A method and device for determining the device security status of a user device

Abstract

The purpose of the present application is to provide a method and device for determining the device security status information of a user device, including: obtaining multiple application identification information of the multiple associated applications of the user device, wherein each application identification information has an associated application corresponding to it in the multiple associated applications; detecting whether the multiple application identification information meets a preset identification detection condition; if so, determining that the device security status of the user device is a safe state. By obtaining multiple application identification information and detecting the device security status of the user device through multiple application identification information, the present application can greatly prevent dangerous behaviors such as tampering of device identification information, improve device security, and create a good application environment.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a technology for determining the device security status of a user device. Background Art

[0002] With the development and popularization of smart phones, more and more APPs (Applications) can be used in people's lives. There is a phenomenon of "black and gray production" in each APP, that is, by tampering with the device identification information of the device to obtain a large amount of rewards, operating funds, investment funds of the corresponding APP, or to make profits through illegal operations in the APP. These methods of tampering with the device identification information of the device are usually difficult to detect. Summary of the invention

[0003] An object of the present application is to provide a method and device for determining a device security status of a user device.

[0004] According to one aspect of the present application, a method for determining a device security status of a user device is provided, wherein the method is applied to a network device, and a plurality of associated applications are installed on the user device, and the method comprises:

[0005] Acquire multiple application identification information of the multiple associated applications of the user equipment, wherein each application identification information has an associated application corresponding to it in the multiple associated applications;

[0006] Detecting whether the multiple application identification information meets a preset identification detection condition;

[0007] If so, it is determined that the device security state of the user equipment is a safe state.

[0008] According to one aspect of the present application, a network device for determining a device security status of a user device is provided, wherein a plurality of associated applications are installed on the user device, and the device comprises:

[0009] A module, configured to obtain multiple application identification information of the multiple associated applications of the user equipment, wherein each application identification information has an associated application corresponding to it in the multiple associated applications;

[0010] Module one or two, used to detect whether the multiple application identification information meets the preset identification detection conditions;

[0011] A third module is used to determine that the device security state of the user equipment is a safe state if the conditions are met.

[0012] According to one aspect of the present application, a computer device is provided, wherein the device includes:

[0013] Processor; and

[0014] A memory arranged to store computer executable instructions which, when executed, cause the processor to perform the operations of any of the methods described above.

[0015] According to one aspect of the present application, a computer-readable medium storing instructions is provided, wherein when the instructions are executed, the system performs the operation of any of the methods described above.

[0016] Compared with the prior art, the present application can greatly prevent dangerous behaviors such as tampering of device identification information by obtaining multiple application identification information and detecting the device security status of the user device through multiple application identification information, thereby improving device security and creating a good application environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Other features, objects and advantages of the present application will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings:

[0018] Figure 1 A flow chart of a method for determining a device security status of a user device according to an embodiment of the present application is shown;

[0019] Figure 2 The functional modules of the computer device 100 according to one embodiment of the present application are shown;

[0020] Figure 3 An exemplary system is shown that can be used to implement the various embodiments described in this application.

[0021] The same or similar reference numerals in the drawings represent the same or similar components. DETAILED DESCRIPTION

[0022] The present application is described in further detail below in conjunction with the accompanying drawings.

[0023] In a typical configuration of the present application, the terminal, the device of the service network and the trusted party all include one or more processors (eg, a central processing unit (CPU)), an input / output interface, a network interface and a memory.

[0024] Memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash memory. Memory is an example of a computer-readable medium.

[0025] Computer readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer readable instructions, data structures, modules of programs or other data. Examples of computer storage media include, but are not limited to, Phase-Change Memory (PCM), Programmable Random Access Memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of random access memory (RAM), Read-Only Memory (ROM), Electrically-Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0026] The devices referred to in this application include but are not limited to user devices, network devices, or devices formed by integrating user devices and network devices through a network. The user devices include but are not limited to any mobile electronic products that can interact with users (for example, interact with users through a touchpad), such as smart phones, tablet computers, etc. The mobile electronic products can use any operating system, such as Android operating system, iOS operating system, etc. Among them, the network device includes an electronic device that can automatically perform numerical calculations and information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable logic devices (Programmable Logic Device, PLD), field programmable gate arrays (Field Programmable Gate Array, FPGA), digital signal processors (Digital Signal Processor, DSP), embedded devices, etc. The network devices include but are not limited to computers, network hosts, single network servers, multiple network server sets or multiple servers. The cloud is composed of a large number of computers or network servers based on cloud computing (Cloud Computing), wherein cloud computing is a type of distributed computing, a virtual supercomputer composed of a group of loosely coupled computer sets. The network includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless self-organizing network (Ad Hoc network), etc. Preferably, the device may also be a program running on the user device, the network device, or a device formed by integrating the user device and the network device, the network device, the touch terminal, or the network device and the touch terminal through a network.

[0027] Of course, those skilled in the art should understand that the above-mentioned devices are only examples, and other existing or future devices that are applicable to the present application should also be included in the scope of protection of the present application and are included here by reference.

[0028] In the description of the present application, “plurality” means two or more, unless otherwise clearly and specifically defined.

[0029] Figure 1A method for determining the device security status of a user device according to one aspect of the present application is shown, wherein the method is applied to a network device, and a plurality of associated applications are installed on the user device, and the method specifically includes steps S101, S102, and S103. In step S101, multiple application identification information of the multiple associated applications of the user device is obtained, wherein each application identification information has an associated application corresponding to it in the multiple associated applications; in step S102, whether the multiple application identification information meets a preset identification detection condition; in step S103, if so, it is determined that the device security status of the user device is a secure state. Here, the computer device includes a network device (such as a server, etc.) corresponding to the application, and the network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets, or a cloud consisting of a plurality of servers.

[0030] Specifically, in step S101, multiple application identification information of the multiple associated applications of the user device is obtained, wherein each application identification information has an associated application corresponding to it in the multiple associated applications. For example, multiple associated applications include multiple associated network devices or modules corresponding to the multiple associated applications, and there is a communication connection between them, and the associated network device or module of each associated application establishes a communication connection with the network device, and data transmission can be achieved through the corresponding communication connection. Each associated application has an application identification information corresponding to it, and the application identification information is calculated according to the relevant rules of the associated application and the device identification information of the user device, such as determining the corresponding hash value through a preset hash algorithm or directly calculating the corresponding md5 value. In some cases, multiple associated applications can correspond to the same network device, and the same network device includes the network device implemented in this application or other network devices, etc., each associated application corresponds to an application module in the same network device, and each application module can realize data association inside the network device, for example, integrating, storing, processing, etc. the data of multiple applications. For example, in some embodiments, the network device includes multiple application modules, and each application in the multiple associated applications belongs to one of the multiple applications corresponding to the multiple application modules. For example, the network device is equipped with multiple application modules, each application module has a corresponding associated application, and data intercommunication is achieved between multiple associated applications. The network device can obtain the device identification information related to the user device in each application through each application module, and the device identification information can be directly determined as the application identification information, or the application identification information corresponding to each application module can be calculated based on the device identification information and a preset algorithm. Specifically, for example, the corresponding device identification information is uploaded using the SDK (Software Development Kit) of each application, and the application identification information common to multiple applications is determined by the big data processing of the network device. The application identification information is usually difficult to tamper with and is unique. The device identification information of the user device includes, but is not limited to, the name, serial number, type, model, sensor device, and hardware of the user device.

[0031] In some implementations, in step S101, the device identification information of the user device is obtained; multiple application identification information is determined according to the device identification information and the preset application rules corresponding to each associated application in the multiple associated applications, wherein each application identification information has an associated application corresponding to it in the multiple associated applications. For example, the network device obtains the device identification information of the user device, and the device identification information may be the device identification information of the user device received and comprehensively determined by each application, or may be the device identification information received separately by each application, wherein the device identification information received separately by each application may be the same, or may receive different types of device identification information based on different application settings. Each application in the application module of the network device is provided with a corresponding preset application rule, and the preset application rule is used to calculate the corresponding application identification information through the device identification information. The preset application rule may be the same or different in multiple associated applications, for example, each application calculates the same application identification information based on the different device identification information obtained by each application, or obtains complementary application identification information.

[0032] In some embodiments, the device identification information includes but is not limited to: device serial number information of the user device; device model information of the user device; device type information of the user device; sensor device installed on the user device; hardware information on the user device. For example, the user device has a unique serial number when it leaves the factory, and the unique serial number can be used as the corresponding device identification information to determine the application identification information, etc. The device model information of the user device includes the manufacturer identification information and device version information of the manufacturer of the device (such as iphone10, CH / A means the tenth generation of Apple mobile phone, the national version, etc.). The device type information of the user device is used to indicate the type of device, such as a mobile phone, a personal computer, a tablet, a watch, etc. The sensor device installed on the user device includes a detection device that is transformed into an electrical signal or other required form of information output according to a certain rule to meet the requirements of information transmission, processing, storage, display, recording and control, such as a positioning sensor, a gravity sensor, a posture sensor, etc. The hardware information on the user device is not limited to the device's processor, memory, motherboard, hard disk drive, optical disk drive, various expansion cards, connecting cables, power supply, etc. The device identification information can be a combination of one or more of the foregoing, and is not limited here.

[0033] In some embodiments, the obtaining of the device identification information of the user device includes: receiving the encrypted device identification information of the associated application corresponding to each application module uploaded by the user device through the multiple application modules, wherein the encrypted device identification information is determined by the user device based on the application encryption algorithm and device identification information of each application module; decrypting the encrypted device identification information of each application module through the decryption algorithm of each application module to determine the corresponding user identification information. For example, each application module has different application rules, and the device identification information obtained by the network device through different application modules is also different, such as obtaining the device serial number through associated application 1, and obtaining the sensor device of the device through associated application 2. Moreover, in order to ensure the security of the data, we also need to encrypt the device identification information in the user device segment during the data transmission process to obtain the corresponding encrypted device identification information, and then transmit the encrypted device identification information to the network device. After receiving the encrypted device identification information, the network device decrypts the encrypted device identification information received by each application module according to the encryption rules set by each application module, determines the corresponding device identification information, and then calculates multiple application identification information according to the device identification information.

[0034] In step S102, detect whether the multiple application identification information meets the preset identification detection conditions. For example, the network device determines whether the current user device is safe by detecting multiple application identification information. Detect whether the multiple application identification information meets the preset identification detection conditions. For example, in some embodiments, the identification detection conditions include but are not limited to: the multiple application identification information are the same; the multiple application identification information are complementary. For example, if the multiple application identification information is a common unique identification information, then detect whether the multiple application identification information are all the same. For another example, if the multiple application identification information generates complementary application identification information according to different preset application rules, then detect whether the multiple application identification information are complementary, etc.

[0035] In step S103, if the conditions are met, it is determined that the device security status of the user device is a secure status. For example, if the corresponding detection conditions are met (for example, the multiple application identifiers are the same or complementary according to different application rules), it is determined that the device identification information of the user device has not been tampered with, and its device security status is a secure status. The network device can also send the device security information to the user device so that the user can intuitively understand the device security status of the current device.

[0036] In some embodiments, the method further includes step S104 (not shown). In step S104, if the condition is not satisfied, it is determined that the device identification information of the user device has been tampered with, and the device security status of the user device is in a dangerous state. For example, if the corresponding detection condition is not satisfied (for example, according to different application rules, at least one of the multiple application identifications has different or non-complementary application identification information, etc.), the user device determines that the device identification information has been tampered with, such as the underlying code of the corresponding application of the relevant sdk in the application is tampered with, thereby causing the device identification information of the user device to change, and the corresponding application identification information does not meet the corresponding identification detection condition. Then the network device determines that the device identification information of the user device has been tampered with, part of the information of the user device has been changed, and it is in a dangerous state, etc.

[0037] In some embodiments, the method further includes step S105 (not shown), in which a danger prompting message is sent to the user device, wherein the danger prompting message is used to prompt that the device identification information of the user device has been tampered with. For example, the network device will determine that the device identification information of the user device has been tampered with, part of the information of the user device has been changed, and is in a dangerous state. The network device generates corresponding danger prompting information to prompt the user that the device identification information of the user device has been tampered with, so that the user can scan and correct it, thereby correcting the device identification information of the device.

[0038] In some embodiments, the method further includes step S106 (not shown), in which, according to the identification detection condition, the multiple application identification information is subjected to exclusion detection, and abnormal identification information is determined from the multiple application identification information; wherein, in step S105, a danger prompt information is sent to the user device, wherein the danger prompt information is used to prompt the user device that the device identification information of the abnormal application corresponding to the abnormal identification information has been tampered with. For example, when the network device detects multiple application identification information, in addition to being able to detect whether the multiple application identification information meets the identification detection condition, if the multiple application identification information does not meet the identification detection condition, it can also perform exclusion detection on the multiple application identification information to detect specific abnormal application identification information. For example, if one of the multiple application identification information is different from other application identification information, we determine that the application identification information is abnormal identification information. Or, if one of the multiple application identification information is not complementary to other application identification information, we determine that the application identification information is abnormal identification information, etc. The network device can send corresponding danger warning information to the user device, which includes application identification information of the application corresponding to the corresponding abnormal identification information, to prompt the user that the device identification information corresponding to the application has been tampered with, so that the user can make corrections more specifically.

[0039] In some embodiments, the method further includes step S107 (not shown), in which application behavior information of the user to whom the user device belongs in the multiple associated applications is obtained; and user portrait information of the user is determined based on the application behavior information. For example, application behavior information includes historical tags and historical behavior data of the user in each associated application, and user portrait information includes tag information used to characterize user characteristics, such as user interest tags (such as favorite books, sports, and entertainment, etc.), user attribute tags (such as name, height, weight, and other personal data). The network device integrates the multi-source data of the user from multiple angles by integrating the application behavior information of multiple associated applications, and the application types of the multiple associated applications are different, so as to depict the user characteristics from multiple perspectives, so that the data of the user portrait is more complete and reliable.

[0040] In some embodiments, the method further includes step S108 (not shown), in which intention push information is sent to the user device according to the user portrait information. For example, after the network device determines the corresponding user portrait, it can send relevant intention push information to the user device according to the user expectations, user needs, or user interests in the user portrait, and the intention push information includes the push of products corresponding to the user expectations, user needs, or user interests. The push form of the intention push information includes but is not limited to text, voice, video, etc.

[0041] The above mainly introduces various embodiments of a method for determining device security status information of a user device of the present application. In addition, we also provide specific devices that can implement the above embodiments. Figure 2 Make an introduction.

[0042] Figure 2 A computer device 100 for determining the device security status of a user device according to one aspect of the present application is shown, wherein the computer device includes a network device, and multiple associated applications are installed on the user device. The computer device specifically includes a one-module 101, a one-module 102, and a one-module 103. The one-module 101 is used to obtain multiple application identification information of the multiple associated applications of the user device, wherein each application identification information has an associated application corresponding to it in the multiple associated applications; the one-module 102 is used to detect whether the multiple application identification information meets a preset identification detection condition; the one-module 103, if satisfied, is used to determine that the device security status of the user device is a secure state. Here, the computer device includes a network device (such as a server, etc.) corresponding to the application, and the network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets, or a cloud composed of multiple servers.

[0043] In some embodiments, the network device includes multiple application modules, and each of the multiple associated applications belongs to one of the multiple applications corresponding to the multiple application modules. In some embodiments, the module 101 is used to obtain the device identification information of the user device; determine multiple application identification information according to the device identification information and the preset application rules corresponding to each associated application in the multiple associated applications, wherein each application identification information has an associated application corresponding to it in the multiple associated applications. In some embodiments, the device identification information includes but is not limited to: device serial number information of the user device; device model information of the user device; device type information of the user device; sensor device installed on the user device; hardware information on the user device. In some embodiments, the acquisition of the device identification information of the user device includes: receiving the encrypted device identification information of the associated application corresponding to each application module uploaded by the user device through the multiple application modules, wherein the encrypted device identification information is determined by the user device based on the application encryption algorithm and device identification information of each application module; decrypting the encrypted device identification information of each application module through the decryption algorithm of each application module to determine the corresponding user identification information.

[0044] Here, the Figure 2 The specific implementations of the one-to-one module 101, the one-to-two module 102, and the one-to-three module 103 are shown in the figure. Figure 1 The illustrated embodiments of step S101 , step S102 , and step S103 are the same or similar, and thus are not described in detail and are included herein by reference.

[0045] In some embodiments, the device further includes a module 14 (not shown), which is used to determine that the device identification information of the user device has been tampered with if it is not satisfied, and the device security state of the user device is a dangerous state. In some embodiments, the device further includes a module 15 (not shown), which is used to send danger prompt information to the user device, wherein the danger prompt information is used to prompt that the device identification information of the user device has been tampered with. In some embodiments, the device further includes a module 16 (not shown), which is used to perform exclusion detection on the multiple application identification information according to the identification detection condition, and determine abnormal identification information from the multiple application identification information; wherein the module 15 is used to send danger prompt information to the user device, wherein the danger prompt information is used to prompt that the device identification information of the abnormal application corresponding to the abnormal identification information of the user device has been tampered with. In some embodiments, the device further includes a module 17 (not shown), which is used to obtain the application behavior information of the user to which the user device belongs in the multiple associated applications; and determine the user portrait information of the user according to the application behavior information. In some embodiments, the device further includes an module 18 (not shown), which is used to send intention push information to the user device according to the user portrait information.

[0046] Here, the specific implementation methods corresponding to the four modules to the eight modules are the same as or similar to the embodiments of the aforementioned steps S101 to S103, and thus are not described in detail and are included herein by reference.

[0047] In addition to the methods and devices described in the above embodiments, the present application also provides a computer-readable storage medium, which stores computer code. When the computer code is executed, the method described in any of the preceding items is executed.

[0048] The present application also provides a computer program product. When the computer program product is executed by a computer device, the method described in any of the preceding items is executed.

[0049] The present application also provides a computer device, the computer device comprising:

[0050] one or more processors;

[0051] a memory for storing one or more computer programs;

[0052] When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the method as described in any of the preceding items.

[0053] Figure 3 An exemplary system that can be used to implement various embodiments described in this application is shown;

[0054] like Figure 3 In some embodiments shown, the system 300 can be any of the above-mentioned devices in each of the described embodiments. In some embodiments, the system 300 may include one or more computer-readable media (e.g., system memory or NVM / storage device 320) with instructions and one or more processors (e.g., (one or more) processors 305) coupled to the one or more computer-readable media and configured to execute instructions to implement modules to perform the actions described in this application.

[0055] For one embodiment, system control module 310 may include any suitable interface controller to provide any suitable interface to at least one of processor(s) 305 and / or any suitable device or component in communication with system control module 310 .

[0056] The system control module 310 may include a memory controller module 330 to provide an interface to the system memory 315. The memory controller module 330 may be a hardware module, a software module, and / or a firmware module.

[0057] The system memory 315 may be used, for example, to load and store data and / or instructions for the system 300. For one embodiment, the system memory 315 may include any suitable volatile memory, such as a suitable DRAM. In some embodiments, the system memory 315 may include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0058] For one embodiment, system control module 310 may include one or more input / output (I / O) controllers to provide interfaces to NVM / storage device 320 and communication interface(s) 325 .

[0059] For example, NVM / storage device 320 may be used to store data and / or instructions. NVM / storage device 320 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0060] NVM / storage device 320 may include storage resources that are physically part of the device on which system 300 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 320 may be accessed over a network via communication interface(s) 325.

[0061] Communication interface(s) 325 may provide an interface for system 300 to communicate over one or more networks and / or with any other suitable devices. System 300 may wirelessly communicate with one or more components of a wireless network in accordance with any of one or more wireless network standards and / or protocols.

[0062] For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 (e.g., the memory controller module 330). For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310 to form a system on chip (SoC).

[0063] In various embodiments, the system 300 may be, but is not limited to: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the system 300 may have more or fewer components and / or a different architecture. For example, in some embodiments, the system 300 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an application specific integrated circuit (ASIC), and a speaker.

[0064] It should be noted that the present application can be implemented in software and / or a combination of software and hardware, for example, can be implemented using an application specific integrated circuit (ASIC), a general purpose computer or any other similar hardware device. In one embodiment, the software program of the present application can be executed by a processor to implement the steps or functions described above. Similarly, the software program of the present application (including relevant data structures) can be stored in a computer-readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and similar devices. In addition, some steps or functions of the present application can be implemented using hardware, for example, as a circuit that cooperates with a processor to perform each step or function.

[0065] In addition, a part of the present application may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present application through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes but is not limited to source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to the computer.

[0066] Communication media include media by which communication signals containing, for example, computer readable instructions, data structures, program modules, or other data are transmitted from one system to another. Communication media may include guided transmission media such as cables and wires (e.g., fiber optic, coaxial, etc.) and wireless (unguided transmission) media that can propagate energy waves, such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied as a modulated data signal in, for example, a wireless medium such as a carrier wave or similar mechanism such as embodied as part of spread spectrum technology. The term "modulated data signal" refers to a signal whose one or more characteristics are changed or set in such a manner as to encode information in the signal. Modulation may be analog, digital, or a hybrid modulation technique.

[0067] By way of example and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory, such as random access memory (RAM, DRAM, SRAM); and non-volatile memory, such as flash memory, various read-only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic / ferroelectric memories (MRAM, FeRAM); and magnetic and optical storage devices (hard disks, magnetic tapes, CDs, DVDs); or other media now known or later developed that can store computer-readable information / data for use by a computer system.

[0068] Here, according to an embodiment of the present application, a device is included, which includes a memory for storing computer program instructions and a processor for executing the program instructions, wherein, when the computer program instructions are executed by the processor, the device is triggered to run the methods and / or technical solutions based on the aforementioned multiple embodiments of the present application.

[0069] It is obvious to those skilled in the art that the present application is not limited to the details of the above exemplary embodiments, and that the present application can be implemented in other specific forms without departing from the spirit or basic features of the present application. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-restrictive, and the scope of the present application is limited by the attached claims rather than the above description, so it is intended to include all changes that fall within the meaning and scope of the equivalent elements of the claims in the present application. Any figure mark in the claims should not be regarded as limiting the claims involved. In addition, it is obvious that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the device claim can also be implemented by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

Claims

1. A method for determining a device security status of a user device, wherein: The method is applied to a network device, wherein a plurality of associated applications are installed on the user device, the network device comprises a plurality of application modules, each of the plurality of associated applications belongs to one of a plurality of applications corresponding to the plurality of application modules, and the method comprises: Acquire multiple application identification information of the multiple associated applications of the user equipment, wherein each application identification information has an associated application corresponding to it in the multiple associated applications; Detecting whether the multiple application identification information meets a preset identification detection condition, wherein the identification detection condition is that the multiple application identification information are identical or the multiple application identification information are complementary; If satisfied, determining that the device security state of the user device is a safe state; The acquiring of the plurality of application identification information of the plurality of associated applications of the user equipment includes: Acquire device identification information of the user device; Multiple application identification information are determined according to the device identification information and a preset application rule corresponding to each associated application in the multiple associated applications, wherein each application identification information has an associated application corresponding to it in the multiple associated applications, and data intercommunication is achieved between the multiple associated applications.

2. The method according to claim 1, wherein: The device identification information includes at least one of the following: Device serial number information of the user device; Device model information of the user device; Device type information of the user device; A sensor device installed on the user equipment; Hardware information on the user device.

3. The method according to claim 1 or 2, wherein: The acquiring device identification information of the user device includes: Receiving encrypted device identification information of an associated application corresponding to each application module uploaded by the user device through the multiple application modules, wherein the encrypted device identification information is determined by the user device based on an application encryption algorithm and device identification information of each application module; The encrypted device identification information of each application module is decrypted by the decryption algorithm of each application module to determine the corresponding user identification information.

4. The method according to claim 1, wherein: The method further comprises: If not, it is determined that the device identification information of the user device has been tampered with, and the device security status of the user device is in a dangerous state.

5. The method according to claim 4, wherein: The method further comprises: Sending danger prompt information to the user equipment, wherein the danger prompt information is used to prompt that the device identification information of the user equipment has been tampered with.

6. The method according to claim 5, wherein: The method further comprises: Performing an exception detection on the multiple application identification information according to the identification detection condition, and determining abnormal identification information from the multiple application identification information; The sending of danger warning information to the user equipment includes: Sending danger prompt information to the user equipment, wherein the danger prompt information is used to prompt the user equipment that the device identification information of the abnormal application corresponding to the abnormal identification information has been tampered with.

7. The method according to claim 1, wherein: The method further comprises: Acquire application behavior information of the user of the user device in the multiple associated applications; Determine user portrait information of the user based on the application behavior information.

8. The method according to claim 7, wherein: The method further comprises: Send intention push information to the user device according to the user portrait information.

9. A computer device, wherein: The equipment includes: Processor; and A memory arranged to store computer executable instructions which, when executed, cause the processor to perform the steps of the method as claimed in any one of claims 1 to 8.

10. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: The computer program / instructions, when executed, cause the system to perform the steps of the method as claimed in any one of claims 1 to 8.

11. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images