Mobile Network DPI and Visibility Analysis Platform

The Sino-Telecom Mobile Network DPI and Network Visibility Analysis Platform is deployed in operator mobile network environments, enabling the collection, identification, and parsing of signaling-plane and user-plane information. The system serves as the core supporting platform for network visibility and is one of the key components of the mobile network architecture. 

Mobile Network DPI and Network Visibility Analysis Platforms are positioned by telecom operators as foundational sources of network data. Telecom operator customers typically integrate these platforms with third-party application systems to realize one or more specific functions. The primary application areas include network operations and maintenance, network optimization, information management, and big data operations.

At the same time, the system complies with the relevant requirements of the Ministry of Industry and Information Technology (MIIT) and communications regulatory authorities for information management systems. It manage mobile users’ internet access in the form of logs, enabling functions such as mobile data analysis, online service analysis, key traffic flow direction analysis, and fine-grained control of online services and traffic. These capabilities support regulatory authorities in historical data tracing and data analysis.

The Mobile Network DPI and Network Visibility Analysis Platform is deployed within operator mobile network environments and enables the collection, identification, and parsing of information from both the signaling plane and the user plane. It serves as the core supporting system for mobile network visibility and is one of the key components of the mobile network architecture.
By identifying, collecting, and performing deep packet inspection (DPI) and other data processing on mobile network traffic, the platform enables the identification, management, and statistical analysis of users, services, traffic content, and service quality within mobile network traffic. The processed and analyzed data is then delivered to downstream applications. Based on the data provided by the Mobile Network DPI and Network Visibility Analysis Platform, downstream applications can achieve intelligent traffic and data management, business intelligence, and information visible objectives, among others.

High Integration and Low Power Consumption

• The platform adopts a high-efficiency data collection and parsing engine (UCPP). While significantly improving collection and parsing performance, it ensures accurate traffic identification. A single 1U device can support up to 120 Gbps of 5G user internet traffic collection and analysis. It achieves user information backfill accuracy of no less than 99%, an overall traffic identification rate of no less than 99%, and an identification accuracy of no less than 95% for mainstream internet applications.

Open and Comprehensive Interfaces for Upper-Layer and Third-Party Applications

• The system supports multiple interfaces, including SDTP, FTP/SFTP, and Socket/Kafka, with flexible configuration options for encrypted or unencrypted transmission and compressed or uncompressed data uploads. Call Detail Record (CDR) output adopts a field-library-based design, supporting highly customized CDRs and flexible output in multiple formats.

Full Coverage of Operator Networks

• The platform supports full-interface data collection and decoding across 2G, 4G, 5G, VoLTE, and VoNR networks, and provides identification and extensibility capabilities that meet operator-grade requirements.

Support for Full Raw Control-Plane Data Processing

• Supports control and processing of full raw data from 5GC control-plane interfaces such as N1–N40, including control-plane raw data decoding, reassembly, protocol correlation, and user information backfilling.

Deep Packet Parsing and Identification on the N3 User-Plane Interface

• Enables identification of key attributes for major typical mobile network services—such as web browsing, video services, instant messaging, and gaming—at the granularity of a single user session or access instance, including start time, end time, URL, traffic volume, and key quality information.

Support for NAS Message Decryption in Secure Mode

• Extracts the kSeaf key from the N12 interface. The N1/N2 decoding process operates in coordination with N12 key extraction, using the kSeaf key to decrypt corresponding NAS messages on the N1/N2 interfaces.

IPv4 and IPv6 Parsing and Identification Capabilities

• Supports parsing and identification of both IPv4 and IPv6 data from collected signaling-plane and user-plane traffic.

Flexible xDR Output Templates

• Supports rapid adjustment of xDR output templates and field sets, enabling fast generation of xDR interface records that meet on-site and scenario-specific requirements.

Dynamic Real-Time Correlation

• Dynamically correlates signaling procedures across multiple interfaces based on their relationships during service processes, and supports real-time acquisition, storage, and updating of user context information. User attributes that cannot be directly obtained from specific procedure messages (such as SUPI, GPSI, and PEI) are backfilled into xDR records.

Network KPI Generation

• Parses and identifies key quality indicator (KQI) information and calculates network KPI metrics.

Supports storage and classified reporting of raw signaling streams, and enables conditional capture and export of raw signaling data based on predefined criteria.