WO2017185742A1 - 一种伪基站的识别方法、装置以及终端 - Google Patents

Images

Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/12—Detection or prevention of fraud
  • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/12—Detection or prevention of fraud
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/12—Detection or prevention of fraud
  • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
  • H04W12/122—Counter-measures against attacks; Protection against rogue devices
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W24/00—Supervisory, monitoring or testing arrangements
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W36/00—Hand-off or reselection arrangements
  • H04W36/0005—Control or signalling for completing the hand-off
  • H04W36/0055—Transmission or use of information for re-establishing the radio link
  • H04W36/0061—Transmission or use of information for re-establishing the radio link of neighbour cell information

Definitions

• the present invention relates to the field of communications technologies, and in particular, to a method, an apparatus, and a terminal for identifying a pseudo base station.
• pseudo base stations appear in actual communication networks. Some criminals falsify part of the network parameters and increase their own transmit power to forge the public mobile operator base station to attract surrounding communication terminals; when the communication terminal successfully resides in the pseudo base station cell These criminals can obtain some private information in the communication terminal, such as user identity information, and then obtain illegal benefits therefrom.
• the emergence of pseudo base stations has brought harm to the end users, operators, and even the country. How to identify and solve the problem of pseudo base stations will become the focus of the terminal security strategy.
• the existing GSM mobile communication system can only perform one-way authentication, that is, the network authenticates the communication terminal, but the communication terminal cannot actively identify the legality of the network identity, so that the communication is in the communication.
• the terminal After the terminal establishes a communication connection with the pseudo base station, it may also cause leakage of user privacy information, or even loss of personal property. Therefore, how to identify and process the pseudo base station has become an urgent problem to be solved.
• the technical problem to be solved by the embodiments of the present invention is to provide a method, a device, and a terminal for identifying a pseudo base station, where the communication terminal can perform identity authentication on the candidate cell automatically and intelligently, and when it is determined that the cell corresponds to the pseudo base station , access is prohibited, thus ensuring the security of the terminal information to a certain extent.
• the embodiment of the present invention provides a method for identifying a pseudo base station, where the method includes:
• the measurement control information includes a neighboring cell list of the camping cell, and the neighboring cell list includes a cell identifier of at least one neighboring cell;
• the cell identifier corresponding to the candidate cell does not exist in each cell identifier in the measurement control information, determine that the base station corresponding to the candidate cell is a pseudo base station.
• the method further includes:
• the determining, according to the wireless parameter of the candidate cell, whether the preset pseudo base station determination condition is met includes:
• the acquiring the measurement control information associated with the resident cell includes:
• the measurement control information includes a neighboring cell list of the camping cell, and the neighboring cell list includes a cell identifier of at least one neighboring cell.
• the method further includes:
• the radio parameter of the candidate cell does not satisfy the preset pseudo base station determination condition, and/or the cell identifier corresponding to the candidate cell exists in each cell identifier in the measurement control information, according to the preset Selecting a target cell by reselecting a cell handover condition;
• the embodiment of the present invention provides an apparatus for identifying a pseudo base station, where the apparatus includes:
• the determining module is configured to determine, according to the wireless parameter of the candidate cell, whether the preset pseudo base station determination condition is met, when the received signal strength of the candidate cell exceeds the received signal strength of the camping cell;
• Obtaining a module if the determining module determines that the wireless parameter of the candidate cell satisfies And determining, by the pseudo base station determining condition, acquiring measurement control information associated with the camping cell, where the measurement control information includes a neighboring cell list of the camping cell, where the neighboring cell list includes a cell identifier of at least one neighboring cell ;
• a determining module configured to: if the cell identifier corresponding to the candidate cell does not exist in each cell identifier in the measurement control information, determine that the base station corresponding to the candidate cell is a pseudo base station.
• the device further includes:
• a marking module configured to mark the cell identifier corresponding to the candidate cell as a cell identifier of a pseudo base station
• a sending module configured to send the cell identifier of the pseudo base station to the network side, so as to prohibit establishing a communication connection with the pseudo base station.
• the determining module is specifically configured to determine whether the rate of change of the received signal strength of the candidate cell exceeds a preset signal strength change rate threshold, and determine whether the identifier value of the cell identifier corresponding to the candidate cell is a pre- The endpoint value of the normal cell identifier threshold is set; if yes, it is determined that the preset pseudo base station determination condition is met, and the acquiring module is notified.
• the acquiring module is configured to automatically establish a communication connection with the resident cell, and acquire measurement control information that is sent by the network side and is associated with the resident cell, where the measurement control information includes the resident A list of neighboring cells of the reserved cell, the neighboring cell list including cell identifiers of at least one neighboring cell.
• the device further includes:
• the selecting module is configured to: if the radio parameter of the candidate cell does not meet the preset pseudo base station determining condition, and/or the cell identifier corresponding to the candidate cell exists in each cell identifier in the measurement control information , selecting a target cell according to a preset reselection cell handover condition;
• a handover module configured to switch the camped cell to the target cell, and establish a communication connection with the target cell.
• an embodiment of the present invention further provides a terminal, where the terminal includes the identification device of the pseudo base station.
• the base station corresponding to the candidate cell when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camping cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, Further, if there is no cell identifier corresponding to the candidate cell in each cell identifier in the measurement control information, it is determined that the base station corresponding to the candidate cell is a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 1 is a schematic structural diagram of a network architecture according to an embodiment of the present invention.
• FIG. 2 is a schematic structural diagram of operation of a pseudo base station according to an embodiment of the present invention.
• FIG. 3 is a schematic flowchart of a method for identifying a pseudo base station according to an embodiment of the present invention
• FIG. 4 is a schematic flowchart of another method for identifying a pseudo base station according to an embodiment of the present invention.
• FIG. 5 is a schematic flowchart diagram of another method for identifying a pseudo base station according to an embodiment of the present invention.
• FIG. 6 is a schematic structural diagram of an apparatus for identifying a pseudo base station according to an embodiment of the present invention.
• FIG. 7 is a schematic structural diagram of another apparatus for identifying a pseudo base station according to an embodiment of the present invention.
• FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present invention.
• the embodiment of the invention provides a method, a device and a terminal for identifying a pseudo base station, which can implement authentication of the access network by the communication terminal, that is, the communication terminal authenticates the base station, which is beneficial to guarantee terminal information (such as user personal information, personal property information, etc.) security.
• terminal information Such as user personal information, personal property information, etc.
• FIG. 1 is a schematic structural diagram of a network architecture according to an embodiment of the present disclosure. As shown in FIG. 1 , the network architecture diagram may include a network side, a base station side, and a user side.
• the network side represents an access network/core network
• the base station side includes at least one base station, which provides wireless coverage for various communication terminals on the user side, and implements wireless signal transmission between the communication network and the communication terminal, generally
• One base station corresponds to/corresponds to one cell
• the user side includes at least one communication terminal; for one communication terminal, the serving cell to which the communication terminal is currently connected is referred to as a camping cell, and the communication terminal can also
• the signals of other serving cells are detected, and the other serving cells are referred to as candidate cells, if there is an intersection between the other serving cells (that is, the candidate cells) and the camping cells (if the coverage ranges intersect)
• the coverage is close to tangency, etc., which is referred to as the neighboring cell of the camping cell.
• the communication terminal may include, but is not limited to, an in-vehicle device, a mobile phone, a mobile computer, a tablet computer, a personal digital assistant (PDA), a media player, a smart TV, a smart watch, a smart glasses, a smart bracelet. And other user equipment.
• PDA personal digital assistant
• FIG. 2 is a schematic structural diagram of the operation of the pseudo base station.
• the schematic diagram includes a fake base station system (Fake base station system) and a communication terminal (Terminal), and the pseudo base station system includes a base station unit (also referred to as a base station unit) and an analog core network entity.
• Function MSC Mobile Switching Center functional simulator
• operating platform also known as manual control platform, Manipulation platform.
• the base station unit is equivalent to a pseudo base station transmission unit and a controller, and fully complies with a network communication protocol (such as GSM) specification, and provides air interface access to the communication terminal;
• the analog core network entity function MSC implements channel allocation, location update, The function of sending out spam messages, etc., completes the acquisition of terminal information (such as user personal information), and the whole operation process also conforms to the network communication protocol specification;
• the operation platform is equivalent to the background control system of the pseudo base station, and can complete power adjustment and cell parameter modification. Write short messages, fake network address delivery, etc. It is a platform for criminals to attack communication terminals, and is generally composed of a notebook computer with control software installed.
• the current pseudo base station is generally composed of a set of RF transceivers, MSC circuit devices, notebook computers, etc., which is small in size and can be transported in a suitcase or a backpack to the vicinity of the user's residence to realize an attack on the communication terminal.
• the pseudo base station system generally works in a GSM frequency band of the GSM900 frequency band (because multiple frequency points need to increase the radio frequency transceiver, increase the cost, volume, weight, etc.), and can detect the carrier frequency information of the current target area base station, and will itself The frequency of the frequency is changed to the current network frequency, and the transmission power of the antenna can be adjusted at the same time.
• the communication terminal always detects the neighboring neighboring cell signal in the idle state, and reselects to the neighboring cell when the received signal strength of the neighboring cell is greater than the current serving cell.
• the communication terminal in the idle idle state can be quickly reselected into the pseudo base station cell; then the pseudo base station and the communication terminal Establish a connection for signaling interaction, and obtain information such as an IMSI (International Mobile Subscriber Identity) and a TMSI (Temporary Mobile Subscriber Identity) for each terminal, and send the spam message and the fake network address. Defrauding the user bank account password and other information; finally, the pseudo base station releases the communication terminal, and the communication terminal initiates the location update to re-live in the actual network.
• IMSI International Mobile Subscriber Identity
• TMSI Temporal Mobile Subscriber Identity
• the communication terminal receives the pseudo base station signal and the true base station has the following significant differences:
• the pseudo base station cell appears relatively suddenly and the signal increases sharply.
• the base station identifier of the pseudo base station (such as the location area code (LAC) and the cell ID) is completely different from the real base station; for example, the base station identifier of the normal base station is 0 to 65535, and the base station identifier of the pseudo base station is generally The boundary value is 0, 65534, 65535, or the base station identifier of the real base station is relatively different.
• LAC location area code
• the base station identifier of the pseudo base station needs to be different from the base station identifier of the real base station, so that the communication terminal can be reselected to the pseudo base station cell; the location area code LAC can trigger the communication terminal to initiate the update of the location area, so that the communication terminal reports the terminal information (such as user information, IMSI), in order to achieve the purpose of fraudulent terminal information.
• the terminal information Such as user information, IMSI
• FIG. 3 is a schematic flowchart of a method for identifying a pseudo base station according to an embodiment of the present invention.
• the method in the embodiment of the present invention can be applied to, for example, a smart phone, a tablet, and an intelligent device.
• the terminals with communication network functions, such as wearable devices they can be specifically implemented by the processors of these communication terminals.
• the method of the embodiment of the invention further includes the following steps.
• the base station can broadcast some control commands, voice call information, and data services, such as the core network side, to the surrounding communication terminals through the broadcast control channel BCCH (Broadcast Control Channel, BCCH) in real time or periodically (for example, 10s). Information and some of its own wireless signal parameters, etc.; the communication terminal can receive/detect the wireless signal broadcast by the peripheral base station, which we will refer to here as the received signal of the communication terminal.
• BCCH Broadcast Control Channel, BCCH
• BCCH Broadcast Control Channel
• the communication terminal may determine whether the wireless parameter of the candidate cell is The pseudo base station determination condition that the user or the system customizes the setting in the communication terminal in advance is satisfied.
• the user or the system may pre-set a determination condition for identifying the pseudo base station in the communication terminal, where the pseudo base station determination condition may include a preset received signal strength threshold (eg, -40dbm) and a received signal strength change rate.
• the threshold value that is, the power change rate of the received signal
• the cell identifier threshold of the normal serving cell that is, the base station identifier corresponding to the candidate cell, such as the LAC (Location area code) value of the normal base station is 0 to 65535, Or other cell identifiers (such as ID numbers) and the like are used to identify some decision parameters of the pseudo base station.
• the determining, according to the wireless parameter of the candidate cell, whether the preset pseudo base station determination condition is met includes:
• the communication terminal may determine whether the received signal strength of the candidate cell exceeds a preset received signal strength threshold (eg, -40 dbm), and if yes, continue to determine whether the rate of change of the signal strength of the candidate cell exceeds Presetting a received signal strength change rate threshold (eg, 20); or, the communication terminal directly determining whether the rate of change of the signal strength of the candidate cell exceeds a preset received signal strength change rate threshold (eg, 20), if exceeded, The communication terminal further determines whether the cell identifier corresponding to the candidate cell is an endpoint value of a preset normal cell identifier threshold (such as the endpoint value of the normal base station value 0, 65534, 65535, etc.); The terminal determines that the change rate of the received signal strength of the candidate cell exceeds a preset signal strength change rate threshold, and determines that the identifier value of the cell identifier corresponding to the candidate cell is a preset normal cell identifier threshold.
• a preset received signal strength threshold eg, -40
• Endpoint value then Determining that the radio parameter to the candidate cell meets the preset pseudo base station determination condition, and continuing to perform step S102; if the communication terminal determines that the rate of change of the received signal strength of the candidate cell does not exceed a preset signal strength change rate a threshold, and/or, determining that the identifier value of the cell identifier corresponding to the candidate cell is not an endpoint value of a preset normal cell identifier threshold, the communication terminal determines that the radio parameter of the candidate cell is not The preset pseudo base station determination condition is satisfied, step S105 is performed, or the flow is ended.
• the communication terminal may include an Internet device such as a smart phone (such as an Android mobile phone, an IOS mobile phone, etc.), a personal computer, a tablet computer, a palmtop computer, a mobile Internet device (MID), or a wearable smart device, and the embodiment of the present invention Not limited.
• a smart phone such as an Android mobile phone, an IOS mobile phone, etc.
• a personal computer such as an Android mobile phone, an IOS mobile phone, etc.
• a tablet computer such as a tablet computer, a palmtop computer, a mobile Internet device (MID), or a wearable smart device
• MID mobile Internet device
• the communication terminal may acquire the measurement control information that is associated with the camping cell, where the measurement control information includes a neighboring cell list of the camping cell, that is, the measurement control information includes the Information about all neighboring cells of the camping cell, where the neighboring cell list includes at least a cell identifier (such as a LAC, an ID number, a cell name, and the like) corresponding to the neighboring cell.
• the measurement control information includes a neighboring cell list of the camping cell, that is, the measurement control information includes the Information about all neighboring cells of the camping cell, where the neighboring cell list includes at least a cell identifier (such as a LAC, an ID number, a cell name, and the like) corresponding to the neighboring cell.
• a cell identifier such as a LAC, an ID number, a cell name, and the like
• the acquiring the measurement control information associated with the resident cell includes:
• the measurement control information includes a neighboring cell list of the camping cell, and the neighboring cell list includes a cell identifier of at least one neighboring cell.
• the communication terminal may receive measurement control information sent by the network side, where the measurement control information includes A neighboring cell list formed by all or a part of neighboring cell information of the reserved cell, where the neighboring cell list includes at least a cell identifier corresponding to the neighboring cell.
• the communication terminal may determine whether there is a cell identifier corresponding to the candidate cell in each cell identifier in the measurement control information that is obtained by the S102; if not, proceed to step S104; otherwise, end The process or step S105 is performed.
• the method further includes:
• the communication terminal may determine that the base station corresponding to the candidate cell is a pseudo a base station, the communication terminal may further mark a cell identifier corresponding to the candidate cell as a cell identifier of a pseudo base station (that is, a base station identifier marked as a pseudo base station), where the communication terminal may use a cell of the pseudo base station
• the identifier is sent to the network side to prohibit all communication terminals from establishing a communication connection with the pseudo base station to prevent leakage of terminal information (such as leaking user personal information, personal property information).
• S105 Select a target cell according to the preset reselection cell handover condition, switch the camped cell to the target cell, and establish a communication connection with the target cell.
• the communication terminal may select a target cell according to a reselection cell handover condition (such as a preset received signal strength threshold value) that is preset by the user or the system in the communication terminal, and the communication terminal may The current camping cell switches to the target cell and establishes a communication connection with the target cell.
• a reselection cell handover condition such as a preset received signal strength threshold value
• the mobile phone A will determine whether the GSM signal satisfies two different judgment conditions of the pseudo base station signal and the real base station (that is, the sixth page of the specification of the present application). One or two judgment conditions), if the above two determination conditions are satisfied, the pseudo base station identification suppression measure is activated; if any of the above two determination conditions is not satisfied, the mobile phone A may determine that the comparison is strong
• the base station of the GSM signal is a true base station, and the mobile phone A selects the target cell according to the preset reselection cell handover condition; or ends the process.
• the mobile phone A After the mobile phone A starts the pseudo base station identification suppression measure, the mobile phone A is triggered to enter the connection mode (the customer can access the customer service phone or the browser through the background dialing disk, and the operation of the mobile phone interface does not affect the user experience), the mobile phone and the current serving cell (also That is, the camping cell establishes a connection between the signaling and the service, because in the connected state, the mobile phone A can receive the measurement control message sent by the network, and the message includes all the GSM neighbor list of the current serving cell.
• the connection mode the customer can access the customer service phone or the browser through the background dialing disk, and the operation of the mobile phone interface does not affect the user experience
• the mobile phone and the current serving cell also That is, the camping cell establishes a connection between the signaling and the service, because in the connected state, the mobile phone A can receive the measurement control message sent by the network, and the message includes all the GSM neighbor list of the current serving cell.
• the mobile phone A can search whether the detected LAC and the cell ID of the relatively strong GSM signal are inside; if the GSM If the neighboring cell list does not include the LAC or the cell ID of the relatively strong GSM signal, the mobile phone A may determine that the base station that generates the relatively strong GSM signal is a pseudo base station, and the cell corresponding to the pseudo base station is listed as prohibited. Access the cell to avoid loss of user information being stolen.
• the present invention when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camped cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, and further, if the measurement control The cell identifier corresponding to the candidate cell does not exist in each cell identifier in the information, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 4 is a schematic flowchart of another method for identifying a pseudo base station according to an embodiment of the present invention.
• the method in the embodiment of the present invention may include the following steps.
• step S202 when the communication terminal determines that the rate of change of the received signal strength of the candidate cell exceeds a preset signal strength change rate threshold, step S202 is continued; otherwise, step S206 is performed, or the process ends.
• step S203 when the communication terminal determines that the identifier value of the cell identifier corresponding to the candidate cell is the endpoint value of the preset normal cell identifier threshold, step S203 is continued; otherwise, step S206 is performed. Or end the process.
• step S201 and step S202 are specific implementation manners of determining whether the preset pseudo base station determination condition is met according to the radio parameter of the candidate cell in step S101, and the execution order of step S201 and step S202 is variable. That is, the communication terminal may perform step S201 after performing step S202, which is not limited in the embodiment of the present invention.
• S203 automatically establishes a communication connection with the camping cell, and acquires measurement control information that is sent by the network side and is associated with the camping cell, where the measurement control information includes a neighboring cell list of the camping cell.
• the neighbor list includes a cell identifier of at least one neighbor.
• step S205 when the communication terminal determines that the cell identifier corresponding to the candidate cell does not exist in each cell identifier in the measurement control information, step S205 is continued; otherwise, step S206 is performed, or the process ends. .
• the present invention when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camped cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, and further, if the measurement control The cell identifier corresponding to the candidate cell does not exist in each cell identifier in the information, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 5 is a schematic flowchart of another method for identifying a pseudo base station according to an embodiment of the present invention.
• the method in the embodiment of the present invention may include steps S201 to S206 as described above, and may also be as follows.
• the communication terminal when the communication terminal determines in S205 that the base station corresponding to the candidate cell is a pseudo base station, the communication terminal may mark the cell identifier corresponding to the candidate cell as the cell identifier of the pseudo base station; or The communication terminal determines each of the measurement control information in S204.
• the communication terminal may directly mark the cell identifier corresponding to the candidate cell as the cell identifier of the pseudo base station.
• the communication terminal may also send the cell identifier of the pseudo base station to the network side, so that other communication terminals avoid/disallow connection with the pseudo base station when selecting to establish a communication connection with the candidate cell, so as to avoid revealing user information or causing unnecessary Property damage, etc.
• the present invention when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camped cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, and further, if the measurement control The cell identifier corresponding to the candidate cell does not exist in each cell identifier in the information, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 6 is a schematic structural diagram of an apparatus for identifying a pseudo base station according to an embodiment of the present invention.
• the apparatus according to the embodiment of the present invention may be configured to have a communication network function, such as a smart phone, a tablet computer, and a smart wearable device.
• the device 6 includes:
• the determining module 60 is configured to determine, according to the wireless parameter of the candidate cell, whether the preset pseudo base station determination condition is met, when the received signal strength of the candidate cell exceeds the received signal strength of the camping cell;
• the obtaining module 61 is configured to: if the determining module 60 determines that the wireless parameter of the candidate cell meets a preset pseudo base station determination condition, acquire measurement control information associated with the resident cell, where the measurement control information includes a neighboring cell list of the camping cell, where the neighboring cell list includes a cell identifier of at least one neighboring cell;
• the determining module 62 is configured to determine that the base station corresponding to the candidate cell is a pseudo base station if the cell identifier corresponding to the candidate cell does not exist in each cell identifier in the measurement control information.
• the embodiment of the present invention can detect that the received signal strength of the candidate cell exceeds the camping cell.
• the signal strength is received, determining whether the preset pseudo base station determination condition is met according to the radio parameter of the candidate cell, and if yes, acquiring measurement control information associated with the resident cell, where the measurement control information includes the a neighboring cell list of the camping cell, the neighboring cell list includes a cell identifier of the at least one neighboring cell, and further, if a cell identifier corresponding to the candidate cell does not exist in each cell identifier in the measurement control information, Determining that the base station corresponding to the candidate cell is a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 7 is a schematic structural diagram of another apparatus for identifying a pseudo base station according to an embodiment of the present invention.
• the apparatus 7 of the embodiment of the present invention may include: the determining module 60, the obtaining module 61, and the determining
• the module 62 may further include:
• the marking module 63 is configured to mark the cell identifier corresponding to the candidate cell as a cell identifier of the pseudo base station;
• the sending module 64 is configured to send the cell identifier of the pseudo base station to the network side, so as to prohibit establishing a communication connection with the pseudo base station.
• the determining module 60 is specifically configured to determine whether the rate of change of the received signal strength of the candidate cell exceeds a preset signal strength change rate threshold, and determine whether the identifier value of the cell identifier corresponding to the candidate cell is The endpoint value of the preset normal cell identifier threshold; if yes, it is determined that the preset pseudo base station determination condition is met, and the acquiring module 61 is notified.
• the acquiring module 61 is configured to automatically establish a communication connection with the camping cell, and acquire measurement control information that is sent by the network side and is associated with the camping cell, where the measurement control information includes the A list of neighbor cells of the camped cell, the list of neighbor cells including cell identifiers of at least one neighboring cell.
• the device further includes:
• the selecting module 65 is configured to: if the wireless parameter of the candidate cell does not meet the preset pseudo base station determining condition, and/or the cell corresponding to the candidate cell exists in each cell identifier in the measurement control information The identifier is selected according to a preset reselection cell handover condition;
• the switching module 66 is configured to switch the camped cell to the target cell, and establish The communication connection of the standard cell.
• the present invention when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camped cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, and further, if the measurement control The cell identifier corresponding to the candidate cell does not exist in each cell identifier in the information, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present invention.
• the terminal may be a device with a communication network function, such as a smart phone, a tablet computer, or a smart wearable device.
• the terminal in the embodiment of the present invention may include a display screen, a button, a speaker, a pickup, and the like. And further comprising: at least one bus 501, at least one processor 502 connected to the bus 501, and at least one memory 503 connected to the bus 501, a communication device 505 implementing a communication function, and a power supply device 504 for powering each power consumption module of the communication terminal. .
• the processor 502 can call the code stored in the memory 503 via the bus 501 to perform related functions.
• the processor 502 is configured to determine, according to the wireless parameter of the candidate cell, whether the preset pseudo base station determination condition is met, if the received signal strength of the candidate cell exceeds the received signal strength of the camping cell; if yes, Obtaining measurement control information associated with the camping cell, where the measurement control information includes a neighboring cell list of the camping cell, the neighboring cell list includes a cell identifier of at least one neighboring cell; and if the measurement control information is The cell identifier corresponding to the candidate cell does not exist in each cell identifier, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the processor 502 is further configured to mark the cell identifier corresponding to the candidate cell as a cell identifier of the pseudo base station, and send the cell identifier of the pseudo base station to the network side, so as to prohibit the The pseudo base station establishes a communication connection.
• the processor 502 is further configured to determine whether a rate of change of the received signal strength of the candidate cell exceeds a preset signal strength change rate threshold, and determine the cell identifier corresponding to the candidate cell. And determining whether the value is an endpoint value of the preset normal cell identifier threshold; if yes, determining that the preset pseudo base station determination condition is met, and performing acquiring the measurement control information associated with the camped cell.
• the processor 502 is further configured to automatically establish a communication connection with the camping cell, and acquire measurement control information that is sent by the network side and is associated with the camping cell; wherein the measurement control The information includes a neighbor list of the camped cell, and the neighbor list includes a cell identifier of at least one neighbor.
• the processor 502 is further configured to: if the wireless parameter of the candidate cell does not meet a preset pseudo base station determination condition, and/or, the presence and the presence of the cell identifier in the measurement control information And selecting, by the cell identifier corresponding to the candidate cell, the target cell according to the preset reselection cell handover condition; and switching the camped cell to the target cell to establish a communication connection with the target cell.
• the present invention when detecting that the received signal strength of the candidate cell exceeds the received signal strength of the camping cell, determining whether the preset pseudo base station determining condition is met according to the wireless parameter of the candidate cell, and if yes, acquiring Measurement control information associated with the camped cell, the measurement control information including a neighboring cell list of the camping cell, the neighboring cell list including a cell identity of at least one neighboring cell, and further, if the measurement control The cell identifier corresponding to the candidate cell does not exist in each cell identifier in the information, and the base station corresponding to the candidate cell is determined to be a pseudo base station.
• the communication terminal can automatically and intelligently determine whether the base station corresponding to the candidate cell is a pseudo base station according to the wireless parameter of the candidate cell and the cell identifier in the neighboring cell list, and when it is determined that it is a pseudo base station,
• the terminal access is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to a certain extent.
• the security of the communication service on the terminal is forbidden, thus avoiding problems such as leakage of the terminal user information and loss of personal property caused by the attack of the pseudo base station, so that the terminal user can use various services on the terminal more safely, and the security is guaranteed to
• the embodiment of the present invention further provides a computer storage medium, wherein the computer storage medium can store a program, and the program includes some or all of the steps of the operation method of any of the audio playback applications described in the foregoing method embodiments.
• the disclosed apparatus may be implemented in other ways.
• the device embodiments described above are merely illustrative.
• the division of the unit is only a logical function division.
• there may be another division manner for example, multiple units or components may be combined or may be Integrate into another system, or some features can be ignored or not executed.
• the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be electrical or otherwise.
• the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
• each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
• the above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.
• the integrated unit if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium.
• the technical solution of the present invention which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium.
• a number of instructions are included to cause a computer device (which may be a personal computer, server or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention.
• the foregoing storage medium includes: a U disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk, and the like. .

Landscapes

• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Security & Cryptography (AREA)
• Mobile Radio Communication Systems (AREA)

Abstract

Description

Claims (11)

Applications Claiming Priority (2)

Publications (1)

Family

ID=56288781

Family Applications (1)

Country Status (2)

Cited By (6)

Families Citing this family (12)

Citations (5)

Family Cites Families (7)

• 2016
  • 2016-04-29 CN CN201610289861.5A patent/CN105744528A/zh active Pending
  • 2016-11-30 WO PCT/CN2016/107888 patent/WO2017185742A1/zh active Application Filing

Patent Citations (5)

Also Published As

Similar Documents

Legal Events