An IOS terminal virtual positioning vulnerability identification method, system, device and medium

Abstract

This invention discloses a method, system, device, and medium for identifying virtual location vulnerabilities on iOS devices. The method includes the following steps: invoking an iOS application to perform a location request operation; in response to the location request operation, obtaining partial callback location data; generating a first vulnerability identification result based on the data parameters of the partial callback location data; and in response to the first vulnerability identification result being a non-virtual location result, generating a final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data. This invention can more accurately identify the GPX virtual location method on Apple devices. Through dual identification logic, it can efficiently and accurately determine whether a user has used virtual location, effectively improving the authenticity of the location function and application security of Apple applications, enhancing user experience, and possessing high application value.

Description

Technical Field

[0001] This invention relates to the field of Internet technology, specifically to the field of application vulnerability processing, and particularly to a method, system, device, and medium for identifying virtual location vulnerabilities on iOS devices. Background Technology

[0002] With the rapid development of mobile internet, many apps support location services, such as check-in apps that use location services to enable on-site check-in, and media applications that use location services to verify the authenticity of user data. Consequently, how to prevent users from using fake locations in location services has become a major topic.

[0003] Currently, many mobile users use virtual location to simulate their current location in order to perform operations such as virtual check-in and virtual fraud. This has resulted in apps being filled with fake data and virtual users, which seriously affects the experience of real users and the attendance management of some companies.

[0004] It's worth noting that among Apple users, most use GPX files to achieve virtual location. However, the common practice in Apple mobile apps to prevent GPX virtual location is often simply to check if the altitude and current speed of the located data are both zero, or even to skip virtual location checks altogether. Research on user behavior shows that most users are checking in while stationary, with their speed already at zero. In such cases, Apple's recognition mechanism struggles to detect virtual location. This simplistic and inaccurate approach disrupts normal business operations, raises user doubts about the data's authenticity, accelerates user churn, and severely impacts the authenticity of location functionality and application security on Apple devices. Summary of the Invention

[0005] The purpose of this invention is to address the aforementioned problems in the prior art by providing a method, system, device, and medium for identifying virtual location vulnerabilities on iOS devices, thereby resolving the issue that existing virtual location identification methods for Apple applications are too simplistic, severely impacting the authenticity of location functionality and application security.

[0006] To solve the above-mentioned technical problems, the specific technical solution of the present invention is as follows:

[0007] On one hand, this invention provides a method for identifying virtual location vulnerabilities on iOS devices, comprising the following steps:

[0008] Call the iOS application to perform a location request operation;

[0009] In response to the location request operation, obtain partial callback location data;

[0010] The first vulnerability identification result is generated based on the data parameters of the partial callback location data;

[0011] In response to the first vulnerability identification result being a non-virtual location result, a final vulnerability identification result is generated based on the request parameters of the location request operation and the time parameters of the partial callback location data.

[0012] As an improved solution, the location request operation includes:

[0013] Set the first request count;

[0014] The iOS application is invoked to send a location request to the iOS mobile device according to the first number of requests.

[0015] As an improved solution, obtaining partial callback positioning data includes:

[0016] Set the callback duration;

[0017] Within the callback duration, the first location data returned by the location request operation is collected as the partial callback data.

[0018] As an improved approach, generating the first vulnerability identification result based on the data parameters of the partial callback location data includes:

[0019] Identify the altitude value, instantaneous velocity, and altitude accuracy of the partial callback positioning data;

[0020] Let the altitude value of the positioning data, the instantaneous velocity of the positioning data, and the altitude accuracy of the positioning data be used as the data parameters;

[0021] Set the first, second, and third reference values;

[0022] A first vulnerability identification result is generated based on the data parameters, the first benchmark value, the second benchmark value, and the third benchmark value.

[0023] As an improved approach, generating a first vulnerability identification result based on the data parameters, the first benchmark value, the second benchmark value, and the third benchmark value includes:

[0024] When the altitude value of the positioning data is the first reference value, the instantaneous speed of the positioning data is the second reference value, and the altitude accuracy of the positioning data is the third reference value, a confirmed virtual positioning result is generated as the first vulnerability identification result.

[0025] In response to the location data elevation value not being the first reference value, or the location data instantaneous speed not being the second reference value, or the location data elevation accuracy not being the third reference value, the non-virtual location result is generated as the first vulnerability identification result.

[0026] As an improved approach, the step of generating the final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data includes:

[0027] Let the first number of requests be used as the request parameter;

[0028] Identify the number of data entries in the aforementioned callback positioning data;

[0029] Response time for obtaining the aforementioned partial callback positioning data;

[0030] Calculate the average data time of the aforementioned partial callback positioning data;

[0031] Let the response time and the average data time be used as the time parameter;

[0032] Set the first ratio value;

[0033] The final vulnerability identification result is generated based on the request parameters, the number of data entries, the time parameter, and the first ratio.

[0034] As an improved approach, the step of generating the final vulnerability identification result based on the request parameters, the number of data entries, the time parameter, and the first ratio includes:

[0035] Calculate the product of the average data time and the first proportion value;

[0036] The floating time range is calculated based on the product value and the average data time.

[0037] Compare the response time and the float time range;

[0038] Compare the number of first requests with the number of data entries;

[0039] When the response time is within the floating time range and the number of first requests is consistent with the number of data entries, the confirmed virtual location result is generated as the final vulnerability identification result;

[0040] If the response time is not within the floating time range, or if the number of first requests is not consistent with the number of data entries, a confirmed true location result is generated as the final vulnerability identification result.

[0041] On the other hand, the present invention also provides an iOS virtual location vulnerability identification system, comprising:

[0042] The module includes a location request module, a data callback module, a preliminary identification and judgment module, and a final identification and judgment module.

[0043] The location request module is used to call the iOS application to perform a location request operation;

[0044] The data callback module is used to respond to the location request operation and obtain partial callback location data;

[0045] The preliminary identification and judgment module is used to generate a first vulnerability identification result based on the data parameters of the partial callback location data;

[0046] The final identification and judgment module is used to generate a final vulnerability identification result in response to the first vulnerability identification result being a non-virtual location result, based on the request parameters of the location request operation and the time parameters of the partial callback location data.

[0047] On the other hand, the present invention also provides a computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the steps of the iOS virtual location vulnerability identification method.

[0048] On the other hand, the present invention also provides a computer device, the computer device including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; wherein:

[0049] The memory is used to store computer programs;

[0050] The processor is used to execute the steps of the iOS virtual location vulnerability identification method by running a program stored in the memory.

[0051] The beneficial effects of the technical solution of this invention are:

[0052] The iOS virtual location vulnerability identification method described in this invention can achieve more accurate identification of the GPX virtual location method on Apple devices. Through dual identification logic, it can efficiently and accurately determine whether a user has used virtual location, effectively improving the authenticity of the location function and application security of Apple applications, enhancing user experience, and has high application value.

[0053] The iOS virtual location vulnerability identification system described in this invention can achieve more accurate identification of the GPX virtual location method on Apple devices through the cooperation of a location request module, a data callback module, a preliminary identification and judgment module, and a final identification and judgment module. Through dual identification logic, it can efficiently and accurately determine whether a user has used virtual location, effectively improve the authenticity of the location function of Apple applications and application security, improve user experience, and has high application value.

[0054] The computer-readable storage medium of the present invention enables the coordination of a guided location request module, a data callback module, a preliminary identification and judgment module, and a final identification and judgment module to realize the iOS virtual location vulnerability identification method of the present invention. Furthermore, the computer-readable storage medium of the present invention also effectively improves the operability of the iOS virtual location vulnerability identification method.

[0055] The computer device described in this invention can store and execute the computer-readable storage medium, thereby realizing the iOS virtual location vulnerability identification method described in this invention. Attached Figure Description

[0056] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0057] Figure 1 This is a flowchart illustrating the iOS virtual location vulnerability identification method described in Embodiment 1 of the present invention;

[0058] Figure 2 This is a schematic diagram of the architecture of the iOS virtual location vulnerability identification system described in Embodiment 2 of the present invention;

[0059] Figure 3 This is a schematic diagram of the structure of the computer device described in Embodiment 4 of the present invention;

[0060] The markings in the attached diagram are explained as follows:

[0061] 1501. Processor; 1502. Communication interface; 1503. Memory; 1504. Communication bus. Detailed Implementation

[0062] The preferred embodiments of the present invention will now be described in detail with reference to the accompanying drawings, so that the advantages and features of the present invention can be more easily understood by those skilled in the art, thereby providing a clearer and more explicit definition of the scope of protection of the present invention.

[0063] In the description of this invention, it should be noted that the embodiments described in this invention are only some embodiments of this invention, not all embodiments; based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0064] The terms "first," "second," etc., used in this specification, claims, and accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, apparatus, product, or device that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices. Example 1

[0065] This embodiment provides a method for identifying virtual location vulnerabilities on iOS devices, such as... Figure 1 As shown, it includes the following steps:

[0066] S100. Call the iOS (i.e., Apple) application to request location data. In practice, iOS apps are often used by malicious users to perform illegal operations via GPX virtual location. iOS apps cannot accurately detect this virtual location vulnerability. Typically, iOS apps check if the altitude and current speed values ​​of the relevant location data are both 0 to identify virtual location vulnerabilities. However, this strategy often results in misjudgments or omissions, affecting the accuracy of virtual location vulnerability detection and consequently impacting the security and fairness of the iOS application. Therefore, this implementation adopts a more comprehensive judgment strategy to achieve full detection of virtual location vulnerabilities. In this step, location data requests are also required. After the request, a double logical judgment is performed based on the callback location data to achieve better judgment results.

[0067] S200: In response to the location request operation, obtain partial callback location data;

[0068] S300: Generate a first vulnerability identification result based on the data parameters of the partial callback location data;

[0069] S400. In response to the first vulnerability identification result being a non-virtual location result, a final vulnerability identification result is generated based on the request parameters of the location request operation and the time parameters of the partial callback location data.

[0070] As one embodiment of the present invention, the location request operation includes: setting a first request count; the first request count is n, and n is recommended to be a number greater than 15, which is used to initiate a location request. Therefore, the iOS application is called to initiate a location request to the iOS mobile device according to the first request count.

[0071] In one embodiment of the present invention, obtaining partial callback location data includes: setting a callback duration; based on the above operations, 15 location requests have been initiated, and at this time, it is necessary to callback the location data of the request response. The callback is within a certain time period. If there is no specified duration limit, then the data callback has no verification significance; in this embodiment, the callback duration is recommended to be set to 5 seconds; therefore, within the callback duration, the first location data returned by the location request operation is collected as the partial callback data. Multiple first location data should be available in this embodiment.

[0072] In one embodiment of the present invention, generating a first vulnerability identification result based on the data parameters of the partial callback positioning data includes: identifying the positioning data altitude value, positioning data instantaneous speed, and positioning data altitude accuracy of the partial callback positioning data; setting the positioning data altitude value, the positioning data instantaneous speed, and the positioning data altitude accuracy as the data parameters; and setting a first reference value, a second reference value, and a third reference value. In this embodiment, the first reference value is 0, the second reference value is also 0, and the third reference value is -1. Since in real positioning situations, the altitude value is usually not 0, the vertical accuracy of the altitude is not -1, and the callback of positioning data may only be requested once, but if the callback occurs multiple times, the instantaneous speed of the response may change. However, the callback response time of positioning data in virtual positioning is basically consistent. Therefore, the above-mentioned reference values ​​and data parameters are set based on this characteristic to determine the situation of virtual positioning vulnerabilities. Therefore, a first vulnerability identification result is generated based on the data parameters, the first reference value, the second reference value, and the third reference value.

[0073] As one embodiment of the present invention, generating a first vulnerability identification result based on the data parameters, the first reference value, the second reference value, and the third reference value includes: responding to the location data altitude value being the first reference value, the location data instantaneous speed being the second reference value, and the location data altitude accuracy being the third reference value, i.e., determining that the location data altitude value of all collected first location data is 0, the instantaneous speed is 0, and the altitude vertical accuracy is -1, at this time it is determined to be virtual location, so a confirmed virtual location result is generated as the first vulnerability identification result; responding to the location data altitude value not being the first reference value, or the location data instantaneous speed not being the second reference value, or the location data altitude accuracy not being the third reference value, i.e., determining that there are non-zero values ​​in the location data altitude value of all collected first location data, non-zero values ​​in the instantaneous speed, and non--1 values ​​in the altitude vertical accuracy, at this time it is impossible to determine whether it is virtual location or real location, so further judgment is required, so an identifier of the non-virtual location result is generated as the first vulnerability identification result.

[0074] In one embodiment of the present invention, generating the final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data includes: setting the first request count n as the request parameter; identifying the number of data entries in the partial callback location data; the number of data entries is the quantity of the first location data; obtaining the response time of the partial callback location data; calculating the average data time of the partial callback location data; the average data time is the sum of the response times of all the first location data divided by n; setting the response time and the average data time as the time parameter; setting a first ratio value; the first ratio value is set to 20% in this embodiment to confirm a more reasonable time fluctuation range; therefore, the final vulnerability identification result is generated based on the request parameters, the number of data entries, the time parameter, and the first ratio.

[0075] As one embodiment of the present invention, generating the final vulnerability identification result based on the request parameters, the number of data entries, the time parameters, and the first ratio includes: calculating the product of the average data time and the first ratio value; in this embodiment, for example, if the average time is 10s, then the product = 10 * 20% = 2; calculating the floating time range based on the product and the average data time; the floating time range, as exemplified above, is 10⁻² to 10⁺², i.e., 8 to 12s. When the response time is within this range, and the number of location data entries and the number of location data requests n are the same, it is determined to be virtual location; therefore, the response time and the floating time range are compared; the number of first requests and the number of data entries are compared; in response to the response time being within the floating time range and the number of first requests being consistent with the number of data entries, the confirmed virtual location result is generated as the final vulnerability identification result; in response to the response time not being within the floating time range, or the number of first requests not being consistent with the number of data entries, the confirmed real location result is generated as the final vulnerability identification result. Example 2

[0076] This embodiment is based on the same inventive concept as the iOS virtual location vulnerability identification method described in Embodiment 1, and provides an iOS virtual location vulnerability identification system, such as... Figure 2 As shown, it includes: a location request module, a data callback module, a preliminary identification and judgment module, and a final identification and judgment module;

[0077] The location request module is used to call the iOS application to perform a location request operation;

[0078] As one embodiment of the present invention, the location request operation includes: the location request module setting a first request count; the location request module calling the iOS application to initiate a location request to the iOS mobile device according to the first request count.

[0079] The data callback module is used to respond to the location request operation and obtain partial callback location data;

[0080] In one embodiment of the present invention, the data callback module acquires partial callback positioning data, including: the data callback module sets a callback duration; within the callback duration, the data callback module collects the first positioning data returned by the positioning request operation as the partial callback data.

[0081] The preliminary identification and judgment module is used to generate a first vulnerability identification result based on the data parameters of the partial callback location data;

[0082] In one embodiment of the present invention, the preliminary identification and judgment module generates a first vulnerability identification result based on the data parameters of the partial callback positioning data, including: the preliminary identification and judgment module identifying the positioning data altitude value, positioning data instantaneous speed, and positioning data altitude accuracy of the partial callback positioning data; the preliminary identification and judgment module setting the positioning data altitude value, the positioning data instantaneous speed, and the positioning data altitude accuracy as the data parameters; the preliminary identification and judgment module setting a first reference value, a second reference value, and a third reference value; and the preliminary identification and judgment module generating a first vulnerability identification result based on the data parameters, the first reference value, the second reference value, and the third reference value.

[0083] In one embodiment of the present invention, the preliminary identification and judgment module generates a first vulnerability identification result based on the data parameters, the first reference value, the second reference value, and the third reference value, including: when the altitude value of the positioning data is the first reference value, the instantaneous velocity of the positioning data is the second reference value, and the altitude accuracy of the positioning data is the third reference value, the preliminary identification and judgment module generates a confirmed virtual positioning result as the first vulnerability identification result; when the altitude value of the positioning data is not the first reference value, or the instantaneous velocity of the positioning data is not the second reference value, or the altitude accuracy of the positioning data is not the third reference value, the preliminary identification and judgment module generates a non-virtual positioning result as the first vulnerability identification result.

[0084] The final identification and judgment module is used to generate a final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data in response to the first vulnerability identification result being a non-virtual location result.

[0085] In one embodiment of the present invention, the final identification and judgment module generates a final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data, including: the final identification and judgment module using the first request count as the request parameter; the final identification and judgment module identifying the number of data entries in the partial callback location data; the final identification and judgment module obtaining the response time of the partial callback location data; the final identification and judgment module calculating the average data time of the partial callback location data; the final identification and judgment module using the response time and the average data time as the time parameter; the final identification and judgment module setting a first ratio value; and the final identification and judgment module generating the final vulnerability identification result based on the request parameters, the number of data entries, the time parameter, and the first ratio.

[0086] In one embodiment of the present invention, the final identification and judgment module generates the final vulnerability identification result based on the request parameters, the number of data entries, the time parameters, and the first ratio, including: the final identification and judgment module calculating the product of the average data time and the first ratio; the final identification and judgment module calculating a floating time range based on the product and the average data time; the final identification and judgment module comparing the response time with the floating time range; the final identification and judgment module comparing the number of first requests with the number of data entries; when the response time is within the floating time range and the number of first requests is consistent with the number of data entries, the final identification and judgment module generates a confirmed virtual location result as the final vulnerability identification result; when the response time is not within the floating time range, or the number of first requests is inconsistent with the number of data entries, the final identification and judgment module generates a confirmed real location result as the final vulnerability identification result. Example 3

[0087] This embodiment provides a computer-readable storage medium, including:

[0088] The storage medium is used to store computer software instructions used to implement the iOS virtual location vulnerability identification method described in Embodiment 1 above. It includes a program for executing the program set for the iOS virtual location vulnerability identification method. Specifically, the executable program can be built into the iOS virtual location vulnerability identification system described in Embodiment 2. In this way, the iOS virtual location vulnerability identification system can implement the iOS virtual location vulnerability identification method described in Embodiment 1 by executing the built-in executable program.

[0089] Furthermore, the computer-readable storage medium in this embodiment can be any combination of one or more readable storage media, wherein the readable storage medium includes an electrical, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. Example 4

[0090] This embodiment provides an electronic device, such as... Figure 3 As shown, the electronic device may include: a processor 1501, a communication interface 1502, a memory 1503, and a communication bus 1504, wherein the processor 1501, the communication interface 1502, and the memory 1503 communicate with each other through the communication bus 1504.

[0091] Memory 1503 is used to store computer programs;

[0092] When the processor 1501 executes the computer program stored in the memory 1503, it implements the steps of the IOS virtual location vulnerability identification method described in Embodiment 1 above.

[0093] As one embodiment of the present invention, the communication bus mentioned in the terminal above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0094] As one embodiment of the present invention, the communication interface is used for communication between the aforementioned terminal and other devices.

[0095] In one embodiment of the present invention, the memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0096] As one embodiment of the present invention, the processor described above may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0097] Unlike existing technologies, the present application provides a method, system, device, and medium for identifying virtual location vulnerabilities on iOS devices. This method can more accurately identify the GPX virtual location method on Apple devices. Through dual identification logic, it can efficiently and accurately determine whether a user has used virtual location. This can effectively improve the authenticity of the location function and application security of Apple applications, enhance user experience, and has high application value.

[0098] It should be understood that in the various embodiments of this document, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0099] It should also be understood that, in the embodiments herein, the term "and / or" is merely a description of the relationship between associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, the character " / " in this document generally indicates that the preceding and following associated objects have an "or" relationship.

[0100] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this document.

[0101] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0102] In the embodiments provided herein, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the couplings or direct couplings or communication connections shown or discussed may be indirect couplings or communication connections through some interfaces, devices, or units, or they may be electrical, mechanical, or other forms of connection.

[0103] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of the embodiments described herein, depending on actual needs.

[0104] Furthermore, the functional units in the various embodiments of this document can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0105] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this paper, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this paper. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0106] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural or procedural transformations made based on the content of the present invention's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A method for identifying virtual location vulnerabilities on iOS devices, characterized in that, Includes the following steps: Call the iOS application to perform a location request operation; In response to the location request operation, obtain partial callback location data; The first vulnerability identification result is generated based on the data parameters of the partial callback location data; In response to the fact that the first vulnerability identification result is a non-virtual location result, a final vulnerability identification result is generated based on the request parameters of the location request operation and the time parameters of the partial callback location data. The location request operation includes: setting a first request count; invoking the iOS application to send a location request to the iOS mobile device according to the first request count; The step of obtaining partial callback positioning data includes: setting a callback duration; and within the callback duration, collecting the first positioning data returned by the positioning request operation as the partial callback positioning data. The step of generating a first vulnerability identification result based on the data parameters of the partial callback positioning data includes: identifying the positioning data altitude value, positioning data instantaneous speed, and positioning data altitude accuracy of the partial callback positioning data; setting the positioning data altitude value, the positioning data instantaneous speed, and the positioning data altitude accuracy as the data parameters; setting a first benchmark value, a second benchmark value, and a third benchmark value; and generating a first vulnerability identification result based on the data parameters, the first benchmark value, the second benchmark value, and the third benchmark value. The step of generating a first vulnerability identification result based on the data parameters, the first reference value, the second reference value, and the third reference value includes: generating a confirmed virtual positioning result as the first vulnerability identification result when the positioning data altitude value is the first reference value, the positioning data instantaneous speed is the second reference value, and the positioning data altitude accuracy is the third reference value; and generating a non-virtual positioning result as the first vulnerability identification result when the positioning data altitude value is not the first reference value, or the positioning data instantaneous speed is not the second reference value, or the positioning data altitude accuracy is not the third reference value. The step of generating the final vulnerability identification result based on the request parameters of the location request operation and the time parameters of the partial callback location data includes: setting the first request count as the request parameter; identifying the number of data entries in the partial callback location data; obtaining the response time of the partial callback location data; calculating the average data time of the partial callback location data; setting the response time and the average data time as the time parameter; setting a first ratio value; and generating the final vulnerability identification result based on the request parameters, the number of data entries, the time parameter, and the first ratio value.

2. The iOS virtual location vulnerability identification method according to claim 1, characterized in that: The step of generating the final vulnerability identification result based on the request parameters, the number of data entries, the time parameter, and the first ratio includes: Calculate the product of the average data time and the first proportion value; The floating time range is calculated based on the product value and the average data time. Compare the response time and the float time range; Compare the number of first requests with the number of data entries; When the response time is within the floating time range and the number of first requests is consistent with the number of data entries, the confirmed virtual location result is generated as the final vulnerability identification result; If the response time is not within the floating time range, or if the number of first requests is not consistent with the number of data entries, a confirmed true location result is generated as the final vulnerability identification result.

3. An iOS virtual location vulnerability identification system based on the iOS virtual location vulnerability identification method according to any one of claims 1 to 2, characterized in that, The system includes: a location request module, a data callback module, a preliminary identification and judgment module, and a final identification and judgment module; The location request module is used to call the iOS application to perform a location request operation; The data callback module is used to respond to the location request operation and obtain partial callback location data; The preliminary identification and judgment module is used to generate a first vulnerability identification result based on the data parameters of the partial callback location data; The final identification and judgment module is used to generate a final vulnerability identification result in response to the first vulnerability identification result being a non-virtual location result, based on the request parameters of the location request operation and the time parameters of the partial callback location data.

4. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the iOS virtual location vulnerability identification method according to any one of claims 1 to 2.

5. A computer device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; wherein: The memory is used to store computer programs; The processor is configured to execute the steps of the iOS virtual location vulnerability identification method according to any one of claims 1 to 2 by running a program stored in the memory.

Images