula, Rel n Rel is the calculated number credibility parameter; o is the number credibility parameter before calculation.

[0093] S2033: Filter out the premium numbers and / or whitelist numbers from the set of numbers to be detected based on the online activation coefficient and the number credibility parameter.

[0094] Specifically, it is determined whether the online activation coefficient meets the preset online activation coefficient threshold, and whether the number credibility parameter meets the number credibility parameter threshold, so as to screen out the beautiful numbers and / or whitelist numbers.

[0095] S2034: Delete the good numbers and / or whitelist numbers from the set of numbers to be detected to obtain a first screening number set.

[0096] S204: Acquire the second type of attribute information of the first screening number.

[0097] The second type of attribute information includes threshold setting attribute information and threshold adaptive adjustment attribute information.

[0098] Specifically, the second type of attribute information is determined by: obtaining an abnormal number set; extracting features from the abnormal number set using a behavior analysis model to obtain feature data of the abnormal numbers; and obtaining the second type of attribute information based on the feature data of the abnormal numbers.

[0099] Among them, characteristic data include characteristics of sending and receiving information, characteristics of calls, and characteristics of Internet behavior.

[0100] Among them, the threshold given attribute information includes at least one of the following: there has been a call on only one day in the past 30 days. If the caller number is one day, its network access time must be within 30 days; the number of applications used by the user in the past 7 days is 0.

[0101] Among them, the adaptive adjustment attribute information includes at least one of the following: the number of days in which more than N text messages were sent in the past T days does not exceed M; the number of days in which more than N point-to-point text messages were sent per day in the past T days does not exceed M; the maximum number of point-to-point text messages received in the past T days does not exceed M; the average number of text messages received per day on active days in the past T days is greater than M; among them, T, N and M are any positive integers.

[0102] It should be noted that T, N and M can be set according to actual conditions and are not limited in this application.

[0103] S205: Perform a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers.

[0104] Specifically, the values of the parameter combination of T, N and M are obtained, and the first screening number set is subjected to a second screening process according to the value of the parameter combination and the second type of attribute information to obtain the second screening number set.

[0105] S206: Acquire the third type of attribute information of the second screening number.

[0106] Among them, the third type of attribute information includes at least one of the following: the base station location to which the current number belongs when receiving information has the characteristics of multiple numbers gathering to receive information within a unit time; the number terminal update frequency * the number of connected base stations in the past 30 days; the maximum number of industry text messages received in the past 15 days.

[0107] It should be noted that the third type of attribute information is the scenario information of abnormal numbers. For example, abnormal numbers are usually used as receiving numbers in cat pool devices. The numbers generally do not move, so there are often only a few or even only one base station connected to them. At the same time, due to the location of the cat pool equipment, the numbers are usually clustered when used. In addition, the receiving numbers have special usage requirements for short messages, so scenario information is added for short messages, such as the location of the base station to which the current number belongs when receiving messages, and the characteristics of multiple numbers gathering to receive messages in unit time; the number terminal update frequency in the past 30 days * the number of connected base stations; the maximum number of industry text messages received in the past 15 days, etc.

[0108] The base station location may be (lac, ci), where lac (Location Area Code) is a unique code for identifying a location area, and ci (Cell Identity) is a code for uniquely identifying a cell.

[0109] S207: Perform a third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers.

[0110] Specifically, the numbers that meet the third type of attribute information in the second screening number set are screened out to obtain abnormal numbers.

[0111] In another implementation, according to a preset weighting rule, the terminal change frequency of the second screening number in the second screening number set is weighted with the number of connected base stations, and the second screening number under the current base station is associated with other number behaviors to obtain abnormal numbers.

[0112] The number detection method provided in the embodiment of the present application performs a first screening process on the number set to be detected based on the first type of attribute information to obtain a first screened number set; performs a second screening process on the first screened number set based on the second type of attribute information to obtain a second screened number set; and performs a third screening process on the second screened number set based on the third type of attribute information to obtain abnormal numbers. By performing layer-by-layer screening on the number set to be detected through attribute information, the accuracy of number detection can be improved.

[0113] In one embodiment of the present application, based on the above embodiment, step S205 further provides another implementation method, which is detailed as follows:

[0114] S2051: Based on the given attribute information of the threshold, a candidate number set is screened out from the first screening number set; the candidate number set includes a plurality of candidate numbers.

[0115] Among them, the threshold given attribute information includes at least one of the following: there has been a call on only one day in the past 30 days. If the caller number is one day, its network access time must be within 30 days; the number of applications used by the user in the past 7 days is 0.

[0116] S2052: Construct a multivariate variable combination based on the adaptively adjusted attribute information.

[0117] Among them, the adaptive adjustment attribute information includes at least one of the following: the number of days in which more than N text messages were sent in the past T days does not exceed M; the number of days in which more than N point-to-point text messages were sent per day in the past T days does not exceed M; the maximum number of point-to-point text messages received in the past T days does not exceed M; the average number of text messages received per day on active days in the past T days is greater than M; among them, T, N and M are any positive integers.

[0118] Specifically, feature data of multiple features corresponding to the adaptively adjusted attribute information of abnormal numbers in a set of known abnormal numbers are obtained; each feature is traversed, and the feature data and preset number-taking rules are input into a multivariate interactive combination model to output a multivariate variable combination.

[0119] Among them, the multivariate combination can be (day span, quantity, upper / lower limit), that is, (T, N, M).

[0120] Among them, characteristic data includes time and quantity, etc.

[0121] Specifically, the calculation process of the multivariate interaction combination model includes: obtaining multiple initial multivariate variable combinations from the feature data according to the preset data acquisition rules; traversing multiple initial multivariate variable combinations to calculate the target probability; and outputting the initial multivariate variable combination that meets the maximum target probability as the multivariate variable combination.

[0122] Among them, the preset data collection rule can be that the number of days span T is preset for collection; the number N is extracted from the feature data using bucket sorting or preset for collection; the upper / lower limit M is determined from the feature data using quantile setting or preset for collection.

[0123] The preset values of the day span T may be 1, 3, 7, 15, or 30.

[0124] The formula for calculating the target probability is:

[0125] P(M|T,N)=P(N|M,T)*P(T|M)*P(M) / P(N|T)*P(T)

[0126] Where T is the span in days; N is the quantity; and M is the upper / lower limit.

[0127] S2053: Screening the candidate number set according to the multivariate variable combination to obtain a second screened number set.

[0128] Specifically, the unknown quantity in the adaptive adjustment attribute is replaced according to the multivariate combination; and the candidate number set is screened according to the replaced adaptive adjustment attribute to obtain a second screened number set.

[0129] The number detection method provided in the embodiment of the present application constructs a multivariate combination based on adaptively adjusted attribute information, and screens the alternative number set based on the multivariate combination to obtain a second screened number set, thereby improving the timeliness and universality of number detection and improving the efficiency and accuracy of number detection.

[0130] In one embodiment of the present application, based on the above embodiment, after step S207, a process of displaying abnormal numbers is further included, which is detailed as follows:

[0131] S208: Generate exception push information according to the exception number.

[0132] S209: Display abnormal push information.

[0133] The number detection method provided in the embodiment of the present application can promptly remind management personnel of abnormal numbers by displaying abnormal push information, thereby improving network security.

[0134] Figure 3 A schematic diagram of the structure of the number detection device provided in the embodiment of the present application is shown as follows: Figure 3 As shown, the number detection device 30 provided in this embodiment includes: a first acquisition module 301 , a second acquisition module 302 , a first screening module 303 , a third acquisition module 304 , a second screening module 305 , a fourth acquisition module 306 and a third screening module 307 .

[0135] The first acquisition module 301 is used to acquire a set of numbers to be detected; the set of numbers to be detected includes multiple numbers to be detected;

[0136] The second acquisition module 302 is used to obtain the first type of attribute information of the number to be detected;

[0137] A first screening module 303 is configured to perform a first screening process on the set of numbers to be detected based on the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers;

[0138] A third acquisition module 304 is configured to acquire the second type of attribute information of the first screening number;

[0139] A second screening module 305 is configured to perform a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers;

[0140] A fourth obtaining module 306 is configured to obtain third attribute information of the second screening number;

[0141] The third screening module 307 is configured to perform a third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers.

[0142] In one possible implementation, the first type of attribute information includes number network access attributes and number package attributes; accordingly, the first screening module 303 is specifically used to: determine the network activation coefficient of the number to be detected based on the number network access attributes; determine the number credibility parameter of the number to be detected based on the number package attributes; based on the network activation coefficient and the number credibility parameter, screen out beautiful numbers and / or whitelist numbers from the number set to be detected; and delete the beautiful numbers and / or the whitelist numbers from the number set to be detected to obtain a first screened number set.

[0143] In one possible implementation, the number network access attributes include the number's current network access time, the most recent network access time, and the number's historical downtime count; accordingly, the first screening module 303 is further specifically used to: if the most recent network access time is 0, then the network activation coefficient of the number to be detected is equal to the number's current network access time; if the most recent network access time is not 0, then the network activation coefficient of the number to be detected is equal to the difference obtained by subtracting the ratio of the number's historical downtime count to the most recent network access time from the number's current network access time.

[0144] In one possible implementation, the second category of attribute information includes threshold-given attribute information and threshold-adaptive adjustment attribute information; the threshold-given attribute information includes at least one of the following: there has been a call on at most 1 day in the past 30 days, and if the calling number is 1 day, its network access time must be within 30 days; the number of applications used by users in the past 7 days is 0; the adaptive adjustment attribute information includes at least one of the following: the number of days in which more than N text messages were sent in the past T days does not exceed M; the number of days in which more than N point-to-point text messages were sent per day in the past T days does not exceed M; the maximum number of point-to-point text messages received in the past T days does not exceed M; the average daily number of text messages received on active days in the past T days is greater than M; where T, N and M are any positive integers.

[0145] In one possible implementation, the second screening module 305 is specifically configured to: screen out an alternative number set from the first screening number set based on the threshold given attribute information; the alternative number set includes multiple alternative numbers; construct a multivariate combination based on the adaptively adjusted attribute information; and screen the alternative number set based on the multivariate combination to obtain a second screening number set.

[0146] In one possible implementation, the third category of attribute information includes at least one of the following: the base station location to which the current number belongs when receiving information has the characteristic of multiple numbers gathering to receive information within a unit time; the number terminal update frequency * the number of connected base stations in the past 30 days; the maximum number of industry text messages received in the past 15 days.

[0147] In a possible implementation, the number detection device 30 further includes:

[0148] The display module is used to generate abnormal push information according to the abnormal number; and display the abnormal push information.

[0149] The number detection device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effects are similar and will not be described in detail in this embodiment.

[0150] Figure 4 This is a schematic diagram of the structure of the number detection device provided in the embodiment of the present application. Figure 4 As shown, the number detection device 40 provided in this embodiment includes: at least one processor 401 and a memory 402. Optionally, the device 40 further includes a communication component 403. The processor 401, the memory 402 and the communication component 403 are connected via a bus 404.

[0151] In a specific implementation process, at least one processor 401 executes the computer-executable instructions stored in the memory 402, so that the at least one processor 401 performs the above method.

[0152] The specific implementation process of the processor 401 can be found in the above method embodiment. Its implementation principle and technical effects are similar and will not be repeated here in this embodiment.

[0153] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASICs), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the present invention may be directly executed by a hardware processor or by a combination of hardware and software modules in the processor.

[0154] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (NVM), such as at least one disk memory.

[0155] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus. Buses can be classified into address buses, data buses, and control buses. For ease of illustration, the buses in the drawings of this application are not limited to just one bus or just one type of bus.

[0156] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above method is implemented.

[0157] The present application also provides a computer program product, including a computer program, which implements the above method when executed by a processor.

[0158] The above-mentioned readable storage medium can be implemented by any type of volatile or non-volatile memory device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0159] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be an integral part of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the readable storage medium can also exist in a device as discrete components.

[0160] The division of units is merely a logical functional division; actual implementations may employ alternative divisions, such as combining or integrating multiple units or components into another system, or omitting or disabling certain features. Furthermore, any direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection between devices or units, either through an interface, electrical, mechanical, or other means.

[0161] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0162] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0163] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0164] Those skilled in the art will appreciate that all or part of the steps in the above-described method embodiments can be implemented using hardware associated with program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments. The aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0165] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present invention that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. It is not limited to the precise structure described above and shown in the drawings, and various modifications and changes may be made without departing from the scope of this application. The scope of this application is limited solely by the appended claims.

Claims

1. A number detection method, characterized in that: include: Obtain a set of numbers to be detected; the set of numbers to be detected includes multiple numbers to be detected; Obtaining first type of attribute information of the number to be detected; performing a first screening process on the to-be-detected number set according to the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers; Obtaining second type of attribute information of the first screening number; performing a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers; Obtaining third type of attribute information of the second screening number; According to the third type of attribute information, a third screening process is performed on the second screening number set to obtain abnormal numbers.

2. The method according to claim 1, characterized in that The first type of attribute information includes number network attributes and number package attributes; Accordingly, the first screening process is performed on the to-be-detected number set according to the first type of attribute information to obtain a first screened number set, including: Determining the network activation coefficient of the number to be detected according to the network access attribute of the number; Determining the number credibility parameter of the number to be detected according to the number package attribute; According to the online activation coefficient and the number credibility parameter, screening out the premium numbers and / or whitelist numbers in the set of numbers to be detected; In the set of numbers to be detected, the beautiful numbers and / or the whitelist numbers are deleted to obtain a first screening number set.

3. The method according to claim 2, characterized in that The number network attributes include the number's current network access time, the most recent network time, and the number's historical downtime times; Accordingly, determining the network activation coefficient of the number to be detected according to the network access attribute of the number includes: If the most recent online time is 0, the online activation coefficient of the number to be detected is equal to the current online time of the number; If the most recent online time is not 0, the online activation coefficient of the number to be detected is equal to the difference obtained by subtracting the ratio of the number's historical downtime times and the most recent online time from the number's current online time.

4. The method according to claim 1, wherein The second type of attribute information includes threshold given attribute information and threshold adaptive adjustment attribute information; The threshold given attribute information includes at least one of the following: There must be at most one caller number in the past 30 days. If the caller number is one day old, the caller number must have been connected to the network within the past 30 days. The number of applications used by users in the past 7 days is 0; The adaptive adjustment attribute information includes at least one of the following: The number of days in which more than N text messages were sent in the past T days does not exceed M; The number of days in the past T days when more than N point-to-point text messages were sent per day does not exceed M; The maximum number of point-to-point SMS messages received in the past T days (N) does not exceed M; The average number of short orders received on active days in the past T days (N) is greater than M; Wherein, T, N and M are any positive integers.

5. The method according to claim 4, characterized in that The performing a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set includes: Based on the threshold given attribute information, screening out a candidate number set from the first screening number set; the candidate number set includes a plurality of candidate numbers; constructing a multivariate variable combination according to the adaptively adjusted attribute information; The candidate number set is screened according to the multivariate variable combination to obtain a second screened number set.

6. The method according to any one of claims 1 to 5, characterized in that The third type of attribute information includes at least one of the following: The base station location to which the current number belongs when receiving information has the characteristic of multiple numbers gathering to receive information within a unit of time; Frequency of terminal number updates in the past 30 days*number of connected base stations; The maximum number of industry SMS messages received in the past 15 days.

7. The method according to any one of claims 1 to 5, characterized in that After performing the third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers, the method further includes: Generate an exception push message based on the exception number; Display the exception push information.

8. A number detection device, characterized in that: include: A first acquisition module is configured to acquire a set of numbers to be detected; the set of numbers to be detected includes a plurality of numbers to be detected; A second acquisition module is used to obtain the first type of attribute information of the number to be detected; a first screening module configured to perform a first screening process on the set of numbers to be detected based on the first type of attribute information to obtain a first screening number set; the first screening number set includes a plurality of first screening numbers; a third obtaining module, configured to obtain the second type of attribute information of the first screening number; a second screening module configured to perform a second screening process on the first screening number set according to the second type of attribute information to obtain a second screening number set; the second screening number set includes a plurality of second screening numbers; a fourth obtaining module, configured to obtain third attribute information of the second screening number; The third screening module is used to perform a third screening process on the second screening number set according to the third type of attribute information to obtain abnormal numbers.

9. A number detection device, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 7 when executed by a processor.

11. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 7 when executed by a processor.

Images