Methods, equipment, media, and products for determining user traffic in target areas

Abstract

This invention discloses a method, device, medium, and product for determining user traffic in a target area, relating to the field of LTE core network technology. The method includes: responding to a filtering instruction for user traffic in a target area, acquiring at least one target mobile network signaling data matching the target area; acquiring each signaling traffic, determining target information for each signaling traffic, and generating a first mapping table based on the target information; filtering the first mapping table based on the target mobile network signaling data to obtain a second mapping table; wherein the second mapping table stores the start time and end time of each user accessing the target base station; filtering user traffic based on the second mapping table to obtain target user traffic, and forwarding the target user traffic to the target system. The solution of this invention can determine user traffic matching a target area and send it to a matching analysis system, providing a basis for improving the efficiency and accuracy of data processing.

Description

Technical Field

[0001] This invention relates to the field of LTE core network technology, and in particular to a method, device, medium and product for determining user traffic in a target area. Background Technology

[0002] The main interfaces of the LTE (Long Term Evolution) core network are S11, S1-U, S58-C, and S58-U. S11 and S58-C are control plane interfaces, while S1-U and S58-U are user plane interfaces. Currently, the log retention system simultaneously receives traffic from S11, S1-U, S58-C, and S58-U, parses all user traffic, and generates logs for retention. However, feeding this data into the subsequent analysis system results in an excessively large amount of data received by the analysis system, increasing the complexity of its analysis.

[0003] How to identify user traffic matching a specific region from this traffic data and send it to a matching analysis system, thereby reducing the data processing pressure on the analysis system and providing a basis for improving the efficiency and accuracy of data processing, is a key research issue in the industry. Summary of the Invention

[0004] This invention provides a method, device, medium, and product for determining user traffic in a target area, so as to determine the user traffic matching the target area and send it to the matching analysis system, thereby reducing the data processing pressure on the analysis system and providing a basis for improving the efficiency and accuracy of data processing.

[0005] According to one aspect of the present invention, a method for target mobile network signaling data is provided, the method comprising:

[0006] In response to a filtering instruction for user traffic in a target area, at least one target mobile network signaling data matching the target area is acquired; wherein, the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI);

[0007] Acquire each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information;

[0008] The first mapping table is filtered based on the signaling data of each target mobile network to obtain a second mapping table; wherein, the second mapping table stores the start time and end time of each user's access to the target base station;

[0009] Based on the second mapping table, user traffic is filtered to obtain target user traffic, and the target user traffic is forwarded to the target system.

[0010] According to another aspect of the present invention, a target mobile network signaling data apparatus is provided, the apparatus comprising:

[0011] The acquisition module is used to acquire at least one target mobile network signaling data that matches the target area in response to a filtering instruction for user traffic in the target area; wherein the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI);

[0012] The first mapping table generation module is used to acquire each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information.

[0013] The second mapping table generation module is used to filter the first mapping table based on the signaling data of each target mobile network to obtain a second mapping table; wherein, the second mapping table stores the start time and end time of each user's access to the target base station;

[0014] The user traffic filtering module is used to filter user traffic based on the second mapping table, obtain target user traffic, and forward the target user traffic to the target system.

[0015] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0016] At least one processor; and

[0017] A memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the target mobile network signaling data method according to any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the target mobile network signaling data method according to any embodiment of the present invention.

[0020] According to another aspect of the present invention, a computer program product is provided, comprising a computer program that, when executed by a processor, implements the target mobile network signaling data method according to any embodiment of the present invention.

[0021] The technical solution of this invention, in response to a filtering instruction for user traffic in a target area, acquires at least one target mobile network signaling data matching the target area; wherein the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI); acquires each signaling traffic, determines the target information of each signaling traffic, and generates a first mapping table based on each target information; filters the first mapping table based on each target mobile network signaling data to obtain a second mapping table; wherein the second mapping table stores the start time and end time of each user accessing the target base station; filters user traffic based on the second mapping table to obtain target user traffic, and forwards the target user traffic to the target system, which can determine user traffic matching the target area and send it to the matching analysis system, reducing the data processing pressure of the analysis system and providing a basis for improving the efficiency and accuracy of data processing.

[0022] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1 This is a flowchart of a target mobile network signaling data method according to Embodiment 1 of the present invention;

[0025] Figure 2 This is a schematic diagram illustrating the relationship between a control tunnel, a default bearer, and a dedicated bearer, according to Embodiment 1 of the present invention.

[0026] Figure 3 This is a flowchart of a target mobile network signaling data method according to Embodiment 2 of the present invention;

[0027] Figure 4 This is a schematic diagram of the structure of a target mobile network signaling data device according to Embodiment 3 of the present invention;

[0028] Figure 5 This is a schematic diagram of the structure of an electronic device that implements the target mobile network signaling data method of the present invention. Detailed Implementation

[0029] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0031] Example 1

[0032] Figure 1 This is a flowchart of a target mobile network signaling data method according to Embodiment 1 of the present invention. This embodiment is applicable to the situation of filtering user traffic within a target area. The method can be executed by a target mobile network signaling data device, which can be implemented in hardware and / or software and can be configured in electronic devices such as computers, servers, or tablet computers. Figure 1 As shown, the method includes:

[0033] Step 110: In response to the filtering instruction of user traffic in the target area, obtain at least one target mobile network signaling data that matches the target area.

[0034] The target mobile network signaling data may include: TAC (Tracking Area Code) or ECI (E-UTRAN Cell Identity).

[0035] In this embodiment, the target area can be a target residential area or a target village or town, such as Residential Area B in City A; or Village D in County C, etc. This embodiment does not limit it.

[0036] In an optional implementation of this embodiment, after receiving a filtering instruction for user traffic in the target area, the TAC and ECI of the target area can be further obtained so as to subsequently filter and obtain user traffic data that matches the target area.

[0037] Optionally, in this embodiment, the TAC and ECI of the target area can be obtained through the operator, and the method of obtaining them is reasonable and legal.

[0038] Step 120: Obtain each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information.

[0039] In the LTE core network, the control plane interface transmits signaling traffic containing information such as user location. Therefore, after receiving a filtering instruction for user traffic in the target area, the signaling traffic data transmitted by the LTE core network through the control plane interfaces S11 and S58-C can be obtained. In this embodiment, a single signaling traffic item may contain user location information or user mobile phone number, etc., and this embodiment does not impose any limitations on it.

[0040] Optionally, in this embodiment, after obtaining each signaling traffic from the control plane interface, the target information of each signaling traffic can be further determined, and a first mapping table can be generated based on the obtained target information; wherein, the target information of the signaling traffic may include at least one of the following: control tunnel identifier, user identifier, TAC, ECI and base station side tunnel bearer identifier, which are not limited in this embodiment.

[0041] It should be noted that in this embodiment, the mapping table generated based on each target information is named the first mapping table, but it can also be named the full mapping table. This is not a limitation of this embodiment.

[0042] Optionally, in this embodiment, determining the target information of each signaling traffic and generating a first mapping table based on the target information may include: parsing the target signaling traffic to obtain the target signaling message sequence of the target signaling traffic; determining the target signaling flow corresponding to the target signaling traffic based on the order of each target signaling message sequence and the relationship between them; determining each target information based on the target signaling flow, and storing each target information in a preset mapping table to obtain the first mapping table.

[0043] In an optional implementation of this embodiment, after obtaining each signaling traffic from the control plane interface, the target signaling traffic can be further parsed to obtain the target signaling message sequence of the target signaling traffic; wherein, the target signaling traffic can be any of the obtained signaling traffic, and is not limited thereto in this embodiment.

[0044] Furthermore, the target signaling flow corresponding to the target signaling traffic can be determined based on the order of each target signaling message sequence and the relationship between them; further, each target information can be determined based on the target signaling flow, and each target information can be stored in a preset mapping table to obtain the first mapping table.

[0045] In this embodiment, the target signaling procedure can be an attach request from the target user, a PDN (Packet Data Network) connection request, or a handover procedure, etc., and is not limited in this embodiment; the target user can be any user accessing the LTE core network, and is not limited in this embodiment either.

[0046] Optionally, in this embodiment, determining each of the target information based on the target signaling process may include: if the target signaling process is an attach request and / or a PDN connection request for a target user, then determining the target user identifier, the TAC, and the ECI of the target user based on the attach request and / or the PDN connection request; obtaining a first session creation process matching the attach request, and determining the first uplink / downlink tunnel created in the first session creation process, and the first bearer identifier; determining the first uplink / downlink tunnel as a target control tunnel, and the first bearer identifier as a default bearer identifier belonging to the target control tunnel; or, obtaining a second session creation process matching the PDN connection request, and determining the second uplink / downlink tunnel created in the second session creation process, and the second bearer identifier; determining the second uplink / downlink tunnel as a target control tunnel, and the second bearer identifier as a default bearer identifier belonging to the target control tunnel; if the target signaling process is a handover process, then determining the base station-side tunnel bearer identifier from the bearer creation process triggered by the handover process.

[0047] In an optional implementation of this embodiment, if it is determined that the target signaling process corresponding to the target signaling traffic is the target user's attach request and / or PDN connection request, the target user identifier, the TAC, and the ECI of the target user can be extracted from the target user's attach request and / or PDN connection request.

[0048] In this embodiment, when a mobile device, such as a mobile phone, is attaching and creating a PDN connection, it triggers the CreatSession process of the S11 and S58-C interfaces in the LTE core network. The CreatSession process can carry information such as the mobile phone number, initial location, and default bearer identifier.

[0049] It is understood that a control tunnel can be associated with multiple default bearers, and a default bearer can be associated with multiple dedicated bearers. That is, there can be multiple default bearers belonging to the target control tunnel and multiple dedicated bearers belonging to the default bearers at the same time, such as 2, 3 or 10, etc. This embodiment does not limit them.

[0050] For example, Figure 2 This is a schematic diagram illustrating the relationship between a control tunnel, a default bearer, and a dedicated bearer according to Embodiment 1 of the present invention; as shown... Figure 2 As shown, the target control tunnel can include control tunnel 1, control tunnel 2, and control tunnel 3. Control tunnel 1 is associated with two default bearers, namely default bearer id=5 and default bearer id=6. Default bearer id=5 is associated with two dedicated bearers, namely dedicated bearer id=8 and dedicated bearer id=9. Default bearer id=6 is associated with dedicated bearer id=11. Control tunnel 2 is associated with one default bearer, namely default bearer id=5. Default bearer id=5 is associated with dedicated bearer id=13. Control tunnel 3 is associated with one default bearer, namely default bearer id=5.

[0051] In an optional implementation of this embodiment, if the target signaling process corresponding to the target signaling traffic is determined to be an attach request and / or a PDN connection request of the target user, a first session creation process matching the attach request can be obtained, and the first uplink / downlink tunnel created in the first session creation process and the first bearer identifier can be determined; the first uplink / downlink tunnel is determined as the target control tunnel, and the first bearer identifier is determined as the default bearer identifier belonging to the target control tunnel; or, a second session creation process matching the PDN connection request can be obtained, and the second uplink / downlink tunnel created in the second session creation process and the second bearer identifier can be determined; the second uplink / downlink tunnel is determined as the target control tunnel, and the second bearer identifier is determined as the default bearer identifier belonging to the target control tunnel.

[0052] In an optional implementation of this embodiment, a first session creation process matching the attachment request of the target user's mobile device can be obtained. Specifically, when the request and response of the first session creation process are received, the user identifier can be extracted from the Create Session Request; the default bearer identifier (EBI (EPC Bearer Identify, user plane bearer identifier)) can be extracted from the Create Session Response; one EBI can correspond to one user plane uplink / downlink tunnel, for example...

[0053] Ip1+teid1ßàip2+teid2; where Ip2+teid2 is called the uplink tunnel identifier;), in this embodiment, the default bearer identifier is called the first bearer identifier; and GW-side tunnel information (e.g., TEID or creation time). In this embodiment, the GW-side tunnel is called the first uplink tunnel. Furthermore, the obtained first uplink tunnel can be determined as the target control tunnel, and the first bearer identifier is determined as the default bearer identifier belonging to the target control tunnel.

[0054] It should be noted that in this embodiment, the username interfaces S1U and S58-U are not distinguished. The AC side is used to replace the eNB of S1U and the SGW-U of S58-U, and the GW side is used to replace the SGW-U of S1U and the PGW-U of S58-U. In this embodiment, only the GW side tunnel is used as an example for illustration, which is not a limitation of this embodiment.

[0055] In another optional implementation of this embodiment, a second session creation process matching the PDN connection request of the target user's mobile device can be obtained. Specifically, when the request and response of the second session creation process are received, the user identifier can be extracted from the Create Session Request; the default bearer identifier (EBI) can be extracted from the Create Session Response, which is referred to as the second bearer identifier in this embodiment; and GW-side tunnel information (e.g., TEID or creation time), which is referred to as the second uplink / downlink tunnel in this embodiment. Furthermore, the obtained second uplink / downlink tunnel can be determined as the target control tunnel, and the second bearer identifier can be determined as the default bearer identifier belonging to the target control tunnel.

[0056] Optionally, in this embodiment, after determining the first bearer identifier and the second bearer identifier as the default bearer identifier based on the above steps, the dedicated bearer activation process can continue to be obtained; specifically, the default bearer identifier (e.g., EBI=5) can be found in the Create BearerRequest message; further, the newly created dedicated bearer identifier (e.g., EBI=7) can be extracted in the Create BearerResponse message; further, the default bearer identifier and the dedicated bearer identifier can be associated to form a mapping relationship, that is: the default bearer EBI=5 corresponds to the dedicated bearer EBI=7.

[0057] In another optional implementation of this embodiment, if the target signaling flow is determined to be a handover flow, the base station-side bearer identifier can be determined from the bearer creation flow triggered by the handover flow. It is understood that during the movement of the mobile device, the x2 or S1 handover flow will be triggered, that is, the ModifyBear or CreatSession / DeleteSession flow of the S11 interface will be triggered, and the ModifyBear flow of the S58-C interface will be triggered. The ModifyBear flow carries the current location and the modified downlink data tunnel. Therefore, the base station-side bearer identifier corresponding to the target signaling traffic can be determined based on this.

[0058] Furthermore, the target information obtained above can be stored in a preset mapping table to obtain the first mapping table.

[0059] Step 130: Filter the first mapping table based on the signaling data of each target mobile network to obtain a second mapping table.

[0060] The second mapping table stores the start and end times of each user's access to the target base station.

[0061] Optionally, in this embodiment, after determining that the first mapping table is obtained, the first mapping table can be further filtered based on the target mobile network signaling data (i.e., the TAC and ECI of the target area) to obtain the second mapping table; for example, each piece of data in the first mapping table that is the same as the TAC and ECI of the target area can be determined as the target data, and the second mapping table can be generated based on the target data.

[0062] Optionally, in this embodiment, each TAC and ECI in the first mapping table is obtained, and reference data consistent with the TAC and ECI in the target mobile network signaling data is determined; the base station-side tunnel bearer identifier and user identifier of each reference data are stored in the second mapping table.

[0063] Optionally, in this embodiment, each TAC and ECI in the first mapping table can be compared with the TAC and ECI of the target area, and the data in the first mapping table that are consistent with the TAC and ECI of the target area can be determined as reference data. The base station-side tunnel bearer identifier and user identifier of each reference data can be stored in the second mapping table.

[0064] Optionally, in this embodiment, after storing the base station-side tunnel bearer identifier and user identifier of each of the reference data in the second mapping table, the method may further include: obtaining a first deletion session process matching the attach request, or obtaining a second deletion session process matching the PDN connection request, or obtaining a bearer deletion process; obtaining attribute information of the first session creation process, the first deletion session process, the second session creation process, the second deletion session process, and the bearer deletion process respectively; determining the start time and end time of each of the target control tunnels based on the attribute information; and adding the start time and the end time to the second mapping table.

[0065] The attribute information may include the user identifier, tunnel identifier, default bearer identifier, and creation or deletion time of each session. For example, the first session creation process may include: user identifier, tunnel identifier, at least one default bearer identifier, and creation time of the first session creation process; the first session deletion process may include: user identifier, tunnel identifier, at least one default bearer identifier, and deletion time of the first session deletion process.

[0066] In an optional implementation of this embodiment, during the process of determining the target control tunnel associated with the target user and each default bearer identifier matching the target control tunnel, attribute information of each created or deleted session can also be obtained. Furthermore, the creation time and deletion time of the target control tunnel can be determined based on the obtained attribute information.

[0067] It should be noted that during the session creation process, when the target user's mobile phone requests an attachment, the LTE core network will create uplink and downlink tunnels for the mobile phone on the control plane interfaces S11 and S58-C, and assign a default bearer and ID; for example, id=5. When the target user's mobile phone requests a PDN connection, it will create uplink and downlink tunnels on S11 and S58-C for the mobile phone (in this process, the attachment process may be reused), and assign a default bearer ID; for example, id=6. It can be understood that the same mobile phone of the target user may create multiple PDN connections; therefore, under one control tunnel of S11 / S58-C, there may be multiple default bearers.

[0068] It should also be noted that in the session deletion process, if no default bearer identifier is included, it means all default bearers under the control tunnel are deleted, and the control tunnel itself is also deleted; if a default bearer identifier is included, it means the default bearer with that identifier is deleted. When multiple session deletions carrying default bearer identifiers result in the deletion of all default bearers, the control tunnel needs to be automatically deleted.

[0069] In summary, the second mapping table stores the base station-side tunnel identifier, user identifier, and the start and end times of the control tunnel (i.e., the start and end times of the user's access to the target base station).

[0070] Step 140: Filter user traffic based on the second mapping table to obtain target user traffic, and forward the target user traffic to the target system.

[0071] Optionally, in this embodiment, after receiving the first user traffic through the user plane interfaces S1U and S58-U of the LTE core network, the first user traffic can be parsed to determine the first user identifier, the first base station-side identifier, or the first access time. If the first user identifier and the first base station-side identifier are in the second mapping table, and the first access time is within the start time and end time recorded in the second mapping table, then the first user traffic can be identified as target user traffic and forwarded to the target system; otherwise, the first user traffic is non-target user traffic and can be filtered out, i.e., it will no longer be forwarded.

[0072] The technical solution of this embodiment, in response to a filtering instruction for user traffic in a target area, acquires at least one target mobile network signaling data matching the target area; wherein, the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI); acquires each signaling traffic, determines the target information of each signaling traffic, and generates a first mapping table based on each target information; filters the first mapping table based on each target mobile network signaling data to obtain a second mapping table; wherein, the second mapping table stores the start time and end time of each user accessing the target base station; filters user traffic based on the second mapping table to obtain target user traffic, and forwards the target user traffic to the target system, which can determine the user traffic matching the target area and send it to the matching analysis system, reducing the data processing pressure of the analysis system and providing a basis for improving the efficiency and accuracy of data processing.

[0073] Example 2

[0074] Figure 3 This is a flowchart of a target mobile network signaling data method according to Embodiment 2 of the present invention. This embodiment is a further refinement of the above technical solution, and the technical solution in this embodiment can be combined with various optional solutions in one or more of the above embodiments. Figure 3 As shown, the method includes:

[0075] Step 310: Determine the target area and obtain target mobile network signaling data that matches the target area from a preset document or website; or, obtain and parse the first signaling traffic forwarded by the target device in the target area, and parse the first signaling traffic to obtain target mobile network signaling data that matches the target area.

[0076] Optionally, in this embodiment, after receiving the filtering instruction for user traffic in the target area, the filtering instruction for user traffic in the target area can be parsed to determine the target area. Furthermore, the TAC and ECI matching the target area can be obtained from a preset document or website.

[0077] In another optional implementation of this embodiment, after determining the target area based on the parsing result of the filtering instruction of the user traffic in the target area, the first signaling traffic (any signaling traffic generated in the target area) forwarded by the target device (e.g., a mobile terminal such as a mobile phone or tablet) in the target area can also be obtained and parsed, and the first signaling traffic can be parsed to obtain the TAC and ECI that match the target area.

[0078] Step 320: Obtain each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information.

[0079] Step 330: Filter the first mapping table based on the signaling data of each target mobile network to obtain a second mapping table.

[0080] Step 340: Filter user traffic based on the second mapping table to obtain target user traffic, and forward the target user traffic to the target system.

[0081] Optionally, in this embodiment, filtering user traffic based on the second mapping table to obtain target user traffic and forwarding the target user traffic to the target system may include: responding to a filtering instruction for user traffic within the target area, parsing each user traffic, determining a first user identifier, a first base station-side tunnel bearer identifier, a first start time, and a first end time that match the first user traffic; comparing the first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time with each reference user identifier, reference base station-side tunnel bearer identifier, reference start time, and reference end time stored in the second mapping table; when the comparison results are consistent, determining the first user traffic as target user traffic and forwarding the target user traffic to the target system.

[0082] In an optional implementation of this embodiment, after receiving the filtering instruction for user traffic within the target area, the user traffic received through the user plane interface can be further parsed to determine the first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time that match the first user traffic.

[0083] Furthermore, the first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time can be compared with each reference user identifier, reference base station-side tunnel bearer identifier, reference start time, and reference end time stored in the second mapping table. When the comparison results are consistent, the target user traffic can be identified as target user traffic and forwarded to the target system.

[0084] The solution in this embodiment can parse the user traffic to determine the first user identifier, first base station-side tunnel bearer identifier, first start time, and first end time that match the first user traffic. The first user identifier, first base station-side tunnel bearer identifier, first start time, and first end time are then compared with reference user identifiers, reference base station-side tunnel bearer identifiers, reference start times, and reference end times stored in the second mapping table. When the comparison results match, the first user traffic is identified as target user traffic, and the target user traffic is forwarded to the target system. Based on the constructed second mapping table, user traffic within the target area can be quickly filtered, improving the efficiency of user traffic selection. The traffic is then sent to the matching analysis system, reducing the data processing pressure on the analysis system and providing a basis for improving the efficiency and accuracy of data processing.

[0085] To better understand the method for determining user traffic in the target area involved in this embodiment, a specific example is used below to describe the implementation of this solution:

[0086] It should be noted that mobile internet service in a certain area is provided by base stations; if traffic is simply diverted according to base station identifiers (e.g., base station IP), although internet traffic can be diverted, the users accessing the internet will not be identified.

[0087] For mobile phone users to access the internet, the general process may include:

[0088] Mobile internet access is carried over the mobile core network. Essentially, it involves creating control and data tunnels within the mobile core network. Control messages are transmitted in the control tunnel, and internet traffic is transmitted in the data tunnel. First, a bidirectional control tunnel is created for a specific user. Next, a bidirectional data tunnel is negotiated within the bidirectional control tunnel (for that user). Furthermore, the uplink tunnel within the bidirectional control tunnel remains unchanged from session creation to session deletion, always using the same uplink control tunnel. Finally, the downlink tunnel within the bidirectional data tunnel may be triggered by the modifybearer and undergo changes.

[0089] In summary, the logical organization of a single user can be as follows:

[0090] --A specific user;

[0091] --A user's control tunnel;

[0092] --A data tunnel under a user's control tunnel (indicated by EBI);

[0093] --The base station-side tunnel within the data tunnel under a user's control tunnel.

[0094] Understandably, both control tunnels and data tunnels have their lifecycles and cannot be used by a single user indefinitely. Therefore, we output a second mapping table with entries such as: Target base station tunnel—User—Usage start and end time. Traffic hitting the target base station tunnel is forwarded to the targeted analysis system, and the second mapping table is provided to the system. Ultimately, the targeted analysis system obtains the expected traffic and, through traffic analysis and comparison with the second mapping table, can determine the internet access behavior of traffic in the geographic area of ​​interest and the corresponding users.

[0095] For example, in this embodiment, the first mapping table may include: a control tunnel table; Key: control tunnel (only uplink is stored); Val: user, TAC-ECI, ebi-base station side tunnel (multiple, with hierarchical relationship); the second mapping table may include: target base station side tunnel; Key: base station side tunnel; Val: start time, end time, user.

[0096] In one example of this embodiment, the mobile network TAC and ECI corresponding to the geographic location of interest can be obtained; further, the signaling flow can be analyzed to learn the base stations corresponding to the TAC and ECI; further, the signaling flow can be analyzed to learn which users are using the target base station in terms of time and tunnel dimensions, generate a second mapping table, and forward the user plane traffic that matches the target base station in the second mapping table to the targeted analysis system; further, by analyzing the user plane traffic and combining it with the second mapping table, the targeted analysis system can know the internet access behavior and the internet users, greatly reducing the traffic processing pressure of the targeted analysis system.

[0097] The solution in this embodiment filters internet traffic from certain geographical areas through the S1U and S58-U user plane interfaces and outputs the results to the targeted analysis system. This significantly reduces the traffic processing load on the targeted analysis system.

[0098] Example 3

[0099] Figure 4 This is a schematic diagram of the structure of a target mobile network signaling data device according to Embodiment 3 of the present invention. Figure 4 As shown, the device includes: an acquisition module 410, a first mapping table generation module 420, a second mapping table generation module 430, and a user traffic filtering module 440.

[0100] The acquisition module 410 is configured to acquire at least one target mobile network signaling data matching the target area in response to a filtering instruction for user traffic in the target area; wherein the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI);

[0101] The first mapping table generation module 420 is used to acquire each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information.

[0102] The second mapping table generation module 430 is used to filter the first mapping table based on the signaling data of each target mobile network to obtain a second mapping table; wherein, the second mapping table stores the start time and end time of each user accessing the target base station;

[0103] The user traffic filtering module 440 is used to filter user traffic based on the second mapping table, obtain target user traffic, and forward the target user traffic to the target system.

[0104] In this embodiment, the acquisition module, in response to a filtering instruction for user traffic in a target area, acquires at least one target mobile network signaling data matching the target area. This target mobile network signaling data includes a Tracking Area Code (TAC) or a Cell Identifier (ECI). A first mapping table generation module acquires each signaling traffic, determines the target information for each signaling traffic, and generates a first mapping table based on the target information. A second mapping table generation module filters the first mapping table based on the target mobile network signaling data to obtain a second mapping table. The second mapping table stores the start and end times of each user's access to the target base station. A user traffic filtering module filters user traffic based on the second mapping table to obtain target user traffic, and forwards this target user traffic to the target system. This process identifies user traffic matching the target area and sends it to the matching analysis system, reducing the data processing pressure on the analysis system and providing a basis for improving the efficiency and accuracy of data processing.

[0105] In an optional implementation of this embodiment, the acquisition module 410 is specifically used for:

[0106] Determine the target area and obtain target mobile network signaling data that matches the target area from preset documents or websites;

[0107] or,

[0108] The system acquires and parses the first signaling traffic forwarded by the target device within the target area, and parses the first signaling traffic to obtain target mobile network signaling data that matches the target area.

[0109] In an optional implementation of this embodiment, the first mapping table generation module 420 is specifically used for:

[0110] The target signaling traffic is parsed to obtain the target signaling message sequence of the target signaling traffic;

[0111] Based on the order of each target signaling message sequence and the relationship between them, the target signaling flow corresponding to the target signaling traffic is determined;

[0112] Based on the target signaling process, each target information is determined and stored in a preset mapping table to obtain the first mapping table;

[0113] The target information includes at least one of the following: control tunnel identifier, user identifier, TAC, ECI, and base station-side tunnel bearer identifier.

[0114] In an optional implementation of this embodiment, the first mapping table generation module 420 is further specifically used for:

[0115] If the target signaling process is an attach request for the target user and / or a request to create a specific packet data network (PDN) connection, then the target user identifier, the TAC, and the ECI of the target user are determined based on the attach request and / or the PDN connection request.

[0116] Obtain a first creation session flow that matches the attach request, and determine the first uplink and downlink tunnels created in the first creation session flow, as well as the first bearer identifier;

[0117] The first uplink and downlink tunnels are designated as the target control tunnels, and the first bearer identifier is designated as the default bearer identifier belonging to the target control tunnel; or...

[0118] Obtain a second session creation process that matches the PDN connection request, and determine the second uplink and downlink tunnels created in the second session creation process, as well as the second bearer identifier;

[0119] The second uplink and downlink tunnels are identified as the target control tunnels, and the second bearer identifier is identified as the default bearer identifier belonging to the target control tunnels.

[0120] If the target signaling process is a handover process, the base station-side tunnel bearer identifier is determined from the bearer creation process triggered by the handover process.

[0121] In an optional implementation of this embodiment, the second mapping table generation module 430 is specifically used for:

[0122] Obtain each TAC and ECI from the first mapping table, and determine reference data that is consistent with the TAC and ECI in the target mobile network signaling data;

[0123] The base station-side tunnel bearer identifier and user identifier of each of the reference data are stored in the second mapping table.

[0124] In an optional implementation of this embodiment, the target mobile network signaling data device further includes: a time determination module, used for:

[0125] Obtain a first deletion session process that matches the attachment request, or obtain a second deletion session process that matches the PDN connection request, or obtain a bearer deletion process;

[0126] Obtain the first session creation process, the first session deletion process, the second session creation process, the second session deletion process, and the attribute information carrying the deletion process, respectively;

[0127] The start time and end time of each target control tunnel are determined based on the attribute information described above.

[0128] Add the start time and the end time to the second mapping table.

[0129] In an optional implementation of this embodiment, the user traffic filtering module 440 is specifically used for:

[0130] In response to the filtering instruction for user traffic within the target area, each user traffic is parsed to determine the first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time that match the first user traffic;

[0131] The first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time are compared with the reference user identifier, the reference base station-side tunnel bearer identifier, the reference start time, and the reference end time stored in the second mapping table, respectively.

[0132] If the comparison results are consistent, the first user traffic is identified as the target user traffic, and the target user traffic is forwarded to the target system.

[0133] The target mobile network signaling data device provided in the embodiments of the present invention can execute the target mobile network signaling data method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0134] The collection, storage, use, processing, transmission, provision, and disclosure of user traffic, signaling traffic, etc., in the technical solutions of the embodiments of the present invention all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0135] Example 4

[0136] Figure 5 A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0137] like Figure 5As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0138] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0139] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as the target mobile network signaling data method.

[0140] In some embodiments, the target mobile network signaling data method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the target mobile network signaling data method described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to execute the target mobile network signaling data method by any other suitable means (e.g., by means of firmware).

[0141] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0142] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer program may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0143] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0144] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0145] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0146] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0147] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0148] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

[0149] This invention also provides a computer program product, including a computer program that, when executed by a processor, implements a database detection method as provided in any embodiment of this application.

[0150] In implementing the computer program product, computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof. Programming languages ​​include object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0151] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned. They should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0152] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A method for determining user traffic in a target area, characterized in that, include: In response to a filtering instruction for user traffic in a target area, at least one target mobile network signaling data matching the target area is acquired; wherein, the target mobile network signaling data includes: Tracking Area Code (TAC) or Cell Identifier (ECI); Acquire each signaling traffic, determine the target information of each signaling traffic, and generate a first mapping table based on the target information; The first mapping table is filtered based on the signaling data of each target mobile network to obtain a second mapping table; wherein, the second mapping table stores the start time and end time of each user's access to the target base station; Based on the second mapping table, user traffic is filtered to obtain target user traffic, and the target user traffic is forwarded to the target system; The step of determining the target information for each of the signaling traffic flows and generating a first mapping table based on the target information includes: The target signaling traffic is parsed to obtain the target signaling message sequence of the target signaling traffic; Based on the order of each target signaling message sequence and the relationship between them, the target signaling flow corresponding to the target signaling traffic is determined; Based on the target signaling process, each target information is determined and stored in a preset mapping table to obtain the first mapping table; The target information includes at least one of the following: control tunnel identifier, user identifier, TAC, ECI, and base station-side tunnel bearer identifier.

2. The method for determining user traffic in a target area according to claim 1, characterized in that, The method of obtaining at least one target mobile network signaling data matching the target area in response to the user traffic filtering instruction of the target area includes: Determine the target area and obtain target mobile network signaling data that matches the target area from preset documents or websites; or, The system acquires and parses the first signaling traffic forwarded by the target device within the target area, and parses the first signaling traffic to obtain target mobile network signaling data that matches the target area.

3. The method for determining user traffic in a target area according to claim 1, characterized in that, The determination of each target information based on the target signaling process includes: If the target signaling process is an attach request for the target user and / or a request to create a specific packet data network (PDN) connection, then the target user identifier, the TAC, and the ECI of the target user are determined based on the attach request and / or the PDN connection request. Obtain a first creation session flow that matches the attach request, and determine the first uplink and downlink tunnels created in the first creation session flow, as well as the first bearer identifier; The first uplink and downlink tunnels are designated as the target control tunnels, and the first bearer identifier is designated as the default bearer identifier belonging to the target control tunnel; or... Obtain a second session creation process that matches the PDN connection request, and determine the second uplink and downlink tunnels created in the second session creation process, as well as the second bearer identifier; The second uplink and downlink tunnels are identified as the target control tunnels, and the second bearer identifier is identified as the default bearer identifier belonging to the target control tunnels. If the target signaling process is a handover process, the base station-side tunnel bearer identifier is determined from the bearer creation process triggered by the handover process.

4. The method for determining user traffic in a target area according to claim 3, characterized in that, The step of filtering the first mapping table based on the signaling data of each of the target mobile networks to obtain the second mapping table includes: Obtain each TAC and ECI from the first mapping table, and determine reference data that is consistent with the TAC and ECI in the target mobile network signaling data; The base station-side tunnel bearer identifier and user identifier of each of the reference data are stored in the second mapping table.

5. The method for determining user traffic in a target area according to claim 4, characterized in that, After storing the base station-side tunnel bearer identifier and user identifier of each of the aforementioned reference data in the second mapping table, the method further includes: Obtain a first deletion session process that matches the attachment request, or obtain a second deletion session process that matches the PDN connection request, or obtain a bearer deletion process; Obtain the first session creation process, the first session deletion process, the second session creation process, the second session deletion process, and the attribute information carrying the deletion process, respectively; The start time and end time of each target control tunnel are determined based on the attribute information described above. Add the start time and the end time to the second mapping table.

6. The method for determining user traffic in a target area according to claim 1, characterized in that, The step of filtering user traffic based on the second mapping table to obtain target user traffic and forwarding the target user traffic to the target system includes: In response to the filtering instruction for user traffic within the target area, each user traffic is parsed to determine the first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time that match the first user traffic; The first user identifier, the first base station-side tunnel bearer identifier, the first start time, and the first end time are compared with the reference user identifier, the reference base station-side tunnel bearer identifier, the reference start time, and the reference end time stored in the second mapping table, respectively. If the comparison results are consistent, the first user traffic is identified as the target user traffic, and the target user traffic is forwarded to the target system.

7. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, which enables the at least one processor to perform the method for determining user traffic in a target area as described in any one of claims 1-6.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a processor, implement the method for determining user traffic in a target area as described in any one of claims 1-6.

9. A computer program product comprising a computer program that, when executed by a processor, implements a method for determining user traffic in a target area according to any one of claims 1-6.

Images