A file violation detection method, a server and a storage medium

Abstract

The embodiment of the application discloses a file violation detection method, a server and a storage medium, is applied to the technical field of violation detection, and can solve the problems that the violation detection operation of the server is relatively complex, and the violation detection cost is relatively high. The method comprises the following steps: a server receives an initial detection result of a first to-be-detected file sent by a target device, a private violation detection service is deployed on the target device, and the initial detection result is obtained by detecting the first to-be-detected file by the target device through the private violation detection service; if the initial detection result is a non-violation file, the target detection result of the first to-be-detected file is determined to be a non-violation file; if the initial detection result is a violation file, the first to-be-detected file is detected through a third-party violation detection service, and the target detection result of the first to-be-detected file is obtained.

Description

Technical Field

[0001] This invention relates to the field of violation detection technology, and in particular to a method for detecting file violations, a server, and a storage medium. Background Technology

[0002] When using terminal devices, users frequently transfer files such as pictures, videos, and audio with other users' terminal devices. Currently, servers typically entrust specialized violation detection servers to perform violation checks on these files. That is, every time a terminal device sends a file to another terminal device, the server sends all files to the violation detection server for violation checks. This violation detection operation is relatively complex and costly for the server. Summary of the Invention

[0003] This invention provides a file violation detection method, server, and storage medium to address the problems of complex and costly violation detection operations on servers in the prior art. To solve the above technical problems, this invention is implemented as follows:

[0004] Firstly, a file violation detection method is provided. The method is applied to a server and includes: receiving an initial detection result of a first file to be detected sent by a target device, wherein a private violation detection service is deployed on the target device, and the initial detection result is obtained by the target device through the private violation detection service to detect the first file to be detected;

[0005] If the initial detection result is a non-violation file, then the target detection result of the first file to be detected is determined to be a non-violation file;

[0006] If the initial detection result is a violation file, then the first file to be detected is detected by a third-party violation detection service to obtain the target detection result of the first file to be detected.

[0007] As an optional implementation, in a first aspect of the present invention, the target device includes a terminal device, and before receiving the initial detection result of the first file to be detected sent by the target device, the method further includes:

[0008] Receive an information sending request sent by the terminal device, the information sending request including a support flag indicating whether the terminal device supports the private violation detection service;

[0009] The initial detection result of the first file to be detected sent by the target device includes:

[0010] If the support flag is a first support flag, then the initial detection result of the first file to be detected sent by the terminal device is received;

[0011] The first support flag indicates that the terminal device supports the private violation detection service.

[0012] As an optional implementation, in a first aspect of the present invention, the target device includes a private server corresponding to the terminal device, and the initial detection result of receiving the first file to be detected sent by the target device includes:

[0013] If the support flag is the second support flag, then the initial detection result of the first file to be detected sent by the private server is received;

[0014] The second support flag indicates that the terminal device does not support the private violation detection service.

[0015] As an optional implementation, in a first aspect of the present invention, the method further includes:

[0016] If the target detection result is a violation file, then the first file to be detected is processed, and the processing includes at least one of the following: interception processing, withdrawal processing, and deletion processing;

[0017] If the target detection result is a non-violation file, then the first file to be detected is sent to the receiving device.

[0018] As an optional implementation, in a first aspect of the present invention, the method further includes:

[0019] Within a first preset time period, obtain the target detection results corresponding to a plurality of second files to be detected determined by the third-party violation detection service, wherein the plurality of second files to be detected are files requested to be sent by the terminal device;

[0020] If the first ratio between the number of files whose target detection result is non-violation and the number of files whose target detection result is violation in the plurality of second files to be detected is greater than a first threshold, a private violation detection stop instruction is sent to the target device. The private violation detection stop instruction is used to instruct the target device to stop performing the private violation detection service.

[0021] As an optional implementation, in a first aspect of the present invention, the first file to be detected is a file requested to be sent by a terminal device; the step of determining that the target detection result of the first file to be detected is a non-violation file if the initial detection result is a non-violation file includes:

[0022] If the initial detection result is a non-violation file, and the sensitivity level of the terminal device is not greater than the preset level, then the target detection result of the first file to be detected is determined to be a non-violation file.

[0023] If the initial detection result is a violation file, then the first file to be detected is detected through a third-party violation detection service to obtain the target detection result of the first file to be detected, including:

[0024] If the initial detection result is a violation file, and / or the sensitivity level of the terminal device is greater than the preset level, then the first file to be detected is detected by the third-party violation detection service to obtain the target detection result of the first file to be detected.

[0025] As an optional implementation, in a first aspect of the present invention, before proceeding to detect the first file to be detected by the third-party violation detection service to obtain the target detection result of the first file to be detected if the sensitivity level corresponding to the terminal device is greater than the preset level, the method further includes:

[0026] Obtain the target detection results corresponding to the multiple third files to be detected that the terminal device requests to send within a second preset time period;

[0027] A second ratio is determined in the target detection results corresponding to the plurality of third files to be detected, representing the proportion of non-compliant files, and the sensitivity level of the terminal device is determined based on the second ratio.

[0028] As an optional implementation, in a first aspect of the present invention, the method further includes:

[0029] If the initial detection result of the first file to be detected is not received from the target device within the third preset time period, the first file to be detected is detected by the third-party violation detection service to obtain the target detection result of the first file to be detected.

[0030] Secondly, a server is provided, comprising: a transceiver module, configured to receive an initial detection result of a first file to be detected sent by a target device, wherein a private violation detection service is deployed on the target device, and the initial detection result is obtained by the target device through the private violation detection service to detect the first file to be detected;

[0031] The processing module is used to determine that the target detection result of the first file to be detected is a non-violation file if the initial detection result is a non-violation file;

[0032] The processing module is further configured to, if the initial detection result is a violation file, then use a third-party violation detection service to detect the first file to be detected, and obtain the target detection result of the first file to be detected.

[0033] Thirdly, a server is provided, comprising:

[0034] Memory containing executable program code;

[0035] A processor coupled to the memory;

[0036] The processor calls the executable program code stored in the memory to execute the file violation detection method in the first aspect of the present invention.

[0037] Fourthly, a computer-readable storage medium is provided that stores a computer program, said computer program causing a computer to perform some or all of the steps of any of the methods of the first aspect. The computer-readable storage medium includes ROM / RAM, a magnetic disk, or an optical disk, etc.

[0038] Fifthly, a computer program product is provided that, when the computer program product is run on a computer, causes the computer to perform some or all of the steps of any of the methods of the first aspect.

[0039] In a sixth aspect, an application publishing platform is provided for publishing computer program products, wherein when the computer program products are run on a computer, the computer performs some or all of the steps of any of the methods of the first aspect.

[0040] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0041] In this embodiment of the invention, the server can receive the initial detection result of a first file to be detected sent by a target device. The target device has a private violation detection service deployed on it. The initial detection result is obtained by the target device through the private violation detection service detecting the first file to be detected. If the initial detection result indicates a non-violation file, the server determines that the target detection result for the first file to be detected is a non-violation file. If the initial detection result indicates a violation file, the server uses a third-party violation detection service to detect the first file to be detected, obtaining the target detection result for the first file to be detected. In this scheme, if the private violation detection service detects that the first file to be detected is a violation file, the server can send the first file to be detected to the third-party violation detection service for detection; if the private violation detection service detects that the first file to be detected is a non-violation file, the server does not need to use the third-party violation detection service to detect the first file to be detected. Through this scheme, the third-party violation detection service is only activated when the initial detection result indicates a violation file, avoiding the phenomenon of sending all files to the third-party violation detection service for detection. This effectively reduces the number of violation detection operations and lowers the cost of violation detection. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart illustrating a document violation detection method provided in an embodiment of the present invention. Figure 1 ;

[0044] Figure 2 This is a flowchart illustrating a document violation detection method provided in an embodiment of the present invention. Figure 2 ;

[0045] Figure 3 This is a flowchart illustrating a document violation detection method provided in an embodiment of the present invention. Figure 3 ;

[0046] Figure 4 This is a schematic diagram of the architecture of a proprietary violation detection program provided in an embodiment of the present invention. Figure 1 ;

[0047] Figure 5 This is a schematic diagram of the architecture of a proprietary violation detection program provided in an embodiment of the present invention. Figure 2 ;

[0048] Figure 6This is a schematic diagram of the structure of a server provided in an embodiment of the present invention. Figure 1 ;

[0049] Figure 7 This is a schematic diagram of the structure of a server provided in an embodiment of the present invention. Figure 2 . Detailed Implementation

[0050] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0051] The terms "first" and "second," etc., used in the specification and claims of this invention are used to distinguish different objects, not to describe a specific order of the objects. For example, "first file to be detected" and "second file to be detected," etc., are used to distinguish different files to be detected, not to describe a specific order of the files to be detected.

[0052] The terms “comprising” and “having” and any variations thereof in this invention are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such process, method, product or device.

[0053] It should be noted that in the embodiments of the present invention, the terms "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of the present invention should not be construed as being more preferred or advantageous than other embodiments or design schemes. Specifically, the use of terms such as "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0054] In related technologies, users frequently transfer files such as pictures, videos, and audio between their terminal devices and other users' terminal devices. For example... Figure 1 As shown, when a terminal device sends a file to other terminal devices, it can perform violation detection through interaction with the server, cloud storage server, and third-party violation detection service.

[0055] 101. The terminal device sends a token acquisition request to the server.

[0056] It should be noted that this token acquisition request is used to request the server to send a token to the terminal device.

[0057] 102. The server sends a token to the terminal device.

[0058] 103. The terminal device sends the file to be tested to the cloud storage server via a token.

[0059] 104. The cloud storage server sends upload instruction information to the terminal device.

[0060] It should be noted that this upload indication information is used to indicate to the terminal device that the file to be tested has been successfully uploaded.

[0061] 105. The cloud storage server sends the file to be tested to the server.

[0062] 106. The server sends the file to be detected to a third-party violation detection service.

[0063] 107. Third-party unauthorized testing services conduct testing on documents to be tested.

[0064] 108. Third-party unauthorized testing services send test results to the server.

[0065] 109. The server sends the detection results to the terminal device.

[0066] 110. If the test result indicates that the file to be tested is a violation file, the terminal device shall withdraw or block the file to be tested.

[0067] Currently, every time a terminal device transfers files between other terminal devices, each file needs to undergo the above steps to achieve violation detection. This results in a large workload for interaction between the terminal device, server, cloud storage server, and third-party violation detection service, making the violation detection operation complex and costly.

[0068] To address the aforementioned issues, this invention provides a file violation detection method, server, and storage medium. The server receives the initial detection result of a first file to be detected from a target device. The target device has a private violation detection service deployed on it. The initial detection result is obtained by the target device using the private violation detection service to detect the first file. If the initial detection result indicates the file is not violating, the server determines that the target detection result for the first file is also non-violating. If the initial detection result indicates the file is violating, the server uses a third-party violation detection service to detect the first file, obtaining the target detection result. In this solution, if the private violation detection service detects the first file as violating, the server can send it to the third-party violation detection service for further detection. If the private violation detection service detects the first file as non-violating, the server does not need to use the third-party violation detection service. This solution only activates the third-party violation detection service when the initial detection result indicates the file is violating, avoiding the need to send all files to the third-party violation detection service for detection. This effectively reduces file violation detection operations and lowers the cost of violation detection.

[0069] The target device involved in the embodiments of the present invention may include: a terminal device and a private server corresponding to the terminal device. The terminal device may be an electronic device such as a mobile phone, tablet computer, laptop computer, PDA, wearable device, Ultra-Mobile Personal Computer (UMPC), netbook, or Personal Digital Assistant (PDA). Wearable devices may include smartwatches, smart bracelets, watch phones, etc., and the embodiments of the present invention are not limited thereto.

[0070] The file violation detection method provided in this embodiment of the invention can be implemented through the interaction between the server and the target device. The following description uses a server and a target device as examples to illustrate the file violation detection method provided in this embodiment of the invention.

[0071] Example 1

[0072] like Figure 2 As shown, this embodiment of the invention provides a method for detecting file violations, which may include the following steps:

[0073] 201. Receive the initial detection result of the first file to be detected sent by the target device.

[0074] In this embodiment of the invention, the target device can first perform an initial detection on the first file to be detected, obtain an initial detection result, and send it to the server. The server can receive the initial detection result sent by the target device.

[0075] It should be noted that a private violation detection service is deployed on the target device, and the initial detection result is the result obtained by the target device through the private violation detection service to detect the first file to be detected.

[0076] The initial detection result can include both illegal and non-illegal files, meaning the initial detection result can be used to indicate whether the first file to be detected is illegal or non-illegal. If the initial detection result is a non-illegal file, the server can execute step 202; if the initial detection result is an illegal file, the server can execute step 203.

[0077] It should be noted that the first file to be detected can include various types of files such as images, videos, audio, and text.

[0078] It should be noted that the target device may include: a terminal device and a private server corresponding to the terminal device. Private violation detection services may be deployed on both the terminal device and the private server.

[0079] Optionally, before the server receives the initial detection result of the first file to be detected sent by the target device, it may also include: the server receiving an information sending request sent by the terminal device.

[0080] The information sending request includes a support flag indicating whether the terminal device supports the private violation detection service.

[0081] It should be noted that whether the terminal device or the private server performs the detection on the first file to be detected depends on whether a private violation detection service is deployed on the terminal device. If a private violation detection service is deployed on the terminal device, then the terminal device can perform the detection on the first file to be detected; if a private violation detection service is not deployed on the terminal device, then the private server can perform the detection on the first file to be detected. Therefore, the terminal device can first inform the server whether it supports the private violation detection service by using the support flag in the information sending request.

[0082] For different support tags, the server receives the initial detection result of the first file to be detected sent by the target device, which may include, but is not limited to, the following optional implementation methods:

[0083] Implementation Method 1: If the support flag is set as the first support flag, then the server receives the initial detection result of the first file to be detected sent by the terminal device.

[0084] The first support flag indicates that the terminal device supports the private violation detection service.

[0085] It should be noted that if the terminal device supports a private violation detection service, meaning that the terminal device itself can perform an initial detection on the first file to be detected, then the terminal device can perform the detection on the first file to be detected and send the initial detection result to the server, and the server can receive the initial detection result of the first file to be detected sent by the terminal device.

[0086] Implementation Method 2: If the support flag is set as the second support flag, then the server receives the initial detection result of the first file to be detected sent by the private server.

[0087] The second support flag indicates that the terminal device does not support the private violation detection service.

[0088] It should be noted that if the terminal device does not support the private violation detection service, that is, the terminal device itself cannot perform the initial detection on the first file to be detected, then the private server needs to detect the first file to be detected and send the initial detection result to the server, and the server can receive the initial detection result of the first file to be detected sent by the private server.

[0089] With the above optional implementation methods, if the terminal device supports a private violation detection service, the server receives the initial detection result of the first file to be detected sent by the terminal device; if the terminal device does not support a private violation detection service, the server receives the initial detection result of the first file to be detected sent by a private server. In this way, regardless of whether the terminal device can perform private violation detection, the server can receive the initial detection result, avoiding the phenomenon that a large number of files are detected by a third-party violation detection service because the terminal device cannot detect them. This can effectively reduce the number of file violation detection operations and lower the cost of violation detection.

[0090] Optionally, when the target device performs initial detection on the first file to be detected, it can also simultaneously send a token acquisition request to the server to obtain a token from the server and send the first file to be detected to the cloud storage server through the token. The cloud storage server can then send the first file to be detected to the server.

[0091] With the above optional implementation method, the target device can simultaneously perform the local detection step and the token acquisition step, so that the server can receive the initial detection result and the first file to be detected in a short time.

[0092] 202. If the initial detection result is a non-violation file, then the target detection result of the first file to be detected is determined to be a non-violation file.

[0093] In this embodiment of the invention, if the server receives an initial detection result from the target device indicating that the file is not in violation, then the server can determine that the target detection result of the first file to be detected is a non-violation file, and there is no need to send the first file to be detected to a third-party violation detection service for detection.

[0094] 203. If the initial detection result is a non-compliant document, then the first document to be detected will be detected by a third-party non-compliant detection service to obtain the target detection result of the first document to be detected.

[0095] In this embodiment of the invention, if the server receives an initial detection result from the target device indicating that the file is illegal, it can be concluded that the target device considers the first file to be detected to be illegal through private illegal detection. Then, the server can send the first file to be detected to a third-party illegal detection service, which will then detect the first file and obtain the target detection result of the first file from the third-party illegal detection service.

[0096] It should be noted that the target detection result is obtained by a third-party violation detection service from the detection of the first file to be detected. The target detection result can also indicate whether the first file to be detected is a violation file or a non-violation file.

[0097] It should be noted that steps 202 and 203 are operations performed after the server obtains different initial detection results. Therefore, steps 202 and 203 are two parallel steps and cannot be executed simultaneously. That is, the file violation detection method includes steps 201 and 202, or the file violation detection method includes steps 201 and 203.

[0098] This invention provides a file violation detection method. A server can receive the initial detection result of a first file to be detected from a target device. The target device has a private violation detection service deployed on it. The initial detection result is obtained by the target device through the private violation detection service detecting the first file to be detected. If the initial detection result indicates a non-violation file, the server determines that the target detection result for the first file to be detected is a non-violation file. If the initial detection result indicates a violation file, the server uses a third-party violation detection service to detect the first file to be detected, obtaining the target detection result for the first file to be detected. In this scheme, if the private violation detection service detects that the first file to be detected is a violation file, the server can send the first file to be detected to the third-party violation detection service for detection; if the private violation detection service detects that the first file to be detected is a non-violation file, the server does not need to use the third-party violation detection service to detect the first file to be detected. This scheme only activates the third-party violation detection service when the initial detection result indicates a violation file, avoiding the phenomenon of sending all files to the third-party violation detection service for detection. This effectively reduces file violation detection operations and lowers violation detection costs.

[0099] As an optional implementation, the file violation detection method may further include: if the server does not receive the initial detection result of the first file to be detected sent by the target device within a third preset time period, the server detects the first file to be detected through a third-party violation detection service to obtain the target detection result of the first file to be detected.

[0100] It should be noted that the order in which the server receives the initial detection result from the target device and the first file to be detected from the cloud storage server is not fixed. It may receive the initial detection result from the target device first, or the first file to be detected from the cloud storage server first, or both the initial detection result from the target device and the first file to be detected from the cloud storage server may be received simultaneously.

[0101] In this implementation, if the server does not receive the initial detection result of the first file to be detected from the target device within a third preset time period after receiving the first file to be detected from the cloud storage server, the server can assume that the violation detection of the target device has failed. Therefore, the server can directly send the first file to be detected to a third-party violation detection service for detection.

[0102] With this optional implementation, the server can directly detect the first file to be detected through a third-party violation detection service if the target device has not sent the initial detection result for a long time, thus avoiding the extension of file detection time due to waiting for the initial detection result for a long time.

[0103] Example 2

[0104] like Figure 3 As shown in the figure, this embodiment of the invention also provides a method for detecting file violations, which may further include the following steps:

[0105] 301. The target device acquires the first file to be tested and starts a private violation detection program.

[0106] In this embodiment of the invention, when the target device includes a terminal device, the private violation detection program can be an application within the target device or an application service within each application. When a user sends a file to another user using a social application, the target device can use this private violation detection program to detect the file.

[0107] For example, such as Figure 4 As shown, a private violation detection program can be a program within a social application; that is, the private violation detection program can reside in the same process as the business modules within the social application and be invoked within the same process. Figure 5 As shown, the private violation detection program can also be in a different process from the business modules in the social application, allowing for cross-process calls.

[0108] Optionally, when the target device starts the private violation detection program, the private violation detection program can obtain the target device's client type, device model, private violation detection switch, data upload address, etc., and update the configuration information.

[0109] It should be noted that the configuration information includes at least: video frame extraction configuration information and private violation detection model configuration information. The private violation detection model configuration information includes: model identifier (Identity Document, ID), model version, model link, etc.

[0110] 302. When the private violation detection switch of the private violation detection program is detected to be in the on state, and the private violation detection program has a private violation detection model, the target device detects the first file to be detected and obtains the initial detection result of the first file to be detected.

[0111] In this embodiment of the invention, after the target device starts the private violation detection program, the target device can detect the private violation detection switch status of the private violation detection program and whether the private violation detection program has a private violation detection model. When it is detected that the private violation detection switch of the private violation detection program is in the on state and the private violation detection program has a private violation detection model, it indicates that the target device can currently perform detection. Then the target device can use the private violation detection program to detect the first file to be detected and obtain the initial detection result of the first file to be detected.

[0112] Optionally, the private violation detection model can be an Not Safe For Work (NSFW) model.

[0113] Optionally, when the target device starts the private violation detection program, it can upload the summary information of the first file to be detected to the private violation detection program, so that the private violation detection program can detect the summary information of the first file to be detected and save the summary information of the first file to be detected.

[0114] It should be noted that if the first file to be detected is an image file, then the summary information of the first file to be detected is the image itself; if the first file to be detected is a video file, then the summary information of the first file to be detected is any number of frames in the video, which are determined according to the video frame extraction configuration information of the private violation detection program.

[0115] With this optional implementation, the private violation detection program can detect only the summary information of the first file to be detected, which can reduce the detection workload of the private violation detection program and reduce the power consumption of the target device.

[0116] Furthermore, after obtaining the summary information of the first file to be detected, the private violation detection program in the target device can check whether the initial detection result corresponding to the summary information is saved. If the private violation detection program has saved the initial detection result corresponding to the summary information, it means that the private violation detection program has previously detected the first file to be detected, and the private violation detection program in the target device can directly send the saved initial detection result to the server. If the private violation detection program has not saved the initial detection result corresponding to the summary information, it means that the private violation detection program has not previously detected the first file to be detected, and the target device can use the private violation detection program to detect the first file to be detected, obtain the initial detection result, send the initial detection result to the server, and save the initial detection result and the summary information of the first file to be detected accordingly.

[0117] With this optional implementation, if the file being tested has been tested before, the target device can directly output the saved initial test results; if the file being tested has not been tested before, the private violation detection program in the target device can save the initial test results and the summary information of the first file to be tested after the detection is completed. In this way, when the file needs to be tested again, the initial test results can be directly output, reducing the detection workload of the private violation detection program in the target device and reducing the power consumption of the target device.

[0118] Furthermore, when the private violation detection program in the target device outputs the initial detection result to the server, it can output private violation detection parameters to the server. After receiving the private violation detection parameters, the server can compare the private violation detection parameters with the violation threshold. If the private violation detection parameters are greater than the violation threshold, then it can be said that the initial detection result is a violation file, that is, the first file to be detected is a violation file.

[0119] The private violation detection parameters may include at least: hentai, porn, and sexy.

[0120] It should be noted that this violation threshold can be set based on the file type and source of the first file to be detected.

[0121] For example, suppose the violation threshold is 0.3. The proprietary violation detection program in the target device detects that the abnormal parameter of the first file to be detected is 0.05, the abnormal parameter is 0.29, and the sexy parameter is 0.12. The proprietary violation detection program in the target device can then send these abnormal parameters, abnormal parameters, and sexy parameters to the server. After receiving these parameters, the server calculates that the proprietary violation detection parameters of the first file to be detected are 0.05 + 0.29 + 0.12 = 0.46 > 0.3. Therefore, the server can determine that the first file to be detected is a violation file.

[0122] Furthermore, once the server determines that the first file to be detected is a violation file, it can send the first file to be detected to a third-party violation detection service for detection. If, within a preset time period, the ratio between the number of files whose target detection results are non-violation files and the number of files whose target detection results are violation files is greater than a second threshold, then the server can adjust the violation threshold.

[0123] It should be noted that within the preset time period, all files sent by the terminal device to the receiving device will be inspected. Only the first file to be inspected, which is initially identified as a violation file, will be inspected again by a third-party violation inspection service to obtain the target inspection result. If the ratio of the number of files that are identified as non-violation files to the number of files that are identified as violations is greater than the second threshold, it indicates that there is a large difference between the initial inspection result and the target inspection result, and the detection accuracy of the target device is low. That is, the private violation inspection program in the target device has detected non-violation files as violation files. In this case, the server can increase the violation threshold so that the server identifies fewer files as violations.

[0124] For example, assuming a preset duration of 20 minutes, a second threshold of 30%, and a current violation threshold of 0.3, the server can determine that files with private violation detection parameters greater than 0.3 are violation files. If, within 20 minutes, the server obtains 10 files with initial detection results indicating they are violation files, sends these 10 files to a third-party violation detection service, and obtains 10 target detection results, of which 6 are violation files and 4 are non-violation files, with private violation detection parameters of 0.35, 0.36, 0.38, and 0.39 respectively, and since 4 / 6*100% = 66.7% > 30%, it indicates that the accuracy of the initial detection results is low, meaning that files with private violation detection parameters of 0.35, 0.36, 0.38, and 0.39 are not violation files, then the server can adjust the violation threshold to 0.4.

[0125] Through the above optional implementation methods, the server can adjust the violation threshold in real time based on the target detection results and initial detection results of the third-party violation detection service, thereby improving the accuracy of private violation detection.

[0126] Furthermore, if the initial detection result indicates that the file is not in violation, the server can send a non-violation file indication to the terminal device and send the first file to be detected to the receiving device. If the number of user complaints received by the server within a preset time period is greater than the third threshold, it can be said that the private violation detection program in the target device has detected the violation file as a non-violation file. In this case, the server can lower the violation threshold so that the server can identify more files as violation files.

[0127] For example, assuming a preset duration of 20 minutes, a third threshold of 5 violations, and a current violation threshold of 0.3, the server can determine that files with a private violation detection parameter greater than 0.3 are violation files. If the server receives 6 customer complaints within 20 minutes, it means that the private violation detection program on the target device has detected these 6 violation files as non-violation files. The private violation detection parameters for these 6 files are 0.21, 0.29, 0.25, 0.28, 0.22, and 0.24, respectively. This indicates that files with private violation detection parameters of 0.21, 0.29, 0.25, 0.28, 0.22, and 0.24 are violation files. Therefore, the server can adjust the violation threshold to 0.2.

[0128] Using the above optional implementation methods, the server can adjust the violation threshold based on each initial detection result and user complaints, thereby improving the accuracy of the initial detection results.

[0129] 303. When the private violation detection switch of the private violation detection program is detected to be in the off state, and / or the private violation detection program does not have a private violation detection model, the target device sends a private violation detection instruction to the server.

[0130] The indication information for the private violation detection is used to indicate that the target device cannot perform private violation detection.

[0131] In this embodiment of the invention, if the target device detects that the private violation detection switch is in the off state, or the private violation detection program does not have a private violation detection model, or the private violation detection switch is in the off state and the private violation detection program does not have a private violation detection model, then it can be said that the target device cannot perform private violation detection. Therefore, the target device sends a private violation detection instruction to the server.

[0132] It should be noted that steps 302 and 303 are different interactive operations between the target device and the server under different circumstances. Therefore, steps 302 and 303 are two parallel steps and cannot be executed simultaneously. That is, the file violation detection method includes steps 301 and 302, or the file violation detection method includes steps 301 and 303.

[0133] It should be noted that steps 304-310 will only be executed if the file violation detection method includes steps 301 and 302. If the file violation detection method includes steps 301 and 303, the file violation detection method will end.

[0134] 304. The target device sends the initial detection result of the first file to be detected to the server.

[0135] 305. The server obtains the target detection results corresponding to the multiple third files to be detected requested and sent by the terminal device within a second preset time period.

[0136] In this embodiment of the invention, within a second preset time period, the terminal device can send multiple third files to be detected to the receiving device. Both the private violation detection service and the third-party violation detection service can perform violation detection on the multiple third files to be detected, and obtain the target detection result corresponding to each third file to be detected. The target detection result can indicate whether the third file to be detected is a violation file or a non-violation file.

[0137] 306. The server determines the second ratio of the illegal files in the target detection results corresponding to multiple third files to be detected, and determines the sensitivity level of the terminal device based on the second ratio.

[0138] In this embodiment of the invention, the server can filter out the detection results indicating that the file is illegal from the target detection results corresponding to the multiple third files to be detected, and determine the sensitivity level corresponding to the second ratio between the number of detection results indicating that the file is illegal and the number of target detection results corresponding to the multiple third files to be detected.

[0139] It should be noted that the target detection results corresponding to these multiple third files to be detected may include the following:

[0140] Scenario 1: The initial detection result obtained by the target device's private violation detection service is a non-violation file;

[0141] Scenario 2: The target document obtained from the third-party non-compliant testing service is a non-compliant document;

[0142] Scenario 3: The target document obtained by the third-party non-compliant testing service is a non-compliant document.

[0143] In the above three cases, cases one and two indicate that the third file to be detected is a non-violation file; case three indicates that the third file to be detected is a violation file; therefore, the server determines the second ratio between the number of third files to be detected that fall under case three and the total number of third files to be detected.

[0144] Optionally, the server determines a second ratio of the proportion of violating files in the target detection results corresponding to multiple third files to be detected, and determines the sensitivity level of the terminal device based on the second ratio. Specific implementation methods may include, but are not limited to, the following optional methods:

[0145] Method 1: If the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is greater than the fourth threshold, the server determines that the terminal device is a sensitive terminal device; if the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is less than or equal to the fourth threshold, the server determines that the terminal device is a non-sensitive terminal device.

[0146] For example, assuming the fourth threshold is 0.4, the server obtains the target detection results corresponding to 10 third files to be detected sent by the terminal device to the receiving device. Among these 10 target detection results, 6 indicate illegal files and 4 indicate non-illegal files. Since 6 / 10 = 0.6 > 0.4, the server can determine that the terminal device is a sensitive terminal device.

[0147] Furthermore, after the terminal device is marked as a sensitive terminal device, the server can count the target detection results corresponding to multiple fourth files to be detected sent by the terminal device within a preset time period; if the third ratio of non-violation files in the target detection results corresponding to multiple fourth files to be detected is greater than the fifth threshold, the server determines that the terminal device is a non-sensitive terminal device.

[0148] For example, assuming the fifth threshold is 0.7, the server obtains the target detection results corresponding to 15 fourth files to be detected sent by the terminal device to the receiving device. Among these 15 target detection results, 3 indicate illegal files and 12 indicate non-illegal files. Since 12 / 15 = 0.8 > 0.7, the server can determine that the terminal device is a non-sensitive terminal device.

[0149] Through the above optional implementation methods, the server can determine the sensitivity of the terminal device based on the proportion of illegal files in the files to be detected sent by the terminal device to the receiving device; and after determining that the terminal device is a sensitive terminal device, the server can update the sensitivity of the terminal device based on the proportion of non-illegal files in the files to be detected sent by the terminal device to the receiving device.

[0150] Method 2: If the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is within the first ratio range, the server determines the sensitivity level of the terminal device to be primary; if the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is within the second ratio range, the server determines the sensitivity level of the terminal device to be intermediate; if the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is within the third ratio range, the server determines the sensitivity level of the terminal device to be advanced.

[0151] It should be noted that the server can divide the ratio range into more intervals, so that the server can determine more sensitivity levels of terminal devices.

[0152] For example, assuming the first ratio range is 0.3-0.5, the second ratio range is 0.51-0.75, and the third ratio range is 0.76-1, the server obtains the target detection results corresponding to 10 third files to be detected sent by the terminal device to the receiving device. Among these 10 target detection results, 6 indicate illegal files and 4 indicate non-illegal files. Since 6 / 10 = 0.6, and 0.6 falls within the range of 0.51-0.75, the server can determine that the sensitivity level of the terminal device is medium.

[0153] Furthermore, after the terminal device is marked with a sensitivity level, the server can count the target detection results corresponding to multiple fifth files to be detected sent by the terminal device within a preset time period; if the fourth ratio of non-violation files in the target detection results corresponding to multiple fifth files to be detected is greater than the sixth threshold, the server can reduce the sensitivity level of the terminal device by one level.

[0154] For example, assuming the sixth threshold is 0.7, the terminal device's current sensitivity level is medium, and the server obtains the target detection results corresponding to the 16 fifth files to be detected sent by the terminal device to the receiving device, of which 2 indicate illegal files and 14 indicate non-illegal files. Since 14 / 16 = 0.875 > 0.7, the server can lower the terminal device's sensitivity level from medium to low.

[0155] Through the above optional implementation methods, the server can determine the sensitivity of the terminal device based on the proportion of illegal files in the files to be detected sent by the terminal device; and after determining that the terminal device is a sensitive terminal device, the server can update the sensitivity of the terminal device based on the proportion of non-illegal files in the files to be detected sent by the terminal device.

[0156] Method 3: Within the current detection period, if the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is greater than the fourth threshold, the server determines the sensitivity level of the terminal device to be primary; if, in the next detection period, the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is still greater than the fourth threshold, the server determines the sensitivity level of the terminal device to be intermediate; if, in a subsequent detection period, the second ratio of the proportion of illegal files in the target detection results corresponding to multiple third files to be detected is still greater than the fourth threshold, the server determines the sensitivity level of the terminal device to be advanced.

[0157] It should be noted that the server can determine more sensitivity levels of the terminal device.

[0158] For example, assuming the detection period is 10 minutes and the fourth threshold is 0.4, the server obtains the target detection results of 10 third-party files to be detected within the current 10 minutes. Of these 10 target detection results, 6 indicate illegal files and 4 indicate non-illegal files. Since 6 / 10 = 0.6 > 0.4, the server can determine that the sensitivity level of this terminal device is low. In the next 10 minutes, the server obtains the target detection results of 15 third-party files to be detected. Of these 15 target detection results, 12 indicate illegal files and 3 indicate non-illegal files. Since 12 / 15 = 0.8 > 0.4, the server can determine that the sensitivity level of this terminal device is medium. In the next 10 minutes, the server obtains the target detection results of 12 third-party files to be detected. Of these 12 target detection results, 6 indicate illegal files and 6 indicate non-illegal files. Since 6 / 12 = 0.5 > 0.4, the server can determine that the sensitivity level of this terminal device is high.

[0159] Furthermore, after the terminal device is marked with a sensitivity level, the server can count the target detection results corresponding to multiple sixth files to be detected sent by the terminal device within a preset time period; if the fifth ratio of non-violation files in the target detection results corresponding to multiple sixth files to be detected is greater than the seventh threshold, the server can reduce the sensitivity level of the terminal device by one level.

[0160] For example, assuming the seventh threshold is 0.7, the current sensitivity level of the terminal device is medium, and the server obtains the target detection results corresponding to the 16 sixth files to be detected sent by the terminal device to the receiving device, of which 2 indicate illegal files and 14 indicate non-illegal files. Since 14 / 16 = 0.875 > 0.7, the server can reduce the sensitivity level of the terminal device from medium to low.

[0161] Through the above optional implementation methods, the server can determine the sensitivity of the terminal device based on the proportion of illegal files in the files to be detected sent by the terminal device; and after determining that the terminal device is a sensitive terminal device, the server can update the sensitivity of the terminal device based on the proportion of non-illegal files in the files to be detected sent by the terminal device.

[0162] 307. The server marks terminal devices according to their sensitivity level.

[0163] 308. If the initial detection result is a non-violation file, and the sensitivity level of the terminal device is not greater than the preset level, then the server determines that the target detection result of the first file to be detected is a non-violation file.

[0164] In this embodiment of the invention, if the sensitivity level of the terminal device is not greater than the preset level, it means that the terminal device sends fewer illegal files. If the initial detection result is still a non-illegal file, the server can determine that the target detection result of the first file to be detected is a non-illegal file.

[0165] 309. If the initial detection result is a violation file, and / or the sensitivity level of the terminal device is greater than the preset level, the server will use a third-party violation detection service to detect the first file to be detected and obtain the target detection result of the first file to be detected.

[0166] In this embodiment of the invention, if the server detects that the sensitivity level currently marked by the terminal device is greater than or equal to a preset level, the server can stop the target device from performing private violation detection on the first file to be detected through the private violation detection service. Instead, the server directly sends the first file to be detected to a third-party violation detection service, so that the third-party violation detection service can perform violation detection on the first file to be detected and receive the target detection result of the first file to be detected sent by the third-party violation detection service.

[0167] It should be noted that if the sensitivity level of the terminal device is higher than the preset level, it means that the terminal device sends a lot of illegal files. In this case, it can be detected directly through a third-party illegal detection service.

[0168] It should be noted that steps 308 and 309 are different operations performed by the server after obtaining different initial detection results. Therefore, steps 308 and 309 are two parallel steps and cannot be executed simultaneously.

[0169] 310. If the target detection result is a violation file, the server will process the first file to be detected.

[0170] In this embodiment of the invention, if the target detection result is a violation file, that is, the same as the initial detection result, then it can be concluded that the first file to be detected is indeed a violation file. Therefore, the server can process the first file to be detected, and the processing includes at least one of the following: interception processing, withdrawal processing, and deletion processing.

[0171] Optionally, the server's processing of the first file to be detected may specifically include the following methods:

[0172] Method 1: The server intercepts the first file to be detected.

[0173] If the current server has not yet sent the first file to be detected to the receiving device, then the current server can intercept the first file to be detected, so that the receiving device will not be able to receive the first file to be detected.

[0174] Method 2: The server withdraws the first file to be tested.

[0175] If the server has already sent the first file to be tested to the receiving device, the server can immediately withdraw the first file to be tested. This can shorten the time it takes for the receiving device to receive the first file to be tested and minimize the possibility of other users viewing the first file to be tested.

[0176] Method 3: The server deletes the first file to be tested.

[0177] If the target detection result indicates that the first file to be detected is a violation file, that is, both the initial detection result and the target detection result indicate that the first file to be detected is indeed a violation file, then it can be concluded that the first file to be detected is indeed a violation file. Therefore, the server can instruct the target device to delete the first file to be detected stored locally, thus fundamentally preventing the target device from spreading the first file to be detected.

[0178] It should be noted that the server can intercept, withdraw, or delete the first file to be detected; it can also intercept and delete the first file to be detected, as well as withdraw and delete the first file to be detected.

[0179] 311. If the target detection result is a non-violation file, the server sends the first file to be detected to the receiving device.

[0180] In this embodiment of the invention, if the target detection result is a non-violation file, that is, the initial detection result and the target detection result are different, the server can determine that the first file to be detected is a non-violation file based on the target detection result, and then the server can send the first file to be detected to the receiving device to complete the transmission of the first file to be detected by the target device.

[0181] Optionally, the server obtains the target detection results corresponding to multiple second files to be detected, determined by a third-party violation detection service, within a first preset time period; if the first ratio between the number of files whose target detection results are non-violation files and the number of files whose target detection results are violation files is greater than a first threshold, then a private violation detection stop command is sent to the target device.

[0182] It should be noted that the number of files whose target detection results are non-violations is the number of files whose target detection results indicate that the second file to be detected is a non-violation file, which is also the number of files whose initial detection results are different from the target detection results; the number of files whose target detection results are violations is the number of files whose target detection results indicate that the second file to be detected is a violation file, which is also the number of files whose initial detection results are the same as the target detection results.

[0183] In this implementation, if the ratio between the number of files whose corresponding target detection results are non-violations and the number of files whose corresponding target detection results are violations is greater than a first threshold (i.e., the ratio between the number of files whose target detection results indicate that the second file to be detected is non-violations and the number of files whose target detection results indicate that the second file to be detected is violations is greater than a third threshold, or the ratio between the number of initial detection results that are different from the target detection results and the number of initial detection results that are the same as the target detection results is greater than a third threshold), then it can be concluded that the credibility of the private violation detection is low, and the server can send a private violation detection stop command to the target device.

[0184] The private violation detection stop command is used to instruct the target device to stop performing private violation detection services.

[0185] For example, assuming the first threshold is 30% and the preset duration is 20 minutes, between 10:00:00 and 10:20:00, the server receives 10 target detection results, of which 6 target detection results are illegal files and 4 target detection results are non-illegal files. Since 4 / 6*100%=66.7%>30%, it can be said that the credibility of the private violation detection service is low. Therefore, the server can send a private violation detection stop command to the target device.

[0186] In this optional implementation, the server detects the second file to be detected through a private violation detection service and a third-party violation detection service. If the proportion of inconsistencies between the detection results of the private violation detection service and the third-party violation detection service exceeds a threshold, it indicates that the private violation detection service has low reliability. Therefore, the server can notify the target device to stop the private violation detection and only use the third-party violation detection service for detection, thereby improving the accuracy of the detection of the file to be detected.

[0187] This invention provides a file violation detection method. When the target device has its private violation detection switch enabled and its private violation detection program has a private violation detection model, it first detects a first file to be detected to obtain an initial detection result. The target device has a private violation detection service deployed on it. If the initial detection result indicates that the first file to be detected is a violation file, the server can further process the first file to be detected based on the target detection result from a third-party violation detection service, and mark the sensitivity level of the terminal device based on the target detection results over a period of time. If the initial detection result indicates that the first file to be detected is not a violation file, the server does not need to detect the first file to be detected through the third-party violation detection service. In this solution, the third-party violation detection service is only activated when the initial detection result indicates that the file is a violation file, avoiding the phenomenon of sending all files to the third-party violation detection service for detection. This effectively reduces file violation detection operations and lowers violation detection costs.

[0188] Example 3

[0189] like Figure 6 As shown, an embodiment of the present invention provides a server, the server comprising:

[0190] The transceiver module 601 is used to receive the initial detection result of the first file to be detected sent by the target device. The target device has a private violation detection service deployed on it. The initial detection result is obtained by the target device through the private violation detection service to detect the first file to be detected.

[0191] The processing module 602 is used to determine that the target detection result of the first file to be detected is a non-violation file if the initial detection result is a non-violation file;

[0192] The processing module 602 is also used to detect the first file to be detected by a third-party violation detection service if the initial detection result is a violation file, so as to obtain the target detection result of the first file to be detected.

[0193] Optionally, the transceiver module 601 is also used to receive an information transmission request sent by the terminal device, the information transmission request including a support flag used to characterize whether the terminal device supports the private violation detection service;

[0194] The transceiver module 601 is also used to receive the initial detection result of the first file to be detected sent by the terminal device if the support flag is the first support flag;

[0195] The first support flag indicates that the terminal device supports the private violation detection service.

[0196] Optionally, the transceiver module 601 is specifically used to receive the initial detection result of the first file to be detected sent by the private server if the support flag is the second support flag;

[0197] The second support flag indicates that the terminal device does not support the private violation detection service.

[0198] Optionally, the processing module 602 is further configured to process the first file to be detected if the target detection result is an illegal file, and the processing includes at least one of the following: interception processing, withdrawal processing, and deletion processing;

[0199] The transceiver module 601 is also used to send the first file to be detected to the receiving device if the target detection result is a non-violation file.

[0200] Optionally, the processing module 602 is further configured to obtain the target detection results corresponding to multiple second files to be detected determined by a third-party violation detection service within a first preset time period, wherein the multiple second files to be detected are files requested and sent by the terminal device;

[0201] The transceiver module 601 is further configured to send a private violation detection stop command to the target device if the first ratio between the number of files whose target detection result is non-violation and the number of files whose target detection result is violation in a plurality of second files to be detected is greater than a first threshold. The private violation detection stop command is used to instruct the target device to stop performing the private violation detection service.

[0202] Optionally, the processing module 602 is specifically used to determine that the target detection result of the first file to be detected is a non-violation file if the initial detection result is a non-violation file and the sensitivity level corresponding to the terminal device is not greater than the preset level.

[0203] The processing module 602 is specifically used to detect the first file to be detected by a third-party violation detection service if the initial detection result is a violation file and / or the sensitivity level of the terminal device is greater than the preset level, thereby obtaining the target detection result of the first file to be detected.

[0204] Optionally, the processing module 602 is further configured to obtain the target detection results corresponding to the multiple third files to be detected requested and sent by the terminal device within a second preset time period;

[0205] The processing module 602 is also used to determine the second ratio of the illegal files in the target detection results corresponding to the multiple third files to be detected, and to determine the sensitivity level of the terminal device based on the second ratio.

[0206] Optionally, the processing module 602 is further configured to, if it does not receive the initial detection result of the first file to be detected sent by the target device within a third preset time period, detect the first file to be detected through a third-party violation detection service to obtain the target detection result of the first file to be detected.

[0207] In this embodiment of the invention, each module can implement the file violation detection method provided in the above method embodiment and achieve the same technical effect. To avoid repetition, it will not be described again here.

[0208] like Figure 7 As shown, this embodiment of the invention also provides a server, which may include:

[0209] Memory 701 storing executable program code;

[0210] Processor 702 coupled to memory 701;

[0211] Specifically, the processor 702 calls the executable program code stored in the memory 701 to execute the file violation detection method executed by the server in the above method embodiments.

[0212] This invention provides a computer-readable storage medium storing a computer program that causes a computer to perform some or all of the steps of the methods described in the above embodiments.

[0213] This invention also provides a computer program product, wherein when the computer program product is run on a computer, the computer performs some or all of the steps of the methods described in the above method embodiments.

[0214] This invention also provides an application publishing platform, which is used to publish computer program products. When the computer program products are run on a computer, the computer performs some or all of the steps of the methods described in the above method embodiments.

[0215] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of the invention. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. Those skilled in the art should also recognize that the embodiments described in the specification are optional embodiments, and the actions and modules involved are not necessarily essential to the invention.

[0216] In various embodiments of the present invention, it should be understood that the sequence number of each process does not necessarily imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0217] The units described above as separate components may or may not be physically separate. The components shown as units may or may not be physical units; they can be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0218] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0219] If the integrated units described above are implemented as software functional units and sold or used as independent products, they can be stored in a computer-accessible memory. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a memory and includes several requests to cause a computer device (which can be a personal computer, server, or network device, specifically a processor in the computer device) to execute some or all of the steps of the methods described in the various embodiments of the present invention.

[0220] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, including read-only memory (ROM), random access memory (RAM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), one-time programmable read-only memory (OTPROM), electrically-Erasable Programmable Read-Only Memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, disk storage, magnetic tape storage, or any other computer-readable medium capable of carrying or storing data.

Claims

1. A method for detecting document violations, characterized in that, Applied to a server, the method includes: The system receives the initial detection result of a first file to be detected sent by a target device, wherein a private violation detection service is deployed on the target device, and the initial detection result is obtained by the target device through the private violation detection service to detect the first file to be detected. The target device includes a terminal device. If the initial detection result is a non-violation file, and the sensitivity level of the terminal device is not greater than the preset level, then the target detection result of the first file to be detected is determined to be a non-violation file. If the initial detection result indicates a violation, then the first file to be detected is detected using a third-party violation detection service to obtain the target detection result for the first file to be detected; and / or, If the sensitivity level of the terminal device is greater than the preset level, the first file to be detected is detected by the third-party violation detection service to obtain the target detection result of the first file to be detected. Before obtaining the target detection result of the first file to be detected by the third-party violation detection service if the sensitivity level corresponding to the terminal device is greater than the preset level, the method further includes: Obtain the target detection results corresponding to the multiple third files to be detected that the terminal device requests to send within a second preset time period; A second ratio is determined in the target detection results corresponding to the plurality of third files to be detected, representing the proportion of non-compliant files, and the sensitivity level of the terminal device is determined based on the second ratio.

2. The method according to claim 1, characterized in that, Before receiving the initial detection result of the first file to be detected sent by the target device, the method further includes: Receive an information sending request sent by the terminal device, the information sending request including a support flag indicating whether the terminal device supports the private violation detection service; The initial detection result of the first file to be detected sent by the target device includes: If the support flag is a first support flag, then the initial detection result of the first file to be detected sent by the terminal device is received; The first support flag indicates that the terminal device supports the private violation detection service.

3. The method according to claim 2, characterized in that, The target device includes a private server corresponding to the terminal device, and the initial detection result of receiving the first file to be detected sent by the target device includes: If the support flag is the second support flag, then the initial detection result of the first file to be detected sent by the private server is received; The second support flag indicates that the terminal device does not support the private violation detection service.

4. The method according to claim 1, characterized in that, The method further includes: If the target detection result is a violation file, then the first file to be detected is processed, and the processing includes at least one of the following: interception processing, withdrawal processing, and deletion processing; If the target detection result is a non-violation file, then the first file to be detected is sent to the receiving device.

5. The method according to claim 1, characterized in that, The method further includes: Within a first preset time period, obtain the target detection results corresponding to a plurality of second files to be detected determined by the third-party violation detection service, wherein the plurality of second files to be detected are files requested to be sent by the terminal device; If the first ratio between the number of files whose target detection result is non-violation and the number of files whose target detection result is violation in the plurality of second files to be detected is greater than a first threshold, a private violation detection stop instruction is sent to the target device. The private violation detection stop instruction is used to instruct the target device to stop performing the private violation detection service.

6. The method according to claim 1, characterized in that, The method further includes: If the initial detection result of the first file to be detected is not received from the target device within the third preset time period, the first file to be detected is detected by the third-party violation detection service to obtain the target detection result of the first file to be detected.

7. A server for detecting file violations, characterized in that, include: The transceiver module is used to receive the initial detection result of the first file to be detected sent by the target device. The target device is equipped with a private violation detection service. The initial detection result is obtained by the target device through the private violation detection service to detect the first file to be detected. The target device includes a terminal device. The processing module is used to determine that the target detection result of the first file to be detected is a non-violation file if the initial detection result is a non-violation file and the sensitivity level corresponding to the terminal device is not greater than a preset level. The processing module is further configured to, if the initial detection result is a violation file, then detect the first file to be detected through a third-party violation detection service to obtain the target detection result of the first file to be detected; and / or, if the sensitivity level corresponding to the terminal device is greater than the preset level, then detect the first file to be detected through the third-party violation detection service to obtain the target detection result of the first file to be detected. The processing module is further configured to obtain the target detection results corresponding to the multiple third files to be detected requested and sent by the terminal device within a second preset time period; determine the second ratio of the illegal files in the target detection results corresponding to the multiple third files to be detected; and determine the sensitivity level corresponding to the terminal device based on the second ratio.

8. A computer-readable storage medium, characterized in that, include: The computer-readable storage medium stores computer instructions, which, when executed by a processor, implement the file violation detection method as described in any one of claims 1 to 6.

Images