Abnormal user management method and device in communication network

Abstract

The invention discloses an abnormal user management method and device in a communication network. The method comprises the following steps: acquiring use state information of using different bandwidth products by a plurality of users in a communication network in a first time period; determining a first type of indexes used for identifying abnormal use of network resources according to the network position information of each bandwidth product used by the plurality of users in the first time period, and determining a second type of indexes used for identifying abnormal bandwidth products according to the flow configuration information of each bandwidth product used by the plurality of users in the first time period; and traversing each user in the communication network, and executing a target management operation on the current user under the condition that the use state information of any bandwidth product used by the current user in the first time period does not meet the first type index or the second type index. The technical problem that private content distribution network users in a communication network cannot be quickly and accurately identified in the prior art is solved.

Description

Technical Field

[0001] This application relates to the field of communication technology, and more specifically, to a method and apparatus for managing abnormal users in a communication network. Background Technology

[0002] In the network operation environment, PCDN (Private Content Delivery Network), as a new network service model that combines the advantages of P2P (Peer to Peer) technology and CDN (Content Delivery Network), has improved the efficiency of content distribution and reduced the cost of service providers to a certain extent. However, its inherent resource sharing mechanism has brought unprecedented challenges to operators.

[0003] Specifically, PCDN distributes content by utilizing uplink bandwidth resources, especially without the user's explicit consent or without paying the corresponding fees to the operator. This behavior essentially constitutes an encroachment on the operator's network resources, resulting in a large consumption of uplink bandwidth originally intended to meet the daily internet access needs of ordinary users, which in turn causes network congestion. In severe cases, it can affect the user's service experience and the overall stability of the network.

[0004] However, the identification of PCDN users by related technologies usually relies on manual review and simple traffic threshold detection, which cannot fully consider the complexity of the network environment and the diversity of user behavior. This may result in genuine PCDN users slipping through the net or normal users being incorrectly identified, causing unnecessary service disruptions and user complaints.

[0005] There is currently no effective solution to the aforementioned technical problems. Summary of the Invention

[0006] This application provides a method and apparatus for managing abnormal users in a communication network, so as to at least solve the technical problem that related technologies cannot quickly and accurately identify users of private content distribution networks in a communication network.

[0007] According to one aspect of the embodiments of this application, an abnormal user management method in a communication network is provided, comprising: acquiring usage status information of multiple users in the communication network using different bandwidth products within a first time period, wherein the usage status information includes at least: network location information and traffic configuration information; determining a first type of indicator for identifying abnormal network resource usage based on the network location information of the multiple users using each bandwidth product within the first time period, and determining a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of the multiple users using each bandwidth product within the first time period; traversing each user in the communication network, and performing a target management operation on the current user if the usage status information of the current user using any bandwidth product within the first time period does not meet the first type of indicator or the second type of indicator.

[0008] Optionally, the network location information includes: the registered installation address and the actual installation address. The determination of a first type of indicator for identifying abnormal network resource usage based on the network location information of multiple users using various bandwidth products within a first time period includes: calculating a first average of the first number of bandwidth products used by multiple users within the first time period; and determining the number of bandwidth products used by the same user in the first time period based on the first average and the historical number of bandwidth products used by the same user in the second time period. The historical number of bandwidth products used by the same user is the minimum value between the average and median of the second number of bandwidth products used by multiple non-private content delivery network users within the communication network in the second time period. The second time period is the time period prior to the first time period. Based on the correlation between the registered installation address and the actual installation address of each user using different bandwidth products within the first time period, the number of addresses associated with each user's registered installation address is determined. A second mean of the number of addresses associated with multiple users' registered installation addresses is calculated. Based on the second mean and the historical number of addresses associated with the registered installation addresses of the communication network within the second time period, the index of addresses associated with the registered installation addresses of the communication network within the first time period is determined. The historical number of addresses associated with the registered installation addresses is the minimum value between the average and median values ​​of the number of addresses associated with the registered installation addresses of multiple non-private content delivery network users within the communication network within the second time period. The first category of indicators is composed of the index of the number of bandwidth products used by the same user within the first time period and the index of addresses associated with the registered installation addresses of the communication network.

[0009] Optionally, based on the first average and the historical number of bandwidth products used by the same user in the second time period, the indicator of the number of bandwidth products used by the same user in the first time period is determined, including: determining the first average and the third average of the historical number of bandwidth products used by the same user in the second time period, and using the third average as the indicator of the number of bandwidth products used by the same user in the first time period; based on the second average and the historical number of addresses attached to the registered installation address in the second time period, the indicator of the number of addresses attached to the registered installation address in the first time period is determined, including: determining the second average and the fourth average of the historical number of addresses attached to the registered installation address in the second time period, and using the fourth average as the indicator of the number of addresses attached to the registered installation address in the first time period.

[0010] Optionally, the traffic configuration information includes: uplink traffic and the maximum allowed uplink rate per unit time. Based on the traffic configuration information of multiple users using various bandwidth products within a first time period, a second type of indicator for identifying abnormal bandwidth products is determined. This includes: for each bandwidth product, determining the maximum uplink traffic of each user using the corresponding bandwidth product within the first time period based on the maximum allowed uplink rate per unit time and the number of unit times within the first time period, and using the maximum uplink traffic of each user using the corresponding bandwidth product within the first time period to form the maximum uplink traffic indicator of the communication network using the corresponding bandwidth product within the first time period; determining the median and fourth mean of the uplink traffic of multiple users using the corresponding bandwidth product within the first time period, and using the median and fourth mean as the median and mean uplink traffic indicators of the communication network using the corresponding bandwidth product within the first time period; and using the maximum uplink traffic indicator, median uplink traffic indicator, and mean uplink traffic indicator of the communication network using each bandwidth product within the first time period to form the second type of indicator.

[0011] Optionally, if the usage status information of the current user using any bandwidth product within the first time period does not meet the first or second type of indicator, a target management operation is performed on the current user, including: determining whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator and whether the traffic configuration information meets the second type of indicator; if the network location information of the current user using the target bandwidth product within the first time period does not meet the first type of indicator or the traffic configuration information of the current user using the target bandwidth product within the first time period does not meet the second type of indicator, determining that the current user's user type is a private content delivery network user, and determining the target management operation corresponding to the private content delivery network user from a preset user management knowledge base, and performing the target management operation on the current user, wherein the user management knowledge base includes a set of management operations corresponding to different user types.

[0012] Optionally, the usage status information also includes: associated fiber optic communication infrastructure. Specifically, if the usage status information of the current user using any bandwidth product within the first time period does not meet either the first or second type of indicator, performing target management operations on the current user further includes: determining whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the actual installation address matches the associated fiber optic communication infrastructure; if the network location information of the current user using the target bandwidth product within the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product within the first time period does not meet the second type of indicator, or the actual installation address of the current user using the target bandwidth product within the first time period does not match the associated fiber optic communication infrastructure of the corresponding bandwidth product, determining that the current user's user type is a private content delivery network user, and determining the target management operation corresponding to the private content delivery network user from the user management knowledge base.

[0013] Optionally, the usage status information also includes: activated functional services. If the usage status information of the current user using any bandwidth product within the first time period does not meet the first or second type of indicator, the target management operation performed on the current user further includes: determining whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the activated functional service is a preset service. The preset service includes at least one of the following: speed-up service, multi-terminal internet access service. If the network location information of the current user using the target bandwidth product within the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product within the first time period does not meet the second type of indicator, or the activated functional service of the current user using the target bandwidth product within the first time period is a preset service, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

[0014] According to another aspect of the embodiments of this application, an abnormal user management device in a communication network is also provided, comprising: an acquisition module, configured to acquire usage status information of multiple users in the communication network using different bandwidth products within a first time period, wherein the usage status information includes at least: network location information and traffic configuration information; a determination module, configured to determine a first type of indicator for identifying abnormal network resource usage based on the network location information of the multiple users using each bandwidth product within the first time period, and determine a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of the multiple users using each bandwidth product within the first time period; and a management module, configured to traverse each user in the communication network, and perform target management operations on the current user if the usage status information of the current user using any bandwidth product within the first time period does not meet the first type of indicator or the second type of indicator.

[0015] According to another aspect of the embodiments of this application, a computer program product is also provided, the computer program product comprising: a computer program, wherein the computer program, when executed by a processor, implements the above-described abnormal user management method in a communication network.

[0016] According to another aspect of the embodiments of this application, an electronic device is also provided, the electronic device including: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the above-described abnormal user management method in the communication network through the computer program.

[0017] In this embodiment, by acquiring network location information and traffic configuration information of multiple users within a communication network using different bandwidth products within a first time period, a first type of indicator for identifying abnormal network resource usage and a second type of indicator for identifying abnormal bandwidth products are determined. Each user in the communication network is traversed, and if a user's usage status information is found to be inconsistent with either the first or second type of indicator, necessary management operations are performed. This effectively controls the abuse of network resources, maintains the fairness of network services and user experience, and also ensures reasonable returns and long-term sustainable development of operator resources. This solves the technical problem that related technologies cannot quickly and accurately identify users of private content distribution networks within a communication network. Attached Figure Description

[0018] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments of this application and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0019] Figure 1 This is a flowchart illustrating an optional method for managing abnormal users in a communication network according to an embodiment of this application.

[0020] Figure 2 This is a schematic diagram of the structure of an optional abnormal user management device in a communication network according to an embodiment of this application;

[0021] Figure 3 This is a schematic diagram of the hardware structure of a computer terminal for implementing an abnormal user management method in a communication network, according to an embodiment of this application. Detailed Implementation

[0022] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0023] It should be noted that the terms "first," "second," etc., used in the specification, claims, and drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0024] To better understand the embodiments of this application, the following is a translation and explanation of some nouns or terms that appear in the description of the embodiments of this application:

[0025] PCDN (Private Delivery Network) is a content distribution model that combines the advantages of P2P (Peer-to-Peer) technology and CDN (Content Delivery Network). It utilizes users' idle resources (such as mobile devices or routers) to store and distribute content, thereby creating a larger-scale content source. Unlike traditional public CDNs, PCDN provides more efficient and reliable content distribution services, helping customers quickly deliver web, application, video, and other content to users worldwide.

[0026] Example 1

[0027] According to an embodiment of this application, an abnormal user management method in a communication network is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0028] Figure 1 This is a flowchart illustrating an abnormal user management method in a communication network according to an embodiment of this application, as shown below. Figure 1 As shown, the method includes the following steps:

[0029] Step S102: Obtain usage status information of multiple users in the communication network using different bandwidth products in the first time period. The usage status information includes at least: network location information and traffic configuration information.

[0030] Step S104: Based on the network location information of multiple users using each bandwidth product within the first time period, determine the first type of indicator for identifying abnormal network resource usage, and based on the traffic configuration information of multiple users using each bandwidth product within the first time period, determine the second type of indicator for identifying abnormal bandwidth products.

[0031] Step S106: Traverse each user in the communication network. If the usage status information of the current user using any bandwidth product in the first time period does not meet the first or second type of indicator, perform target management operation on the current user.

[0032] The following section describes each step of the abnormal user management method in a communication network, using a specific implementation process as an example.

[0033] In the technical solution provided in step S102 above, the system can obtain usage status information of multiple users in the communication network using different bandwidth products in a first time period (such as a day, a week, or a month).

[0034] Specifically, the aforementioned communication network refers to the broadband network environment provided by telecommunications operators; the multiple user groups within the communication network constitute bandwidth user groups, including but not limited to home broadband users, enterprise broadband users, and users of smart hardware devices; bandwidth products are high-speed data transmission services provided by telecommunications operators for home or enterprise users to access the Internet. These products are typically based on various broadband access technologies, including but not limited to Fiber to the Home (FTTH), ADSL (Asymmetric Digital Subscriber Line), VDSL (Very-high-bit-rate Digital Subscriber Line), LAN (Local Area Network) access, and various wireless broadband technologies such as 4G and 5G. Broadband products provide users with the ability to upload and download data at high speeds, and their characteristics encompass different bandwidths, upload and download speeds, Quality of Service (QoS), pricing packages, and potentially additional services (such as fixed-line voice and television services).

[0035] In addition, the user's usage status information for different bandwidth products should include at least the user's network location information and traffic configuration information for the corresponding bandwidth product, including:

[0036] Network location information refers to the physical location of the bandwidth product used by a user within a communication network. It primarily includes the registered installation address and the actual installation address. The registered installation address is the bandwidth installation address registered by the user with the telecommunications operator; while the actual installation address is the actual location where the bandwidth equipment is installed, which may differ from the registered installation address due to user relocation or equipment movement.

[0037] Traffic configuration information refers to the traffic status and bandwidth allocation strategy when a user uses a bandwidth product. Specifically, it includes uplink traffic (the total amount of data uploaded by the user) and the maximum allowed uplink rate per unit time (the maximum upload speed that the user can theoretically achieve). The maximum allowed uplink rate per unit time is determined by the telecom operator based on the user's subscribed package or service level.

[0038] In the technical solution provided in step S104 above, the system can determine a first type of indicator for identifying abnormal network resource usage based on the network location information of multiple users using each bandwidth product in the first time period, and determine a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of multiple users using each bandwidth product in the first time period.

[0039] As an optional implementation, in the technical solution provided in step S104 above, the first type of index can be determined through the following steps:

[0040] Step 1: Calculate the first average number of bandwidth products used by multiple users in the first time period, and determine the number of bandwidth products used by the same user in the first time period based on the first average number and the historical number of bandwidth products used by the same user in the second time period (i.e., the time period before the first time period).

[0041] Among them, the aforementioned historical number of bandwidth products used by users is the average and the minimum of the median values ​​of the second number of bandwidth products used by users of multiple non-private content delivery networks within the communication network during the second time period.

[0042] Optionally, the above-mentioned index of the number of bandwidth products used by the same user can be determined by the following method: determining the first average and the third average of the historical number of bandwidth products used by the same user in the second time period, and using the third average as the index of the number of bandwidth products used by the same user in the first time period.

[0043] Specifically, by statistically analyzing the initial number of bandwidth products used by multiple users within the communication network during the first time period, and calculating the first average of these initial numbers for all users, we obtain the number of bandwidth products used by the same user within the first time period. Subsequently, by calculating this first average and the historical average of the number of bandwidth products used by the same user during the second time period, we obtain the index of the number of bandwidth products used by the same user within the first time period. Therefore, the expression for the index of the number of bandwidth products used by the same user within the first time period can be written as: In the formula, This indicates the number of bandwidth products used by the same user within a first time period in the communication network. This represents the first mean. This indicates the number of bandwidth products used by the same user in the communication network during the second time period. Therefore, the above-mentioned metric of the number of bandwidth products used by the same user is used to identify users who may be using multiple bandwidth products beyond the normal range during a specific time period, thereby filtering out individuals suspected of participating in peer-to-peer content delivery network services.

[0044] Step 2: Based on the correlation between the registered installation address and the actual installation address of each user using different bandwidth products in the first time period, determine the number of addresses associated with each user's registered installation address, calculate the second average of the number of addresses associated with multiple users' registered installation addresses, and determine the address index of the communication network's registered installation addresses in the first time period based on the second average and the historical number of addresses associated with the registered installation addresses of the communication network in the second time period.

[0045] Among them, the number of addresses associated with the historical registration and installation addresses is the average and the minimum of the median number of addresses associated with the registration and installation addresses of multiple non-private content delivery network users within the communication network during the second time period.

[0046] Optionally, the above-mentioned registered installation address subordinate address index can be determined by the following method: determine the second average and the fourth average of the number of historical registered installation address subordinate addresses of the communication network in the second time period, and use the fourth average as the registered installation address subordinate address index of the communication network in the first time period.

[0047] Specifically, by comparing the registered installation address and actual installation address of each user using different bandwidth products within the first time period, the number of addresses associated with each user's registered installation address is obtained, i.e., the number of actual installation addresses associated with the registered installation address. This serves as a measure of connection density at the user address level. Next, the second mean of the number of addresses associated with all users' registered installation addresses is calculated, which is used as the total number of addresses associated with the registered installation addresses of the communication network within the first time period. Subsequently, by calculating the second mean and the historical mean of the number of addresses associated with the registered installation addresses of the communication network within the second time period, the address index of the registered installation addresses of the communication network within the first time period is obtained. Therefore, the expression for the address index of the registered installation addresses of the communication network within the first time period can be written as: In the formula, This indicates the registered installation address and its associated address indicators for the communication network within the first time period. This represents the second mean. This indicates the number of addresses associated with the historical registered installation address within the communication network during the second time period. Therefore, the above-mentioned indicator of addresses associated with the registered installation address can reflect abnormally concentrated address usage characteristics and indicate potential violations.

[0048] Step 3: The first category of indicators consists of the number of bandwidth products used by the same user in the communication network during the first time period and the registered installation address and its associated address.

[0049] Therefore, the metrics of the number of bandwidth products used by users and the addresses associated with the registered installation addresses are integrated to form the first type of metric. This type of metric is based on two perspectives: the number of bandwidth products used by users and the address association density. By comparing statistical data from the current time period and historical time periods, it dynamically generates standards for detecting abnormal network resource usage.

[0050] In the above embodiments, the first type of indicators were determined by comparing dynamic thresholds and historical data. By comprehensively using these indicators, user behavior can be evaluated more comprehensively and accurately, and users who may abuse bandwidth resources to participate in peer-to-peer content delivery network services can be identified, providing strong data support for network monitoring and resource management.

[0051] As an optional implementation, in the technical solution provided in step S104 above, the second type of index can be determined through the following steps:

[0052] Step 1: For bandwidth products, based on the maximum allowable uplink rate per unit time for each user when using the corresponding bandwidth product in the first time period and the number of unit times contained in the first time period, determine the maximum uplink traffic of each user when using the corresponding bandwidth product in the first time period, and form the maximum uplink traffic index of the communication network when using the corresponding bandwidth product in the first time period.

[0053] For example, if the first time period is one day, and the unit of time is seconds, then the maximum uplink traffic a user can use for the corresponding bandwidth product within the first time period can be calculated using the following method: In the formula, This indicates the maximum uplink traffic a user uses for the corresponding bandwidth product within the first time period; This indicates the maximum allowed uplink rate per second when a user uses the corresponding bandwidth product within the first time period.

[0054] Since the maximum allowed uplink rate per unit time for each user using the same bandwidth product is different, the above method can be used to calculate the maximum uplink traffic of each user using the corresponding bandwidth product in the first time period. The maximum uplink traffic of all users is taken as the maximum uplink traffic index of the communication network when using the corresponding bandwidth product in the first time period. It reflects the overall uplink traffic carrying capacity of the communication network when using the bandwidth product in the first time period.

[0055] Step 2: For bandwidth products, determine the median and fourth mean of the uplink traffic of multiple users using the corresponding bandwidth products within the first time period, and use the median and fourth mean as the median and mean uplink traffic indicators of the communication network when using the corresponding bandwidth products within the first time period.

[0056] Specifically, the formula for calculating the aforementioned average uplink traffic is as follows: In the formula, This represents the fourth average of the uplink traffic used by multiple users for the corresponding bandwidth product within the first time period, i.e., the average uplink traffic metric. This represents the uplink traffic value of the corresponding bandwidth product used by the i-th user in the first time period; n represents the total number of users in the communication network.

[0057] The aforementioned median uplink traffic metric is determined as follows: The uplink traffic values ​​of each user using the corresponding bandwidth product within the first time period are sorted in ascending (or descending) order. After sorting, the median uplink traffic metric is determined according to the following rules: In the formula, This represents the median uplink traffic indicator; Indicates the first position in the sorting results The uplink traffic value of each user within the first time period for the corresponding bandwidth product. Therefore, the above rule can be understood as: if n is odd, then the median uplink traffic value is the value of the [number]th user in the sorted results. ( The median uplink traffic value of the corresponding bandwidth product used by the nth user in the first time period (rounded up); if n is even, the median uplink traffic value is the nth user in the sorted results. The user and the The average uplink traffic value of each user using the corresponding bandwidth product within the first time period.

[0058] Therefore, the aforementioned median and mean uplink traffic metrics provide a key perspective for observing the central trends and concentration of user traffic behavior.

[0059] The third step: The second category of indicators is composed of the maximum uplink traffic, median uplink traffic, and average uplink traffic when the communication network uses each bandwidth product during the first time period.

[0060] Therefore, the maximum uplink traffic metric, median uplink traffic metric, and mean uplink traffic metric are integrated to form a second type of metric for bandwidth usage in communication networks. This type of metric characterizes the upper limit, central trend, and distribution characteristics of network traffic from different dimensions. By comparing the actual observed user uplink traffic with these preset metrics, abnormal behavior can be effectively identified, especially among users who may be participating in peer-to-peer content delivery network services.

[0061] In the above embodiments, through detailed traffic data analysis and with the aid of scientific statistical principles, a second type of indicator was determined. By comprehensively using this type of indicator, effective monitoring and management of abnormal uplink traffic behavior in the communication network can be achieved.

[0062] In the technical solution provided in step S106 above, the system can perform target management operations on the current user if the usage status information of any bandwidth product used by the current user in the first time period does not meet the first or second type of indicators.

[0063] Specifically, the system continuously monitors each user's usage status information within the first time period based on the dynamically generated first and second categories of indicators. Once it detects that a user's usage status information does not meet the threshold or characteristic requirements of any of the above categories of indicators, the system will automatically trigger target management operations for that user.

[0064] As an optional implementation, in the technical solution provided in step S106 above, the method may include:

[0065] First, determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator and whether the traffic configuration information meets the second type of indicator.

[0066] In other words, it determines whether the number of bandwidth products used by the same user and the number of addresses associated with the registered installation address, as determined by the network location information of the current user using different bandwidth products within the first time period, are less than the indicators of the number of bandwidth products used by the same user and the number of addresses associated with the registered installation address; whether the uplink traffic of the current user using each bandwidth product within the first time period is less than the smaller of the maximum uplink traffic indicator, the median uplink traffic indicator, and the average uplink traffic indicator.

[0067] If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the preset user management knowledge base, and the target management operation is executed on the current user. The user management knowledge base includes a set of management operations corresponding to different user types.

[0068] In other words, if the number of bandwidth products used by the same user and the number of addresses associated with the registered installation address, determined by the network location information of the current user using different bandwidth products within the first time period, are both not less than the indicators for the number of bandwidth products used by the same user and the indicators for addresses associated with the registered installation address, or if the uplink traffic of the current user using each bandwidth product within the first time period is not less than the smaller of the maximum uplink traffic indicator, the median uplink traffic indicator, and the average uplink traffic indicator, then the current user is confirmed as an abnormal user who may participate in peer-to-peer content delivery network services. At this time, the target management operation corresponding to the private content delivery network user can be determined from the preset user management knowledge base, such as traffic rate limiting or network disconnection, billing mode adjustment, issuing alarm prompts, etc., to perform target management operations on the current user, correct the current user's violation behavior, and restore the fair allocation of network resources.

[0069] The above solution can automatically identify and respond to abnormal behaviors in the communication network, and can complete the identification of user types and the execution of management strategies without human intervention. This greatly improves the efficiency and accuracy of network operation and management, while also ensuring that all users can use bandwidth services in a healthy and fair network environment.

[0070] In the architecture of telecommunications networks, fiber optic communication infrastructure is a crucial link connecting user terminal equipment and the operator's core network. When a user applies for and uses a certain bandwidth product, their network signal is distributed to multiple users through a series of fiber optic facilities. Optical distribution boxes and optical cross-connect boxes are used to aggregate and distribute fiber optic signals at different levels to achieve signal transmission and user access. Therefore, each user's network connection is associated with a specific fiber optic communication infrastructure, and its specific configuration and usage status can reflect the physical environment and resource utilization of the user's network location.

[0071] Therefore, when analyzing whether a user is an abnormal user participating in peer-to-peer content delivery network services, the associated fiber optic communication infrastructure can also be considered. Thus, the user's usage status information for each bandwidth product within the first time period can also include: the associated fiber optic communication infrastructure, such as key components of the fiber optic network like optical splitter boxes, optical junction boxes, and optical splitters.

[0072] As another optional implementation, in the technical solution provided in step S106 above, the method may include:

[0073] Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the actual installation address and associated fiber optic communication infrastructure match.

[0074] In other words, it is determined whether the number of bandwidth products used by the same user and the number of addresses attached to the registered installation address, as determined by the network location information of the current user using different bandwidth products within the first time period, are less than the indicators of the number of bandwidth products used by the same user and the number of addresses attached to the registered installation address; whether the uplink traffic of the current user using each bandwidth product within the first time period is less than the smaller of the maximum uplink traffic indicator, the median uplink traffic indicator, and the average uplink traffic indicator; and whether the actual installation address of the bandwidth product matches the fiber optic communication infrastructure associated with the bandwidth product.

[0075] The determination of whether the actual installation address of the bandwidth product matches the fiber optic communication infrastructure associated with the bandwidth product can be made by checking whether the identification information of the bandwidth product matches the recorded connection information of the fiber optic communication infrastructure, and whether the actual installation address of the bandwidth product is within the coverage area of ​​the infrastructure that it should theoretically be connected to.

[0076] If the network location information of the current user using the target bandwidth product in the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product in the first time period does not meet the second type of indicator, or the actual installation address of the current user using the target bandwidth product in the first time period does not match the fiber optic communication infrastructure associated with the corresponding bandwidth product, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

[0077] In other words, if the number of bandwidth products used by the same user and the number of addresses associated with the registered installation address, determined by the network location information of the current user using different bandwidth products within the first time period, are not less than the indicators for the number of bandwidth products used by the same user and the indicators for addresses associated with the registered installation address, or if the uplink traffic of the current user using each bandwidth product within the first time period is not less than the smaller of the maximum uplink traffic indicator, the median uplink traffic indicator, and the average uplink traffic indicator, or if the actual installation address of the target bandwidth product used by the current user within the first time period does not match the fiber optic communication infrastructure associated with the corresponding bandwidth product, then the current user is confirmed as an abnormal user who may participate in peer-to-peer content delivery network services. In this case, the target management operation corresponding to the private content delivery network user can be determined from the user management knowledge base, such as traffic rate limiting or network disconnection, billing mode adjustment, issuing alarm prompts, etc., to perform target management operations on the current user, correct the current user's violation, and restore the fair allocation of network resources.

[0078] In addition, the user's usage status information for each bandwidth product during the first time period may also include: activated functional services.

[0079] As another optional implementation, in the technical solution provided in step S106 above, the method may include:

[0080] The system determines whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the activated functional services are preset services. Among them, preset services include, but are not limited to: speed-up services, multi-terminal internet access services, etc.

[0081] If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, or the functional service activated by the current user when using the target bandwidth product during the first time period is a preset service, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

[0082] In other words, if the number of bandwidth products used by the same user and the number of addresses associated with the registered installation address, determined by the network location information of the current user using different bandwidth products within the first time period, are not less than the indicators for the number of bandwidth products used by the same user and the indicators for addresses associated with the registered installation address, or if the uplink traffic of the current user using each bandwidth product within the first time period is not less than the smaller of the maximum uplink traffic indicator, the median uplink traffic indicator, and the average uplink traffic indicator, or if the current user's activated service when using the target bandwidth product within the first time period is a preset service, then the current user is confirmed as an abnormal user who may participate in peer-to-peer content delivery network services. In this case, the target management operation corresponding to the private content delivery network user can be determined from the user management knowledge base, such as traffic rate limiting or network disconnection, billing mode adjustment, issuing alarm prompts, etc., to perform target management operations on the current user, correct the current user's violation, and restore the fair allocation of network resources.

[0083] In identifying anomalous users, considering the services activated by users when using bandwidth products is crucial because different service types have significantly different requirements and usage patterns for network resources. For example, users with high-speed upload services may generate a large amount of upload traffic, which is reasonable under normal circumstances. However, for users without specific high-speed upload service needs, abnormally high upload traffic may indicate that the user is participating in peer-to-peer content delivery network (PCN) services. Therefore, analyzing the services activated by users when using bandwidth products can verify whether their traffic consumption matches their paid services, better understand the reasons behind their traffic behavior, and thus more accurately identify PCN users.

[0084] In summary, this application embodiment, by analyzing the network location information and traffic configuration information of users using different bandwidth products within a first time period, can effectively distinguish between private content delivery network users and ordinary users, achieving high-precision user type identification and avoiding the misjudgment and missed detection problems inherent in traditional detection methods based on a single indicator. Simultaneously, upon detecting a private content delivery network user, timely management operations can be taken to prevent unreasonable occupation and waste of network resources, especially uplink bandwidth resources, thereby improving the overall network operational efficiency and service quality. Therefore, this application embodiment achieves effective governance and optimization of the network environment, ensuring both the rational allocation and efficient utilization of network resources and maintaining fair competition and legitimate operation within the network ecosystem.

[0085] Example 2

[0086] According to an embodiment of this application, an abnormal user management device for a communication network is also provided for implementing the abnormal user management method in the communication network of Embodiment 1, such as... Figure 2 As shown, the abnormal user management device in this communication network includes at least: an acquisition module 22, a determination module 24, and a management module 26, wherein:

[0087] The acquisition module 22 is used to acquire the usage status information of multiple users in the communication network using different bandwidth products in the first time period. The usage status information includes at least: network location information and traffic configuration information.

[0088] The determination module 24 is used to determine a first type of indicator for identifying abnormal network resource usage based on the network location information of multiple users using each bandwidth product in the first time period, and to determine a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of multiple users using each bandwidth product in the first time period.

[0089] Management module 26 is used to traverse each user in the communication network and perform target management operations on the current user if the usage status information of the current user using any bandwidth product in the first time period does not meet the first or second type of indicators.

[0090] The following section describes the functions of each module of the abnormal user management device in the communication network, based on a specific implementation process.

[0091] Optionally, the determination module is also used to determine the first type of indicator through the following steps:

[0092] Step 1: Calculate the first average number of bandwidth products used by multiple users in the first time period, and determine the number of bandwidth products used by the same user in the first time period based on the first average number and the historical number of bandwidth products used by the same user in the second time period (i.e., the time period before the first time period).

[0093] Among them, the aforementioned historical number of bandwidth products used by users is the average and the minimum of the median values ​​of the second number of bandwidth products used by users of multiple non-private content delivery networks within the communication network during the second time period.

[0094] Optionally, the above-mentioned index of the number of bandwidth products used by the same user can be determined by the following method: determining the first average and the third average of the historical number of bandwidth products used by the same user in the second time period, and using the third average as the index of the number of bandwidth products used by the same user in the first time period.

[0095] Step 2: Based on the correlation between the registered installation address and the actual installation address of each user using different bandwidth products in the first time period, determine the number of addresses associated with each user's registered installation address, calculate the second average of the number of addresses associated with multiple users' registered installation addresses, and determine the address index of the communication network's registered installation addresses in the first time period based on the second average and the historical number of addresses associated with the registered installation addresses of the communication network in the second time period.

[0096] Among them, the number of addresses associated with the historical registration and installation addresses is the average and the minimum of the median number of addresses associated with the registration and installation addresses of multiple non-private content delivery network users within the communication network during the second time period.

[0097] Optionally, the above-mentioned registered installation address subordinate address index can be determined by the following method: determine the second average and the fourth average of the number of historical registered installation address subordinate addresses of the communication network in the second time period, and use the fourth average as the registered installation address subordinate address index of the communication network in the first time period.

[0098] Step 3: The first category of indicators consists of the number of bandwidth products used by the same user in the communication network during the first time period and the registered installation address and its associated address.

[0099] Optionally, the determination module is also used to determine the second type of indicator through the following steps:

[0100] Step 1: For bandwidth products, based on the maximum allowable uplink rate per unit time for each user when using the corresponding bandwidth product in the first time period and the number of unit times contained in the first time period, determine the maximum uplink traffic of each user when using the corresponding bandwidth product in the first time period, and form the maximum uplink traffic index of the communication network when using the corresponding bandwidth product in the first time period.

[0101] Step 2: For bandwidth products, determine the median and fourth mean of the uplink traffic of multiple users using the corresponding bandwidth products within the first time period, and use the median and fourth mean as the median and mean uplink traffic indicators of the communication network when using the corresponding bandwidth products within the first time period.

[0102] The third step: The second category of indicators is composed of the maximum uplink traffic, median uplink traffic, and average uplink traffic when the communication network uses each bandwidth product during the first time period.

[0103] Optionally, the management module is also used to perform target management operations on the current user in the following manner:

[0104] Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator and whether the traffic configuration information meets the second type of indicator.

[0105] If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the preset user management knowledge base, and the target management operation is executed on the current user. The user management knowledge base includes a set of management operations corresponding to different user types.

[0106] Optionally, the user's usage status information for each bandwidth product during the first time period may also include: the fiber optic communication infrastructure associated with the bandwidth product, such as key components of the fiber optic network like optical splitter boxes, optical junction boxes, and optical splitters. Therefore, the management module is also used to perform target management operations on the current user according to the following method:

[0107] Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the actual installation address and associated fiber optic communication infrastructure match.

[0108] If the network location information of the current user using the target bandwidth product in the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product in the first time period does not meet the second type of indicator, or the actual installation address of the current user using the target bandwidth product in the first time period does not match the fiber optic communication infrastructure associated with the corresponding bandwidth product, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

[0109] Optionally, the user's usage status information for each bandwidth product during the first time period may also include: activated functional services. Therefore, the management module is also used to perform target management operations on the current user according to the following method:

[0110] The system determines whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the activated functional services are preset services. Among them, preset services include, but are not limited to: speed-up services, multi-terminal internet access services, etc.

[0111] If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, or the functional service activated by the current user when using the target bandwidth product during the first time period is a preset service, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

[0112] It should be noted that each module in the abnormal user management device in the communication network in this embodiment corresponds one-to-one with each implementation step of the abnormal user management method in the communication network in Embodiment 1. Since Embodiment 1 has been described in detail, some details not shown in this embodiment can be referred to Embodiment 1, and will not be elaborated further here.

[0113] Example 3

[0114] According to an embodiment of this application, a computer program product is also provided, which includes a computer program, wherein when the computer program is executed by a processor, it implements the abnormal user management method in the communication network of embodiment 1.

[0115] According to an embodiment of this application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the abnormal user management method in the communication network in Embodiment 1 by running the computer program.

[0116] According to an embodiment of this application, a processor is also provided for running a computer program, wherein the computer program executes the abnormal user management method in the communication network of embodiment 1 during runtime.

[0117] According to an embodiment of this application, an electronic device is also provided, comprising: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the abnormal user management method in the communication network of Embodiment 1 through the computer program.

[0118] Specifically, the computer program executes the following steps during runtime: It acquires usage status information of multiple users within the communication network using different bandwidth products during a first time period, wherein the usage status information includes at least: network location information and traffic configuration information; it determines a first type of indicator for identifying abnormal network resource usage based on the network location information of multiple users using each bandwidth product during the first time period, and determines a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of multiple users using each bandwidth product during the first time period; it iterates through each user within the communication network, and if the usage status information of the current user using any bandwidth product during the first time period does not meet either the first or second type of indicator, it performs target management operations on the current user.

[0119] As an alternative implementation, the above-mentioned electronic device may exist in the form of a mobile terminal, a computer terminal, or a similar computing device. Figure 3 A hardware block diagram of a computer terminal for implementing an abnormal user management method in a communication network is shown. Figure 3 As shown, the computer terminal 30 may include one or more processors 302 (shown as 302a, 302b, ..., 302n in the figure) 302 (processor 302 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 304 for storing data, and a transmission device 306 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 3 The structure shown is for illustrative purposes only and does not limit the structure of the computer terminal described above. For example, computer terminal 30 may also include... Figure 3 The more or fewer components shown, or having the same Figure 3 The different configurations shown.

[0120] It should be noted that the aforementioned one or more processors 302 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 30. As involved in the embodiments of this application, the data processing circuits serve as processor control (e.g., selection of a variable resistor termination path connected to an interface).

[0121] The memory 304 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the abnormal user management method in the communication network in this embodiment of the application. The processor 302 executes various functional applications and data processing by running the software programs and modules stored in the memory 304, thereby implementing the above-mentioned application vulnerability detection method. The memory 304 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 304 may further include memory remotely located relative to the processor 302, and these remote memories can be connected to the computer terminal 30 via a network. Examples of the above-mentioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0122] The transmission device 306 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 30. In one example, the transmission device 306 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 306 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0123] The display may be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 30.

[0124] The sequence numbers of the above embodiments are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0125] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0126] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0127] The units described as separate components may or may not be physically separate. Similarly, the components shown as units may or may not be physical units; they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0128] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0129] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0130] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A method for managing abnormal users in a communication network, characterized in that, include: The usage status information of multiple users in the communication network using different bandwidth products in a first time period is obtained, wherein the usage status information includes at least: network location information and traffic configuration information; Based on the network location information of the multiple users using each bandwidth product in the first time period, a first type of indicator for identifying abnormal network resource usage is determined, and based on the traffic configuration information of the multiple users using each bandwidth product in the first time period, a second type of indicator for identifying abnormal bandwidth products is determined. If each user in the communication network is traversed, and the usage status information of the current user using any bandwidth product in the first time period does not meet the first type of indicator or the second type of indicator, then the target management operation is performed on the current user.

2. The method according to claim 1, characterized in that, The network location information includes: the registered installation address and the actual installation address. The first type of indicator used to identify abnormal network resource usage is determined based on the network location information of the multiple users using various bandwidth products within the first time period, including: Calculate the first average of the first number of bandwidth products used by the multiple users in the first time period, and determine the bandwidth product usage index of the same user in the first time period based on the first average and the historical number of bandwidth products used by the same user in the second time period of the communication network. The historical number of bandwidth products used by the same user is the minimum value between the average and median of the second number of bandwidth products used by multiple non-private content delivery network users in the communication network in the second time period. The second time period is the time period before the first time period. Based on the correlation between the registered installation address and the actual installation address of each user using different bandwidth products within the first time period, the number of addresses associated with each user's registered installation address is determined. A second average of the number of addresses associated with the registered installation addresses of the multiple users is calculated. Based on the second average and the historical number of addresses associated with the registered installation addresses of the communication network within the second time period, the index of addresses associated with the registered installation addresses of the communication network within the first time period is determined. The historical number of addresses associated with the registered installation addresses is the minimum value between the average and median values ​​of the number of addresses associated with the registered installation addresses of multiple non-private content delivery network users within the communication network within the second time period. The first type of indicator is composed of the number of bandwidth products used by the same user in the first time period and the registered installation address and its associated address.

3. The method according to claim 2, characterized in that, Based on the first average and the historical number of bandwidth products used by the same user in the second time period, the indicator of the number of bandwidth products used by the same user in the first time period is determined, including: determining the first average and the third average of the historical number of bandwidth products used by the same user in the second time period, and using the third average as the indicator of the number of bandwidth products used by the same user in the first time period. Based on the second average and the number of historical registered installation addresses attached to the communication network during the second time period, the registered installation address attached address index of the communication network during the first time period is determined, including: determining the fourth average of the second average and the number of historical registered installation addresses attached to the communication network during the second time period, and using the fourth average as the registered installation address attached address index of the communication network during the first time period.

4. The method according to claim 1, characterized in that, The traffic configuration information includes: uplink traffic and the maximum allowed uplink rate per unit time. Based on the traffic configuration information of the multiple users using each bandwidth product within the first time period, a second type of indicator is determined to identify abnormal bandwidth products, including: For the bandwidth product, based on the maximum allowable uplink rate per unit time when each user uses the corresponding bandwidth product in the first time period and the number of unit times contained in the first time period, the maximum uplink traffic of each user using the corresponding bandwidth product in the first time period is determined, and the maximum uplink traffic of each user using the corresponding bandwidth product in the first time period is composed of the maximum uplink traffic of the communication network using the corresponding bandwidth product in the first time period. The median and fourth mean of the uplink traffic of the multiple users using the corresponding bandwidth products within a first time period are determined, and the median and the fourth mean are used as the median index and the mean index of the uplink traffic of the communication network when using the corresponding bandwidth products within the first time period. The second type of index is composed of the maximum uplink traffic index, the median uplink traffic index, and the average uplink traffic index when the communication network uses each bandwidth product during the first time period.

5. The method according to claim 1, characterized in that, If the current user's usage status information for any bandwidth product during the first time period does not meet the first type of metric or the second type of metric, a target management operation is performed on the current user, including: Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator and whether the traffic configuration information meets the second type of indicator; If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the preset user management knowledge base, and the target management operation is executed on the current user. The user management knowledge base includes a set of management operations corresponding to different user types.

6. The method according to claim 5, characterized in that, The usage status information also includes: associated optical fiber communication infrastructure. Furthermore, if the usage status information of the current user for any bandwidth product during the first time period does not meet the first type of indicator or the second type of indicator, performing target management operations on the current user further includes: Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the actual installation address and associated optical fiber communication infrastructure match; If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, or the actual installation address of the current user using the target bandwidth product during the first time period does not match the fiber optic communication infrastructure associated with the corresponding bandwidth product, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

7. The method according to claim 5, characterized in that, The usage status information also includes: activated functional services. Specifically, if the current user's usage status information for any bandwidth product during a first time period does not meet either the first type of indicator or the second type of indicator, performing a target management operation on the current user further includes: Determine whether the network location information of the current user using different bandwidth products within the first time period meets the first type of indicator, whether the traffic configuration information meets the second type of indicator, and whether the activated functional service is a preset service, wherein the preset service includes at least one of the following: speed-up service, multi-terminal internet access service; If the network location information of the current user using the target bandwidth product during the first time period does not meet the first type of indicator, or the traffic configuration information of the current user using the target bandwidth product during the first time period does not meet the second type of indicator, or the functional service activated by the current user when using the target bandwidth product during the first time period is the preset service, the user type of the current user is determined to be a private content delivery network user, and the target management operation corresponding to the private content delivery network user is determined from the user management knowledge base.

8. An abnormal user management device in a communication network, characterized in that, include: The acquisition module is used to acquire usage status information of multiple users in the communication network using different bandwidth products in a first time period, wherein the usage status information includes at least: network location information and traffic configuration information; The determination module is used to determine a first type of indicator for identifying abnormal network resource usage based on the network location information of the multiple users using each bandwidth product in the first time period, and to determine a second type of indicator for identifying abnormal bandwidth products based on the traffic configuration information of the multiple users using each bandwidth product in the first time period. The management module is used to traverse each user in the communication network and perform target management operations on the current user if the usage status information of the current user using any bandwidth product in the first time period does not meet the first type of indicator or the second type of indicator.

9. A computer program product, characterized in that, include: A computer program, wherein when executed by a processor, the computer program implements the abnormal user management method in a communication network as described in any one of claims 1 to 7.

10. An electronic device, characterized in that, include: A memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute, via the computer program, the abnormal user management method in a communication network according to any one of claims 1 to 7.

Images