Method, device, electronic equipment and medium for identifying user operation behavior

Abstract

The application discloses a method and device for identifying user operation behavior, electronic equipment and medium. In the application, display parameters corresponding to a display page currently displayed on a client can be acquired, and an operation track to be identified generated by a target object on the display page can be acquired. The display parameters are matched with the operation track to be identified to obtain a matching result, which is used to determine whether the operation track to be identified is legal operation data. Prompt information used to inform the matching result is returned to the client. By applying the technical solution of the application, the obtained operation track to be identified can be compared with a preset threshold interval determined according to the display parameters corresponding to the current display page, so as to determine whether the operation track to be identified is legal operation data generated by a legal user, thereby avoiding the problem that in related technologies, malicious users use a preset simulation model to simulate the sliding track of a user to steal the private information of the user.

Description

Technical Field

[0001] This application relates to data processing technology, and in particular to a method, apparatus, electronic device, and medium for identifying user operation behavior. Background Technology

[0002] With the continuous expansion of terminal functions and the improvement of hardware technology, it has gradually become an indispensable electronic tool in people's lives.

[0003] Users frequently use swipe gestures to access specific functions while operating their devices. For example, when a user needs to use an app that may contain sensitive information, password protection is commonly used to prevent its leakage. However, if the password is too complex, typing it using keyboard keys increases the complexity of the user experience. Therefore, the system can choose to allow the user to unlock the app using swipe gestures.

[0004] However, this method also presents a risk of malicious users exploiting pre-set imitation models to mimic user swipe patterns and steal user privacy information. Therefore, designing a method to identify whether user actions constitute legitimate data has become a problem that needs to be solved. Summary of the Invention

[0005] This application provides a method, apparatus, electronic device, and medium for identifying user operation behavior. It addresses the problem in related technologies where malicious users exploit preset imitation models to mimic user swipe trajectories and steal user privacy information.

[0006] According to one aspect of the embodiments of this application, a method for identifying user operation behavior is provided, comprising:

[0007] Obtain the display parameters corresponding to the currently displayed page on the client, and obtain the operation trajectory to be identified generated by the target object on the display page;

[0008] The display parameters are matched with the operation trajectory to be identified to obtain a matching result, which is used to determine whether the operation trajectory to be identified is legitimate operation data.

[0009] Return a prompt message to the client to inform them of the matching result.

[0010] Optionally, in another embodiment based on the method described above in this application, obtaining the display parameters corresponding to the currently displayed page on the client includes:

[0011] Before the client renders a current display page, a background image corresponding to the display page to be rendered is obtained, and a first starting point coordinate and a first destination point coordinate for identifying an operation track in the background image are obtained.

[0012] Optionally, in another embodiment based on the method described above, after the operation track generated by the target object on the display page is obtained, the method further includes:

[0013] extracting a second starting point coordinate, a second destination point coordinate, time information, and a random position value of the target object when generating the operation track to be identified;

[0014] the second starting point coordinate, the second destination point coordinate, the time information, and the random position value are used as a sample to be identified;

[0015] The display parameters are matched with the sample to be identified to obtain a matching result.

[0016] Optionally, in another embodiment based on the method described above, the matching of the display parameters with the sample to be identified to obtain a matching result includes:

[0017] The average value, the variance value, and the standard deviation value corresponding to the sample to be identified are calculated;

[0018] The average value and the variance value are used to obtain a decision value corresponding to the sample to be identified;

[0019] Based on the standard deviation value and the comparison between the decision value and a preset threshold interval, a matching result is obtained, and the preset threshold interval is obtained according to the display parameters.

[0020] Optionally, in another embodiment based on the method described above, the calculation of the average value, the variance value, and the standard deviation value corresponding to the sample to be identified includes:

[0021] The average value and the variance value corresponding to the sample to be identified are calculated; and

[0022] The sample to be identified is divided into a first number of sub-samples, wherein the first number of sub-samples includes a first sub-sample including the second starting point coordinate and a second sub-sample including the second destination point coordinate;

[0023] The first sub-standard deviation value corresponding to the first sub-sample is calculated, and the second sub-standard deviation value corresponding to the second sub-sample is calculated.

[0024] Optionally, in another embodiment based on the method described above, the decision value corresponding to the sample to be identified is obtained according to the following formula:

[0025] V = S 2 - X;

[0026] Wherein, the V represents a determination value, the S represents a variance value, and the X represents an average value.

[0027] Optionally, in another embodiment based on the above method of the present application, the matching result obtained based on the comparison between the standard deviation value and the determination value and the size of the preset threshold interval comprises:

[0028] When it is determined that the determination value is within the preset threshold interval and the first sub-standard deviation value is less than the second sub-standard deviation value, a matching result that the to-be-identified operation trajectory is legal operation data is confirmed;

[0029] Or,

[0030] When it is determined that the determination value is not within the preset threshold interval or the first sub-standard deviation value is not less than the second sub-standard deviation value, a matching result that the to-be-identified operation trajectory is illegal operation data is confirmed.

[0031] According to still another aspect of the embodiments of the present application, a device for identifying user operation behavior is provided, characterized in that it comprises:

[0032] a obtaining module configured to obtain display parameters corresponding to a display page currently displayed on a client and to obtain a to-be-identified operation trajectory generated by a target object on the display page;

[0033] a matching module configured to match the display parameters with the to-be-identified operation trajectory to obtain a matching result, the matching result being used to determine whether the to-be-identified operation trajectory is legal operation data;

[0034] a sending module configured to return prompt information to the client to inform the matching result.

[0035] According to still another aspect of the embodiments of the present application, an electronic device is provided, comprising:

[0036] a memory configured to store executable instructions; and

[0037] a display configured to display the executable instructions to perform the operations of any of the above-mentioned methods for identifying user operation behavior.

[0038] According to still another aspect of the embodiments of the present application, a computer readable storage medium is provided, configured to store computer readable instructions, the instructions being executed to perform the operations of any of the above-mentioned methods for identifying user operation behavior.

[0039] In the present application, the display parameters corresponding to the display page currently displayed on the client can be acquired, and the operation trajectory to be recognized generated by the target object on the display page can be acquired; the display parameters are matched with the operation trajectory to be recognized, and a matching result is obtained, which is used to determine whether the operation trajectory to be recognized is legal operation data; and prompt information used to inform the matching result is returned to the client. By applying the technical solution of the present application, the obtained operation trajectory to be recognized can be compared with the preset threshold interval determined according to the display parameters corresponding to the current display page, so as to determine whether the operation trajectory to be recognized is legal operation data generated by a legal user, thereby avoiding the problem that in related technologies, a malicious user uses a preset simulation model to simulate the sliding trajectory of a user to steal the private information of the user.

[0040] The technical solution of the present application will be described in further detail below with reference to the accompanying drawings and embodiments. BRIEF DESCRIPTION OF DRAWINGS

[0041] The accompanying drawings, which form a part of the specification, illustrate embodiments of the present application and, together with the description, serve to explain the principles of the present application.

[0042] With reference to the accompanying drawings, the present application can be more clearly understood according to the following detailed description, in which:

[0043] Figure 1 A schematic diagram of a method for recognizing user operation behavior according to the present application;

[0044] Figure 2 A schematic diagram of an electronic device for recognizing user operation behavior according to the present application;

[0045] Figure 3 A schematic diagram of an electronic device for recognizing user operation behavior according to the present application. DETAILED DESCRIPTION

[0046] Various exemplary embodiments of the present application will now be described in detail with reference to the accompanying drawings. Note that the relative arrangement, numerical expressions, and numerical values of components and steps set forth in these embodiments are not intended to limit the scope of the present application unless otherwise specifically stated.

[0047] It should also be understood that the sizes of the various portions shown in the drawings are not intended to be to scale for the sake of convenience of description.

[0048] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the scope of the application or its application or uses.

[0049] Techniques, methods, and devices known to those of ordinary skill in the relevant art can not be discussed in detail herein. However, where appropriate, such techniques, methods, and devices can be regarded as part of the described technology and be disclosed in the specification.

[0050] It should be noted that like reference numerals and letters refer to like items throughout the attached drawings, and once an item is defined in one drawing, it should not be discussed further in subsequent drawings.

[0051] In addition, the technical solutions among various embodiments of the present application can be combined with each other, but it must be based on the fact that a person of ordinary skill in the art can realize it, and when the combination of technical solutions contradicts each other or cannot be realized, it should be considered that the combination of technical solutions does not exist and is not within the protection scope required by the present application.

[0052] It should be noted that all directional indications (such as up, down, left, right, front, back, etc.) in the embodiments of the present application are only used to explain the relative positional relationship, movement condition, etc. between components in a certain posture (as shown in the drawings), and if the certain posture changes, the directional indications will also change accordingly.

[0053] The method for identifying user operation behavior according to the exemplary embodiments of the present application will be described below in conjunction with Figure 1 It should be noted that the following application scenarios are only shown to facilitate understanding of the spirit and principles of the present application, and the embodiments of the present application are not limited in this respect. On the contrary, the embodiments of the present application can be applied to any applicable scenario.

[0054] The present application also proposes a method and device for identifying user operation behavior, an electronic device and a medium.

[0055] Figure 1 A flowchart of a method for identifying user operation behavior according to an embodiment of the present application is schematically shown. As Figure 1 shown, the method comprises:

[0056] S101, obtaining display parameters corresponding to a display page currently displayed on a client, and obtaining an operation trajectory to be identified generated by a target object on the display page.

[0057] In the related art, with the continuous expansion of terminal functions and the improvement of hardware technology, the terminal has gradually become an indispensable electronic tool in people's life. For example, people can use the terminal for online shopping, real-time communication, information inquiry, entertainment learning, etc.

[0058] Further, since some privacy information of the user can be involved in the process of operating the terminal, in order to ensure that the privacy information is not leaked, it is now common to protect the privacy information by setting a password. However, if the password is set to be too complex, the operation complexity of the user is increased by inputting the password by clicking the keyboard, and the operation process is easy to be listened to and restored by the illegal person to steal the password, so that the terminal has a great security risk.

[0059] Therefore, the system can select a way of unlocking by the user using the sliding track operation to enable the user to start the app. However, in this way, a malicious user can also use a preset simulation model to simulate the sliding track of the user to steal the privacy information of the user.

[0060] Further, there are two types of schemes for determining the results of the operation track recognition by the existing man-machine recognition technology, including:

[0061] One way is to determine the distance between the initial position and the target position, and the scheme depends on the complexity of the shape of the object itself and the degree of background interference to increase the difficulty coefficient of automatic recognition by the machine. At present, the picture and graphic recognition technology is very mature and universal, and the probability of automatic recognition by the machine program is increasing. The distance between the initial value and the target value is too simple and single as a judgment basis.

[0062] Another way is to collect a large number of data samples in advance, train a machine model, and then upload the similarity of the data samples to the data samples that have been trained to determine the results. This scheme requires a large number of data samples of different shapes to train the machine model, so as to improve the recognition accuracy of the model, and the requirements for time, technology and resource cost are relatively high.

[0063] For example, when the user wants to use an app of the terminal device, the user needs to register on the registration page of the app first. Then, in order to prevent malicious users from registering by program malicious behavior, the business platform can increase a sliding block verification code operation on the registration page, so as to increase the difficulty of malicious simulation registration.

[0064] To solve the above problems, the present application provides a method for identifying whether the user's operation behavior is legal, so as to solve the problem that a malicious user uses a preset simulation model to simulate the sliding track of the user to steal the privacy information of the user in the related art.

[0065] Wherein, for the operation trajectory to be identified generated by the user on the display page, the terminal can first acquire at least one activated key triggered by the operation trajectory. In one way, the user can start a virtual keyboard, and input a sliding operation page by using the virtual keyboard, so that the terminal collects the sliding trajectory input by the user on the virtual keyboard (i.e. the operation trajectory to be identified).

[0066] Wherein, the operation trajectory to be identified can be any one or more curves or straight lines drawn by the user, and further, the operation trajectory to be identified can be in the range of the virtual keyboard or any position of the current display page beyond the virtual keyboard. It can be understood that if the operation trajectory to be identified is determined as legal operation data, the terminal can be unlocked or the access right to the terminal or the terminal application can be obtained.

[0067] In addition, the display parameters corresponding to the display page are not specifically limited in the present application, for example, the parameters can be background image, coordinate point of initial position of slider, coordinate point of target position, etc.

[0068] S102, matching the display parameters with the operation trajectory to be identified, obtaining a matching result, and the matching result is used to determine whether the operation trajectory to be identified is legal operation data.

[0069] Wherein, after the terminal collects the display parameters corresponding to the display page and the operation trajectory to be identified, the two parameters can be returned to the server. The server determines whether the sliding distance of the operation trajectory to be identified meets the preset condition according to the display parameters corresponding to the display page, and obtains the operation sample to be identified according to the operation trajectory to be identified, and then uses the operation sample to be identified to determine whether it is legal operation data. Further, the matching result corresponding to the determination of whether the operation trajectory to be identified is legal operation data is obtained and returned to the client.

[0070] S103, returning prompt information for informing the matching result to the client.

[0071] In one way, an example is given, including:

[0072] Step one: before the terminal displays the registration page, the terminal can communicate with the server to transmit the parameters of the display page, such as background image, coordinate point of initial position of slider, and coordinate point of target position, and then display the page to show the display page.

[0073] Step two: the user clicks the slider and drags the slider to the target position, and collects the operation trajectory data set to be identified generated by the slider dragging;

[0074] Step three: submitting the operation trajectory data to be identified generated by the slider dragging to the server;

[0075] Step four: the server verifies whether the distance of the to-be-recognized operation trajectory and the sample data corresponding to the to-be-recognized operation trajectory are biological or imitated data according to the display parameters, and returns the matching result to the client registration page;

[0076] Step five: the display page prompts the user of success or failure according to the returned matching result.

[0077] In the present application, the display parameters corresponding to the display page currently displayed on the client can be obtained, and the to-be-recognized operation trajectory generated by the target object on the display page can be obtained; the display parameters are matched with the to-be-recognized operation trajectory to obtain a matching result, which is used to determine whether the to-be-recognized operation trajectory is legal operation data; and prompt information used to inform the matching result is returned to the client. By applying the technical solution of the present application, the obtained to-be-recognized operation trajectory can be compared with the preset threshold interval determined according to the display parameters corresponding to the current display page, so as to determine whether the to-be-recognized operation trajectory is legal operation data generated by a legal user, thereby avoiding the problem that in related technologies, malicious users use a preset imitated model to imitate the sliding trajectory of a user to steal the private information of the user.

[0078] Optionally, in another embodiment based on the above-mentioned method of the present application, the display parameters corresponding to the display page currently displayed on the client are obtained, including:

[0079] Before the client renders the current display page, the background image corresponding to the to-be-rendered display page, and the first starting point coordinate and the first destination point coordinate for identifying the operation trajectory in the background image are obtained.

[0080] In one way, the display parameters corresponding to the display page are not specifically limited by the present application, for example, the parameters can be the coordinate points of the background image, the initial position of the slider, the coordinate points of the target position, etc.

[0081] It can be understood that in one way, the server of the present application can use the display parameters to determine whether the sliding distance of the to-be-recognized operation trajectory meets the conditions. For example, when it is detected that the distance of the to-be-recognized operation trajectory is too long or too short, it can be determined that the to-be-recognized operation trajectory is illegal operation data.

[0082] In another way, the display parameters can also be the size of the preset threshold interval used to compare the determination value of the to-be-recognized sample. It can be understood that based on the display parameters corresponding to different display pages, different preset threshold intervals corresponding thereto can be generated, and then the preset threshold interval is used to match the determination value reflecting the dispersion degree or stability of the to-be-recognized sample in size. Further, it is further determined whether the to-be-recognized operation trajectory is legal operation data.

[0083] Optionally, in another embodiment based on the above method of the present application, after obtaining the operation trajectory to be identified generated by the target object on the display page, the method further comprises:

[0084] extracting a second starting point coordinate, a second destination point coordinate, time information and a random position value of the target object when generating the operation trajectory to be identified;

[0085] taking the second starting point coordinate, the second destination point coordinate, the time information and the random position value as a sample to be identified;

[0086] matching the display parameters with the sample to be identified to obtain a matching result.

[0087] Optionally, in another embodiment based on the above method of the present application, the matching the display parameters with the sample to be identified to obtain a matching result comprises:

[0088] calculating an average value, a variance value and a standard deviation value corresponding to the sample to be identified;

[0089] obtaining a decision value corresponding to the sample to be identified according to the average value and the variance value;

[0090] obtaining a matching result based on a comparison between the standard deviation value and a size of a preset threshold interval, the preset threshold interval being obtained according to the display parameters.

[0091] Optionally, in another embodiment based on the above method of the present application, the calculating an average value, a variance value and a standard deviation value corresponding to the sample to be identified comprises:

[0092] calculating an average value and a variance value corresponding to the sample to be identified; and,

[0093] dividing the sample to be identified into a first number of sub-samples, wherein the first number of sub-samples includes a first sub-sample containing the second starting point coordinate and a second sub-sample containing the second destination point coordinate;

[0094] calculating a first sub-standard deviation value corresponding to the first sub-sample and a second sub-standard deviation value corresponding to the second sub-sample.

[0095] Optionally, in another embodiment based on the above method of the present application, the decision value corresponding to the sample to be identified is obtained according to the following formula:

[0096] V=S2-X;

[0097] Wherein, the V represents a decision value, the S represents a variance value, and the X represents an average value.

[0098] Optionally, in another embodiment based on the method described above, the matching result is obtained based on the comparison between the standard deviation value and the size of the preset threshold interval, and the decision value, and includes:

[0099] When it is determined that the decision value is within the preset threshold interval and the first sub-standard deviation value is less than the second sub-standard deviation value, it is confirmed that the matching result of the to-be-identified operation trajectory is legal operation data.

[0100] Or,

[0101] When it is determined that the decision value is not within the preset threshold interval or the first sub-standard deviation value is not less than the second sub-standard deviation value, it is confirmed that the matching result of the to-be-identified operation trajectory is illegal operation data.

[0102] In one way, the present application takes 3 as the first quantity to illustrate the method for identifying user operation behavior proposed by the present application:

[0103] Step 1: Collect the coordinate points, corresponding time information, and random position values generated by the server when the user-generated operation trajectory included in the to-be-identified sample as the to-be-identified sample;

[0104] Step 2: Separate the interference factors in the data sample according to the agreed rules;

[0105] Step 3: Calculate the average value (X), variance (S), and standard deviation (S 2 ) of the to-be-identified sample set;

[0106] Wherein, the to-be-identified sample also needs to be divided into 3 segments to obtain sample 1, sample 2, and sample 3. Sample 1 (i.e., the first sub-sample) is the starting part (i.e., the part including the second starting point coordinate) of the to-be-identified trajectory, and sample 3 (i.e., the second sub-sample) is the ending part (i.e., the part including the second destination point coordinate) of the to-be-identified trajectory.

[0107] In addition, the first sub-standard deviation S 2 1 (i.e., the first sub-standard deviation value) and the second sub-standard deviation S 2 3 (i.e., the second sub-standard deviation value) corresponding to sample 1 and sample 3 are also calculated, respectively.

[0108] Wherein, the formula for calculating the variance of the to-be-identified sample set can be:

[0109]

[0110] And, the formula for calculating the standard deviation of the to-be-identified sample set can be:

[0111]

[0112] It should be noted that, for calculating the variance of the to-be-identified sample set, its role is to measure the dispersion degree of the to-be-identified sample, and for calculating the standard deviation of the to-be-identified sample set, its role is to judge the stability and accuracy of the to-be-identified sample set. It can be understood that the greater the standard deviation, the greater the difference between most trajectory data points and the average value; otherwise, the trajectory data points are closer to the average value.

[0113] Further, compared with the trajectory generated by the machine model, the user-generated operation trajectory generally has the characteristics that the data points on the coordinate trajectory fluctuate greatly and are uneven, and the closer to the destination position, the greater the fluctuation of the coordinate trajectory data points. Therefore, the present application can determine the legality of the to-be-identified trajectory according to the relationship between the standard deviation and the average value of the to-be-identified sample.

[0114] Step four: obtaining a judgment value corresponding to the to-be-identified sample; wherein,

[0115] The judgment value V=S 2 -X;

[0116] Wherein, the V represents the judgment value, the S 2 represents the standard deviation value, and the X represents the average value.

[0117] Step five: comparing the judgment value with a preset threshold interval, including the following two cases:

[0118] The first case:

[0119] When it is determined that the judgment value V is in the preset threshold interval, and the first sub-standard deviation value S 2 1 is less than the second sub-standard deviation value S 2 3, it can be confirmed that the to-be-identified operation trajectory is a matching result of legal operation data.

[0120] The second case:

[0121] When it is determined that the judgment value V is not in the preset threshold interval, or the first sub-standard deviation value S 2 1 is greater than or equal to the second sub-standard deviation value S 2 3, it can be confirmed that the to-be-identified operation trajectory is a matching result of illegal operation data.

[0122] Further, the present application does not specifically limit the preset threshold interval, for example, it can be selected as an interval between 0-3, such as (0, 2) and the like. In one way, different preset threshold spaces can be determined according to different display pages (i.e., different display parameters).

[0123] By applying the technical solution of the present application, the obtained to-be-identified operation trajectory can be compared with a preset threshold interval determined according to the display parameters corresponding to the current display page, so as to determine whether the to-be-identified operation trajectory is legal operation data generated by a legal user, thereby avoiding the problem existing in the related art that a malicious user uses a preset imitation model to imitate the sliding trajectory of a user to steal the private information of the user.

[0124] Optionally, in another embodiment of the present application, as shown in Figure 2 The present application also provides a device for identifying user operation behavior. It includes:

[0125] The obtaining module 201 is configured to obtain the display parameters corresponding to the display page currently displayed on the client, and obtain the to-be-identified operation trajectory generated by the target object on the display page;

[0126] The matching module 202 is configured to match the display parameters with the to-be-identified operation trajectory to obtain a matching result, which is used to determine whether the to-be-identified operation trajectory is legal operation data;

[0127] The sending module 203 is configured to return prompt information to the client to inform the matching result.

[0128] In the present application, the display parameters corresponding to the display page currently displayed on the client can be obtained, and the to-be-identified operation trajectory generated by the target object on the display page can be obtained; the display parameters are matched with the to-be-identified operation trajectory to obtain a matching result, which is used to determine whether the to-be-identified operation trajectory is legal operation data; prompt information is returned to the client to inform the matching result. By applying the technical solution of the present application, the obtained to-be-identified operation trajectory can be compared with a preset threshold interval determined according to the display parameters corresponding to the current display page, so as to determine whether the to-be-identified operation trajectory is legal operation data generated by a legal user, thereby avoiding the problem existing in the related art that a malicious user uses a preset imitation model to imitate the sliding trajectory of a user to steal the private information of the user.

[0129] In another embodiment of the present application, the obtaining module 201 is configured to perform the following steps:

[0130] Before the client renders the current display page, the background image corresponding to the to-be-rendered display page is obtained, and the first starting point coordinate and the first destination point coordinate for identifying the operation trajectory in the background image are obtained.

[0131] The obtaining module 201 is configured to perform the following steps:

[0132] extracting a second starting point coordinate, a second destination point coordinate, time information and a random position value of the target object when the operation trajectory to be identified is generated;

[0133] taking the second starting point coordinate, the second destination point coordinate, the time information and the random position value as a sample to be identified;

[0134] matching the display parameter with the sample to be identified to obtain a matching result.

[0135] The obtaining module 201 is configured to perform the following steps:

[0136] calculating an average value, a variance value and a standard deviation value corresponding to the sample to be identified;

[0137] obtaining a decision value corresponding to the sample to be identified according to the average value and the variance value;

[0138] obtaining a matching result based on a comparison between the standard deviation value and a size of a preset threshold interval, the preset threshold interval being obtained according to the display parameter.

[0139] The obtaining module 201 is configured to perform the following steps:

[0140] calculating an average value and a variance value corresponding to the sample to be identified; and,

[0141] dividing the sample to be identified into a first number of sub-samples, wherein the first number of sub-samples includes a first sub-sample containing the second starting point coordinate and a second sub-sample containing the second destination point coordinate;

[0142] calculating a first sub-standard deviation value corresponding to the first sub-sample and a second sub-standard deviation value corresponding to the second sub-sample.

[0143] The obtaining module 201 is configured to perform the following steps:

[0144] obtaining a decision value corresponding to the sample to be identified according to the following formula:

[0145] V = S 2 – X;

[0146] wherein the V represents the decision value, the S 2 represents the standard deviation value, and the X represents the average value.

[0147] The obtaining module 201 is configured to perform the following steps:

[0148] When it is determined that the determination value is within the preset threshold interval, and the first sub-standard deviation value is less than the second sub-standard deviation value, it is confirmed that the matching result of the to-be-identified operation trajectory is legal operation data.

[0149] Or,

[0150] When it is determined that the determination value is not within the preset threshold interval, or the first sub-standard deviation value is not less than the second sub-standard deviation value, it is confirmed that the matching result of the to-be-identified operation trajectory is illegal operation data.

[0151] Figure 3 is a logical structure block diagram of an electronic device according to an exemplary embodiment. For example, the electronic device 300 can be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0152] In exemplary embodiments, a non-transitory computer-readable storage medium including instructions, such as a memory including instructions, is also provided, which can be executed by an electronic device processor to complete the above-mentioned method of identifying user operation behavior, which includes: obtaining display parameters corresponding to a display page currently displayed on a client, and obtaining a to-be-identified operation trajectory generated by a target object on the display page; matching the display parameters with the to-be-identified operation trajectory to obtain a matching result, the matching result being used to determine whether the to-be-identified operation trajectory is legal operation data; and returning prompt information to the client to inform the matching result. Optionally, the above-mentioned instructions can also be executed by the processor of the electronic device to complete other steps involved in the above-mentioned exemplary embodiments. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, and an optical data storage device, etc.

[0153] In exemplary embodiments, an application program / computer program product is also provided, including one or more instructions that can be executed by a processor of an electronic device to complete the above-mentioned method of identifying user operation behavior, which includes: obtaining display parameters corresponding to a display page currently displayed on a client, and obtaining a to-be-identified operation trajectory generated by a target object on the display page; matching the display parameters with the to-be-identified operation trajectory to obtain a matching result, the matching result being used to determine whether the to-be-identified operation trajectory is legal operation data; and returning prompt information to the client to inform the matching result. Optionally, the above-mentioned instructions can also be executed by the processor of the electronic device to complete other steps involved in the above-mentioned exemplary embodiments.

[0154] Figure 3An example diagram of the computer device 30 is shown. Those skilled in the art will appreciate that the diagram is merely an example of the computer device 30 and does not limit the computer device 30 in any way. The computer device 30 can include more, fewer or different components than depicted in the diagram, and can combine two or more components, or have a different configuration or arrangement of components than that shown in the diagram. For example, the computer device 30 can also include input / output devices, network access devices, buses, etc. Figure 3 The computer device 30 is merely an example and does not limit the computer device 30 in any way. The computer device 30 can include more or fewer components than shown in the diagram, or a different configuration of components, such as the computer device 30 also including input / output devices, network access devices, buses, etc.

[0155] The processor 302 can be a Central Processing Unit (CPU), a general-purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or the like. The general-purpose processor can be a microprocessor or the processor 302 can be any conventional processor, etc. The processor 302 is a control center of the computer device 30 and connects various parts of the computer device 30 through various interfaces and lines.

[0156] The memory 301 can be used to store computer-readable instructions 303. The processor 302 implements various functions of the computer device 30 by running or executing the computer-readable instructions or modules stored in the memory 301, and calling data stored in the memory 301. The memory 301 can mainly include a program storage area and a data storage area. The program storage area can store an operating system, at least one application program required for a function (such as a sound playing function, an image playing function, etc.), etc. The data storage area can store data created according to the use of the computer device 30, etc. In addition, the memory 301 can include a hard disk, a memory, a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a Flash Card, at least one disk storage device, a flash memory device, a Read-Only Memory (ROM), a Random Access Memory (RAM) or other non-volatile / volatile storage devices.

[0157] The modules integrated in the computer device 30, if implemented in the form of software function modules and sold or used as independent products, can be stored in a computer readable storage medium. Based on such understanding, all or part of the processes in the above-mentioned embodiment methods can also be completed by computer readable instructions instructing relevant hardware, and the computer readable instructions can be stored in a computer readable storage medium. When the computer readable instructions are executed by a processor, the steps of each method embodiment described above can be implemented.

[0158] Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. It is intended that the application encompass any and all variations or modifications of the application herein described and falling within the scope of the application. It is intended that the specification and examples be considered as exemplary only, with the true scope and spirit of the application being indicated by the following claims.

[0159] It should be understood that the application is not limited to the precise construction that has been described above and shown in the accompanying drawings, and that various modifications and changes can be made by those skilled in the art without departing from the scope of the application. The scope of the application is limited only by the appended claims.

Claims

1. A method of identifying user operational behavior, the method comprising: The method comprises: obtaining display parameters corresponding to a display page currently displayed on a client, and obtaining an operation track to be identified generated by a target object on the display page; the display parameters comprise a background image corresponding to the display page, and a first starting point coordinate and a first destination point coordinate in the background image for identifying an operation track; extracting a second starting point coordinate, a second destination point coordinate, time information and a random position value of the target object when generating the operation track to be identified; taking the second starting point coordinate, the second destination point coordinate, the time information and the random position value as an identification sample; when it is determined that a sliding distance corresponding to the operation track to be identified meets a condition according to the display parameters, matching a preset threshold interval set according to the display parameters with the identification sample to obtain a matching result, the matching result being used to determine whether the operation track to be identified is legal operation data; returning prompt information to the client to inform the matching result.

2. The method of claim 1, wherein, The method comprises: obtaining a background image corresponding to a display page to be rendered, and a first starting point coordinate and a first destination point coordinate in the background image for identifying an operation track before rendering the current display page on the client.

3. The method of claim 1, wherein, The method comprises: calculating an average value, a variance value and a standard deviation value corresponding to the identification sample; obtaining a decision value corresponding to the identification sample according to the average value and the variance value; obtaining a matching result based on a size comparison between the standard deviation value and a preset threshold interval, and between the decision value and the preset threshold interval, the preset threshold interval being obtained according to the display parameters.

4. The method of claim 3, wherein, The method comprises: calculating an average value and a variance value corresponding to the identification sample; and dividing the identification sample into a first number of sub-samples, wherein the first number of sub-samples comprises a first sub-sample containing the second starting point coordinate, and a second sub-sample containing the second destination point coordinate; calculating a first sub-standard deviation value corresponding to the first sub-sample, and calculating a second sub-standard deviation value corresponding to the second sub-sample.

5. The method of claim 3, wherein, The decision value corresponding to the identification sample is obtained according to the following formula: V = S 2 - X; wherein V represents a decision value, S 2 represents a standard deviation value, and X represents an average value.

6. The method of claim 4, wherein, The method comprises: when it is determined that the decision value is within the preset threshold interval, and the first sub-standard deviation value is less than the second sub-standard deviation value, confirming a matching result that the operation track to be identified is legal operation data; or, when it is determined that the decision value is not within the preset threshold interval, or the first sub-standard deviation value is not less than the second sub-standard deviation value, confirming a matching result that the operation track to be identified is illegal operation data.

7. An apparatus for recognizing a user operation behavior, the apparatus comprising: The method comprises: An obtaining module is configured to obtain a display parameter corresponding to a display page currently displayed on a client and to obtain an operation track to be identified generated by a target object on the display page; the display parameter comprises a background image corresponding to the display page and a first start point coordinate and a first destination point coordinate in the background image for identifying an operation track; The obtaining module is configured to extract a second start point coordinate, a second destination point coordinate, time information, and a random position value of the target object when the operation track to be identified is generated; The second start point coordinate, the second destination point coordinate, the time information, and the random position value are used as an operation track to be identified; A matching module is configured to match a preset threshold interval set according to the display parameter with the operation track to be identified when a sliding distance corresponding to the operation track to be identified determined according to the display parameter meets a condition, to obtain a matching result, and to use the matching result to determine whether the operation track to be identified is legal operation data; A sending module is configured to return prompt information used to inform the matching result to the client.

8. An electronic device, comprising: comprise: a memory for storing executable instructions; and a processor for displaying the memory to execute the executable instructions to complete the operation of the method for identifying a user operation behavior according to any one of claims 1-6.

9. A computer readable storage medium for storing computer readable instructions, characterized in that, The instructions are executed to perform the operation of the method for identifying a user operation behavior according to any one of claims 1-6.

Images