A method and system for automatic configuration management of a cellular internet of things card life cycle

Abstract

The application provides a kind of cellular internet of things card life cycle automatic configuration management method and system, belongs to cellular mobile internet of things communication technical field.The method is by collecting initial service state and identifying target service stage, call corresponding initial subscription data, parse and generate target subscription data carrying communication control identifier;Constrained verification is carried out in combination with historical network perception record, access permission is generated according to test stage threshold, and the instruction reconstruction is carried out on network connection establishment process, the accurate control of network permission is realized, the target protocol activation instruction is updated according to the target protocol, and the communication state charging linkage mechanism is established.The application can automatically limit or open network permission according to the actual stage of card compared with the traditional way, and prevent illegal access through historical behavior verification, realize speed limiting and fee adjusting real-time cooperation, improve resource utilization efficiency, safety and charging accuracy, meet the demand of automatic closed loop management of massive cellular internet of things card.

Description

Technical Field

[0001] This invention belongs to the field of cellular mobile Internet of Things (IoT) communication technology, specifically a method and system for automated configuration management of the lifecycle of a cellular IoT card. Background Technology

[0002] With the widespread adoption of cellular IoT cards by a large number of smart devices such as shared bicycles, smart meters, and vehicle-to-everything (V2X) terminals, efficient management of these cards' lifecycles has become crucial for ensuring stable business operations. A cellular IoT card goes through different business stages, including factory testing, normal use, and account cancellation. Each stage has significantly different network access requirements. For example, during the testing phase, only internal verification platforms should be connected, while during the commercial phase, all network capabilities need to be opened. However, current management methods suffer from a disconnect between business status and core network control, and billing rules cannot be linked in real time with communication status. Network devices cannot automatically detect whether a cellular IoT card is currently in the testing or commercial phase, resulting in subscription data such as allowed access points and service quality levels remaining fixed for a long time. When a card initiates a network connection during the testing phase, the cellular mobile IoT system still establishes a complete data channel based on the subscription data of a commercial user, unexpectedly gaining access to external business platforms, wasting network resources and introducing the risk of unauthorized access. When a cellular IoT card is speed-limited due to excessive data usage or network anomalies, the billing system often delays response or even fails to adjust rates, resulting in inaccurate billing and affecting the interests of both operators and customers.

[0003] The information disclosed in the background section is only for enhancing the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0004] In view of this, this disclosure provides an automated configuration management method and system for the lifecycle of a cellular IoT card, which adjusts the subscription data and network permissions by sensing the service stage and establishes a communication status billing linkage mechanism to achieve closed-loop management and control throughout the entire lifecycle.

[0005] In a first aspect, embodiments of this application provide an automated configuration management method and system for the lifecycle of a cellular IoT card. The method includes: collecting the initial service state of the cellular IoT card's connection lifecycle and obtaining a pre-set user data storage node and initial network element node in the cellular mobile IoT; classifying the initial service state by features to obtain the target service stage corresponding to the cellular IoT card; retrieving initial subscription data corresponding to the target service stage from the user data storage node, parsing the initial subscription data to obtain target subscription data; obtaining historical network sensing records corresponding to the target subscription data, verifying the target subscription data using the historical network sensing records to obtain verified subscription data; comparing the verified subscription data with a preset lifecycle test stage threshold to obtain a comparison result, and generating access permissions based on the comparison result; performing instruction reconstruction processing on the network connection establishment process initiated by the cellular IoT card according to the access permissions to obtain a target protocol activation instruction; updating the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; and establishing a communication status billing linkage mechanism by issuing entries according to the billing rules in the target network element node.

[0006] Secondly, embodiments of this application provide an automated configuration management system for the lifecycle of a cellular IoT SIM card. This system may include an initial information collection module, a service stage classification module, a subscription data processing module, a state constraint verification module, a permission generation module, an instruction reconstruction module, a network element configuration update module, and a billing linkage establishment module. Specifically, the initial information collection module collects the initial service status of the cellular IoT SIM card's connection lifecycle and obtains pre-set user data storage nodes and initial network element nodes in the cellular mobile IoT; the service stage classification module classifies the initial service status by features to obtain the target service stage corresponding to the cellular IoT SIM card; the subscription data processing module retrieves the initial subscription data corresponding to the target service stage from the user data storage node, parses and processes the initial subscription data to obtain target subscription data; and the state constraint verification module obtains historical network sensing records corresponding to the target subscription data and verifies the historical network sensing records. The system performs state constraint verification on the target subscription data to obtain verified subscription data; an access permission generation module compares the verified subscription data with a preset lifecycle testing phase threshold and generates access permissions based on the comparison result; an instruction reconstruction module reconstructs the network connection establishment process initiated by the cellular IoT card according to the access permissions to obtain a target protocol activation instruction; a network element configuration update module updates the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; and a billing linkage establishment module establishes a communication status billing linkage mechanism by issuing entries according to the billing rules in the target network element node.

[0007] This application provides an automated configuration management method and system for the lifecycle of cellular IoT cards. By collecting initial service status and identifying target service stages, it dynamically retrieves corresponding subscription data from user data storage nodes, verifies state constraints using historical network awareness records, and generates access permissions matching the stage. Furthermore, it reconstructs the packet data protocol context activation process based on permissions and updates core network element nodes using flow template filtering items and tunnel endpoint configuration parameters, ultimately establishing a linkage mechanism between communication status and billing rules. Compared to traditional methods that suffer from service and network disconnect, uncontrolled access permissions due to fixed subscription data, and delayed billing responses, this invention can automatically restrict or open network permissions based on the actual stage of the card, prevent unauthorized access through historical behavior verification, and achieve real-time coordination of rate limiting and billing adjustments. This effectively improves resource utilization efficiency, security, and billing accuracy, meeting the automated closed-loop management needs of massive numbers of cellular IoT cards. Attached Figure Description

[0008] To more clearly illustrate the technical solutions in the embodiments or conventional technologies of this disclosure, the accompanying drawings used in the description of the embodiments or conventional technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0009] Figure 1 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in an exemplary embodiment of this application.

[0010] Figure 2 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0011] Figure 3 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0012] Figure 4 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0013] Figure 5 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0014] Figure 6 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0015] Figure 7 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application.

[0016] Figure 8 This is a flowchart illustrating an automated configuration management method and system for the lifecycle of a cellular IoT card, provided in another exemplary embodiment of this application. Detailed Implementation

[0017] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are set forth to give a full understanding of embodiments of this disclosure.

[0018] The terms “a,” “one,” and “the” are used to indicate the existence of one or more elements / components / etc.; the terms “including” and “having” are used to indicate an open-ended inclusion and that other elements / components / etc. may exist in addition to those listed. The terms “first” and “second” are used only as markers and are not a limitation on the number of objects.

[0019] Existing cellular IoT card management suffers from issues such as disconnect between service status and core network control, and delayed billing linkage. Furthermore, cellular mobile IoT cannot perceive the actual stage of the card, leading to the solidification of contracted data. During the testing period, cellular IoT cards may unexpectedly gain external access, and billing response may be delayed after rate limiting. This results in resource waste and security risks, while also affecting the interests of both parties.

[0020] It should be noted that traditional cellular IoT card management methods suffer from a disconnect between service status and core network control. The network side cannot perceive the actual stage of the cellular IoT card, resulting in the solidification of contracted data and loss of access control. Furthermore, billing rules cannot be linked in real time with communication status, causing delays in rate limiting and billing adjustments, which affects resource utilization efficiency and billing accuracy.

[0021] Therefore, to address the aforementioned issues of network fragmentation and delayed billing linkage, this invention first collects the initial service status and identifies the target service stage through steps S110-S180, retrieves the corresponding subscription data, and parses and generates target subscription data carrying a communication control identifier; then, it performs state constraint verification by combining historical network perception records, and generates access permissions based on preset lifecycle test stage thresholds; finally, it reconstructs the packet data protocol context activation instruction according to the permissions, updates the core network element nodes, and establishes a communication status billing linkage mechanism to achieve automated closed-loop management of the entire lifecycle of IoT cards.

[0022] This disclosure provides an automated configuration management method and system for the lifecycle of a cellular IoT SIM card, such as... Figure 1 This invention discloses an automated configuration management method and system for the lifecycle of a cellular IoT SIM card. The method may include the following steps: Step S110: Collect the initial service status of the cellular IoT card connection lifecycle, and obtain the pre-set user data storage node and initial network element node in the cellular mobile IoT; Step S120: Perform feature classification on the initial service state to obtain the target service stage corresponding to the cellular IoT card; Step S130: Retrieve the initial contract data corresponding to the target business stage from the user data storage node, parse the initial contract data, and obtain the target contract data; Step S140: Obtain the historical network perception record corresponding to the target contract data, and perform state constraint verification on the target contract data through the historical network perception record to obtain the verified contract data; Step S150: Compare the verified contract data with a preset lifecycle testing phase threshold to obtain a comparison result, and generate access permissions based on the comparison result; Step S160: Based on the access permissions, perform instruction reconstruction processing on the network connection establishment process initiated by the cellular IoT card to obtain the target protocol activation instruction; Step S170: Update the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; Step S180: Issue entries according to the billing rules in the target network element node to establish a communication status billing linkage mechanism.

[0023] According to the automated configuration management method and system for the lifecycle of a cellular IoT card provided in this disclosure, the method can obtain the corresponding target service stage by collecting the initial service status of the cellular IoT card connection lifecycle and classifying its features; retrieve and parse the initial subscription data from the user data storage node according to the target service stage to generate target subscription data carrying communication control identifiers; verify the target subscription data by combining historical network sensing records to verify the subscription data, and compare it with the preset lifecycle test stage threshold to generate access permissions; then reconstruct the network connection establishment process according to the access permissions to obtain the target protocol activation command, and update the core network element node according to the flow template filtering item and tunnel endpoint configuration parameters in the command; issue entries according to the billing rules in the updated target network element node to establish a communication status billing linkage mechanism, thereby realizing automated closed-loop management of the entire lifecycle of the IoT card.

[0024] In the above method, the initial service status is collected and the target service stage is identified. The corresponding initial subscription data is retrieved, and target subscription data carrying communication control identifiers is generated through parsing. Constraint verification is performed using historical network perception records. Access permissions are generated based on test stage thresholds, and the network connection establishment process is reconstructed to achieve precise control of network permissions. Target network element nodes are updated according to the target protocol activation instructions, and a communication status billing linkage mechanism is established. Compared to traditional methods, this invention can automatically restrict or open network permissions based on the actual stage of the card, and prevent unauthorized access through historical behavior verification. It achieves real-time coordination between rate limiting and billing adjustment, improving resource utilization efficiency, security, and billing accuracy, and meeting the automated closed-loop management needs of massive cellular IoT cards.

[0025] The following provides a detailed description of each step in the automated configuration management method and system for the lifecycle of a cellular IoT card, as provided in this disclosure: In the embodiments of this disclosure, step S110, which involves collecting the initial service status of the cellular IoT card connection lifecycle and obtaining the pre-set user data storage node and initial network element node in the cellular mobile IoT, also includes the following steps, the details of which are as follows: Specifically, the communication records of cellular IoT cards are periodically captured through the core gateway interface of cellular mobile IoT. The cumulative data consumption and signaling interaction frequency of the past 7 days are extracted from the communication records. The cumulative data consumption and signaling interaction frequency are combined to form the initial service status. At the same time, the pre-set user data storage node address and initial network element node identifier are read from the configuration information of cellular mobile IoT. For example, if the communication records of a certain cellular IoT card over the past 7 days are captured, the cumulative data consumption is 200 bytes and the signaling interaction frequency is 15 times per day. Read the pre-set user data storage nodes in the cellular mobile IoT, such as the UDM node corresponding to 192.168.1.100, and the initial network element nodes such as UPF-01.

[0026] In the embodiments of this disclosure, step S120, which involves performing feature classification on the initial service state to obtain the target service stage corresponding to the cellular IoT card, further includes the following steps: Figure 2 As shown, the specific content is as follows: Step S210: Extract multi-dimensional feature values ​​from the initial business state; Step S220: Perform feature classification processing on the multi-dimensional feature values ​​using a multi-dimensional feature classification algorithm to obtain a multi-dimensional classification set; Step S230: Remove the abnormal feature values ​​from the multidimensional classification set to obtain the standard classification set; Step S240: Use the decision tree algorithm to process the standard classification set and determine the corresponding target state value; Step S250: Divide the service stages according to the target state value to obtain the target service stage corresponding to the cellular IoT card.

[0027] Specifically, multi-dimensional feature values ​​are extracted from the initial business state. For example, based on the collected cumulative traffic consumption of 200 bytes and the signaling interaction frequency of 15 times per day, other dimensional feature values ​​such as business type and average connection duration are supplemented. In the current scenario of this embodiment, these do not participate in the core judgment and are uniformly set to the default value of 0. A state feature vector containing 5 dimensions is constructed, denoted as... The cumulative data consumption Signaling interaction frequency , ; Collect a large number of historical communication samples from cellular IoT cards, each containing a state feature vector. And business stage labels, such as testing period, normal use period, etc., are used as inputs for state feature vectors and as outputs for business stage labels. The training includes A random forest multidimensional feature classification algorithm model with 10 decision trees, where the maximum depth of each decision tree is set to 10. During training, each decision tree selects the optimal splitting feature and threshold by calculating the Gini coefficient on a randomly sampled subset, thus obtaining a trained random forest multidimensional feature classification algorithm model. State feature vector Input a random forest multidimensional feature classification algorithm model, and each decision tree outputs a classification result independently. By summarizing all classification results, a multidimensional classification set is obtained. For example, 95 decision trees output abnormal consumption, and 5 decision trees output normal consumption; The anomaly detection mechanism of the random forest multidimensional feature classification algorithm model identifies anomalies caused by accumulated traffic consumption. Bytes and signaling interaction frequency Every time per day, determine that the current output is abnormal consumption and remove it from the multidimensional classification set. The output is the category of normal consumption, resulting in the standard classification set. If the results of removing 5 decision trees whose output is of normal consumption are removed, only 95 decision trees whose output is of abnormal consumption are retained in the standard classification set. Collect a large number of historical communication records from IoT cards, with each record containing the cumulative data traffic consumed. Signaling interaction frequency And manually labeled business status values ​​such as testing period and normal use period; standard classification sets As input, a single decision tree algorithm is used to train and determine the data based on historical communication records, in order to accumulate the traffic consumption. Signaling interaction frequency As a splitting feature, training result statistics byte and The output is per day, with internal nodes representing feature comparison conditions and leaf nodes representing state values. The decision tree starts judging from the root node, checking whether the cumulative traffic consumption is sufficient. If the byte is true, proceed to the left branch; then check if the signaling interaction frequency is... If true, proceed to the leaf node and output the target state value. ; target state value Mapped to target business stage In the billing system, the tariff policy for cellular IoT cards will be switched from the default suspension of service to a free trial period package, completing a seamless transition throughout the lifecycle.

[0028] By following the steps above, the current business stage of the IoT card, such as the testing period or normal use period, can be accurately identified from the initial business status, providing a basis for retrieving matching initial contract data later.

[0029] In the embodiments of this disclosure, step S130, which involves retrieving the initial contract data corresponding to the target service stage from the user data storage node, parsing the initial contract data to obtain the target contract data, further includes the following steps: Figure 3 As shown, the specific content is as follows: Step S310: Based on the target service stage, locate the user data storage node to obtain the target node location; Step S320: Retrieve initial contract data from the user data storage node based on the target node location; Step S330: Use a data parsing algorithm to parse the initial contract data and extract the bearer identifier binding relationship; Step S340: Extract the communication control identifier from the bearer identifier binding relationship, and generate target subscription data based on the communication control identifier.

[0030] Specifically, let the target service phase identified in step S120 be the testing phase, and let the user equipment identifier of the cellular IoT card be denoted as... For example, 460001234567890; based on the target business stage, the consistent hash routing algorithm is triggered to locate the user data storage node and calculate the hash value. ,in This represents string concatenation. A cluster consisting of multiple user data storage nodes is called a distributed user data storage cluster. Let the total number of physical nodes in the distributed user data storage cluster be . Then the target node position The target node location P is obtained through modulo operation. A structured query command is sent to the located target node location P. The structured query command reads the initial contract data corresponding to the test period. The initial contract data includes the access point name parameter and the service quality level identifier. The initial subscription data is subjected to a deep traversal and parsing using a data parsing algorithm. In this embodiment, an abstract syntax tree-based data parsing algorithm is used to segment the initial subscription data into independent token units through a lexical analyzer and extract the International Mobile Subscriber Identity (IMSI). and original access point name parameter The hash mapping algorithm is used to analyze the correlation between the independent tag units and identify the default bearer identifier. With dedicated bearer identifier There is a strong binding mapping between them, and the traffic scheduling priority difference between the default bearer identifier and the dedicated bearer identifier is significant. The value is 2, thus obtaining the bearer identifier binding relationship. ; Based on the extracted bearer identifier binding relationship The decision tree algorithm is used for classification to extract the communication control code and generate a communication control identifier, which includes a service quality level identifier. Uplink aggregation maximum bit rate Mbps, downlink aggregated maximum bit rate Mbps, etc., inject the communication control identifier into the preset structured template to generate target subscription data carrying the communication control identifier. The preset structured template is a predefined subscription data format specification for cellular mobile IoT.

[0031] Through the above steps, user data storage nodes can be accurately located according to the target business stage, initial contract data can be retrieved, and target contract data containing communication control identifiers can be generated after parsing and binding relationship extraction, providing a data foundation for subsequent status verification and permission generation.

[0032] In the embodiments of this disclosure, step S140, which involves obtaining historical network sensing records corresponding to the target contract data and performing state constraint verification on the target contract data using the historical network sensing records to obtain verified contract data, further includes the following steps: Figure 4 As shown, the specific content is as follows: Step S410: Obtain the historical network perception record corresponding to the target subscription data. The historical network perception record includes signaling interaction trajectory, access frequency curve, stationed cell record, roaming handover path and authentication failure count. Step S420: Perform anomaly detection on the signaling interaction trajectory and the access frequency curve to obtain anomaly detection results; Step S430: Based on the anomaly detection results, and in conjunction with the cell records, roaming handover paths, and authentication failure counts, construct constraint terms; Step S440: Perform state constraint verification on the target contract data using the constraint terms to obtain verified contract data.

[0033] Specifically, it is recorded using the cellular IoT card user equipment identifier as For example, historical network sensing records from the past 30 days can be extracted from the core network database of cellular mobile IoT, including signaling interaction trajectories. Record the time series of daily attach requests, such as periodic attach requests occurring between 2:00 AM and 4:00 AM daily; access frequency curve. Record the number of daily accesses, such as an average of 15 accesses per day, but reaching 150 accesses on a certain day; record the number of times the user stays in a particular cell. Record the cell identifier for each access, such as the cell ID sequence. Furthermore, the three communities are geographically more than 500 kilometers apart; roaming route switching. Record the handover order between cells, such as Authentication failure count Record the number of key verification rejections, such as 12 consecutive failures within two hours; The Isolation Forest algorithm is used to analyze the signaling interaction trajectory. and access frequency curve Anomaly detection is performed. Assume the isolated forest contains T isolated trees. Randomly select m sample points as a subset. Randomly select a feature dimension and within its value range, randomly select a split value. Divide the sample points into left and right child nodes based on whether the feature value is less than the split value. Recursively split until each leaf node contains only one sample point or the maximum height of the isolated tree is reached. For signaling interaction trajectories... For each time point t, calculate the anomaly score.

[0034]

[0035] in, For abnormal scores, Let t be the average path length across all trees. For the sample size The average path length adjustment factor at that time; Based on statistical analysis experience of a large amount of historical IoT card signaling data, a preset anomaly score threshold is obtained. In this embodiment, it is set to 0.7. The time frame was identified as abnormal, and an anomaly detection result was obtained; the detection found that the periodic attach requests between 2:00 AM and 4:00 AM had an anomaly score of [missing information]. The access frequency curve showed an abnormal score when it reached 150 times on a single day. All were determined to be abnormal, and the abnormal detection results were marked as high-frequency access warnings; Based on the anomaly detection results, further analysis of the residency cell records and roaming handover paths was conducted to construct a directed graph. Where node C is the cell identifier and edge E is the handover direction, such as By calculating from the cell Transferred to Number of switching and The proportion yields the spatial transition probability For example, statistics on people from the community in the past 30 days The total number of handovers was 1000, of which direct handovers to the cell occurred. If the number of times is 30, then However, the distance between the three small intervals exceeds 500 kilometers, increasing the probability of spatial transfer. 3% of these movements do not conform to physical movement patterns and are therefore classified as false movement trajectories, in conjunction with the authentication failure count. Construct constraint terms ; A decision tree model is trained using a large number of historical network perception records with labeled risk categories as decision tree samples. Each decision tree sample contains input features such as signaling interaction trajectories, access frequency curves, cell records, roaming handover paths, and authentication failure counts, as well as corresponding risk category labels, such as illegal copying and normal. Through recursive splitting, a rule for determining risk categories from constraints is learned, and the constraint terms... Input a pre-trained decision tree model and output a risk category, such as determining that the target contract data is at risk of being illegally copied; Modify the network access permission field in the target contract data according to the risk category, remove the configuration that allows cross-provincial roaming while retaining the local basic communication permissions, and at the same time, adjust the roaming permission flag in the target contract data. By setting the value from 1 to 0, terminals with excessively high authentication failure counts are added to the blacklist for monitoring, resulting in corrected verification and signing data.

[0036] By using the above steps, historical network sensing records are used to constrain and verify the target contract data, effectively identifying illegal copying or abnormal behavior, and improving security and robustness.

[0037] In the embodiments of this disclosure, step S150, which compares the verified contract data with a preset lifecycle testing phase threshold to obtain a comparison result and generates access permissions based on the comparison result, further includes the following steps: Figure 5 As shown, the specific content is as follows: Step S510: Extract the corresponding communication control identifier from the verification contract data; Step S520: Obtain the used test traffic in the communication control identifier, compare the used test traffic with the preset lifecycle test phase threshold, and obtain the comparison result; Step S530: When the comparison result is true, obtain the network sensing characteristics of the cellular IoT card, and generate restricted access permissions based on the network sensing characteristics; Step S540: When the comparison result is false, obtain the service rate distribution of the historical communication cycle of the cellular IoT card, and generate full access permissions based on the service rate distribution; Step S550: Use the restricted access permission and full access permission as access permissions.

[0038] Specifically, based on the obtained verification contract data, which already carries the Communication Control Identifier (CCI) and includes a test traffic field, the verification contract data is valid. Service quality rating label Uplink aggregation maximum bit rate and downlink aggregation maximum bit rate Read the used test traffic from the Communication Control Identifier (CCI). ,like Megabytes, the lifecycle testing phase threshold is preset based on the test period data limit defined in the service package bound to the cellular mobile IoT card when it is activated. ,like Megabytes, obtain the comparison result, where the comparison result is... If the comparison result is true, the restricted access permission evaluation and generation process is triggered; if the comparison result is true... If the comparison result is false, the full access permission generation process is triggered. When the comparison result is true, network sensing features are acquired, including the signal strength waveform of the cellular IoT card. Abnormal disconnection node set in the network topology of cellular mobile IoT Extract the received signal strength indication data sequence of the cellular IoT card over the past 12 hours. RSSI values ​​were collected every 10 minutes, resulting in 72 discrete time points. A Fast Fourier Transform was performed on the received signal strength indication data sequence to obtain the frequency domain amplitude spectrum. The average amplitude at all frequency points was calculated, and the amplitude variance was determined. In this embodiment, we select Traverse the current network topology and use a graph convolutional neural network to calculate the historical downtime probability of each base station node. Based on network operation and maintenance experience, the probability of a normal base station node going offline is typically less than 10%, while the probability of an abnormal base station node going offline is typically higher than 15%. Therefore, a threshold of 0.15 is set for the probability of offline. Nodes that are marked as abnormally disconnected are used to form a set of abnormally disconnected nodes. ; Amplitude variance The distance to the abnormally disconnected node, such as 5.6 kilometers, is used as an input feature and fed into a pre-trained random forest regression model. The random forest regression model is trained using a large number of historical IoT card samples. Each sample includes amplitude variance, the distance to the abnormally disconnected node, and a network risk score (0-100) assigned by experts. During training, multiple decision trees are constructed through sampling with replacement. Each decision tree randomly selects some features for splitting. Finally, the prediction results of all decision trees are integrated to output the risk score. In this embodiment, the risk score is output via the random forest regression model. If the risk threshold is exceeded, restricted access will be generated. The preset risk threshold is set in advance based on network operation and maintenance experience. In this embodiment, 70 can be selected. For example, the downlink transmission rate can be limited to 128.0 kilobits per second, and the access control list can be modified to block access to the core database network segment of the cellular mobile Internet of Things. When the comparison result is false, obtain the service rate distribution of the historical communication cycle of the cellular IoT card in the past 30 days, use Gaussian mixture model cluster analysis to obtain the duration ratio of low-speed heartbeat packets and high-speed firmware upgrades, generate full access permissions based on the duration ratio, such as opening all basic communication ports, setting the basic bandwidth speed limit to 100kbps, and configuring a 2.5Mbps burst transmission channel once a month for two hours each time. The generated restricted access permissions or full access permissions are collectively referred to as access permissions.

[0039] By following the steps above, and based on the comparison between the used test traffic and the preset threshold, restricted or full access permissions are dynamically selected, thereby achieving fine-grained control over IoT card network access.

[0040] In the embodiments of this disclosure, step S160, based on the access permissions, performs instruction reconstruction processing on the network connection establishment process initiated by the cellular IoT card to obtain a target protocol activation instruction, and further includes the following steps, such as... Figure 6 As shown, the specific content is as follows: Step S610: Obtain the activation request for the network connection establishment process initiated by the cellular IoT card; Step S620: Determine the access point name parameter according to the access permission, and inject the access point name parameter into the activation request to obtain the injected name parameter; Step S630: Allocate an Internet Protocol address according to the injected name parameter to obtain the allocated address information; Step S640: Select the target gateway anchor point according to the allocated address information; Step S650: Encapsulate the injected name parameter, allocated address information and target gateway anchor point into an instruction to obtain the target protocol activation instruction.

[0041] Specifically, taking the generated restricted access permissions as an example, when the user equipment identifier of the cellular IoT card is denoted as... When a Packet Data Protocol (PDP) context activation request is initiated, the core network control plane of the cellular mobile IoT receives the PDP context activation request message. The Packet Data Protocol Context Activation Request message contains the original Access Point Name parameter. Information such as user identifiers, based on the obtained restricted access permissions. The corresponding access point name parameter is determined to be a restricted private access point name. The original access point name parameter in the original activation request Replace with Received injection activation request The injection name parameter is ; For restricted access permissions, use a restricted address pool. The restricted address range is The address allocation module uses a subnet mask bitwise AND algorithm to calculate the offset of the currently available addresses. For example, if the number of currently allocated addresses is... The offset of the newly allocated address The assigned Internet Protocol address is If ,but , recorded as the allocation address information ; Based on the allocated address information The address pool attributes determine the set of candidate gateway nodes. A weighted round-robin scheduling algorithm is used to extract the CPU utilization rate of each candidate gateway node. Calculate weights After normalization, the candidate gateway node with the highest weight is selected as the target gateway anchor point. If , , ,but After normalization Maximum, select candidate gateway node As the target gateway anchor point, the corresponding route identifier is denoted as ; The obtained injection name parameter Address allocation information and the routing identifier of the target gateway anchor point The commands are combined and encrypted using Advanced Encryption Standard (AES) algorithms to generate the target protocol activation command. The command is then sent to the core network equipment for execution.

[0042] Through the above steps, based on different access permissions such as restricted access and full access, key parameters in the network connection establishment process, such as injected name parameters, allocated address information, and target gateway anchor points, are reconstructed to generate target protocol activation instructions adapted to the current business stage, thereby achieving fine-grained access control.

[0043] In the embodiments of this disclosure, step S170, which involves updating the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node, further includes the following steps: Figure 7 As shown, the specific content is as follows: Step S710: Extract network element configuration parameters from the target protocol activation instruction; Step S720: Update the configuration of the initial network element node according to the network element configuration parameters to obtain the target network element node.

[0044] Specifically, based on the obtained target agreement incentive instructions Extract network element configuration parameters Network element configuration parameters include flow template filtering items. and tunnel endpoint configuration parameters Among them, the stream template filtering item Limiting the characteristics of allowed data flows, such as source Internet Protocol address Only tunnels with port 192.168.1.100 and destination port number DstPort=8080 are allowed to pass; tunnel endpoint configuration parameters Includes tunnel endpoint identifier TEID=65535 and service quality level parameters ; Extracted network element configuration parameters Configuration file encapsulated in Extensible Markup Language format It is sent to the initial network element node on the core network side of the cellular mobile IoT through a secure encrypted channel, such as the user plane function node. The current configuration version number of the user face feature node is Upon receiving the configuration file, the incremental update algorithm is initiated, and the new configuration version number is compared. The required amount of difference data to be updated is calculated to be Δ = 1024 bytes, and this difference data is directly written into the underlying hardware's memory register. After the write is complete, a cyclic redundancy check algorithm is immediately executed to perform an integrity scan of the updated region and calculate the checksum. ,as follows:

[0045] According to the standard definition of the CRC32 algorithm, the calculation result should be 0xFFFFFFFF when the data is correct. If... If the value is 4294967295, the verification is considered successful, and the flag bit of the status control register is toggled from 0 to 1, indicating that the initial network element node has been successfully reconstructed into the updated target network element node. The routing table inside the target network element node has taken effect, and tunnel forwarding processing has begun for service flows that meet the characteristics of the flow template filtering item at a throughput rate of 10,000 data packets per second.

[0046] Through the above steps, the target network element node is updated with refined and adaptive configuration based on the network element configuration parameters in the target protocol activation instruction, ensuring that the access control policy that the cellular mobile IoT can execute and generate is implemented.

[0047] In the embodiments of this disclosure, step S180, which involves issuing entries based on the billing rules in the target network element node to establish a communication status billing linkage mechanism, further includes the following steps: Figure 8 As shown, the specific content is as follows: Step S810: Obtain the billing rule distribution entry from the target network element node. The billing rule distribution entry includes a traffic threshold and a monitoring period. Step S820: Count the amount of communication data of the cellular IoT card during the monitoring period to obtain the total amount of communication data; Step S830: When the amount of statistical communication data reaches a preset proportion of the traffic threshold, a status change signaling is generated; Step S840: Establish a communication status billing linkage mechanism based on the status change signaling.

[0048] Specifically, based on the obtained target network element nodes The policy control node sends billing rules and entries to the session management node. The billing rules include traffic thresholds. Megabytes, monitoring cycle Hour; The session management node initiates its built-in sliding window statistical algorithm, using time steps. The cumulative communication data volume generated by the cellular IoT card at the user interface node is counted in real time, measured in minutes. Let the cumulative communication data volume counted at the current moment be... For example, statistics were obtained 20 hours after the start of the monitoring period. megabytes; The preset ratio is denoted as Calculate the trigger threshold megabytes, when At this time, the internal comparator outputs a high-level signal, triggering the state change signaling. In this embodiment Megabytes, consistent with a preset ratio of the traffic threshold, trigger the generation of a state change signaling; The billing gateway received a status change signaling. Then, the status control interface is invoked to send a status change request to the home location register, switching the communication mode of the cellular IoT card from high-speed transmission mode to rate-limited mode, with the rate limit value set to [value missing]. At kilobits per second, the billing system synchronously receives the status change confirmation message and initiates the tiered billing rate adjustment procedure: the billing unit price for subsequent traffic is adjusted from... Yuan / megabyte adjusted to Yuan / megabyte, establish a communication status billing linkage mechanism, denoted as .

[0049] Through the above steps, entries are issued according to the billing rules in the target network element node to monitor the amount of communication data in real time. When the preset ratio is reached, the rate is limited and the rate is adjusted to achieve real-time linkage between the communication status and billing of the cellular IoT card.

[0050] In the above method, all status awareness, subscription data retrieval, permission generation, instruction reconstruction, and billing linkage operations are executed by the system, avoiding manual intervention and configuration errors. The updated target network element nodes and billing rules are used in real time for subsequent IoT card activation and traffic monitoring, forming a feedback loop between service status and network control. This not only improves the automation level of the entire lifecycle management of cellular IoT cards, but also provides reliable technical support for network resource optimization, security management, and accurate billing.

[0051] This disclosure also provides an automated configuration management system for the lifecycle of a cellular IoT SIM card. This system may include an initial information collection module, a service stage classification module, a subscription data processing module, a state constraint verification module, a permission generation module, an instruction reconstruction module, a network element configuration update module, and a billing linkage establishment module. Specifically, the initial information collection module collects the initial service status of the cellular IoT SIM card's connection lifecycle and obtains the pre-set user data storage node and initial network element node in the cellular mobile IoT; the service stage classification module classifies the initial service status by features to obtain the target service stage corresponding to the cellular IoT SIM card; the subscription data processing module retrieves the initial subscription data corresponding to the target service stage from the user data storage node, parses and processes the initial subscription data to obtain the target subscription data; and the state constraint verification module obtains the historical network sensing records corresponding to the target subscription data and verifies the historical network sensing records. The system performs state constraint verification on the target subscription data to obtain verified subscription data; an access permission generation module compares the verified subscription data with a preset lifecycle testing phase threshold and generates access permissions based on the comparison result; an instruction reconstruction module reconstructs the network connection establishment process initiated by the cellular IoT card according to the access permissions to obtain a target protocol activation instruction; a network element configuration update module updates the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; and a billing linkage establishment module establishes a communication status billing linkage mechanism by issuing entries according to the billing rules in the target network element node.

[0052] It should be noted that the embodiment of the automated configuration management system for the lifecycle of a cellular IoT card provided in this application can be used to execute the processing flow of the embodiment of the automated configuration management method and system for the lifecycle of a cellular IoT card described above. Its functions will not be repeated here, but can be referred to the detailed description of the above method embodiment.

[0053] As described above, the automated configuration management system for the lifecycle of a cellular IoT card provided in this disclosure collects the initial service status and identifies the target service stage, retrieves the corresponding initial subscription data, and parses and generates target subscription data carrying a communication control identifier. It performs constraint verification based on historical network perception records, generates access permissions according to test stage thresholds, and reconstructs instructions for the network connection establishment process to achieve precise control of network permissions. It also updates the target network element node according to the target protocol activation instruction and establishes a communication status billing linkage mechanism. Compared to traditional methods, this invention can automatically restrict or open network permissions based on the actual stage of the card, prevent unauthorized access through historical behavior verification, achieve real-time coordination of rate limiting and billing adjustment, improve resource utilization efficiency, security, and billing accuracy, and meet the automated closed-loop management needs of massive cellular IoT cards.

[0054] This disclosure also provides an electronic device including one or more processors and memory resources represented by a memory for storing instructions executable by the processor, such as application programs. The application programs stored in the memory may include one or more modules, each corresponding to a set of instructions. Furthermore, the processor is configured to execute instructions to perform the aforementioned automated configuration management method and system for the lifecycle of a cellular IoT card.

[0055] The electronic device may also include a power supply component configured to perform power management of the electronic device, a wired or wireless network interface configured to connect the electronic device to a network, and an input / output (I / O) interface. The electronic device can be operated based on operating devices stored in memory, such as Windows Server™, MacOSX™, Unix™, Linux™, FreeBSD™, or similar.

[0056] In one embodiment, a computer device, which may be a server, is also provided. The computer device includes a processor, memory, input / output interfaces (I / O), and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is connected to the system bus via the I / O interfaces. The processor of the computer device provides computing and control capabilities. The memory of the computer device includes non-volatile storage media and internal memory. The non-volatile storage media stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The database of the computer device stores data. The I / O interfaces of the computer device are used for exchanging information between the processor and external devices. The communication interface of the computer device is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements an automated configuration management method and system for the lifecycle of a cellular IoT card.

[0057] In one embodiment, a computer device is provided, which may be a terminal. The computer device includes a processor, memory, input / output interfaces, a communication interface, a display unit, and an input device. The processor, memory, and input / output interfaces are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interfaces. The processor of the computer device provides computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The input / output interfaces of the computer device are used for exchanging information between the processor and external devices. The communication interface of the computer device is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements an automated configuration management method and system for the lifecycle of a cellular IoT card. The display unit of the computer device is used to form a visually visible image and may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.

[0058] This disclosure also provides a non-transitory computer-readable storage medium. When the instructions in the storage medium are executed by the processor of the electronic device, the electronic device is able to execute an automated configuration management method and system for the lifecycle of a cellular IoT card, including: collecting the initial service status of the cellular IoT card connection lifecycle, and obtaining a pre-set user data storage node and initial network element node in the cellular mobile IoT; classifying the initial service status by features to obtain the target service stage corresponding to the cellular IoT card; retrieving the initial subscription data corresponding to the target service stage from the user data storage node, and parsing the initial subscription data to obtain the target subscription data. The process involves: acquiring target subscription data; obtaining historical network sensing records corresponding to the target subscription data; verifying the target subscription data against state constraints using these historical network sensing records to obtain verified subscription data; comparing the verified subscription data with a preset lifecycle testing phase threshold to obtain a comparison result; generating access permissions based on the comparison result; refactoring the network connection establishment process initiated by the cellular IoT card according to the access permissions to obtain a target protocol activation instruction; updating the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; and establishing a communication status billing linkage mechanism by issuing entries based on the billing rules in the target network element node.

[0059] This disclosure can take the form of a computer program product implemented on one or more storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing program code. Computer-readable storage media include permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to: phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device.

[0060] It should be noted that although the steps of the automated configuration management method and system for the lifecycle of a cellular IoT card in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that these steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps, such as omitting certain steps, combining multiple steps into one step, and / or breaking down a step into multiple steps, should all be considered part of this disclosure.

[0061] It should be understood that this disclosure is not limited to the detailed structure and arrangement of modules in an automated configuration management system for the lifecycle of a cellular IoT card as presented in this specification. This disclosure can have other implementations and can be implemented and performed in various ways. The foregoing variations and modifications fall within the scope of this disclosure. It should be understood that this disclosure, as disclosed and defined in this specification, extends to all alternative combinations of two or more individual features mentioned or apparent in the text and / or drawings. All these different combinations constitute multiple alternative aspects of this disclosure. The embodiments described in this specification illustrate the best known mode for implementing this disclosure and will enable those skilled in the art to utilize this disclosure.

Claims

1. A method for automated configuration management of a cellular IoT card life cycle, characterized in that, The method includes: Collect the initial service status of the cellular IoT card connection lifecycle, and obtain the pre-set user data storage nodes and initial network element nodes in the cellular mobile IoT; The initial service state is classified by features to obtain the target service stage corresponding to the cellular IoT card; Retrieve the initial contract data corresponding to the target business stage from the user data storage node, and parse the initial contract data to obtain the target contract data; Obtain historical network perception records corresponding to the target signing data, and verify the state constraints of the target signing data through the historical network perception records to obtain verified signing data. The verified contract data is compared with a preset lifecycle testing phase threshold to obtain a comparison result, and access permissions are generated based on the comparison result. Based on the access permissions, the network connection establishment process initiated by the cellular IoT card is refactored to obtain the target protocol activation instruction; The initial network element node is configured and updated according to the target protocol activation instruction to obtain the target network element node; Based on the billing rules in the target network element node, an entry is issued to establish a communication status billing linkage mechanism.

2. The method of claim 1, wherein the method further comprises: The initial service state is classified by features to obtain the target service stage corresponding to the cellular IoT card, including: Extract multi-dimensional feature values ​​from the initial business state; The multidimensional feature values ​​are classified using a multidimensional feature classification algorithm to obtain a multidimensional classification set. By removing outlier feature values ​​from the multidimensional classification set, a standard classification set is obtained. The standard classification set is processed using a decision tree algorithm to determine the corresponding target state value; Based on the target state value, the business stages are divided to obtain the target business stages corresponding to the cellular IoT card.

3. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 2, characterized in that, Retrieving the initial contract data corresponding to the target business stage from the user data storage node includes: Based on the target business stage, the user data storage node is located to obtain the target node location; The initial contract data is retrieved from the user data storage node based on the target node location.

4. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 3, characterized in that, The initial contract data is parsed and processed to obtain the target contract data, including: The initial contract data is parsed using a data parsing algorithm to extract the bearer identifier binding relationship; The communication control identifier is extracted from the bearer identifier binding relationship, and the target subscription data is generated based on the communication control identifier.

5. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 4, characterized in that, Obtain historical network awareness records corresponding to the target signing data, and perform state constraint verification on the target signing data using the historical network awareness records to obtain verified signing data, including: Obtain the historical network awareness record corresponding to the target subscription data. The historical network awareness record includes signaling interaction trajectory, access frequency curve, stationed cell record, roaming handover path and authentication failure count. Anomaly detection is performed on the signaling interaction trajectory and the access frequency curve to obtain anomaly detection results; Based on the anomaly detection results, and combined with the resided cell records, roaming handover paths, and authentication failure counts, constraints are constructed. The target contract data is validated by performing state constraint verification on the constraint terms to obtain validated contract data.

6. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 5, characterized in that, The verified contract data is compared with a preset lifecycle testing phase threshold to obtain a comparison result. Access permissions are generated based on the comparison result, including: Extract the corresponding communication control identifier from the verified contract data; Obtain the used test traffic from the communication control identifier, compare the used test traffic with a preset lifecycle test phase threshold, and obtain the comparison result; When the comparison result is true, the network sensing characteristics of the cellular IoT card are obtained, and restricted access permissions are generated based on the network sensing characteristics. When the comparison result is false, obtain the service rate distribution of the historical communication cycle of the cellular IoT card, and generate full access permissions based on the service rate distribution. The restricted access permission and full access permission are used as access permissions.

7. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 6, characterized in that, Based on the access permissions, the network connection establishment process initiated by the cellular IoT card is refactored to obtain a target protocol activation instruction, including: Obtain the activation request for the network connection establishment process initiated by the cellular IoT card; Based on the access permissions, the access point name parameter is determined, and the access point name parameter is injected into the activation request to obtain the injected name parameter; Based on the injected name parameter, an Internet Protocol address is assigned, and the assigned address information is obtained; Select the target gateway anchor point based on the allocated address information; The injected name parameter, allocated address information, and target gateway anchor point are encapsulated into instructions to obtain the target protocol activation instruction.

8. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 7, characterized in that, The initial network element node is configured and updated according to the target protocol activation instruction to obtain the target network element node, including: Extract network element configuration parameters from the target protocol activation command; Based on the network element configuration parameters, the initial network element node is configured and updated to obtain the target network element node.

9. The automated configuration management method for the lifecycle of a cellular IoT card as described in claim 8, characterized in that, Based on the billing rules in the target network element node, an entry is issued to establish a communication status billing linkage mechanism, including: Obtain billing rule distribution entries from the target network element node. The billing rule distribution entries include traffic thresholds and monitoring periods. The amount of communication data of the cellular IoT card is counted during the monitoring period to obtain the statistical communication data volume; When the amount of statistical communication data reaches a preset proportion of the traffic threshold, a status change signaling is generated. A communication status billing linkage mechanism is established based on the aforementioned status change signaling.

10. An automated configuration management system for the lifecycle of a cellular IoT SIM card, employing the method described in any one of claims 1-9, characterized in that, include: The initial information acquisition module is used to collect the initial service status of the cellular IoT card connection lifecycle and obtain the pre-set user data storage nodes and initial network element nodes in the cellular mobile IoT. The business stage classification module is used to classify the initial business state by feature to obtain the target business stage corresponding to the cellular IoT card. The contract data processing module is used to retrieve the initial contract data corresponding to the target business stage from the user data storage node, parse and process the initial contract data to obtain the target contract data. The state constraint verification module is used to obtain historical network perception records corresponding to the target contract data, and to perform state constraint verification on the target contract data through the historical network perception records to obtain verified contract data. The permission generation module is used to compare the verified contract data with a preset lifecycle test phase threshold and generate access permissions based on the comparison result. The instruction reconstructing module is used to reconstruct the network connection establishment process initiated by the cellular IoT card according to the access permissions, so as to obtain the target protocol activation instruction; The network element configuration update module is used to update the configuration of the initial network element node according to the target protocol activation instruction to obtain the target network element node; The billing linkage establishment module is used to issue entries based on the billing rules in the target network element node and establish a communication status billing linkage mechanism.

Images