A terminal device fingerprint generation method and apparatus

Abstract

The application provides a terminal device fingerprint generation method and device, the method comprising: collecting first device information of a target terminal device by a pre-configured terminal burying point; collecting second device information of the target terminal device on a server based on an OSI protocol stack; collecting features of the first device information and the second device information to obtain collection information; reporting the collection information to a cloud server after encryption, so that the cloud server generates a unique identifier according to the collection information; receiving the unique identifier fed back by the cloud server; and generating a terminal device fingerprint of the target terminal device according to the unique identifier. It can be seen that the method can generate a fingerprint corresponding to the uniqueness of the device, and has high security.

Description

Technical Field

[0001] This application relates to the field of computer technology, and more specifically, to a method and apparatus for generating fingerprints for a terminal device. Background Technology

[0002] Currently, device fingerprinting refers to a device characteristic or unique identifier that can be used to uniquely identify a device. Device fingerprinting of electronic devices is similar to how governments use ID cards to identify citizens in the real world; it's a technology used in the internet and mobile internet fields to distinguish different electronic devices. Existing terminal device fingerprinting typically uses the device's built-in unique identifier or IP address as the device fingerprint. However, in practice, it has been found that based on dynamic IP allocation technology, it is difficult to uniquely match device fingerprints with devices; at the same time, using the device's built-in unique identifier has low security and is easily forged. Therefore, existing methods cannot achieve a unique correspondence between fingerprints and devices, resulting in low security. Summary of the Invention

[0003] The purpose of this application is to provide a method and apparatus for generating fingerprints for terminal devices, which can generate fingerprints that are uniquely associated with the device and have high security.

[0004] The first aspect of this application provides a fingerprint generation method for a terminal device, including:

[0005] Actively collect the first device information of the target terminal device through pre-configured terminal embedding points;

[0006] The server collects the second device information of the target terminal device based on the OSI protocol stack.

[0007] Feature acquisition is performed on the first device information and the second device information to obtain acquired information;

[0008] The collected information is encrypted and reported to the cloud server, so that the cloud server can generate a unique identifier based on the collected information;

[0009] Receive the unique identifier fed back by the cloud server;

[0010] The terminal device fingerprint of the target terminal device is generated based on the unique identifier.

[0011] In the implementation process, the method can first actively collect first device information of the target terminal device in a pre-configured terminal burying point; secondly, collect second device information of the target terminal device based on an OSI protocol stack on a server side; then, collect features of the first device information and the second device information to obtain collection information; then, encrypt the collection information and report it to a cloud server, so that the cloud server generates a unique identifier according to the collection information; then, receive the unique identifier fed back by the cloud server; and finally, generate a terminal device fingerprint of the target terminal device according to the unique identifier. It can be seen that this embodiment can generate a fingerprint corresponding to the uniqueness of the device, which is highly secure.

[0012] Further, the first device information at least includes a device unique identifier, a device MAC address, a device WIFI list, an advertising identifier, an international mobile equipment identity, and browser visit information.

[0013] The second device information at least includes software information, hardware information, and network information.

[0014] Further, the collecting features of the first device information and the second device information to obtain collection information includes:

[0015] Summarizing the first device information and the second device information to obtain device information;

[0016] Obtaining a feature collection range;

[0017] Classifying the device information according to the feature collection range to obtain category information of multiple categories;

[0018] Slicing the category information according to dates to obtain sliced information;

[0019] Collecting features of the sliced information according to preset collection conditions to obtain collection information.

[0020] Further, the feature collection range includes a unique identifier category, a MAC address category, a WIFI list category, an advertising identifier category, an international mobile equipment identity category, a browser visit information category, a software information category, a hardware information category, and a network information category.

[0021] Further, the collecting features of the sliced information according to preset collection conditions to obtain collection information includes:

[0022] Collecting features of the sliced information according to different dates and a preset feature category number to obtain collection information, wherein the preset feature category number is less than a total number of categories in the feature collection range.

[0023] The second aspect of the embodiment of the present application provides a terminal device fingerprint generation device, the terminal device fingerprint generation device comprises:

[0024] an information collection unit configured to actively collect first device information of a target terminal device through preconfigured terminal burying points, and collect second device information of the target terminal device based on an OSI protocol stack on a server;

[0025] a feature collection unit configured to perform feature collection on the first device information and the second device information to obtain collection information;

[0026] a reporting unit configured to report the collection information to a cloud server in an encrypted manner, so that the cloud server generates a unique identifier based on the collection information;

[0027] a receiving unit configured to receive the unique identifier fed back by the cloud server;

[0028] a fingerprint generation unit configured to generate a terminal device fingerprint of the target terminal device based on the unique identifier.

[0029] In the implementation process, the device can actively collect first device information of a target terminal device through preconfigured terminal burying points, and collect second device information of the target terminal device based on an OSI protocol stack on a server through the information collection unit; the feature collection unit is configured to perform feature collection on the first device information and the second device information to obtain collection information; the reporting unit is configured to report the collection information to a cloud server in an encrypted manner, so that the cloud server generates a unique identifier based on the collection information; the receiving unit is configured to receive the unique identifier fed back by the cloud server; and the fingerprint generation unit is configured to generate a terminal device fingerprint of the target terminal device based on the unique identifier. It can be seen that, by implementing this embodiment, a fingerprint corresponding to the uniqueness of the device can be generated, and the security is high.

[0030] Further, the first device information at least includes a device unique identifier, a device MAC address, a device WIFI list, an advertising identifier, an international mobile equipment identity, and browser visit information.

[0031] The second device information at least includes software information, hardware information, and network information.

[0032] Further, the feature collection unit comprises:

[0033] a summarizing subunit configured to summarize the first device information and the second device information to obtain device information;

[0034] an acquisition subunit configured to acquire a feature collection range;

[0035] A classifying sub-unit is configured to classify the device information according to the feature collection range, and obtain class information of multiple classes.

[0036] A slicing sub-unit is configured to slice the class information according to dates, and obtain sliced information.

[0037] A collecting sub-unit is configured to collect features of the sliced information according to preset collection conditions, and obtain collection information.

[0038] Further, the feature collection range includes a unique identifier class, a MAC address class, a WIFI list class, an advertisement identifier class, an international mobile equipment identity class, a browser visit information class, a software information class, a hardware information class, and a network information class.

[0039] Further, the collecting sub-unit is specifically configured to collect features of the sliced information according to different dates and a preset feature class number, and obtain collection information, where the preset feature class number is less than a total number of classes in the feature collection range.

[0040] The third aspect of the embodiments of the present application provides an electronic device, including a memory and a processor, the memory is used for storing a computer program, and the processor runs the computer program to make the electronic device execute the terminal device fingerprint generation method in any one of the first aspect of the embodiments of the present application.

[0041] The fourth aspect of the embodiments of the present application provides a computer readable storage medium, which stores computer program instructions, when the computer program instructions are read and run by a processor, the terminal device fingerprint generation method in any one of the first aspect of the embodiments of the present application is executed. BRIEF DESCRIPTION OF DRAWINGS

[0042] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as a limitation on the scope, and for those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.

[0043] Figure 1 A flowchart of a terminal device fingerprint generation method provided by the embodiments of the present application;

[0044] Figure 2 A flowchart of a terminal device fingerprint generation method provided by the embodiments of the present application;

[0045] Figure 3 A structure diagram of a terminal device fingerprint generation apparatus provided by the embodiments of the present application;

[0046] Figure 4 A structural schematic diagram of a terminal device fingerprint generation apparatus is provided in the embodiments of the present application. DETAILED DESCRIPTION

[0047] The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.

[0048] It should be noted that similar reference numerals and letters refer to similar items in the following drawings, and therefore, once an item is defined in one drawing, it need not be further defined and explained in subsequent drawings. Meanwhile, in the description of the present application, the terms “first”, “second”, and the like are only used for distinguishing description, and cannot be understood as indicating or implying relative importance.

[0049] Embodiment 1

[0050] Please refer to Figure 1 , Figure 1 A flowchart of a terminal device fingerprint generation method is provided in the embodiments of the present application. The terminal device fingerprint generation method comprises the following steps.

[0051] S101, collecting first device information of a target terminal device by a pre-configured terminal burying point.

[0052] In the embodiment, the first device information at least includes device unique identification, device MAC address, device WIFI list, advertisement identifier, international mobile equipment identification code, and browser visit information.

[0053] S102, collecting second device information of the target terminal device based on an OSI protocol stack on a server side.

[0054] In the embodiment, the second device information at least includes software information, hardware information, and network information.

[0055] S103, collecting features of the first device information and the second device information to obtain collection information.

[0056] S104, encrypting the collection information and reporting to a cloud server, so that the cloud server generates a unique identification according to the collection information.

[0057] S105, receiving the unique identification fed back by the cloud server.

[0058] S106, generating a terminal device fingerprint of the target terminal device according to the unique identification.

[0059] In this embodiment, the method can first determine the collected content. Among them, the process mainly has two parts, one is to actively collect the content including the terminal device information (uniqueness ID, MAC address, WIFI list, IDFA, IMEI information, browser visit information) in the terminal through SDK or JS script; the other is to collect the terminal device software information, hardware information and network information based on the OSI protocol stack, and the server acquires the communication protocol and network characteristics. Based on the above 9 kinds of characteristic collection range, 8 kinds of 9 kinds of characteristics are collected according to the date as a slice. Then the collected information is reported to the cloud in an encrypted manner, and the cloud service generates a unique device ID according to the complex algorithm behind the scene and returns it to the front end.

[0060] In actual application, when the method is applied in the financial field, the complex collection algorithm and the complex device fingerprint generation algorithm can be used to identify and intercept a long-term fake card agency immediately after going online. After the agency found that the bank side has a check on the legality and authenticity of the client side, it tried to crack the algorithm continuously, and finally gave up after a month. Finally, the fake card has decreased significantly, with nearly 200 pens per day.

[0061] In this embodiment, the execution subject of the method can be a computer, a server or other computing device, which is not limited in this embodiment.

[0062] In this embodiment, the execution subject of the method can also be a smart phone, a tablet computer or other smart device, which is not limited in this embodiment.

[0063] It can be seen that by implementing the terminal device fingerprint generation method described in this embodiment, the credit card application middle platform can automatically generate a changeable collection strategy by dynamically adjusting the algorithm to generate a non-copyable client fingerprint. Specifically, the method can collect terminal information while following the algorithm to take 8 of the 9 characteristics, so that the forger cannot determine the collection characteristics and algorithm. At the same time, it can also be immediately recognized and processed by the server when the intercepted content is copied and uploaded. In addition, even if the forger finds that the collection has algorithm control, he cannot find the specific rule, so as to avoid effectively collecting information.

[0064] Embodiment 2

[0065] Please refer to Figure 2 , Figure 2 A flowchart of a terminal device fingerprint generation method is provided for the embodiments of the present application. The terminal device fingerprint generation method comprises:

[0066] S201, actively collecting first device information of a target terminal device at a pre-configured terminal bury point.

[0067] In the embodiment, the first device information at least includes device unique identifier, device MAC address, device WIFI list, advertisement identifier, international mobile equipment identity, and browser visit information.

[0068] S202, collecting second device information of the target terminal device based on the OSI protocol stack on the server side.

[0069] In the embodiment, the second device information at least includes software information, hardware information, and network information.

[0070] S203, aggregating the first device information and the second device information to obtain device information.

[0071] S204, obtaining a feature collection range.

[0072] In the embodiment, the feature collection range includes unique identifier type, MAC address type, WIFI list type, advertisement identifier type, international mobile equipment identity type, browser visit information type, software information type, hardware information type, and network information type.

[0073] S205, classifying the device information according to the feature collection range to obtain class information of multiple classes.

[0074] S206, slicing the class information according to date to obtain sliced information.

[0075] S207, collecting features of the sliced information according to different dates and a preset feature class number to obtain collected information.

[0076] In the embodiment, the preset feature class number is less than the total number of classes in the feature collection range.

[0077] S208, encrypting and reporting the collected information to a cloud server, so that the cloud server generates a unique identifier according to the collected information.

[0078] S209, receiving the unique identifier fed back by the cloud server.

[0079] S210, generating a terminal device fingerprint of the target terminal device according to the unique identifier.

[0080] In the embodiment, the current credit card network card environment is complex, and there are many fake card applications, card applications, and intermediary card applications, which not only harm the interests of users, but also seriously affect the stability of the social economy. Therefore, a technology is needed to identify the source of the client's submission, which is used for card approval and risk investigation. Therefore, the unique representation of the client terminal submission identification is particularly important. The traditional device identification technology commonly used in the WEB end is IP and COOKIE. The commonly used technology in the APP end is the device self-provided identification ID.

[0081] In the embodiment, the technical feature of the IP is that the IP address is the most commonly used device identification technology. It is simple to use and easy to parse and obtain, and is still widely used until now. However, the disadvantages include that it is difficult to uniquely correspond to the device by using the dynamic IP allocation technology; it is difficult to identify the specific device by using the IP because most companies have many local area network devices corresponding to one public network exit IP; and the resolution and accuracy of identifying the device by using the IP are greatly reduced because the black production industry abuses the IP proxy pool technology to frequently change the IP, and one device often corresponds to many IPs.

[0082] In the embodiment, the current COOKIE technology has the advantages of being a long-standing technology, being compatible with various historical versions of browsers, and being easy to parse and obtain. However, the disadvantages include that the COOKIE is easily cleaned up or tampered with by a cache cleaning tool, or shielded by a browser security rule, and has poor stability.

[0083] In the embodiment, the current APP self-identification ID technology has the advantages of IMEI, IMSI, IDFA, and IDFV having good resolution. However, the disadvantages include that the permission of the identification element in the new version of the APP system is shrinking; the elements can be easily modified by using a large number of rooting tools; and the elements are easily paid attention to by the black production, and thus become the main attack object.

[0084] In the embodiment, the method can first determine the collected content. The process mainly includes two parts. One is to actively collect the content of the terminal device information (unique ID, MAC address, WIFI list, IDFA, IMEI information, and browser visit information) in the terminal by using the SDK or JS script. The other is to collect the terminal device software information, hardware information, and network information based on the OSI protocol stack and the communication protocol and network characteristics on the server. Based on the above nine kinds of characteristic collection ranges, eight kinds of nine characteristics are collected in different dates. Then, the collected information is reported to the cloud in an encrypted manner, and the cloud service generates a unique device ID according to the complex algorithm in the background and returns the device ID to the front end.

[0085] In the embodiment, the execution subject of the method can be a computer, a server, or other computing devices, which are not limited in the embodiment.

[0086] In the embodiment, the execution subject of the method can also be a smart phone, a tablet computer, or other smart devices, which are not limited in the embodiment.

[0087] It can be seen that the terminal device fingerprint generation method described in the embodiment can automatically generate a changeable collection strategy and generate an unforgeable client fingerprint through the dynamic adjustment algorithm of the credit card application middle platform. Specifically, the method can follow 8 of the 9 characteristics taken by the algorithm when collecting terminal information, so that the forger cannot determine the collection characteristics and the algorithm, and at the same time, the server can immediately identify and process when intercepting the content imitation upload. In addition, even if the forger finds that the collection has algorithm control, he cannot find the specific rule, so as to avoid effectively collecting information.

[0088] Embodiment 3

[0089] Please refer to Figure 3 , Figure 3 A structure diagram of a terminal device fingerprint generation device provided by the embodiment is shown in FIG. 1. As shown in FIG. 1, the terminal device fingerprint generation device includes: Figure 3

[0090] The information collection unit 310 is configured to actively collect first device information of the target terminal device at a pre-configured terminal burying point, and collect second device information of the target terminal device based on an OSI protocol stack at a server;

[0091] The feature collection unit 320 is configured to perform feature collection on the first device information and the second device information to obtain collection information;

[0092] The reporting unit 330 is configured to encrypt and report the collection information to a cloud server, so that the cloud server generates a unique identifier according to the collection information.

[0093] The receiving unit 340 is configured to receive the unique identifier fed back by the cloud server.

[0094] The fingerprint generation unit 350 is configured to generate a terminal device fingerprint of the target terminal device according to the unique identifier.

[0095] In the embodiment, the first device information at least includes device unique identifier, device MAC address, device WIFI list, advertisement identifier, international mobile equipment identity, and browser visit information.

[0096] In the embodiment, the second device information at least includes software information, hardware information, and network information.

[0097] ​In this embodiment, the method can first determine the collection content. Among them, the process mainly has two parts, one is to actively collect the content including the terminal device information (uniqueness ID, MAC address, WIFI list, IDFA, IMEI information, browser visit information) in the terminal through SDK or JS script; the other is to collect the terminal device software information, hardware information and network information based on OSI protocol stack on the server through communication protocol and network characteristics. Based on the above 9 kinds of characteristic collection range, according to the date as the slice, 8 kinds of 9 kinds of characteristics are collected in different dates. Then the collected information is reported to the cloud in an encrypted manner, and the cloud service generates a unique device ID according to the complex algorithm in the background and returns it to the front end.

[0098] In this embodiment, the explanation and description of the terminal device fingerprint generation device can refer to the description in embodiment 1 or embodiment 2, and this embodiment will not be described again.

[0099] It can be seen that the terminal device fingerprint generation device described in this embodiment can automatically generate a changeable collection strategy through the algorithm dynamically adjusted by the credit card application middle platform, and generate a non-forgery client fingerprint. Specifically, the device can collect 8 of the 9 characteristics taken by the algorithm when collecting terminal information, so that the forger cannot determine the collection characteristics and the algorithm, and at the same time, the content can be immediately identified and processed by the server when intercepted and copied. In addition, even if the forger finds that the collection has algorithm control, he cannot find the specific rule, so as to avoid effectively collecting information.

[0100] Embodiment 4

[0101] Please refer to Figure 4 , Figure 4 The structure diagram of a terminal device fingerprint generation device provided in the embodiment of the application. As shown in Figure 4 , the terminal device fingerprint generation device comprises:

[0102] The information collection unit 310 is configured to actively collect first device information of the target terminal device at the pre-configured terminal burying point; and collect second device information of the target terminal device based on the OSI protocol stack on the server;

[0103] The feature collection unit 320 is configured to collect features of the first device information and the second device information to obtain collection information;

[0104] The reporting unit 330 is configured to encrypt and report the collection information to the cloud server, so that the cloud server generates a unique identifier according to the collection information;

[0105] The receiving unit 340 is configured to receive the unique identifier fed back by the cloud server;

[0106] The fingerprint generation unit 350 is configured to generate a terminal device fingerprint of the target terminal device according to the unique identifier.

[0107] In this embodiment, the first device information at least includes a device unique identifier, a device MAC address, a device WIFI list, an advertising identifier, an international mobile equipment identity, and browser visit information.

[0108] The second device information at least includes software information, hardware information, and network information.

[0109] As an optional implementation, the feature collection unit 320 includes:

[0110] The summary sub-unit 321 is configured to summarize the first device information and the second device information to obtain device information.

[0111] The acquisition sub-unit 322 is configured to acquire a feature collection range.

[0112] The division sub-unit 323 is configured to perform category division on the device information according to the feature collection range to obtain category information of multiple categories.

[0113] The slicing sub-unit 324 is configured to perform slicing on the category information according to dates to obtain sliced information.

[0114] The collection sub-unit 325 is configured to perform feature collection on the sliced information according to a preset collection condition to obtain collection information.

[0115] In this embodiment, the feature collection range includes a unique identifier category, a MAC address category, a WIFI list category, an advertising identifier category, an international mobile equipment identity category, a browser visit information category, software information, hardware information, and network information.

[0116] As an optional implementation, the collection sub-unit 325 is specifically configured to perform feature collection on the sliced information according to different dates and a preset feature category number to obtain the collection information, where the preset feature category number is less than a total number of categories in the feature collection range.

[0117] In this embodiment, the method can first determine the collected content. The process mainly has two parts, one is to actively collect the content including the terminal device information (uniqueness ID, MAC address, WIFI list, IDFA, IMEI information, browser visit information) in the terminal by SDK or JS script; the other is to collect the terminal device software information, hardware information and network information based on the OSI protocol stack, and the server acquires the communication protocol and network characteristics. Based on the above 9 kinds of characteristic collection range, 8 kinds of 9 kinds of characteristics are collected according to the date as a slice. Then the collected information is reported to the cloud in an encrypted manner, and the cloud service generates a unique device ID according to the complex algorithm in the background and returns it to the front end.

[0118] In this embodiment, the explanation and description of the terminal device fingerprint generation device can refer to the description in Embodiment 1 or Embodiment 2, and this embodiment will not be described again.

[0119] It can be seen that the terminal device fingerprint generation device described in this embodiment can automatically generate a changeable collection strategy by the algorithm dynamically adjusted by the credit card application middle platform, and generate a non-forgery client fingerprint. Specifically, the device can collect 8 of the 9 characteristics taken by the algorithm when collecting terminal information, so that the forger cannot determine the collection characteristics and the algorithm. At the same time, it can also be immediately identified and processed by the server when intercepting the content imitation upload. In addition, even if the forger finds that the collection has algorithm control, he cannot find the specific rule, so as to avoid effectively collecting information.

[0120] The electronic device provided in the embodiment of the present application includes a memory and a processor. The memory is used to store a computer program, and the processor runs the computer program to make the electronic device execute the terminal device fingerprint generation method in Embodiment 1 or Embodiment 2 of the present application.

[0121] The computer readable storage medium provided in the embodiment of the present application stores computer program instructions. When the computer program instructions are read and run by a processor, the terminal device fingerprint generation method in Embodiment 1 or Embodiment 2 of the present application is executed.

[0122] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can also be implemented by other means. The apparatus embodiments described above are only illustrative, for example, the flowcharts and block diagrams in the drawings show the possible implementation architecture, function and operation of the apparatus, method and computer program product according to the embodiments of the present application. In this regard, each block in the flowchart or block diagram can represent a module, a program segment or a part of code, which contains one or more executable instructions for implementing the specified logic function. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur in different order from that shown in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and sometimes they can be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, and the combination of blocks in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system for performing the specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0123] In addition, the functional modules in the embodiments of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0124] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and various program code storage media.

[0125] The above merely provides an example of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, and thus, once an item is defined in one drawing, it need not be further defined and explained in subsequent drawings.

[0126] The above merely provides an example of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, and thus, once an item is defined in one drawing, it need not be further defined and explained in subsequent drawings.

[0127] It should be noted that the relational terms herein such as first and second and the like are used solely to distinguish one from another entity or action without necessarily requiring or implying any actual relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by "comprises... a" does not, without more constraints, exclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.

Claims

1. A method for generating fingerprints on a terminal device, characterized in that, include: Actively collect the first device information of the target terminal device through pre-configured terminal embedding points; The server collects the second device information of the target terminal device based on the OSI protocol stack. By summing the first device information and the second device information, the device information is obtained; The feature acquisition range is determined based on the device information; Within the feature acquisition range, the corresponding information in the device information is categorized to obtain multiple categories of category information; The category information is sliced ​​according to the date to obtain slice information; The slice information is subjected to feature collection according to preset collection conditions to obtain collection information; wherein, the preset collection conditions include collection conditions for different dates; The collected information is encrypted and reported to the cloud server, so that the cloud server can generate a unique identifier based on the collected information; Receive the unique identifier fed back by the cloud server; The terminal device fingerprint of the target terminal device is generated based on the unique identifier.

2. The fingerprint generation method for terminal devices according to claim 1, characterized in that, The first device information includes at least the device's unique identifier, device MAC address, device Wi-Fi list, advertising identifier, International Mobile Equipment Identity (IMSI), and browser pre-visit information; The second device information includes at least software information, hardware information, and network information.

3. The fingerprint generation method for terminal devices according to claim 1, characterized in that, The feature collection scope includes unique identifiers, MAC addresses, WIFI lists, advertising identifiers, international mobile device identification codes, browser pre-visit information, software information, hardware information, and network information.

4. The fingerprint generation method for terminal devices according to claim 1, characterized in that, The step of collecting features from the slice information according to preset collection conditions to obtain collected information includes: Feature collection is performed on the slice information according to different dates and a preset number of feature categories to obtain collected information, wherein the preset number of feature categories is less than the total number of categories in the feature collection range.

5. A fingerprint generation device for a terminal device, characterized in that, The fingerprint generation device for the terminal device includes: The information collection unit is used to actively collect the first device information of the target terminal device at a pre-configured terminal embedding point; and to collect the second device information of the target terminal device on the server side based on the OSI protocol stack; A feature acquisition unit is used to acquire features from the first device information and the second device information to obtain acquired information; The reporting unit is used to encrypt and report the collected information to the cloud server, so that the cloud server can generate a unique identifier based on the collected information. A receiving unit is configured to receive the unique identifier fed back by the cloud server; A fingerprint generation unit is used to generate a terminal device fingerprint of the target terminal device based on the unique identifier. The feature acquisition unit includes: The summarization subunit is used to summarize the first device information and the second device information to obtain device information; An acquisition subunit is used to determine the feature acquisition range based on the device information; The sub-unit is used to classify the corresponding information in the device information within the feature acquisition range to obtain multiple categories of category information. The slicing subunit is used to slice the category information according to the date to obtain slice information; The acquisition subunit is used to acquire features from the slice information according to preset acquisition conditions to obtain acquisition information; wherein, the preset acquisition conditions include acquisition conditions for different dates.

6. The fingerprint generation device for a terminal device according to claim 5, characterized in that, The acquisition subunit is specifically used to acquire features from the slice information according to different dates and a preset number of feature categories to obtain acquired information, wherein the preset number of feature categories is less than the total number of categories in the feature acquisition range.

7. An electronic device, characterized in that, The electronic device includes a memory and a processor, the memory being used to store a computer program, and the processor running the computer program to cause the electronic device to perform the terminal device fingerprint generation method according to any one of claims 1 to 4.

8. A readable storage medium, characterized in that, The readable storage medium stores computer program instructions, which are read and executed by a processor to perform the fingerprint generation method for a terminal device according to any one of claims 1 to 4.

Images