APPARATUS, SYSTEM AND METHOD FOR DETECTING ABNORMAL MESSAGE FOR OBTAINING LOCATION INFORMATION BASED ON VOLTE SERVICE IN 4G MOBILE NETWORKS

摘要

Provided are an apparatus, a system, and a method for detecting an abnormal location information acquisition message based on a VoLTE service in a 4G mobile network. The apparatus for detecting an abnormal location information acquisition message comprises: a packet information extracting portion for extracting a first TEID from a header of a GTP-U packet, and extracting a first user terminal identification number from a SIP refer message in a payload of the GTP-U packet; a session information storage portion for storing session information including a second TEID and a second user terminal identification number; a packet analysis portion for detecting a first SIP refer message that the first TEID and the second TEID are mutually the same and the first user terminal identification number and the second user terminal identification number are mutually the same, detecting whether a destination IP of the first SIP refer message is a server bandwidth or not, and detecting whether the first SIP refer message includes a cell ID or not; and a packet processing portion for processing the GTP-U packet in accordance with a first detection policy if the destination IP of the first SIP refer message is not the server bandwidth and the first SIP refer message includes the cell ID.