阅读说明：本技术 一种短消息处理方法、装置及设备 (Short message processing method, device and equipment ) 是由 王峰生 于 2018-07-23 设计创作，主要内容包括：本发明提供一种短消息处理方法、装置和设备,其中,所述短消息处理方法包括：接收主叫终端发送的短消息；检测所述短消息中的预设字段是否满足预设条件；当所述短消息中的预设字段满足所述预设条件时,拒绝将所述短消息转发至被叫终端。本发明的方案,可以从网络侧实现对静默短信的检测,从而可以无需对相应终端进行改进,方便实现,并且可以防止用户信息泄露,防止对用户的非法定位,从而避免对特定用户进行定向攻击。(The invention provides a short message processing method, a device and equipment, wherein the short message processing method comprises the following steps: receiving a short message sent by a calling terminal; detecting whether a preset field in the short message meets a preset condition or not; and when the preset field in the short message meets the preset condition, refusing to forward the short message to the called terminal. The scheme of the invention can realize the detection of the silent short message from the network side, thereby being free from improving the corresponding terminal, being convenient to realize, preventing the information of the user from being leaked, preventing the illegal positioning of the user and avoiding the directional attack to the specific user.)

1. A short message processing method is characterized by comprising the following steps:

receiving a short message sent by a calling terminal;

detecting whether a preset field in the short message meets a preset condition or not;

and when the preset field in the short message meets the preset condition, refusing to forward the short message to the called terminal.

2. The method according to claim 1, wherein when the preset field in the short message satisfies the preset condition, the method further comprises:

caching the short message, and judging whether the paging frequency of the short message exceeds a preset threshold value within a preset time;

and when the paging frequency of the short message does not exceed the preset threshold value, forwarding the short message to the called terminal.

3. The method according to claim 1, wherein when the preset field in the short message satisfies the preset condition, the method further comprises:

sending a first notification message to a network management system;

wherein, the first notification message is used to notify the network management system that the calling terminal may execute illegal positioning operation.

4. The method of claim 2, wherein when the number of pages of the short message exceeds the preset threshold, the method further comprises:

sending a second notification message to the called terminal;

the second notification message is used for notifying a called terminal user that the called terminal has the possibility of being illegally located.

5. The method of claim 1, wherein when the number of pages of the short message exceeds the preset threshold, the method further comprises:

sending a third notification message to the network management system;

wherein, the third notification message is used to notify the network management system that the calling terminal may execute an illegal positioning operation.

6. The method according to any of claims 1 to 5, wherein the preset field in the short message comprises at least one of:

a TP-PID field and a TP-DCS field.

7. A short message processing apparatus, comprising:

the receiving module is used for receiving the short message sent by the calling terminal;

the detection module is used for detecting whether a preset field in the short message meets a preset condition or not;

and the rejecting module is used for rejecting to forward the short message to the called terminal when the preset field in the short message meets the preset condition.

8. The apparatus of claim 7, further comprising:

the judging module is used for caching the short message when a preset field in the short message meets the preset condition and judging whether the paging frequency of the short message exceeds a preset threshold value within preset time;

and the sending module is used for forwarding the short message to the called terminal when the paging frequency of the short message does not exceed the preset threshold value.

9. A short message processing device comprising a memory, a processor and a computer program stored on said memory and executable on said processor, characterized in that said computer program, when executed by said processor, carries out the steps of the short message processing method according to any one of claims 1 to 6.

10. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the short message processing method according to any one of claims 1 to 6.

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method, an apparatus, and a device for processing a short message.

Background

In recent years, as Global System for Mobile communication (GSM) technologies mature, there are increasing reports and events of attacks against GSM systems, and one threat often mentioned in these large number of related reports is attacks against specific users. Before such attack method is executed, it needs to acquire Temporary Mobile Subscriber Identity (TMSI) information allocated to a user by a network through technical means. The currently used method for acquiring the user identification information is to trigger the continuous paging of the attacked user through a silent short message service (SilentSMS), and acquire the TMSI information of the user by analyzing the number of paging messages.

The process of obtaining the specific user identification information through the silent short message comprises the following steps: firstly, starting paging message capture in a coverage area belonging to the same user as the attacked user; then, setting special flag bits on the message header of the short message, and sending silent short messages to the attacked users in a fixed quantity; and finally, after the sending of the silent short message is stopped, filtering out the paging requests which are consistent with the sending quantity and aim at the same TMSI information from the captured massive paging messages, wherein the TMSI information is the TMSI number distributed by the number of the attack user carried out by the attacker in a Visitor Location Register (VLR).

At present, in order to prevent user information leakage, the user information leakage can be prevented by detecting the silent short message at the terminal side, but the method needs to modify the corresponding terminal, and is difficult to realize under the condition that the manufacturers and the models of the existing terminals are very many.

Disclosure of Invention

The embodiment of the invention provides a short message processing method, a short message processing device and a short message service center, and aims to solve the problem that the conventional method for preventing user information leakage by detecting silent short messages at a terminal side is difficult to realize.

In a first aspect, an embodiment of the present invention provides a short message processing method, including:

receiving a short message sent by a calling terminal;

detecting whether a preset field in the short message meets a preset condition or not;

and when the preset field in the short message meets the preset condition, refusing to forward the short message to the called terminal.

In a second aspect, an embodiment of the present invention further provides a short message processing apparatus, including:

the receiving module is used for receiving the short message sent by the calling terminal;

the detection module is used for detecting whether a preset field in the short message meets a preset condition or not;

and the rejecting module is used for rejecting to forward the short message to the called terminal when the preset field in the short message meets the preset condition.

In a third aspect, an embodiment of the present invention further provides a short message processing apparatus, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the computer program, when executed by the processor, implements the steps of the short message processing method.

In a fourth aspect, the embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the steps of the short message processing method described above.

The short message processing method of the embodiment of the invention detects whether the preset field in the short message meets the preset condition or not by receiving the short message sent by the calling terminal, and refuses to forward the short message to the called terminal when the preset field in the short message meets the preset condition, so that the detection of the silent short message can be realized from the network side, thereby being unnecessary to improve the corresponding terminal, being convenient to realize, preventing the information of the user from being leaked, preventing the illegal positioning of the user, and avoiding the directional attack on the user.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required to be used in the embodiments of the present invention will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive labor.

Fig. 1 is a flowchart of a short message processing method according to an embodiment of the present invention;

fig. 2 is a schematic structural diagram of a short message processing apparatus according to an embodiment of the present invention;

fig. 3 is a schematic structural diagram of a short message processing device according to an embodiment of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Referring to fig. 1, an embodiment of the present invention provides a short message processing method, which is applied to a short message Service center (Service center), and includes the following steps:

step 101: and receiving the short message sent by the calling terminal.

The short message sent by the calling terminal may be a silent short message or a normal short message.

Step 102: and detecting whether a preset field in the short message meets a preset condition.

In this embodiment of the present invention, optionally, the preset field may include at least one of the following items:

a TP-PID (TP-Protocol-Identifier) field and a TP-DCS (TP-Data-Coding-Scheme) field.

It should be noted that, according to the specification of 3GPP TS 03.40 protocol, if bits 4 to 0 in the TP-PID field of the short message are set to 00000, the terminal will discard the short message. According to the 3GPP TS 03.38 protocol standard, if bits 7 to 4 in the TP-DCS field of a short message are set to 1100, the terminal will discard the short message. That is, for a short message, if bits 4 to 0 in the TP-PID field of the short message are set to 00000, and/or bits 7 to 4 in the TP-DCS field of the short message are set to 1100, the short message may be a silent short message for locating a user; otherwise, the short message is a normal short message.

Thus, for the TP-PID field, the corresponding preset conditions may be: bits 4 to 0 in the TP-PID field are set to 00000; for the TP-DCS field, the corresponding preset conditions may be: bits 7 to 4 in the TP-DCS field are set to 1100.

Step 103: and when the preset field in the short message meets the preset condition, refusing to forward the short message to the called terminal.

When the preset field in the short message does not meet the preset condition, the short message can be determined to be a normal short message, and the short message is forwarded to the called terminal.

Optionally, when the preset field in the short message satisfies a preset condition, the method may further include:

the short message service center sends a first notification message to the network management system.

Wherein, the first notification message is used to notify the network management system that the calling terminal may execute illegal positioning operation. Therefore, the network management system can monitor the corresponding calling terminal by means of the first notification message so as to prevent the calling terminal from illegally acquiring the user information.

The short message processing method of the embodiment of the invention detects whether the preset field in the short message meets the preset condition or not by receiving the short message sent by the calling terminal, and refuses to forward the short message to the called terminal when the preset field in the short message meets the preset condition, so that the detection of the silent short message can be realized from the network side, thereby being unnecessary to improve the corresponding terminal, being convenient to realize, preventing the information of the user from being leaked, preventing the illegal positioning of the user, and avoiding the directional attack on the specific user.

In this embodiment of the present invention, optionally, in order to prevent misjudgment of the short message, when the preset field in the short message meets the preset condition, the method may further include:

caching the short message, and judging whether the paging frequency of the short message exceeds a preset threshold value within a preset time;

and when the paging frequency of the short message does not exceed a preset threshold value, forwarding the short message to a called terminal.

It can be understood that, in this case, when forwarding the short message to the called terminal, the short message may be forwarded to the called terminal only once, or the short message may be forwarded to the called terminal multiple times according to the paging number of the short message, for example, the paging number of the short message is 5 times, and the short message may be forwarded to the called terminal 5 times at the same time.

Specifically, when determining whether the paging frequency of the short message exceeds a preset threshold within a preset time, the short message service center may record the cached short message, for example, record a TP-OA (TP-addressing-Address) field, a TP-DA (TP-addressing-Address) field, a TP-PID (TP-addressing-Address) field, and a TP-DCS field in the short message, and record the caching time and the caching frequency of the short message, and then determine whether the short message is continuously sent to the same called terminal within a preset statistical period (for example, 3 minutes) according to the record information, and determine whether the caching frequency of the short message exceeds the preset threshold (for example, 30 times, that is, the frequency of the short message is 10 times per minute) within the preset statistical period when the short message is continuously sent to the same called terminal. When the caching frequency of the short message exceeds a preset threshold value, the short message may be a silent short message of a positioning user; and when the caching frequency of the short message does not exceed the preset threshold, the short message may be a normal short message. The measurement of the preset statistical period can be realized by means of a timer, namely, when the preset statistical period starts, the corresponding timer is started.

Further optionally, when the number of pages of the short message exceeds a preset threshold, the method may further include:

and the short message service center sends a second notification message to the called terminal.

Wherein, the second notification message is used for notifying the called terminal user that the called terminal has the possibility of being illegally positioned. In this way, the called terminal user can take measures such as operating the called terminal into an airplane mode by means of the second notification message to prevent the called terminal from being illegally located.

Further optionally, when the number of pages of the short message exceeds a preset threshold, the method may further include:

and the short message service center sends a third notification message to the network management system.

Wherein, the third notification message is used to notify the network management system that the calling terminal may execute an illegal positioning operation. Therefore, the network management system can monitor the corresponding calling terminal by means of the first notification message so as to prevent the calling terminal from illegally acquiring the user information.

Referring to fig. 2, an embodiment of the present invention further provides a short message processing apparatus, applied to a short message service center, including:

a receiving module 21, configured to receive a short message sent by a calling terminal;

a detecting module 22, configured to detect whether a preset field in the short message meets a preset condition;

a rejecting module 23, configured to reject to forward the short message to the called terminal when a preset field in the short message meets the preset condition.

The short message processing device of the embodiment of the invention detects whether the preset field in the short message meets the preset condition or not by receiving the short message sent by the calling terminal, and refuses to forward the short message to the called terminal when the preset field in the short message meets the preset condition, so that the detection of the silent short message can be realized from the network side, the improvement on the corresponding terminal is not needed, the realization is convenient, the leakage of user information can be prevented, the illegal positioning of a user is prevented, and the directional attack on a specific user is avoided.

In this embodiment of the present invention, optionally, the apparatus may further include:

the judging module is used for caching the short message when a preset field in the short message meets the preset condition and judging whether the paging frequency of the short message exceeds a preset threshold value within preset time;

and the sending module is used for forwarding the short message to the called terminal when the paging frequency of the short message does not exceed the preset threshold value.

Optionally, the sending module is further configured to: when a preset field in the short message meets the preset condition, sending a first notification message to a network management system;

wherein, the first notification message is used to notify the network management system that the calling terminal may execute illegal positioning operation.

Optionally, the sending module is further configured to: when the paging frequency of the short message exceeds the preset threshold value, sending a second notification message to the called terminal;

the second notification message is used for notifying a called terminal user that the called terminal has the possibility of being illegally located.

Optionally, the sending module is further configured to: when the paging frequency of the short message exceeds the preset threshold value, sending a third notification message to a network management system;

wherein, the third notification message is used to notify the network management system that the calling terminal may execute an illegal positioning operation.

Optionally, the preset field in the short message includes at least one of the following:

a TP-PID field and a TP-DCS field.

In addition, an embodiment of the present invention further provides a short message processing apparatus, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor, where the computer program, when executed by the processor, can implement each process of the short message processing method embodiment, and can achieve the same technical effect, and is not described herein again to avoid repetition.

Specifically, referring to fig. 3, an embodiment of the present invention further provides a short message processing apparatus, which includes a bus 31, a transceiver 32, an antenna 33, a bus interface 34, a processor 35, and a memory 36.

In this embodiment of the present invention, the short message processing apparatus may further include: a computer program stored on the memory 36 and executable on the processor 35. In particular, the computer program may, when executed by the processor 35, implement the steps of:

the control transceiver 32 receives a short message sent by a calling terminal, detects whether a preset field in the short message meets a preset condition, and refuses to forward the short message to a called terminal when the preset field in the short message meets the preset condition.

In fig. 3, a bus architecture (represented by bus 31), bus 31 may include any number of interconnected buses and bridges, with bus 31 linking various circuits including one or more processors, represented by processor 35, and memory, represented by memory 36. The bus 31 may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. A bus interface 34 provides an interface between the bus 31 and the transceiver 32. The transceiver 32 may be one element or may be multiple elements, such as multiple receivers and transmitters, providing a means for communicating with various other apparatus over a transmission medium. The data processed by the processor 35 is transmitted over a wireless medium via the antenna 33, and further, the antenna 33 receives the data and transmits the data to the processor 35.

The processor 35 is responsible for managing the bus 31 and general processing and may also provide various functions including timing, peripheral interfaces, voltage regulation, power management, and other control functions. And memory 36 may be used to store data used by processor 35 in performing operations.

Alternatively, the processor 35 may be a CPU, ASIC, FPGA or CPLD.

The embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored, and when being executed by a processor, the computer program can implement each process of the foregoing short message processing method embodiment, and can achieve the same technical effect, and is not described herein again to avoid repetition.

Computer-readable media, which include both non-transitory and non-transitory, removable and non-removable media, may implement the information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.

Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.

The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.