CN108513717A - A kind of reminding method, terminal and server - Google Patents

Abstract

The embodiment of the present application discloses a prompt method, which is used for the server to obtain the information of the real base station and the information of the pseudo base station according to the event information sent by multiple terminals, and the information of the real base station and the pseudo base station obtained by the server according to the calculation of big data information with high accuracy. The embodiment of the present application includes: the server receives event information sent by multiple terminals; the server acquires information of real base stations and information of pseudo base stations according to the event information sent by the multiple terminals. The embodiment of the present application also provides a server and a terminal.

Description

A prompt method, terminal and server

This application claims the priority of the Chinese patent application with the application number 201710052278.7 and the invention title "A method and device for preventing fake base station fraud" submitted to the China Patent Office on January 22, 2017, the entire contents of which are incorporated herein by reference Applying.

technical field

The present application relates to the communication field, and in particular to a prompt method, a terminal and a server.

Background technique

With the development of communication technology, there are more and more cases and methods of telecom fraud. Among the many telecommunications fraud techniques, committing crimes through illegal base stations or pseudo-base stations has become the mainstream method. These fake base stations can pretend to be the base stations of operators, and send fraudulent text messages by pretending to be other people's numbers. The short message sent based on the fake base station is very confusing because the number can be forged, and it is difficult for the end user to distinguish the true from the false.

In the prior art, methods for identifying pseudo base stations generally include a method for identifying pseudo base stations by comparing characteristic parameters of base stations by terminals and a method for identifying pseudo base stations based on base station locations. The method of identifying a false base station by comparing the characteristic parameters of the base station by the terminal is: the terminal analyzes the characteristic parameters of the base station, matches with the local preset characteristic parameter library, and if it is within the legal range, it is considered a legal base station. Otherwise, it is regarded as a pseudo base station, and access to the pseudo base station is directly blocked from the terminal. However, the judgment logic is completely dependent on the terminal, and system upgrades cannot be performed. With the development of pseudo base station technology, some characteristic parameters can also be adjusted, but the terminal cannot obtain it dynamically, which may easily lead to misjudgment.

The method for identifying a false base station based on the location of the base station is as follows: when the terminal receives a notification short message, it will report the short message and the terminal location information to the server. The server calculates based on the information reported by a large number of terminals to obtain the base station information in a certain area, and then compares it with the location in the operator's base station database. If it is not in the operator's base station database, it is considered a fake base station. However, there are risks in such a judgment method only for notification messages. Pseudo base stations can construct arbitrary numbers, so the short messages sent are not necessarily notification short messages; operators themselves also have mobile base stations. It is not completely reliable; in addition, the base station location reported by the terminal is obtained through algorithm calculation, and there are errors in itself.

Contents of the invention

The embodiment of the present application provides a prompting method, a terminal and a server, which are used for the server to obtain the information of the real base station and the information of the pseudo base station with relatively high accuracy according to the big data reported by multiple terminals.

The first aspect of the embodiments of the present application provides a prompt method, which can be applied to a scenario where multiple terminals are connected to the server, and the method can include: the server receives event information sent by multiple terminals; the event can be Receive text messages and/or incoming calls; it should be understood that the event information may be information about events reported by the server receiving a certain number of threshold terminals, or information about the server receiving a specific threshold number of events, or that the server receives a predetermined number of events. The event information reported by the terminal within the set time period is not limited here. The server acquires the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. That is to say, the server can perform calculations based on the big data reported by multiple terminals, and the accuracy rate of the acquired real base station information and pseudo base station information is relatively high. It should be understood that although the more data reported by the terminal, the more accurate the information of the real base station and the information of the pseudo base station acquired by the server are, but these need to be within the load range of the server. Here, the server needs to save the information of the real base station and the information of the pseudo base station. It can determine the target terminal that accesses the pseudo base station among multiple terminals, and can also determine the information of the first event reported by the first terminal next time. The authenticity of the first base station accessed by the terminal.

With reference to the first aspect of the embodiments of the present application, in the first implementation manner of the first aspect of the embodiments of the present application, the method may further include: the server according to the information of the real base station and the pseudo base station information to determine a target terminal accessing the pseudo base station among the plurality of terminals; the server sends indication information of the pseudo base station to the target terminal. After the server determines that there is a target terminal accessing the pseudo base station, it can send the indication information of the pseudo base station to the target terminal. The indication information of the pseudo base station is used for prompting the target terminal, so that the user is vigilant about the events occurring on the target terminal and be careful not to be fooled. deceived.

In combination with the first aspect of the embodiment of the present application and the first implementation of the first aspect, in the second implementation of the first aspect of the embodiment of the present application, the information of the event includes the terminal identifier and the location information of the terminal , the information of the base station accessed when the event occurs, and the time when the event occurs. The event information may also include short message content and/or caller number. It should be understood that the event information includes but not limited to the information mentioned above, and the event information can be used by the server to perform big data calculations to obtain real base station information and pseudo base station information.

With reference to the second implementation manner of the first aspect of the embodiment of the present application, in the third implementation manner of the first aspect of the embodiment of the present application, the server obtains the real base station according to the event information sent by the multiple terminals The information may include: the server determines according to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurs, the time when the event occurs, and the preset location calculation accuracy Information about the initial base station of longitude, latitude, and date; multiple sets of data about longitude, latitude, and date can be obtained here. The server deletes, from the information about the initial base stations of longitude, latitude, and date, the information of the initial base stations whose occurrences in consecutive days are less than a first threshold; the first threshold here may be an empirical value, or may be based on set according to the actual situation. The server removes the date, and merges the information of other initial base stations to obtain the information about the longitude and latitude screening base stations; the server determines that the information of the screening base stations is the information of real base stations. In the embodiment of the present application, an implementation manner of obtaining information of a real base station is provided, which increases the feasibility of the solution.

With reference to the second implementation manner of the first aspect of the embodiments of the present application, in the fourth implementation manner of the first aspect of the embodiments of the present application, the server obtains the pseudo base station according to the event information sent by the multiple terminals The information may include: that is, the server identifies a possible potential pseudo base station by using characteristics of the pseudo base station's movement (movable, sudden appearance and disappearance). The server determines the location information of the terminal accessed by the target base station at the first time and The location information of the terminal accessed at the second time, the target base station is any base station accessed by the plurality of terminals when the event occurs; position information, calculating the first center position of the terminal to be accessed, and calculating the second center position of the terminal to be accessed according to the position information of the terminal accessed by the target base station at the second time; the server determines the The first central position is the first position of the target base station, and the second central position is determined to be the second position of the target base station; if the absolute value of the difference between the first position and the second position is greater than the second threshold, the server determines that the information of the target base station is information of a pseudo base station. In the embodiment of the present application, an implementation manner of obtaining information about real pseudo base stations is provided, which increases the feasibility of the solution.

In combination with the first aspect of the embodiments of the present application, any of the first to fourth implementations of the first aspect of the embodiments of the present application, in the fifth implementation of the first aspect of the embodiments of the present application , the method may further include: the server marks the suspicious probability of the real base station and the false base station; the server may mark the suspicious probability of the real base station as 0, and the suspicious probability of the false base station as 100%, or it may be based on Marked according to the actual situation. The server receives feedback information sent by the first target terminal, where the feedback information is input information input by the user indicating whether the base station accessed when the event occurs by the first target terminal is a pseudo base station; that is, After the server sends the indication information of the pseudo base station to the target terminal, the target terminal will prompt the indication information of the pseudo base station, and some target terminals will receive the feedback information input by the user. These target terminals that receive the feedback information can be called the first For the target terminal, the first target terminal reports the feedback information to the server. The server correspondingly modifies the suspicious probability of the pseudo base station according to the feedback information, and obtains the modified suspicious probability of the pseudo base station. Therefore, the stored information of the real base station and the information of the pseudo base station are updated, so that the stored information of the real base station and the information of the pseudo base station are the latest records.

In the embodiment of the present application, after the server receives the feedback information reported by the first target terminal, it can modify the suspicious probability of the saved information of the real base station and the information of the pseudo base station, thereby updating the information of the real base station and the information of the pseudo base station . so that when the server receives the information of the first event reported by the first terminal next time, it can determine whether the first base station accessed by the terminal when the first event occurs is a pseudo base station according to the updated information of the real base station and the information of the pseudo base station, In this way, the accuracy of the result judged based on the information of the real base station and the information of the pseudo base station updated in real time is higher.

With reference to any one of the fifth implementation manners of the first aspect of the embodiments of the present application, in the sixth implementation manner of the first aspect of the embodiments of the present application, the method may further include: the server determining the suspicious probability The information of the base station greater than the third threshold is the information of the target pseudo base station, and the information of the base station with a suspicious probability less than the fourth threshold is the information of the target real base station; the information of these target real base stations and the information of the target pseudo base station include but are not limited to (cellidentification , CID), location area code (location area code, LAC), signal strength, difference between collection time and reporting time, etc. The server performs model training according to the information of the target pseudo base station and the information of the target real base station, and obtains reference weights of each feature included in the information of the base station.

In the embodiment of the present application, if the reference weights of each feature included in the information of the base station are obtained, then the information of the first base station in the information of the first event reported by the first terminal next time can be calculated to obtain the first base station Therefore, judging the authenticity of the first base station provides an implementation manner of determining whether the first base station is a real base station or a fake base station, making the embodiments of the present application more perfect.

With reference to any one of the sixth implementation manners of the first aspect of the embodiments of the present application, in the seventh implementation manner of the first aspect of the embodiments of the present application, the method may further include: the server receiving the first The information of the first event sent by the terminal, the information of the first event may include the information of the first base station accessed when the first event occurs; if the information of the first base station is included in the information of the pseudo base station , the server sends the indication information of the pseudo base station to the first terminal. It should be understood that the information of the first event includes but not limited to the information mentioned above. The information of the first event may further include the identifier of the first terminal, the location information of the first terminal, and the time when the first event occurs.

In the embodiment of the present application, an implementation manner of determining a pseudo base station is provided, and the server may determine whether the information of the first base station is included according to the previously calculated information of the real base station and the information of the pseudo base station. If the first base station is in the information of the pseudo base station, it means that the first base station is a pseudo base station, then the server can send the indication information of the pseudo base station to the first terminal, and because the information of the pseudo base station calculated according to the big data and the real base station Therefore, the accuracy rate of determining that the first base station is a pseudo base station is also relatively high.

In combination with any of the seventh implementation manners of the first aspect of the embodiments of the present application, in the eighth implementation manner of the first aspect of the embodiments of the present application, the method may further include: if the first base station The information of the pseudo base station is not in the information of the pseudo base station, then the server determines the target probability of the first base station according to the information of the first event and the reference weight of each feature included in the information of the base station; if If the target probability is less than or equal to the fifth threshold, the server determines that the first base station is a pseudo base station; and the server sends indication information of the pseudo base station to the first terminal. In the embodiment of the present application, whether the first base station is a pseudo base station is calculated according to the reference weight of each feature in the information of the base station, which provides an optional implementation manner for the embodiment of the present application.

In combination with the first aspect of the embodiments of the present application, any of the first to eighth implementations of the first aspect of the embodiments of the present application, in the ninth implementation of the first aspect of the embodiments of the present application , the event may include: receiving a short message and/or an incoming call; the event information may further include: the content of the short message and/or the number of the incoming call.

The second aspect of the embodiment of the present application provides a reminder method, which may include: the terminal detects the occurrence of an event and collects the information of the event; the terminal sends the information of the event to the server; if there are multiple terminals sending the event to the server Then, the server can obtain the information of the real base station and the information of the fake base station according to the event information sent by multiple terminals, so as to determine whether the terminal accesses is a fake base station. The terminal receives the indication information of the pseudo base station sent by the server, and the indication information of the pseudo base station is obtained by the server according to the information of the event; the terminal prompts the indication information of the pseudo base station. If the terminal prompts the instruction information of the fake base station, the user can be vigilant about the events occurring on the target terminal and be careful not to be deceived.

With reference to the second aspect of the embodiments of the present application, in the first implementation manner of the second aspect of the embodiments of the present application, the event information may include the terminal identifier, the location information of the terminal, the occurrence of the event Information about the base station accessed at the time, and the time when the event occurred. The event information may also include short message content and/or caller number. It should be understood that the event information includes but not limited to the information mentioned above, and the event information can be used by the server to perform big data calculations to obtain real base station information and pseudo base station information.

In combination with the second aspect of the embodiment of the present application and the first implementation of the second aspect, in the second implementation of the second aspect of the embodiment of the present application, the method may further include: the terminal receiving feedback information , the feedback information is the input information input by the user indicating whether the base station accessed when the event occurs to the terminal is a pseudo base station; the terminal sends the feedback information to the server, and the feedback The information is used by the server to modify the suspicious probability of the pseudo base station. It should be understood that it is assumed that the terminal receiving the feedback information here is called the first target terminal. In the embodiment of the present application, after the server receives the feedback information reported by the first target terminal, it can modify the suspicious probability of the saved information of the real base station and the information of the pseudo base station, thereby updating the information of the real base station and the information of the pseudo base station . Therefore, when the server receives the information of the first event reported by the first terminal next time, it can determine whether the first base station accessed by the terminal when the first event occurs is a pseudo base station according to the updated information of the real base station and the information of the pseudo base station , so that the accuracy of the result judged according to the information of the real base station and the information of the pseudo base station updated in real time is higher.

In combination with the second aspect of the embodiments of the present application, the first implementation of the second aspect, and the second implementation of the second aspect, in the third implementation of the second aspect of the embodiments of the present application, the terminal Prompting the indication information of the pseudo base station may include: the terminal displays the indication information of the pseudo base station in text; and/or, the terminal displays the indication information of the pseudo base station through a danger sign; and/or, the The terminal prompts the indication information of the pseudo base station by voice. It should be noted that the terminal displays the information of the event through the application interface corresponding to the event, the information of the event may include the text message content and/or the caller number, and may prompt the prompt information of the pseudo base station on the application interface . The application interface may be a text message interface or an incoming call interface.

In combination with the second aspect of the embodiment of the present application, the first implementation of the second aspect, the second implementation of the second aspect, and the third implementation of the second aspect, in the second aspect of the embodiment of the application In a fourth implementation manner, the event includes: receiving a short message and/or an incoming call; the event information further includes: content of the short message and/or a number of the incoming call.

The third aspect of the embodiment of the present application provides a server, which has the function of obtaining the information of the real base station and the information of the pseudo base station corresponding to the above-mentioned first aspect. This function may be implemented by hardware, or may be implemented by executing corresponding software on the hardware. The hardware or software includes one or more modules corresponding to the above functions.

The fourth aspect of the embodiment of the present application provides a terminal, which has a function of prompting the indication information of the pseudo base station corresponding to the second aspect. This function may be implemented by hardware, or may be implemented by executing corresponding software on the hardware. The hardware or software includes one or more modules corresponding to the above functions.

The fifth aspect of the embodiment of the present application provides a server, which may include: a transceiver, a processor, a memory, and a bus, and the transceiver, the processor, and the memory are connected through the bus;

The memory is used to store operation instructions;

The transceiver is configured to receive event information sent by multiple terminals;

The processor is configured to call the operation instruction, and acquire information about real base stations and information about pseudo base stations according to event information sent by the multiple terminals.

In a possible design, the processor is further configured to determine, according to the information of the real base station and the information of the pseudo base station, a target terminal that accesses the pseudo base station among the plurality of terminals;

The transceiver is further configured to send indication information of the pseudo base station to the target terminal.

In a possible design, the event information includes a terminal identifier, terminal location information, information about a base station accessed when the event occurs, and a time when the event occurs.

In a possible design, the processor is specifically configured to perform the following steps:

According to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, the time when the event occurred, and the preset position calculation accuracy, determine the initial base station with respect to longitude, latitude, and date information; from the information about the initial base station of longitude, latitude, and date, delete the information of the initial base station whose occurrence times in consecutive days is less than the first threshold; remove the date, and merge the information of other initial base stations to obtain The information about the screening base station of longitude and latitude; the information of determining that the information of the screening base station is the information of the real base station.

In a possible design, the processor is specifically configured to perform the following steps:

According to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, and the time when the event occurred, determine the location information and the second time of the terminal accessed by the target base station at the first time The location information of the accessed terminal, the target base station is any base station accessed by the multiple terminals when the event occurs; according to the location information of the terminal accessed by the target base station at the first time, the connected terminal is calculated. The first central position of the incoming terminal is calculated according to the location information of the terminal accessed by the target base station at the second time, and the second central position of the incoming terminal is calculated; the first central position is determined as the target base station The first position of the target base station is determined to be the second central position; if the absolute value of the difference between the first position and the second position is greater than a second threshold, the processing The device determines that the information of the target base station is information of a pseudo base station.

In a possible design, the processor is further configured to perform the following steps: mark the suspicious probabilities of the real base station and the false base station; according to the feedback information, correspondingly modify the suspicious probability of the false base station to obtain The modification suspicious probability of the pseudo base station;

The transceiver is further configured to perform the following step: receiving feedback information sent by the first target terminal, where the feedback information is an indication input by the user that the base station accessed when the event occurs for the first target terminal is a pseudo base station Whether the information is entered accurately.

In a possible design, the processor is further configured to perform the following steps:

Determining that the information of base stations whose suspicious probability is greater than the third threshold is the information of the target pseudo base station, and the information of the base stations whose suspicious probability is less than the fourth threshold is the information of the target real base station; according to the information of the target pseudo base station and the information of the target real base station information, perform model training, and obtain the reference weights of each feature included in the information of the base station.

In a possible design, the transceiver is also used to perform the following steps:

receiving the information of the first event sent by the first terminal, the information of the first event is the information of the first base station accessed when the first event occurs; if the information of the second base station is in the information of the pseudo base station , the transceiver sends indication information of the pseudo base station to the first terminal.

In a possible design, the processor is also configured to perform the following steps:

If the information of the first base station is not included in the information of the pseudo base station, the processor module determines the The target probability of the first base station; if the target probability is less than or equal to the fifth threshold, the processor determines that the first base station is a pseudo base station;

The transceiver is further configured to perform the following step: sending indication information of a pseudo base station to the first terminal.

In a possible design, the event includes: receiving a short message and/or an incoming call; the event information further includes: content of the short message and/or a number of the incoming call.

The sixth aspect of the embodiment of the present application provides a terminal, which may include: a processor, a communication interface, a memory, an output unit, and a bus, and the processor, the communication interface, the output unit, and the memory pass through the bus connect;

The memory is used to store operation instructions;

The processor is configured to invoke the operation instruction, detect the occurrence of an event and collect information about the event;

The communication interface is configured to send information about the event to a server; receive indication information of a pseudo base station sent by the server, where the indication information of the pseudo base station is obtained by the server according to information about the event;

The output unit is configured to prompt the indication information of the pseudo base station.

In a possible design, the information of the event includes the terminal identifier, the location information of the terminal, the information of the base station accessed when the event occurs, and the time when the event occurs; prompting the pseudo base station instructions for the .

In a possible design, the terminal further includes an input unit, and the input unit is further configured to receive feedback information, the feedback information is the base station accessed when the event occurs on the terminal input by the user is Whether the indication information of the pseudo base station is accurate input information;

The communication interface is further configured to send the feedback information to the server, where the feedback information is used by the server to modify the suspicious probability of the pseudo base station.

In a possible design, the output unit includes a display unit, configured to display the indication information of the pseudo base station in text.

In a possible design, the output unit includes a display unit, configured to display the indication information of the pseudo base station by using a danger sign.

In a possible design, the output unit includes an audio circuit, and the audio circuit is configured to prompt the indication information of the pseudo base station by voice.

The seventh aspect of the embodiment of the present application provides a communication system, the communication system includes a server and a terminal, and the server is the server that executes the first aspect of the application or any optional implementation manner of the first aspect; the The terminal is the terminal that executes the second aspect of this application or any optional implementation manner of the second aspect.

The eighth aspect of the embodiment of the present invention provides a storage medium. It should be noted that the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be produced by software. Formally embodied, the computer software product is stored in a storage medium for storing computer software instructions used by the above-mentioned equipment, which includes a server for performing the above-mentioned first aspect, second aspect, third aspect or fourth aspect Or the program designed by the terminal.

The storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and other media capable of storing program codes.

A ninth aspect of the embodiments of the present invention provides a computer program product including instructions, which, when run on a computer, cause the computer to execute the method described in the first aspect or any optional implementation manner of the first aspect of the present application.

The tenth aspect of the embodiments of the present invention provides a computer program product including instructions, which, when run on a computer, cause the computer to execute the method described in the second aspect or any optional implementation manner of the second aspect of the present application.

In the technical solution provided by the embodiment of the present application, it has the following beneficial effects:

In the embodiment of the present application, the server obtains the information of the real base station and the information of the pseudo base station according to the big data reported by multiple terminals, so the accuracy rate of the obtained information of the real base station and the information of the pseudo base station is relatively high. That is, the server receives event information sent by multiple terminals, and the event information may include terminal identifiers, terminal location information, information about base stations accessed when an event occurs, and time when the event occurs. The server obtains the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. The server can also determine the target terminal that accesses the pseudo base station among the plurality of terminals according to the information of the real base station and the information of the pseudo base station; send the indication information of the pseudo base station to the target terminal, so that the user can understand the events that occur on the target terminal. Be vigilant and be careful not to be deceived.

Description of drawings

Fig. 1 is a frame diagram of a communication system applied in the embodiment of the present application;

FIG. 2 is a schematic diagram of a scene applied in the embodiment of the present application;

Fig. 3 is a schematic diagram of an embodiment of the prompting method in the embodiment of the present application;

Fig. 4 (a) is a schematic diagram of the terminal receiving short message interface display in the embodiment of the present application;

Fig. 4 (b) is a schematic diagram of the interface display of the terminal receiving an incoming call in the embodiment of the present application;

FIG. 4(c) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(d) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(e) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(f) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(g) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(h) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(i) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(j) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(k) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(l) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(m) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(n) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(o) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 4(p) is another schematic diagram of the terminal prompting the indication information of the pseudo base station in the embodiment of the present application;

FIG. 5 is a schematic diagram of another embodiment of the prompting method in the embodiment of the present application;

Fig. 6 (a) is a schematic diagram of the terminal displaying input feedback information on the short message interface in the embodiment of the present application;

FIG. 6(b) is another schematic diagram of the terminal displaying input feedback information on the short message interface in the embodiment of the present application;

FIG. 6(c) is a schematic diagram of the terminal displaying input feedback information on the incoming call interface in the embodiment of the present application;

FIG. 6(d) is another schematic diagram of the terminal displaying input feedback information on the incoming call interface in the embodiment of the present application;

Fig. 7 is a schematic diagram of another embodiment of the prompting method in the embodiment of the present application;

FIG. 8 is a schematic diagram of another embodiment of the prompting method in the embodiment of the present application;

Figure 9(a) is a schematic diagram of an embodiment of the server in the embodiment of the present application;

Figure 9(b) is a schematic diagram of an embodiment of the server in the embodiment of the present application;

Figure 9(c) is a schematic diagram of an embodiment of the server in the embodiment of the present application;

Figure 9(d) is a schematic diagram of an embodiment of the server in the embodiment of the present application;

FIG. 10 is a schematic diagram of an embodiment of a terminal in the embodiment of the present application;

FIG. 11 is a schematic diagram of another embodiment of the server in the embodiment of the present application;

FIG. 12 is a schematic diagram of another embodiment of a terminal in the embodiment of the present application.

Detailed ways

The following will describe the technical solutions in the embodiments of the application with reference to the drawings in the embodiments of the application. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts belong to the scope of protection of this application.

Regarding the above-mentioned method of identifying a pseudo base station by comparing the characteristic parameters of the base station with the terminal: when the terminal accesses the base station, analyze the characteristic parameters of the base station, including the cell identification or the sector identification (cell identification, CID) of the base station, the location Area identification (location area code, LAC) and system information, etc. Then match the characteristic parameters with the local preset parameter library, and if it is within the legal range, it is considered a legal base station. Otherwise, it is regarded as a pseudo base station, and access to the pseudo base station is directly blocked from the terminal. The judging logic of this method is directly preset on the terminal chip, and after judging, the terminal equipment can be directly shielded from accessing the base station. However, the judgment logic is completely dependent on the terminal, and system upgrades cannot be performed. With the development of pseudo base station technology, some characteristic parameters can also be adjusted, but the terminal cannot obtain it dynamically, which may easily lead to misjudgment.

The method of identifying pseudo-base stations based on the location of the base station is risky only for notification messages. The pseudo-base station can construct any number that is not necessarily a notification-type text message; the operator itself also has mobile base stations, and it is not necessary to compare only from the location. It is completely reliable; in addition, the base station position reported by the device side is obtained through algorithm calculation, and there are errors in itself.

In the embodiment of this application, the technical solution of this application mainly solves the problem of judgment accuracy caused by the failure of the local parameter database to be updated in time, and the judgment accuracy problem caused by the fact that the source of data reporting is limited to notification text messages and mobile base stations of the operator when using the server for judgment .

A frame diagram of a communication system applied in the embodiment of the present application is shown in FIG. 1 , and the communication system may include a terminal and a server. As shown in Figure 2, which is a schematic diagram of a scenario applied in the embodiment of this application, the legal base station that the terminal in area A can access is base station No. 2, and the correct base stations that can be accessed in area B are base station No. 2, 3, and 4.

In this embodiment of the application, the server may receive event information reported by a large number of terminals. The event information may include terminal identification, terminal location information, information about the base station accessed when the event occurred, and the time when the event occurred. The event may be receiving a text message or receiving an incoming call. Then, according to the event information reported by the large number of terminals, the information of the real base station and the information of the pseudo base station are obtained; A target terminal of a base station; the server sends indication information of a pseudo base station to the target terminal. Here, for determining the information of the fake base station and the information of the real base station, if more terminals report event information, the result determined by the server will be more accurate. The server can further determine the target terminal of the multiple terminals that access the base station as a pseudo base station according to the determined information of the real base station and the information of the pseudo base station; The incident arouses vigilance and be careful of being deceived.

In the embodiment of this application, the server can also use the characteristics of the movement of the pseudo base station and the feedback information of the terminal to modify the suspicious probability of the pseudo base station, update the information of the real base station and the information of the pseudo base station, so that the server will receive the first terminal next time When reporting the information of the first event, it can be determined whether the first base station accessed by the terminal when the first event occurs is a pseudo base station according to the updated information of the real base station and the information of the pseudo base station. The accuracy of the result judged by the information and the information of the pseudo base station is higher.

In the embodiment of this application, the server can also select a batch of base station information with the highest suspicious probability as positive examples, and base station information with the lowest suspicious probability as negative examples according to the suspicious probabilities corresponding to the information of the real base station and the fake base station information , perform model training to obtain the reference weights of each feature included in the information of each base station. The reference weights of these various features can be used for calculating the first event accessed when the first event occurs according to the reference weights of each feature and the information of the first event when the server receives the information of the first event reported by the first terminal next time. Target probability for a base station. If the target probability is greater than the preset threshold, the server determines that the first base station is a real base station; if the target probability is less than or equal to the preset threshold, the server determines that the first base station is a pseudo base station, and the server sends indication information of the pseudo base station to the terminal. In this way, the server can calculate whether the first base station accessed by the terminal newly received by the server when the first event occurs is a pseudo base station according to the reference weight of each feature and the information of the first event, providing another way to determine the pseudo base station The realization method increases the feasibility of the scheme.

In the following, by way of an embodiment, the server receives the information reported by multiple terminals in the embodiment of the present application for specific description. As shown in Figure 3, it is a schematic diagram of an embodiment of the prompting method in the embodiment of the present application, including:

301. The server receives event information sent by multiple terminals.

In the embodiment of the present application, before the server receives the event information sent by multiple terminals, the terminal detects the occurrence of the event and collects the information of the event, and the information of the event may include the terminal identification (International Mobile Equipment Identity, IMEI), the location information of the terminal, the information of the access base station when the event occurs, the time when the event occurs, and the time when the event occurs may also be called a timestamp (timestamp). The terminal sends information about the event to the server. It should be understood that the event may include receiving a short message and/or receiving an incoming call. The event information may also include information such as the content of the short message and/or the number of the incoming call.

The terminal can be any terminal device including mobile phone, tablet computer, PDA (Personal Digital Assistant, personal digital assistant), POS (Point of Sales, sales terminal), vehicle-mounted computer, etc. In the following example, the terminal can be a mobile phone as example to illustrate. As shown in FIG. 4( a ), it is a schematic diagram of an interface displayed on a mobile phone for receiving short messages. As shown in FIG. 4( b ), it is a schematic diagram displayed on an interface of a mobile phone receiving an incoming call.

Wherein, the location information of the terminal may use a Global Positioning System (Global Positioning System, GPS) to obtain the latitude and longitude, or use the network to calculate the latitude and longitude. The location information of the terminal may include but not limited to latitude and longitude, the physical address (Basic Service Setidentifier, BSSID) of the wireless access point (Basic Service Setidentifier, BSSID)/the identifier of the wireless access point or the service set identifier (Service Set Identifier, SSID)/Medium Access Control address (Medium Access Control address, MAC addr)/Network ID (NetworkID), currently scanned WiFi SSID and other information. The information of the base station accessed when the event occurs may include the sector identifier of the base station, which may also be called cell identification (CID), LAC, adjacent CID, and may also include information such as signal strength and cell information.

It should be understood that the information of base stations accessed by multiple terminals when an event occurs here may be the same or different, and the time when the event occurs may be the same or different. It is also possible that the same terminal sends information of multiple events, and the information of these multiple events may be the same or different, which is determined by the event information actually collected by the terminal.

302. The server acquires information about real base stations and information about pseudo base stations according to event information sent by the multiple terminals.

The server acquires the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. The server can obtain the information of the real base station and the information of the pseudo base station through the calculation of big data. Regarding the description of the event information sent by multiple terminals, the following example illustrates:

For example, in a possible implementation manner, the server may set a quantity threshold, and when the number of terminals receiving and sending event information exceeds the quantity threshold, the server may acquire real Base station information and pseudo base station information.

In another possible implementation, the server can also set a specific threshold, which refers to the amount of event information, that is, when the server receives information about events exceeding a specific threshold, the server can The event information of the threshold value obtains the information of the real base station and the information of the fake base station.

In another possible implementation manner, the server may also set a preset duration, and the server may obtain information about real base stations and information about pseudo base stations according to received event information sent by multiple terminals within the preset duration. There may also be other descriptions of the event information sent by multiple terminals, which is not limited here.

The server may obtain the information of the real base station and the information of the pseudo base station according to the event information sent by multiple terminals in various ways. The following will illustrate with examples:

The server can obtain the information of the real base station according to the event information sent by multiple terminals, which may include:

The server determines the longitude, latitude, and date according to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, the time when the event occurred, and the preset location calculation accuracy. The information of the initial base station; the server deletes the information of the initial base station whose occurrence times is less than the first threshold in consecutive days from the information about the initial base station of longitude, latitude, and date; the server removes the date, The information of other initial base stations is combined to obtain the information about the longitude and latitude screening base stations; the server determines that the information of the screening base stations is the information of real base stations.

Example 1: The server bases on the location information of a large number of terminals (the latitude and longitude obtained by the terminal using the Global Positioning System (Global Positioning System, GPS), or the latitude and longitude calculated by using the network), the base station information that the terminal accesses when receiving a short message and/or an incoming call (here CID and LAC are used for illustration), the time of receiving SMS and/or incoming call, or the base station information currently accessed by the terminal, adjacent CID information and other information to determine the information of the real base station.

First of all, the geographic location adopts a certain calculation accuracy (for example, to limit the decimal places of latitude and longitude, such as accurate to 5 decimal places), combined with the date of data collection, that is, longitude (longitude, lng), latitude (latitude, lat), date ( date), then a group of data [lat, lng, date]={cid, lac; cid, lac;...} about longitude, latitude and date can be obtained at this time; Depending on the actual value of date, multiple sets of data about longitude, latitude, and date can be obtained.

For example: [lat1, lng1, date1] = {cid1, lac1; cid2, lac2; cid3, lac3};

[lat1, lng2, date1] = {cid1, lac1; cid3, lac3; cid4, lac4};

[lat1, lng2, date2] = {cid2, lac2; cid3, lac3; cid4, lac4};

[lat2, lng1, date1] = {cid8, lac8; cid5, lac5; cid6, lac6};

[lat2, lng2, date1] = {cid5, lac5; cid6, lac6; cid7, lac7};

[lat2, lng2, date2] = {cid5, lac5; cid6, lac6; cid7, lac7}.

It should be noted that the above is just an example of these sets of data. In practical applications, the number is much larger than the above sets of data. Because of a small amount of data, the determined results are not very informative. The embodiment is a solution proposed to improve the accuracy of the acquired pseudo base station, so the more data there is, the more accurate the determined result will be. Of course, the processing of these data needs to be within the load range of the server.

Secondly, the server merges the data according to the longitude and latitude according to the large amount of data obtained about longitude, latitude, and date. base station) to remove the longitude and latitude data [lat, lng] = {cid, lac; cid, lac...}, which means that the base station accessed within the area [lat, lng] is a legal base station, That is the real base station.

Then, in the above example, because the base station information of {cid8, lac8} appears only once, the base station information of {cid8, lac8} can be deleted, and other base station information can be combined. have[lat1,lng1]={cid1,lac1;cid2,lac2;cid3,lac3};

[lat1, lng2] = {cid1, lac1; cid2, lac2; cid3, lac3; cid4, lac4};

[lat2, lng1] = {cid8, lac8; cid5, lac5; cid6, lac6};

[lat2, lng2]={cid5, lac5; cid6, lac6; cid7, lac7}, these information are the information for screening base stations.

Finally, the server obtains a set of information data [lat, lng]={cid, lac; cid, lac...} for screening base stations, then CC=[lat, lng]={cid, lac; cid, lac...}, CC Indicates the real base station and can mark the suspicious probability as 0.

In the above example, in the area [lat1, lng1], the information of the real base station includes {cid1, lac1; cid2, lac2; cid3, lac3}; in the area [lat1, lng2], the information of the real base station includes {cid1, lac1; cid2, lac2; cid3, lac3; cid4, lac4}; in the area [lat2, lng1], the real base station information includes {cid8, lac8; cid5, lac5; cid6, lac6}; in [lat2 , lng2] In this area, the real base station information includes {cid5, lac5; cid6, lac6; cid7, lac7}.

The server can obtain the information of the pseudo base station according to the event information sent by multiple terminals, which may include:

The server determines the location information of the terminal accessed by the target base station at the first time and The location information of the terminal accessed at the second time, the target base station is any base station accessed by the plurality of terminals when the event occurs; position information, calculating the first center position of the terminal to be accessed, and calculating the second center position of the terminal to be accessed according to the position information of the terminal accessed by the target base station at the second time; the server determines the The first central position is the first position of the target base station, and the second central position is determined to be the second position of the target base station; if the absolute value of the difference between the first position and the second position is greater than the second threshold, the server determines that the information of the target base station is information of a pseudo base station.

Example 2: The server determines the pseudo-base station information based on the location information of a large number of terminals, the base station information that the terminal accesses when receiving text messages and/or incoming calls (here, CID and LAC are used for illustration), and the time of receiving text messages and/or incoming calls. That is, the server identifies possible potential pseudo base stations by using the mobile characteristics of the pseudo base stations (movable, appearing and disappearing suddenly).

First, the server can obtain the location information of the terminal and the base station information that the terminal accesses when receiving a text message or an incoming call based on the event information reported by multiple terminals: [lat, lng, date]={cid, lac; cid, lac... }. Obtain the location information of a group of terminals accessing the base station when each base station appears: [cid, lac, timestamp]={lat, lng; lat, lng;  …}.

Base station 1 can be used as an example for illustration. Assume that the information of base station 1 is represented by [cid8, lac8], and the location information of the terminal accessed at the first time includes: [cid8, lac8, timestamp1]={lat1, lng1 ;lat5,lng5;lat6,lng6;lat9,lng9;lat10,lng10;lat12,lng12};

The location information of the terminal accessed at the second time includes: [cid8, lac8, timestamp2]={lat1, lng1; lat3, lng3; lat4, lng4; lat5, lng5; lat10, lng10; lat11, lng11};

The location information of the terminal accessed at the third time includes: [cid8, lac8, timestamp3]={lat1, lng1; lat3, lng3; lat4, lng4; lat5, lng5; lat9, lng9; lat12, lng12};

The location information of the terminal accessed at the fourth time includes: [cid8, lac8, timestamp4]={lat1, lng1; lat2, lng2; lat4, lng4; lat5, lng5; lat10, lng10; lat11, lng11}.

Secondly, the server may calculate the first central position of the group of terminals at the first time, the second central position of the group of terminals at the second time, the third central position of the group of terminals at the third time, and the third central position of the group of terminals at the third time. Four times the fourth center position of this group of terminals. Then, it can be considered that the first central position is the position of base station 1 at the first time, the second central position is the position of base station 1 at the second time, the third central position is the position of base station 1 at the third time, and the fourth central position is the position of base station 1 at the fourth time.

Finally, for the position of base station 1 at different times, those with a deviation within a certain distance (for example, 500m) belong to the normal range; those with a deviation of more than 500m can be considered as mobile base stations. Thus, a group of suspected mobile base station information is obtained: MC={cid, lac; cid, lac; . . . }.

Assuming that, after the above calculation, the absolute value of the difference between the positions of the base station 1 at different times exceeds 500m, then the base station 1 can be considered as a mobile base station. The above description is only taking the base station 1 as an example, and other base stations also have similar processing methods, which will not be repeated here.

On the basis of MC, compare the appearance time of the base station again. For the base station that disappears after a short appearance time, for example, less than 1 day, the information of the suspicious base station is formed: SC={cid, lac; cid, lac;...}.

Assuming that, for the calculation of the position of base station 1, the above-mentioned first time, second time, third time and fourth time are on the same day, and this base station has never appeared before or after, then this base station 1 has a high probability of being a fake base station. It should be understood that both the MC and the SC can be regarded as the information of the pseudo base station, and the suspicious probability can be identified as 100%.

It should be noted that, after the first center position is calculated above, it is also possible to exclude terminal positions that deviate greatly from the first center position, and then calculate this group of terminals again (excluding terminal positions that deviate greatly from the first center position) the first target center position of the terminal); similarly, after calculating the second center position, it is also possible to exclude the terminal positions that deviate from the second center position, and then calculate this group of terminals again (excluding The second target center position of the terminal that is far from the second center position); other things can be handled similarly, and will not be repeated here. Because if the position of the terminal deviates too far from the first central position and the second central position, it means that the calculated central position deviates greatly from the position of the base station, and the reliability of the position used to indicate the base station is poor. Therefore, the position of the terminal with a large deviation can be excluded, and another calculation is performed to indicate the position of the base station, and the accuracy rate is relatively high. Here, the first target center position and the second target center position are used to represent the positions of the base station at different times, and the subsequent calculation method is similar to the above description, and will not be repeated here.

It should also be noted that the server acquires the information of the real base station and the information of the pseudo base station according to the event information sent by multiple terminals, including but not limited to the methods mentioned above. For example, if the information of the pseudo-base station is obtained, the server can determine, based on the information of all the base stations reported by multiple terminals, that the remaining information of the pseudo-base station can be regarded as the information of the real base station; Then, according to the information of all the base stations reported by multiple terminals, the server can determine that, except the information of the real base station, the remaining information can be regarded as the information of the pseudo base station.

303. The server determines, according to the information of the real base station and the information of the pseudo base station, a target terminal that accesses the pseudo base station among the multiple terminals.

In the embodiment of this application, as an example, the information of the real base station is shown in Table 1 below:

Table 1

The information of the pseudo base station is shown in Table 2 below:

Table 2

The server determines, according to the information of the real base station and the information of the pseudo base station, the target terminal that accesses the pseudo base station among the multiple terminals, which may be the one that is accessed when the event occurs among the multiple terminals. The base station is a target terminal of the pseudo base station. Assuming that 100 terminals access the pseudo base station, the server may send indication information of the pseudo base station to the 100 terminals.

304. The server sends the indication information of the pseudo base station to the target terminal.

Exemplarily, the server may send the indication information of the pseudo base station to the 100 terminals at the same time, or may send the indication information of the pseudo base station according to the priority of the terminals, which is not specifically limited here. It should be noted that, in practical applications, the server may also send the indication information of the real base station to a terminal among the plurality of terminals whose base station accessed when the event occurs is a real base station.

305. The target terminal prompts the indication information of the pseudo base station.

In this embodiment of the present application, the target terminal may display the event information through the application interface corresponding to the event, and the event information may include short message content and/or caller number. The target terminal prompts the indication information of the pseudo base station, which may include but not limited to the following implementations:

Mode 1: The terminal displays the indication information of the pseudo base station in text.

Mode 2: the terminal prompts the indication information of the pseudo base station by voice.

Manner 3: The terminal displays the indication information of the pseudo base station through the danger sign.

The information of the pseudo base station may be prompted on the target terminal through an application interface corresponding to the event. That is, the mobile phone can prompt the instruction information of the pseudo base station through the short message interface corresponding to the short message, and/or the incoming call interface corresponding to the incoming call, and/or voice prompt. The target terminal here may refer to the above 100 terminals, and one of them (such as a mobile phone) is taken as an example for illustration.

In a possible implementation manner, the terminal may display the indication information of the pseudo base station in text. Assume that the mobile phone receives the message content 11 displayed in the message, and displays the instruction information of the pseudo base station through text 21 on the message interface. As shown in FIG. 4( c ), it is a schematic diagram of displaying indication information of a pseudo base station by a mobile phone through a short message interface. In FIG. 4(c), the indication information of the pseudo base station is a text indication of "suspected fraudulent SMS". Assume that the mobile phone receives the caller number 12 of the caller ID, and displays the instruction information of the pseudo base station through text 21 on the caller interface. As shown in FIG. 4( d ), it is another schematic diagram of a mobile phone displaying indication information of a pseudo base station through an incoming call interface. In FIG. 4( d ), the indication information of the pseudo base station is a text indication of "suspected fraudulent call". It should be noted that the text reminder can also be a high-risk text message or a high-risk call reminder, which is not specifically limited.

In another possible implementation manner, the terminal may prompt the indication information of the pseudo base station by voice. Assume that the mobile phone receives the text message content 11 displayed in the text message, and prompts the instruction information of the pseudo base station through voice 22 on the text message interface. As shown in FIG. 4( e ), it is a schematic diagram of the mobile phone performing a voice reminder to the received short message according to the indication information of the pseudo base station. In Figure 4(e), the instruction information of the pseudo base station will trigger the preset voice function. *The text message sent by the number may be a fraudulent text message, etc.) to remind the user. Assume that the mobile phone receives the caller number 12 of the caller display, and prompts the instruction information of the pseudo base station through voice 22 on the caller interface. As shown in FIG. 4( f ), it is a schematic diagram of a mobile phone performing a voice reminder for an incoming call received according to the instruction information of the pseudo base station. In Figure 4(f), the instruction information of the pseudo base station will trigger the preset voice function, and the mobile phone will remind the user by playing the voice (for example, the preset voice may be that this number may be a fraudulent number, please answer carefully, etc.).

In another possible implementation manner, the terminal may prompt the indication information of the pseudo base station through a danger icon. Assume that the mobile phone receives the message content 11 displayed in the message, and prompts the instruction information of the fake base station through the danger icon 23 on the message interface. As shown in FIG. 4(g), it is a schematic diagram of the mobile phone reminding the received short message through the danger icon according to the indication information of the pseudo base station. In Figure 4(g), the indication information of the fake base station will trigger the danger icon, and the mobile phone will display the danger icon through the SMS interface to remind the user. Suppose, the mobile phone receives the caller number 12 of the caller display, and prompts the instruction information of the fake base station through the danger icon 23 on the caller interface. As shown in FIG. 4(h), it is a schematic diagram of a mobile phone reminding a received incoming call through a danger icon according to the indication information of the pseudo base station. In Figure 4(h), the indication information of the fake base station will trigger the danger icon, and the mobile phone will display the danger icon on the incoming call interface to remind the user. It should be noted that the danger icon may include, but not limited to, the prompt of a triangle plus an exclamation mark as shown in Fig. 4(g) and 4(h), and may also directly be a prompt of a triangle icon or an exclamation mark icon or other danger prompting methods.

It should be noted that the prompting of the indication information about the pseudo base station includes but is not limited to the above-mentioned several implementation manners, and may also be implemented in other manners, which are not specifically limited. For example: text+voice prompting method: as shown in Figure 4(i), it is a schematic diagram of the mobile phone reminding the received short message through text and voice according to the instruction information of the pseudo base station. As shown in FIG. 4(j), it is a schematic diagram of the mobile phone reminding the received incoming call through text and voice according to the instruction information of the pseudo base station.

Prompt method of text + danger icon: as shown in Fig. 4(k), it is a schematic diagram of the mobile phone reminding the received text message through text and danger icon according to the instruction information of the pseudo base station. As shown in Figure 4(l), it is a schematic diagram of the mobile phone reminding the received incoming call through text and danger icons according to the instruction information of the pseudo base station.

Prompt mode of voice + danger icon: as shown in Figure 4(m), it is a schematic diagram of the mobile phone reminding the received text message through voice and danger icon according to the instruction information of the pseudo base station. As shown in FIG. 4(n), it is a schematic diagram of the mobile phone reminding the received incoming call through voice and danger icon according to the indication information of the pseudo base station.

In another possible implementation, for short messages, the terminal can automatically classify the short messages into the spam list to prompt the indication information of the pseudo base station, as shown in Figure 4(o), the mobile phone automatically classifies the short messages into The spam message list will prompt the instruction information of the fake base station. For an incoming call, the terminal can automatically reject the call to prompt the indication information of the pseudo base station, as shown in Figure 4(p), which is a schematic diagram of the mobile phone automatically rejecting the incoming call to prompt the indication information of the pseudo base station. It should be understood that on the above-mentioned text message interface or incoming call interface, for the indication information of the text prompting the pseudo base station and the indication information of the icon prompting the pseudo base station, the implementation method can be in the form of a pop-up frame, a floating form, or a bubble, etc., and is not specifically limited. . Steps 303-305 are optional steps.

In the embodiment of the present application, the server obtains the information of the real base station and the information of the pseudo base station according to the big data reported by multiple terminals, so the accuracy rate of the obtained information of the real base station and the information of the pseudo base station is relatively high. That is, the server receives event information sent by multiple terminals, and the event information may include terminal identifiers, terminal location information, information about base stations accessed when an event occurs, and time when the event occurs. The server obtains the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. The server can also determine the target terminal that accesses the pseudo base station among the plurality of terminals according to the information of the real base station and the information of the pseudo base station; send the indication information of the pseudo base station to the target terminal, so that the user can understand the events that occur on the target terminal. Be vigilant and be careful not to be deceived.

As shown in Figure 5, it is a schematic diagram of another embodiment of the prompting method in the embodiment of the present application, including:

501. The server receives event information sent by multiple terminals.

502. The server acquires information about real base stations and information about pseudo base stations according to event information sent by the multiple terminals.

503. The server determines, according to the information of the real base station and the information of the pseudo base station, a target terminal that accesses the pseudo base station among the multiple terminals.

504. The server sends the indication information of the pseudo base station to the target terminal.

505. The target terminal prompts the indication information of the pseudo base station.

In this embodiment of the present application, steps 501-505 are similar to steps 301-305 in the above-mentioned embodiment shown in FIG. 3 , and will not be repeated here.

506. The server marks suspicious probabilities of the real base station and the pseudo base station.

In the embodiment of the present application, after the server obtains the information of the real base station and the information of the fake base station according to the event information sent by multiple terminals, the suspicious probability of the real base station and the fake base station can be marked, for example, the suspicious probability of the real base station can be marked The probability is 0, and the suspicious probability of marking a fake base station is 100%.

Example 1: As shown in Table 3 below, it is the corresponding relationship between real base stations and suspicious probabilities in different areas.

table 3

Example 2: If both the suspicious base station and the mobile base station are regarded as pseudo base stations, as shown in Table 4 below, it is the corresponding relationship between suspicious base stations, mobile base stations and suspicious probabilities.

suspicious base station suspicious probability mobile base station suspicious probability {cid8, lac8} 100% {cid12, lac12} 100% {cid15, lac15} 100% {cid8, lac8} 100% {cid19, lac19} 100% {cid19, lac19} 100% {cid20, lac20} 100% {cid20, lac20} 100% {cid15, lac15} 100% {cid36, lac36} 100% {cid40, lac40} 100%

Table 4

It should be noted that the mobile base stations and suspicious base stations shown in Table 4 can be considered as pseudo base stations, but the suspicious probability that the suspicious base stations are pseudo base stations may be higher. Because there are also mobile base stations in the operator, the suspicious probability that the mobile base station is a pseudo base station is relatively low.

Example 3: It is also possible to mark the suspicious probabilities of other base stations in the mobile base station lower than the suspicious base station, as shown in Table 5 below, which is the corresponding relationship between suspicious base stations, mobile base stations and suspicious probabilities.

suspicious base station suspicious probability mobile base station suspicious probability {cid8, lac8} 100% {cid12, lac12} 80% {cid15, lac15} 100% {cid8, lac8} 100% {cid19, lac19} 100% {cid19, lac19} 100% {cid20, lac20} 100% {cid20, lac20} 100% {cid15, lac15} 100% {cid36, lac36} 80% {cid40, lac40} 80%

table 5

It should be noted that the timing of step 506 may be after step 502 and before step 507 .

507. The first target terminal receives feedback information.

In this embodiment of the present application, the first target terminal may be one of the above-mentioned target terminals, or may be multiple terminals among the above-mentioned target terminals, which may be determined according to actual conditions. The feedback information is input information input by the user indicating whether the base station accessed by the terminal when the event occurs is a pseudo base station is accurate.

After the first target terminal receives the indication information of the pseudo base station, the first target terminal will prompt the indication information of the pseudo base station. The following can be illustrated with an example: as shown in Figure 6 (a), it is a schematic diagram of the mobile phone displaying input feedback information on the text message interface, and can also display "Please give feedback to the user whether the text message is a fraudulent text message" on the text message interface, The user can enter feedback information in the editable text box 31 . As shown in Figure 6(b), it is another schematic diagram of the mobile phone displaying input feedback information on the text message interface, and the "yes" and "no" signs 32 may also be displayed on the text message interface, and the user directly clicks "yes" or "no". " logo is enough. Of course, the "ignored" mark can also be displayed on the text message interface, or if no text is entered, it means that the feedback information is meaningless and there is no need to report it to the server. After the user enters feedback information in the text box or clicks on the sign of "yes" or "no", the terminal can receive the corresponding feedback information.

As shown in Figure 6(c), it is a schematic diagram of the mobile phone displaying input feedback information on the incoming call interface. The mobile phone displays "Please give feedback to the user whether the incoming call is a fraudulent call" on the incoming call interface. The user can edit the text Box 31 inputs feedback information. As shown in Figure 6(d), it is a schematic diagram of the mobile phone displaying input feedback information on the incoming call interface, and may also display "yes" and "no" signs 32 on the incoming call interface, and the user directly clicks "yes" or "no". The identification of the . Of course, the "Ignore" logo can also be displayed on the incoming call interface, or if no text is entered, it means that the feedback information is meaningless and there is no need to report it to the server. From the perspective of convenience, the operation of clicking may be more convenient for users. The input feedback information displayed on the incoming call interface may also be displayed after the user hangs up the phone. After the user enters feedback information in the text box or clicks on the sign of "yes" or "no", the terminal can receive the corresponding feedback information.

It should be noted that, the schematic diagram of how the terminal displays the input feedback information may include but not limited to the above-mentioned several manners. The explanation about user input feedback information can be that some users may have received text messages or incoming calls from this number before, and when they receive incoming calls or text messages from the same number again, they can determine whether it is a fraudulent text message or a fraudulent call, or It may be through this call to determine whether it is a fraudulent call, so that the user can input corresponding feedback information. In any of the above-mentioned Figures 6(a)-6(d), the input feedback information is explained by prompting the indication information of the pseudo base station in text, and when the indication information of the pseudo base station is prompted by voice or the danger icon prompts the indication information of the pseudo base station , the schematic diagrams showing the input feedback information are similar to those shown in FIG. 6(a)-FIG. 6(d), and will not be repeated here.

508. The first target terminal sends the feedback information to the server.

In the embodiment of the present application, it is assumed that the server previously determined that there are 100 target terminals accessing the pseudo base station, and the server sends indication information of the pseudo base station to the 100 target terminals. However, only 50 of the 100 target terminals have received the input information input by the user indicating whether the base station accessed when the event occurs by the terminal is a pseudo base station or not. Then, the 50 target terminals can report the feedback information to the server. Assume that 45 users input feedback information of "No", and 5 users input feedback information of "Yes".

509. The server correspondingly modifies the suspicious probability of the pseudo base station according to the feedback information, and obtains the modified suspicious probability of the pseudo base station.

In the embodiment of this application, it is assumed that the feedback information reported by the above 50 target terminals is for the base station {cid15, lac15}, and the base station {cid15, lac15} corresponds to 45 "No" feedback information, and 5 "Yes" feedback information. " feedback information. Then, the server can determine that the base station {cid15, lac15} has a 90% probability that it is not a pseudo base station, and a 10% probability that it is a pseudo base station. That is, correspondingly, in the above Table 4 and Table 5, the suspicious probability of the base station {cid15, lac15} can be modified to 10%. When the suspicious probability is less than or equal to the suspicious probability threshold, the base station can be considered as a real base station, assuming that the suspicious probability threshold is 20%, then the server can update the information of the base station {cid15, lac15} to the information of the real base station, assuming The area where the base station {cid15, lac15} appears is [lat7, lng7], update the information of the base station {cid15, lac15} to the above Table 3, and delete the information of the base station {cid15, lac15} in Table 4 and Table 5.

As shown in Table 6, the corresponding relationship between the information about the real base station and the suspicious probability in the updated Table 3 is as follows:

Table 6

As shown in Table 7, the corresponding relationship between suspicious base stations, mobile base stations and suspicious probabilities in Table 4 after updating is as follows:

suspicious base station suspicious probability mobile base station suspicious probability {cid8, lac8} 100% {cid12, lac12} 100% {cid19, lac19} 100% {cid8, lac8} 100% {cid20, lac20} 100% {cid19, lac19} 100% 100% {cid20, lac20} 100% {cid36, lac36} 100% {cid40, lac40} 100%

Table 7

As shown in Table 8, the corresponding relationship between suspicious base stations, mobile base stations and suspicious probabilities in Table 5 after updating is as follows:

suspicious base station suspicious probability mobile base station suspicious probability {cid8, lac8} 100% {cid12, lac12} 80% {cid19, lac19} 100% {cid8, lac8} 100% {cid20, lac20} 100% {cid19, lac19} 100% {cid20, lac20} 100% {cid36, lac36} 80% {cid40, lac40} 80%

Table 8

It should be noted that, in practical applications, the feedback information received by the server may be for the same base station, or may be for different base stations, and the method of modifying the suspicious probability is similar to the above, and will not be repeated here. Moreover, updating the information of the real base station and the information of the pseudo base station includes but is not limited to other implementations. For example, for the same base station, among the feedback information received by the server within the first duration, there are 2 "yes" Feedback information, 6 "No" feedback information; among the feedback information received within the second duration, there is 1 "Yes" feedback information and 8 "No" feedback information; received within the third duration Among the feedback information, there are 0 "yes" feedback information and 10 "no" feedback information; maybe after these 3 revisions, the suspicious probability of the base station is not lower than the suspicious probability threshold of 20%, but the server receives Feedback information found that the number of "yes" feedback information is getting less and less, and the number of "no" feedback information is increasing. Then, it can be considered that the base station is not a pseudo base station. The server can send The base station is updated in the information of the real base station.

In the embodiment of the present application, the server obtains the information of the real base station and the information of the pseudo base station according to the big data reported by multiple terminals, so the accuracy rate of the obtained information of the real base station and the information of the pseudo base station is relatively high. That is, the server receives event information sent by multiple terminals, and the event information may include terminal identifiers, terminal location information, information about base stations accessed when the event occurs, and time when the event occurs. The server obtains the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. The server can also determine the target terminal that accesses the pseudo base station among the plurality of terminals according to the determined information of the real base station and the information of the pseudo base station; send the indication information of the pseudo base station to the target terminal, so that the user can check the information that occurs on the target terminal. The incident has aroused vigilance and be careful of being deceived.

Furthermore, the server can also use the characteristics of the movement of the pseudo base station and the feedback information of the terminal to modify the suspicious probability of the pseudo base station, update the information of the real base station and the information of the pseudo base station, so that the server will receive the first event reported by the first terminal next time When the information of the real base station and the fake base station are updated, it can be determined whether the first base station accessed by the terminal when the first event occurs is a fake base station. The accuracy of the results judged by the information is higher.

As shown in Figure 7, it is a schematic diagram of an embodiment of the prompting method in the embodiment of the present application, including:

701. The server receives event information sent by multiple terminals.

702. The server acquires information about real base stations and information about pseudo base stations according to event information sent by the multiple terminals.

703. The server determines, according to the information of the real base station and the information of the pseudo base station, a target terminal that accesses the pseudo base station among the multiple terminals.

704. The server sends the indication information of the pseudo base station to the target terminal.

705. The target terminal prompts the indication information of the pseudo base station.

706. The server marks suspicious probabilities of the real base station and the pseudo base station.

707. The first target terminal receives feedback information.

708. The first target terminal sends the feedback information to the server.

709. The server correspondingly modifies the suspicious probability of the pseudo base station according to the feedback information, and obtains the modified suspicious probability of the pseudo base station.

In this embodiment of the present application, steps 701-509 are similar to steps 501-509 in the above-mentioned embodiment shown in FIG. 5 , and will not be repeated here.

710. The server determines information about the target pseudo base station and information about the target real base station.

In this embodiment of the present application, the server may determine, according to the suspicious probability corresponding to the information of the real base station and the information of the pseudo base station, that the information of the base station with a suspicious probability greater than the third threshold is the information of the target pseudo base station, and the suspicious probability is less than the fourth threshold The information of the base station is the information of the target real base station. The information of the target real base station and the target pseudo base station include but not limited to information such as cid, lac, signal strength, difference between collection time and reporting time, and the like. Wherein, the collection time refers to the time when the event occurs on the corresponding terminal, and the reporting time refers to the time when the terminal sends the event information to the server. The collection time may be the same as the reporting time, or the reporting time may be after the collection time.

711. The server performs model training according to the information of the target pseudo base station and the information of the target real base station, and obtains reference weights of each feature included in the information of the base station.

In this embodiment of the application, the server may use other algorithms such as the Logistics algorithm to perform model training according to the information of the target pseudo base station and the information of the target real base station, and obtain reference weights of each feature included in the information of the base station. For example: cid=w1, lac=w2, signal strength=w3, time difference=w4...

712. The first terminal detects the occurrence of a first event and collects information about the first event.

In this embodiment of the present application, the first terminal detects the occurrence of the first event and collects information about the first event. The information of the first event may include the information of the base station accessed when the first event occurs. It should be understood that the information of the first event may also include the identifier of the first terminal and the location of the first terminal. information, the time when the first event occurs, the content of the first short message and/or the number of the first incoming call and other information. The first event may include receiving a first text message and/or a first incoming call. For the schematic diagram of the first terminal receiving the first short message or the first incoming call, reference may be made to the above-mentioned FIG. 4( a ) and FIG. 4( b ), which will not be repeated here.

It should be noted that step 712 may be between steps 702-713.

713. The first terminal sends information about the first event to the server.

In this embodiment of the present application, the server receives information about the first event sent by the first terminal. It should be noted that, the first terminal may be a terminal among the aforementioned multiple terminals, or may be another newly accessed terminal other than the multiple terminals. Moreover, the number indicated by the first terminal is not limited, and may refer to one terminal, or may refer to multiple terminals. In the following description, the mobile phone 1 is taken as an example for description. That is, the server receives the information of the first event sent by the mobile phone 1, and the information of the first event includes the identification of the mobile phone 1, the location information of the mobile phone 1, and the information of the first base station accessed when the first event occurs , the time when the first event occurs.

Wherein, the location information of the mobile phone 1 can use the longitude and latitude obtained by the Global Positioning System (Global Positioning System, GPS), or the longitude and latitude calculated by using the network. ) physical address of the wireless access point (Basic Service Setidentifier, BSSID)/identification of the wireless access point or service set identifier (Service Set Identifier, SSID)/media access control address (Medium Access Control address, MAC addr)/ Network ID (NetworkID), currently scanned WiFi SSID and other information. The information of the first base station accessed when the first event occurs on the mobile phone 1 may include the sector identifier of the base station, which may also be called cell identification (cell identification, CID), LAC, adjacent CID, and may also include signal strength, cell information etc.

714. The server determines whether the first base station is a pseudo base station.

In the embodiment of the present application, the authenticity determination of the first base station can be implemented in several different manners, which are described below:

The first way: the server searches and determines the real base station information and the fake base station information stored in the database.

If step 712 is after step 702 and before step 709, the server can search in the information of the real base station and the information of the pseudo base station obtained according to the event information sent by multiple terminals, if the information of the first base station is in the information of the pseudo base station , it is considered that the first base station is a fake base station, and the server can send the indication information of the fake base station to mobile phone 1; 1. Send the indication information of the real base station.

If step 712 is after step 709 and before step 713, the server can search in the information of the updated real base station and the information of the pseudo base station, and if the information of the first base station is in the information of the updated pseudo base station, it is considered that the second If a base station is a pseudo base station, the server can send the indication information of the pseudo base station to the mobile phone 1. If the information of the first base station is in the updated information of the real base station, it means that the first base station is a real base station, and the server does not need to send the instruction information to the mobile phone 1. Instructions for real base stations.

The second way: if step 712 is after step 702 and before step 709, the server may first search for the information of the first base station in the information of the pseudo base station and the information of the real pseudo base station stored in the database. Alternatively, if step 712 is after step 709 and before step 713, the server may first search for the information of the first base station in the updated information of the real base station and the updated information of the pseudo base station stored in the database.

If the information of the first base station is not found, the server may determine the target probability of the first base station according to the information of the first event and the reference weight of each feature included in the information of the base station. The server determines the target suspicious probability of the first base station Rate=sum(feature*weight)=cid*w1+lac*w2+signal strength*w3+time difference*w4+.... If the target probability is less than or equal to the fifth threshold, the server determines that the first station is a pseudo base station.

It should be noted that the range of the target probability calculated according to the reference weight is between 0 and 1, and those close to 1 can be regarded as real base stations, and those close to 0 can be regarded as pseudo base stations. Assuming that the target probability calculated here is 0.8, the fifth threshold may be set to 0.6, and 0.8 is greater than 0.6. Therefore, the server determines that the first base station is a real base station. Assuming that the target probability calculated here is 0.3, the fifth threshold may be set to 0.6, and 0.3 is smaller than 0.6. Therefore, the server determines that the first base station is a pseudo base station.

A third manner: the server directly determines the target probability of the first base station according to the information of the first event and the reference weights of the features included in the information of the base station. That is, the server determines the target suspicious probability of the first base station Rate=sum(feature*weight)=cid*w1+lac*w2+signal strength*w3+time difference*w4+.... If the target probability is less than or equal to the fifth threshold, the server determines that the first base station is a pseudo base station.

715. If the first base station is a pseudo base station, the server sends indication information of the pseudo base station to the first terminal.

In this embodiment of the present application, if it is determined that the first base station is a fake base station through any of the methods for determining the authenticity of the first base station described in step 714, the server sends the fake base station to the first terminal. instructions for the .

716. The first terminal prompts the indication information of the pseudo base station.

Here, the manner in which the first terminal prompts the indication information of the pseudo base station may refer to any of the prompt manners in FIG. 4(c)-FIG. 4(p), which will not be repeated here.

In the embodiment of the present application, the server obtains the information of the real base station and the information of the pseudo base station according to the big data reported by multiple terminals, so the accuracy rate of the obtained information of the real base station and the information of the pseudo base station is relatively high. That is, the server receives event information sent by multiple terminals, and the event information may include terminal identifiers, terminal location information, information about base stations accessed when the event occurs, and time when the event occurs. The server determines the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals. The server can also determine the target terminal that accesses the pseudo base station among the plurality of terminals according to the determined information of the real base station and the information of the pseudo base station; send the indication information of the pseudo base station to the target terminal, so that the user can check the information that occurs on the target terminal. The first incident arouses vigilance and be careful of being deceived.

Furthermore, the server can also use the characteristics of the movement of the pseudo base station and the feedback information of the terminal to modify the suspicious probability of the pseudo base station, update the information of the real base station and the information of the pseudo base station, so that the server will receive the first event reported by the first terminal next time When the information of the real base station and the fake base station are updated, it can be determined whether the first base station accessed by the terminal when the first event occurs is a fake base station. The accuracy of the results judged by the information is higher.

Furthermore, the server can also select a batch of base station information with the highest suspicious probability as positive examples and base station information with the lowest suspicious probability as negative examples according to the suspicious probabilities corresponding to the information of the real base station and the fake base station for model training. , to obtain the reference weight of each feature included in the information of the base station. These reference weights can be used when the server receives the information of the first event reported by the first terminal next time, according to the reference weights of each feature and the information of the first base station, to calculate the weight of the first base station accessed when the first event occurs. target probability. If the target probability is greater than the preset threshold, the server determines that the first base station is a real base station; if the target probability is less than or equal to the preset threshold, the server determines that the first base station is a pseudo base station, and the server sends indication information of the pseudo base station to the terminal. In this way, the server can calculate whether the access of the first terminal newly received by the server is a pseudo base station when the first event occurs according to the reference weight of each feature included in the information of the base station, providing another implementation method of determining a pseudo base station , increasing the feasibility of the scheme.

On the other hand, according to the event information reported by a large number of terminals and the feedback information of users, the suspicious probabilities of real base stations and pseudo base stations can be continuously learned, optimized and corrected, which will greatly improve the accuracy of judgment; "Identification method" can only be compared and analyzed with the existing base station data of the operator, and has a high accuracy rate in the case of judging mobile base stations. The server conducts model training in real time according to the information of the target real base station and the information of the target pseudo base station, which can ensure the accuracy and real-time performance of the recognition, and can detect new pseudo base stations in time; it can also identify the pseudo base station based on big data technology The trajectory of the movement can more effectively prevent fake base station fraud and even capture fake base stations.

As shown in Figure 8, it is a schematic diagram of an embodiment of the prompting method in the embodiment of the present application, including:

801. The first terminal detects the occurrence of a first event and collects information about the first event;

In this embodiment of the present application, the first event may be a first event that occurs in an application installed on the first terminal, and the information of the first event may include the first terminal identifier and the location of the first terminal information, information of the first base station accessed when the first event occurs, time when the first event occurs, and time when the first event occurs may also be referred to as a time stamp. The information of the first event may also include information such as the content of the short message and/or the number of the incoming call. The applications installed on the first terminal may be other applications such as SMS applications and call applications, which are not limited here. For example, when the first terminal detects that a short message is received, the first terminal collects information about the received short message; or, when the first terminal detects that an incoming call is received, the first terminal collects information about the incoming call. For a schematic diagram of receiving a short message or an incoming call, reference may be made to FIGS. 4( a ) and 4 ( b ), which will not be repeated here.

802. The first terminal sends information about the first event to the server;

In this embodiment of the present application, the first terminal may send the collected short message received information, or the collected incoming call received information, to the server. It should be noted that when the first terminal receives a short message or receives an incoming call, the base station accessed is a pseudo base station, then the first terminal is in a disconnected state and cannot report the information of the first event to the server. Therefore, The first terminal needs to wait until it is in a network connection state before sending the information of the first event.

803. The first terminal receives the indication information of the pseudo base station sent by the server.

In this embodiment of the present application, if the server determines that the first terminal is accessing a pseudo base station, the server sends indication information of the pseudo base station to the first terminal. Regarding the method for the server to determine the pseudo base station, it may include but not limited to the following implementation methods. The following uses a mobile phone as an example to illustrate, as follows:

Example 1: The server searches and determines the real base station information and pseudo base station information obtained in the embodiment shown in FIG. 3 above.

The server can search in the information of the real base station and the information of the pseudo base station obtained according to the information of the event sent by multiple terminals. If the information of the first base station is in the information of the pseudo base station, the first base station is considered to be a pseudo base station, and the server The indication information of the fake base station can be sent to the mobile phone; if the information of the first base station is in the information of the real base station, it means that the first base station is a real base station, and the server may not send the indication information of the real base station to the mobile phone.

Example 2: The server searches and determines the real base station information and the fake base station information updated in the above embodiment shown in FIG. 5 .

In the above-mentioned embodiment shown in FIG. 5 , the server may search and determine based on the updated real base station information and pseudo base station information. If the information of the first base station is in the updated pseudo base station information, the first base station is considered If the base station is a fake base station, the server can send the indication information of the fake base station to the mobile phone; if the information of the first base station is in the updated information of the real base station, it means that the first base station is a real base station, and the server does not need to send the indication information of the real base station to the mobile phone .

Example 3: In the above-mentioned embodiment shown in FIG. 7 , the server determines according to the reference weights of each feature included in the obtained base station information.

If it is not found whether the first base station is a real base station or a pseudo base station in the above-mentioned embodiment shown in FIG. 3 or FIG. 5 , the above-mentioned embodiment shown in FIG. to determine the reference weight. Alternatively, the determination is made directly by using the reference weights of each feature included in the obtained base station information in the embodiment shown in FIG. 7 . For a specific implementation manner, reference may be made to the description of step 714 in the above-mentioned Embodiment 7, and details are not repeated here.

Example 4: In the embodiment shown in FIG. 3 above, the server performs another big data calculation according to the received event information sent by multiple terminals, and obtains the information of the real base station and the information of the pseudo base station, thereby determining the first Whether a base station is a pseudo base station.

804. The first terminal prompts the indication information of the pseudo base station.

In this embodiment of the present application, the first terminal prompts the indication information of the pseudo base station, which may include but not limited to the following implementations:

Example 1: The terminal displays the indication information of the pseudo base station in text; for details, refer to the above-mentioned Figures 4(c) and 4(d), which will not be repeated here.

Example 2: The terminal prompts the indication information of the pseudo base station by voice; for details, refer to the above-mentioned Figures 4(e) and 4(f), which will not be repeated here.

Example 3: The terminal displays the indication information of the pseudo base station through the danger sign; for details, refer to the above-mentioned Figures 4(g) and 4(h), which will not be repeated here.

Optionally, for other indication information prompting the pseudo base station, reference may be made to the implementation manners in FIGS. 4(i)-4(p), which will not be repeated here.

In this embodiment of the application, for the first terminal, it is mainly to report the collected event information, which can be used by the server to obtain the information of the pseudo base station, and there are many ways for the server to determine. Note, but the determination method of the server is calculated based on big data, therefore, the reliability of the judged results is relatively high, and the obtained results are more accurate. If the terminal is connected to a pseudo base station, then the server will send the indication information of the pseudo base station to the terminal, so that the terminal can prompt the indication information of the pseudo base station, so that the user is alert to the first event that occurs on the first terminal, be careful Be deceived.

The prompting method in the embodiment of the present application is described above, and the server and the terminal in the embodiment of the present application are described below, as shown in FIG. 9(a), which is a schematic diagram of an embodiment of the server in the embodiment of the present application, including:

A receiving module 901, configured to receive event information sent by multiple terminals;

The acquiring module 902 is configured to acquire the information of the real base station and the information of the pseudo base station according to the event information sent by the multiple terminals.

Optionally, in some embodiments of the present application, on the basis of the above shown in FIG. 9(a), as shown in FIG. 9(b), it is a schematic diagram of another embodiment of the server, and the server further includes:

A determining module 903, configured to determine, among the plurality of terminals, a target terminal that accesses the pseudo base station according to the information of the real base station and the information of the pseudo base station;

The sending module 904 is configured to send the indication information of the pseudo base station to the target terminal.

Optionally, in some embodiments of the present application, the event information includes a terminal identifier, terminal location information, information about a base station accessed when the event occurs, and a time when the event occurs.

Optionally, in some embodiments of the present application, the acquiring module 902 is specifically configured to:

According to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, the time when the event occurred, and the preset position calculation accuracy, determine the initial base station with respect to longitude, latitude, and date Information;

From the information about the initial base station of longitude, latitude, and date, delete the information of the initial base station whose occurrence times in consecutive days is less than the first threshold;

Remove the date, and merge the information of other initial base stations to obtain the information about the longitude and latitude screening base stations;

It is determined that the information of the screened base station is information of a real base station.

Optionally, in some embodiments of the present application, the acquiring module 902 is specifically further configured to:

According to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, and the time when the event occurred, determine the location information and the second time of the terminal accessed by the target base station at the first time location information of the accessed terminal, the target base station is any base station accessed by the plurality of terminals when the event occurs;

According to the position information of the terminal accessed by the target base station at the first time, calculate the first central position of the terminal accessed, and according to the position information of the terminal accessed by the target base station at the second time, calculate the access the second central location of the terminal;

determining the first central location as a first location of the target base station, and determining the second central location as a second location of the target base station;

If the absolute value of the difference between the first position and the second position is greater than a second threshold, the obtaining module determines that the information of the target base station is information of a pseudo base station.

Optionally, in some embodiments of the present application, on the basis of the above-mentioned FIG. 9(b), as shown in FIG. 9(c), it is a schematic diagram of another embodiment of the server, and the server further includes:

A marking module 905, configured to mark the suspicious probability of the real base station and the false base station;

The receiving module 901 is further configured to receive feedback information sent by the first target terminal, where the feedback information is input by the user indicating whether the base station accessed by the first target terminal when the event occurs is a pseudo base station Enter information accurately;

The modification module 906 is configured to correspondingly modify the suspicious probability of the pseudo base station according to the feedback information, and obtain the modified suspicious probability of the pseudo base station.

Optionally, in some embodiments of the present application, on the basis of the above-mentioned FIG. 9(c), as shown in FIG. 9(d), it is a schematic diagram of another embodiment of the server, and the server further includes:

The determination module 903 is further configured to determine that the information of base stations with a suspicious probability greater than the third threshold is the information of the target pseudo base station, and the information of the base stations with a suspicious probability less than the fourth threshold is the information of the target real base station;

The model training module 907 is configured to perform model training according to the information of the target pseudo base station and the information of the target real base station, and obtain reference weights of various features included in the information of different base stations.

Optionally, in some embodiments of the present application,

The receiving module 901 is further configured to receive information about a first event sent by a first terminal, where the information about the first event includes information about a first base station accessed when the first event occurs;

The sending module 904 is further configured to send the indication information of the pseudo base station to the first terminal if the information of the first base station is included in the information of the pseudo base station.

Optionally, in some embodiments of the present application,

The determining module 903 is further configured to: if the information of the first base station is not included in the information of the pseudo base station, the determining module 903, according to the information of the first event and the information of the base station, Determine the target probability of the first base station by referring to the weight of each feature; if the target probability is less than or equal to the fifth threshold, the determination module 903 determines that the first base station is a pseudo base station;

The sending module 904 is further configured to send indication information of the pseudo base station to the first terminal.

Optionally, in some embodiments of the present application, the event includes: receiving a text message and/or an incoming call;

The event information also includes: the content of the short message and/or the number of the incoming call.

As shown in Figure 10, it is a schematic diagram of an embodiment of a terminal in the embodiment of the present application, including:

A collection module 1001, configured for the terminal to detect the occurrence of an event and collect information about the event;

A sending module 1002, configured to send information about the event to a server;

A receiving module 1003, configured to receive indication information of the pseudo base station sent by the server, where the indication information of the pseudo base station is obtained by the server according to the event information;

The prompt module 1004 is configured to prompt the indication information of the pseudo base station.

Optionally, in some embodiments of the present application, the information of the event includes the terminal identifier, the location information of the terminal, the information of the base station accessed when the event occurs, and the time when the event occurs.

Optionally, in some embodiments of the present application,

The receiving module 1003 is further configured to receive feedback information, where the feedback information is input information input by the user indicating whether the base station accessed when the event occurs by the terminal is a pseudo base station;

The sending module 1004 is further configured to send the feedback information to the server, where the feedback information is used by the server to modify the suspicious probability of the pseudo base station.

Optionally, in some embodiments of the present application,

The prompt module 1004 is specifically configured to display the indication information of the pseudo base station in text.

Optionally, in some embodiments of the present application,

The prompt module 1004 is specifically configured to display the indication information of the pseudo base station through a danger sign.

The prompting module 1004 is specifically configured to prompt the indication information of the pseudo base station by voice.

Optionally, in some embodiments of the present application, the event includes: receiving a short message and/or an incoming call; the information of the event further includes: the content of the short message and/or the number of the incoming call.

As shown in FIG. 11 , it is a schematic diagram of another embodiment of the server in the embodiment of the present application.

The server can have relatively large differences due to different configurations or performances, and can include one or more wired or wireless network interfaces 1150, which can also be called transceivers, and one or more central processing units (central processing units, CPU) 1122 (eg, one or more processors) and memory 1132, and one or more storage media 1130 (eg, one or more mass storage devices) for storing application programs 1142 or data 1144.

In the embodiment of the present application, the wired or wireless network interface 1150 can receive information about events sent by multiple terminals; the central processor 1122 obtains information about real base stations according to the information about events sent by multiple terminals received by the wired or wireless network interface 1150 and pseudo base station information. For prompting the indication information of the pseudo base station on the target terminal, it may include but not limited to the implementation manners shown in FIG. 4(c)-FIG. 4(p).

Wherein, the memory 1132 and the storage medium 1130 may be temporary storage or persistent storage. The program stored in the storage medium 1130 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the server. Furthermore, the central processing unit 1122 may be configured to communicate with the storage medium 1130 , and execute a series of instruction operations in the storage medium 1130 on the server 1100 .

The server 1100 may also include one or more power supplies 1126, one or more input/output interfaces 1158, and/or, one or more operating systems 1141, such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.

The steps performed by the server in the foregoing embodiments may be based on the server structure shown in FIG. 11 .

Optionally, in some embodiments of the present application, the central processing unit 1122 is further configured to perform the following step: according to the information of the real base station and the information of the pseudo base station, determine the access pseudo base station among the plurality of terminals The target terminal of the base station;

The wired or wireless network interface 1150 is further configured to perform the following step: sending indication information of the pseudo base station to the target terminal.

Optionally, in some embodiments of the present application, the event information includes a terminal identifier, terminal location information, information about a base station accessed when the event occurs, and a time when the event occurs.

Optionally, in some embodiments of the present application, the central processing unit 1122 is specifically configured to perform the following steps:

According to the location information of the terminal sent by the multiple terminals, the information of the base station accessed when the event occurred, the time when the event occurred, and the preset position calculation accuracy, determine the initial base station with respect to longitude, latitude, and date Information;

From the information about the initial base station of longitude, latitude, and date, delete the information of the initial base station whose occurrence times in consecutive days is less than the first threshold;

Remove the date, and merge the information of other initial base stations to obtain the information about the longitude and latitude screening base stations;

It is determined that the information of the screened base station is information of a real base station.

Optionally, in some embodiments of the present application, the central processing unit 1122 is specifically configured to perform the following steps:

The server determines the location information of the terminal accessed by the target base station at the first time and location information of terminals accessed at the second time, the target base station being any base station accessed by the multiple terminals when the event occurs;

According to the position information of the terminal accessed by the target base station at the first time, calculate the first central position of the terminal accessed, and according to the position information of the terminal accessed by the target base station at the second time, calculate the access the second central location of the terminal;

determining the first central location as a first location of the target base station, and determining the second central location as a second location of the target base station;

If the absolute value of the difference between the first position and the second position is greater than a second threshold, the central processor determines that the information of the target base station is information of a pseudo base station.

Optionally, in some embodiments of the present application, the central processor 1122 is specifically configured to perform the following steps: mark suspicious probabilities of the real base station and the false base station; modify the corresponding the suspicious probability of the pseudo base station, obtaining the modified suspicious probability of the pseudo base station;

The wired or wireless network interface 1150 is further configured to perform the following steps: receive feedback information sent by the first target terminal, the feedback information is the base station accessed by the user when the event occurs to the first target terminal is a pseudo base station Indicates whether the input information is accurate.

Optionally, in some embodiments of the present application, the central processing unit 1122 is specifically configured to perform the following steps:

Determining that the information of the base station with a suspicious probability greater than the third threshold is the information of the target pseudo base station, and the information of the base station with a suspicious probability less than the fourth threshold is the information of the target real base station;

According to the information of the target pseudo base station and the information of the target real base station, model training is performed to obtain the reference weights of each feature included in the information of the base station.

Optionally, in some embodiments of the present application, the wired or wireless network interface 1150 is also used to perform the following steps:

receiving information about a first event sent by a first terminal, where the information about the first event includes information about a first base station accessed when the first event occurs;

If the information of the first base station is included in the information of the pseudo base station, the wired or wireless network interface 1150 sends indication information of the pseudo base station to the first terminal.

Optionally, in some embodiments of the present application, the central processing unit 1122 is specifically configured to perform the following steps:

If the information of the first base station is not in the information of the pseudo base station, the central processor 1122 determines the reference weight of each feature included in the information of the first event and the information of the base station. The target probability of the first base station; if the target probability is less than or equal to the fifth threshold, the central processor 1122 determines that the first base station is a pseudo base station;

The wired or wireless network interface 1150 is further configured to perform the following step: sending indication information of the pseudo base station to the first terminal.

Optionally, in some embodiments of the present application, the event includes: receiving a short message and/or an incoming call; the information of the event further includes: the content of the short message and/or the number of the incoming call.

As shown in FIG. 12 , it is a schematic diagram of another embodiment of the terminal in the embodiment of the present application.

For ease of description, FIG. 12 only shows the parts related to the embodiment of the present application. For specific technical details not disclosed, please refer to the method part of the embodiment of the present application. The terminal can be any terminal device including mobile phone, tablet computer, PDA (Personal Digital Assistant, personal digital assistant), POS (Point of Sales, sales terminal), vehicle-mounted computer, etc. Taking the terminal as a mobile phone as an example:

FIG. 12 shows a block diagram of a partial structure of a mobile phone related to the terminal provided by the embodiment of the present application. Referring to FIG. 12 , the mobile phone includes: a processor 1280 , a communication interface 1210 , an output unit 1270 , a memory 1220 , an input unit 1230 , a sensor 1250 , and a power supply 1290 and other components. Wherein, the communication interface 1210 may include a radio frequency (Radio Frequency, RF) circuit 1211, a wireless fidelity (wireless fidelity, WiFi) module 1212 and other components; the output unit 1270 may include a display unit 1240, an audio circuit 1260 and other components. Those skilled in the art can understand that the structure of the mobile phone shown in FIG. 12 does not constitute a limitation to the mobile phone, and may include more or less components than shown in the figure, or combine some components, or arrange different components.

The following is a specific introduction to each component of the mobile phone in conjunction with Figure 12:

The processor 1280 is the control center of the mobile phone. It uses various interfaces and lines to connect various parts of the entire mobile phone. By running or executing software programs and/or modules stored in the memory 1220, and calling data stored in the memory 1220, execution Various functions and processing data of the mobile phone, so as to monitor the mobile phone as a whole. In this embodiment of the present application, the processor 1280 detects the occurrence of an event and collects information about the event. Optionally, the processor 1280 may include one or more processing units; preferably, the processor 1280 may integrate an application processor and a modem processor, wherein the application processor mainly processes operating systems, user interfaces, and application programs, etc. , the modem processor mainly handles wireless communications. It can be understood that the foregoing modem processor may not be integrated into the processor 1280 .

The RF circuit 1211 can be used for sending and receiving information or receiving and sending signals during a call. In particular, after receiving the downlink information from the base station, it is processed by the processor 1280; in addition, it sends the designed uplink data to the base station. In this embodiment of the present application, the RF circuit 1211 may send the information of the event collected by the processor 1280 to the server, and receive the indication information of the pseudo base station sent by the server, and the indication information of the pseudo base station is determined by the server according to the Information about the event is obtained.

Generally, the RF circuit 1211 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier (Low Noise Amplifier, LNA), a duplexer, and the like. In addition, the RF circuit 1211 can also communicate with networks and other devices through wireless communication. The above-mentioned wireless communication can use any communication standard or protocol, including but not limited to Global System of Mobile Communication (Global System of Mobile communication, GSM), General Packet Radio Service (General Packet Radio Service, GPRS), Code Division Multiple Access (Code Division Multiple Access, CDMA), Wideband Code Division Multiple Access (WCDMA), Long Term Evolution (Long Term Evolution, LTE), email, Short Messaging Service (Short Messaging Service, SMS), etc.

The memory 1220 can be used to store software programs and modules, and the processor 1280 executes various functional applications and data processing of the mobile phone by running the software programs and modules stored in the memory 1220 . The memory 1220 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.) and the like; Data created by the use of mobile phones (such as audio data, phonebook, etc.), etc. In addition, the memory 1220 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices.

The input unit 1230 can be used to receive input numbers or character information, and generate key signal input related to user settings and function control of the mobile phone. As shown in FIG. 6( a ) and 6 ( b ), if the user inputs feedback information, the feedback information can be received by the mobile phone through the input unit 1230 . Specifically, the input unit 1230 may include a touch panel 1231 and other input devices 1232 . The touch panel 1231, also referred to as a touch screen, can collect touch operations of the user on or near it (for example, the user uses any suitable object or accessory such as a finger or a stylus on the touch panel 1231 or near the touch panel 1231). operation), and drive the corresponding connection device according to the preset program. Optionally, the touch panel 1231 may include two parts, a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch orientation, and detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into contact coordinates, and sends it to the to the processor 1280, and can receive and execute commands sent by the processor 1280. In addition, the touch panel 1231 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch panel 1231 , the input unit 1230 may also include other input devices 1232 . Specifically, other input devices 1232 may include but not limited to one or more of a physical keyboard, function keys (such as volume control keys, switch keys, etc.), trackball, mouse, joystick, and the like.

The output unit 1270 may include a display unit 1240, an audio circuit 1260 and other components. In this embodiment of the present application, the output unit 1270 may be configured to prompt the indication information of the pseudo base station.

The display unit 1240 may be used to display information input by or provided to the user and various menus of the mobile phone. The interfaces shown in FIGS. 4(a)-4(p) and FIGS. 6(a)-6(d) are all displayed by the display unit 1240 . The display unit 1240 may include a display panel 1241. Optionally, the display panel 1241 may be configured in the form of a liquid crystal display (Liquid Crystal Display, LCD) or an organic light-emitting diode (Organic Light-Emitting Diode, OLED). Further, the touch panel 1231 can cover the display panel 1241, and when the touch panel 1231 detects a touch operation on or near it, it sends it to the processor 1280 to determine the type of the touch event, and then the processor 1280 determines the type of the touch event according to the The type provides a corresponding visual output on the display panel 1241 . Although in FIG. 12 , the touch panel 1231 and the display panel 1241 are used as two independent components to realize the input and input functions of the mobile phone, in some embodiments, the touch panel 1231 and the display panel 1241 can be integrated to form a mobile phone. Realize the input and output functions of the mobile phone.

The audio circuit 1260, the speaker 1261, and the microphone 1262 can provide an audio interface between the user and the mobile phone. As shown in Figure 4(e), Figure 4(f), Figure 4(i), Figure 4(j), Figure 4(m), Figure 4(n), the audio circuit 1260 can be used to The indication information of the pseudo base station is prompted to the user. The audio circuit 1260 can transmit the electrical signal converted from the received audio data to the speaker 1261, and the speaker 1261 converts it into an audio signal for output; After being received, it is converted into audio data, and then the audio data is processed by the output processor 1280, and then sent to, for example, another mobile phone through the RF circuit 1211, or the audio data is output to the memory 1220 for further processing.

The handset may also include at least one sensor 1250, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 1241 according to the brightness of the ambient light, and the proximity sensor may turn off the display panel 1241 and/or when the mobile phone is moved to the ear. or backlight. As a kind of motion sensor, the accelerometer sensor can detect the magnitude of acceleration in various directions (generally three axes), and can detect the magnitude and direction of gravity when it is stationary, and can be used to identify the application of mobile phone posture (such as horizontal and vertical screen switching, related Games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tap), etc.; as for other sensors such as gyroscope, barometer, hygrometer, thermometer, infrared sensor, etc. repeat.

WiFi is a short-distance wireless transmission technology. The mobile phone can help users send and receive emails, browse web pages, and access streaming media through the WiFi module 1212, which provides users with wireless broadband Internet access. Although Fig. 12 shows a WiFi module 1212, it can be understood that it is not an essential component of the mobile phone, and can be completely omitted as required without changing the essence of the application.

The mobile phone also includes a power supply 1290 (such as a battery) for supplying power to various components. Preferably, the power supply can be logically connected to the processor 1280 through the power management system, so that functions such as charging, discharging, and power consumption management can be realized through the power management system.

Although not shown, the mobile phone may also include a camera, a Bluetooth module, etc., which will not be repeated here.

The steps performed by the terminal in the foregoing embodiments may be based on the terminal structure shown in FIG. 12 .

Optionally, in some embodiments of the present application, the information of the event includes the terminal identifier, the location information of the terminal, the information of the base station accessed when the event occurs, and the time when the event occurs.

Optionally, in some embodiments of the present application,

The input unit 1230 is further configured to receive feedback information, where the feedback information is input information input by the user indicating whether the base station accessed when the event occurs by the terminal is a pseudo base station;

The radio frequency circuit 1211 is further configured to send the feedback information to the server, where the feedback information is used by the server to modify the suspicious probability of the pseudo base station.

Optionally, in some embodiments of the present application,

The display unit 1240 is further configured to display the indication information of the pseudo base station in text.

Optionally, in some embodiments of the present application,

The display unit 1240 is further configured to display the indication information of the pseudo base station through a danger sign.

Optionally, in some embodiments of the present application,

The audio circuit 1260 is further configured to prompt the indication information of the pseudo base station by voice.

Optionally, in some embodiments of the present application, the event includes: receiving a short message and/or an incoming call; the information of the event further includes: the content of the short message and/or the number of the incoming call.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, all or part of the processes or functions according to the embodiments of the present invention will be generated. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk (SSD)).

Optionally, in some embodiments of the present application, a computer program product containing instructions is provided. When it is run on a computer, the computer executes the server as shown in FIG. 3 , FIG. 5 , FIG. 7 or FIG. 8 above. In the method shown, the same or corresponding technical features can be cited in this embodiment.

Optionally, in some embodiments of the present application, a computer program product containing instructions is provided. When it is run on a computer, the computer executes the terminal as shown in FIG. 3 , FIG. 5 , FIG. 7 or FIG. 8 above. In the method shown, the same or corresponding technical features can be cited in this embodiment.

The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of this application and the above drawings are used to distinguish similar objects, and not necessarily Used to describe a specific sequence or sequence. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to the expressly listed Those steps or elements may instead include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

Claims (32)

1. a kind of reminding method, which is characterized in that including：

Server receives the information for the event that multiple terminals are sent；

The information for the event that the server is sent according to the multiple terminal obtains the information of real ones and the letter of pseudo-base station Breath.

2. according to the method described in claim 1, it is characterized in that, the method further includes：

The server is determined and is accessed in the multiple terminal according to the information of the information and the pseudo-base station of the real ones The target terminal of pseudo-base station；

The server sends the instruction information of pseudo-base station to the target terminal.

3. method according to claim 1 or 2, which is characterized in that the server is sent according to the multiple terminal The information of event obtains the information of real ones, including：

The base station accessed when the event occurs for the location information for the terminal that the server is sent according to the multiple terminal Information, the time that the event occurs and preset position computational accuracy, determine about longitude, latitude, the first primordium on date The information stood；

The server from it is described about longitude, latitude, the initial base station on date information in, delete in the continuous date and go out occurrence Information of the number less than the initial base station of first threshold；

The server removes the date, and the information of other initial base stations merges, and obtains the screening about longitude, latitude The information of base station；

The server determines that the information of the screening base station is the information of real ones.

4. method according to claim 1 or 2, which is characterized in that the server is sent according to the multiple terminal The information of event obtains the information of pseudo-base station, including：

The base station accessed when the event occurs for the location information for the terminal that the server is sent according to the multiple terminal Information, the time that the event occurs determine location information and second time of the target BS in the terminal of first time access The location information of the terminal of access, the target BS are that any base station accessed when the event occurs for the multiple terminal；

The server, in the location information of the terminal of first time access, calculates the terminal of access according to the target BS The first center, the location information of the terminal accessed in the second time according to the target BS calculates the end of access Second center at end；

The server determines that first center is the first position of the target BS, determines second centre bit It is set to the second position of the target BS；

If the absolute value of difference is more than second threshold between the first position and the second position, the server determines The information of the target BS is the information of pseudo-base station.

5. according to any methods of claim 1-4, which is characterized in that the method further includes：

The suspicious probability of real ones and the pseudo-base station described in the server-tag；

The server receives the feedback information that first object terminal is sent, and the feedback information is input by user to described the The base station that one target terminal occurs to access when the event is whether the instruction information of pseudo-base station accurately enters information；

The server obtains the pseudo-base station according to the feedback information, the corresponding suspicious probability for changing the pseudo-base station Change suspicious probability.

6. a kind of reminding method, which is characterized in that including：

Terminal detecting event occurs and acquires the information of the event；

The terminal to server sends the information of the event；

The terminal receives the instruction information for the pseudo-base station that the server is sent, and the instruction information of the pseudo-base station is the clothes Device be engaged according to the acquisition of information of the event；

The instruction information of pseudo-base station described in the terminal notifying.

7. according to the method described in claim 6, it is characterized in that, the method further includes：

The terminal receives feedback information, and the feedback information accesses when being the generation event input by user to the terminal Base station be whether the instruction information of pseudo-base station accurately enters information；

The terminal sends the feedback information to the server, and the feedback information is for the server to the pseudo- base The suspicious probability stood is modified.

8. the method described according to claim 6 or 7, which is characterized in that the instruction information of pseudo-base station described in the terminal notifying, Including：

The instruction information that the terminal passes through pseudo-base station described in text importing.

9. the method described according to claim 6 or 7, which is characterized in that the instruction information of pseudo-base station described in the terminal notifying, Including：

The terminal shows the instruction information of the pseudo-base station by risk identification.

10. the method described according to claim 6 or 7, which is characterized in that the instruction of pseudo-base station described in the terminal notifying is believed Breath, including：

The instruction information that the terminal passes through pseudo-base station described in voice prompt.

11. a kind of server, which is characterized in that including：

Receiving module, the information for receiving the event that multiple terminals are sent；

Acquisition module, the information of the event for being sent according to the multiple terminal, obtains the information and pseudo-base station of real ones Information.

12. server according to claim 11, which is characterized in that the server further includes：

Determining module is used for the information of the information and the pseudo-base station according to the real ones, determines in the multiple terminal Access the target terminal of pseudo-base station；

Sending module, the instruction information for sending pseudo-base station to the target terminal.

13. server according to claim 11 or 12, which is characterized in that the acquisition module is specifically used for：

The location information of the terminal sent according to the multiple terminal, occurs the information that the base station accessed when the event occurs The time of the event and preset position computational accuracy determine the information about longitude, latitude, the initial base station on date；

From it is described about longitude, latitude, the initial base station on date information in, delete in the continuous date occurrence number and be less than first The information of the initial base station of threshold value；

Remove the date, the information of other initial base stations merges, and obtains the letter of the screening base station about longitude, latitude Breath；

Determine that the information of the screening base station is the information of real ones.

14. server according to claim 11 or 12, which is characterized in that the acquisition module is specifically additionally operable to：

The location information of the terminal sent according to the multiple terminal, occurs the information that the base station accessed when the event occurs The time of the event determines the terminal that target BS is accessed in the location information of the terminal of first time access and the second time Location information, the target BS be the multiple terminal any base station accessed when the event occurs；

According to the target BS in the location information of the terminal of first time access, the first center of the terminal of access is calculated Position, the location information of the terminal accessed in the second time according to the target BS, in calculate the terminal of access second Heart position；

It determines that first center is the first position of the target BS, determines that second center is the mesh Mark the second position of base station；

If the absolute value of difference is more than second threshold between the first position and the second position, the acquisition module is true The information of the fixed target BS is the information of pseudo-base station.

15. according to any servers of claim 11-14, which is characterized in that the server further includes：

Mark module, the suspicious probability for marking the real ones and the pseudo-base station；

The receiving module is additionally operable to receive the feedback information that first object terminal is sent, and the feedback information is user's input The base station accessed when the event occurs to the first object terminal be whether the instruction information of pseudo-base station accurately enters Information；

Modified module, for according to the feedback information, the corresponding suspicious probability for changing the pseudo-base station to obtain the pseudo-base station The suspicious probability of modification.

16. a kind of terminal, which is characterized in that including：

The information of the event occurs and is acquired for detecting event for acquisition module；

Sending module, the information for sending the event to server；

Receiving module, the instruction information for receiving the pseudo-base station that the server is sent, the instruction information of the pseudo-base station are The server is according to the acquisition of information of the event；

Reminding module, the instruction information for prompting the pseudo-base station.

17. terminal according to claim 16, which is characterized in that

The receiving module is additionally operable to receive feedback information, and the feedback information is input by user to terminal generation institute State whether the instruction information that the base station accessed when event is pseudo-base station accurately enters information；

The sending module is additionally operable to send the feedback information to the server, and the feedback information is used for the service Device modifies to the suspicious probability of the pseudo-base station.

18. terminal according to claim 16 or 17, which is characterized in that

The reminding module is specifically used for the instruction information by pseudo-base station described in text importing.

19. terminal according to claim 16 or 17, which is characterized in that

The reminding module, specifically for showing the instruction information of the pseudo-base station by risk identification.

20. terminal according to claim 16 or 17, which is characterized in that

The reminding module is specifically used for the instruction information by pseudo-base station described in voice prompt.

21. a kind of server, which is characterized in that including：

Transceiver, processor, memory and bus, the transceiver, the processor and the memory pass through the bus Connection；

The memory, for storing operational order；

The transceiver, the information for receiving the event that multiple terminals are sent；

The processor, according to the information for the event that the multiple terminal is sent, obtains true for calling the operational order The information of base station and the information of pseudo-base station.

22. server according to claim 21, which is characterized in that

The processor is additionally operable to the information of the information and the pseudo-base station according to the real ones, determines the multiple end The target terminal of pseudo-base station is accessed in end；

The transceiver is additionally operable to send the instruction information of pseudo-base station to the target terminal.

23. the server according to claim 21 or 22, which is characterized in that the processor is specifically used for executing following step Suddenly：

The location information of the terminal sent according to the multiple terminal, occurs the information that the base station accessed when the event occurs The time of the event and preset position computational accuracy determine the information about longitude, latitude, the initial base station on date；

From it is described about longitude, latitude, the initial base station on date information in, delete in the continuous date occurrence number and be less than first The information of the initial base station of threshold value；

Remove the date, the information of other initial base stations merges, and obtains the letter of the screening base station about longitude, latitude Breath；

Determine that the information of the screening base station is the information of real ones.

24. the server according to claim 21 or 22, which is characterized in that the processor is specifically used for executing following step Suddenly：

The location information of the terminal sent according to the multiple terminal, occurs the information that the base station accessed when the event occurs The time of the event determines the terminal that target BS is accessed in the location information of the terminal of first time access and the second time Location information, the target BS be the multiple terminal any base station accessed when the event occurs；

According to the target BS in the location information of the terminal of first time access, the first center of the terminal of access is calculated Position, the location information of the terminal accessed in the second time according to the target BS, in calculate the terminal of access second Heart position；

It determines that first center is the first position of the target BS, determines that second center is the mesh Mark the second position of base station；

If the absolute value of difference is more than second threshold between the first position and the second position, the processor determines The information of the target BS is the information of pseudo-base station.

25. according to any servers of claim 21-24, which is characterized in that the processor is additionally operable to execute following Step：

Mark the real ones and the suspicious probability of the pseudo-base station；

According to the feedback information, the suspicious probability for changing the pseudo-base station is corresponded to, the modification for obtaining the pseudo-base station is suspicious general Rate；

The transceiver is additionally operable to execute following steps：

The feedback information that first object terminal is sent is received, the feedback information is input by user to the first object terminal The base station for occurring to access when the event is whether the instruction information of pseudo-base station accurately enters information.

26. a kind of terminal, which is characterized in that including：

Processor, communication interface, memory, output unit and bus, the processor, the communication interface, the output are single It is first to be connected by the bus with the memory；

The memory, for storing operational order；

The processor, for calling the operational order, detecting event to occur and acquire the information of the event；

The communication interface, the information for sending the event to server；Receive the pseudo-base station that the server is sent Indicate information, the instruction information of the pseudo-base station is acquisition of information of the server according to the event；

The output unit, the instruction information for prompting the pseudo-base station.

27. terminal according to claim 26, which is characterized in that the terminal further includes input unit,

The input unit is additionally operable to receive feedback information, and the feedback information is input by user to terminal generation institute State whether the instruction information that the base station accessed when event is pseudo-base station accurately enters information；

The communication interface is additionally operable to send the feedback information to the server, and the feedback information is used for the service Device modifies to the suspicious probability of the pseudo-base station.

28. the terminal according to claim 26 or 27, which is characterized in that the output unit includes display unit,

The display unit, for the instruction information by pseudo-base station described in text importing.

29. the terminal according to claim 26 or 27, which is characterized in that the output unit includes display unit,

The display unit, the instruction information for showing the pseudo-base station by risk identification.

30. the terminal according to claim 26 or 27, which is characterized in that the output unit includes voicefrequency circuit,

The voicefrequency circuit, for the instruction information by pseudo-base station described in voice prompt.

31. a kind of computer readable storage medium, including instruction, when run on a computer so that computer executes such as Method described in claim 1-17 any one.

32. a kind of computer program product including instruction, when run on a computer so that computer executes such as right It is required that the method described in 1-17 any one.