Service behavior safety control method, system and equipment

Abstract

The invention discloses a service behavior safety control method, system and equipment, and the method comprises the steps: obtaining request user information, converting the request user information into a hash code, judging whether the request user information is in an existing punishment data set or not: if yes, refusing the request of a user; generating a token bucket according to a configured frequency limiting strategy and a unique identifier calculated by a user ID for a request of successful legal verification of the user information; before a user request is processed, acquiring a token from a token bucket, and if the token is obtained, processing the user request; when no token is available in the bucket, rejecting the user request, and recording the request user information. The token bucket is dynamically managed according to the configured strategy and the user information, and the request is limited by controlling the capacity of the bucket and the token issuing rate. Based on the scheme of the invention, all strategy configuration and data can be configured on a visual operating system platform at any time, online, offline and strategy modification can be carried out in time, and the method is convenient, rapid and high in efficiency.

Description

technical field [0001] The invention relates to a business behavior security control method, system and equipment, belonging to the field of Internet information security and anti-cheating. Background technique [0002] At this stage, there are more and more Internet user products, and most of the products are faced with the phenomenon of users submitting operations in batches. There are two reasons. One is that users do not operate according to the rules of the product, and the other is malicious attacks. Regardless of the above-mentioned reasons, it will cause serious safety problems to the product. How to correctly guide the user's operation behavior and prevent malicious mass behavior attacks is very important for the product. At present, most of the user-submitted restriction rules of products on the market are written in the code, which has a single dimension, and cannot obtain restriction data in a timely manner, nor can it modify and optimize policies in a timely ma...

AI Technical Summary

Problems solved by technology

At present, the user submission restriction rules of most products on the market are written in the code, which has a single dimension, and the restriction data cannot be obtained in time, and the policy modification and optimization cannot be carried out in time, let alone the personalized configuration of the disposal strategy.

Images