A safety protection method and related device

Abstract

The application discloses a security protection method and related device, the method comprises the following steps: a server receives a first request sent by a first client, wherein the first client is any client capable of interacting with the server; it is determined whether the first request is a first type of request, wherein the first type of request is a request capable of obtaining benefits and having tampering risks, and / or the first type of request is a request with verification time greater than a preset first threshold; if yes, an auxiliary verification client is selected based on the first request; the first request is forwarded to the auxiliary verification client to verify the legality of the first request by using the auxiliary verification client; the legality verification result fed back by the auxiliary verification client is received, and the processing operation of the first request is determined based on the legality verification result, and the processing operation is executed, wherein the processing operation comprises responding to the first request or rejecting the first request. The method provided by the application can improve the speed of client legality verification.

Description

Technical Field

[0001] This application relates to the field of Internet technology, and in particular to a security protection method and related device. Background Technology

[0002] With the development of internet technology, more and more users are engaging in various social activities online, such as online chatting, online games, advertising, and investing in internet finance platforms. However, this also brings with it a number of malicious users who register accounts in bulk to engage in malicious activities for personal gain, or who launch malicious requests for personal profit. These behaviors not only damage the ecosystem of online platforms but also cause financial and emotional losses to other users, resulting in a severe negative impact.

[0003] Current methods to combat such malicious behavior often involve requiring users to bind their real-name mobile phone numbers and verify mobile phone verification codes to increase the cost of such actions. Alternatively, they record the number of times a user performs a certain action within a short period and set a threshold based on experience. If the number of times a user performs the action exceeds the threshold, the user is identified as malicious. However, when the server is under heavy load, the verification speed of these methods is greatly reduced. How to accurately and quickly verify malicious behavior is a pressing technical problem that needs to be solved. Summary of the Invention

[0004] The main technical problem addressed by this application is to provide a security protection method and related device that can improve the speed of client legitimacy verification and reduce the operational pressure on the server to perform legitimacy verification.

[0005] To solve the above-mentioned technical problems, one technical solution adopted in this application is: to provide a security protection method, the method comprising:

[0006] The server receives a first request sent by a first client, wherein the first client is any client that can interact with the server;

[0007] Determine whether the first request is a first type of request, wherein the first type of request is a request that can obtain benefits and has the risk of tampering, and / or the first type of request is a request whose verification time is greater than a preset first threshold;

[0008] If so, then select an auxiliary verification client based on the first request;

[0009] The first request is forwarded to the auxiliary verification client so that the auxiliary verification client can verify the legitimacy of the first request.

[0010] The system receives the legitimacy verification result from the auxiliary verification client, determines the processing operation for the first request based on the legitimacy verification result, and executes the processing operation, wherein the processing operation includes responding to the first request or rejecting the first request.

[0011] Further, the step of selecting an auxiliary verification client based on the first request includes:

[0012] When the first request includes at least one target object, a second client corresponding to one of the at least one target object is selected as the auxiliary verification client.

[0013] The target object is the object for which the first request requests information, and the second client is the client corresponding to the target object that can interact with the server.

[0014] Furthermore, the step of selecting a second client corresponding to one of the at least one target objects as the auxiliary verification client further includes:

[0015] Determine the reliability score for each of the second clients;

[0016] The auxiliary verification client is selected from the first preset number of second clients with the highest reliability score, wherein the reliability score is determined by the server based on the amount of data packets exchanged by the second client and the results of the legality verification of the requests issued by the second client.

[0017] Furthermore, the step of selecting an auxiliary verification client based on the first request includes:

[0018] If the first request has no target object, the auxiliary verification client is selected from the second preset number of third clients with the highest reliability score;

[0019] The third client is a client that can interact with the server and is not the target object of the first request.

[0020] Furthermore, when it is determined that auxiliary data needs to be loaded to verify the legitimacy of the first request, the auxiliary verification client is a client that has already loaded the auxiliary data.

[0021] Furthermore, determining the processing operation for the first request based on the legality verification result further includes:

[0022] If the legality verification result indicates that the first request is an illegal request, then the first request is rejected;

[0023] If the validity verification result indicates that the first request is a valid request, then the first request will be responded to.

[0024] Furthermore, after rejecting the first request, the method further includes:

[0025] The reliability score of the first client is deducted.

[0026] To solve the above-mentioned technical problems, another technical solution adopted in this application is: to provide a security protection method, the method comprising:

[0027] Receive a first request forwarded by the server from a first client, wherein the first request is a first type of request, the first type of request is a request that can obtain benefits and has the risk of tampering, and / or the first type of request is a request whose verification time is greater than a first threshold;

[0028] The first request is validated for legality.

[0029] Generate a validity verification result and send the validity verification result back to the server.

[0030] To solve the above-mentioned technical problems, another technical solution adopted in this application is: to provide an electronic device, the electronic device including a processor and a memory coupled to the processor; wherein,

[0031] The memory is used to store computer programs;

[0032] The processor is used to run the computer program to perform the method described in any of the above descriptions.

[0033] To solve the above-mentioned technical problems, another technical solution adopted in this application is to provide a computer-readable storage medium storing a computer program that can be executed by a processor, the computer program being used to implement the method described in any of the preceding claims.

[0034] The beneficial effects of this application are as follows: Unlike existing technologies, the technical solution provided in this application, after receiving a first request from a first client, determines whether the first request is a first-type request. If it is determined to be a first-type request, an auxiliary verification client is selected based on the first request. The first request is then forwarded to the auxiliary verification client for validation. The server also receives the validation result from the auxiliary verification client, determines the processing operation for the first request based on the validation result, and executes the processing operation, which includes responding to or rejecting the first request. In the technical solution provided in this application, by setting the server to select an auxiliary verification client to validate the first request when it determines that the received first request is a first-type request, the speed of client validation can be improved, and the operational pressure on the server for validation can be reduced, achieving a good technical effect. Attached Figure Description

[0035] Figure 1 This is a flowchart illustrating one embodiment of a security protection method according to this application;

[0036] Figure 2 This is a flowchart illustrating another embodiment of a security protection method according to this application;

[0037] Figure 3 This is a flowchart illustrating one embodiment of a security protection method according to this application;

[0038] Figure 4 This is an interactive schematic diagram of an embodiment of a security protection method according to this application;

[0039] Figure 5 This is a schematic diagram of the structure of an electronic device according to an embodiment of this application;

[0040] Figure 6 This is a schematic diagram of an embodiment of a computer-readable storage medium according to this application. Detailed Implementation

[0041] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0042] In the description of this application, "a plurality of" means at least two, such as two, three, etc., unless otherwise expressly and specifically defined. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the steps or units listed, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to such process, method, product, or apparatus.

[0043] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0044] Please see Figure 1 , Figure 1 This is a flowchart illustrating one embodiment of a security protection method according to this application. In this current embodiment, the execution entity of the method provided by this application is a server, and Figure 1 This application focuses on explaining the security protection method provided by the server side. Specifically, the method provided by this application includes steps S110 to S150.

[0045] S110: The server receives the first request sent by the first client.

[0046] S120: The server determines whether the first request is a type 1 request.

[0047] During the interaction between the server and the client, after the server receives the first request from the first client, it further determines whether the first request sent by the first client is a type of request. Here, the first client can be any client capable of interacting with the server. The first client includes mobile phones, computers, wearable devices, small server devices, or other electronic devices capable of interacting with the server; the type of the first client is not uniquely limited here.

[0048] Specifically, the first client is the client that sends the first request to the server, and the second client, as described below, is the client corresponding to the target object of the first request and capable of interacting with the server. The second client includes mobile phones, computers, wearable devices, small servers, or other electronic devices capable of interacting with the server, and the type of the second client is not uniquely limited here.

[0049] For example, in a sandbox game scenario, the game's backend server receives a first request from a client (corresponding to a player), and this first request is to request the server to obtain the location information of players within a preset distance range around the player. The client that sends the first request to the server is the first client, and the client corresponding to the players within the preset distance range around the player requested in the request is the second client.

[0050] The first type of request includes requests that offer potential benefits and carry a risk of tampering, and / or requests whose verification time exceeds a first threshold. The first threshold is a pre-set empirical value for verification time; specifically, it can be understood as a pre-set empirical value for the verification time required to select an auxiliary verification client to perform legitimacy verification.

[0051] In one embodiment, a first type of request can be pre-defined as a request that allows the first client to gain benefits based on this type of request, and which carries the risk of tampering. Specifically, a request that can gain benefits refers to a request that can bring benefits to the first client after the server responds to the first type of request; that is, the first type of request can also be understood as a request that allows the first client to gain a certain amount of benefits based on this request. The benefits can specifically include any one or more of digital tokens, gold coins, points, or currency. In other embodiments, the benefits may also include other forms, which are not listed here. A request with the risk of tampering is a request that is not authorized by the client according to the permission settings. In other embodiments, a request with the risk of tampering can also be understood as a request that is easily tampered with maliciously by the client.

[0052] In another embodiment, the first type of request can be pre-defined as requests whose verification time exceeds a first threshold. The first threshold can be set and adjusted according to actual needs, and is not limited here.

[0053] For example, in the sandbox game scenario described above, the game interface running on the server includes numerous 3D scenes, and these scenes have a large data volume. Displaying these scenes on the game interface requires significant server resources. When a first client sends a first request to the server to obtain the location information of other players, the server needs to verify whether the first client can see the location of the player it requested (the second client). If it can, the server will provide the first client with the location information of the other player it requested; if it cannot, the server will refuse to provide the first client with the location information of the other player it requested. However, since 3D scenes themselves involve a large amount of data, the server needs to consume significant resources to support their display during gameplay. Furthermore, due to the large amount of data, verifying the legitimacy of such first requests (in this embodiment, verifying the legitimacy of the first request means verifying whether the first client can see the location of the player it requested) requires processing and calculating a substantial amount of data. Under these circumstances, the server's execution of the legitimacy verification of the first client—that is, verifying whether the first client can see the location of the player (or other target object) it requested—requires even more resources and time. Therefore, requests whose verification time exceeds the first threshold at least include location requests within a game that involve 3D scenes.

[0054] In another embodiment, a first type of request can be pre-defined as a request that can yield benefits, carries a risk of tampering, and has a verification time exceeding a first threshold. The definitions of "gaining benefits," "carrying a risk of tampering," and "verification time exceeding the first threshold" can be found in the two embodiments described above and will not be repeated here.

[0055] S130: If so, then select an auxiliary verification client based on the first request.

[0056] If the server determines that the first request sent by the first client is a type 1 request, the server will select a secondary verification client based on the first request. The secondary verification client is another client used to assist the server in verifying the validity of the first request. Specifically, the secondary verification client can be selected from clients that can interact with the server.

[0057] Furthermore, in one embodiment, the server can select multiple auxiliary verification clients based on the first request, so as to utilize the multiple auxiliary verification clients to jointly assist in verifying the legitimacy of the first request. Continuing with the sandbox game example above, if a first client sends a first request to the server to request the location information of multiple other players, the server can select multiple auxiliary verification clients based on the first request, so as to utilize each auxiliary verification client to verify that the first client can see the location of at least one player it requested.

[0058] S140: Forward the first request to the auxiliary verification client so that the auxiliary verification client can verify the legitimacy of the first request.

[0059] After selecting a secondary verification client, the server further forwards the first request to the secondary verification client to verify its legitimacy. Specifically, the server forwards the first request to the secondary verification client based on the selected client's ID address.

[0060] Furthermore, if multiple auxiliary verification clients are selected in step S130, the first request will be forwarded to multiple auxiliary verification clients respectively, so as to use multiple auxiliary verification clients to verify the legitimacy of the first request.

[0061] Furthermore, taking the aforementioned sandbox game as an example, when a first client sends a first request to the server to request the location information of multiple other players, and the server selects multiple auxiliary verification clients based on the first request, the server will forward at least a portion of the first request to each auxiliary verification client so that each auxiliary verification client can verify whether at least a portion of the first request is valid. In the current embodiment, the auxiliary verification clients are used to verify whether the first client can see the location of at least one player it has requested.

[0062] After receiving the first request, the auxiliary verification client performs a validity verification on the first request, obtains the validity verification result, and sends the result back to the server. It should be noted that in the security protection method provided in this application, the auxiliary verification client's receipt of the first request and its validity verification are executed in the background of the client; that is, the user of the auxiliary verification client is unaware of the above process. For example, continuing with the sandbox game example, when an auxiliary verification client performs validity verification on the first request, the user corresponding to the auxiliary client (in the sandbox game scenario, the user corresponding to the auxiliary verification client can also be understood as the player corresponding to the auxiliary verification client) is unaware of the above process, or in other words, the user of the auxiliary client is not aware that the above steps are being executed.

[0063] S150: Receive the legality verification result from the auxiliary verification client, determine the processing operation for the first request based on the legality verification result, and execute the processing operation.

[0064] After receiving the validity verification result from the auxiliary verification client, the server further determines the processing operation for the first request based on the validity verification result. This processing operation includes responding to the first request or rejecting the first request. Specifically, if the validity verification result indicates that the first request is valid, the processing operation is to respond to the first request, meaning the server will send the requested information back to the first client; if the validity verification result indicates that the first request is invalid, the processing operation is to reject the first request, in which case the server will not send the requested information back to the first client.

[0065] Furthermore, if the legality verification result shows that the first request is illegal, the method provided in this application also includes: sending a prompt to the first client indicating that the first request is an illegal request, so as to inform the user of the first client and warn the first client not to send the illegal first request again.

[0066] Furthermore, to alert all clients and to provide data for selecting other auxiliary verification clients corresponding to the first request, if the legal verification result indicates that the first request is invalid, the method provided in this application, after determining and executing the processing operation for the first request based on the legality verification result (i.e., rejecting the first request), further includes: deducting a fourth preset number of reliability scores from the first clients. The reliability score is pre-set data used to evaluate the reliability of each client, specifically determined by the server based on the data packet exchange volume of each client and the legality verification result of the request issued by the second client. The data packet exchange volume of each client can be obtained by the server itself or reported by each client to the server based on set reporting rules.

[0067] Furthermore, in other embodiments, different fourth preset quantities can be set according to the illegal type of the first request, that is, different fourth preset quantities can be set in advance for different types of illegal requests to dynamically adjust the number of reliability scores deducted. Therefore, the above step of deducting the fourth preset quantity of the reliability score of the first client further includes: determining the illegal type of the first request; determining the fourth preset quantity corresponding to the illegal type of the first request, and deducting the reliability score of the first client accordingly.

[0068] This application Figure 1In the corresponding embodiments, after receiving a first request from a first client, the server determines whether the first request is a first type of request. If the first request is determined to be a first type of request, the server selects an auxiliary verification client based on the first request. The server then forwards the first request to the auxiliary verification client to perform legality verification. The server also receives the legality verification result from the auxiliary verification client, determines the processing operation for the first request based on the legality verification result, and executes the processing operation, which includes responding to or rejecting the first request. In the technical solution provided in this application, by setting the server to select an auxiliary verification client to perform legality verification when it determines that the received first request is a first type of request, the speed of client legality verification can be improved. Furthermore, the entire process of legality verification of the first request does not require excessive server resources, thereby reducing the server's operational pressure during legality verification.

[0069] Furthermore, in one embodiment, step S120, which selects an auxiliary verification client based on the first request, further includes: when the first request includes at least one target object, selecting a second client corresponding to one of the at least one target object as the auxiliary verification client. Here, the target object is the object for which information is requested in the first request, and the second client is the client corresponding to the target object that interacts with the server.

[0070] Furthermore, in another embodiment, when the first request has no target object, step S120 above, which selects an auxiliary verification client based on the first request, includes: when the first request has no target object, selecting an auxiliary verification client from a second preset number of third clients with the highest reliability scores. The third client is a client that can interact with the server and is not the target object of the first request.

[0071] Specifically, please see Figure 2 , Figure 2 This is a flowchart illustrating another embodiment of a security protection method according to this application. In the current embodiment, the specific process of selecting an auxiliary verification client based on the first request in step S120 includes the following steps S201 to S203.

[0072] S201: Determine whether the first request includes at least one target object.

[0073] When the server determines that the first request is a first type of request, the server first determines whether the first request includes at least one target object. If it is determined that the first request includes at least one target object, the server will execute step S202 below; otherwise, if it is determined that the target object corresponding to the first request does not include any target object, the server will execute step S203 below.

[0074] In this context, the target object is the object for which the first request requests information. In this embodiment, the client corresponding to the target object included in the first request and interacting with the server is defined as the second client. In other words, the second client is one of the clients included in the target object of the first request that can interact with the current server. Furthermore, the second client can also be understood as a client that can quickly verify the legitimacy of the first request. For example, when a first client requests the server to obtain the location information of another client, the requested client can determine, through simple calculation, whether its own location is visible from the perspective of the first client, thereby quickly determining whether the first request sent by the first client is an illegal request.

[0075] The target object corresponding to the first request can include various types of clients, such as other clients and servers, which can be selected by the user of the first client according to actual needs, and will not be listed here. Similarly, the first request issued by the first client may or may not include any target object.

[0076] S202: Select a second client corresponding to one of the target objects as an auxiliary verification client from at least one target object.

[0077] If it is determined that the first request includes at least one target object, then a second client corresponding to one of the at least one target object will be selected as an auxiliary verification client.

[0078] Furthermore, in another embodiment, multiple auxiliary verification clients can be selected to verify the legitimacy of the first request. Correspondingly, when the first request includes multiple target objects, multiple auxiliary verification clients can be selected from the second clients corresponding to the multiple target objects according to a pre-set configuration.

[0079] Furthermore, the auxiliary verification client can be selected from at least one second client based on a reliability score. Even further, in another embodiment, the auxiliary verification client can be selected by simultaneously combining the specific content of the first request and the reliability scores of each second client. For example, when the specific content of the first request is to request the location information of a client A from the server, and the reliability score of client A is greater than a selection threshold, then client A can be preferentially selected as the auxiliary verification client. Here, the selection threshold is a pre-set empirical value for the reliability score used to select the auxiliary verification client.

[0080] In another embodiment, when the specific content of the first request is to request the location information of a certain client A from the server, and the reliability score of client A is less than a preset selection threshold, then clients that are around client A and whose reliability score is greater than or equal to the selection threshold can be selected as auxiliary verification clients.

[0081] Specifically, step S202 selects a second client corresponding to one of the target objects as an auxiliary verification client from at least one target object, further including: determining the reliability score of each second client; selecting an auxiliary verification client from a first preset number of second clients with the highest reliability score. Specifically, this could be selecting one auxiliary verification client from the first preset number of second clients with the highest reliability score (or, as understood, selecting one auxiliary verification client from the first preset number of second clients ranked by reliability score); for example, selecting the client with the highest reliability score as the auxiliary verification client, or selecting the client with the highest reliability score and the most loaded auxiliary resources as the auxiliary verification client. The auxiliary resources are other scene data required to verify the first request. When obtaining information about the location of other players or targets in a game scene, the auxiliary resources are map resources near the locations of other players or targets.

[0082] The first preset quantity is a fixed value set in advance, which can be set according to actual needs and is not limited here. In another embodiment, the first preset quantity can also be a value dynamically determined based on the total number of second clients. By setting the first preset quantity to be dynamically adjusted according to the total number of second clients, the selected auxiliary verification clients can be made more accurate. The reliability score is determined by the server based on the amount of data packets exchanged by the second clients and the results of the legality verification of the requests issued by the second clients.

[0083] Please continue reading Figure 2 If step S201 determines that the first request does not include the target object, then step S120 above further includes step S203.

[0084] S203: Select an auxiliary verification client from the second preset number of third clients with the highest reliability score.

[0085] If the server determines that the target object is not included in the first request, it will then directly select an auxiliary verification client from the second preset number of third clients with the highest reliability score.

[0086] In this embodiment, the third client refers to any client that can currently interact with the server but is not the target object of the first request. The second preset number is a pre-set value that can be set according to actual needs. In another embodiment, the second preset number can also be a value dynamically determined based on the total number of third clients. By dynamically adjusting the second preset number according to the total number of third clients, the selected auxiliary verification clients can be made more accurate. Similarly, in this embodiment, other selection conditions can also be set to select auxiliary verification clients from the third clients.

[0087] Furthermore, in another embodiment, when it is determined that auxiliary data needs to be loaded to verify the legitimacy of the first request, a client that has already loaded the auxiliary data will be preferentially selected. Specifically, in the current embodiment, the step of selecting an auxiliary verification client based on the first request further includes: selecting the client with the highest reliability score from the clients that have already loaded the auxiliary data as the auxiliary verification client. In one embodiment, the client that has loaded the auxiliary data may be selected from a second client or a third client.

[0088] Please see Figure 3 , Figure 3 This is a flowchart illustrating one embodiment of a security protection method according to this application. In this current embodiment, the security protection method provided by this application is described from the perspective of an auxiliary verification client. Specifically, in this current embodiment, the method provided by this application includes steps S310 to S330.

[0089] S310: Receive the first request from the first client forwarded by the server.

[0090] The auxiliary verification client receives the first request forwarded by the server from the first client, and further parses the first request to obtain the content that needs to be verified for legitimacy.

[0091] In this context, the first request refers to a first-type request, which is one that can generate revenue and carries the risk of tampering, and / or a first-type request whose verification time exceeds a first threshold. As mentioned above, a request that can generate revenue refers to a request that can bring revenue to the first client after the server responds to the first-type request; that is, the first-type request can also be understood as a request that allows the first client to obtain a certain amount of revenue based on the request. In the technical solution provided in this application, the first threshold can be set and adjusted according to actual needs.

[0092] S320: Verify the legitimacy of the first request.

[0093] After receiving the first request forwarded by the server from the first client, the auxiliary verification client further verifies the legitimacy of the first request. Specifically, based on the parsed content to be verified and the information of the first client, it further verifies the legitimacy of the request.

[0094] For example, if the first request is sent by the first client B, requesting to obtain the location information of client A, then the auxiliary verification client further determines, based on the location information of the first client and the location information of client A, whether client B can see the location information of client A. If it can, then the first request is determined to be a legitimate request; otherwise, if it is determined that client B cannot see the location of client A, then the first request is determined to be an illegitimate request.

[0095] S330: Generate the validity verification result and send the validity verification result back to the server.

[0096] After completing the legality verification of the first request, the auxiliary verification client further generates a legality verification result based on the verification and sends the legality verification result back to the server.

[0097] Furthermore, when the first request is for location information, and the auxiliary verification client verifies that the first request is a legitimate request, the auxiliary verification client will also package the location information of the target object of the first client and the legitimate verification result together and send them back to the server, so that the server can quickly send back the location information requested by the first client and achieve a fast response to the first client.

[0098] Please see Figure 4 , Figure 4 This is an interactive schematic diagram of an embodiment of a security protection method according to this application. In the current embodiment, the method provided by this application includes steps S1 to S8. Specifically, as follows:

[0099] S1: The first client sends the first request to the server.

[0100] S2: The server determines whether the first request sent by the first client is a type 1 request.

[0101] S3: If so, then select an auxiliary verification client based on the first request.

[0102] S4: Forward the first request to the auxiliary verification client so that the auxiliary verification client can verify the legitimacy of the first request.

[0103] S5: Receive the first request from the first client forwarded by the server.

[0104] S6: Perform a validity verification on the first request and generate a validity verification result.

[0105] S7: Send the validity verification result back to the server.

[0106] S8: Receive the legality verification result from the auxiliary verification client, determine the processing operation for the first request based on the legality verification result, and execute the processing operation.

[0107] Furthermore, it should be noted that in the technical solution provided in this application, during the server's operation, a dynamic comprehensive score is performed on each online client based on the amount of data packets exchanged between clients and the validity verification results of the requests issued by each client, thereby obtaining a reliability score for each client. The higher the client's performance and the lower its data packet exchange volume, the higher its reliability score is considered. When a client goes offline, the server saves the offline client's previous score, and the offline client does not participate in the scoring process.

[0108] For example, in one embodiment, requests that may have the risk of tampering and can generate benefits, and / or special protection requests that take longer to verify than a first threshold, can be defined as the first type of request, based on the business type.

[0109] In one embodiment, when the server receives a request that offers no benefit and poses no risk of tampering, the server can directly execute a response to that request.

[0110] In another embodiment, when the server receives a first request that poses a risk of tampering but offers potential benefits, and which the server can quickly verify, the request is executed if verification passes; otherwise, the reliability score of the client corresponding to the first request is deducted. In other embodiments, if verification fails, the reliability score of the client corresponding to the first request can be lowered to the minimum.

[0111] When the first request received by the server is a first-class request (special protection request): if it is determined that the request includes at least one target object, then the server selects an auxiliary verification client from the first preset number of second clients with the highest self-scoring, and then forwards the first request to the auxiliary verification client. The auxiliary verification client verifies the legality of the first request, obtains the legality verification result, and feeds it back to the server.

[0112] If it is determined that the request does not include any target object, it can also be understood that the first request is unrelated to other clients. In this case, the server will randomly select a third client from the second preset number of clients with the highest reliability score to assist in the verification of the client, and forward the first request to the assisting verification client. The assisting verification client will then verify the legality of the request and provide feedback to the server.

[0113] Specifically, if validating the first request requires dynamically loaded auxiliary data, the client with the highest score from the second or third client that has already loaded this auxiliary data will be selected as the auxiliary verification client. Similarly, if the first request is found to be invalid, the reliability score of the first client will be lowered.

[0114] Please see Figure 5 , Figure 5 This is a schematic diagram illustrating the structure of an electronic device according to an embodiment of this application. In the current embodiment, the electronic device 500 provided by this application includes a processor 501 and a memory 502 coupled to the processor 501. The electronic device 500 can perform... Figures 1 to 4 The method in any of the corresponding embodiments, i.e., the electronic device 500, can be a server or a client.

[0115] The memory 502 includes local storage (not shown) and is used to store computer programs, which, when executed, can achieve... Figures 1 to 4 And the method in any of the corresponding embodiments.

[0116] Processor 501 is coupled to memory 502. Processor 501 is used to run computer programs to perform the above-mentioned tasks. Figures 1 to 4 And the method in any of the corresponding embodiments.

[0117] Furthermore, in some embodiments, the electronic device 500 may include any one of a mobile terminal, a handheld terminal, a wearable device, an in-vehicle terminal, a computer terminal, a server, and other types of electronic devices with computing and storage capabilities.

[0118] See Figure 6 , Figure 6This is a schematic diagram illustrating an embodiment of a computer-readable storage medium according to this application. The computer-readable storage medium 600 stores a computer program 601 executable by a processor, which is used to implement the above-described... Figures 1 to 4 The methods described in any of the corresponding embodiments. Specifically, the computer-readable storage medium 600 described above may be one of the following: a memory, a personal computer, a server, a network device, or a USB flash drive, etc., without any specific limitation herein.

[0119] The above description is merely an embodiment of this application and does not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A security method, characterized by, The method includes: The server receives a first request sent by a first client, wherein the first client is any client that can interact with the server; Determine whether the first request is a first type of request, wherein the first type of request is a request that can obtain benefits and has the risk of tampering, and / or the first type of request is a request whose verification time is greater than a preset first threshold; If so, an auxiliary verification client is selected based on the first request. The auxiliary verification client is selected from the clients that interact with the server. Selecting an auxiliary verification client based on the first request includes: determining whether the first request includes at least one target object. If the first request includes the at least one target object, a second client corresponding to one of the at least one target object is selected as the auxiliary verification client. The target object is the object for which the first request requests information, and the second client is the client corresponding to the target object that can interact with the server. The first request is forwarded to the auxiliary verification client so that the auxiliary verification client can perform legality verification on the first request in the background. The system receives the legitimacy verification result from the auxiliary verification client, determines the processing operation for the first request based on the legitimacy verification result, and executes the processing operation, wherein the processing operation includes responding to the first request or rejecting the first request.

2. The method of claim 1, wherein, The step of selecting a second client corresponding to one of the at least one target objects as the auxiliary verification client further includes: Determine the reliability score for each of the second clients; The auxiliary verification client is selected from the first preset number of second clients with the highest reliability score, wherein the reliability score is determined by the server based on the amount of data packets exchanged by the second client and the results of the legality verification of the requests issued by the second client.

3. The method of claim 1, wherein, The step of selecting an auxiliary verification client based on the first request further includes: If the first request has no target object, the auxiliary verification client is selected from the second preset number of third clients with the highest reliability score; The third client is a client that can interact with the server and is not the target object of the first request.

4. The method according to any one of claims 1 to 3, characterized in that, When it is determined that auxiliary data needs to be loaded to verify the validity of the first request, the auxiliary verification client is a client that has already loaded the auxiliary data.

5. The method according to claim 1, characterized in that, The step of determining the processing operation for the first request based on the legality verification result further includes: If the legality verification result indicates that the first request is an illegal request, then the first request is rejected; If the validity verification result indicates that the first request is a valid request, then the first request will be responded to.

6. The method according to claim 5, characterized in that, After rejecting the first request, the method further includes: The reliability score of the first client is deducted.

7. A safety protection method, characterized in that, The method, applied to an auxiliary verification client selected from clients interacting with the server, includes: The server receives a first request forwarded from a first client, wherein the first request is a first type of request, which is a request that can generate benefits and has the risk of tampering, and / or the first type of request is a request whose verification time is greater than a first threshold; the auxiliary verification client is selected by the server based on the first request after receiving the first request sent by the first client; the server is used to determine whether the first request includes at least one target object, and when the first request includes the at least one target object, selects a second client corresponding to the target object as the auxiliary verification client, wherein the target object is the object for which the first request requests to obtain information, and the second client is a client corresponding to the target object that can interact with the server; The first request is validated in the background. Generate a validity verification result and send the validity verification result back to the server.

8. An electronic device, characterized in that, The electronic device includes a processor and a memory coupled to the processor; wherein, The memory is used to store computer programs; The processor is used to run the computer program to perform the method according to any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that can be executed by a processor, the computer program being used to implement the method according to any one of claims 1 to 7.

Images