CN106817361A - The control method and device of group's online - Google Patents

Abstract

The invention provides a kind of control method and device of group online, wherein, the method includes：Group's process control system receives the online solicited message of core net forwarding, wherein, the online solicited message is the online solicited message of the terminal user that core net is received, group's process control system is according to the online solicited message, and group's process control system is to the online control information of the surfing flow permission build terminal user for pre-setting of the terminal user, and the online control information is sent to the core net, wherein, the online control information carries out surfing flow control for the core net to the terminal user, the business of networking monitoring and flow for solving group user control incomplete problem, the business of networking control of perfect group user.

Description

Group internet access control method and device

technical field

The present invention relates to the field of communications, in particular to a method and device for controlling group Internet access.

Background technique

With the development of modern communication technology, 4G network has gradually become an indispensable tool in people's daily work and life, especially for some working groups, such as TV stations, network media, Internet-related and other working groups, mobile Internet is a must for work For these users with high demand for network traffic, operators open related services for group Internet access, but the online legality, flow control, and related monitoring of group users and sub-users have always been problems to be solved by operators.

There is currently no effective technical solution for the problems of group users' online business monitoring and flow control in related technologies.

Contents of the invention

The present invention provides a method and device for controlling group Internet access, so as to at least solve the problems of group users' online business monitoring and flow control imperfections in the related art.

According to one aspect of the present invention, a method for controlling group Internet access is provided, including:

The group process control system receives the online request information forwarded by the core network, wherein the online request information is the terminal user's online request information received by the core network;

The group process control system generates the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user, and sends the Internet access control information to For the core network, wherein the Internet access control information is used by the core network to control the Internet access flow of the terminal user.

Further, before the group process control system generates the terminal user's Internet access control information according to the Internet access request information and the group's preset Internet access traffic authority for the terminal user, the method further includes: When the Internet access request information includes the group to which the terminal user belongs and the Internet access information of the terminal user, the group process control system identifies the group to which the terminal user belongs according to the group information, and User authentication;

Further, the group process control system generating the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user includes: if the identity If the authentication is passed, the group process control system generates the terminal user's Internet access control information according to the Internet access information and the group's preset Internet access traffic authority for the terminal user.

Further, the group process control system generating the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user includes:

When the Internet access request information includes Internet access content or Internet access location information, determine whether the Internet access content or Internet access location information is legal, if legal, generate Internet access control information for indicating that the terminal user is allowed to access the Internet, if not legal, and generating Internet access control information for instructing termination of the terminal user's Internet access.

Further, the group process control system generating the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user includes:

When the Internet access URL included in the Internet access request information is in the preset acceleration URL list, generate the Internet access control information, wherein the Internet access control information is used to indicate the Internet access speed of the terminal user at the Internet access URL acceleration to a predetermined threshold;

In the case that the Internet access website included in the Internet access information is in the list of free Internet addresses with preset traffic, generate Internet access control information that does not count the Internet traffic of the terminal user on the Internet access website.

Further, the group process control system generating the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user includes:

Judging whether the Internet access time included in the Internet access request information is within the preset Internet access time period, if the Internet access time is within the preset Internet access time period, generating Internet access control information for indicating that the terminal user is allowed to access the Internet, if not A time period for accessing the Internet is set, and Internet access control information for instructing termination of the terminal user's Internet access is generated.

Further, after sending the Internet access control information to the core network includes:

The group process control system sends a traffic query request to the core network;

The group process control system receives the query result of the traffic query request from the core network;

When the query result indicates that the terminal user's Internet traffic exceeds a preset first threshold, the group process control system instructs the core network to terminate the terminal user's Internet access;

When the query result indicates that the terminal user's Internet traffic is greater than the preset second threshold and smaller than the preset first threshold, the group process control system instructs the core network to reduce the terminal user's Internet access speed, wherein the preset first threshold is greater than the preset second threshold.

Further, the group process control system sends traffic allocation request information to one or more target end users of the core network, wherein the traffic allocation information is used to indicate that the group process control system is ready to allocate to the one or more target end users or the aggregate number of traffic to multiple targeted end users;

The group process control system receives the traffic allocation response information sent by the core network, wherein the traffic allocation response information is used to indicate the target end user who has applied for the traffic and the corresponding applied target traffic;

The group process control system instructs the core network to allocate the target traffic to the corresponding target end users who have applied for the target traffic, wherein the end users include the target end users.

According to another aspect of the present invention, there is also provided a control device for group Internet access, which is located in the group process control system, and is characterized in that it includes:

The receiving module is used to receive the Internet access request information forwarded by the core network, wherein the Internet access request information is the terminal user's Internet access request information received by the core network;

A sending module, configured to generate the Internet access control information of the terminal user according to the Internet access request information and the pre-set Internet access traffic authority of the terminal user by the group process control system, and send the Internet access control information to The core network, wherein the Internet access control information is used by the core network to control the Internet traffic of the terminal user.

Further, the device also includes:

An authentication module, configured to generate the terminal user's Internet access control information according to the Internet access request information and the group's preset Internet access traffic authority for the terminal user, before the Internet access request information includes the terminal user's In the case of the group to which the user belongs and the online information of the terminal user, the group process control system identifies the group to which the terminal user belongs according to the group information, and performs identity authentication on the terminal user;

If the identity authentication is passed, generating the terminal user's Internet access control information according to the Internet access information and the group's preset Internet access traffic authority for the terminal user.

Further, the device also includes:

A monitoring module, configured to determine whether the online content or online location information is legal if the online request information includes online content or online location information, and if legal, generate online control information for indicating that the terminal user is allowed to surf the Internet , if not legal, generating Internet access control information for instructing termination of the terminal user's Internet access.

Further, the device also includes:

An acceleration module, configured to generate the Internet access control information when the Internet access URL included in the Internet access request information is in the preset accelerated URL list, wherein the Internet access control information is used to instruct the terminal user to use the The Internet access speed of the Internet site is accelerated to a predetermined threshold;

The traffic free module is used to generate Internet access control information that does not count the Internet traffic of the terminal user on the Internet site when the Internet site included in the Internet access information is in the preset traffic free site list.

Further, the device also includes:

A time module, configured to determine whether the online time included in the online request information is within a preset online time period, and if the online time is within the preset online time period, generate an online control for indicating that the terminal user is allowed to surf the Internet information, if it is not within the preset time period for surfing the Internet, generate Internet access control information for instructing to terminate the Internet access of the terminal user.

Further, the device also includes:

A query module, configured to send a traffic query request to the core network;

The query module is further configured to receive a query result of the core network for the traffic query request;

When the query result indicates that the terminal user's Internet traffic exceeds a preset first threshold, the query module instructs the core network to terminate the terminal user's Internet access;

When the query result indicates that the terminal user's Internet traffic is greater than the preset second threshold and smaller than the preset first threshold, the query module instructs the core network to reduce the terminal user's Internet traffic speed, wherein the preset first threshold is greater than the preset second threshold.

Further, the device also includes:

A distribution module, configured to send traffic allocation request information to one or more target end users of the core network, wherein the traffic allocation information is used to indicate that the group process control system is ready to allocate to the one or more targets the total amount of end-user traffic;

The distribution module is further configured to receive traffic allocation response information sent by the core network, wherein the traffic allocation response information is used to indicate the target end user who has applied for the traffic and the corresponding applied target traffic;

The issuing module is further configured to instruct the core network to allocate the target traffic to the corresponding target end users who have applied for the target traffic, where the end users include the target end users.

Through the present invention, the group process control system receives the online request information forwarded by the core network, wherein the online request information is the terminal user's online request information received by the core network, and the group process control system based on the online request information and the group process The control system generates the Internet access control information of the terminal user according to the preset Internet traffic authority of the terminal user, and sends the Internet access control information to the core network, wherein the Internet access control information is used by the core network to control the terminal user. Internet flow control solves the problem of group users' online business monitoring and flow control imperfection, and improves the group user's Internet business control.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention and constitute a part of the application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations to the present invention. In the attached picture:

Fig. 1 is a flow chart of a control method for group Internet access according to an embodiment of the present invention;

Fig. 2 is another flow chart of a method for controlling group Internet access according to an embodiment of the present invention;

Fig. 3 is a structural block diagram of a control device for group Internet access according to an embodiment of the present invention;

Fig. 4 is another structural block diagram of a control device for group Internet access according to an embodiment of the present invention;

Fig. 5 is another structural block diagram of a control device for group Internet access according to an embodiment of the present invention;

Fig. 6 is a schematic diagram of the system structure of group Internet access control according to a preferred embodiment of the present invention;

Fig. 7 is the internal block diagram of the group Internet access control system according to the preferred embodiment of the present invention;

Fig. 8 is a schematic flow chart of a user's online surfing process according to a preferred embodiment of the present invention;

Fig. 9 is a schematic flow chart showing the work of the flow monitoring module according to a preferred embodiment of the present invention;

Fig. 10 is a schematic flow chart of the work of the network acceleration module according to a preferred embodiment of the present invention;

Fig. 11 is a schematic flow chart showing the work of the directional flow module according to a preferred embodiment of the present invention;

Fig. 12 is a schematic flow chart of a user going offline according to a preferred embodiment of the present invention.

detailed description

Hereinafter, the present invention will be described in detail with reference to the drawings and examples. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.

It should be noted that the terms "first" and "second" in the description and claims of the present invention and the above drawings are used to distinguish similar objects, but not necessarily used to describe a specific sequence or sequence.

In this embodiment, a method for controlling group Internet access is provided. FIG. 1 is a flow chart of a method for controlling group Internet access according to an embodiment of the present invention. As shown in FIG. 1 , the process includes the following steps:

Step S102, the group process control system receives the Internet access request information forwarded by the core network, wherein the Internet access request information is the terminal user's Internet access request information received by the core network;

Step S104, the group process control system generates the terminal user's Internet access control information based on the Internet access request information and the group process control system's preset Internet access traffic authority for the end user, and sends the Internet access control information to the core network, wherein the Internet access control information is used by the core network to control the Internet traffic of the terminal user.

Through the above steps, the group process control system receives the Internet access request information forwarded by the core network. The control system generates the Internet access control information of the terminal user according to the preset Internet traffic authority of the terminal user, and sends the Internet access control information to the core network, wherein the Internet access control information is used by the core network to control the terminal user. Internet flow control solves the problem of group users' online business monitoring and flow control imperfection, and improves the group user's Internet business control.

It should be noted that the core network in the embodiments of the present invention may be the core network of the 4G network, or other network elements that realize the above-mentioned functions and functions of the core network in this embodiment, and the network elements may be located in the core network, It can also be located in the base station and other application platforms.

In this embodiment, a control method for group Internet access is also provided. FIG. 2 is another flow chart of a control method for group Internet access according to an embodiment of the present invention. As shown in FIG. 2 , the process includes the following steps:

Step S202, in the case that the online request information includes the group to which the terminal user belongs and the online information of the terminal user, the group process control system identifies the group to which the terminal user belongs according to the group information, and identifies the terminal user Authentication;

Step S204, if the identity authentication is passed, the group process control system generates the terminal user's Internet access control information based on the Internet access information and the group's preset Internet traffic authority for the terminal user;

In this embodiment, the group process control system generates the terminal user's Internet access control information based on the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user, including: if the identity authentication passes , the group process control system generates the terminal user's Internet access control information according to the Internet access information and the group's preset Internet access traffic authority for the end user.

In this embodiment, the group process control system generates the terminal user's Internet access control information based on the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user, including:

In this embodiment, when the Internet access request information includes Internet access content or Internet access location information, it is judged whether the Internet access content or Internet access location information is legal, and if it is legal, generate Internet access control information for indicating that the terminal user is allowed to access the Internet, if Illegal, generate Internet access control information used to instruct termination of the terminal user's Internet access.

In this embodiment, the group process control system generates the terminal user's Internet access control information based on the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user, including:

When the Internet access URL included in the Internet access request information is in the preset acceleration URL list, generate the Internet access control information, wherein the Internet access control information is used to instruct the terminal user to accelerate the Internet access speed of the Internet access URL to a predetermined threshold;

In the case that the Internet access website included in the Internet access information is in the preset traffic free website list, generate Internet access control information that does not count the Internet traffic of the terminal user on the Internet access website.

In this embodiment, the group process control system generates the terminal user's Internet access control information based on the Internet access request information and the group process control system's preset Internet access traffic authority for the terminal user, including:

Judging whether the online time included in the Internet access request information is within the preset online time period, if the online time is within the preset online time period, generating Internet access control information for indicating that the terminal user is allowed to surf the Internet, if not within the preset online time period , generating Internet access control information for instructing termination of the terminal user's Internet access.

In this embodiment, after sending the Internet access control information to the core network, it includes:

The group process control system sends a traffic query request to the core network;

The group process control system receives the query result of the traffic query request from the core network;

When the query result indicates that the terminal user's Internet traffic exceeds a preset first threshold, the group process control system instructs the core network to terminate the terminal user's Internet access;

When the query result indicates that the terminal user's Internet access traffic is greater than the preset second threshold and smaller than the preset first threshold, the group process control system instructs the core network to reduce the terminal user's Internet access speed, wherein, The preset first threshold is greater than the preset second threshold.

In this embodiment, the group process control system sends traffic allocation request information to one or more target end users of the core network, wherein the traffic allocation information is used to indicate that the group process control system is ready to allocate to the one or more target end users The total number of traffic targeted to end users;

The group process control system receives the flow distribution response information sent by the core network, wherein the flow distribution response information is used to indicate the target end user who has applied for the flow and the corresponding applied target flow;

The group process control system instructs the core network to allocate the target traffic to the corresponding target end user who has applied for the target traffic, wherein the end user includes the target end user.

In this embodiment, a control device for group Internet access is also provided, which is used to implement the above embodiments and preferred implementation modes, and what has been explained will not be repeated. As used below, the term "module" may be a combination of software and/or hardware that realizes a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementations in hardware, or a combination of software and hardware are also possible and contemplated.

Fig. 3 is a structural block diagram of a control device for group Internet access according to an embodiment of the present invention. As shown in Fig. 3, the device includes:

The receiving module 32 is configured to receive the Internet access request information forwarded by the core network, wherein the Internet access request information is the terminal user's Internet access request information received by the core network;

The sending module 34 is connected with the receiving module 32, and is used to generate the terminal user's Internet access control information according to the Internet access request information and the group process control system's preset Internet access traffic authority for the end user, and send the Internet access control information to the terminal user. sent to the core network, wherein the Internet access control information is used by the core network to control the Internet traffic of the terminal user.

Through the above steps, the receiving module 22 is used to receive the Internet access request information forwarded by the core network, wherein the Internet access request information is the terminal user's Internet access request information received by the core network, and the sending module 24 is used to base the Internet access request information and the group The process control system generates Internet access control information of the end user based on the preset Internet traffic authority of the end user, and sends the Internet access control information to the core network, wherein the Internet access control information is used by the core network to control the end user. Internet flow control is carried out, which solves the problems of group users' online business monitoring and flow control imperfection, and improves the group user's Internet business control.

Fig. 4 is another structural block diagram of a control device for group Internet access according to an embodiment of the present invention. As shown in Fig. 4, in addition to the modules shown in Fig. 3, the device includes:

The authentication module 42 is connected with the sending module 34, and is used to generate the terminal user's Internet access control information according to the Internet access request information and the group's preset Internet access traffic authority for the end user, before the Internet access request information includes the In the case of the group to which the end user belongs and the online information of the end user, the group process control system identifies the group to which the end user belongs based on the group information, and authenticates the identity of the end user;

If the identity authentication is passed, the terminal user's Internet access control information is generated according to the Internet access information and the group's preset Internet access traffic authority for the end user.

Fig. 5 is another structural block diagram of a control device for group Internet access according to an embodiment of the present invention. As shown in Fig. 5, in addition to the modules shown in Fig. 3, the device also includes:

The monitoring module 51 is used to determine whether the online content or online location information is legal when the online request information includes online content or online location information, and if it is legal, generate Internet access control information for indicating that the terminal user is allowed to access the Internet, if Illegal, generate Internet access control information used to instruct termination of the terminal user's Internet access.

The acceleration module 52 is used to generate the Internet access control information when the Internet access URL included in the Internet access request information is in the preset accelerated URL list, wherein the Internet access control information is used to instruct the terminal user to access the Internet at the Internet access URL speed up to a predetermined threshold;

The traffic free module 53 is used to generate the Internet access control information that does not count the Internet traffic of the terminal user on the Internet site when the Internet site included in the online information is in the list of preset traffic free sites.

The time module 54 is used to judge whether the online time included in the online request information is within the preset online time period, if the online time is within the preset online time period, generate the online control information for indicating that the terminal user is allowed to surf the Internet, if Generate Internet access control information for instructing termination of the terminal user's Internet access not in the preset Internet access time period.

A query module 55, configured to send a traffic query request to the core network;

The query module 55 is also used to receive the query result of the core network's traffic query request;

When the query result indicates that the terminal user's Internet traffic exceeds a preset first threshold, the query module 55 instructs the core network to terminate the terminal user's Internet access;

When the query result indicates that the terminal user's Internet traffic is greater than the preset second threshold and smaller than the preset first threshold, the query module 55 instructs the core network to reduce the terminal user's Internet access speed, wherein the The preset first threshold is greater than the preset second threshold.

In this embodiment, it also includes a distribution module 56, configured to send traffic allocation request information to one or more target end users of the core network, wherein the traffic allocation information is used to indicate that the group process control system is ready to allocate to the the total number of traffic to one or more targeted end users;

The issuing module 56 is also configured to receive traffic allocation response information sent by the core network, wherein the traffic allocation response information is used to indicate the target end user who has applied for the traffic and the corresponding applied target traffic;

The issuing module 56 is further configured to instruct the core network to allocate the target traffic to the corresponding target end user who has applied for the target traffic, where the end user includes the target end user.

The present invention will be described in detail below in combination with preferred embodiments and implementation modes.

The embodiment of the present invention provides a group Internet access control scheme. According to the personality characteristics of current group users, the scheme provides a general Internet access scheme suitable for group users. The scheme includes the following contents:

1. According to the characteristics of group users, provide group users with exclusive Internet access solutions, including targeted red envelopes, exclusive Internet access settings, targeted website acceleration functions, and a series of group exclusive functions;

2. For the internal management requirements of group users, all members of the group use different users assigned by the group administrator to log in to the Internet and share the group traffic. The group administrator can monitor and set the user traffic within the group at any time. At the same time, the administrator can perform internal user traffic Account allocation, deletion, addition, management of each user's Internet access rights, Internet content, and other related content.

Fig. 6 is a schematic structural diagram of the system structure of group Internet access control according to a preferred embodiment of the present invention. As shown in Fig. 6, the group user Internet access control system includes:

Data communication interface: the communication interface between the system and the core network, the group user's online request and the data fed back by the core network can be processed by the system;

Main business logic area: handle various online logic and other business logic, including the administrator's operation logic.

Data storage area: used to store data such as system information and all user group account information, and store group account information and group sub-user related information.

The technical scheme of preferred implementation of the present invention comprises:

Group Internet access function: For the entire group, the operator assigns a group account to the group administrator, and the group administrator has the right to create group member accounts to access the Internet. Each member of the group does not need to apply for an account separately, purchase traffic, and directly use the internal account allocated within the group to access the Internet, and the traffic generated is calculated in the group account; the core network requests for Internet access by users within the group, according to the user's internal group The authority of the account, the current location and the current time are authenticated, and the user is only allowed to use the allocated traffic at the allowed online time and place. After the time and traffic are exceeded, an application can be sent to the group administrator, and then the traffic can be allocated or wait for the next one. month online.

For different group users, the system will provide customized traffic billing methods suitable for group users, group-specific acceleration strategies, and directional traffic packages.

During the process of the user surfing the Internet, the process of the external communication interface is as follows:

Step 1: The group member sends an access request to the core network, and the request includes the group number to which the user belongs, the user's unique identification group assigned account number, and the user's online information, including the online URL and online location;

Step 2: The Internet access request is converted into an internal protocol by the core network and sent to the group process control system through the external communication interface

Step 3: The group process control system will identify the group the user belongs to based on the unique identifier of the terminal, obtain the system information of the terminal, and then compare the actual information of the user with the obtained system information to determine whether the actual information of the user is legal And whether the user has access to the Internet;

Step 4: If the user information does not match the actual information, the authentication fails, and the system sends a message to inform the core network that the Internet access request is not allowed;

Step 5: If the user's current online request is passed, enter the group traffic monitoring system, and start the online process on the user according to the traffic that can be allocated to the terminal in the group to which the user belongs and the usage strategy of the group to which the user belongs (the specific online process will be described in detail below) ;

Step 6: When the user's online information including URL, online location and other related online information changes, the core network will notify the group's traffic control system of the new information of the user's location, and the group will authenticate the user again to determine whether the user's online information is legal , if the Internet access is not allowed, the core network will be notified to terminate the Internet connection; if the user can access the Internet, the user can continue to access the Internet at the new location

Step 7: When the system finds that the user triggers the condition of terminating the Internet access, it notifies the core network through the data communication interface to terminate the user's Internet access connection.

Fig. 7 is the internal block diagram of the group Internet access control system according to a preferred embodiment of the present invention, as shown in Fig. 7, the main logical area of the group traffic system mainly has the following modules:

The network monitoring module is responsible for monitoring the user's online process, such as whether the URL is legal, whether the online location is legal, and so on.

The traffic monitoring module is used to monitor the overall traffic of the group and the user traffic within the group, and slow down the Internet access processing for users who are about to reach the traffic threshold, so as to prevent extra charges from exceeding the traffic.

The Internet access acceleration module is used to provide group users with a certain number of websites to accelerate the Internet access function according to the characteristics of the group's commercialization. At the same time, it conducts data mining on the access to the internal website of the group, and provides a top10 Internet access list once a month.

The group-oriented network access module is used to customize functions for the group. The group can set up several websites.

The group red envelope issuing module is used for group tailor-made functions. The group can send a certain number of red envelopes. In the group package, users who grab the red envelopes can use the red envelope traffic without spending any fees during the online process.

The data storage module is used to store all group information of the system.

Administrator function: In order to achieve data security, a unified administrator interface is provided, and users use this interface to manage without touching data storage devices and logic. The group can set up one or more administrators. After the administrator password is authenticated, you can modify the members of your group, each member's Internet access time, traffic, group accelerated Internet website settings, group network black and white list settings, etc. through the management interface. Group Internet attributes;

In this preferred embodiment, the concept of group sharing is used. Multiple members in a group can share and use sub-accounts under a group account to access the Internet; the administrator can individually assign access to the Internet to each member, and control the duration of the member's Internet access. Traffic, Internet location, and the present invention proposes a series of new concepts aimed at group attributes, such as the concept of network acceleration, the concept of directional flow, and the concept of group online data mining, and has been successfully put into application, and the response is obvious;

Fig. 8 is a schematic flow chart of a user's Internet access process according to a preferred embodiment of the present invention. As shown in Fig. 8, the core network first needs to send an Internet access request to the external communication interface of the group flow control system. The triggering example adopted in this embodiment is that the user sets the APN as the group flow control system, and after the core network receives the APN's Internet access request, it sends the Internet access request to the external communication interface of the group flow control. The online request includes the unique identifier of the group to which the user belongs, location information, and online content. In an embodiment, the unique identifier may be the terminal's IMSI, mobile phone number, or other information, as long as the communication interface can identify a unique user.

The external communication interface converts the Internet access information requested by the user into an internal protocol of the system, and sends it to the group Internet access control system. The group Internet access control system will identify the group the user belongs to based on the user's unique identifier, and obtain the system information of the terminal. Then compare the user's actual information with the obtained system information to determine whether the user's actual information is legal and whether the user has access to the Internet.

Then the online content reported on the core network is matched with the content allowed to surf the Internet configured in the system. In one embodiment, the online content can be a URL; the user's location information can be the user's IP address, SGSN location information, and base station location information Wait.

According to the user's current location and current time, as well as the policy configured by the group to which the user belongs, the group user who has passed the authentication enters the main logic system of the group system;

Fig. 9 is a schematic flow diagram of the flow monitoring module according to a preferred embodiment of the present invention, as shown in Fig. 9,

The network monitoring module system starts the monitoring logic. This module mainly monitors whether the uniform resource locator (Uniform Resource Locator, referred to as URL) of the user online is legal, and whether the place where the user has already accessed the Internet is legal. Internet access blacklist and whitelist, the whitelist is the address allowed to access the Internet, the blacklist is the network address prohibited from accessing the Internet, the general administrator only needs to configure the blacklist; the Internet access location is also configured by the group administrator, if the core network returns If the base station information of the user is no longer within the address that can access the Internet, the user is not allowed to access the Internet at this location. The system sends a message to the core network through the communication interface. Resulting in failure to access the Internet; if the Internet access request is legal, enter the next process;

Traffic monitoring module The traffic monitoring module is mainly responsible for traffic monitoring. At this time, the system will first start the traffic monitoring session (session) for users under the group. The session will actively synchronize the Internet traffic data and other related information of users in the core network. The core network will not It is necessary to actively report data, so the active synchronization method reduces the pressure on the core network side and increases the robustness of the core network side compared with the core network reporting method. The system will query whether the monitoring session of the group corresponding to this user has been established. If it has been established, there is no need to start a new session. If not, a new session will be started to complete the monitoring of the group to which the user belongs. During the process of the user surfing the Internet, the session will always monitor the user's traffic. When the user's traffic is less than the threshold set by the system, the session will notify the core network, change the user's Internet access mode, and perform network speed reduction processing. At the same time, it will remind the user that the usage has reached the threshold. The set threshold, the system has already slowed down and asked whether to submit a new traffic application to the system. If the application is made, the group administrator will receive the application and determine whether to add new traffic to the user; when the user traffic is exhausted , the monitoring module will send a message to the core network, notify the core network, disconnect the user from the Internet, and send a message to the user at the same time, and then release the monitoring session; when the group traffic reaches the threshold, the session will also send a message to the group administrator , to ask whether to increase traffic; when the group's overall traffic is exhausted, the core network will disconnect all users of the entire group from connecting to the Internet and release all sessions at the same time.

Fig. 10 is a schematic flow diagram of the work of the network acceleration module according to a preferred embodiment of the present invention, as shown in Fig. 10,

Group Internet Acceleration Module This module provides group users with several websites that can speed up Internet access according to the characteristics of group users. The website address is configured by the group administrator. After the configured network address, the system will cache the website content by means of cache mirroring To the local, this will speed up the user's online experience and give the user a smooth network experience. After testing, the effect is very obvious. At the same time, the system provides a simple data mining function. In a regular period, such as a week or a month, statistics are made on the visits of the set websites, and top10 is selected for the group administrator, so that the group administrator can maintain the network address of the network acceleration module.

Fig. 11 is a schematic flow chart of the work of the directional flow module according to a preferred embodiment of the present invention, as shown in Fig. 11,

Group directional traffic module According to the characteristics of the group's Internet access, members of a certain group may visit several specific websites frequently and continuously, which will cause a large amount of directional traffic for a certain website by group users. For this characteristic of the group, the system Open a targeted traffic package. After the group customizes the package, you can set several URLs. The traffic of group members accessing these URLs will not be included in the group’s total package traffic. When accessing the configured URL, the system logic will notify the core network through the communication interface. Not counted in total traffic. At the same time, the group administrator can also configure the targeted URL, which is more flexible to use.

The group's directional traffic module sends traffic red envelopes through Weibo, WeChat and other public relations media at an appropriate time according to the group's own plan. The red envelopes can be ordinary red envelopes or directional traffic red envelopes. The targeted traffic red envelope is a traffic package for a specific website. After the user who grabs the red envelope is authenticated by the core network, he will become a temporary user of the group. When the time is exhausted, the system will log the user offline; the ordinary traffic red envelope is a package for all Internet addresses, and the users who grab the red envelope can enjoy all the treatment of the group users after the core network authentication, until the traffic is exhausted, the system will log the user off. Wire.

When the location of the user changes, or the user changes the online content, the core network sends an online request to the data communication interface. In one embodiment, it may only include location information, traffic information, or online content, or both. In an implementation manner, the network sends a request for surfing the Internet to the data communication interface, which may only include location information or surfing content, or both. The main business logic needs to be judged according to the Internet access request. If it only includes location information, then only the location information needs to be authenticated. If it only includes online content, then only the online content needs to be authenticated.

When the user's application reaches the threshold set by the system, the system will detect the user's traffic status at this time, and the system will communicate with the core network through the communication interface. For this, the user first takes measures to slow down the speed, that is, the 4G network slows down. To 3G or lower, this interface is the latest interface between the system and the core network. Previously, the core network would not take the initiative to reduce the speed of the user, only the user can unilaterally reduce the speed on the mobile phone side; at the same time, send messages to the administrator and the user respectively , Whether to increase the traffic, the user traffic has reached the threshold, send a message to the user, the traffic has reached the threshold, in order to reduce unnecessary waste, the system has actively slowed down for you. System administrators can increase traffic to users according to different situations. When the user traffic is exhausted, the system will report relevant information to the core network through the communication interface, and the core network will disconnect the user and send a message to remind. The system test will release the session monitored by this user. If the user traffic of the entire group reaches the upper limit, the system will send a message to the core network, disconnect all the links of the users under the group, release all monitoring sessions, and send a message to the system administrator to remind the traffic status of the group users at this time, so as to facilitate management staff for the next step.

Fig. 12 is a schematic flow diagram of a user going offline according to a preferred embodiment of the present invention, as shown in Fig. 12,

It can be seen that the system handles the user's active offline. The core network will actively report the user's usage status. The group data traffic control system will process the user's usage results, accumulate the traffic used by the user, and release the held session at the same time.

In a preferred embodiment of the present invention, the user's management operation includes: the group flow control system provides a series of management operation interfaces, XML protocol or other protocols can be used, and the system can be converted into an internal protocol. An example used in this embodiment It is: 01=increase member, 02=delete member, 03=modify member; 11=set up the allowed time of the member to go online, 12:=set up the place where the member is allowed to go online, 21=set up the blacklist of the group to go online, 22=set up the whitelist of the group to go online, 23 set the group to speed up the Internet access; 32 = query the user's online status, 33 = query the user configuration information; etc.

Administrator operations, including adding/deleting/modifying members, managing member permissions, configuring accelerated URLs, configuring group Internet access black and white lists, configuring system traffic thresholds, user traffic thresholds, configuring directional network addresses, etc., and saving the results after execution to the data storage device, and then send the request result to the data communication interface; or query user information and Internet access, and send the query result to the data communication interface;

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is better implementation. Based on such an understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products are stored in a storage medium (such as ROM/RAM, disk, CD) contains several instructions to enable a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in various embodiments of the present invention.

It should be noted that each of the above-mentioned modules can be implemented by software or hardware. For the latter, it can be implemented in the following manner, but not limited to this: the above-mentioned modules are all located in the same processor; or, the above-mentioned modules are respectively located in multiple in the processor.

The embodiment of the invention also provides a storage medium. Optionally, in this embodiment, the foregoing storage medium may be configured to store program codes for executing the method steps of the foregoing embodiments:

Optionally, the storage medium is also configured to store program codes for executing the method steps of the foregoing embodiments:

Optionally, in this embodiment, the above-mentioned storage medium may include but not limited to: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk Various media that can store program codes such as discs or optical discs.

Optionally, in this embodiment, the processor executes the method steps of the foregoing embodiments according to the program code stored in the storage medium.

Obviously, those skilled in the art should understand that each module or each step of the above-mentioned present invention can be realized by a general-purpose computing device, and they can be concentrated on a single computing device, or distributed in a network formed by multiple computing devices Alternatively, they may be implemented in program code executable by a computing device so that they may be stored in a storage device to be executed by a computing device, and in some cases, in an order different from that shown here The steps shown or described are carried out, or they are separately fabricated into individual integrated circuit modules, or multiple modules or steps among them are fabricated into a single integrated circuit module for implementation. As such, the present invention is not limited to any specific combination of hardware and software.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (14)

1. the control method that a kind of group surfs the Net, it is characterised in that including：

Group's process control system receives the online solicited message of core net forwarding, wherein, the online solicited message It is the online solicited message of the terminal user that core net is received；

Group's process control system is according to online solicited message and group's process control system pair The online control information of terminal user described in the surfing flow permission build for pre-setting of the terminal user, and will The online control information is sent to the core net, wherein, the online control information is used for the core net pair The terminal user carries out surfing flow control.

2. method according to claim 1, it is characterised in that

Group's process control system is according to the online solicited message and the group to the terminal user The surfing flow permission build for pre-setting described in terminal user online control information before, methods described is also wrapped Include：Include the online letter of the group and the terminal user belonging to the terminal user in the online solicited message In the case of breath, group's process control system identified according to group's information and collect belonging to the terminal user Group, and identification authentication is carried out to the terminal user；

Group's process control system is according to online solicited message and group's process control system pair The online control information of terminal user includes described in the surfing flow permission build for pre-setting of the terminal user： If the identification authentication passes through, group's process control system is according to the internet information and the group To the online control information of terminal user described in the surfing flow permission build for pre-setting of the terminal user.

3. method according to claim 1, it is characterised in that group's process control system please according to the online Information and group's process control system is asked to give birth to the surfing flow authority for pre-setting of the terminal user Online control information into the terminal user includes：

In the case of the online solicited message includes internet content or online positional information, judge in the online Hold or whether online positional information is legal, if legal, generate for indicating to allow what the terminal user surfed the Net Net control information, if illegal, generates for indicating to terminate the online control information that the terminal user surfs the Net.

4. method according to claim 1, it is characterised in that group's process control system please according to the online Information and group's process control system is asked to give birth to the surfing flow authority for pre-setting of the terminal user Online control information into the terminal user includes：

In the case where the online network address that the online solicited message includes is in default acceleration network address list, institute is generated Online control information is stated, wherein, the online control information is used to indicate the terminal user in the online network address Networking speed accelerate to predetermined threshold；

In the case where the online network address that the internet information includes is in preset flow free address list, generation is not Count online control information of the terminal user in the surfing flow of the online network address.

5. method according to claim 1, it is characterised in that group's process control system please according to the online Information and group's process control system is asked to give birth to the surfing flow authority for pre-setting of the terminal user Online control information into the terminal user includes：

Whether online surf time for including of solicited message is judged in the default surf time section, if during the online Between in default surf time section, generate the online control information for indicating to allow the terminal user to surf the Net, If not in section of default surf time, generating for indicating to terminate the online control information that the terminal user surfs the Net.

6. method according to claim 1, it is characterised in that the online control information is sent to the core net Include afterwards：

Group's process control system is to the core net transmitted traffic inquiry request；

Group's process control system receives Query Result of the core net to the flow inquiry request；

In the case where the Query Result indicates the surfing flow of the terminal user to exceed preset first threshold value, institute Stating group's process control system indicates the core net to terminate terminal user's online；

The surfing flow of the terminal user is indicated to be more than default Second Threshold and less than described in the Query Result In the case of preset first threshold value, group's process control system indicates the core net reduction terminal user Online network speed, wherein, the preset first threshold value be more than the default Second Threshold.

7. method according to claim 1, it is characterised in that also include：

Group's process control system divides to one or more destination end user transmitted traffics of the core net With solicited message, wherein, the traffic allocation information is used to indicate group's process control system to prepare to distribute to The sum of the flow of one or more of destination end users；

Group's process control system receives the assignment of traffic response message that the core net sends, wherein, it is described Assignment of traffic response message is used to indicate to have applied for what is arrived to the destination end user of the flow and corresponding application Target flow；

The target flow is distributed to corresponding application and arrived by group's process control system instruction core net The destination end user of the target flow, wherein, the terminal user includes the destination end user.

8. the control device that a kind of group surfs the Net, in group's process control system, it is characterised in that including：

Receiver module, the online solicited message for receiving core net forwarding, wherein, the online solicited message is The online solicited message of the terminal user that core net is received；

Sending module, for according to it is described online solicited message and group's process control system to the end The online control information of terminal user described in the surfing flow permission build for pre-setting of end subscriber, and will be described on Net control information is sent to the core net, wherein, the online control information is used for the core net to the end End subscriber carries out surfing flow control.

9. device according to claim 8, it is characterised in that described device also includes：

Authentication module, for according to it is described online solicited message and the group to the advance of the terminal user Before the online control information of terminal user described in the surfing flow permission build of setting, in the online solicited message In the case of internet information including the group belonging to the terminal user and the terminal user, the collection bolus flow Process control system identifies terminal user's membership group according to group's information, and the terminal user is entered Row identification authentication；

If the identification authentication passes through, according to the internet information and the group to the terminal user's The online control information of terminal user described in the surfing flow permission build for pre-setting.

10. device according to claim 8, it is characterised in that described device also includes：

Monitoring module, in the case of including internet content or online positional information in the online solicited message, Judge whether the internet content or online positional information are legal, if legal, generate for indicating to allow the end The online control information of end subscriber online, if illegal, generates for indicating to terminate terminal user's online Net control information.

11. devices according to claim 8, it is characterised in that described device also includes：

Accelerating module, in the online network address that includes of online solicited message in default acceleration network address list In the case of, the online control information is generated, wherein, the online control information is used to indicate the terminal user Predetermined threshold is accelerated in the networking speed of the online network address；

The free module of flow, for the online network address that includes in the internet information in preset flow free address list In in the case of, generation do not count the terminal user it is described online network address surfing flow online control information.

12. devices according to claim 8, it is characterised in that described device also includes：

Time module, for whether judging online surf time for including of solicited message in the default surf time section, If the surf time, in the default surf time section, is generated for indicating to allow what the terminal user surfed the Net Net control information, if not in section of default surf time, generating for indicating to terminate the online that the terminal user surfs the Net Control information.

13. devices according to claim 8, it is characterised in that described device also includes：

Enquiry module, for the core net transmitted traffic inquiry request；

The enquiry module, is additionally operable to receive Query Result of the core net to the flow inquiry request；

In the case where the Query Result indicates the surfing flow of the terminal user to exceed preset first threshold value, institute Stating enquiry module indicates the core net to terminate terminal user's online；

The surfing flow of the terminal user is indicated to be more than default Second Threshold and less than described in the Query Result In the case of preset first threshold value, the enquiry module indicates the online net of the core net reduction terminal user Speed, wherein, the preset first threshold value is more than the default Second Threshold.

14. devices according to claim 8, it is characterised in that described device also includes：

Module is provided, for believing to one or more destination end user transmitted traffic distribution requests of the core net Breath, wherein, the traffic allocation information is one for indicating group's process control system preparation to distribute to Or the sum of the flow of multiple destination end users；

The granting module, is additionally operable to receive the assignment of traffic response message that the core net sends, wherein, it is described Assignment of traffic response message is used to indicate to have applied for what is arrived to the destination end user of the flow and corresponding application Target flow；

The granting module, is additionally operable to indicate the core net that the target flow is distributed into corresponding application to institute The destination end user of target flow is stated, wherein, the terminal user includes the destination end user.