[go: up one dir, main page]

CN116567700B - Abnormality determination method, abnormality determination device, server and storage medium - Google Patents

Abnormality determination method, abnormality determination device, server and storage medium Download PDF

Info

Publication number
CN116567700B
CN116567700B CN202310746233.5A CN202310746233A CN116567700B CN 116567700 B CN116567700 B CN 116567700B CN 202310746233 A CN202310746233 A CN 202310746233A CN 116567700 B CN116567700 B CN 116567700B
Authority
CN
China
Prior art keywords
identified
terminal
tmsi
base station
target
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202310746233.5A
Other languages
Chinese (zh)
Other versions
CN116567700A (en
Inventor
徐永东
程兵
夏小祥
征国庆
邹大林
姚震
邹云龙
刘玉凤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202310746233.5A priority Critical patent/CN116567700B/en
Publication of CN116567700A publication Critical patent/CN116567700A/en
Application granted granted Critical
Publication of CN116567700B publication Critical patent/CN116567700B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/08—Testing, supervising or monitoring using real traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H04W24/10—Scheduling measurement reports ; Arrangements for measurement reports
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/70—Reducing energy consumption in communication networks in wireless communication networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The application provides an anomaly determination method, an anomaly determination device, a server and a storage medium, relates to the technical field of communication, and solves the technical problem that an anomaly terminal cannot be accurately and effectively determined in a manual investigation mode under the condition that the number of terminals is large. The method comprises the steps of determining network data of a base station to be identified, determining whether signal strength of a terminal to be identified is smaller than a signal strength threshold and whether signal quality of the terminal to be identified is smaller than a signal quality threshold under the condition that access success rate of the base station to be identified is smaller than a success rate threshold, uplink interference parameters of the base station to be identified is larger than an interference parameter threshold and uplink weak coverage parameters of the base station to be identified are larger than a weak coverage threshold, and determining that the terminal to be identified is an abnormal terminal under the condition that signal strength of the terminal to be identified is smaller than the signal strength threshold and/or signal quality of the terminal to be identified is smaller than the signal quality threshold.

Description

Abnormality determination method, abnormality determination device, server and storage medium
Technical Field
The present application relates to the field of communications technologies, and in particular, to an anomaly method, an anomaly device, a server, and a storage medium.
Background
Currently, whether a terminal is an abnormal terminal can be determined through a manual checking mode. Specifically, if a certain terminal is abnormally powered off for a plurality of times within a period of time, the terminal can be determined to be an abnormal terminal.
However, in the case of a large number of terminals, the abnormal terminals may not be accurately and effectively determined by manual investigation.
Disclosure of Invention
The application provides an anomaly determination method, an anomaly determination device, a server and a storage medium, which solve the technical problem that an anomaly terminal cannot be accurately and effectively determined by a manual investigation mode under the condition that the number of terminals is large.
In a first aspect, the application provides an anomaly determination method, which comprises the steps of determining network data of a base station to be identified, wherein the network data of the base station to be identified comprises an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified and an uplink weak coverage parameter of the base station to be identified, the access success rate of the base station to be identified is used for representing the probability that at least one terminal corresponding to the base station to be identified is successfully accessed to the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on the signal quality of each terminal in the at least one terminal, the uplink weak coverage parameter of the base station to be identified is determined based on the signal strength of each terminal, and when the access success rate of the base station to be identified is smaller than a success rate threshold, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold, whether the signal strength of a terminal to be identified is smaller than a signal strength threshold and whether the signal quality of the terminal to be identified is smaller than a signal quality threshold, the terminal to be identified is the signal quality of the terminal to be identified is smaller than the signal quality threshold, and/is determined that the signal quality of the terminal to be identified is smaller than the signal quality threshold.
Optionally, the anomaly determination method further comprises the steps of determining whether alarm information exists in the base station to be identified in a preset time period under the condition that state information of target configuration information is in a normal state, wherein the target configuration information is used for indicating that the base station to be identified has a terminal access function, and determining whether the access success rate of the base station to be identified is smaller than the success rate threshold under the condition that the base station to be identified does not exist the alarm information in the preset time period.
In the application, when the state information of the target configuration information is in a normal state, the base station to be identified can normally receive the access request sent by the terminal, at the moment, the server can determine whether the base station to be identified has alarm information in a preset time period, and when the base station to be identified does not have alarm information in the preset time period, the base station to be identified does not send alarm information in the preset time period, and the server can determine that the base station to be identified is in a normal state. At this time, the server may determine whether the access success rate of the base station to be identified is smaller than a success rate threshold, and further determine whether an abnormal terminal exists in at least one terminal corresponding to the base station to be identified. The working state of the base station can be accurately and effectively determined, and the determination efficiency of the abnormal base station is further improved.
Optionally, the anomaly determination method further comprises determining anomaly times of at least one user temporary identifier (temporary mobile subscriber identity, TMSI) when state information of a mobile management entity (mobile MANAGEMENT ENTITY, MME) is in an anomaly state and state information of an access and mobility management function (ACCESS AND mobility management function, AMF) is in an anomaly state, wherein one TMSI is a TMSI included in one access request received by the base station to be identified, the anomaly times of the one TMSI are used for representing the access request corresponding to the TMSI as times of access failure, determining whether first distance information is identical to second distance information when the anomaly times of the first TMSI are larger than a preset times and the anomaly times of the second TMSI are larger than the preset times, the first distance information is distance information corresponding to the first TMSI, the second distance information is distance information corresponding to the second TMSI, the first distance information is used for representing a distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing a distance between the terminal corresponding to the second TMSI and the base station to be identified, the second distance information is used for representing a distance between the terminal corresponding to the first TMSI and the base station to be identified, determining whether the first distance information is identical to the first TMSI, the first TMSI is located in the anomaly state, the first TMSI is located in the first TMSI is located at least one of the first TMSI, and the TMSI is located at the first TMSI is located opposite than the first TMSI is located opposite the first TMSI.
In the present application, when the state information of the MME is in an abnormal state and the state information of the AMF is in an abnormal state, it is indicated that both the MME and the AMF are abnormal, and it may be understood that there are some access requests whose access states are access failures, specifically, that at least one of the above-mentioned terminals has a case that the terminal to be identified cannot be normally accessed. In this case, the server may determine the abnormal times of the TMSI included in each access request in at least one access request received by the base station to be identified, and if the abnormal times of the first TMSI are greater than the preset times, it may be stated that the abnormal times of the first TMSI are greater, or it may be understood that the access request sent by the terminal corresponding to the first TMSI to the base station to be identified has multiple access failures. Similarly, the access request sent by the terminal corresponding to the second TMSI to the base station to be identified also has multiple access failure situations. The server can determine whether the first distance information is the same as the second distance information, specifically, whether the distance between the terminal corresponding to the first TMSI and the base station to be identified is equal to the distance between the terminal corresponding to the second TMSI and the base station to be identified, and under the condition that the first distance information is the same as the second distance information, the terminal corresponding to the first TMSI and the terminal corresponding to the second TMSI are the same terminal (namely, the target terminal), at the moment, the server can determine whether the signal level of the target terminal is within the preset range, and under the condition that the signal level of the target terminal is within the preset range, the server can determine that the base station to be identified is in a normal state, and then the server can determine that the efficiency of utilizing the signal level of the target terminal is extremely low, so that the server can accurately and effectively determine that the target terminal is an abnormal terminal.
Optionally, the anomaly determination method further comprises the steps of obtaining a target time and a target TMSI, wherein the target time is the sending time of the access request sent by the terminal to be identified, the target TMSI is the TMSI included in the access request sent by the terminal to be identified, inquiring a first corresponding relation based on a target time interval and the target TMSI to obtain the IMSI of the terminal to be identified, the first corresponding relation is used for indicating time intervals and TMSI corresponding to one or more IMSI, the minimum value of the target time interval is smaller than or equal to the target time, the maximum value of the target time interval is larger than or equal to the target time, the MDN of the terminal to be identified is determined based on the IMSI of the terminal to be identified and a second corresponding relation, the second corresponding relation comprises a plurality of IMSI and MDNs corresponding to the IMSI, and the MDN of the terminal to be identified is used for sending target prompt information to the terminal to be identified, and the target prompt that the anomaly exists in the terminal to be identified.
In the application, a server can acquire a target time and a target TMSI, wherein the target time is the time of an access request sent by a terminal to be identified, the target TMSI is the TMSI included in the access request sent by the terminal to be identified, then the server can determine a time interval corresponding to the target time (namely, a target time interval), and inquire a first corresponding relation based on the target time interval and the target TMSI to acquire IMSI corresponding to the target time interval and the target TMSI (namely, the IMSI of the terminal to be identified), and then the server can determine MDN corresponding to the IMSI of the terminal to be identified from a second corresponding relation, namely, the MDN of the terminal to be identified can be determined, and the MDN of each terminal can be conveniently and rapidly determined. Finally, the server can send target prompt information to the terminal to be identified based on the MDN of the terminal to be identified, so that the terminal to be identified can be accurately and effectively prompted to have abnormality, and the abnormality reminding efficiency is improved.
The application provides an anomaly determination device, which comprises a determination module, a determination module and a determination module, wherein the determination module is used for determining network data of a base station to be identified, the network data of the base station to be identified comprises an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified and an uplink weak coverage parameter of the base station to be identified, the access success rate of the base station to be identified is used for representing the probability that at least one terminal corresponding to the base station to be identified is successfully accessed into the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on the signal quality of each terminal in the at least one terminal, the uplink weak coverage parameter of the base station to be identified is determined based on the signal strength of each terminal, and the determination module is further used for determining whether the signal strength of the terminal to be identified is smaller than the signal strength threshold and whether the signal quality of the terminal to be identified is smaller than the signal quality threshold or not is smaller than the signal strength threshold when the access success rate of the base station to be identified is smaller than the success rate threshold, the uplink interference parameter of the base station to be identified is greater than the interference parameter threshold and the uplink weak coverage parameter of the base station to be identified.
Optionally, the determining module is further configured to determine whether the to-be-identified base station has alarm information within a preset duration when the state information of the target configuration information is in a normal state, where the target configuration information is used to indicate that the to-be-identified base station has a terminal access function, and the determining module is further configured to determine whether an access success rate of the to-be-identified base station is less than the success rate threshold when the to-be-identified base station does not have alarm information within the preset duration.
Optionally, the determining module is further configured to determine, when the state information of the MME is an abnormal state and the state information of the AMF is an abnormal state, an abnormal number of times of at least one TMSI, where one TMSI is a TMSI included in one access request received by the base station to be identified, and the abnormal number of times of one TMSI is used to characterize that an access request corresponding to the TMSI is a number of times of access failure; the determining module is further configured to determine whether first distance information is the same as second distance information when the number of anomalies of the first TMSI is greater than a preset number and the number of anomalies of the second TMSI is greater than the preset number, the first distance information is the distance information corresponding to the first TMSI, the second distance information is the distance information corresponding to the second TMSI, the first distance information is used for representing a distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing a distance between the terminal corresponding to the second TMSI and the base station to be identified, the first TMSI is one of the at least one TMSI, the second TMSI is one TMSI other than the first TMSI in the at least one TMSI, the determining module is further configured to determine whether a signal level of a target terminal is within a range when the first distance information is the same as the second distance information, the target terminal is the terminal corresponding to the first TMSI, the second TMSI is the terminal, the determining module is further configured to determine that the target terminal is within the range, and the target terminal is the anomaly.
The abnormal determination device further comprises an acquisition module and a sending module, wherein the acquisition module is used for acquiring target time and target TMSI, the target time is the sending time of an access request sent by the terminal to be identified, the target TMSI is the TMSI included in the access request sent by the terminal to be identified, the acquisition module is further used for inquiring a first corresponding relation based on a target time interval and the target TMSI to acquire the IMSI of the terminal to be identified, the first corresponding relation is used for indicating time intervals and TMSI corresponding to one or more IMSI, the minimum value of the target time interval is smaller than or equal to the target time, the maximum value of the target time interval is larger than or equal to the target time, the determination module is further used for determining the MDN of the terminal to be identified based on the IMSI of the terminal to be identified and a second corresponding relation, the second corresponding relation comprises a plurality of IMSI and a plurality of MDNs respectively corresponding to each other, and the sending module is used for sending target prompt information to the terminal to be identified based on the MDN of the terminal to be identified, and the target prompt information is used for prompting that the abnormal terminal to exist.
In a third aspect, the present application provides a server comprising a processor and a memory configured to store processor-executable instructions, wherein the processor is configured to execute the instructions to implement any of the above-described optional anomaly determination methods of the first aspect.
In a fourth aspect, the present application provides a computer readable storage medium having instructions stored thereon which, when executed by a server, enable the server to perform any one of the above-described optional anomaly determination methods of the first aspect.
The method, the device, the server and the storage medium for determining the anomalies are characterized in that the server determines network data of a base station to be identified, and determines whether the signal strength of a terminal to be identified is smaller than a signal strength threshold and whether the signal quality of the terminal to be identified is smaller than a signal quality threshold or not under the conditions that the access success rate of the base station to be identified is smaller than a success rate threshold, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold, and/or determines that the terminal to be identified is an anomalous terminal under the conditions that the signal strength of the terminal to be identified is smaller than a signal strength threshold and/or the signal quality of the terminal to be identified is smaller than a signal quality threshold. In the application, the server can determine the network data of the base station to be identified, wherein the network data of the base station to be identified comprises the access success rate of the base station to be identified, the uplink interference parameter of the base station to be identified and the uplink weak coverage parameter of the base station to be identified, and when the access success rate of the base station to be identified is smaller than a success rate threshold value, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold value and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold value, the situation that the access condition of the base station to be identified is poor (or the network between the base station to be identified and at least one terminal is also understood to be abnormal) is indicated, and the base station to be identified is in a normal state (or a non-abnormal state). At this time, the server may determine whether a terminal whose signal strength is less than a signal strength threshold and whose signal quality is less than a signal quality threshold exists in at least one terminal corresponding to the base station to be identified. And under the condition that the signal strength of the terminal to be identified is smaller than the signal strength threshold value and/or the signal quality of the terminal to be identified is smaller than the signal quality threshold value, the signal strength of the terminal to be identified is smaller and/or the signal quality of the terminal to be identified is poorer, and the server can determine the terminal to be identified as an abnormal terminal. The abnormal terminal can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below.
FIG. 1 is a schematic flow chart of an anomaly determination method according to an embodiment of the present application;
FIG. 2 is a flowchart of another anomaly determination method according to an embodiment of the present application;
FIG. 3 is a flowchart illustrating another anomaly determination method according to an embodiment of the present application;
FIG. 4 is a flowchart of another anomaly determination method according to an embodiment of the present application;
Fig. 5 is a schematic structural diagram of an abnormality determining apparatus according to an embodiment of the present application;
fig. 6 is a schematic structural diagram of another abnormality determining apparatus according to an embodiment of the present application.
Detailed Description
The abnormality determination method, apparatus, server and storage medium provided in the embodiments of the present application will be described in detail below with reference to the accompanying drawings.
The terms "first" and "second" and the like in the description and in the drawings of the present application are used for distinguishing between different objects and not for describing a particular sequence of objects, e.g. the first TMSI and the second TMSI etc. are used for distinguishing between different TMSIs and not for describing a particular sequence of TMSIs.
Furthermore, references to the terms "comprising" and "having" and any variations thereof in the description of the present application are intended to cover a non-exclusive inclusion. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed but may optionally include other steps or elements not listed or inherent to such process, method, article, or apparatus.
It should be noted that, in the embodiments of the present application, words such as "exemplary" or "such as" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "e.g." in an embodiment of the present application is not to be taken as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete fashion.
The term "and/or" as used herein includes the use of either or both of these methods.
In the description of the present application, unless otherwise indicated, the meaning of "a plurality" means two or more.
Based on the description in the background art, in the case that the number of abnormal terminals is large, the abnormal terminals may not be accurately and effectively determined by means of manual investigation. Based on this, the embodiment of the application provides an anomaly determination method, an anomaly determination device, a server and a storage medium, wherein the server can determine network data of a base station to be identified, the network data of the base station to be identified comprises an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified and an uplink weak coverage parameter of the base station to be identified, and when the access success rate of the base station to be identified is smaller than a success rate threshold, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold, the situation that the access condition of the base station to be identified is poor (or the network between the base station to be identified and at least one terminal is also understood to be abnormal), and the base station to be identified is in a normal state (or a non-abnormal state). At this time, the server may determine whether a terminal whose signal strength is less than a signal strength threshold and whose signal quality is less than a signal quality threshold exists in at least one terminal corresponding to the base station to be identified. And under the condition that the signal strength of the terminal to be identified is smaller than the signal strength threshold value and/or the signal quality of the terminal to be identified is smaller than the signal quality threshold value, the signal strength of the terminal to be identified is smaller and/or the signal quality of the terminal to be identified is poorer, and the server can determine the terminal to be identified as an abnormal terminal. The abnormal terminal can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
The server for executing the anomaly determination method provided by the embodiment of the application can be an independent physical server, a server cluster or a distributed system formed by a plurality of physical servers, and can also be a cloud server for providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, network acceleration services (content delivery network, CDN), basic cloud computing services such as big data and artificial intelligent platforms.
As shown in fig. 1, the anomaly determination method provided in the embodiment of the present application may include S101 to S103.
S101, the server determines network data of the base station to be identified.
The network data of the base station to be identified comprises an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified and an uplink weak coverage parameter of the base station to be identified, wherein the access success rate of the base station to be identified is used for representing the probability that at least one terminal corresponding to the base station to be identified is successfully accessed to the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on the signal quality of each terminal in the at least one terminal, and the uplink weak coverage parameter of the base station to be identified is determined based on the signal strength of each terminal.
In one implementation manner of the embodiment of the present application, the server may determine a total number of times the at least one terminal accesses the base station to be identified (or a total number of times the at least one terminal transmits an access request to the base station to be identified), and a number of times the at least one terminal successfully accesses the base station to be identified. And then the server determines the ratio of the times that the at least one terminal is successfully accessed to the base station to be identified to the total times as the access success rate of the base station to be identified.
In an alternative implementation, the signal quality of a terminal may be the signal-to-interference-plus-noise ratio (signal to interference plus noise ratio, SINR) of the terminal, and the signal strength of a terminal may be the reference signal received power (REFERENCE SIGNAL RECEIVING power, RSRP) of the terminal.
Alternatively, the server may determine an average value of the signal quality of each terminal of the at least one terminal as the uplink interference parameter of the base station to be identified, and determine an average value of the signal strength of each terminal as the uplink weak coverage parameter of the base station to be identified.
For example, the uplink interference parameter of the base station to be identified may be a signal to interference plus noise ratio per radio access bearer (signal to interference plus noise ratio/radio access bearer, SINR/RAB) of the base station to be identified. The uplink weak coverage parameter of the base station to be identified may be a reference signal received power per radio access bearer (REFERENCE SIGNAL RECEIVING power/radio access bearer, RSRP/RAB) of the base station to be identified.
S102, under the condition that the access success rate of the base station to be identified is smaller than a success rate threshold, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold, the server determines whether the signal strength of the terminal to be identified is smaller than a signal strength threshold and whether the signal quality of the terminal to be identified is smaller than a signal quality threshold.
The terminal to be identified is a terminal included in the at least one terminal.
It should be understood that, when the access success rate of the base station to be identified is smaller than the success rate threshold, it indicates that the access condition of the base station to be identified is poor (or may also be understood that there is an abnormality in the network between the base station to be identified and at least one terminal), at this time, the server may determine whether the uplink interference parameter of the base station to be identified is greater than the interference parameter threshold and whether the uplink weak coverage parameter of the base station to be identified is greater than the weak coverage threshold. And when the uplink interference parameter of the base station to be identified is greater than the interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is greater than the weak coverage threshold, indicating that the base station to be identified is in a normal state (or a non-abnormal state), determining whether a terminal with signal strength smaller than the signal strength threshold and with signal quality smaller than the signal quality threshold exists in at least one terminal by the server.
Illustratively, the success rate threshold may be 80%, the interference parameter threshold may be 70db, and the weak coverage threshold may be-100 dbm.
And S103, determining the terminal to be identified as an abnormal terminal by the server under the condition that the signal strength of the terminal to be identified is smaller than a signal strength threshold value and/or the signal quality of the terminal to be identified is smaller than a signal quality threshold value.
It should be understood that, in the case where the signal strength of the terminal to be identified is less than the signal strength threshold and/or the signal quality of the terminal to be identified is less than the signal quality threshold, it is indicated that the signal strength of the terminal to be identified is less and/or the signal quality of the terminal to be identified is poor, at this time, the server may determine the terminal to be identified as an abnormal terminal. The abnormal terminal can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
It should be noted that, the number of the base stations to be identified may be one or a plurality of base stations, and the number of the terminals to be identified may be one or a plurality of base stations to be identified.
In an alternative implementation manner, the server may determine that the terminal to be identified is a normal terminal when the signal strength of the terminal to be identified is greater than or equal to the signal strength threshold and the signal quality of the terminal to be identified is greater than or equal to the signal quality threshold.
The technical scheme provided by the embodiment at least has the following beneficial effects that the server can determine the network data of the base station to be identified, wherein the network data of the base station to be identified comprises the access success rate of the base station to be identified, the uplink interference parameter of the base station to be identified and the uplink weak coverage parameter of the base station to be identified, and the access condition of the base station to be identified is poor (or can be understood that the network between the base station to be identified and at least one terminal is abnormal) when the access success rate of the base station to be identified is smaller than a success rate threshold value, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold value and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold value, and the base station to be identified is in a normal state (or a non-abnormal state). At this time, the server may determine whether a terminal whose signal strength is less than a signal strength threshold and whose signal quality is less than a signal quality threshold exists in at least one terminal corresponding to the base station to be identified. And under the condition that the signal strength of the terminal to be identified is smaller than the signal strength threshold value and/or the signal quality of the terminal to be identified is smaller than the signal quality threshold value, the signal strength of the terminal to be identified is smaller and/or the signal quality of the terminal to be identified is poorer, and the server can determine the terminal to be identified as an abnormal terminal. The abnormal terminal can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
Referring to fig. 1, as shown in fig. 2, the anomaly determination method provided in the embodiment of the present application may further include S104-S105.
S104, under the condition that the state information of the target configuration information is in a normal state, the server determines whether the base station to be identified has alarm information within a preset time length.
The target configuration information is used for indicating that the base station to be identified has a terminal access function.
It should be understood that the target configuration information is the configuration information of the base station to be identified. The state information of one configuration information (e.g., target configuration information) may be a normal state or an abnormal state.
It can be understood that, when the state information of the target configuration information is in a normal state, it is indicated that the base station to be identified can normally receive the access request sent by the terminal (specifically, the at least one terminal) and the server can determine whether the base station to be identified has alarm information within a preset duration, or whether the base station to be identified sends alarm information within the preset duration.
S105, under the condition that the base station to be identified does not have alarm information within a preset time period, the server determines whether the access success rate of the base station to be identified is smaller than a success rate threshold value.
It should be understood that, when the base station to be identified does not have alarm information within the preset time, it is indicated that the base station to be identified does not send alarm information within the preset time, and it may also be understood that the base station to be identified does not have abnormal conditions within the preset time, that is, the server may determine that the base station to be identified is in a normal state. At this time, the server may determine whether the access success rate of the base station to be identified is smaller than a success rate threshold, and further determine whether an abnormal terminal exists in at least one terminal corresponding to the base station to be identified.
In an optional implementation manner, when the base station to be identified has alarm information in a preset time period, the base station to be identified is described to send out alarm information in the preset time period, and the base station to be identified can be understood to have abnormal condition in the preset time period. The server may determine that the base station to be identified is in an abnormal state at this time (or the server may determine the base station to be identified as an abnormal base station).
In another optional implementation manner, the server may also determine that the base station to be identified is in an abnormal state when the state of the target configuration information is an abnormal state and/or the base station to be identified has alarm information within a preset duration.
In the embodiment of the application, when the state information of the target configuration information is in a normal state, the base station to be identified can normally receive the access request sent by the terminal, at the moment, the server can determine whether the base station to be identified has alarm information in a preset time period, and when the base station to be identified does not have alarm information in the preset time period, the base station to be identified does not send alarm information in the preset time period, and the base station to be identified can also be understood as not having abnormal condition in the preset time period, namely the server can determine that the base station to be identified is in a normal state. At this time, the server may determine whether the access success rate of the base station to be identified is smaller than a success rate threshold, and further determine whether an abnormal terminal exists in at least one terminal corresponding to the base station to be identified. The working state of the base station can be accurately and effectively determined, and the determination efficiency of the abnormal base station is further improved.
Referring to fig. 1, as shown in fig. 3, the anomaly determination method provided in the embodiment of the present application may further include S106 to S109.
S106, when the state information of the MME is in an abnormal state and the state information of the AMF is in an abnormal state, the server determines the abnormal times of at least one TMSI.
Wherein, one TMSI is the TMSI included in one access request received by the base station to be identified, and the abnormal times of one TMSI are used for representing that the access request corresponding to the TMSI is the times of access failure.
It should be understood that the base station to be identified may receive a plurality of access requests sent by the at least one terminal, where one access request includes one TMSI.
It should be understood that, when the state information of the MME is an abnormal state and the state information of the AMF is an abnormal state, it is indicated that both the MME and the AMF are abnormal, and it may also be understood that there are some access requests whose access states are access failures, specifically, at least one of the above-mentioned terminals has a situation that the terminal to be identified cannot be normally accessed. At this time, the server may determine the abnormal number of TMSI included in each of the at least one access request received by the base station to be identified.
In an alternative implementation manner, a report of the abnormal situation may be stored in the server, and based on the report of the abnormal situation, the abnormal number of times of the MME is obtained, so as to determine the state information of the MME.
For example, table 1 below is an example of an abnormal situation report provided in an embodiment of the present application. Specifically, the report of the abnormal situation includes the type of access failure, the root problem, the first-level problem, the number of times of the problem and the percentage of the problem.
TABLE 1
It should be noted that, in table 1, the types of access failures include an evolved radio bearer establishment failure and a user environment establishment failure, a root problem may include one or more primary problems, the number of times of the problem is a root problem or the number of times of occurrence of an abnormal situation caused by a primary problem, the percentage of the problem is a ratio between the number of times of occurrence of an abnormal situation caused by a root problem or a primary problem and the total number of times of occurrence of an abnormal situation, and the X2API (Experience, application Program Interface) problem is a problem of the second-generation application program interface platform protocol.
Alternatively, a TMSI exception table may be stored in the server, and based on the TMSI exception table, the number of exceptions for each of the at least one TMSI is determined.
Optionally, the TMSI anomaly data table may further include uplink weak coverage anomaly times and uplink interference anomaly times of each TMSI in the at least one TMSI.
For example, table 2 below is an example of a TMSI exception data table provided in an embodiment of the present application.
TABLE 2
Assuming that the first TMSI (which is one of the at least one TMSI) is E58DBF78, the server determines that the number of anomalies for the first TMSI is 111074.
S107, the server determines whether the first distance information and the second distance information are the same under the condition that the abnormal times of the first TMSI are larger than the preset times and the abnormal times of the second TMSI are larger than the preset times.
The first distance information is distance information corresponding to the first TMSI, the second distance information is distance information corresponding to the second TMSI, the first distance information is used for representing a distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing a distance between the terminal corresponding to the second TMSI and the base station to be identified, the first TMSI is one of the at least one TMSI, and the second TMSI is one of the at least one TMSI except the first TMSI.
It should be understood that, when the number of abnormal times of the first TMSI is greater than the preset number of times, it is indicated that the number of abnormal times of the first TMSI is greater, and it may also be understood that the access request sent by the terminal corresponding to the first TMSI to the base station to be identified has multiple access failures. Similarly, the access request sent by the terminal corresponding to the second TMSI to the base station to be identified also has multiple access failure situations. At this time, the server may determine whether the first distance information and the second distance information are the same, specifically, whether the distance between the terminal corresponding to the first TMSI and the base station to be identified is equal to the distance between the terminal corresponding to the second TMSI and the base station to be identified.
For example, the distance between a terminal corresponding to a TMSI and a base station to be identified may be the time advance (TIMING ADVANCE, TA) of the TMSI.
S108, if the first distance information is the same as the second distance information, the server determines whether the signal level of the target terminal is within a preset range.
The target terminal is a terminal corresponding to the first TMSI and the second TMSI.
It should be understood that, in the case that the first distance information is the same as the second distance information, it is indicated that the terminal corresponding to the first TMSI and the terminal corresponding to the second TMSI are the same terminal (i.e. the target terminal), and at this time, the server may determine whether the signal level of the target terminal is within the preset range.
S109, the server determines that the target terminal is an abnormal terminal when the signal level of the target terminal is within a preset range.
It should be understood that the signal level is the signal strength received by the terminal, where the signal strength is provided by the base station to be identified, and in the case that the signal level of the target terminal is within the preset range, it is indicated that the signal level of the target terminal is at a normal level, or it may be understood that the server may determine that the base station to be identified is in a normal state, and then the server may determine that the efficiency of using the signal level by the target terminal is extremely low, so that the server determines that the target terminal is an abnormal terminal.
In the embodiment of the present application, when the state information of the MME is an abnormal state and the state information of the AMF is an abnormal state, it is indicated that both the MME and the AMF are abnormal, and it may also be understood that there are some access requests with access states being access failures, specifically, at least one of the above-mentioned terminals has a situation that the terminal to be identified cannot be accessed normally. In this case, the server may determine the abnormal times of the TMSI included in each access request in at least one access request received by the base station to be identified, and if the abnormal times of the first TMSI are greater than the preset times, it may be stated that the abnormal times of the first TMSI are greater, or it may be understood that the access request sent by the terminal corresponding to the first TMSI to the base station to be identified has multiple access failures. Similarly, the access request sent by the terminal corresponding to the second TMSI to the base station to be identified also has multiple access failure situations. The server can determine whether the first distance information is the same as the second distance information, specifically, whether the distance between the terminal corresponding to the first TMSI and the base station to be identified is equal to the distance between the terminal corresponding to the second TMSI and the base station to be identified, and under the condition that the first distance information is the same as the second distance information, the terminal corresponding to the first TMSI and the terminal corresponding to the second TMSI are the same terminal (namely, the target terminal), at the moment, the server can determine whether the signal level of the target terminal is within the preset range, and under the condition that the signal level of the target terminal is within the preset range, the server can determine that the base station to be identified is in a normal state, and then the server can determine that the efficiency of utilizing the signal level of the target terminal is extremely low, so that the server can accurately and effectively determine that the target terminal is an abnormal terminal.
Referring to fig. 1, as shown in fig. 4, the anomaly determination method provided in the embodiment of the present application may further include S110 to S113.
And S110, the server acquires the target moment and the target TMSI.
The target time is the sending time of the access request sent by the terminal to be identified, and the target TMSI is the TMSI included in the access request sent by the terminal to be identified.
S111, the server queries a first corresponding relation based on the target time interval and the target TMSI to acquire the IMSI of the terminal to be identified.
The first correspondence is used for indicating time intervals and TMSI corresponding to one or more IMSI, the minimum value of the target time interval is smaller than or equal to the target time, and the maximum value of the target time interval is larger than or equal to the target time.
It should be appreciated that after the server obtains the target time, the time interval corresponding to the target time (i.e., the target time interval) may be determined. And then the server can acquire the IMSI of the terminal to be identified based on the target time interval, the target TMSI and the first corresponding relation.
It may be understood that after the server obtains the target TMSI and determines the target time interval, the server may determine, from the first correspondence, IMSIs corresponding to the target time interval and the target TMSI, and determine IMSIs corresponding to the target time interval and the target TMSI as IMSIs of the terminal to be identified.
For example, table 3 below provides an example of a first correspondence relationship for an embodiment of the present application.
TABLE 3 Table 3
Assuming that the target time is 10:15, the server determines the target time interval as time interval 1.
Assuming that the target TMSI is F5861EAC, the server determines that the IMSI of the terminal to be identified is 123456789876543.
And S112, the server determines the MDN of the terminal to be identified based on the IMSI of the terminal to be identified and the second corresponding relation.
The second correspondence includes a plurality of IMSIs and MDNs corresponding to the IMSIs.
For example, table 4 below is an example of the second correspondence provided in the embodiment of the present application.
TABLE 4 Table 4
IMSI MDN
123456423512423 12345678912
123456789876543 98765432123
987654321234567 54321678987
In combination with the example in S111 above, the server determines that the MDN of the terminal to be identified is 98765432123.
S113, the server sends target prompt information to the terminal to be identified based on the MDN of the terminal to be identified.
The target prompt information is used for prompting that the terminal to be identified is abnormal.
In the embodiment of the application, a server can acquire a target time and a target TMSI, wherein the target time is the time of an access request sent by a terminal to be identified, the target TMSI is the TMSI included in the access request sent by the terminal to be identified, then the server can determine a time interval corresponding to the target time (namely, a target time interval), and inquire a first corresponding relation based on the target time interval and the target TMSI to acquire IMSI corresponding to the target time interval and the target TMSI (namely, the IMSI of the terminal to be identified), and then the server can determine MDN corresponding to the IMSI of the terminal to be identified from a second corresponding relation, namely, the MDN of the terminal to be identified can be determined, and the MDN of each terminal can be conveniently and rapidly determined. Finally, the server can send target prompt information to the terminal to be identified based on the MDN of the terminal to be identified, so that the terminal to be identified can be accurately and effectively prompted to have abnormality, and the abnormality reminding efficiency is improved.
The embodiment of the application can divide the functional modules of the server and the like according to the method example, for example, each functional module can be divided corresponding to each function, and two or more functions can be integrated in one processing module. The integrated modules may be implemented in hardware or in software functional modules. It should be noted that, in the embodiment of the present application, the division of the modules is schematic, which is merely a logic function division, and other division manners may be implemented in actual implementation.
In the case of dividing the respective functional modules with the respective functions, fig. 5 shows a schematic diagram of one possible configuration of the abnormality determining apparatus involved in the above-described embodiment, and as shown in fig. 5, the abnormality determining apparatus 10 may include a determining module 101.
The determining module 101 is configured to determine network data of a base station to be identified, where the network data of the base station to be identified includes an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified, and an uplink weak coverage parameter of the base station to be identified, where the access success rate of the base station to be identified is used to characterize a probability that at least one terminal corresponding to the base station to be identified successfully accesses the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on a signal quality of each terminal in the at least one terminal, and the uplink weak coverage parameter of the base station to be identified is determined based on a signal strength of each terminal.
The determining module 101 is further configured to determine whether a signal strength of the terminal to be identified is smaller than a signal strength threshold and whether a signal quality of the terminal to be identified is smaller than a signal quality threshold, where the terminal to be identified is a terminal included in the at least one terminal, when an access success rate of the base station to be identified is smaller than a success rate threshold, an uplink interference parameter of the base station to be identified is larger than an interference parameter threshold, and an uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold.
The determining module 101 is further configured to determine that the terminal to be identified is an abnormal terminal if the signal strength of the terminal to be identified is less than the signal strength threshold and/or the signal quality of the terminal to be identified is less than the signal quality threshold.
Optionally, the determining module 101 is further configured to determine whether the base station to be identified has alarm information within a preset duration when the state information of the target configuration information is in a normal state, where the target configuration information is used to indicate that the base station to be identified has a terminal access function.
The determining module 101 is further configured to determine, if the to-be-identified base station does not have the alarm information within the preset duration, whether an access success rate of the to-be-identified base station is less than the success rate threshold.
Optionally, the determining module 101 is further configured to determine, when the state information of the MME is an abnormal state and the state information of the AMF is an abnormal state, an abnormal number of times of at least one TMSI, where one TMSI is a TMSI included in one access request received by the base station to be identified, and the abnormal number of times of one TMSI is used to characterize that the access request corresponding to the TMSI is a number of times of access failure.
The determining module 101 is further configured to determine whether first distance information is the distance information corresponding to the first TMSI, second distance information is the distance information corresponding to the second TMSI, the first distance information is used for representing a distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing a distance between the terminal corresponding to the second TMSI and the base station to be identified, the first TMSI is one of the at least one TMSI, and the second TMSI is one of the at least one TMSI except the first TMSI when the number of anomalies of the first TMSI is greater than a preset number and the number of anomalies of the second TMSI is greater than the preset number.
The determining module 101 is further configured to determine whether a signal level of a target terminal is within a preset range when the first distance information is the same as the second distance information, where the target terminal is a terminal corresponding to both the first TMSI and the second TMSI.
The determining module 101 is further configured to determine that the target terminal is an abnormal terminal if the signal level of the target terminal is within the preset range.
Optionally, the abnormality determining apparatus 10 further includes an acquisition module 102 and a transmission module 103.
The obtaining module 102 is configured to obtain a target time and a target TMSI, where the target time is a sending time when the terminal to be identified sends an access request, and the target TMSI is a TMSI included in the access request sent by the terminal to be identified.
The obtaining module 102 is further configured to query a first correspondence based on a target time interval and the target TMSI to obtain an IMSI of the terminal to be identified, where the first correspondence is used to indicate a time interval and a TMSI corresponding to one or more IMSIs, a minimum value of the target time interval is less than or equal to the target time, and a maximum value of the target time interval is greater than or equal to the target time.
The determining module 101 is further configured to determine an MDN of the terminal to be identified based on the IMSI of the terminal to be identified and a second correspondence, where the second correspondence includes a plurality of IMSIs and MDNs corresponding to the plurality of IMSIs.
And the sending module 103 is configured to send, to the terminal to be identified, target prompt information based on the MDN of the terminal to be identified, where the target prompt information is used to prompt that the terminal to be identified has an abnormality.
In the case of using an integrated unit, fig. 6 shows a schematic diagram of one possible configuration of the abnormality determining apparatus involved in the above-described embodiment. As shown in fig. 6, the abnormality determination apparatus 20 may include a processing module 201 and a communication module 202. The processing module 201 may be used to control and manage the operation of the abnormality determination device 20. The communication module 202 may be used to support communication of the anomaly determination device 20 with other entities. Alternatively, as shown in fig. 6, the abnormality determining apparatus 20 may further include a storage module 203 for storing program codes and data of the abnormality determining apparatus 20.
Wherein the processing module 201 may be a processor or a controller. The communication module 202 may be a transceiver, a transceiver circuit, a communication interface, or the like. The storage module 203 may be a memory.
When the processing module 201 is a processor, the communication module 202 is a transceiver, and the storage module 203 is a memory, the processor, the transceiver, and the memory may be connected through a bus. The bus may be a peripheral component interconnect standard (PERIPHERAL COMPONENT INTERCONNECT, PCI) bus, or an extended industry standard architecture (extended industry standard architecture, EISA) bus, or the like. The buses may be divided into address buses, data buses, control buses, etc.
It should be understood that, in various embodiments of the present application, the sequence numbers of the foregoing processes do not mean the order of execution, and the order of execution of the processes should be determined by the functions and internal logic thereof, and should not constitute any limitation on the implementation process of the embodiments of the present application.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, and are not repeated herein.
The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using a software program, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital subscriber terminal line (Digital Subscriber Line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device including one or more servers, data centers, etc. that can be integrated with the medium. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (Solid STATE DISK, SSD)), etc.
The foregoing is merely illustrative of the present application, and the present application is not limited thereto, and any person skilled in the art will readily recognize that variations or substitutions are within the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (10)

1. An anomaly determination method, the method comprising:
Determining network data of a base station to be identified, wherein the network data of the base station to be identified comprises an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified and an uplink weak coverage parameter of the base station to be identified, the access success rate of the base station to be identified is used for representing the probability that at least one terminal corresponding to the base station to be identified is successfully accessed to the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on the signal quality of each terminal in the at least one terminal, and the uplink weak coverage parameter of the base station to be identified is determined based on the signal strength of each terminal;
Determining whether the signal strength of a terminal to be identified is smaller than a signal strength threshold and the signal quality of the terminal to be identified is smaller than a signal quality threshold under the conditions that the access success rate of the base station to be identified is smaller than a success rate threshold, the uplink interference parameter of the base station to be identified is larger than an interference parameter threshold and the uplink weak coverage parameter of the base station to be identified is larger than a weak coverage threshold, wherein the terminal to be identified is a terminal included in the at least one terminal;
And determining the terminal to be identified as an abnormal terminal under the condition that the signal strength of the terminal to be identified is smaller than the signal strength threshold value and/or the signal quality of the terminal to be identified is smaller than the signal quality threshold value.
2. The abnormality determination method according to claim 1, characterized in that the method further comprises:
under the condition that the state information of the target configuration information is in a normal state, determining whether the base station to be identified has alarm information within a preset time length, wherein the target configuration information is used for indicating that the base station to be identified has a terminal access function;
And under the condition that the base station to be identified does not have alarm information within the preset time, determining whether the access success rate of the base station to be identified is smaller than the success rate threshold.
3. The abnormality determination method according to claim 1, characterized in that the method further comprises:
determining the abnormal times of at least one TMSI (temporary mobile station identifier) under the condition that the state information of the MME is in an abnormal state and the state information of the AMF is in an abnormal state, wherein one TMSI is the TMSI included in one access request received by the base station to be identified, and the abnormal times of one TMSI are used for representing the times that the access request corresponding to the TMSI is access failure;
Determining whether first distance information and second distance information are the same when the abnormal times of a first TMSI is larger than the preset times and the abnormal times of a second TMSI is larger than the preset times, wherein the first distance information is distance information corresponding to the first TMSI, the second distance information is distance information corresponding to the second TMSI, the first distance information is used for representing the distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing the distance between the terminal corresponding to the second TMSI and the base station to be identified, the first TMSI is one of the at least one TMSI, and the second TMSI is TMSI except the first TMSI in the at least one TMSI;
Determining whether the signal level of a target terminal is within a preset range or not under the condition that the first distance information is the same as the second distance information, wherein the target terminal is a terminal corresponding to both the first TMSI and the second TMSI;
and determining the target terminal as an abnormal terminal under the condition that the signal level of the target terminal is within the preset range.
4. The abnormality determination method according to any one of claims 1 to3, characterized in that the method further comprises:
Acquiring a target moment and a target TMSI, wherein the target moment is the sending moment of the access request sent by the terminal to be identified, and the target TMSI is the TMSI included in the access request sent by the terminal to be identified;
Inquiring a first corresponding relation based on a target time interval and the target TMSI to obtain the IMSI of the terminal to be identified, wherein the first corresponding relation is used for indicating time intervals and TMSI corresponding to one or more IMSI, the minimum value of the target time interval is smaller than or equal to the target time, and the maximum value of the target time interval is larger than or equal to the target time;
determining the MDN of the terminal to be identified based on the IMSI of the terminal to be identified and a second corresponding relation, wherein the second corresponding relation comprises a plurality of IMSI and MDNs corresponding to the IMSI;
And sending target prompt information to the terminal to be identified based on the MDN of the terminal to be identified, wherein the target prompt information is used for prompting that the terminal to be identified has abnormality.
5. An anomaly determination device is characterized by comprising a determination module;
The determining module is configured to determine network data of a base station to be identified, where the network data of the base station to be identified includes an access success rate of the base station to be identified, an uplink interference parameter of the base station to be identified, and an uplink weak coverage parameter of the base station to be identified, where the access success rate of the base station to be identified is used to characterize a probability that at least one terminal corresponding to the base station to be identified successfully accesses the base station to be identified, the uplink interference parameter of the base station to be identified is determined based on a signal quality of each terminal in the at least one terminal, and the uplink weak coverage parameter of the base station to be identified is determined based on a signal strength of each terminal;
The determining module is further configured to determine, when the access success rate of the base station to be identified is less than a success rate threshold, the uplink interference parameter of the base station to be identified is greater than an interference parameter threshold, and the uplink weak coverage parameter of the base station to be identified is greater than a weak coverage threshold, whether the signal strength of the terminal to be identified is less than a signal strength threshold, and whether the signal quality of the terminal to be identified is less than a signal quality threshold, where the terminal to be identified is a terminal included in the at least one terminal;
The determining module is further configured to determine that the terminal to be identified is an abnormal terminal when the signal strength of the terminal to be identified is less than the signal strength threshold and/or the signal quality of the terminal to be identified is less than the signal quality threshold.
6. The abnormality determining apparatus according to claim 5, characterized in that,
The determining module is further configured to determine whether the base station to be identified has alarm information within a preset duration when the state information of the target configuration information is in a normal state, where the target configuration information is used to indicate that the base station to be identified has a terminal access function;
The determining module is further configured to determine, when the base station to be identified does not have alarm information within the preset duration, whether an access success rate of the base station to be identified is less than the success rate threshold.
7. The abnormality determining apparatus according to claim 5, characterized in that,
The determining module is further configured to determine, when the state information of the MME is an abnormal state and the state information of the AMF is an abnormal state, an abnormal number of times of at least one TMSI, where one TMSI is a TMSI included in one access request received by the base station to be identified, and the abnormal number of times of one TMSI is used to characterize that the access request corresponding to the TMSI is a number of times of access failure;
The determining module is further configured to determine whether first distance information is the distance information corresponding to the first TMSI, second distance information is the distance information corresponding to the second TMSI, the first distance information is used for representing a distance between a terminal corresponding to the first TMSI and the base station to be identified, the second distance information is used for representing a distance between a terminal corresponding to the second TMSI and the base station to be identified, the first TMSI is one of the at least one TMSI, and the second TMSI is a TMSI other than the first TMSI in the at least one TMSI, when the number of anomalies of the first TMSI is greater than a preset number and the number of anomalies of the second TMSI is greater than the preset number;
the determining module is further configured to determine whether a signal level of a target terminal is within a preset range when the first distance information is the same as the second distance information, where the target terminal is a terminal corresponding to both the first TMSI and the second TMSI;
The determining module is further configured to determine that the target terminal is an abnormal terminal if the signal level of the target terminal is within the preset range.
8. The abnormality determination apparatus according to any one of claims 5-7, characterized in that the abnormality determination apparatus further includes an acquisition module and a transmission module;
the acquisition module is configured to acquire a target time and a target TMSI, where the target time is a sending time when the terminal to be identified sends an access request, and the target TMSI is a TMSI included in the access request sent by the terminal to be identified;
The obtaining module is further configured to query a first correspondence based on a target time interval and the target TMSI to obtain an IMSI of the terminal to be identified, where the first correspondence is used to indicate a time interval corresponding to one or more IMSIs and a TMSI, a minimum value of the target time interval is less than or equal to the target time, and a maximum value of the target time interval is greater than or equal to the target time;
The determining module is further configured to determine an MDN of the terminal to be identified based on the IMSI of the terminal to be identified and a second correspondence, where the second correspondence includes a plurality of IMSIs and MDNs corresponding to the IMSIs;
The sending module is used for sending target prompt information to the terminal to be identified based on the MDN of the terminal to be identified, and the target prompt information is used for prompting that the terminal to be identified is abnormal.
9. A server is characterized in that, the server includes:
A processor;
A memory configured to store the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the anomaly determination method of any one of claims 1-4.
10. A computer readable storage medium having instructions stored thereon, which when executed by a server, cause the server to perform the anomaly determination method of any one of claims 1-4.
CN202310746233.5A 2023-06-21 2023-06-21 Abnormality determination method, abnormality determination device, server and storage medium Active CN116567700B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310746233.5A CN116567700B (en) 2023-06-21 2023-06-21 Abnormality determination method, abnormality determination device, server and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310746233.5A CN116567700B (en) 2023-06-21 2023-06-21 Abnormality determination method, abnormality determination device, server and storage medium

Publications (2)

Publication Number Publication Date
CN116567700A CN116567700A (en) 2023-08-08
CN116567700B true CN116567700B (en) 2025-05-30

Family

ID=87493127

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310746233.5A Active CN116567700B (en) 2023-06-21 2023-06-21 Abnormality determination method, abnormality determination device, server and storage medium

Country Status (1)

Country Link
CN (1) CN116567700B (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105824733A (en) * 2016-03-14 2016-08-03 北京小米移动软件有限公司 Method and device for monitoring terminal
CN106028387A (en) * 2016-06-30 2016-10-12 维沃移动通信有限公司 Communication anomaly collecting method and mobile terminal

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020167236A1 (en) * 2019-02-14 2020-08-20 Telefonaktiebolaget Lm Ericsson (Publ) Management of coverage and capacity
CN114258045B (en) * 2020-09-25 2025-08-26 中兴通讯股份有限公司 Network performance optimization method, network performance optimization device and storage medium

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105824733A (en) * 2016-03-14 2016-08-03 北京小米移动软件有限公司 Method and device for monitoring terminal
CN106028387A (en) * 2016-06-30 2016-10-12 维沃移动通信有限公司 Communication anomaly collecting method and mobile terminal

Also Published As

Publication number Publication date
CN116567700A (en) 2023-08-08

Similar Documents

Publication Publication Date Title
CN105451232B (en) Pseudo base station detection method, system, terminal and server
EP3742770B1 (en) Intelligent sim profile procurement
KR102394118B1 (en) Terminal monitoring setting method and apparatus
EP2515583B1 (en) Method and system for controlling machine type communication equipment to access network
US8438278B2 (en) Methods for monitoring and reporting MTC events
US10390287B2 (en) Restriction control apparatus, restriction control system, and restriction control method
CN106878980B (en) Carrier aggregation capability updating method and device and user terminal
CN105307119A (en) Pseudo base station positioning method based on RSSI base station signal estimation
CN111065049A (en) Positioning method and device of Bluetooth equipment
CN107743154B (en) Tracking and attendance system based on Wi-Fi intelligent terminal and method thereof
CN111200515A (en) Alarm processing method and device
CN116567700B (en) Abnormality determination method, abnormality determination device, server and storage medium
CN104869621A (en) Method and device for network awareness
JP5636100B2 (en) International mobile device identity tracking method and tracking radio network controller for user equipment
CN113811022B (en) Abnormal terminal rejection method, system, device and storage medium
US12149931B2 (en) Methods and devices for utilizing an exposure function of a wireless communications network
CN114205804A (en) SIM card replacing method, device, server and readable storage medium
US20130051336A1 (en) Access method and system for machine-type communication terminal and machine-type communication terminal
CN113207158A (en) Internet of things access method, device, equipment and storage medium
SE542465C2 (en) Methods, subscriber identity component and managing node for providing wireless device with connectivity
US20180270324A1 (en) Methods and devices for processing resource operation request
WO2019162460A1 (en) Method and apparatus for detecting a device impersonation in a network
CN105163335B (en) A kind of network access management method, server, mobile terminal and system
EP3926923A1 (en) Method for enhanced detection of a user equipment type
CN111010724B (en) Terminal access method and device based on WLAN

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant