PCDN device detection method and apparatus, computer device, and storage medium

Abstract

The present application relates to a PCDN device detection method and apparatus, a computer device, and a storage medium. The method comprises: acquiring terminal information data (202); on the basis of a preset analysis threshold, historical query data and the terminal information data, performing device confirmation on a device to be identified, to obtain a device confirmation result (204); when the device confirmation result is that said device is confirmed to be a PCDN device, updating a feature library of a management platform on the basis of the terminal information data, to obtain an updated feature library, and generating an isolation blocking instruction (206); and transmitting the isolation blocking instruction and the updated feature library to a gateway terminal (208). The method can effectively improve the security and management capability of home networks, device traffic information is collected and analyzed by means of a local plug-in, PCDN devices are accurately detected on the basis of features and cloud-based secondary identification, so that false positives and false negatives are reduced, malicious devices are prevented from harming home networks, suspicious devices are isolated or blocked in real time, and feature libraries are ensured to be updated in a timely manner.

Description

PCDN equipment testing methods, devices, computer equipment, and storage media Technical Field

[0001] This application relates to the field of network security technology, and in particular to a PCDN device detection method, apparatus, computer equipment, and storage medium. Background Technology

[0002] With the widespread adoption of smart home devices and the proliferation of internet applications, home network environments are becoming increasingly complex. As the core device of a home network, the home gateway is responsible for connecting different types of devices, such as PCs, mobile phones, tablets, and smart home devices, to the internet. Meanwhile, the widespread use of Content Delivery Network (CDN) technology enables users to quickly access internet content. To further improve home network access speeds, some users are beginning to deploy Private Content Delivery Network (PCDN) devices, which can accelerate home network traffic and improve data transmission speeds. However, with the use of PCDN devices, home networks also face new security challenges: the emergence of malicious PCDN devices may affect network security, causing wasted network bandwidth, information leaks, or other potential security threats.

[0003] In related technologies, a common method for identifying malicious PCDN devices is based on broadband traffic feature recognition technology. This involves real-time monitoring of broadband traffic in a user's home network and analyzing its characteristics, such as traffic volume, duration, and packet transmission patterns, to identify the presence of suspicious PCDN devices. Generally, this method relies on efficient traffic collection and analysis, extracting traffic features to determine whether malicious PCDN devices have accessed the network.

[0004] However, the aforementioned technologies may not be able to comprehensively and effectively identify all malicious devices, leading to false positives and false negatives. Furthermore, when the system detects a suspicious PCDN device, the lack of further analysis and processing mechanisms prevents it from taking appropriate countermeasures based on the severity of the threat, which may also affect the overall effectiveness of network security protection. Summary of the Invention

[0005] Therefore, it is necessary to provide a PCDN device detection method, apparatus, computer equipment, computer-readable storage medium, and computer program product that can improve home network security protection capabilities, optimize home network resource management, and enhance system flexibility and scalability in response to the above-mentioned technical problems.

[0006] Firstly, this application provides a PCDN device detection method, applied in a management platform. The method includes:

[0007] Obtain terminal information data;

[0008] Based on preset analysis thresholds, historical query data, and terminal information data, the device to be identified is verified to obtain the device verification result.

[0009] If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command.

[0010] The isolation and blocking instructions and the updated signature database are transmitted to the gateway terminal.

[0011] In one embodiment, device verification is performed on the device to be identified based on a preset analysis threshold, historical query data, and terminal information data to obtain a device verification result, including:

[0012] In analyzing each downstream device, the device information data is processed to obtain processed device data;

[0013] Based on preset analysis thresholds, the processed equipment data is analyzed to obtain equipment analysis results.

[0014] If the equipment analysis results preliminarily confirm the PCND device, the device is confirmed based on the equipment information data, processed equipment data, and historical query data to obtain the device confirmation result.

[0015] In one embodiment, device analysis is performed on the processed device data according to a preset analysis threshold to obtain device analysis results, including:

[0016] Perform address analysis on multiple device addresses to obtain the proportion of home broadband addresses;

[0017] The number of home broadband addresses is determined based on the proportion and number of home broadband addresses.

[0018] Device analysis is performed based on the proportion of home broadband addresses, the number of home broadband addresses, the preset home broadband address threshold, and the preset address proportion threshold to obtain device analysis results.

[0019] Secondly, this application also provides a PCDN device detection method, applied in a gateway terminal. The method includes:

[0020] Acquire device information data transmitted from multiple downstream devices;

[0021] Based on the current local feature library, device identification is performed on multiple device information data to obtain device identification results;

[0022] Based on the device identification results, data filtering is performed on multiple device information data to obtain terminal information data;

[0023] Upload terminal information data to the management platform.

[0024] In one embodiment, the method further includes:

[0025] Obtain isolation and blocking instructions and the updated signature database;

[0026] The target device is determined based on the isolation and blocking command;

[0027] Configure the network settings of the target connected device according to the isolation and blocking instructions, and obtain the settings of the connected device.

[0028] In one embodiment, after obtaining the isolation blocking instruction and the updated signature database, the method further includes:

[0029] The local feature library is updated based on the updated feature library to obtain the updated local feature library.

[0030] Thirdly, this application also provides a PCDN device detection device for use in a management platform. The device includes:

[0031] The first communication module is used to acquire terminal information data;

[0032] The device analysis module is used to verify the device to be identified based on preset analysis thresholds, historical query data, and terminal information data, and to obtain the device verification result.

[0033] The processing update module is used to update the feature library of the management platform based on terminal information data when the device confirmation result indicates that the device to be identified belongs to the PCDN device, obtain the updated feature library, and generate an isolation and blocking command.

[0034] The first communication module is also used to transmit isolation and blocking instructions and the updated feature library to the gateway terminal.

[0035] Fourthly, this application also provides a PCDN device detection device for use in a gateway terminal. The device includes:

[0036] The second communication module is used to acquire device information data transmitted by multiple downstream devices;

[0037] The device identification module is used to identify multiple device information data based on the current local feature library and obtain device identification results;

[0038] The data filtering module is used to filter multiple device information data based on the device identification results to obtain terminal information data;

[0039] The second communication module is also used to upload terminal information data to the management platform.

[0040] Fifthly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:

[0041] Obtain terminal information data;

[0042] Based on preset analysis thresholds, historical query data, and terminal information data, the device to be identified is verified to obtain the device verification result.

[0043] If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command.

[0044] Transmit the isolation and blocking command and the updated signature database to the gateway terminal; or

[0045] Acquire device information data transmitted from multiple downstream devices;

[0046] Based on the current local feature library, device identification is performed on multiple device information data to obtain device identification results;

[0047] Based on the device identification results, data filtering is performed on multiple device information data to obtain terminal information data;

[0048] Upload terminal information data to the management platform.

[0049] Sixthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:

[0050] Obtain terminal information data;

[0051] Based on preset analysis thresholds, historical query data, and terminal information data, the device to be identified is verified to obtain the device verification result.

[0052] If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command.

[0053] Transmit the isolation and blocking command and the updated signature database to the gateway terminal; or

[0054] Acquire device information data transmitted from multiple downstream devices;

[0055] Based on the current local feature library, device identification is performed on multiple device information data to obtain device identification results;

[0056] Based on the device identification results, data filtering is performed on multiple device information data to obtain terminal information data;

[0057] Upload terminal information data to the management platform.

[0058] Seventhly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:

[0059] Obtain terminal information data;

[0060] Based on preset analysis thresholds, historical query data, and terminal information data, the device to be identified is verified to obtain the device verification result.

[0061] If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command.

[0062] Transmit the isolation and blocking command and the updated signature database to the gateway terminal; or

[0063] Acquire device information data transmitted from multiple downstream devices;

[0064] Based on the current local feature library, device identification is performed on multiple device information data to obtain device identification results;

[0065] Based on the device identification results, data filtering is performed on multiple device information data to obtain terminal information data;

[0066] Upload terminal information data to the management platform.

[0067] The aforementioned PCDN device detection method, apparatus, computer equipment, storage medium, and computer program product, after obtaining terminal information data uploaded by the gateway terminal, process the device information data corresponding to each downstream device in the terminal information data and analyze and judge it with a preset analysis threshold to initially determine whether the downstream device belongs to PCDN. Then, the device information data corresponding to the initially judged downstream device is further confirmed with the historical data of the queried device and the data of other devices to finally determine whether the downstream device belongs to PCDN. Afterwards, the platform's feature database is updated based on the device information data confirmed as PCDN devices. At the same time, an isolation and blocking instruction for the downstream device confirmed as a PCDN device is generated and transmitted to the gateway terminal along with the updated feature database. This effectively improves the security and resource management capabilities of the home network. By collecting and analyzing device traffic information through local plug-ins, combined with feature and cloud-based secondary identification, PCDN devices can be accurately detected, reducing false alarms and false negatives, preventing malicious devices from infringing on the home network, and supporting real-time isolation or blocking of suspicious devices, optimizing bandwidth allocation, ensuring that the use of normal devices is not affected, and ensuring timely updates to the feature database, thus enhancing the system's flexibility and scalability. Attached Figure Description

[0068] Figure 1 is an application environment diagram of a PCDN device detection method in one embodiment;

[0069] Figure 2 is a flowchart illustrating the application of the PCDN device detection method in a management platform in one embodiment;

[0070] Figure 3 is a flowchart illustrating the device verification steps in one embodiment;

[0071] Figure 4 is a flowchart illustrating the application of the PCDN device detection method to a gateway terminal in one embodiment;

[0072] Figure 5 is a structural block diagram of a PCDN device detection device applied to a management platform in one embodiment;

[0073] Figure 6 is a structural block diagram of a PCDN device detection device applied to a gateway terminal in one embodiment;

[0074] Figure 7 is an internal structure diagram of a computer device in one embodiment. Detailed Implementation

[0075] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0076] The PCDN device detection method provided in this application embodiment can be applied to the application environment shown in Figure 1. The gateway terminal 102 communicates with the management platform 104 via a network. A data storage system can store the data that the management platform 104 needs to process. The data storage system can be integrated on the server 104 or placed on a cloud or other network server. After obtaining the terminal information data uploaded by the gateway terminal, the device information data corresponding to each downstream device in the terminal information data is processed and analyzed against a preset analysis threshold to initially determine whether the downstream device belongs to the PCDN device. Then, the device information data corresponding to the initially determined downstream device is further confirmed with the historical data of the queried device and the data of other devices to finally determine whether the downstream device belongs to the PCDN device. Afterwards, based on the device information data confirmed as a PCDN device, the platform's feature database is updated, and an isolation and blocking instruction for the downstream device confirmed as a PCDN device is generated and transmitted to the gateway terminal along with the updated feature database. The gateway terminal 102 can be, but is not limited to, an ADSL / VDSL gateway, a fiber optic gateway, an LTE / 5G gateway, and a smart home gateway. The management platform 104 can be implemented using a separate server or a server cluster composed of multiple servers.

[0077] In one embodiment, as shown in Figure 2, a PCDN device detection method is provided. Taking the application of this method to the management platform in Figure 1 as an example, the method includes the following steps:

[0078] Step 202: Obtain terminal information data.

[0079] The terminal information data includes device information data from multiple downstream devices.

[0080] For example, the gateway terminal performs a preliminary analysis of all connected downstream devices and uploads the device information data of downstream devices suspected of being PCDN devices to the management platform. After receiving the terminal information data, the management platform stores it in the database.

[0081] Step 204: Based on the preset analysis threshold, historical query data, and terminal information data, perform device verification on the device to be identified and obtain the device verification result.

[0082] The preset analysis thresholds include preset home broadband address thresholds and preset address ratio thresholds. The processed device data includes multiple device addresses and the number of addresses.

[0083] For example, when analyzing and identifying each downstream device, the target addresses of uplink traffic in the device information data are statistically analyzed to determine the number of home broadband addresses and their proportion of the total target addresses.

[0084] Then, the number of home broadband addresses in the target address and their proportion of the total target address are compared with the preset home broadband address threshold and the preset home broadband proportion threshold, respectively. The comparison is used to preliminarily determine whether each downstream device belongs to PCDN device.

[0085] Next, the traffic patterns of each downstream device of the PCDN device will be compared with those of other devices, and historical records of the devices will be queried, in order to ultimately confirm whether each downstream device of the PCDN device is indeed a PCDN device.

[0086] Step 206: If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation blocking command.

[0087] The terminal information data includes device information data corresponding to all downstream devices that are ultimately confirmed as PCDN devices.

[0088] For example, if the device confirmation result indicates that the device to be identified belongs to a PCDN device, feature extraction is performed on the device information data corresponding to all downstream devices ultimately confirmed as PCDN devices. The extracted features are then used to update the cloud-based feature database to obtain an updated feature database. The feature information includes specific, known MAC address prefixes and uplink traffic patterns of PCDN devices, etc.

[0089] At the same time, instructions are generated to isolate or block all downstream devices that are ultimately confirmed as PCDN devices, i.e., isolation and blocking instructions.

[0090] Step 208: Transmit the isolation and blocking command and the updated signature database to the gateway terminal.

[0091] For example, when the identification of the downstream devices corresponding to all uploaded device information data is completed, the management platform will transmit the isolation blocking command and the updated feature library to the gateway terminal.

[0092] In the aforementioned PCDN device detection method, after obtaining the terminal information data uploaded by the gateway terminal, the device information data corresponding to each downstream device in the terminal information data is processed and analyzed against a preset analysis threshold to preliminarily determine whether the downstream device belongs to the PCDN device. Then, the device information data corresponding to the preliminarily determined downstream device is further confirmed with the historical data of the queried device and the data of other devices to finally determine whether the downstream device belongs to the PCDN device. Afterwards, the platform's feature database is updated based on the device information data confirmed as a PCDN device. At the same time, an isolation and blocking instruction for the downstream device confirmed as a PCDN device is generated and transmitted to the gateway terminal along with the updated feature database. This effectively improves the security and resource management capabilities of the home network. By collecting and analyzing device traffic information through local plugins, combined with feature and cloud-based secondary identification, PCDN devices can be accurately detected, reducing false alarms and false negatives, preventing malicious devices from harming the home network, and supporting real-time isolation or blocking of suspicious devices, optimizing bandwidth allocation, ensuring that the use of normal devices is not affected, and ensuring timely updates to the feature database, thus enhancing the system's flexibility and scalability.

[0093] In an exemplary embodiment, as shown in FIG3, device verification is performed on the device to be identified based on a preset analysis threshold, historical query data, and terminal information data to obtain a device verification result, including:

[0094] Step 302: In the case of analyzing each downstream device, the device information data is processed to obtain processed device data.

[0095] The terminal information data includes device information data from multiple downstream devices.

[0096] For example, when analyzing and identifying each downstream device, it is necessary to statistically analyze the uplink traffic destination addresses in the device information data. Detailed statistics on the destination addresses can identify which addresses belong to home broadband addresses. Further analysis of the number of these home broadband addresses and calculation of their proportion among all destination addresses is then performed.

[0097] Step 304: Perform equipment analysis on the processed equipment data according to the preset analysis threshold to obtain the equipment analysis results.

[0098] The preset analysis thresholds include the preset home broadband address threshold and the preset address percentage threshold.

[0099] For example, the number of home broadband addresses in the target address and their proportion of the total target address are compared with preset home broadband address thresholds and preset home broadband proportion thresholds, respectively, and the comparison is used to preliminarily determine whether each downstream device belongs to a PCDN device.

[0100] By analyzing the number of home broadband addresses and their proportion within the total target address set, it can be preliminarily determined whether each downstream device is a PCDN device. The number of home broadband addresses and their proportion within all target addresses are compared with preset home broadband address thresholds and home broadband proportion thresholds, respectively. If the number of home broadband addresses exceeds the preset threshold, or the home broadband proportion exceeds the preset proportion threshold, it can be preliminarily determined that the downstream device may be a PCDN device.

[0101] For example, pre-defined judgment rules, specifically:

[0102] If, in the past day, more than 100 outgoing traffic destination IP addresses of a certain downstream device are home broadband IPs and account for more than 80% of the total, then the downstream device is suspected to be a PCDN device.

[0103] Therefore, after analyzing the data within a day in the device information data, if the number of home broadband addresses and their proportion in all target addresses exceed 100 and 80% respectively, the corresponding downstream device is suspected to be a PCDN device; otherwise, the corresponding downstream device is not a PCDN device.

[0104] Step 306: If the equipment analysis result indicates that the PCND equipment has been preliminarily confirmed, the equipment is confirmed based on the equipment information data, the processed equipment data, and the historical query data to obtain the equipment confirmation result.

[0105] For example, when verifying each downstream device initially identified as a PCDN device, the platform compares and analyzes the traffic patterns of other devices to check whether the device's traffic characteristics are consistent with typical PCDN device patterns. For instance, PCDN devices typically have high content distribution density and stable traffic distribution; therefore, the platform uses a traffic monitoring system to assess whether the device's traffic characteristics match these typical features. Then, the platform queries the device's historical records to analyze its long-term usage and behavioral patterns. By tracing back the device's historical traffic data, it can be further determined whether the device maintains consistent operating characteristics with PCDN devices over a long period. If the device's behavior is highly consistent with typical PCDN devices, it can be confirmed as a PCDN device.

[0106] In one exemplary embodiment, device analysis is performed on the processed device data according to a preset analysis threshold to obtain device analysis results, including:

[0107] Perform address analysis on multiple device addresses to obtain the proportion of home broadband addresses; determine the number of home broadband addresses based on the proportion of home broadband addresses and the number of addresses; perform device analysis based on the proportion of home broadband addresses, the number of home broadband addresses, the preset home broadband address threshold, and the preset address proportion threshold to obtain device analysis results.

[0108] The preset analysis thresholds include preset home broadband address thresholds and preset address ratio thresholds. The processed device data includes multiple device addresses and the number of addresses.

[0109] For example, by analyzing the number of home broadband addresses in the target address and their overall proportion within the target address, a preliminary determination can be made as to whether each downstream device is a PCDN device. Specifically, the number of home broadband addresses and their proportion within the target address are compared with preset home broadband address thresholds and home broadband proportion thresholds. If the number of home broadband addresses exceeds the preset threshold, or the proportion of home broadband addresses exceeds the preset proportion threshold, it can be preliminarily determined that the downstream device may be a PCDN device.

[0110] In an exemplary embodiment, a PCDN device detection method is provided, which is illustrated by taking the application of the method to the management platform in Figure 1 as an example, and includes the following steps:

[0111] Obtain terminal information data.

[0112] In analyzing each downstream device, the device information data is processed to obtain processed device data.

[0113] Address analysis is performed on multiple device addresses to obtain the proportion of home broadband addresses.

[0114] The number of home broadband addresses is determined based on the proportion of home broadband addresses and the total number of addresses.

[0115] Device analysis is performed based on the proportion of home broadband addresses, the number of home broadband addresses, the preset home broadband address threshold, and the preset address proportion threshold to obtain device analysis results.

[0116] If the equipment analysis results preliminarily confirm the PCND device, the device is confirmed based on the equipment information data, processed equipment data, and historical query data to obtain the device confirmation result.

[0117] If the device confirmation result indicates that the device to be identified belongs to the PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command.

[0118] The isolation and blocking instructions and the updated signature database are transmitted to the gateway terminal.

[0119] In one embodiment, as shown in Figure 4, a PCDN device detection method is provided. Taking the application of this method to the gateway terminal in Figure 1 as an example, the method includes the following steps:

[0120] Step 402: Obtain device information data transmitted by multiple downstream devices.

[0121] For example, a plugin capable of capturing connection and traffic information for each downstream device is pre-installed on the gateway terminal, and the plugin's operating parameters are configured. These operating parameters include the log storage path and data reporting cycle. After configuration, the gateway terminal uses this plugin to monitor the network activity of the downstream devices in real time and collect key information, such as online duration, MAC address, and destination IP address of uplink traffic.

[0122] Step 404: Based on the current local feature library, perform device identification on multiple device information data to obtain device identification results.

[0123] For example, the plugin also includes a local feature library containing characteristic information of known PCDN devices, such as specific MAC address prefixes and uplink traffic patterns.

[0124] After completing the device information data of the connected device, the device information data is compared with the information data in the local feature database to preliminarily determine whether the device is a PCDN device.

[0125] Step 406: Based on the device identification results, filter the data of multiple device information data to obtain terminal information data.

[0126] For example, after the comparison is completed, the device information data of the downstream devices that are initially identified as PCDN devices are set as terminal information data.

[0127] Step 408: Upload the terminal information data to the management platform.

[0128] For example, after completing the data filtering, the gateway terminal uploads the terminal information data to the management platform via the network.

[0129] In one exemplary embodiment, the method further includes:

[0130] Obtain the isolation and blocking command and the updated signature database; determine the target downstream device based on the isolation and blocking command; configure the network settings of the target downstream device according to the isolation and blocking command, and obtain the configured downstream device.

[0131] For example, upon receiving an isolation or blocking command, the home gateway will execute corresponding network security measures, such as disconnecting the device's network connection or adding it to a blacklist, to prevent potential security threats. The platform will record these operations in real time and generate security reports periodically, sending reminders to users to help them monitor the security status of their home network. The specific process includes: the home gateway first receives the isolation or blocking command. Then, based on the command, it identifies the affected target connected devices and executes corresponding network settings, such as disconnecting or restricting the device's network access. Next, it confirms the network status of the target devices to ensure that security measures are effectively implemented.

[0132] In one exemplary embodiment, after obtaining the isolation blocking instruction and the updated signature database, the method further includes:

[0133] The local feature library is updated based on the updated feature library to obtain the updated local feature library.

[0134] For example, after updating the cloud feature library, the management platform synchronizes the updated feature library to the gateway terminal. The gateway terminal then uses the updated feature library to update its local feature library, thus obtaining the updated local feature library.

[0135] In an exemplary embodiment, a PCDN device detection method is provided, which is illustrated by taking the application of the method to the gateway terminal in Figure 1 as an example, and includes the following steps:

[0136] Acquire device information data transmitted from multiple downstream devices.

[0137] Based on the current local feature library, device identification is performed on multiple device information data to obtain device identification results.

[0138] Based on the device identification results, data filtering is performed on multiple device information data to obtain terminal information data.

[0139] Upload terminal information data to the management platform.

[0140] Obtain isolation and blocking instructions and the updated signature database.

[0141] The local feature library is updated based on the updated feature library to obtain the updated local feature library.

[0142] The target device is determined based on the isolation and blocking command.

[0143] Configure the network settings of the target connected device according to the isolation and blocking instructions, and obtain the settings of the connected device.

[0144] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0145] Based on the same inventive concept, this application also provides a PCDN device detection apparatus for implementing the PCDN device detection method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more PCDN device detection apparatus embodiments provided below can be found in the limitations of the PCDN device detection method described above, and will not be repeated here.

[0146] In one embodiment, as shown in Figure 5, a PCDN device detection device is provided, applied in a management platform, including: a first communication module 502, a device analysis module 504, and a processing and update module 506, wherein:

[0147] The first communication module 502 is used to acquire terminal information data;

[0148] The device analysis module 504 is used to perform device verification on the device to be identified based on preset analysis thresholds, historical query data and terminal information data, and obtain device verification results.

[0149] The processing update module 506 is used to update the feature library of the management platform based on terminal information data when the device confirmation result is that the device to be identified belongs to the PCDN device, obtain the updated feature library, and generate an isolation blocking command.

[0150] The first communication module 502 is also used to transmit isolation and blocking instructions and the updated feature library to the gateway terminal.

[0151] In an exemplary embodiment, the device analysis module 504 is further configured to, when analyzing each downstream device, process the device information data to obtain processed device data; perform device analysis on the processed device data according to a preset analysis threshold to obtain device analysis results; and, if the device analysis result preliminarily confirms the PCND device, confirm the device based on the device information data, the processed device data, and historical query data to obtain device confirmation results.

[0152] In an exemplary embodiment, the device analysis module 504 is further configured to perform address analysis on multiple device addresses to obtain the home broadband address ratio; determine the number of home broadband addresses based on the home broadband address ratio and the number of addresses; and perform device analysis based on the home broadband address ratio, the number of home broadband addresses, a preset home broadband address threshold, and a preset address ratio threshold to obtain device analysis results.

[0153] In one embodiment, as shown in FIG6, a PCDN device detection device is provided, applied in a gateway terminal, including: a second communication module 602, a device identification module 604, and a data filtering module 606, wherein:

[0154] The second communication module 602 is used to acquire device information data transmitted by multiple downstream devices;

[0155] The device identification module 604 is used to identify multiple device information data based on the current local feature library and obtain device identification results.

[0156] The data filtering module 606 is used to filter multiple device information data based on the device identification results to obtain terminal information data.

[0157] The second communication module 602 is also used to upload terminal information data to the management platform.

[0158] In one exemplary embodiment, the PCDN device detection device is further configured to acquire isolation and blocking instructions and an updated feature library; determine the target downstream device based on the isolation and blocking instructions; and perform network settings on the target downstream device according to the isolation and blocking instructions to obtain the downstream device after settings.

[0159] In one exemplary embodiment, the PCDN device detection apparatus is further configured to update the local feature library based on the updated feature library to obtain the updated local feature library.

[0160] Each module in the aforementioned PCDN device detection device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of the computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each module.

[0161] In one embodiment, a computer device, which may be a server, is provided, and its internal structure is shown in Figure 7. The computer device includes a processor, memory, input / output interfaces (I / O), and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is connected to the system bus via the I / O interfaces. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The database stores device information data and feature library data. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements a PCDN device detection method.

[0162] Those skilled in the art will understand that the structure shown in Figure 7 is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0163] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0164] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon that, when executed by a processor, implements the steps in the above method embodiments.

[0165] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0166] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data shall comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0167] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0168] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0169] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method for testing PCDN equipment, characterized in that, When applied to a management platform, the method includes: Obtain terminal information data; Based on the preset analysis threshold, historical query data, and the terminal information data, the device to be identified is confirmed, and the device confirmation result is obtained. If the device confirmation result indicates that the device to be identified belongs to a PCDN device, the feature library of the management platform is updated based on the terminal information data to obtain the updated feature library and generate an isolation and blocking command. The isolation and blocking command and the updated feature library are transmitted to the gateway terminal.

2. The PCDN equipment testing method according to claim 1, characterized in that, The terminal information data includes device information data of multiple downstream devices; the step of verifying the device to be identified based on a preset analysis threshold, historical query data, and the terminal information data to obtain a device verification result includes: In analyzing each downstream device, the device information data is processed to obtain processed device data; The processed equipment data is analyzed according to a preset analysis threshold to obtain the equipment analysis results. If the device analysis result preliminarily confirms the PCND device, the device is confirmed based on the device information data, the processed device data, and the historical query data to obtain the device confirmation result.

3. The PCDN equipment testing method according to claim 2, characterized in that, The preset analysis thresholds include a preset home broadband address threshold and a preset address percentage threshold; the processed device data includes multiple device addresses and the number of addresses. The step of performing device analysis on the processed device data according to a preset analysis threshold to obtain device analysis results includes: Perform address analysis on multiple device addresses to obtain the proportion of home broadband addresses; The number of home broadband addresses is determined based on the proportion and number of home broadband addresses. Device analysis is performed based on the home broadband address ratio, the number of home broadband addresses, the preset home broadband address threshold, and the preset address ratio threshold to obtain device analysis results.

4. A method for testing PCDN equipment, characterized in that, When applied to a gateway terminal, the method includes: Acquire device information data transmitted from multiple downstream devices; Based on the current local feature library, multiple device information data are used to identify devices and obtain device identification results. Based on the device identification results, multiple device information data are filtered to obtain terminal information data; The terminal information data is uploaded to the management platform.

5. The PCDN equipment testing method according to claim 4, characterized in that, The method further includes: Obtain isolation and blocking instructions and the updated signature database; The target downstream device is determined based on the isolation and blocking command; The network settings of the target connected device are configured according to the isolation and blocking command, and the configured connected device is obtained.

6. The PCDN equipment testing method according to claim 5, characterized in that, After obtaining the isolation and blocking instructions and the updated feature library, the method further includes: The local feature library is updated based on the updated feature library to obtain the updated local feature library.

7. A PCDN equipment testing device, characterized in that, The device, used in a management platform, includes: The first communication module is used to acquire terminal information data; The device analysis module is used to confirm the device to be identified based on a preset analysis threshold, historical query data, and the terminal information data, and to obtain the device confirmation result. The processing update module is used to update the feature library of the management platform based on the terminal information data when the device confirmation result is that the device to be identified belongs to the PCDN device, obtain the updated feature library, and generate an isolation blocking command. The first communication module is also used to transmit the isolation and blocking command and the updated feature library to the gateway terminal.

8. A PCDN equipment testing device, characterized in that, The device, used in a gateway terminal, includes: The second communication module is used to acquire device information data transmitted by multiple downstream devices; The device identification module is used to identify multiple device information data based on the current local feature library and obtain device identification results; The data filtering module is used to filter multiple device information data based on the device identification results to obtain terminal information data; The second communication module is also used to upload the terminal information data to the management platform.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

Images