CN119421185A - Terminal communication security management and control method and system in multi-network scenarios - Google Patents

Abstract

The present invention relates to the technical field of network security, and provides a terminal communication security management and control method and system in a multi-network scenario, which monitors the respective running attribute information of all application programs under the terminal, thereby determining the external communication process of each application program, and generating a corresponding number of external communication messages; dividing all external communication messages into a number of message clusters and distributing them to corresponding communication channels; searching and identifying all available networks that the terminal can connect to, tracing back and identifying each available network, obtaining link gateway feature information of each available network, thereby determining the message transmission security attribute information of each available network, selecting a matching network for a communication channel that currently needs to connect to the network, and automatically changing the network connection state of the communication channel that currently needs to connect to the network, thereby ensuring that each communication channel can obtain equal network connection authority, making full use of the data transmission advantages of different networks, and improving the external communication security and reliability of the terminal.

Description

Terminal communication security control method and system under multi-network scene

Technical Field

The invention relates to the technical field of network security, in particular to a terminal communication security control method and system under a multi-network scene.

Background

In order to avoid data transmission crosstalk, existing terminals such as smart phones and the like only allow connection with a single network at the same time, so that all messages of the terminals can only be sent and transmitted through a single link in the single network in the working process. When a large number of application programs need to interact with the outside of the message, all the messages can be arranged according to the corresponding rule to generate the corresponding message queue, and then all the messages in the message queue are sequentially transmitted one by one, so that the time consumption for transmitting the message can be increased, and once the network link which is accessed by the terminal currently fails, the message transmission of the message queue can be interrupted, so that the message communication time cost of the terminal is increased, the task processing progress of the application program in the terminal can be delayed, and the requirement of the terminal for efficiently and accurately processing the task can not be met. At present, the conversion of stable and efficient transmission of messages is required to be carried out on a terminal in a multi-network scene, so that the terminal can fully utilize the data transmission advantages of different networks, and the external communication safety and reliability of the terminal are improved to the greatest extent.

Disclosure of Invention

Aiming at the defects existing in the prior art, the invention provides a terminal communication safety management and control method and a system under a multi-network scene, which monitor the respective operation attribute information of all application programs of a terminal, so as to determine the external communication process of each application program, generate a plurality of corresponding external communication messages, timely and directionally process the external communication requirements of different application programs, divide all the external communication messages into a plurality of message clusters and distribute the message clusters to the corresponding communication channels, realize the differentiated transmission of the different message clusters, ensure that each message cluster can acquire the optimal transmission processing, search all available networks which can be connected with an identification terminal, trace and identify each available network to acquire the link gateway characteristic information of each available network, determine the information of the information transmission safety attribute of each available network, accurately determine the operation safety of the available network under different message transmission scenes, select a matched network for the communication channels of the external network which are required to be connected currently, automatically change the network connection state of the communication channels of the external network which is required to be connected currently, ensure that each communication channel can acquire the connection advantages of the network, and the reliability of the external network is improved, and the safety of the communication terminal is fully utilized.

The invention provides a terminal communication security control method under a multi-network scene, which comprises the following steps:

Step S1, monitoring all application programs subordinate to a terminal to obtain respective operation attribute information of all application programs, determining respective opposite-to-external communication processes of all application programs based on the operation attribute information, and generating a plurality of opposite-to-external communication messages corresponding to all application programs;

Step 2, dividing all external communication messages into a plurality of message clusters based on message attribute information of all external communication messages, and respectively distributing all message clusters to corresponding communication channels based on working states of all communication channels subordinate to the terminal;

Step S3, searching multi-network signals of the environment where the terminal is located, identifying all available networks to which the terminal can be connected, respectively carrying out retrospective identification on all available networks to obtain respective link gateway characteristic information of all available networks;

step S4, carrying out message receiving state identification on all communication channels, determining the network connection sequence of all communication channels, selecting a matched network for the communication channel needing to be externally connected to the network at present based on the message transmission safety attribute information, and carrying out network connection state automatic change on the communication channel needing to be externally connected to the network at present based on the message transmission attribute information of the communication channel needing to be externally connected to the network at present.

In one embodiment of the disclosure, in the step S1, all application programs subordinate to the terminal are monitored to obtain respective operation attribute information of all application programs, and respective outbound communication processes of all application programs are determined based on the operation attribute information, so as to generate a plurality of outbound communication messages corresponding to the application programs, including:

Based on port addresses of all application programs in a foreground starting state, monitoring all application programs to obtain respective task processing process attribute information of all application programs, wherein the task processing process attribute information comprises all process attribute information which needs to be executed by the application programs in a task processing process;

Determining an execution data packet and execution time of an external communication process of the application program based on the task processing process attribute information; and generating a plurality of pairs of external communication messages corresponding to the application program based on the execution data packet and the execution time.

In one embodiment of the disclosure, in the step S2, all external communication messages are divided into a plurality of message clusters based on message attribute information of all external communication messages, and all message clusters are respectively allocated to corresponding communication channels based on working states of all communication channels subordinate to the terminal, including:

The method comprises the steps of carrying out sending target terminal identification on all external communication messages to obtain the identity attribute information of each sending target terminal of all the external communication messages;

And comparing the communication bandwidths respectively allocated to all the communication channels with the maximum message data quantity of all the message clusters, and respectively allocating all the message clusters to the corresponding communication channels.

In one embodiment of the disclosure, in the step S3, a multi-network signal search is performed on an environment where the terminal is located, all available networks to which the terminal can be connected are identified, each of the available networks is respectively identified in a trace-back manner, so as to obtain respective link gateway characteristic information of each of the available networks, and based on the link gateway characteristic information, message transmission security attribute information of the available networks is determined, including:

the method comprises the steps of carrying out multi-network signal search on an environment where the terminal is located to obtain signal strength change information of all network signals existing in the environment within a preset time interval, determining respective signal stability of all networks existing in the environment based on the signal strength change information, and identifying all available networks which the terminal can be connected to based on the signal stability;

The method comprises the steps of respectively carrying out link gateway tracing identification on each available network to obtain position information of all gateways contained in all links of each available network, calling and analyzing respective historical message transmission records of all gateways based on the position information of all the gateways to obtain respective message transmission packet loss occurrence attribute information of all the gateways in a historical message transmission process, and determining message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information to serve as the message transmission safety attribute information, wherein the message transmission integrity comprises message transmission integrity corresponding to the message transmitted to each target terminal through the available network.

In one embodiment of the present disclosure, in the step S4, a message receiving status recognition is performed on all communication channels, and a network connection order of all communication channels is determined, a matched network is selected for a communication channel currently requiring an external connection network based on the message transmission security attribute information, and a network connection status automatic change is performed on a communication channel currently requiring an external connection network based on a message sending attribute information of a communication channel currently requiring an external connection network, including:

The method comprises the steps of carrying out message data quantity receiving state identification on each communication channel, predicting the occurrence time when the allocated message data quantity of each communication channel reaches the upper limit of self allowable received data quantity, and determining the network connection sequence of all communication channels based on the sequence from early to late of the occurrence time corresponding to all communication channels;

And selecting a matched network for the communication channel of the external connection network which is required to be transmitted currently based on the message transmission integrity of the message transmitted to the message transmission corresponding to each target terminal by the available network contained in the message transmission safety attribute information and the target terminal to which the message is required to be transmitted by the communication channel of the external connection network, and automatically changing the association of the network connection state time length of the communication channel of the external connection network which is required to be connected currently based on the predicted time consumption length of the message transmission of the communication channel of the external connection network which is required to be connected currently.

The invention also provides a terminal communication safety management and control system under the multi-network scene, which comprises:

the terminal monitoring module is used for monitoring all application programs subordinate to the terminal to obtain the respective running attribute information of all the application programs;

The external communication message generating module is used for determining respective external communication processes of all application programs based on the operation attribute information so as to generate a plurality of external communication messages corresponding to all application programs;

the message cluster dividing module is used for dividing all external communication messages into a plurality of message clusters based on the message attribute information of all external communication messages;

the message cluster distribution module is used for respectively distributing all message clusters to corresponding communication channels based on the working states of all communication channels subordinate to the terminal;

The available network identification module is used for searching the multi-network signal of the environment where the terminal is located and identifying all available networks to which the terminal can be connected;

The message transmission security attribute determining module is used for respectively carrying out traceability identification on all available networks to obtain respective link gateway characteristic information of all the available networks;

The network connection sequence determining module is used for identifying the message receiving state of all the communication channels and determining the network connection sequence of all the communication channels;

the network connection execution and change module is used for selecting a matched network for the communication channel of the current external connection network based on the information transmission safety attribute information, and automatically changing the network connection state of the communication channel of the current external connection network based on the information transmission attribute information of the communication channel of the current external connection network.

In an embodiment of the disclosure, the terminal monitoring module is configured to monitor all application programs subordinate to the terminal to obtain respective running attribute information of all application programs, where the running attribute information includes:

Based on port addresses of all application programs in a foreground starting state, monitoring all application programs to obtain respective task processing process attribute information of all application programs, wherein the task processing process attribute information comprises all process attribute information which needs to be executed by the application programs in a task processing process;

The external communication message generating module is configured to determine respective external communication processes of all application programs based on the operation attribute information, so as to generate a plurality of external communication messages corresponding to all application programs, where the generating module includes:

Determining an execution data packet and execution time of an external communication process of the application program based on the task processing process attribute information; and generating a plurality of pairs of external communication messages corresponding to the application program based on the execution data packet and the execution time.

In one embodiment of the disclosure, the message cluster dividing module is configured to divide all external communication messages into a plurality of message clusters based on message attribute information of all external communication messages, and includes:

The method comprises the steps of carrying out sending target terminal identification on all external communication messages to obtain the identity attribute information of each sending target terminal of all the external communication messages;

the message cluster distribution module is configured to distribute all message clusters to corresponding communication channels based on working states of all communication channels subordinate to the terminal, where the message cluster distribution module includes:

And comparing the communication bandwidths respectively allocated to all the communication channels with the maximum message data quantity of all the message clusters, and respectively allocating all the message clusters to the corresponding communication channels.

In an embodiment of the disclosure, the available network identifying module is configured to perform multi-network signal searching for an environment where the terminal is located, identify all available networks to which the terminal can connect, and include:

the method comprises the steps of carrying out multi-network signal search on an environment where the terminal is located to obtain signal strength change information of all network signals existing in the environment within a preset time interval, determining respective signal stability of all networks existing in the environment based on the signal strength change information, and identifying all available networks which the terminal can be connected to based on the signal stability;

the message transmission security attribute determining module is used for respectively tracing and identifying all available networks to obtain respective link gateway characteristic information of all the available networks, and determining the message transmission security attribute information of the available networks based on the link gateway characteristic information, and comprises the following steps:

The method comprises the steps of respectively carrying out link gateway tracing identification on each available network to obtain position information of all gateways contained in all links of each available network, calling and analyzing respective historical message transmission records of all gateways based on the position information of all the gateways to obtain respective message transmission packet loss occurrence attribute information of all the gateways in a historical message transmission process, and determining message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information to serve as the message transmission safety attribute information, wherein the message transmission integrity comprises message transmission integrity corresponding to the message transmitted to each target terminal through the available network.

In one embodiment of the disclosure, the network connection sequence determining module is configured to identify a message receiving state of all communication channels, determine a network connection sequence of all communication channels, and includes:

The method comprises the steps of carrying out message data quantity receiving state identification on each communication channel, predicting the occurrence time when the allocated message data quantity of each communication channel reaches the upper limit of self allowable received data quantity, and determining the network connection sequence of all communication channels based on the sequence from early to late of the occurrence time corresponding to all communication channels;

the network connection execution and change module is used for selecting a matched network for the communication channel of the current external connection network based on the information transmission safety attribute information, and automatically changing the network connection state of the communication channel of the current external connection network based on the information transmission attribute information of the communication channel of the current external connection network, and comprises the following steps:

And selecting a matched network for the communication channel of the external connection network which is required to be transmitted currently based on the message transmission integrity of the message transmitted to the message transmission corresponding to each target terminal by the available network contained in the message transmission safety attribute information and the target terminal to which the message is required to be transmitted by the communication channel of the external connection network, and automatically changing the association of the network connection state time length of the communication channel of the external connection network which is required to be connected currently based on the predicted time consumption length of the message transmission of the communication channel of the external connection network which is required to be connected currently.

Compared with the prior art, the terminal communication security management and control method and system under the multi-network scene monitor the respective operation attribute information of all application programs of the terminal, so as to determine the opposite external communication process of each application program, generate a plurality of corresponding opposite external communication messages, timely and directionally process the external communication demands of different application programs, divide all the opposite external communication messages into a plurality of message clusters and distribute the message clusters to corresponding communication channels, realize differentiated transmission of different message clusters, ensure that each message cluster can obtain optimal transmission processing, search all available networks which can be connected with an identification terminal, retrospectively identify each available network to obtain link gateway characteristic information of each available network, determine the message transmission security attribute information of each available network, accurately determine the operation security of the available network under different message transmission scenes, select a matched network for the communication channels of the current external connection network, automatically change the network connection state of the current communication channels of the external connection network, ensure that each communication channel can obtain equal network connection, fully utilize the advantages of different communication channels and improve the security of the external communication network.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims thereof as well as the appended drawings.

The technical scheme of the invention is further described in detail through the drawings and the embodiments.

Drawings

In order to more clearly illustrate the embodiments of the invention or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the invention, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic flow chart of a terminal communication security control method in a multi-network scenario provided by the invention;

Fig. 2 is a schematic diagram of a framework of a terminal communication security management and control system in a multi-network scenario provided by the present invention.

Detailed Description

The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

Referring to fig. 1, a flow chart of a terminal communication security management and control method in a multi-network scenario according to an embodiment of the present invention is shown. The terminal communication security control method under the multi-network scene comprises the following steps:

step S1, monitoring all application programs subordinate to a terminal to obtain respective operation attribute information of all application programs, determining respective opposite-to-external communication processes of all application programs based on the operation attribute information, and generating a plurality of opposite-to-external communication messages corresponding to all application programs;

Step 2, dividing all external communication messages into a plurality of message clusters based on message attribute information of all external communication messages, and respectively distributing all message clusters to corresponding communication channels based on working states of all communication channels subordinate to the terminal;

step S3, searching multi-network signals in the environment of the terminal, identifying all available networks to which the terminal can be connected, respectively carrying out retrospective identification on all available networks to obtain respective link gateway characteristic information of all available networks;

Step S4, carrying out message receiving state identification on all communication channels, determining the network connection sequence of all communication channels, selecting a matched network for the communication channel needing to be externally connected to the network at present based on the message transmission safety attribute information, and carrying out network connection state automatic change on the communication channel needing to be externally connected to the network at present based on the message transmission attribute information of the communication channel needing to be externally connected to the network at present.

The terminal communication security management and control method under the multi-network scene monitors the respective operation attribute information of all application programs of the terminal, so as to determine the opposite external communication process of each application program, generate a plurality of corresponding opposite external communication messages, timely orient and process the external communication demands of different application programs, divide all the opposite external communication messages into a plurality of message clusters and distribute the message clusters to the corresponding communication channels, realize differentiated transmission of different message clusters, ensure that each message cluster can acquire optimal transmission processing, search all available networks which can be connected with the identification terminal, retroactively identify each available network to acquire link gateway characteristic information of each available network, so as to determine the information transmission security attribute information of each available network, accurately determine the operation security of the available network under different message transmission scenes, so as to select a matched network for the communication channels of the current external connection network, automatically change the network connection state of the current communication channels of the current external connection network, ensure that each communication channel can acquire equal network connection rights, fully utilize the transmission advantages of different networks, and improve the security and reliability of the terminal.

Preferably, in the step S1, all application programs subordinate to the terminal are monitored to obtain respective operation attribute information of all application programs, and respective outbound communication processes of all application programs are determined based on the operation attribute information, so as to generate a plurality of outbound communication messages corresponding to all application programs, including:

Based on port addresses of all application programs in the foreground starting state, monitoring all application programs to obtain respective task processing process attribute information of all application programs, wherein the task processing process attribute information comprises all process attribute information which needs to be executed by the application programs in a task processing process;

And generating a plurality of external communication messages corresponding to the application program based on the execution data packet and the execution time.

In the above technical solution, applications with different types and functions are installed in terminals such as a smart phone or a tablet computer, and each application may need to interact with other external terminals in the running process, and at this time, external communication messages from the applications need to be sent and transmitted. In order to ensure that all application programs in the terminal can acquire timely transmission and transmission of external communication messages, the task processing process of each application program in the running process needs to be identified, specifically, the program running log of the terminal is analyzed to obtain all application programs in a foreground starting state, the application programs in the corresponding task processing state are identified in a calibrating mode, then the application programs are monitored by taking the port addresses of the application programs in the foreground starting state as references to obtain the task processing process attribute information of the application programs, and therefore all process state attributes of the application programs, which need to be executed in the task processing process, of the application programs are characterized, and the external communication requirements in the operation process of all subordinate processes of the application programs can be identified accurately. And then, based on the execution data packet and the execution time of the external communication process of the application program, generating a plurality of pairs of external communication messages corresponding to the application program in the running process, thus being capable of timely and accurately generating the external communication messages required by the application program and improving the running efficiency and the reliability of the application program.

Preferably, in the step S2, all the external communication messages are divided into a plurality of message clusters based on the message attribute information of all the external communication messages, and all the message clusters are respectively distributed to corresponding communication channels based on the working states of all the communication channels subordinate to the terminal, including:

The method comprises the steps of carrying out transmission target terminal identification on all external communication messages to obtain the identity attribute information of each transmission target terminal of all the external communication messages;

The method comprises the steps of identifying the working state of all communication channels subordinate to the terminal to obtain the communication bandwidths respectively allocated to all communication channels, comparing the communication bandwidths respectively allocated to all communication channels with the maximum message data volume respectively allocated to all message clusters, and respectively allocating all message clusters to the corresponding communication channels.

In the above technical solution, different outbound communication messages generated by an application program in a task processing process may need to be sent and transmitted to different external target terminals, so that network links through which different outbound communication messages pass in a sending and transmitting process are different, in order to facilitate centralized and unified sending and transmitting of the outbound communication messages to be sent and transmitted to the same target terminal, sending target terminal identification is performed on all outbound communication messages, identity attribute information of respective sending target terminals of all outbound communication messages is obtained, and all outbound communication messages to be sent to the same target terminal are divided into the same message cluster, so that all outbound communication messages subordinate to the same message cluster need to be sent and transmitted to the same external target terminal, and all outbound communication messages subordinate to the same message cluster can be sent and transmitted through the same network link. And identifying the working state of all communication channels subordinate to the terminal to obtain the communication bandwidth allocated to each communication channel, namely determining the communication bandwidth value allowed to be used by each communication channel, comparing the communication bandwidth allocated to each communication channel with the maximum message data quantity of each message cluster, and respectively allocating the message clusters to the corresponding communication channels, so that the message clusters with larger message data quantity can be allocated to the communication channels with larger communication bandwidth, ensuring that all the message clusters can obtain the communication channels matched with the data quantity of the message clusters, improving the transmission efficiency of the message clusters, and avoiding the situation of transmission blockage of the message clusters.

Preferably, in the step S3, a multi-network signal search is performed on an environment where the terminal is located, all available networks to which the terminal can be connected are identified, each of all available networks is respectively identified in a trace-back manner, so as to obtain respective link gateway characteristic information of each of all available networks, and based on the link gateway characteristic information, message transmission security attribute information of the available networks is determined, including:

The method comprises the steps of carrying out multi-network signal search on an environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval, determining respective signal stability of all networks in the environment based on the signal strength change information, and identifying all available networks to which the terminal can be connected based on the signal stability;

The method comprises the steps of respectively carrying out link gateway tracing identification on each available network to obtain position information of all gateways contained in all links of each available network, retrieving and analyzing respective historical message transmission records of all gateways based on the position information of all the gateways to obtain respective message transmission packet loss occurrence attribute information of all the gateways in a historical message transmission process, and determining message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information to serve as message transmission safety attribute information, wherein the message transmission integrity comprises message transmission integrity corresponding to a message transmitted to each target terminal through the available network.

In the above technical solution, the environment space where the terminal is located may have a plurality of different types of network signals, where the different network signals are correspondingly connected to different types of networks, so that in order to enable the terminal to obtain connection rights for different networks, the environment where the terminal is located is searched for multiple network signals, signal strength variation information of all network signals existing in the environment within a preset time interval is obtained, and based on the signal strength variation information, the signal average strength and the signal strength drift rate of all networks existing in the environment are determined, so that the signal stability of all networks is determined, generally, the signal average strength is larger and/or the signal strength drift rate is smaller, and the corresponding signal stability is higher. And comparing the signal stability of all the networks with a preset stability threshold, and determining the corresponding network as an available network to which the terminal can be connected when the signal stability exceeds the preset stability threshold. And respectively carrying out link gateway tracing identification on each available network to obtain the position information of all gateways contained in all links subordinate to each available network, so as to call and analyze the respective historical message transmission records of all the gateways to obtain the respective message transmission packet loss occurrence attribute information of all the gateways in the historical message transmission process, wherein the message transmission packet loss occurrence attribute information can comprise, but is not limited to, the message transmission packet loss rate and/or the message transmission packet loss occurrence frequency of each gateway in the historical message transmission process. And determining the message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information, which belongs to a conventional technical means in the field, and is not described in detail herein, so that a reliable basis can be provided for the subsequent realization of the matching connection of the communication channel and the network.

Preferably, in the step S4, the message receiving status recognition is performed on all the communication channels, the network connection sequence of all the communication channels is determined, a matched network is selected for the communication channel requiring the external connection network at present based on the message transmission security attribute information, and the network connection status is automatically changed for the communication channel requiring the external connection network at present based on the message sending attribute information of the communication channel requiring the external connection network at present, including:

The method comprises the steps of carrying out message data quantity receiving state identification on each communication channel, predicting the occurrence time when the allocated message data quantity of each communication channel reaches the upper limit of self allowable received data quantity, and determining the network connection sequence of all communication channels based on the sequence from early to late of the occurrence time corresponding to all communication channels;

And based on the message transmission safety attribute information, selecting a matched network for the communication channel of the current external connection network, and based on the predicted time consumption length for message transmission completion of the communication channel of the current external connection network, automatically changing the network connection state time length association of the communication channel of the current external connection network.

In the above technical solution, the message data volume receiving state identification is performed on each communication channel, the occurrence time when the message data volume allocated to each communication channel reaches the upper limit of the self allowable receiving data volume is predicted, when the message data volume allocated to the communication channel reaches the upper limit of the self allowable receiving data volume, it indicates that the communication channel has reached the message receiving saturation state, and at this time, the message received by the communication channel needs to be sent and transmitted to the outside. And determining the network connection sequence of all the communication channels based on the sequence from early to late of the corresponding occurrence time of all the communication channels, so as to ensure that all the communication channels can send and transmit the received messages to the outside in time equally. And the available network which is contained based on the information transmission safety attribute information transmits the information to the corresponding information transmission integrity of each target terminal and the target terminal to which the information needs to be transmitted by the communication channel of the external connection network, so that the matched network is selected for the communication channel of the external connection network which is needed at present, and therefore, each communication channel can obtain equal network connection authority, and the data transmission advantages of different networks are fully utilized. And the predicted time-consuming length is finished based on the message sending of the communication channel needing to be externally connected with the network, and the network connection state time duration association of the communication channel needing to be externally connected with the network is automatically changed, namely if the actual time duration of the network connection of the communication channel needing to be externally connected with the network exceeds the corresponding predicted time-consuming length, the connection between the communication channel and the corresponding network is automatically interrupted, so that the corresponding network can be connected with other communication channels, and the problem that the other communication channels cannot equally acquire the connection authority with the corresponding network due to the fact that one communication channel occupies the same network for a long time is avoided.

Referring to fig. 2, a schematic diagram of a framework of a terminal communication security management and control system in a multi-network scenario according to an embodiment of the present invention is provided. The terminal communication safety management and control system under the multi-network scene comprises:

the terminal monitoring module is used for monitoring all application programs subordinate to the terminal to obtain the respective running attribute information of all the application programs;

The external communication message generation module is used for determining respective external communication processes of all application programs based on the operation attribute information so as to generate a plurality of external communication messages corresponding to all application programs;

the message cluster dividing module is used for dividing all external communication messages into a plurality of message clusters based on the message attribute information of all external communication messages;

The message cluster distribution module is used for respectively distributing all message clusters to corresponding communication channels based on the working states of all communication channels subordinate to the terminal;

the available network identification module is used for searching the multi-network signal of the environment where the terminal is located and identifying all available networks to which the terminal can be connected;

The message transmission security attribute determining module is used for respectively carrying out traceability identification on all available networks to obtain respective link gateway characteristic information of all the available networks;

The network connection sequence determining module is used for identifying the message receiving state of all the communication channels and determining the network connection sequence of all the communication channels;

the network connection execution and change module is used for selecting a matched network for the communication channel of the current external connection network based on the information transmission safety attribute information, and automatically changing the network connection state of the communication channel of the current external connection network based on the information transmission attribute information of the communication channel of the current external connection network.

The terminal communication safety management and control system under the multi-network scene monitors the respective operation attribute information of all application programs of the terminal, so as to determine the opposite external communication process of each application program, generate a plurality of corresponding opposite external communication messages, timely orient and process the external communication demands of different application programs, divide all the opposite external communication messages into a plurality of message clusters and distribute the message clusters to the corresponding communication channels, realize differentiated transmission of different message clusters, ensure that each message cluster can acquire optimal transmission processing, search all available networks which can be connected with the identification terminal, retroactively identify each available network to acquire link gateway characteristic information of each available network, so as to determine the information transmission safety attribute information of each available network, accurately determine the operation safety of the available network under different message transmission scenes, so as to select a matched network for the communication channels of the current external connection network, automatically change the network connection state of the current communication channels of the current external connection network, ensure that each communication channel can acquire equal network connection rights, fully utilize the transmission advantages of different networks, and improve the safety and reliability of the terminal communication.

Preferably, the terminal monitoring module is configured to monitor all application programs subordinate to the terminal to obtain respective running attribute information of all application programs, where the running attribute information includes:

Based on port addresses of all application programs in the foreground starting state, monitoring all application programs to obtain respective task processing process attribute information of all application programs, wherein the task processing process attribute information comprises all process attribute information which needs to be executed by the application programs in a task processing process;

The pair of external communication message generating module is configured to determine respective pair of external communication processes of all application programs based on the operation attribute information, so as to generate a plurality of pairs of external communication messages corresponding to all application programs, where the pair of external communication messages includes:

And generating a plurality of external communication messages corresponding to the application program based on the execution data packet and the execution time.

In the above technical solution, applications with different types and functions are installed in terminals such as a smart phone or a tablet computer, and each application may need to interact with other external terminals in the running process, and at this time, external communication messages from the applications need to be sent and transmitted. In order to ensure that all application programs in the terminal can acquire timely transmission and transmission of external communication messages, the task processing process of each application program in the running process needs to be identified, specifically, the program running log of the terminal is analyzed to obtain all application programs in a foreground starting state, the application programs in the corresponding task processing state are identified in a calibrating mode, then the application programs are monitored by taking the port addresses of the application programs in the foreground starting state as references to obtain the task processing process attribute information of the application programs, and therefore all process state attributes of the application programs, which need to be executed in the task processing process, of the application programs are characterized, and the external communication requirements in the operation process of all subordinate processes of the application programs can be identified accurately. And then, based on the execution data packet and the execution time of the external communication process of the application program, generating a plurality of pairs of external communication messages corresponding to the application program in the running process, thus being capable of timely and accurately generating the external communication messages required by the application program and improving the running efficiency and the reliability of the application program.

Preferably, the message cluster dividing module is configured to divide all external communication messages into a plurality of message clusters based on message attribute information of all external communication messages, including:

The method comprises the steps of carrying out transmission target terminal identification on all external communication messages to obtain the identity attribute information of each transmission target terminal of all the external communication messages;

the message cluster distribution module is configured to distribute all message clusters to corresponding communication channels based on working states of all communication channels subordinate to the terminal, where the message cluster distribution module includes:

The method comprises the steps of identifying the working state of all communication channels subordinate to the terminal to obtain the communication bandwidths respectively allocated to all communication channels, comparing the communication bandwidths respectively allocated to all communication channels with the maximum message data volume respectively allocated to all message clusters, and respectively allocating all message clusters to the corresponding communication channels.

In the above technical solution, different outbound communication messages generated by an application program in a task processing process may need to be sent and transmitted to different external target terminals, so that network links through which different outbound communication messages pass in a sending and transmitting process are different, in order to facilitate centralized and unified sending and transmitting of the outbound communication messages to be sent and transmitted to the same target terminal, sending target terminal identification is performed on all outbound communication messages, identity attribute information of respective sending target terminals of all outbound communication messages is obtained, and all outbound communication messages to be sent to the same target terminal are divided into the same message cluster, so that all outbound communication messages subordinate to the same message cluster need to be sent and transmitted to the same external target terminal, and all outbound communication messages subordinate to the same message cluster can be sent and transmitted through the same network link. And identifying the working state of all communication channels subordinate to the terminal to obtain the communication bandwidth allocated to each communication channel, namely determining the communication bandwidth value allowed to be used by each communication channel, comparing the communication bandwidth allocated to each communication channel with the maximum message data quantity of each message cluster, and respectively allocating the message clusters to the corresponding communication channels, so that the message clusters with larger message data quantity can be allocated to the communication channels with larger communication bandwidth, ensuring that all the message clusters can obtain the communication channels matched with the data quantity of the message clusters, improving the transmission efficiency of the message clusters, and avoiding the situation of transmission blockage of the message clusters.

Preferably, the available network identifying module is configured to perform multi-network signal searching for an environment where the terminal is located, identify all available networks to which the terminal can connect, and include:

The method comprises the steps of carrying out multi-network signal search on an environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval, determining respective signal stability of all networks in the environment based on the signal strength change information, and identifying all available networks to which the terminal can be connected based on the signal stability;

The message transmission security attribute determining module is used for respectively carrying out traceability and identification on all available networks to obtain respective link gateway characteristic information of all the available networks, and determining the message transmission security attribute information of the available networks based on the link gateway characteristic information, and comprises the following steps:

The method comprises the steps of respectively carrying out link gateway tracing identification on each available network to obtain position information of all gateways contained in all links of each available network, retrieving and analyzing respective historical message transmission records of all gateways based on the position information of all the gateways to obtain respective message transmission packet loss occurrence attribute information of all the gateways in a historical message transmission process, and determining message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information to serve as message transmission safety attribute information, wherein the message transmission integrity comprises message transmission integrity corresponding to a message transmitted to each target terminal through the available network.

In the above technical solution, the environment space where the terminal is located may have a plurality of different types of network signals, where the different network signals are correspondingly connected to different types of networks, so that in order to enable the terminal to obtain connection rights for different networks, the environment where the terminal is located is searched for multiple network signals, signal strength variation information of all network signals existing in the environment within a preset time interval is obtained, and based on the signal strength variation information, the signal average strength and the signal strength drift rate of all networks existing in the environment are determined, so that the signal stability of all networks is determined, generally, the signal average strength is larger and/or the signal strength drift rate is smaller, and the corresponding signal stability is higher. And comparing the signal stability of all the networks with a preset stability threshold, and determining the corresponding network as an available network to which the terminal can be connected when the signal stability exceeds the preset stability threshold. And respectively carrying out link gateway tracing identification on each available network to obtain the position information of all gateways contained in all links subordinate to each available network, so as to call and analyze the respective historical message transmission records of all the gateways to obtain the respective message transmission packet loss occurrence attribute information of all the gateways in the historical message transmission process, wherein the message transmission packet loss occurrence attribute information can comprise, but is not limited to, the message transmission packet loss rate and/or the message transmission packet loss occurrence frequency of each gateway in the historical message transmission process. And determining the message transmission integrity of each available network based on the message transmission packet loss occurrence attribute information, which belongs to a conventional technical means in the field, and is not described in detail herein, so that a reliable basis can be provided for the subsequent realization of the matching connection of the communication channel and the network.

Preferably, the network connection sequence determining module is configured to identify a message receiving state of all communication channels, determine a network connection sequence of all communication channels, and include:

The method comprises the steps of carrying out message data quantity receiving state identification on each communication channel, predicting the occurrence time when the allocated message data quantity of each communication channel reaches the upper limit of self allowable received data quantity, and determining the network connection sequence of all communication channels based on the sequence from early to late of the occurrence time corresponding to all communication channels;

The network connection execution and change module is used for selecting a matched network for a communication channel needing to be externally connected with a network at present based on the information transmission safety attribute information, and automatically changing the network connection state of the communication channel needing to be externally connected with the network at present based on the information transmission attribute information of the communication channel needing to be externally connected with the network at present, and comprises the following steps:

And based on the message transmission safety attribute information, selecting a matched network for the communication channel of the current external connection network, and based on the predicted time consumption length for message transmission completion of the communication channel of the current external connection network, automatically changing the network connection state time length association of the communication channel of the current external connection network.

In the above technical solution, the message data volume receiving state identification is performed on each communication channel, the occurrence time when the message data volume allocated to each communication channel reaches the upper limit of the self allowable receiving data volume is predicted, when the message data volume allocated to the communication channel reaches the upper limit of the self allowable receiving data volume, it indicates that the communication channel has reached the message receiving saturation state, and at this time, the message received by the communication channel needs to be sent and transmitted to the outside. And determining the network connection sequence of all the communication channels based on the sequence from early to late of the corresponding occurrence time of all the communication channels, so as to ensure that all the communication channels can send and transmit the received messages to the outside in time equally. And the available network which is contained based on the information transmission safety attribute information transmits the information to the corresponding information transmission integrity of each target terminal and the target terminal to which the information needs to be transmitted by the communication channel of the external connection network, so that the matched network is selected for the communication channel of the external connection network which is needed at present, and therefore, each communication channel can obtain equal network connection authority, and the data transmission advantages of different networks are fully utilized. And the predicted time-consuming length is finished based on the message sending of the communication channel needing to be externally connected with the network, and the network connection state time duration association of the communication channel needing to be externally connected with the network is automatically changed, namely if the actual time duration of the network connection of the communication channel needing to be externally connected with the network exceeds the corresponding predicted time-consuming length, the connection between the communication channel and the corresponding network is automatically interrupted, so that the corresponding network can be connected with other communication channels, and the problem that the other communication channels cannot equally acquire the connection authority with the corresponding network due to the fact that one communication channel occupies the same network for a long time is avoided.

According to the method and the system for managing and controlling the terminal communication safety under the multi-network scene, the running attribute information of all application programs subordinate to the terminal is monitored, the opposite external communication process of each application program is determined, a plurality of corresponding opposite external communication messages are generated, the opposite external communication requirements of different application programs are processed in a timely and directional mode, all the opposite external communication messages are divided into a plurality of message clusters and distributed to corresponding communication channels, differentiated transmission of different message clusters is achieved, optimal transmission processing of each message cluster is guaranteed, all available networks which can be connected with an identification terminal are searched, link gateway characteristic information of each available network is obtained through tracing identification of each available network, information transmission safety attribute information of each available network is determined, operation safety of the available network under different message transmission scenes is accurately determined, the communication channels which are required to be connected with the network at present are selected to be matched, network connection states of the communication channels which are required to be connected with the opposite external network are automatically changed, the communication channels which are required to be connected with the external network can be guaranteed, the advantage of network connection of each communication channel which can be obtained, the reliability of the communication channels is improved, and the reliability of the communication terminal is improved.

It will be apparent to those skilled in the art that various modifications and variations can be made to the present invention without departing from the spirit or scope of the invention. Thus, it is intended that the present invention also include such modifications and alterations insofar as they come within the scope of the appended claims or the equivalents thereof.

Claims (10)

1. A terminal communication security management and control method in a multi-network scenario, characterized in that it comprises the following steps: Step S1, monitoring all applications under the terminal to obtain the operation attribute information of all applications; based on the operation attribute information, determining the external communication processes of all applications, thereby generating a number of external communication messages corresponding to all applications; Step S2, based on the message attribute information of all external communication messages, all external communication messages are divided into a number of message clusters; based on the working status of all communication channels under the terminal, all message clusters are respectively allocated to corresponding communication channels; Step S3, performing a multi-network signal search on the environment where the terminal is located to identify all available networks to which the terminal can connect; performing retrospective identification on all available networks to obtain link gateway feature information of each of the available networks; and determining message transmission security attribute information of the available networks based on the link gateway feature information; Step S4, identifying the message receiving status of all communication channels and determining the network connection order of all communication channels; based on the message transmission security attribute information, selecting a matching network for the communication channel that currently needs to connect to the external network; and based on the message sending attribute information of the communication channel that currently needs to connect to the external network, automatically changing the network connection status of the communication channel that currently needs to connect to the external network. 2. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S1, all applications under the terminal are monitored to obtain the operation attribute information of all applications; based on the operation attribute information, the external communication processes of all applications are determined, thereby generating a number of external communication messages corresponding to all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated. 3. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S2, based on the message attribute information of all external communication messages, all external communication messages are divided into a plurality of message clusters; based on the working status of all communication channels under the terminal, all message clusters are respectively assigned to corresponding communication channels, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively. 4. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S3, a multi-network signal search is performed on the environment where the terminal is located to identify all available networks to which the terminal can connect; all available networks are retroactively identified to obtain link gateway feature information of all available networks; based on the link gateway feature information, message transmission security attribute information of the available networks is determined, including: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network. 5. The terminal communication security management and control method in a multi-network scenario according to claim 1, characterized in that: In the step S4, the message receiving state of all communication channels is identified to determine the network connection order of all communication channels; based on the message transmission security attribute information, a matching network is selected for the communication channel that currently needs to be connected to the network; and based on the message sending attribute information of the communication channel that currently needs to be connected to the network, the network connection state of the communication channel that currently needs to be connected to the network is automatically changed, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it. 6. The terminal communication security management and control system in a multi-network scenario is characterized by including: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications; An external communication message generation module, used to determine the external communication processes of all the applications based on the operation attribute information, thereby generating a number of external communication messages corresponding to all the applications; A message cluster division module, used to divide all external communication messages into several message clusters based on message attribute information of all external communication messages; A message cluster allocation module, used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal; An available network identification module, used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect; A message transmission security attribute determination module is used to retroactively identify all available networks respectively, obtain link gateway characteristic information of all available networks respectively; based on the link gateway characteristic information, determine the message transmission security attribute information of the available networks; A network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to connect to the external network based on the message transmission security attribute information; and automatically change the network connection status of the communication channel that currently needs to connect to the external network based on the message sending attribute information of the communication channel that currently needs to connect to the external network. 7. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The terminal monitoring module is used to monitor all applications under the terminal and obtain the running attribute information of all applications, including: Based on the program running log of the terminal, all applications in the foreground startup state are determined; based on the port addresses of all applications in the foreground startup state, all applications are monitored to obtain the task processing process attribute information of all applications; wherein the task processing process attribute information includes all process attribute information that the application needs to execute during the task processing process; The external communication message generation module is used to determine the external communication processes of all the applications based on the operation attribute information, so as to generate a number of external communication messages corresponding to all the applications, including: Based on the task processing process attribute information, the execution data packet and execution time of the external communication process of the application are determined; based on the execution data packet and the execution time, a plurality of external communication messages corresponding to the application are generated. 8. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The message cluster division module is used to divide all external communication messages into a number of message clusters based on the message attribute information of all external communication messages, including: Identify the sending target terminals of all external communication messages to obtain the identity attribute information of the sending target terminals of all external communication messages; and classify all external communication messages that need to be sent to the same target terminal into the same message cluster based on the identity attribute information; The message cluster allocation module is used to allocate all message clusters to corresponding communication channels based on the working status of all communication channels under the terminal, including: The working status of all communication channels under the terminal is identified to obtain the communication bandwidths allocated to all communication channels respectively; the communication bandwidths allocated to all communication channels respectively are compared with the maximum message data volume of all message clusters respectively, and all message clusters are allocated to corresponding communication channels respectively. 9. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The available network identification module is used to search for multiple network signals in the environment where the terminal is located, and identify all available networks to which the terminal can connect, including: Performing a multi-network signal search in the environment where the terminal is located to obtain signal strength change information of all network signals in the environment within a preset time interval; determining the signal stability of all networks in the environment based on the signal strength change information; and identifying all available networks to which the terminal can connect based on the signal stability; The message transmission security attribute determination module is used to retroactively identify all available networks respectively to obtain link gateway feature information of all available networks; based on the link gateway feature information, determine the message transmission security attribute information of the available networks, including: Perform link gateway tracing and identification on each available network respectively, and obtain the location information of all gateways included in all links under each available network; based on the location information of all gateways, retrieve and analyze the historical message transmission records of all gateways respectively, and obtain the message transmission packet loss occurrence attribute information of all gateways during the historical message transmission process; then, based on the message transmission packet loss occurrence attribute information, determine the message transmission integrity of each available network, and use this as the message transmission security attribute information; wherein, the message transmission integrity includes the message transmission integrity corresponding to the message transmission to each target terminal through the available network. 10. The terminal communication security management and control system in a multi-network scenario according to claim 6, characterized in that: The network connection sequence determination module is used to identify the message receiving status of all communication channels and determine the network connection sequence of all communication channels, including: Identify the message data volume receiving status of each communication channel, and predict the time when the message data volume allocated to each communication channel reaches the upper limit of the data volume allowed to be received by itself; determine the network connection order of all communication channels based on the order of the corresponding occurrence times of all communication channels from early to late; The network connection execution and change module is used to select a matching network for the communication channel that currently needs to be connected to the network based on the message transmission security attribute information; and automatically change the network connection state of the communication channel that currently needs to be connected to the network based on the message sending attribute information of the communication channel that currently needs to be connected to the network, including: Based on the message transmission completeness corresponding to the available network transmitted to each target terminal contained in the message transmission security attribute information and the target terminal to which the communication channel that currently needs to connect to the external network needs to transmit the message, a matching network is selected for the communication channel that currently needs to connect to the external network; and based on the estimated time required to complete the message sending of the communication channel that currently needs to connect to the external network, the network connection status duration of the communication channel that currently needs to connect to the external network is automatically changed in association with it.