阅读说明：本技术 异常电话拦截系统、方法及存储介质 (Abnormal call interception system, method and storage medium ) 是由 袁林 傅强 马洪彬 阿曼太 窦晶 邸学锋 贾立军 米胜山 范晓波 张赫男 刘道林 于 2021-07-15 设计创作，主要内容包括：本发明实施例公开了一种异常电话拦截系统、方法及存储介质,该系统包括依次连接的信令采集模块、拦截指令生成模块和拦截执行模块；信令采集模块和拦截指令生成模块对各关口局之间的ISUP呼叫信令进行采集与分析,进而根据异常ISUP呼叫信令生成拦截业务指令,并将拦截业务指令发送至拦截执行模块；拦截执行模块根据接收的拦截业务指令生成呼叫释放消息,实现对异常呼叫的拦截。本发明实施例中的异常电话拦截系统,通过对各关口局之间的ISUP呼叫信令进行拦截与分析,并针对异常呼叫生成呼叫释放消息,可以实现对异常呼叫的超前拦截,实时性强,有效保护了用户的人身和财产安全；同时实现了用户对异常电话的无感知,提升了用户体验。(The embodiment of the invention discloses an abnormal call interception system, a method and a storage medium, wherein the system comprises a signaling acquisition module, an interception instruction generation module and an interception execution module which are sequentially connected; the signaling acquisition module and the interception instruction generation module acquire and analyze ISUP calling signaling between gateway offices, generate an interception service instruction according to the abnormal ISUP calling signaling and send the interception service instruction to the interception execution module; and the interception execution module generates a call release message according to the received interception service instruction to realize the interception of the abnormal call. The abnormal call intercepting system in the embodiment of the invention can realize advanced interception of abnormal calls by intercepting and analyzing ISUP call signaling between gateway offices and generating call release messages aiming at the abnormal calls, has strong real-time performance and effectively protects personal and property safety of users; meanwhile, the user does not feel the abnormal telephone, and the user experience is improved.)

1. An abnormal call interception system is characterized by comprising a signaling acquisition module, an interception instruction generation module and an interception execution module which are sequentially connected;

the signaling acquisition module is used for acquiring ISUP calling signaling of a user part of the integrated service digital network between gateway offices and sending the ISUP calling signaling to the interception instruction generation module;

the interception instruction generating module is used for generating an interception service instruction according to an abnormal ISUP calling signaling in the ISUP calling signaling and sending the interception service instruction to the interception executing module;

the interception execution module is used for generating a call release message according to the received interception service instruction, and sending the call release message to a corresponding high-level signaling transfer point so as to intercept the abnormal call according to the call release message through the high-level signaling transfer point.

2. The system according to claim 1, wherein the interception instruction generation module comprises: an abnormal signaling judgment unit and an interception service instruction generation unit;

the abnormal signaling judgment unit is used for analyzing the received ISUP calling signaling, acquiring a calling number of the ISUP calling signaling, judging whether the calling number is an abnormal telephone according to an abnormal telephone identification algorithm, and sending a judgment result to the service interception instruction generation unit;

the interception service instruction generating unit is used for generating an interception service instruction according to the signaling parameter of the ISUP call signaling and the interception service indication information if the judgment result is determined to be abnormal, and sending the interception service instruction to the interception execution module; the signaling parameters include at least one of destination signaling point coding, source signaling point coding, circuit identification code, and link selection code.

3. The system of claim 2, wherein the intercept instruction generation module further comprises: an abnormal telephone storage unit;

the abnormal telephone storage unit is used for storing the calling number of the abnormal telephone judged by the abnormal signaling judgment unit;

the abnormal signaling judgment unit is specifically configured to analyze the received ISUP call signaling to obtain a calling number of the ISUP call signaling; judging whether the calling number can be found in an abnormal telephone storage unit: if yes, determining that the calling number is an abnormal telephone; if not, judging whether the calling number is an abnormal call according to an abnormal call identification algorithm, and sending a judgment result to an interception service instruction generating unit.

4. The system of claim 1, wherein the abnormal phone interception system further comprises a signaling link establishment module;

the signaling link establishing module is used for establishing a signaling link between the interception execution module and an external high-level signaling transfer point according to link configuration parameters; the advanced signaling transfer point is connected with a plurality of signaling points;

the interception execution module is specifically configured to generate a call release message according to a received service interception instruction, and send the call release message to a corresponding high-level signaling transfer point through the signaling link, so as to intercept an abnormal call according to the call release message through the high-level signaling transfer point.

5. The system according to claim 4, wherein the signaling link establishing module is specifically configured to:

based on a message transfer part second function level MTP2, a point-to-point L1 link establishment request is sent to a target high level signaling transfer point, and when a feedback message of successful link establishment of an L1 is received, a positioning request is sent to the target high level signaling transfer point;

if the feedback message of successful positioning is received, an LI link test request is sent based on the message transfer part third function level MTP 3;

and if a response message of the target high-level signaling transfer point aiming at the L1 link test request is received, finishing the establishment of the signaling link between the interception execution module and the target high-level signaling transfer point.

6. The system of claim 1, wherein the abnormal call intercepting system further comprises a system online update module;

the system online updating module is used for storing a system updating program through a spare memory space, and switching an original program to the system updating program by using a loadModule interface and an unld interface of a VxWorks system so as to realize online updating of the abnormal telephone interception system.

7. The system of claim 6, wherein the system online update module is specifically configured to:

when a program switching instruction is received, judging whether a system updating program file exists or not;

if yes, unloading the original system program through an unld function, and executing a loadModule function to load the system updating program file;

when a loading program block pointer of a loadModule function is received, searching an entry address of a system updating program file through a bootstrap program, and creating a new application task according to the entry address; setting an operation reason in the entry parameters of the new application task as program switching;

and running the system updating program file through a bootstrap program, and recovering field running data through the reserved call service file according to the new application task to realize online updating of the system program.

8. The system of claim 1, wherein the abnormal call intercepting system further comprises an abnormal call reminding module;

the abnormal call reminding module is used for generating abnormal call interception prompt information after the abnormal call is intercepted, and sending the abnormal call interception prompt information to a calling party and a called party; the abnormal call interception prompt message comprises a calling number, a called number, interception time and interception reason information.

9. An abnormal call interception method executed by an interception execution module in the abnormal call interception system according to any one of claims 1 to 8, comprising:

acquiring an interception service instruction, and analyzing the content of the interception service instruction to acquire interception service parameters; the intercepted service parameters comprise signaling parameters and intercepted service indication information;

determining a target signaling point according to the intercepted service parameters; the interception service parameter is packaged based on a preset format, and a call release message is obtained;

and acquiring an idle signaling link, sending the call release information to a high-level signaling transfer point through the idle signaling link, and sending the call release information to a target signaling point through the high-level signaling transfer point so as to intercept abnormal calls.

10. A computer-readable storage medium on which a computer program is stored, the program, when executed by a processor, implementing the abnormal call intercepting method of claim 9.

Technical Field

The embodiment of the invention relates to the technical field of mobile communication, in particular to an abnormal call intercepting system, a method and a storage medium.

Background

With the continuous growth of mobile network users, problems of telecommunication fraud, harassment and the like occur frequently, the prevention and interception of abnormal calls are realized, and the method has important significance for maintaining the personal and property safety of users.

At present, the existing abnormal call intercepting method generally marks abnormal calls when a user finds phone fraud or harassment, and other users can share the current mark to realize subsequent interception of the current abnormal calls; or detecting and analyzing the calling number through a related fraud algorithm model to judge whether the calling number is a fraud call, and if the calling number is determined to be the fraud call, generating a call record and generating an alarm.

However, the existing abnormal call intercepting methods can only carry out post-incident remediation after the abnormal call occurs so as to avoid subsequent fraud or harassment behaviors, cannot sense and intercept the abnormal call in advance, and have poor instantaneity, thereby failing to effectively protect the personal and property safety of users.

Disclosure of Invention

The embodiment of the invention provides an abnormal call interception system, a method and a storage medium, which are used for realizing advanced interception of abnormal calls and protecting personal and property safety of users.

In a first aspect, an embodiment of the present invention provides an abnormal call intercepting system, including a signaling acquisition module, an intercepting instruction generation module, and an intercepting execution module, which are connected in sequence;

the signaling acquisition module is used for acquiring ISUP calling signaling of a user part of the integrated service digital network between gateway offices and sending the ISUP calling signaling to the interception instruction generation module;

the interception instruction generating module is used for generating an interception service instruction according to an abnormal ISUP calling signaling in the ISUP calling signaling and sending the interception service instruction to the interception executing module;

the interception execution module is used for generating a call release message according to the received interception service instruction, and sending the call release message to a corresponding high-level signaling transfer point so as to intercept the abnormal call according to the call release message through the high-level signaling transfer point.

The interception instruction generation module comprises: an abnormal signaling judgment unit and an interception service instruction generation unit;

the abnormal signaling judgment unit is used for analyzing the received ISUP calling signaling, acquiring a calling number of the ISUP calling signaling, judging whether the calling number is an abnormal telephone according to an abnormal telephone identification algorithm, and sending a judgment result to the service interception instruction generation unit;

the interception service instruction generating unit is used for generating an interception service instruction according to the signaling parameter of the ISUP call signaling and the interception service indication information if the judgment result is determined to be abnormal, and sending the interception service instruction to the interception execution module; the signaling parameters include at least one of destination signaling point coding, source signaling point coding, circuit identification code, and link selection code.

The interception instruction generation module further comprises: an abnormal telephone storage unit;

the abnormal telephone storage unit is used for storing the calling number of the abnormal telephone judged by the abnormal signaling judgment unit;

the abnormal signaling judgment unit is specifically configured to analyze the received ISUP call signaling to obtain a calling number of the ISUP call signaling; judging whether the calling number can be found in an abnormal telephone storage unit: if yes, determining that the calling number is an abnormal telephone; if not, judging whether the calling number is an abnormal call according to an abnormal call identification algorithm, and sending a judgment result to an interception service instruction generating unit.

The abnormal call interception system also comprises a signaling link establishment module;

the signaling link establishing module is used for establishing a signaling link between the interception execution module and an external high-level signaling transfer point according to link configuration parameters; the advanced signaling transfer point is connected with a plurality of signaling points;

the interception execution module is specifically configured to generate a call release message according to a received service interception instruction, and send the call release message to a corresponding high-level signaling transfer point through the signaling link, so as to intercept an abnormal call according to the call release message through the high-level signaling transfer point.

The signaling link establishing module is specifically configured to:

based on a message transfer part second function level MTP2, a point-to-point L1 link establishment request is sent to a target high level signaling transfer point, and when a feedback message of successful link establishment of an L1 is received, a positioning request is sent to the target high level signaling transfer point;

if the feedback message of successful positioning is received, an LI link test request is sent based on the message transfer part third function level MTP 3;

and if a response message of the target high-level signaling transfer point aiming at the L1 link test request is received, finishing the establishment of the signaling link between the interception execution module and the target high-level signaling transfer point.

The abnormal call interception system also comprises a system online updating module;

the system online updating module is used for storing a system updating program through a spare memory space, and switching an original program to the system updating program by using a loadModule interface and an unld interface of a VxWorks system so as to realize online updating of the abnormal telephone interception system.

The system online update module is specifically configured to:

when a program switching instruction is received, judging whether a system updating program file exists or not;

if yes, unloading the original system program through an unld function, and executing a loadModule function to load the system updating program file;

when a loading program block pointer of a loadModule function is received, searching an entry address of a system updating program file through a bootstrap program, and creating a new application task according to the entry address; setting an operation reason in the entry parameters of the new application task as program switching;

and running the system updating program file through a bootstrap program, and recovering field running data through the reserved call service file according to the new application task to realize online updating of the system program.

The abnormal call intercepting system also comprises an abnormal call reminding module;

the abnormal call reminding module is used for generating abnormal call interception prompt information after the abnormal call is intercepted, and sending the abnormal call interception prompt information to a calling party and a called party; the abnormal call interception prompt message comprises a calling number, a called number, interception time and interception reason information.

In a second aspect, an embodiment of the present invention further provides an abnormal call interception method, which is executed by an interception execution module in the abnormal call interception system according to any embodiment of the present invention, and includes:

acquiring an interception service instruction, and analyzing the content of the interception service instruction to acquire interception service parameters; the intercepted service parameters comprise signaling parameters and intercepted service indication information;

determining a target signaling point according to the intercepted service parameters; the interception service parameter is packaged based on a preset format, and a call release message is obtained;

and acquiring an idle signaling link, sending the call release information to a high-level signaling transfer point through the idle signaling link, and sending the call release information to a target signaling point through the high-level signaling transfer point so as to intercept abnormal calls.

In a third aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements an abnormal call intercepting method according to any embodiment of the present invention.

The abnormal telephone interception system in the embodiment of the invention collects ISUP calling signaling of a user part of an integrated service digital network between gateway offices through a signaling collection module, identifies abnormal ISUP calling signaling in the ISUP calling signaling through an interception command generation module, and further generates an interception service command according to the abnormal ISUP calling signaling; furthermore, an interception execution module generates a call release message according to the received interception service instruction, and an advanced signaling transfer point intercepts the abnormal call according to the call release message; the advanced interception mode of the abnormal call is provided, so that the real-time identification and interception of the abnormal call signaling can be realized, the network safety is improved, and the personal and property safety of a user is effectively protected; meanwhile, the interception and release of the abnormal call are realized before the called user rings, so that the user can not sense the abnormal call, and the user experience is improved.

Drawings

Fig. 1 is a schematic structural diagram of an abnormal call intercepting system according to an embodiment of the present invention;

fig. 2 is a schematic structural diagram of an intercept instruction generating module according to an embodiment of the present invention;

fig. 3 is a schematic structural diagram of an intercept instruction generating module according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of an abnormal call intercepting system according to an embodiment of the present invention;

fig. 5 is a schematic diagram of a signaling link status provided in an embodiment of the present invention;

fig. 6 is a schematic diagram of signaling link selection according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of an abnormal call intercepting system according to an embodiment of the present invention;

fig. 8 is a schematic diagram illustrating an online update process of an abnormal call intercepting system according to an embodiment of the present invention;

fig. 9 is a schematic structural diagram of an abnormal call intercepting system according to an embodiment of the present invention;

FIG. 10 is a schematic diagram illustrating an abnormal call interception process according to an embodiment of the present invention;

fig. 11 is a schematic view of an application scenario of an abnormal call intercepting system according to an embodiment of the present invention;

fig. 12 is a flowchart of an abnormal call intercepting method according to a second embodiment of the present invention.

Detailed Description

The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.

Example one

Fig. 1 is a schematic structural diagram of an abnormal telephone interception system according to an embodiment of the present invention, where the abnormal telephone interception system 100 includes a signaling collection module 101, an interception instruction generation module 102, and an interception execution module 103, which are connected in sequence;

the signaling collection module 101 is configured to collect ISUP call signaling of an integrated service digital network user part between gateway offices, and send the ISUP call signaling to the interception instruction generation module 102; wherein, GateWay Mobile Switching Center (GMSC) is used for Switching communication services between different operator networks; for example, a first user in the operator network a communicates with a second user in the operator network B, a call of the first user is routed to a gateway office in the operator network a from a corresponding end office, then routed to a gateway office in the operator network B from the gateway office in the operator network a, and then routed to the end office corresponding to the second user through the gateway office in the operator network B, thereby finally realizing communication between users in different operator networks. An end office (MSC) is used to implement communication connection between a Mobile subscriber and other network subscribers, and may specifically include an exchange connected to the subscriber.

An Integrated Services Digital Network User Part (ISUP) is a User Part of an Integrated Services Digital Network (ISDN) and is used for supporting basic bearer Services and supplementary Services for voice and non-voice applications in the ISDN. ISUP call signaling, which is call information based on ISUP protocol; in the embodiment of the present invention, the ISUP call signaling may specifically include an Initial Address Message (IAM) Message; the IAM message is initial Signaling information for establishing an ISUP call, and may include Destination Signaling Point Code (DPC), source Signaling Point Code (OPC), and Circuit Identification Code (CIC).

The destination signaling point code represents the system identification code of the transmission destination signaling point of the ISUP call signaling; source signaling point code, which represents the system identification code of the signaling point for transmitting ISUP call signaling; the circuit identification code represents the transmission time slot corresponding to the current ISUP signaling; a Signaling Point (SP) is a service node with Signaling function No. seven in an information network.

In this embodiment, initial call information of a current call can be acquired by collecting IAM messages between gateway offices, and a calling party number can be acquired through the IAM messages; the number of the calling user is analyzed and judged, so that whether the current number of the calling user is an abnormal number or not can be determined, and the speed of intercepting an abnormal call can be increased; meanwhile, by deploying the signaling acquisition modules 101 between gateway offices, the acquisition efficiency of the ISUP call signaling can be improved, the number of signaling acquisition modules 101 to be deployed can be reduced, and the system complexity is reduced.

The interception instruction generating module 102 is configured to generate an interception service instruction according to an abnormal ISUP call signaling in the ISUP call signaling, and send the interception service instruction to the interception executing module 103; specifically, the interception instruction generating module 102 performs content analysis on the ISUP call signaling sent by the signaling collecting module 101 to obtain a signaling parameter corresponding to the ISUP call signaling; the signaling parameters comprise a calling number and a called number; the interception instruction generation module 102 identifies the calling number through the abnormal telephone identification model to judge whether the current calling number is an abnormal telephone; if the current calling number is determined to be an abnormal call, an interception service instruction is generated according to the signaling parameter and the interception service indication information, and the interception service instruction is sent to the interception execution module 103.

The abnormal call identification model can be obtained by establishing an initial abnormal call identification model based on a machine learning algorithm and training the initial abnormal call identification model by adopting various types of abnormal calls (such as fraud calls and harassing calls); through the abnormal telephone identification model, the accurate identification of the abnormal telephone can be realized. Abnormal calls, which are telephone numbers with abnormal behavior or corresponding abnormal attributes, may specifically include nuisance calls and fraud calls, e.g., numbers with a large number of calls dialed in a short time.

As shown in fig. 2, in the embodiment of the present invention, optionally, the interception instruction generating module 102 includes: an abnormal signaling judgment unit 104 and an intercepted service instruction generation unit 105; the abnormal signaling judgment unit 104 is configured to analyze the received ISUP call signaling, obtain a calling number of the ISUP call signaling, judge whether the calling number is an abnormal call according to an abnormal call identification algorithm, and send a judgment result to the interception service instruction generation unit.

Specifically, the abnormal signaling judgment unit 104 analyzes the content of the received ISUP call signaling, and judges the calling number obtained by analysis according to a preset abnormal telephone identification algorithm; further, the judgment result is sent to the connected interception service instruction generation unit 105; the calling number is the telephone number of the current calling initiating user; abnormal phone identification algorithms, which may include blacklist methods; specifically, an abnormal telephone blacklist is pre-established, and matching search is carried out in the abnormal telephone blacklist when a new calling number is obtained; if the consistent abnormal telephone is found, determining that the current calling number is the abnormal telephone; and judging results including normal and abnormal. The embodiment of the present invention does not specifically limit the type of the abnormal call recognition algorithm.

The intercepted service instruction generating unit 105 is configured to generate an intercepted service instruction according to the signaling parameter of the ISUP call signaling and the intercepted service indication information if the determination result is abnormal, and send the intercepted service instruction to the interception execution module 103; the signaling parameters include at least one of destination signaling point coding, source signaling point coding, circuit identification code, and link selection code. Wherein, the link selection code (SLS) is used to indicate which Signaling link in the Signaling link group the Signaling passes through for transmission; and intercepting service indication information for indicating that the current task is call interception.

Specifically, the intercepted service instruction generating unit 105 encapsulates signaling parameters such as DPC, OPC, CIC, and SLS and the intercepted service indication information to obtain an intercepted service instruction if the calling number in the received current ISUP call signaling sent by the abnormal signaling judging unit 104 is abnormal, and sends the generated intercepted service instruction to the interception executing module 103.

As shown in fig. 3, in the embodiment of the present invention, optionally, the interception instruction generating module 102 may further include: an abnormal telephone storage unit 106; the abnormal telephone storage unit 106 is configured to store the calling number of the abnormal telephone determined by the abnormal signaling determination unit 104.

The abnormal signaling judgment unit 104 may be specifically configured to analyze the received ISUP call signaling to obtain a calling number of the ISUP call signaling; judging whether the calling number can be found in the abnormal telephone storage unit 106: if yes, determining that the calling number is an abnormal telephone; if not, judging whether the calling number is an abnormal call according to an abnormal call identification algorithm, and sending a judgment result to the service intercepting instruction generating unit 105.

If the abnormal signaling determination unit 104 determines that the current calling number is an abnormal call, the determination result is sent to the interception service instruction generation unit 105, and meanwhile, the current calling number can be sent to the abnormal call storage unit 106, so that the calling number of the abnormal call is stored through the abnormal call storage unit 106; correspondingly, after acquiring the ISUP call signaling each time, the abnormal signaling judgment unit 104 analyzes the ISUP call signaling to acquire a corresponding calling number; firstly, matching search is performed in the abnormal telephone storage unit 106 according to the current calling number, and if the consistent stored abnormal telephone number is found, the telephone corresponding to the current calling number can be directly determined to be an abnormal telephone.

If the consistent stored abnormal telephone number is not found, the current calling number is possibly a new abnormal telephone number, so that the current calling number is identified and judged again by adopting an abnormal telephone identification algorithm; if the calling number is determined to be abnormal, the judgment result is sent to the intercepting service instruction generating unit 105, and the current calling number is sent to the abnormal telephone storage unit 106 for storage; by storing the abnormal calling number, when a new calling number is obtained, whether the current calling number is abnormal or not is judged according to the stored abnormal number, so that the efficiency of judging whether the calling number is abnormal or not can be improved, and the efficiency of intercepting an abnormal call can be improved.

The interception execution module 103 is configured to generate a call release message according to the received service interception instruction, and send the call release message to a corresponding high-level signaling transfer point, so as to intercept an abnormal call according to the call release message through the high-level signaling transfer point. The call release message is a disconnect signal of the ISUP call signaling, that is, a signal for ending the current call.

It should be noted that, in the ISUP calling process, when the calling end office receives the calling request of the calling user, firstly, an IAM message is generated and sent to the called end office; after receiving the IAM, the called end office analyzes and obtains the called user number in the IAM to determine the called user; meanwhile, a user link is detected to judge whether connection is allowed or not, if the called end office detects that the reasons of incorrect user number, telephone link congestion or incompatibility and the like cannot establish the link, the called end office sends a call Release (REL) message to the calling end office; after receiving the REL message, the calling end office releases the call telephone link and feeds back a Release Complete message (RLC), and ends the current call; when gateway offices exist in an operator network, various signaling information between end offices is routed and forwarded through the gateway offices. Therefore, when receiving an interception service instruction corresponding to the current ISUP call signaling, the interception execution module 103 generates a corresponding REL message, and can intercept and terminate the current abnormal call.

Specifically, after receiving the interception service instruction, the interception execution module 103 performs content analysis on the interception service instruction to obtain a signaling parameter and interception service indication information in the interception service instruction; and then, the signaling parameters are encapsulated according to the format of the call release message to generate a call release message corresponding to the current ISUP call signaling, and the call release message is sent to a high-level signaling transfer point connected to the interception execution module 103, so that the current call release message is forwarded through the high-level signaling transfer point, and finally the current call release message is sent to a called end office corresponding to a called user, thereby completing the interception of the current abnormal call.

Wherein, a High-level signaling transfer point (HSTP) is mainly used for switching and processing inter-provincial traffic; in the embodiment of the invention, signaling links of the interception execution module 103 and each high-level signaling transfer point are pre-established, and when a call release message is generated according to an interception service instruction, a corresponding HSTP and a transmission signaling link of the release message in an operator network can be determined according to signaling parameters in the interception service instruction; after the release message is obtained, the release message is sent to the matched HSTP, the release message can be sent to the corresponding gateway office through the HSTP according to the corresponding transmission signaling link, and then the call release message is sent to the called end office corresponding to the called user through the gateway office; because the communication link between the HSTP and each gateway office is pre-established for the operator network, the embodiment of the invention forwards the call release message through the HSTP, can avoid the establishment of signaling links with a plurality of gateway offices, reduces the cost investment and reduces the complexity of an abnormal call interception system.

As shown in fig. 4, in the embodiment of the present invention, optionally, the abnormal call intercepting system 100 may further include a signaling link establishing module 107; the signaling link establishing module 107 is configured to establish a signaling link between the interception executing module 103 and an external high-level signaling transfer point according to a link configuration parameter; the advanced signaling transfer point is connected with a plurality of signaling points.

The interception execution module 103 is specifically configured to generate a call release message according to a received service interception instruction, and send the call release message to a corresponding high-level signaling transfer point through the signaling link, so as to intercept an abnormal call according to the call release message through the high-level signaling transfer point.

The link configuration parameter is an attribute parameter corresponding to the signaling link, for example, if a data time slot of the configured signaling link is 0, it indicates that the signaling link is a 2M (2Mbit/s) signaling link; if the data time slot is 1-31, the signaling link is a 64k (64kbit/s) signaling link; the signaling link is a release message transmission link established according to the link configuration parameters, and may specifically include a 2M signaling link; in the embodiment of the invention, the call release message is sent to the HSTP through the 2M signaling link, so that the transmission rate of the call release message can be increased, the abnormal call can be intercepted more quickly, the advanced interception of the abnormal call can be realized before the telephone of the called user rings, the called user can not feel the abnormal call, and the user experience is improved.

In this embodiment of the present invention, optionally, the signaling link establishing module 107 may be specifically configured to: based on a message transfer part second function level MTP2, a point-to-point L1 link establishment request is sent to a target high level signaling transfer point, and when a feedback message of successful link establishment of an L1 is received, a positioning request is sent to the target high level signaling transfer point; if the feedback message of successful positioning is received, an LI link test request is sent based on the message transfer part third function level MTP 3; if a response message of the target high-level signaling transfer point to the L1 link test request is received, the establishment of the signaling link between the interception execution module 103 and the target high-level signaling transfer point is completed.

The MTP (message transfer part) is a part responsible for message transfer in a signaling protocol # seven, and is composed of three functional levels, including a signaling data link (MTP1), a signaling link function (MTP2), and a signaling network function (MTP 3); MTP1, a path for bidirectional transmission of signaling, consisting of two data paths working in opposite directions with the same data rate; the MTP2 is used for providing reliable signaling transmission at two ends of the signaling, and comprises functions of error detection, error correction, error rate monitoring, flow control and the like; the MTP3 is used to ensure that the signaling network can still reliably transfer various signaling messages when some point or transmission link in the signaling network fails.

The signaling link state may include seven states of "power on", "service interruption", "initial positioning", "positioned/ready", "positioned/not ready", "open service", and "handler failure".

In an optional implementation manner of the embodiment of the present invention, as shown in fig. 5, a status field is used to indicate a status of a signaling link; for example, first, a physical link between the interception execution module 103 and the HSTP is established, and the connection state of the physical link is detected, and if it is detected that the physical link is not blocked, the link state is set to 4; secondly, the MTP3 layer sends a point-to-point L1 link connection command to the MTP2 layer (if the link is a 2M link, the L1 link is required to connect the whole E1 line), and waits for a connection success report of the L1 link, and sets the link state to 5; if a connection success report of the L1 link is received, setting the link state to be 6; the interception execution module 103 sends a message to HSTP developed SIO (indicating that the home terminal can perform positioning) based on MTP2, at this time, the L1 link is converted from an idle state to an un-positioned state, if the SIO message fed back by HSTP is received within a preset time T17, indicating that an available signaling link exists in the original signaling link group, the two parties send correct positioning SIN messages to each other, and set the link state to 7; if the SIO message fed back by the HSTP is not obtained in T17, indicating that the current link is unavailable, the two parties send emergency positioning SIE messages to each other to obtain an available link.

After determining that the L1 link service is successfully opened, the interception execution module 103 sends a signaling link test message SLTM (for example, the test message code is 0x11) to the HSTP, and sets the L1 link state to 8; if the signaling link test confirmation messages SLTA (for example, confirmation message code of 0x21) and SLTM of the HSTP feedback are determined to be received, the test is successful, and the L1 link state is set to 9. If the SLTA fed back by the opposite end is not received after the timeout, the SLTM is continuously sent, and if the SLTA fed back by the opposite end is not received for three times, the L1 link state is set to be 6; after the test of the L1 link is finished, clearing the test count, and setting the L1 link state as 11; and meanwhile, when the L1 link is in a normal working state, the SLTM is sent at regular time, the test count is recorded, the SLTA fed back by the opposite terminal is received, the link state test is completed once, and the test count is cleared.

In this embodiment of the present invention, optionally, the signaling link establishing module 107 may further include a signaling message processing unit; a signaling message processing unit, which is used for carrying out message identification, message distribution and message routing on the received signaling message; the message identification is used for identifying a destination signaling point of the information message; specifically, a destination code in the signaling message is obtained by analyzing the received signaling message, and a destination signaling point of the current signaling message is determined according to the destination code; if the current signaling point is the target signaling point, performing message distribution on the current signaling message so as to distribute the signaling message to a service part responsible for the current signaling point; wherein, the target Service can be determined according to a Service Indicator (SI) in a Service Information Octet (SIO) in the signaling message; and if the current signaling point is not the destination signaling point, forwarding the signaling message through the message route.

Wherein, the message routing is to select a routing table, a signaling link group and a signaling link for the signaling message; two or more signaling links exist between the interception execution module 103 and each HSTP, and the signaling message can be distributed and transmitted between these links by adopting a load sharing method. Specifically, the signaling message is analyzed to obtain a service indication code in a service information octet, and a matched routing table is determined according to the service indication code; determining a corresponding signaling link group according to the destination code in the signaling message; finally, determining a matched signaling link in the signaling link group according to the link selection code, and transmitting the signaling message through the current signaling link; for example, as shown in fig. 6, if SIO is 4, DPC is 18, and SLS is 1 in the signaling message, the routing table corresponding to the current signaling message is the routing table 1, the signaling link group is the signaling link group 1 in the routing table 1, and the signaling link is the signaling link 1 in the signaling link group 1, where the corresponding relationship is preset.

As shown in fig. 7, in the embodiment of the present invention, optionally, the abnormal call intercepting system 100 further includes a system online updating module 108; the system online update module 108 is configured to store a system update program through a spare memory space, and switch an original program to the system update program by using a loadModule interface and an unld interface of the VxWorks system, so as to implement online update of the abnormal telephone interception system. The VxWorks system is an embedded real-time operating system and has the characteristics of high reliability and good real-time performance; in the embodiment of the invention, the online updating of the abnormal telephone interception system can be realized through the VxWorks system.

The system online update module 108 is specifically configured to: when a program switching instruction is received, judging whether a system updating program file exists or not; if yes, unloading the original system program through an unld function, and executing a loadModule function to load the system updating program file; when a loading program block pointer of a loadModule function is received, searching an entry address of a system updating program file through a bootstrap program, and creating a new application task according to the entry address; setting an operation reason in the entry parameters of the new application task as program switching; and running the system updating program file through a bootstrap program, and recovering field running data through the reserved call service file according to the new application task to realize online updating of the system program.

In an optional implementation manner in the embodiment of the present invention, as shown in fig. 8, after receiving a program switching instruction, it is determined whether a system update program file exists; if yes, storing the service data, clearing resources and starting a bootstrap program; otherwise, returning error information; judging whether the current task is program switching, if so, unloading the original system program through a bootstrap program, and loading a system updating program file; otherwise, executing other task operations; judging whether the system updating program file is loaded successfully or not, if so, operating the system updating program file through a bootstrap program, and quitting the bootstrap program; starting a system updating program to carry out system initialization; and judging whether to perform program switching, if so, performing service data recovery according to the stored service data, and if determining that the program switching is successful, entering a program main loop for processing to complete the online updating of the abnormal telephone interception system.

In the embodiment of the invention, the abnormal call interception system can be ensured to be always in a working state by carrying out online updating on the abnormal call interception system, the temporary shutdown of the system caused by the thinner system upgrade can be avoided, the missing detection of the abnormal call can be further avoided, the stability of the abnormal call interception system can be improved, and the user experience can be improved.

As shown in fig. 9, in the embodiment of the present invention, optionally, the abnormal telephone interception system 100 further includes an abnormal call reminding module 109; the abnormal call reminding module 109 is configured to generate abnormal call interception prompting information after the abnormal call is intercepted, and send the abnormal call interception prompting information to the calling party and the called party; the abnormal call interception prompt message comprises a calling number, a called number, interception time and interception reason information. After the abnormal telephone is intercepted, the called user does not sense the call completely, namely does not know the existence of the call; after the abnormal call is intercepted, generating abnormal call interception prompt information and sending the abnormal call interception prompt information to a calling user and a called user so as to prompt that the current abnormal call is intercepted; meanwhile, in order to avoid the wrong interception of the normal call, the called user can be requested to determine whether the interception is correct or not; if the called user determines that the interception is correct, ending the abnormal call interception process; if the called user determines that the interception is wrong, the calling number in the current call signaling can be removed from the blacklist of the interception system, so that the interception accuracy of the abnormal call interception system can be further improved, and the right of awareness of the user can be guaranteed.

In an optional implementation manner of the embodiment of the present invention, as shown in fig. 10, an abnormal call intercepting process of the abnormal call intercepting system may include: the signaling acquisition module 101 acquires IAM messages between the gateway of the operator network a and the gateway of the operator B, and sends the acquired IAM messages to the interception instruction generation module 102; the interception instruction generation module 102 analyzes the calling number in the IAM message according to the calling number identification model to determine whether the current calling number is an abnormal number; if yes, generating a corresponding interception service instruction according to the IAM message and sending the interception service instruction to the interception execution module 103; the interception execution module 103 encapsulates signaling parameters such as DPC, OPC, CIC and the like in the interception service instruction to generate a call release REL message, and sends the REL message to the matched HSTP; HSTP sends REL message to gateway office of operator B; the gateway office of the operator B forwards the REL message to a called end office corresponding to the called user; the called end office releases the call after receiving the REL message and sends a release completion RLC message to the calling end office; after receiving the RLC message, the calling end office releases the calling user, completes the release of the call, and the call is not connected, so that the advanced interception of the abnormal call is realized.

The abnormal call intercepting system in the embodiment of the present invention may be applied to the application scenario as shown in fig. 11; the operator network A comprises an HSTP and n gateway offices, wherein the HSTP is connected with each gateway office through a signaling link; the operator network B comprises an HSTP and n gateway offices, wherein the HSTP is connected with each gateway office through a signaling link; the abnormal telephone interception system 100 collects signaling of ISUP call signaling between gateway offices of different operator networks, generates corresponding call release information aiming at the abnormal ISUP call signaling in the collected ISUP call signaling, and then sends the call release information to the matched HSTP based on a 2M signaling link between the abnormal telephone interception system 100 and HSTP of the operator network corresponding to a called user, so that the current call release information is forwarded to the gateway office corresponding to the called user through the HSTP, and finally the call release information is sent to a called end office corresponding to the called user through the current gateway office, thereby completing interception of the current abnormal ISUP call.

The abnormal telephone interception system in the embodiment of the invention collects ISUP calling signaling of a user part of an integrated service digital network between gateway offices through a signaling collection module, identifies abnormal ISUP calling signaling in the ISUP calling signaling through an interception command generation module, and further generates an interception service command according to the abnormal ISUP calling signaling; furthermore, an interception execution module generates a call release message according to the received interception service instruction, and an advanced signaling transfer point intercepts the abnormal call according to the call release message; the advanced interception mode of the abnormal call is provided, so that the real-time identification and interception of the abnormal call signaling can be realized, the network safety is improved, and the personal and property safety of a user is effectively protected; meanwhile, the interception and release of the abnormal call are realized before the called user rings, so that the user does not feel the abnormal call, and the user experience is improved.

Example two

Fig. 12 is a flowchart of an abnormal call intercepting method according to a second embodiment of the present invention, where this embodiment is applicable to generating a corresponding call release message according to an obtained service intercepting instruction to intercept an abnormal call, and the method may be executed by an interception execution module in an abnormal call intercepting system according to the first embodiment of the present invention, as shown in fig. 12, where the method specifically includes:

s210, acquiring an interception service instruction, and analyzing the content of the interception service instruction to acquire an interception service parameter; the intercepted service parameters comprise signaling parameters and intercepted service indication information.

The intercepted service parameters may include source signaling point codes, destination signaling point codes, circuit identification codes, service indication codes and link selection codes; specifically, after the interception service instruction is obtained, content analysis is performed on the interception service instruction based on the ISUP protocol standard to obtain corresponding interception service parameters.

S220, determining a target signaling point according to the intercepted service parameters; and packaging the intercepted service parameters based on a preset format to obtain a call release message.

The preset format is a data coding mode corresponding to the REL message and is determined by a seventh signaling protocol; the destination signaling point is an end office corresponding to a called user of the current abnormal ISUP call signaling; specifically, after the intercepted service parameters are obtained, a target signaling point is determined according to a target signaling point code in the intercepted service parameters; coding and packaging the interception service parameter based on the data coding mode of the REL message to obtain a call release message corresponding to the interception service instruction; therefore, the format of the release message can be identified by the operator network, and the accurate release of the abnormal call can be realized.

S230, an idle signaling link is obtained, the call release information is sent to a high-level signaling transfer point through the idle signaling link, and the call release information is sent to a target signaling point through the high-level signaling transfer point, so that abnormal calls are intercepted.

After the call release information is acquired, determining a signaling link in an idle state currently in a signaling link group between an interception execution module and a high-level signaling transfer point as a routing link of the current call release information; and then the call release information is sent to the advanced signaling transfer point through the current signaling link, and the call release information is sent to the corresponding called end office through the advanced signaling transfer point so as to imitate the calling number to send the call release information to the called number, thereby realizing the advanced interception of the current abnormal call.

According to the technical scheme of the embodiment of the invention, the obtained interception service instruction is analyzed by the interception execution module to obtain the corresponding interception service parameter, the call release information matched with the interception service instruction is generated according to the interception service parameter, and the current call release information is sent to the corresponding target signaling point through the high-level signaling transfer point, so that the execution of the interception service instruction can be realized, the advanced interception of abnormal calls is realized, the network safety is improved, and the personal and property safety of users is protected; the special interception execution module is arranged to generate the call release information corresponding to the abnormal call, so that the independence of functions can be guaranteed, the generation speed of the call release information is increased, the abnormal call can be intercepted before the ringing of the called user, and the user experience can be improved.

EXAMPLE III

A third embodiment of the present invention further provides a storage medium containing computer-executable instructions, where the computer-executable instructions are executed by a computer processor to perform an abnormal call intercepting method, and the method includes:

acquiring an interception service instruction, and analyzing the content of the interception service instruction to acquire interception service parameters; the intercepted service parameters comprise signaling parameters and intercepted service indication information;

determining a target signaling point according to the intercepted service parameters; the interception service parameter is packaged based on a preset format, and a call release message is obtained;

and acquiring an idle signaling link, sending the call release information to a high-level signaling transfer point through the idle signaling link, and sending the call release information to a target signaling point through the high-level signaling transfer point so as to intercept abnormal calls.

Of course, the storage medium containing the computer-executable instructions provided by the embodiments of the present invention is not limited to the method operations described above, and may also perform related operations in the abnormal call interception method provided by any embodiment of the present invention.

From the above description of the embodiments, it is obvious for those skilled in the art that the present invention can be implemented by software and necessary general hardware, and certainly, can also be implemented by hardware, but the former is a better embodiment in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which can be stored in a computer-readable storage medium, such as a floppy disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a FLASH Memory (FLASH), a hard disk or an optical disk of a computer, and includes several instructions for enabling a computer device (which may be a personal computer, a server, or a network device) to execute the methods according to the embodiments of the present invention.

It should be noted that, in the embodiment of the above search apparatus, each included unit and module are merely divided according to functional logic, but are not limited to the above division as long as the corresponding functions can be implemented; in addition, specific names of the functional units are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present invention.

It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.