Cloud phone behavior data storage method, storage device and electronic device

Abstract

The present application discloses a storage method, storage device and electronic device for cloud phone behavior data. The storage method is applied to a cloud phone ARM server, comprising: receiving an operation instruction for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal; upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address and a second IP address to obtain target data, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; and storing the target data in a traceability database.

Description

Technical Field

[0001] The present application relates to the field of cloud phone traceability, and in particular to a method for storing cloud phone behavior data, a storage device, and an electronic device. Background Art

[0002] A cloud phone is a simulated mobile phone hosted on a cloud server. Users can use their physical phone or computer to operate a certain number of virtual cloud phones hosted on the cloud server. These simulated cloud phones run an operating system and function essentially the same as real phones. With the development of technology, cloud phones, in addition to fulfilling normal mobile phone applications, can also be used by certain groups of people to engage in illicit activities through specific means. However, there is no effective solution for tracing the behavioral data of cloud phones. Summary of the Invention

[0003] The present application discloses a storage method, storage device and electronic device for cloud phone behavior data, which can trace the source of cloud phone behavior data.

[0004] In order to solve the above problems, this application adopts the following technical solutions:

[0005] In the first aspect, an embodiment of the present application discloses a method for storing cloud phone behavior data, which is applied to a cloud phone ARM server, including: receiving an operation instruction for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal; when an access request to a public network service is detected by the cloud phone through the cloud phone ARM server, the user identifier, the first IP address and the second IP address are bound to obtain target data, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; and the target data is stored in a traceability database.

[0006] In the second aspect, an embodiment of the present application discloses a storage device for cloud phone behavior data, including: a receiving module for receiving operation instructions for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal; a binding module for binding the user identifier, the first IP address and the second IP address to obtain target data when an access request to a public network service is detected by the cloud phone through the cloud phone ARM server, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; a storage module for storing the target data in a traceability database.

[0007] In a third aspect, an embodiment of the present application provides an electronic device comprising a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps of the method described in the first aspect are implemented.

[0008] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0009] The technical solution adopted in this application can achieve the following beneficial effects:

[0010] The embodiment of the present application provides a method for storing cloud phone behavior data. By receiving an operation instruction for the cloud phone sent by a terminal, the instruction carries the user identifier of the user corresponding to the terminal and the first IP address corresponding to the terminal. When an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server is detected, the user identifier, the first IP address and the second IP address corresponding to the cloud phone ARM server are bound to obtain the target data, and the target data is stored in a traceability database, thereby achieving traceability of the cloud phone behavior data. In addition, the technical solution disclosed in the present application establishes an IP traceability mechanism, which is traceable from end to end, with a short traceability chain and strong operability. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 A flowchart of a method for storing cloud phone behavior data disclosed in an embodiment of the present application is provided;

[0012] Figure 2 This is a schematic diagram of the structure of a storage device for cloud phone behavior data disclosed in an embodiment of the present application;

[0013] Figure 3 A schematic diagram of the structure of an electronic device disclosed in an embodiment of the present application. DETAILED DESCRIPTION

[0014] The following will be combined with the accompanying drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the embodiments described are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field are within the scope of protection of this application.

[0015] The terms "first," "second," and the like in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of this application can be implemented in an order other than that illustrated or described herein, and that the objects distinguished by "first," "second," and the like are generally of the same type, and do not limit the number of objects; for example, the first object can be one or more. In addition, the term "and / or" in the specification and claims represents at least one of the electrically connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0016] The following, in conjunction with the accompanying drawings, describes in detail the storage method, storage device, and electronic device for cloud phone behavior data disclosed in the embodiments of the present application through specific embodiments and their application scenarios.

[0017] The storage method of cloud phone behavior data disclosed in the embodiment of the present application is applied to the cloud phone ARM server. The cloud phone ARM server includes a cloud phone business processing area and a cloud phone system area. The cloud phone business processing area is responsible for user registration, login, verification, etc. The cloud phone system area controls the virtualized cloud phone running on the device, provides computing power for the cloud phone operation, presents the cloud phone interface through video streams and command streams, and interacts with the device and the cloud and accesses public network services.

[0018] Figure 1 This is a flow chart of a method for storing cloud phone behavior data disclosed in an embodiment of this application. Figure 1 As shown, the method includes the following steps:

[0019] S120: Receive an operation instruction for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal.

[0020] In this application, the cloud phone is built on the cloud phone ARM server, and the terminal refers to a smart device with a screen display function and a cloud phone application (Application, APP) installed. The user sends an operation instruction to the cloud phone through the cloud phone APP of the terminal, and when the user sends an operation instruction to the cloud phone through the cloud phone APP of the terminal, the cloud phone ARM server is accessed and operated through the Internet Protocol (IP) address of the terminal. The cloud phone ARM server receives the operation instruction for the cloud phone sent by the terminal, which carries the user identification (identity, ID) of the user corresponding to the terminal and the first IP address corresponding to the terminal.

[0021] In one implementation, the instruction may also carry port number information, request timestamp, user authentication information, user terminal information, and user terminal geographic location information, etc. The cloud phone ARM server can verify the user login status, user information validity, etc. through the user authentication information.

[0022] S140. When an access request for accessing a public network service is detected by the cloud phone through the cloud phone ARM server, the user identifier, the first IP address and the second IP address are bound to obtain target data, wherein the second IP address is the IP address corresponding to the cloud phone ARM server.

[0023] In this application, when a cloud phone is operated, it sends an access request to a public network service through the cloud phone ARM server. Correspondingly, the cloud phone makes a request to the service domain name address, IP address, and corresponding port number of the public network service through the second IP address of the cloud phone ARM server, and generates information such as a timestamp. Public network services refer to Internet services such as APP services, WWW services, email services, and file transfer services that are accessible on the public network.

[0024] When the cloud phone ARM server detects an access request to a public network service sent by the cloud phone through the ARM server, the cloud phone ARM server binds the user ID, the first IP address corresponding to the terminal, and the second IP address corresponding to the cloud phone ARM server to obtain the target data.

[0025] S160: Storing the target data in a traceability database.

[0026] In this application, after the target data is obtained by binding the user identifier, the first IP address, and the second IP address, the target data is stored in the traceability database. The cloud phone behavior data can be traced back through the traceability database. In addition, the user's behavior can be analyzed, modeled, and risk-controlled through the traceability database. It should be noted that the port number information, request timestamp, user authentication information, user terminal information, and user terminal geographic location information carried in the instruction can also be stored in the traceability database.

[0027] In one implementation, cloud phone behavior data is traced through a traceability database, including: based on the second IP address of the cloud phone ARM server corresponding to the access request and the traceability database, determining the first IP address and user ID bound to the second IP address.

[0028] The embodiment of the present application provides a method for storing cloud phone behavior data. By receiving an operation instruction for the cloud phone sent by a terminal, the instruction carries the user identifier of the user corresponding to the terminal and the first IP address corresponding to the terminal. When an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server is detected, the user identifier, the first IP address and the second IP address corresponding to the cloud phone ARM server are bound to obtain the target data, and the target data is stored in a traceability database, thereby achieving traceability of the cloud phone behavior data. In addition, the technical solution disclosed in the present application establishes an IP traceability mechanism to perform end-to-end traceability, with a short traceability chain and strong operability.

[0029] In one implementation, when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address, and the second IP address to obtain target data may include: based on the operation instruction, determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior; when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address, and the second IP address to obtain target data if the target behavior is a target abnormal behavior.

[0030] In one implementation, whether the target behavior corresponding to the operation instruction is a target abnormal behavior may be determined based on the user terminal information and the user terminal geographic location information carried in the operation instruction.

[0031] In another implementation, the operation instruction also carries the application requested to be downloaded by the user or the domain name requested to be accessed. By comparing the application requested to be downloaded by the user or the domain name requested to be accessed with the applications in a preset blacklist or the domain name in the blacklist, it is determined whether the target behavior corresponding to the operation instruction is the target abnormal behavior. For example, when it is determined that the application requested to be downloaded by the user or the domain name requested to be accessed is an application or domain name in the blacklist, it is determined that the target behavior corresponding to the operation instruction is the target abnormal behavior.

[0032] In another possible implementation scheme, it is also possible to determine whether the user's behavior is the target abnormal behavior based on the means used by the user to send operation instructions or send access requests. For example, if the user uses abnormal means to send operation instructions or send access requests, it can be determined that the user's behavior is the target abnormal behavior.

[0033] In this application, when the target behavior is abnormal behavior, the cloud phone ARM server detects an access request to a public network service sent by the cloud phone through the cloud phone ARM server. It binds the user ID, the first IP address, and the second IP address to obtain the target data and stores the target data in the traceability database. In this case, after an abnormality occurs, the abnormal user can be traced back through the traceability database.

[0034] In an embodiment of the present application, after determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior, it may also include: in the case where the target behavior is a target abnormal behavior, recording the behavior log of the user corresponding to the cloud phone, processing the behavior log through anti-tampering technology, and storing the processed behavior log in the abnormal user behavior forensics database for later evidence collection. In the present application, anti-tampering technology may include data anti-tampering, anti-tampering watermark and other technologies, and the user's behavior log includes but is not limited to the applications installed by the user, the websites visited and the requested interfaces. In addition, in the case where the target behavior is a target abnormal behavior, screen recording and screenshots can be performed on specific scenes. Similarly, after the screen recording and screenshots are processed through anti-tampering technology, they are stored in the abnormal user behavior forensics database.

[0035] In one implementation, judging whether the target behavior corresponding to the operation instruction is a target abnormal behavior based on the operation instruction may include: judging whether the target behavior corresponding to the operation instruction is an abnormal behavior based on the operation instruction; and if the target behavior is an abnormal behavior, further judging whether the target behavior is a target abnormal behavior.

[0036] In an embodiment of the present application, after determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior, it may also include: if the target behavior is not a target abnormal behavior, sending a target information collection instruction to the terminal; receiving the target information sent by the terminal in response to the target information collection instruction; verifying the target information based on preset information; and if the verification is successful, allowing the cloud phone to send an access request to access the public network service. Exemplarily, if the target behavior is not a target abnormal behavior, the cloud phone ARM server can perform user verification by sending a target information collection instruction to the terminal. When the terminal receives the target information collection instruction, the terminal collects the target information and sends it to the cloud phone ARM server. The cloud phone ARM server receives the target information sent by the terminal in response to the target information collection instruction and verifies the target information based on the preset information. If the target information is consistent with the preset information, the cloud phone ARM server verifies the target information and allows the cloud phone to send an access request to access the public network service.

[0037] In one implementation, the target information may include fingerprint information and / or face information. In addition, the target information may also include specific data information and other information that can be used to verify identity.

[0038] In an embodiment of the present application, before receiving the operating instructions for the cloud phone sent by the terminal, the following may also be included: receiving the registration information for the cloud phone sent by the terminal, which may include the user's mobile phone number, name, ID card information, fingerprint information, and facial information, etc. Correspondingly, the registered account can be authenticated by real name using the above information. It should be noted that the terminal can send registration information to the cloud phone ARM server through the cloud phone APP.

[0039] In one possible implementation, binding the user identifier, the first IP address, and the second IP address to obtain the target data may include: creating an index table based on the user identifier, the first IP address, and the second IP address corresponding to the cloud phone ARM server; storing the target data in a traceability database includes: storing the index table in the traceability database. Exemplarily, the second IP address corresponding to the cloud phone ARM server may be used as a key value to create an index table including the second IP address, the first IP address, and the user ID, and storing the index table in the traceability database, thereby achieving the effect of joint rapid traceability.

[0040] In one implementation, when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user ID, the first IP address, and the second IP address to obtain target data may include: binding the user ID to the first IP address to obtain first data; when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the first data to the second IP address to obtain target data. That is, when the cloud phone ARM server receives an operation instruction for the cloud phone sent by the terminal, it can first bind the user ID to the first IP address to obtain the first data, and then, when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, bind the first data to the second IP address to obtain the target data.

[0041] The method for storing cloud phone behavior data provided in the embodiment of the present application can be executed by a storage device for cloud phone behavior data. In the embodiment of the present application, the method for storing cloud phone behavior data is executed by a storage device for cloud phone behavior data as an example to illustrate the device for the method for storing cloud phone behavior data provided in the embodiment of the present application.

[0042] Figure 2 This is a schematic diagram of the structure of a storage device for cloud phone behavior data disclosed in an embodiment of this application. Figure 2 As shown, the storage device 200 for cloud phone behavior data includes: a receiving module 210, a binding module 220 and a storage module 230.

[0043] In the present application, the receiving module 210 is used to receive operating instructions for the cloud phone sent by the terminal, wherein the instructions carry the user identifier of the user corresponding to the terminal and the first IP address corresponding to the terminal; the binding module 220 is used to bind the user identifier, the first IP address and the second IP address to obtain target data when an access request to the public network service is detected by the cloud phone through the cloud phone ARM server, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; the storage module 230 is used to store the target data in the traceability database.

[0044] In one implementation, the binding module 220 binds the user identifier, the first IP address, and the second IP address to obtain target data when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, including: based on the operation instruction, determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior; when the target behavior is a target abnormal behavior, when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address, and the second IP address to obtain target data.

[0045] In one implementation, after the binding module 220 determines whether the target behavior corresponding to the operation instruction is a target abnormal behavior, it also includes: when the target behavior is a target abnormal behavior, recording the behavior log of the user corresponding to the cloud phone, and processing the behavior log through anti-tampering technology.

[0046] In one implementation, after the binding module 220 determines whether the target behavior corresponding to the operation instruction is a target abnormal behavior, it also includes: if the target behavior is not a target abnormal behavior, sending a target information collection instruction to the terminal; receiving the target information sent by the terminal in response to the target information collection instruction; verifying the target information based on preset information; and if the verification is passed, allowing the cloud phone to send an access request to access the public network service.

[0047] In one implementation, the target information includes fingerprint information and / or face information.

[0048] In one implementation, the binding module 220 binds the user identifier, the first IP address and the second IP address to obtain target data, including: creating an index table based on the user identifier, the first IP address and the second IP address corresponding to the cloud phone ARM server; the storage module 230 stores the target data in a traceability database, including: storing the index table in the traceability database.

[0049] In one implementation, when the binding module 220 detects an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, the binding module 220 binds the user identifier, the first IP address, and the second IP address to obtain target data, including: binding the user identifier with the first IP address to obtain first data; when the cloud phone detects an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, the binding module 220 binds the first data with the second IP address to obtain target data.

[0050] The storage device for cloud phone behavior data provided in the embodiment of the present application can implement each process implemented in the embodiment of the storage method for cloud phone behavior data. To avoid repetition, they will not be described here.

[0051] Alternatively, as Figure 3 As shown, an embodiment of the present application also provides an electronic device 300, including a processor 301 and a memory 302, and the memory 302 stores a program or instruction that can be run on the processor 301. When the program or instruction is executed by the processor 301, the various steps of the above-mentioned cloud phone behavior data storage method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0052] It should be noted that the electronic devices in the embodiments of the present application include mobile electronic devices and non-mobile electronic devices.

[0053] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the above-mentioned cloud phone behavior data storage method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0054] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0055] The above embodiments of this application focus on the differences between the various embodiments. As long as the different optimization features between the various embodiments are not contradictory, they can be combined to form a better embodiment. Considering the simplicity of the text, they will not be repeated here.

[0056] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A method for storing cloud phone behavior data, characterized in that: Applied to cloud phone ARM servers, including: Receiving an operation instruction for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal; When detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address and the second IP address to obtain target data, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; Storing the target data in a traceability database; The method of binding the user identifier, the first IP address, and the second IP address to obtain target data upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, includes: Based on the operation instruction, determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior; In a case where the target behavior is a target abnormal behavior, upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address and the second IP address to obtain target data; After determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior, the method further includes: When the target behavior is not an abnormal target behavior, a target information collection instruction is sent to the terminal; target information sent by the terminal in response to the target information collection instruction is received; the target information is verified based on preset information; and when the verification is passed, the cloud phone is allowed to send an access request to the public network service.

2. The method according to claim 1, characterized in that After determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior, the method further includes: In the case where the target behavior is a target abnormal behavior, the behavior log of the user corresponding to the cloud phone is recorded, and the behavior log is processed by anti-tampering technology.

3. The method according to claim 1, characterized in that The target information includes fingerprint information and / or face information.

4. The method according to claim 1, wherein Binding the user identifier, the first IP address, and the second IP address to obtain target data includes: Creating an index table based on the user identifier, the first IP address, and a second IP address corresponding to the cloud phone ARM server; Storing the target data in a traceability database includes: The index table is stored in a traceability database.

5. The method according to claim 1, wherein The method of binding the user identifier, the first IP address, and the second IP address to obtain target data upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, includes: Binding the user identifier to the first IP address to obtain first data; When an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server is detected, the first data is bound to the second IP address to obtain target data.

6. A storage device for cloud phone behavior data, characterized in that: include: A receiving module, configured to receive an operation instruction for the cloud phone sent by a terminal, wherein the instruction carries a user identifier of a user corresponding to the terminal and a first IP address corresponding to the terminal; a binding module, configured to, upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, bind the user identifier, the first IP address, and the second IP address to obtain target data, wherein the second IP address is the IP address corresponding to the cloud phone ARM server; A storage module, used to store the target data in a traceability database; The binding module, when detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binds the user identifier, the first IP address and the second IP address to obtain target data, including: Based on the operation instruction, determining whether the target behavior corresponding to the operation instruction is a target abnormal behavior; In a case where the target behavior is a target abnormal behavior, upon detecting an access request for accessing a public network service sent by the cloud phone through the cloud phone ARM server, binding the user identifier, the first IP address and the second IP address to obtain target data; After the binding module determines whether the target behavior corresponding to the operation instruction is a target abnormal behavior, the method further includes: When the target behavior is not an abnormal target behavior, a target information collection instruction is sent to the terminal; target information sent by the terminal in response to the target information collection instruction is received; the target information is verified based on preset information; and when the verification is passed, the cloud phone is allowed to send an access request to the public network service.

7. An electronic device, characterized in that: It includes a processor and a memory, the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method for storing cloud phone behavior data as described in any one of claims 1 to 5 are implemented.

8. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the method for storing cloud phone behavior data as described in any one of claims 1 to 5 are implemented.

Images