TWI850891B - A speed reduction control system for excessive network usage, method and computer readable medium thererof - Google Patents

Abstract

The present invention is a speed reduction control system for excessive network usage and method thereof. The system monitors the traffic of the corresponding device interface for a specific circuit, and identifies its connection purpose through the device application layer, and marks the traffic for the designated purpose to conduct daily network traffic usage statistics, and exclude circuit status as a non-statistical category. When the rated usage is exceeded, the user will be notified that the usage of the circuit has exceeded the rated usage or the rate of the circuit will be temporarily reduced to make the usage of network resources reasonable and ensure the fairness of other users. The present invention also provides a computer-readable medium for executing the method of the present invention.

Description

System, method and computer-readable medium for controlling excessive network usage and speed reduction

The present invention relates to network usage control technology, and in particular to a system, method and computer-readable medium for controlling excessive network usage and speed reduction.

In order to ensure that network resources are used reasonably, when general customers rent high-bandwidth circuits, in addition to monitoring the circuit quality, they will also monitor the customer's network usage. When network usage is abnormal, the circuit rate is often reduced to ensure that other users can use network resources fairly.

The aforementioned circuit speed reduction refers to reducing the customer's network connection speed to reduce their network usage. According to the current monitoring technology, the network usage of the equipment is calculated as the basis, but this calculation method still needs to be improved. For example, the service applied by the customer is used for video calls, voice calls or video streaming OTT (Over-the-top media services, also known as over-the-top services). This is normal traffic. If it is calculated in the total usage, it may be inappropriate to stop or reduce the customer's circuit speed. Or if the usage includes non-customer use, such as line construction, relocation, etc., it is unreasonable to calculate the above in the total usage. In other words, the current technology for calculating network usage does not have special screening for content. If both normal use and customer use are measured, it may be unreasonable.

In summary, how to provide a network usage control technology, especially how to exclude specific items such as normal usage or non-customer usage from the total usage calculation, so that the over-usage calculation is more accurate and in line with the actual situation and needs, will become the goal that people in this technical field are eager to pursue.

In order to solve the above problems of the existing technology, the present invention discloses a network usage control technology, which uses circuit traffic monitoring to perform temporary rate adjustment when the amount exceeds the limit. The present invention combines traffic monitoring, circuit status and usage analysis to suppress improper use of network resources. It is also different from the traditional monitoring system that only monitors the circuit quality and the circuit’s traffic, availability, delay and packet loss rate.

The present invention discloses a system for controlling excessive network usage and reducing speed, which includes: a circuit traffic monitoring module for obtaining the traffic flow of the circuit of the monitored network device; a circuit status analysis module for obtaining the circuit status of the network device; a connection usage analysis module for obtaining the connection information of the application layer of the device corresponding to the circuit to determine the connection usage of the traffic, so that when the traffic is a connection usage that is not counted, the traffic is marked as excluded traffic volume; and a traffic analysis module for analyzing the traffic flow, the circuit status and the connection information to calculate the total traffic volume of the circuit, so that when it is determined that the total traffic volume minus the excluded traffic volume exceeds the quota usage, the circuit is marked as abnormal usage.

In one embodiment, the circuit status analysis module obtains the circuit status from the self-supply system to determine whether the circuit status needs to be eliminated.

In one embodiment, when the traffic analysis module determines that the total traffic volume minus the excluded sampling traffic volume exceeds the rated usage, and the circuit status analysis module determines that the circuit status needs to be excluded, the traffic analysis module does not mark the circuit as having abnormal usage.

In one embodiment, the aforementioned network usage overload and speed reduction control system further includes a message notification module, which notifies the user of the network device according to the circuit installation acceptance information when the circuit is marked as abnormally used.

In one embodiment, the aforementioned network usage over-limit speed reduction control system further includes a rate adjustment module, which sends a command to the network device to change the bandwidth when the circuit is marked as abnormally used.

The present invention further discloses a method for controlling excessive network usage and reducing speed, which is executed by a computer device and includes the following steps: allowing a circuit traffic monitoring module to obtain the traffic flow of a circuit of a network device; allowing a circuit status analysis module to obtain the circuit status of the network device; allowing a connection usage analysis module to obtain the connection information of the application layer of the device corresponding to the circuit, so as to mark the traffic as excluded traffic when the traffic is determined to be a connection usage that is not counted; allowing a traffic analysis module to analyze the traffic flow, the circuit status and the connection information to calculate the total traffic volume of the circuit; and when the traffic analysis module determines that the total traffic volume minus the excluded traffic volume exceeds the quota usage, marking the circuit as abnormal usage.

In the above method, the step of enabling the circuit status analysis module to obtain the circuit status of the network device further includes: obtaining the circuit status from the self-supply system, so that the circuit status analysis module determines whether the circuit status needs to be eliminated.

In the above method, when the total traffic volume of the excluded sampled traffic volume exceeds the rated usage but the circuit status is that it needs to be excluded, the traffic analysis module does not mark the circuit as having abnormal usage.

In the above method, it further includes: when the circuit is marked as having abnormal usage, the message notification module notifies the user of the network device according to the circuit installation acceptance information.

In the above method, it further includes: when the circuit is marked as abnormally used, the rate adjustment module sends a command to the network device to change the bandwidth.

The present invention further discloses a computer-readable medium, which is used in a computing device or a computer and stores instructions for executing the aforementioned method of controlling excessive network usage and speed reduction.

In summary, the system, method and computer-readable medium for controlling excessive network usage and speed reduction of the present invention provide speed reduction analysis and control for excessive network usage. The present invention monitors the traffic of the corresponding device interface for a specific circuit, identifies the purpose of the connection through the device application layer, marks the traffic of the specified purpose, and performs daily network traffic usage statistics, and excludes non-statistical categories of circuit status. When the quota is exceeded, the user is informed through the message notification module that the circuit usage has exceeded the quota. If the situation does not improve for several consecutive days, the circuit is temporarily reduced through the rate adjustment module to achieve the rationality of network resource usage to ensure fairness for other users.

1: System for controlling excessive network usage and speed reduction

11: Circuit communication monitoring module

12: Circuit status analysis module

13: Connection usage analysis module

14: Traffic analysis module

15: Message notification module

16: Rate adjustment module

401-406: Process

501-506: Process

S301-S305: Steps

Figure 1 is a system architecture diagram of the network usage excess speed reduction control system of the present invention.

Figure 2 is a system architecture diagram of another embodiment of the system for controlling excessive network usage and speed reduction of the present invention.

Figure 3 is a step diagram of the method for controlling excessive network usage and speed reduction of the present invention.

Figure 4 is a flow chart of a specific embodiment of the method for controlling excessive network usage and speed reduction of the present invention.

Figure 5 is a flow chart of the flow analysis in the present invention.

The following describes the technical content of the present invention through a specific concrete implementation form. People familiar with this technology can easily understand the advantages and effects of the present invention from the content disclosed in this manual. However, the present invention can also be implemented or applied through other different specific implementation forms.

In order to ensure that network resources are used reasonably, when general customers rent high-bandwidth circuits, in addition to maintaining circuit quality by monitoring usage, the present invention adds additional judgment criteria, including considering the purpose of the network and whether it is in an excluded state. When a user overuses network resources for a long time, the user is prompted according to the established usage, and the network usage is abnormal. If the user continues to exceed the quota, the circuit speed is temporarily reduced to ensure that other users can use network resources fairly.

FIG1 is a system architecture diagram of the network usage excess speed reduction control system of the present invention. As shown in the figure, the network usage excess speed reduction control system 1 of the present invention includes a circuit communication monitoring module 11, a circuit status analysis module 12, a connection usage analysis module 13 and a traffic analysis module 14.

The circuit traffic monitoring module 11 is used to obtain the traffic flow of the circuit of the monitored network device. In short, the circuit traffic monitoring module 11 can monitor the traffic usage of the circuit at the network device end.

The circuit status analysis module 12 is used to obtain the circuit status of the network device. Specifically, the circuit status analysis module 12 can analyze the circuit status of the network device, such as circuits under construction, failure, relocation, termination or rate reduction, so as to determine whether certain circuit statuses are circuits that need to be excluded.

The connection usage analysis module 13 is used to obtain the connection information of the application layer of the device corresponding to the circuit to determine the connection usage of the traffic, so that when the traffic is a connection usage that is not counted, the traffic is marked as excluded from the counted traffic volume. In other words, the connection usage analysis module 13 can analyze the connection usage, that is, obtain the connection behavior of the device corresponding to the circuit at the application layer, and determine whether the traffic usage needs to be excluded based on the connection behavior, that is, determine whether the connection behavior is a normal use. The present invention regards the usage of normal connection usage as excluded from the counted traffic volume.

The traffic analysis module 14 is used to analyze the traffic flow, the circuit status and the connection information to calculate the total traffic volume of the circuit, so that when it is determined that the total traffic volume after deducting the excluded traffic volume exceeds a certain usage quota (such as the daily quota usage), the circuit is marked as abnormal usage. In short, the traffic analysis module 14 can analyze the relevant data obtained by the circuit traffic monitoring module 11, the circuit status analysis module 12 and the connection usage analysis module 13, so as to calculate the traffic usage of the circuit under the status and usage that need to be sampled. That is, in addition to integrating the traffic usage of this circuit, the traffic usage that can be excluded from sampling will be further deducted to make the statistical data more reasonable.

In addition, after obtaining reasonable data usage, it is further determined whether it exceeds a certain usage quota (such as daily usage quota). If it exceeds, the circuit is marked as abnormal usage. In this way, corresponding processing can be carried out for network equipment with abnormal usage, such as notifying users or adjusting circuit speed.

In one embodiment, the circuit status analysis module 12 obtains the circuit status from the self-supply system to determine whether the circuit status needs to be eliminated. In short, when calculating the traffic usage, the present invention can consider not only the connection purpose, but also whether the circuit is in an eliminable state. For example, if the circuit is under construction, blocked, relocated, terminated, or has a reduced rate, there may be doubts if the applicable usage is abnormal. Therefore, the present invention proposes to further consider the circuit status, that is, when analyzing the circuit status, the circuit status analysis module 12 can determine whether the circuit status needs to be eliminated based on the circuit status.

It should be noted that the supply and installation system is a system for application, processing, and management of circuit supply and installation. Therefore, if there is construction, obstruction, relocation, lease termination, or rate reduction, the supply and installation system will have relevant records. Therefore, the circuit status analysis module 12 can obtain the required circuit status from the supply and installation system.

Furthermore, when the traffic analysis module 14 determines that the total traffic volume minus the excluded traffic volume exceeds the rated usage (such as the daily rated usage), and the circuit status analysis module 12 determines that the circuit status needs to be excluded, the traffic analysis module 14 does not mark the circuit as having abnormal usage. In other words, after analyzing the total traffic volume, if the traffic analysis module 14 determines that the total traffic volume after deducting the excluded sampling traffic volume still exceeds a certain amount of usage (such as a daily quota of usage), if the circuit status analysis module 12 has determined that the circuit status needs to be excluded, the traffic analysis module 14 will not mark the circuit as abnormal usage. That is, even if the total traffic volume exceeds a certain amount of usage (such as a daily quota of usage), if the circuit status needs to be excluded, the circuit will not be considered as abnormal usage. Therefore, it can be avoided that the circuit status is abnormal due to factors such as construction, which leads to abnormal traffic volume and is judged as abnormal usage for no reason. In this way, users will not be notified of abnormal usage when they cannot use the circuit (network) normally.

FIG2 is a system architecture diagram of another embodiment of the network usage excess speed reduction control system of the present invention. As shown in the figure, the circuit communication monitoring module 11, the circuit status analysis module 12, the connection usage analysis module 13 and the flow analysis module 14 are the same as those described in FIG1 and will not be repeated here. In this embodiment, the network usage excess speed reduction control system 1 further includes a message notification module 15 and a rate adjustment module 16.

When the circuit is marked as abnormally used, the message notification module 15 notifies the user of the network device according to the circuit installation acceptance information. In short, the message notification module 15 can notify the user of the usage status and related rights and interests through SMS, e-mail, etc. according to the circuit installation acceptance information, that is, the relevant information when the user applies for installation.

When the circuit is marked as having abnormal usage, the rate adjustment module 16 sends a command to the network device to change the bandwidth. In other words, the rate adjustment module 16 can determine whether the circuit needs to be temporarily adjusted in rate based on the analysis result of the traffic analysis module 14. If necessary, a control command is sent to the corresponding device to adjust or change the bandwidth. In one embodiment, the control command automatically classifies the usage abnormality based on the analysis result to perform the corresponding bandwidth adjustment or change. In another embodiment, the control command automatically classifies the usage anomaly based on the analysis result to dynamically adjust or change the bandwidth. For example, if the usage anomaly improves, the adjustment or change is reduced, and vice versa, the adjustment or change is increased.

As can be seen from the above, the present invention proposes a method for controlling excessive network usage by reducing the speed. The method mainly comprises a circuit traffic monitoring module 11 that monitors the network usage of the circuit at the network device end, a circuit status analysis module 12 and a connection usage analysis module 13 that obtain the circuit status and connection usage of the circuit, and then a traffic analysis module 14 that analyzes the circuit traffic usage, and compares the circuit status and analyzes the circuit connection usage to exclude the traffic that does not need to be sampled, and then calculates the total traffic usage accumulated by the circuit. Furthermore, if it is determined that the traffic usage of the circuit exceeds a certain quota (such as a daily quota), the contact information in the circuit acceptance system is obtained, and the message notification module 15 is used to remind the customer of the abnormal usage and its rights and interests information. If necessary, the rate adjustment module 16 sends a rate adjustment instruction to the device to temporarily limit the maximum available bandwidth.

In addition, the method for analyzing the circuit traffic usage can be completed by obtaining circuit traffic, obtaining circuit status, obtaining circuit connection usage, calculating total traffic volume, deducting and excluding the collected traffic volume, and summing up the traffic volume when analyzing the circuit traffic and its connection usage, deducting the items that are agreed not to be collected and excluding the circuit status that is not collected, so as to mark whether the circuit is abnormally used according to the traffic usage. Through the above method, the present invention can exclude the traffic volume used normally, reduce the number of users notified of abnormal usage under normal use, and further determine whether the circuit is an excluding circuit, so as to avoid mistaking the abnormal usage for the user when the circuit abnormality is not caused by the user.

In one embodiment, the network usage overload speed reduction control system 1 of the present invention can be implemented through the conditions listed in Table 1 below to perform circuit classification, circuit status, connection purpose, daily quota usage and corresponding processing methods.

The following is an explanation of the contents listed in Table 1:

Specific monitoring circuit category means that when the uplink/downlink rate application rate reaches 1G/1G, the circuit is listed as a circuit category that needs to be monitored; the circuit status that does not count the traffic volume means that when the circuit is under construction, fault, relocation, termination or the rate has been reduced, and any traffic flow that may be generated by the circuit is ignored; not taking the connection purpose means that when the traffic analysis results obtained by monitoring are video calls, voice calls or video and audio streaming OTT services, they will be marked so that they can be excluded when counting traffic; the daily quota (uplink + downlink) refers to the daily quota of If the traffic generated, excluding the circuit status and connection usage that are not taken into account, reaches 500GB, it will be marked as abnormal usage; the speed reduction for consecutive days exceeding the quota means that when the quota is exceeded for 5 consecutive days, the circuit will be marked as an abnormally used circuit and its connection speed will be reduced; the speed reduction after abnormal use means that when the system detects that the circuit is abnormally used, its upstream and downstream speeds will be adjusted to 100M/100M; in addition, the speed reduction days means that when the circuit is detected as abnormally used, the connection speed will be reduced for 3 days.

Figure 3 is a step diagram of the method for controlling excessive network usage and reducing speed of the present invention. The purpose of the present invention is to combine traffic monitoring, circuit status and usage analysis to achieve the goal of suppressing improper use of network resources.

In step S301, the circuit traffic monitoring module is enabled to obtain the traffic flow of the circuit of the network device. This step describes how the circuit traffic monitoring module monitors the traffic usage of the circuit at the network device end.

In step S302, the circuit status analysis module is used to obtain the circuit status of the network device. This step describes how the circuit status analysis module obtains the circuit status in the installation system, such as whether it is under construction or under fault.

In step S303, the connection usage analysis module is instructed to obtain the connection information of the application layer of the device corresponding to the circuit, so that when the traffic is determined to be a connection usage that is not counted, the traffic is marked as excluded from the counted traffic. This step illustrates that the connection usage analysis module obtains the connection information of the application layer of the device corresponding to the circuit, and if it is a connection usage that is not counted, such as video calls, voice calls, or video and audio streaming OTT services, the traffic is marked and excluded.

In step S304, the traffic analysis module is used to analyze the traffic flow, the circuit status and the connection information to calculate the total traffic volume of the circuit. This step describes how the traffic analysis module analyzes the circuit traffic, circuit status and connection usage to calculate the daily traffic usage.

In step S305, when the traffic analysis module determines that the total traffic volume minus the excluded traffic volume exceeds the daily quota, the circuit is marked as abnormal usage. This step explains that when the traffic analysis module calculates the total traffic volume, it will exclude the uncollected traffic, so that when the total traffic volume after statistics exceeds the daily quota, the circuit is marked as abnormal usage.

In one embodiment, in step S302, the circuit status analysis module obtains the circuit status from the supply and installation system, so that the circuit status analysis module determines whether the circuit status needs to be eliminated. In other words, the circuit status analysis module determines whether the circuit status is under construction, failure, relocation, termination, or rate reduction. If so, the circuit is determined to be a circuit that needs to be eliminated.

Furthermore, when the total traffic volume excluding the sampled traffic volume exceeds the daily quota but the circuit status is that it needs to be excluded, the traffic analysis module does not mark the circuit as having abnormal usage. In short, if step S302 determines that the circuit status needs to be excluded, no matter what the total traffic usage is in step S305, the circuit will not be determined to have abnormal usage.

In addition, in the method of controlling excessive network usage and reducing speed of the present invention, when the circuit is judged to be abnormally used, the user can be warned or the speed of the circuit can be adjusted. In this regard, the method of the present invention further includes that when the circuit is marked as abnormally used, the message notification module notifies the user of the network device according to the circuit installation acceptance information. In other words, according to the circuit installation acceptance information when the user applies for the circuit, the message notification module informs the customer of his rights and interests and circuit change related information.

The method of the present invention further includes causing the rate adjustment module to send a command to the network device to change the bandwidth when the circuit is marked as having abnormal usage. In short, the rate adjustment is performed on the circuit marked as having exceeded the quota usage for many days, and the rate adjustment module can send an adjustment or control command to the corresponding device to change the bandwidth. In one embodiment, the adjustment or control command can automatically classify the usage abnormality to perform the corresponding bandwidth change or adjustment.

FIG4 is a flowchart of a specific embodiment of the method for controlling excessive network usage and speed reduction of the present invention. Please refer to FIG2 and the aforementioned Table 1 together.

In process 401, the circuit traffic is monitored. This process illustrates that the circuit traffic monitoring module 11 can monitor the traffic usage of the circuit at the network equipment end, and conduct equipment monitoring for the circuit with an uplink/downlink rate application rate of 1G/1G, and obtain the interface traffic information of the device corresponding to the circuit, wherein the uplink and downlink rates of the application rate can be formulated according to actual needs.

In process 402, circuit status analysis. This process illustrates that the circuit status analysis module 12 can analyze the circuit status, such as circuits under construction, obstacles, relocation, lease termination, or reduced speed. The circuit status is obtained through the supply and installation system to determine whether the circuit status needs to be excluded. If the circuit status is an item that needs to be excluded, the circuit is marked as not counting the flow. The excluded circuit status is not limited to the above situations, and the status that needs to be excluded is formulated according to actual needs.

In process 403, connection usage analysis. This process illustrates that the connection usage analysis module 13 can obtain the connection information of the circuit corresponding device application layer. If the connection usage is not taken, such as video calls, voice calls or video and audio streaming OTT services, its traffic will be marked and excluded. Not taking is not limited to the above services and can also be formulated according to actual needs.

In process 404, traffic analysis. This process describes that the traffic analysis module 14 deducts the traffic that should be deducted from the total traffic used by each circuit every day, and if the status of the circuit on that day is not marked as not counted, the circuit that meets the above conditions will be marked as abnormal circuit usage. Traffic analysis will be described in more detail later.

In process 405, circuit information notification. This process illustrates that the message notification module 15 uses the results of the analysis in process 404 to notify the abnormally used circuits every day to inform the user of the usage status. The notification frequency is not limited to daily and the notification frequency and notification content can be adjusted according to actual needs.

In process 406, the rate is adjusted. This process describes that the rate adjustment module 16 uses the results of the analysis of process 404 to determine whether the circuit meets the established rules and is marked as a circuit with abnormal usage for 5 consecutive days exceeding the quota. If it meets the rules, it sends a command to the corresponding equipment to change the bandwidth and reduce its rate to 100M/100M for 3 days. Among them, the circuit marked as abnormally used for several consecutive days exceeding the quota can be adjusted according to actual needs and the number of days for the reduction of the rate and the number of days can be adjusted according to actual needs, not limited to the example description.

FIG5 is a flow chart of the flow analysis in the present invention. This flow chart further explains process 404 in FIG4, that is, process 404 further includes process 501-process 506, please refer to FIG1 together.

In process 501, circuit traffic is obtained. This process refers to the circuit traffic monitoring module 11 obtaining the monitored circuit traffic flow and summing up the traffic for the day.

In process 502, the circuit status is obtained. This process refers to analyzing whether the circuit is under construction, blocked, relocated, terminated or the speed has been reduced through the circuit status analysis module 12. If it is the specified status as mentioned above, the circuit will be marked as not to be counted. Even if the traffic on that day exceeds the specified quota, it will not be judged as abnormal usage.

In process 503, the circuit connection usage is obtained. This process refers to the ability to aggregate and count the IP locations assigned to network devices according to the traffic results monitored by the application layer through the connection usage analysis module 13, and list them as traffic to be deducted.

In process 504, the total traffic volume is calculated. This process refers to summing up the usage of each circuit statistics every day through the traffic analysis module 14 to obtain the total traffic volume.

In process 505, the traffic volume is deducted and excluded. This process refers to the traffic analysis module 14 deducting the traffic that should be deducted from the total traffic volume counted by each circuit every day. The traffic that should be deducted here refers to the usage for normal connection purposes.

In process 506, the circuit usage is marked as abnormal. This process is a continuation of process 505, that is, after the total traffic volume is deducted from the traffic that should be deducted, and the status of this circuit on that day is not marked as not counted, the circuit that meets the above conditions will be marked as abnormal circuit usage.

The following is a specific example to illustrate the traffic analysis method. Please refer to Figures 1, 4 and 5.

The circuit data to be monitored is represented by C, and the circuits that meet the monitoring requirements are C ₁ , C ₂ , ..., C _m .

The data obtained by the circuit traffic monitoring module 11 is denoted by T, and the traffic corresponding to the circuit traffic is a T set, which includes uplink usage (up), downlink usage (down) and a timestamp (dt), wherein the timestamp represents the year, MM represents the month, DD represents the day, hh represents the hour, mm represents the minute, and ss represents the second. Under the above definition, the monitoring data of all corresponding traffic is _TC1 : [T _up , T _down ] _{dtYYYYMMDDhhmmss} , _TC2 : [T _up , T _down ] _{dtYYYYMMDDhhmmss} , ..., T _Cm : [T _up , T _down ] _{dtYYYYMMDDhhmmss} , wherein YYYYMDDhhmmss changes in chronological order.

The circuit state analysis module 12 obtains the circuit state of the corresponding circuit C, which is represented by S. The corresponding states are S _c1 , S _c2 , . . . , S _cm .

The connection usage analysis module 13 allocates application traffic to the corresponding circuit C according to the IP, and the application traffic set includes the connection protocol (P) of the IP, the destination IP (DST), the uplink usage (up), the downlink usage (down), and the time stamp (dt), wherein the time stamp is represented by YYYY for the year, MM for the month, DD for the day, hh for the hour, mm for the minute, and ss for the second. The application traffic data of all corresponding circuits are A _C1 : [A _P , A _DST , A _up , A _down ] _{dtYYYYMMDDhhmmss} , A _C2 : [A _P , A _DST , A _up , A _down ] _{dtYYYYMMDDhhmmss} ,..., A _Cm : [A _P , A _DST , A _up , A _down ] _{dtYYYYMMDDhhmmss} , where YYYYMMDDhhmmss changes in chronological order.

The results of process 504 (total traffic statistics) and process 505 (subtracting excluded traffic) correspond to the sum of the circuit flow of circuit C and the set of uncollected connected traffic, denoted by R, T _C1 -A _C1 , T _C2 -A _C2 ,..., T _Cm -A _Cm , and the results are R _C1 , R _C2 ,..., R _Cm .

Assume that there are three monitoring circuits that meet the requirements, namely _C1 , _C2 and _C3 . The traffic volume generated by _C1 per minute from January 1, 2022 to January 2, 2022 is T _C1 [T _up , T _down ] _{20220101000000} + T _C1 [T _up , T _down ] _{20220101000100} + T _C1 [T _up , T _down ] _{20220101000200} +...+ T _C1 [T _up , T _down ] _{20220101235900.} The same is true for _C2 and _C3 . Assume that the traffic volume used by _C1 on January 1, 2022 is 600GB, the traffic volume used by _C2 is 800GB, and the traffic volume used by C3 is 600GB. The traffic flow of circuit ₃ is 550GB. Through process 402 (circuit status analysis), it is known that circuits _C1 and _C2 are S _C1 , S _C2 is normal, and S _C3 is decelerating. Therefore, circuit _C3 is marked as excluded. Then, in process 403 (connection usage analysis), _AC1 , _AC2 and _AC3 are filtered and summed respectively. Assuming that all traffic of circuits _C1 and _C3 uses P2P software, and circuit _C2 is mostly used for video calls, the results of the items to be excluded are summed up. By analyzing the _AP and _ADST results of the application traffic, if the exclusion agreement is set as the summing target, it is assumed that the results obtained are _AC1 is 0GB, _AC2 is 400GB, and _AC3 is 0GB.

Based on the above, the total traffic volume of the three circuit traffic is calculated and the traffic volume excluded from sampling is deducted, and the results are respectively _RC1 is 600GB (600GB-0GB=600GB), _RC2 is 400GB (800GB-400GB=400GB), and _RC3 is 550GB (550GB-0GB=550GB).

Based on the daily quota of 500GB of traffic available for the circuit, the total traffic volume of circuit _C1 minus the excluded traffic R _C1 is 600GB, which has exceeded the quota, and the circuit status S _C1 is normal, which is a non-excluded category. Therefore, circuit _C1 is marked as an abnormally used circuit on that day. Circuit _C2 has a usage volume R _C2 of 400GB after deducting the excluded traffic, which has not exceeded the quota. Therefore, it is not marked as an abnormally used circuit. In addition, although the total traffic volume of circuit _C3 minus the excluded traffic R _C3 is 550GB, the circuit status S _C3 is in speed reduction, so it is listed as an exception and circuit _C3 is not marked as an abnormally used circuit on that day.

In one embodiment, each of the above modules and units may be software, hardware or firmware; if it is hardware, it may be a processing unit, processor, computer or server with data processing and computing capabilities; if it is software or firmware, it may include instructions that can be executed by the processing unit, processor, computer or server, and may be installed on the same hardware device or distributed on different multiple hardware devices.

In addition, the present invention also discloses a computer-readable medium, which is applied to a computing device or computer having a processor (e.g., CPU, GPU, etc.) and/or a memory, and stores instructions, and the computing device or computer can execute the computer-readable medium through the processor and/or memory to execute the above-mentioned method and each step when executing the computer-readable medium.

In summary, the present invention discloses a system, method and computer-readable medium for controlling excessive network usage, which provides excessive network usage and speed reduction analysis and control, monitors the traffic of the corresponding device interface for a specific circuit, and identifies the purpose of the connection through the device application layer, and marks the traffic for the specified purpose such as video calls, voice calls or video and audio streaming OTT services, and then performs daily network traffic usage statistics and excludes the traffic that does not need to be counted. When the circuit usage exceeds the daily quota, and the circuit is a non-statistical exclusion circuit (such as a circuit under construction, failure, relocation, lease termination, or whose speed has been reduced), the message notification module uses SMS, email, etc. to inform the user that the circuit usage has exceeded the quota. If the situation does not improve for several consecutive days, the speed adjustment module will temporarily reduce the speed of the circuit to achieve reasonable use of network resources to ensure fairness for other users. The present invention has the following special effects and functions.

First, the present invention uses the traffic monitoring module to perform interactive comparison with the connection usage analysis module at the monitoring time point to exclude specific uses, such as OTT video streaming services, to distinguish whether the user is within the approved usage scope.

Second, the present invention uses the circuit status analysis module to determine whether the circuit is under construction or meets the rate adjustment rules, so as to distinguish the circuit that should not be counted or needs to be excluded, which serves as the basis for statistical flow exclusion.

Third, the present invention utilizes a message notification module in combination with a flow analysis module to notify specific objects of the statistical results immediately, so that they can understand the circuit usage.

Fourth, the present invention uses a traffic analysis module to identify the circuit that needs to adjust the speed, and uses a speed adjustment module to obtain the device and port corresponding to the circuit, sends a speed reduction instruction to the network device and notifies a specific object to ensure that the user is aware of the change in the circuit speed.

The above detailed description is a specific description of a feasible embodiment of the present invention, but the embodiment is not intended to limit the patent scope of the present invention. Any equivalent implementation or modification that does not deviate from the technical spirit of the present invention should be included in the patent scope of the present invention.

1: System for controlling excessive network usage and speed reduction

11: Circuit communication monitoring module

12: Circuit status analysis module

13: Connection usage analysis module

14: Traffic analysis module

Claims (7)

A system for controlling excessive network usage and reducing speed includes: a circuit traffic monitoring module for obtaining the traffic flow of the circuit of the monitored network device; a circuit status analysis module for obtaining the circuit status of the network device; a connection usage analysis module for obtaining the connection information of the application layer of the device corresponding to the circuit to determine the connection usage of the traffic, so that when the traffic is a connection usage that is not counted, the traffic is marked as excluded from the traffic volume; and a traffic analysis module for analyzing the traffic flow, the circuit status and the connection information to The total traffic volume of the circuit is calculated, so that when it is determined that the total traffic volume minus the excluded sampling traffic volume exceeds the rated usage, the circuit is marked as abnormal usage. The circuit status analysis module obtains the circuit status from the supply system to determine whether the circuit status needs to be excluded. When the flow analysis module determines that the total traffic volume minus the excluded sampling traffic volume exceeds the rated usage, and the circuit status analysis module determines that the circuit status needs to be excluded, the flow analysis module does not mark the circuit as abnormal usage. The network over-usage speed reduction control system described in claim 1 further includes a message notification module, which notifies the user of the network device based on the circuit installation acceptance information when the circuit is marked as abnormally used. The system for controlling excessive network usage and reducing speed as described in claim 1 further includes a rate adjustment module, which sends a command to the network device to change the bandwidth when the circuit is marked as abnormally used. A method for controlling excessive network usage and reducing speed includes the following steps: allowing a circuit traffic monitoring module to obtain the traffic flow of a circuit of a network device; allowing a circuit status analysis module to obtain the circuit status of the network device; allowing a connection usage analysis module to obtain the connection information of the application layer of the device corresponding to the circuit, so as to mark the traffic as excluded from the traffic volume when the traffic is determined to be a connection usage that is not to be counted; allowing a traffic analysis module to analyze the traffic flow, the circuit status and the connection information to calculate the total traffic volume of the circuit; and When the traffic analysis module determines that the total traffic volume minus the excluded traffic volume exceeds the rated usage, the circuit is marked as having abnormal usage, wherein the step of causing the circuit status analysis module to obtain the circuit status of the network device further includes: obtaining the circuit status from the self-supply system so that the circuit status analysis module determines whether the circuit status needs to be excluded, and when the total traffic volume minus the excluded traffic volume exceeds the rated usage but the circuit status needs to be excluded, causing the traffic analysis module not to mark the circuit as having abnormal usage. The method for controlling excessive network usage and reducing speed as described in claim 4 further includes: when the circuit is marked as abnormally used, the message notification module notifies the user of the network device according to the circuit installation acceptance information. The method for controlling excessive network usage and reducing speed as described in claim 4 further includes: when the circuit is marked as abnormally used, causing the rate adjustment module to send a command to the network device to change the bandwidth. A computer-readable medium, used in a computing device or a computer, stores instructions for executing a method for controlling excessive network usage and speed reduction as described in any one of claims 4 to 6.

Images