Pirated file detection method, device and equipment and storage medium

Abstract

The present application mainly relates to the computer technical field, mainly relates to a kind of pirated file detection method, device, equipment and storage medium, the pirated file detection method includes: obtaining the full-link record information of the file to be detected, the full-link record information is the trace information recorded in each business stage of the file to be detected;The full-link record information is parsed, and the file to be detected is detected according to the analysis result.The present application adds full-link record information in the file to be detected, reads the trace information of each business stage contained in the full-link record information when anti-theft detection is needed, so as to determine whether the file to be detected is a pirated file according to the trace information.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to a method, apparatus, device, and storage medium for detecting pirated files. Background Technology

[0002] Currently, with the development of self-media, more and more audio and video sharing websites have emerged, which has led to rampant piracy. File piracy has become an issue that cannot be ignored and urgently needs to be addressed.

[0003] Traditional or existing file theft prevention solutions include digital watermarking, content encryption or scrambling, and transmission authentication. These methods protect only a single node or sub-link in the entire link, making it difficult for the system to detect when the files to be detected are stolen at other nodes or sub-links in the entire link.

[0004] The above content is only used to help understand the technical solution of the present invention and does not represent an admission that the above content is prior art. Summary of the Invention

[0005] The main objective of this invention is to provide a method, apparatus, device, and storage medium for detecting pirated files, aiming to solve the technical problem that existing technologies cannot detect stolen audio and video files across the entire process.

[0006] To achieve the above objectives, the present invention provides a method for detecting pirated files, the method comprising the following steps:

[0007] Obtain the full-link record information of the file to be tested, wherein the full-link record information is the traceability information recorded by the file to be tested at each business stage;

[0008] The entire link record information is parsed, and the file to be detected is piracy detected based on the parsing results.

[0009] Optionally, the step of obtaining the full-link record information of the file to be inspected, wherein the full-link record information is traceability information recorded by the file to be inspected at each business stage, includes:

[0010] The system records traceability information of the document to be tested as it goes through each business stage by using a preset anti-theft program.

[0011] The traceability information is sorted according to the process sequence of each business stage to obtain full-link record information.

[0012] Optionally, the step of recording traceability information of the file to be detected as it passes through each business stage via a preset anti-theft program includes:

[0013] When the file to be detected passes through each of the business stages, the preset anti-theft program is executed;

[0014] When the preset anti-theft program fails to execute, the business stage in which the file to be detected is located is prohibited from being executed;

[0015] When the preset anti-theft program is successfully executed, the traceability information of the business stage that the file to be detected has passed through is recorded.

[0016] Optionally, after the step of recording the traceability information of the business stage that the file to be detected has passed through when the preset anti-theft program is successfully executed, the method further includes:

[0017] Check whether an asymmetric encrypted value exists in the traceability information;

[0018] When the asymmetric encrypted value is detected, an integrity check is performed on the asymmetric encrypted value;

[0019] When the asymmetric encryption value is incomplete, the file to be detected is marked as a pirated file.

[0020] Optionally, before the step of recording the traceability information of the document to be tested as it passes through each business stage through a preset anti-theft program, the following steps are included:

[0021] Obtain the preset configuration file from the anti-theft program;

[0022] When a configuration modification instruction is detected, the preset configuration file is set accordingly based on the configuration modification instruction to obtain a preset anti-theft program.

[0023] Optionally, parsing the end-to-end record information and performing piracy detection on the file to be detected based on the parsing results includes:

[0024] The end-to-end record information is parsed to obtain the traceability information of the file to be detected recorded in each business stage;

[0025] The business stages that the document to be detected has passed through are determined based on the traceability information;

[0026] The determination of whether the file to be detected is a pirated file is based on the business stages through which the file to be detected has passed.

[0027] Optionally, after the step of parsing the end-to-end record information and performing piracy detection on the file to be detected based on the parsing results, the method further includes:

[0028] When the file to be detected is marked as a pirated file, the account corresponding to the file to be detected is marked as a suspicious account;

[0029] The account will be banned if it is repeatedly marked as a suspicious account.

[0030] Furthermore, to achieve the above objectives, the present invention also proposes a pirated file detection device, which includes: an information acquisition module and an information parsing module;

[0031] The information acquisition module is used to acquire the full-link record information of the file to be tested, which is the traceability information recorded by the file to be tested in each business stage;

[0032] The information parsing module is used to parse the full-link record information and perform piracy detection on the file to be detected based on the parsing results.

[0033] Furthermore, to achieve the above objectives, the present invention also proposes a pirated file detection device, the device comprising: a memory, a processor, and a pirated file detection program stored in the memory and executable on the processor, the pirated file detection program being configured to implement the steps of the pirated file detection method described above.

[0034] In addition, to achieve the above objectives, the present invention also proposes a storage medium storing a piracy detection program, wherein when the piracy detection program is executed by a processor, it implements the steps of the piracy detection method described above.

[0035] This invention discloses: acquiring end-to-end record information of a file to be detected, wherein the end-to-end record information is traceability information recorded by the file to be detected at each business stage; parsing the end-to-end record information; and performing piracy detection on the file to be detected based on the parsing results. This method adds end-to-end record information to the file to be detected, and when anti-piracy detection is required, reads the traceability information of each business stage contained in the end-to-end record information, thereby determining whether the file to be detected is a pirated file based on the traceability information. Attached Figure Description

[0036] Figure 1 This is a schematic diagram of the structure of a pirated file detection device in the hardware operating environment involved in the embodiments of the present invention;

[0037] Figure 2 This is a flowchart illustrating the first embodiment of the method for detecting pirated files according to the present invention;

[0038] Figure 3 This is a flowchart illustrating the second embodiment of the method for detecting pirated files according to the present invention;

[0039] Figure 4 This is a flowchart illustrating the third embodiment of the method for detecting pirated files according to the present invention;

[0040] Figure 5 This is a structural block diagram of the first embodiment of the pirated document detection device of the present invention.

[0041] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0042] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of the invention.

[0043] Reference Figure 1 , Figure 1 This is a schematic diagram of the structure of a pirated file detection device in the hardware operating environment involved in the embodiments of the present invention.

[0044] like Figure 1 As shown, the piracy detection device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display screen and an input unit such as a keyboard; optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a Wireless-Fidelity (Wi-Fi) interface). The memory 1005 may be high-speed random access memory (RAM) or stable non-volatile memory (NVM), such as a disk drive. The memory 1005 may also optionally be a storage device independent of the aforementioned processor 1001.

[0045] Those skilled in the art will understand that Figure 1 The structure shown does not constitute a limitation on the pirated document detection device and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0046] like Figure 1 As shown, the memory 1005, which serves as a storage medium, may include an operating system, a network communication module, a user interface module, and a pirated file detection program.

[0047] exist Figure 1In the pirated file detection device shown, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the pirated file detection device of the present invention can be set in the pirated file detection device, and the pirated file detection device calls the pirated file detection program stored in the memory 1005 through the processor 1001 and executes the pirated file detection method provided in the embodiment of the present invention.

[0048] This invention provides a method for detecting pirated files, referring to... Figure 2 , Figure 2 This is a flowchart illustrating the first embodiment of the method for detecting pirated files according to the present invention.

[0049] In this embodiment, the method for detecting pirated files includes the following steps:

[0050] Step S10: Obtain the full-link record information of the file to be tested, wherein the full-link record information is the traceability information recorded by the file to be tested at each business stage;

[0051] It should be understood that the executing entity of the above-mentioned method for detecting pirated files can be an electronic device with data processing, network communication, and program execution functions. Specifically, it can be a backend server, which is capable of reading, writing, and storing several files to be detected, or other electronic devices capable of performing the same or similar functions, such as the aforementioned pirated file detection device. This embodiment does not impose any limitations on this. The following uses the aforementioned pirated file detection device as an example to specifically describe this embodiment and the following embodiments.

[0052] It should be understood that the file to be detected is a file that can be recognized by the aforementioned piracy detection device. It can be an audio or video file or an image or document file. The following description uses an audio or video file as an example to illustrate this embodiment.

[0053] It should be understood that there are several steps between the acquisition and playback of audio and video files, including: audio and video acquisition end (audio and video acquisition, encoding and compression, file splitting and protocol encapsulation, etc.), streaming (streaming media transmission protocol), business server (recording, transcoding, storage and distribution), streaming (streaming media transmission protocol), and playback end (protocol decryption, decapsulation, decoding and playback metadata), etc. The above-mentioned business stages are the above-mentioned steps, and the above-mentioned traceability information is the relevant information recorded when the audio and video file performs different operations in the above-mentioned business stages. For example, when acquiring audio and video, the above-mentioned traceability information includes: media type, media data format, acquisition device, device MAC, and acquisition time, etc. When encoding and compression, the corresponding traceability information includes: encoder type, encoding scheme, output bitrate, and encoding time, etc.

[0054] It is understandable that the aforementioned end-to-end recording information is a sum of all traceability information saved by the file to be tested at each business stage. Traceability information is a record of necessary information that can summarize the current business stage. For example, the traceability information corresponding to the audio and video acquisition terminal mentioned above includes: media type, media data format, acquisition device, device MAC, and acquisition time.

[0055] Step S20: Parse the full-link record information and perform piracy detection on the file to be detected based on the parsing results.

[0056] It should be understood that the above-mentioned parsing of the full-link record information specifically includes obtaining all traceability information of the file to be tested in each business stage in the above-mentioned full-link record information; determining the order of all the above-mentioned traceability information according to the process sequence, thereby determining the business stages that the file to be tested has gone through.

[0057] It should be understood that the above-mentioned piracy detection of the file to be detected based on the analysis results specifically includes determining whether the file to be detected is a stolen file based on the business stages that the file to be detected has gone through. For example, if the full-link record information corresponding to file A contains traceability information of the playback end, and after the traceability information of the playback end, traceability information of another acquisition end is also stored, then it can be considered that file A was stolen at the playback end. Of course, because the business stages and methods of theft are different, the methods of determining whether the file to be detected is a stolen file based on the full-link information are also different. Therefore, the conditions for determining whether the file to be detected is a stolen file are also different. For example, if the file to be detected was stolen during the streaming stage, then based on the multiple possibilities of the protocol version in the traceability information of the streaming stage in the full-link record information, it can be determined that the file to be detected was stolen during the streaming stage. Alternatively, it can be determined whether the file to be detected is a pirated file by detecting whether there are similar files in the database and comparing the traceability information of the two.

[0058] In practical implementation, the method of detecting the complete business stage is usually adopted to detect whether the file to be detected is a pirated file. The business stage at which the pirated file was stolen is determined based on the traceability information recorded in each business stage. For example, when there is a complete traceability information of the complete business stage from the acquisition end, push stream, business server, pull stream and playback end in the full link record information corresponding to the file to be detected B, if there is other traceability information after this complete business stage, such as traceability information of another acquisition end, the file to be detected B is regarded as a pirated file, and it is believed that the file to be detected B was stolen at the playback end of the complete business stage. If there is traceability information of other business stages before this complete business stage, then the file to be detected B is considered to be a potentially stolen file, or it may be a duplicate uploaded file. The duplicate uploaded file is the file that was repeatedly uploaded due to the failure of some business stage operations.

[0059] Furthermore, in order to achieve piracy detection of the file to be detected through the above-mentioned end-to-end information, step S20 of this embodiment also includes:

[0060] Step S21: Parse the end-to-end record information to obtain the traceability information recorded by the file to be detected in each business stage;

[0061] Step S22: Determine the business stage that the document to be detected has passed through based on the traceability information;

[0062] Step S23: Determine whether the file to be detected is a pirated file based on the business stages it has gone through.

[0063] It is important to understand that the above method of determining whether a file to be tested is a pirated file based on the business stages it has gone through mainly relies on detecting the complete business stages to determine whether the file to be tested is a pirated file. This is because, under normal circumstances, an audio or video file will go through all business stages from the acquisition end to the playback end. In this case, it is only necessary to detect each business stage present in the audio or video file to determine whether the audio or video file has been stolen at a certain business stage.

[0064] The first embodiment discloses: acquiring end-to-end record information of the file to be detected, wherein the end-to-end record information is traceability information recorded by the file to be detected at each business stage; parsing the end-to-end record information; and performing piracy detection on the file to be detected based on the parsing results. This embodiment adds end-to-end record information to the file to be detected, and when anti-piracy detection is required, reads the traceability information of each business stage contained in the end-to-end record information, thereby determining whether the file to be detected is a pirated file based on the traceability information.

[0065] refer to Figure 3 , Figure 3 This is a flowchart illustrating the second embodiment of the method for detecting pirated files according to the present invention.

[0066] Based on the first embodiment described above, in this embodiment, step S10 includes:

[0067] Step S11: Record the traceability information of the file to be tested as it goes through each business stage through a preset anti-theft program;

[0068] It should be understood that the aforementioned preset anti-theft program is a script file embedded in the aforementioned audio and video files before each of the aforementioned business stages. The aforementioned preset anti-theft program is executed once each time the aforementioned business stage is performed on the aforementioned file to be detected. The aforementioned preset anti-theft program can only be set before the aforementioned audio and video files. If it is placed after the aforementioned audio and video files, the aforementioned preset anti-theft program cannot be modified or deleted. Correspondingly, the aforementioned traceability information saved by the aforementioned preset anti-theft program also cannot be modified or deleted.

[0069] Furthermore, to achieve the goal of recording traceability information of the file to be detected as it passes through each business stage through the aforementioned preset anti-theft procedure, step S11 specifically includes:

[0070] Step S111: When the file to be detected passes through each of the business stages, execute the preset anti-theft program;

[0071] It is understandable that the above-mentioned preset anti-theft program saves different traceability information when it is executed at different business stages. For example, when the above-mentioned preset anti-theft program is executed at the acquisition end, traceability information such as media type, media data format, acquisition device, device MAC, and acquisition time is saved; when the above-mentioned preset anti-theft program is executed at the playback end, traceability information such as decoding method, decoder, and decoding time is saved.

[0072] Step S112: When the preset anti-theft program fails to execute, the business stage in which the file to be detected is located is prohibited from being executed;

[0073] Step S113: When the preset anti-theft program is successfully executed, record the traceability information of the business stage that the file to be detected has passed through.

[0074] It is important to understand that the traceability information corresponding to each of the above business stages can be: acquisition end information (media type, media data format, acquisition device, device MAC, and acquisition time, etc.), compression encoding information (encoder type, encoding scheme, output bitrate, and encoding time, etc.), container encapsulation (encapsulation format, audio channel, subtitle channel, encapsulation format information digest, encapsulation size, and publisher copyright certificate, etc.), streaming media transmission protocol (protocol type and protocol version, etc.), and playback end decoding (decoding method, decoder type, and decoding time, etc.).

[0075] Furthermore, to detect whether the file to be detected is a stolen file that has been edited, after step S113, the following steps are also included:

[0076] Step S1131: Query whether there is an asymmetric encrypted value in the traceability information;

[0077] It's important to understand that the aforementioned asymmetric encryption value can be a message digest. This message digest is a characteristic feature of a piece of data, and it changes whenever the data changes. The characteristics of this message digest include: variable input, fixed output length (i.e., regardless of the length of the input data, a fixed-length message digest will be generated); different input data will always produce different message digests; and one-way transmission (i.e., the digest can only be generated from the input data, and the data cannot be deduced from the digest).

[0078] Step S1132: When the asymmetric encryption value is detected, perform an integrity check on the asymmetric encryption value;

[0079] It should be understood that the above-mentioned integrity judgment of the asymmetric encrypted value includes obtaining the result of the digest calculation in the previous business stage and comparing it with the result of the digest calculation in the current business stage. When the two results are the same, the asymmetric encrypted value of the current business stage is considered to be complete, and the result of the digest calculation is the result of the digest calculation of the information digest.

[0080] Step S1133: When the asymmetric encryption value is incomplete, mark the file to be detected as a pirated file.

[0081] It is important to understand that the file to be tested with the incomplete asymmetric encryption value is a pirated file that has been edited. Due to the incompleteness of the asymmetric encryption value, the file to be tested can be considered to have been edited and modified. When performing piracy detection, since the file to be tested has undergone secondary processing, it is inconvenient to compare it with existing saved files when determining whether it is a pirated file. In this case, by detecting the asymmetric encryption value of the file to be tested, it can be determined whether the file to be tested has been maliciously edited, thereby determining whether the file to be tested is a pirated file.

[0082] Furthermore, to enable the customized configuration of traceability information in the aforementioned preset anti-theft program, the procedure prior to step S11 includes:

[0083] Step S01: Obtain the preset configuration file in the anti-theft program;

[0084] It is important to understand that the aforementioned preset configuration file can be a configuration file used to select the corresponding traceability information recorded by the anti-piracy program at each business stage. For example, the media information mentioned above includes media type, media data format, acquisition device, device MAC address, and acquisition time. In actual operation, it is not necessary to record all of the above information. Since the traceability information cannot be modified or deleted, the amount of data corresponding to the traceability information will continue to increase as the business stage increases. This will inevitably lead to a continuous increase in file size. Although this can be used as one of the methods to determine pirated files (i.e., of two identical audio and video files, the one with the larger data volume is the pirated file), not all traceability information needs to be saved. In this case, the configuration file needs to be configured to determine the selection of the traceability information. For example, in the media segment traceability information mentioned above, media type, media data format, and acquisition device are required traceability information that cannot be changed, but the device MAC address and acquisition time are optional traceability information recording targets. The uploader of the file to be detected can consider the configuration options of the above configuration file according to their own needs and the size of the audio and video file.

[0085] Step S02: When a configuration modification instruction is detected, the preset configuration file is set accordingly according to the configuration modification instruction to obtain a preset anti-theft program.

[0086] It should be understood that if the above configuration modification command is not detected or the content of the above configuration modification command is empty, it is considered that the detection of the above configuration modification command has failed. In this case, the default configuration is selected to configure the above preset configuration file to obtain the preset anti-theft program. The above default configuration only includes the configuration of the above-mentioned traceable information.

[0087] Step S12: Sort the traceability information according to the process sequence of each business stage to obtain full-link record information.

[0088] It should be understood that the above-mentioned audio and video have a complete business process stage from acquisition to playback. The sorting of the traceability information according to the process order of each business stage can be sorted according to the complete business process stage from acquisition to playback. When there is a business process stage that is inconsistent with the regular complete business process stage, the sorting is based on the time order of execution of the above-mentioned business process stage.

[0089] This embodiment records traceability information of the file to be tested as it passes through each business stage using a preset anti-theft program, and sorts the traceability information according to the process order of each business stage to obtain the full-link record information. This embodiment places the preset anti-theft program on the file to be tested at the beginning of each business stage, and executes the preset anti-theft program every time the file to be tested passes through the business stage, thereby saving the traceability information of the business stages. After sorting the traceability information according to the process order of the business stages, the full-link record information is obtained.

[0090] refer to Figure 4 , Figure 4 This is a flowchart illustrating the third embodiment of the method for detecting pirated files according to the present invention.

[0091] Based on the above embodiments, in this embodiment, to reduce the automatic uploading of stolen videos by web crawlers, after step S20, the method further includes:

[0092] Step S30: When the file to be detected is marked as a pirated file, mark the account corresponding to the file to be detected as a suspicious account;

[0093] Step S40: When the account is marked as a suspicious account multiple times, the account is banned.

[0094] It is important to understand that this embodiment is primarily applied to today's self-media audio and video websites. Currently, most pirated file uploaders are various marketing accounts. These marketing accounts use web crawlers to scrape local websites or other websites to steal audio and video files, and then automatically upload the stolen files to the backend server of the audio and video website. Therefore, in addition to blocking the pirated files, it is also necessary to block the suspicious accounts that upload pirated files multiple times, that is, the marketing accounts that use web crawlers to steal audio and video files, to further prevent the rampant piracy.

[0095] It is important to understand that when obtaining the account corresponding to the file to be detected, it is necessary to obtain the account information. The account information is the information of the audio and video publisher recorded on the aforementioned self-media audio and video website. The account information may include the account owner's audio and video historical upload records and corresponding real-name authentication information. In specific implementation, for the accounts that have been repeatedly identified as suspicious accounts, by obtaining the real-name information in the aforementioned account information, all accounts under the real-name information can be banned, thereby reducing the behavior of multiple accounts under an individual's name uploading pirated files.

[0096] It should be understood that the above multiple markings can be three or five markings. In practice, three markings are generally selected as the threshold for identifying an account as a suspicious account.

[0097] It should be understood that, as the aforementioned suspicious accounts are banned, the pirated files uploaded by those accounts are also banned simultaneously. By banning accounts that have uploaded pirated files multiple times, the aforementioned pirated files are also banned. Considering the error in system detection, in this embodiment, accounts that have uploaded pirated files once or twice are only given a warning and then manually reviewed to avoid affecting the normal use of normal users.

[0098] Furthermore, to achieve the above objectives, the present invention also proposes a pirated file detection device, the device comprising: a memory, a processor, and a pirated file detection program stored in the memory and executable on the processor, the pirated file detection program being configured to implement the steps of the pirated file detection method described above.

[0099] Furthermore, this embodiment of the invention also proposes a storage medium storing a piracy detection program, which, when executed by a processor, implements the steps of the piracy detection method described above.

[0100] Reference Figure 5 , Figure 5 This is a structural block diagram of the first embodiment of the pirated document detection device of the present invention.

[0101] like Figure 5As shown, the pirated file detection device proposed in this embodiment of the invention includes: an information acquisition module 501 and an information parsing module 502;

[0102] The information acquisition module 501 is used to acquire the full-link record information of the file to be tested, wherein the full-link record information is the traceability information recorded by the file to be tested in each business stage;

[0103] The information parsing module 502 is used to parse the full-link record information and perform piracy detection on the file to be detected based on the parsing results.

[0104] Based on the first embodiment of the pirated document detection device of the present invention, a second embodiment of the pirated document detection device of the present invention is proposed.

[0105] In this embodiment, the information acquisition module 501 is also used to record traceability information of the file to be detected as it goes through each business stage through a preset anti-theft program;

[0106] The information acquisition module 501 is also used to sort the traceability information according to the process sequence of each business stage to obtain full-link record information.

[0107] Furthermore, the information acquisition module 501 is also used to execute the preset anti-theft program when the file to be detected passes through each of the business stages;

[0108] The information acquisition module 501 is also used to prohibit the execution of the business stage of the file to be detected when the preset anti-theft program fails to execute.

[0109] The information acquisition module 501 is also used to record the traceability information of the business stage that the file to be detected has passed through when the preset anti-theft program is successfully executed.

[0110] Furthermore, the information acquisition module 501 is also used to query whether there is an asymmetric encrypted value in the traceability information;

[0111] The information acquisition module 501 is also used to perform an integrity judgment on the asymmetric encryption value when the asymmetric encryption value is detected.

[0112] The information acquisition module 501 is also used to mark the file to be detected as a pirated file when the asymmetric encryption value is incomplete.

[0113] Furthermore, the information acquisition module 501 is also used to acquire a preset configuration file in the anti-theft program;

[0114] The information acquisition module 501 is also used to, when a configuration modification instruction is detected, set the preset configuration file accordingly based on the configuration modification instruction to obtain a preset anti-theft program.

[0115] Furthermore, the information parsing module 502 is also used to parse the end-to-end record information to obtain the traceability information recorded by the file to be detected in each business stage;

[0116] The information parsing module 502 is also used to determine the business stage that the document to be detected has gone through based on the traceability information;

[0117] The information parsing module 502 is also used to determine whether the file to be detected is a pirated file based on the business stages through which the file to be detected has gone.

[0118] Furthermore, the pirated file detection device also includes: a blocking module 503;

[0119] The blocking module 503 is used to mark the account corresponding to the file to be detected as a suspicious account when the file to be detected is marked as a pirated file;

[0120] The blocking module 503 is used to block the account when the account is marked as a suspicious account multiple times.

[0121] Other embodiments or specific implementations of the pirated document detection device of the present invention can be referred to the above-described method embodiments, and will not be repeated here.

[0122] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element.

[0123] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0124] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as read-only memory / random access memory, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0125] The above are merely preferred embodiments of the present invention and do not limit the scope of the patent. Any equivalent structural or procedural transformations made based on the description and drawings of the present invention, or direct or indirect applications in other related technical fields, are similarly included within the scope of patent protection of the present invention.

Claims

1. A method for detecting pirated files, characterized in that, The method for detecting pirated files includes: Obtain the full-link record information of the file to be tested, wherein the full-link record information is the traceability information recorded by the file to be tested in each business stage; the traceability information is the relevant information recorded by the file to be tested when it performs different operations in each business stage; The end-to-end record information is parsed, and the file to be detected is subjected to piracy detection based on the parsing results; The step of obtaining the full-link record information of the file to be tested, wherein the full-link record information is the traceability information recorded by the file to be tested at each business stage, includes: The preset anti-theft program records the traceability information of the file to be tested as it goes through each business stage. The preset anti-theft program is executed once each time the file to be tested performs a business stage. The traceability information is sorted according to the process sequence of each business stage to obtain full-link record information; The step of parsing the end-to-end record information and performing piracy detection on the file to be detected based on the parsing results includes: The end-to-end record information is parsed to obtain the traceability information of the file to be detected recorded in each business stage; The business stages that the document to be detected has passed through are determined based on the traceability information; The system detects the complete business stages of the file to be detected to determine whether the file is a pirated file.

2. The method for detecting pirated documents as described in claim 1, characterized in that, The method of recording traceability information of the file to be detected at each business stage through a preset anti-theft program includes: When the file to be detected passes through each of the business stages, the preset anti-theft program is executed; When the preset anti-theft program fails to execute, the business stage in which the file to be detected is located is prohibited from being executed; When the preset anti-theft program is successfully executed, the traceability information of the business stage that the file to be detected has passed through is recorded.

3. The method for detecting pirated documents as described in claim 2, characterized in that, After the step of recording the traceability information of the business stage that the file to be detected has passed through when the preset anti-theft program is successfully executed, the method further includes: Check whether an asymmetric encrypted value exists in the traceability information; When the asymmetric encrypted value is detected, an integrity check is performed on the asymmetric encrypted value; When the asymmetric encryption value is incomplete, the file to be detected is marked as a pirated file.

4. The method for detecting pirated documents as described in claim 1, characterized in that, Before the step of recording the traceability information of the file to be detected through each business stage via a preset anti-theft program, the following steps are included: Obtain the preset configuration file from the anti-theft program; When a configuration modification instruction is detected, the preset configuration file is set accordingly based on the configuration modification instruction to obtain a preset anti-theft program.

5. The method for detecting pirated documents as described in any one of claims 1 to 4, characterized in that, After the step of parsing the end-to-end record information and performing piracy detection on the file to be detected based on the parsing results, the method further includes: When the file to be detected is marked as a pirated file, the account corresponding to the file to be detected is marked as a suspicious account; The account will be banned if it is repeatedly marked as a suspicious account.

6. A device for detecting pirated documents, characterized in that, The pirated file detection device includes: an information acquisition module and an information parsing module; The information acquisition module is used to acquire the full-link record information of the file to be tested. The full-link record information is the traceability information recorded by the file to be tested in each business stage. The traceability information is the relevant information recorded by the file to be tested when it performs different operations in each business stage. The information parsing module is used to parse the full-link record information and perform piracy detection on the file to be detected based on the parsing results; The information acquisition module is also used to record the traceability information of the file to be tested as it goes through each business stage through a preset anti-theft program. The preset anti-theft program is executed once each time the file to be tested performs a business stage. The traceability information is sorted according to the process order of each business stage to obtain full-link record information. The information parsing module is further configured to parse the full-link record information to obtain traceability information recorded by the file to be detected in each business stage; determine the business stages that the file to be detected has passed through based on the traceability information; detect the complete business stages based on the business stages that the file to be detected has passed through, and determine whether the file to be detected is a pirated file.

7. A device for detecting pirated documents, characterized in that, The device includes: a memory, a processor, and a piracy detection program stored on the memory and executable on the processor, the piracy detection program being configured to implement the steps of the piracy detection method as described in any one of claims 1 to 5.

8. A storage medium, characterized in that, The storage medium stores a piracy detection program, which, when executed by a processor, implements the steps of the piracy detection method as described in any one of claims 1 to 5.

Images