Account security detection method and system and computer storage medium

Abstract

The invention discloses an account security detection method and system and a computer storage medium. The method comprises the following steps: acquiring a login user account and equipment information of corresponding login equipment; whether the equipment information is consistent with preset information is judged, and the preset information is used for determining equipment information corresponding to entity equipment; and if not, judging that the login user account is unsafe, and refusing the login of the user account. According to the method, the security of the login user account is determined according to whether the equipment information is matched with the preset information of the entity equipment, account reselling and fraud behaviors under disguise means such as virtual equipment and the like can be effectively revealed, so that the accuracy and defense capability of account security detection are improved, and the user experience is improved. And the user rights and interests and the security and stability of the network environment are ensured.

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to an account security detection method, system and computer storage medium. Background Art

[0002] With the rapid development of Internet technology, online accounts have become an indispensable part of people's daily life and work. They carry important resources such as users' personal information, property information, and social relationships. However, this also makes online accounts a target for attacks and resale by black and gray industries.

[0003] Currently, in order to combat the black and gray industries of reselling accounts, the mainstream method is to identify reselling accounts by detecting the account's login city and login device. Specifically, the system will record the account's login history, including the city and device information used for each login. If the system detects that the login city and login device of an account change frequently over a period of time, it will determine that the account has a reselling risk.

[0004] However, this mainstream detection method has obvious limitations and is easily detected and bypassed by the black and gray industries. Black and gray industry personnel use technical means, such as virtual devices, to resell accounts without changing the login location and login device. They create a virtual device environment, simulate the login behavior of a real device, and share the virtual device with buyers, thereby avoiding triggering the existing detection mechanism during the resale process.

[0005] This method not only renders the existing account security detection system ineffective, but also exacerbates the severity of the account reselling problem. Black and gray industry personnel resell accounts through virtual devices, which is not only difficult to detect and track, but also makes the flow of accounts more covert and faster. This not only poses a great threat to the user's account security, but also poses a serious challenge to the security and stability of the entire network environment. Summary of the invention

[0006] One of the purposes of the present invention is to provide an account security detection method to solve the technical problem in the prior art that it is difficult to effectively identify accounts that are resold or defrauded through the device information of the login device, resulting in the failure of account security detection and further threatening the rights and interests of users.

[0007] One of the purposes of the present invention is to provide an account security detection system.

[0008] One of the objects of the present invention is to provide a computer storage medium.

[0009] In order to achieve one of the above-mentioned purposes of the invention, the present invention provides an account security detection method, including: obtaining a login user account and device information of a corresponding login device; determining whether the device information is consistent with preset information, wherein the preset information is used to determine the device information corresponding to the physical device; if not, determining that the login user account is not secure, and refusing login to the user account.

[0010] As a further improvement of an embodiment of the present invention, the preset information includes at least one of preset battery configuration information, preset communication configuration information and preset application list information.

[0011] As a further improvement of an embodiment of the present invention, the preset information includes preset battery configuration information; the judgment of whether the device information is consistent with the preset information includes: based on the change in the battery power of the login device per unit time, judging whether the device information is consistent with the preset battery configuration information.

[0012] As a further improvement of an embodiment of the present invention, the method of judging whether the device information is consistent with the preset battery configuration information based on the change in the battery power of the login device within a unit time includes: obtaining and judging whether the current battery power is not equal to the preset battery power threshold based on the current battery power of the login device.

[0013] As a further improvement of an embodiment of the present invention, the determination of whether the device information is consistent with the preset battery configuration information based on the change in the battery power of the login device within a unit time includes: obtaining a first battery power at at least the first moment and a second battery power at at least the second moment within a unit time; and determining whether the difference between the first battery power and the second battery power falls within a preset battery power range.

[0014] As a further improvement of an embodiment of the present invention, the preset information includes preset communication configuration information, and the judgment of whether the device information is consistent with the preset information includes: based on a first application interface provided by the login device for accessing its actual communication configuration information, determining a first call result after calling the first application interface, wherein the actual communication configuration information includes a user identification card, and the user identification card is used to store user contract information to achieve identity authentication; judging whether the first call result is consistent with the preset communication configuration information.

[0015] As a further improvement of an embodiment of the present invention, the preset information includes preset application list information, and the judgment of whether the device information is consistent with the preset information includes: based on a second application interface provided by the login device for accessing its actual application list, determining a second calling result after calling the second application interface; and judging whether the device information is consistent with the preset application list information based on the second calling result.

[0016] As a further improvement of an embodiment of the present invention, judging whether the device information is consistent with the preset application list information based on the second call result includes: judging whether the second call result falls within the range of the preset application list information, and / or judging whether the amount of data in the second call result is less than or equal to a preset quantity threshold.

[0017] As a further improvement of an embodiment of the present invention, the denial of login of the user account includes: when it is determined that the actual application list information and the preset application list information of the login device are not completely consistent, determining the denial stage of the login permission of the user account based on the actual battery configuration information and the actual communication configuration information in the device information.

[0018] As a further improvement of an embodiment of the present invention, the denial stage of the user account login permission is determined based on the actual battery configuration information and the actual communication configuration information in the device information, including: judging whether the number of lists that are consistent with the actual application list information and the preset application list information is less than a preset number threshold; if so, kicking out the current user account and denying login at the first moment after the user successfully logs in.

[0019] As a further improvement of an embodiment of the present invention, it is determined whether the number of lists that are consistent with the preset application list information is less than or equal to a preset number threshold; if so, it is determined whether the actual communication configuration information is consistent with the preset communication configuration information, and whether the actual battery configuration information is consistent with the preset battery configuration information; if not, the user account is directly rejected when logging in; if so, it is kicked out and the login is rejected at the first moment after the current user account successfully logs in.

[0020] To achieve one of the above-mentioned purposes of the invention, the present invention also provides an account security detection system, characterized in that the detection system includes: a client, used to receive the user's login information, determine a login request based on the login information and send the login request to the server, the login information includes a user account, and the login request includes a login device for logging in to the user account; a server, used to obtain device information of the login user account and the corresponding login device; used to determine whether the device information is consistent with preset information, wherein the preset information is used to determine the device information corresponding to the physical device; and used to deny login to the user account when it is determined that the login user account is not safe.

[0021] In order to achieve one of the above-mentioned purposes of the invention, the present invention also provides a computer storage medium, which stores a computer program, and when the computer program is run, the device where the computer storage medium is located causes the steps of the above-mentioned account security detection method to be executed.

[0022] Compared with the prior art, the embodiments of the present invention have at least one of the following beneficial effects:

[0023] The present invention adopts an account security detection method, which obtains the device information of the login user account and the corresponding login device, and determines the security of the login user account according to whether the device information matches the preset information of the physical device. The preset information can reflect the key indicators of the authenticity of the physical device. Although the virtual device can simulate the basic login behavior of the user, it is difficult to make the details of the device information completely consistent with the real physical device. Therefore, matching the two can effectively expose the account reselling and fraud under the disguise of virtual devices, thereby improving the accuracy and defense capability of account security detection, and ensuring the security and stability of user rights and interests and the network environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 It is a structural diagram of an account security detection system in one embodiment of the present invention.

[0025] FIG. 2( a ) is a schematic diagram showing the principle of an account security detection system in one embodiment of the present invention.

[0026] FIG. 2( b ) is a schematic diagram of communication between a client and a server in an embodiment of the present invention.

[0027] Figure 3 It is a schematic diagram of the steps of an account security detection method in one embodiment of the present invention.

[0028] Figure 4 It is a schematic diagram of detailed steps of step S2' in one embodiment of the present invention.

[0029] Figure 5It is a schematic diagram of detailed steps of step S2 in one embodiment of the present invention.

[0030] Figure 6 It is a schematic diagram of detailed steps of step S2 in another embodiment of the present invention.

[0031] FIG. 7( a ) is a schematic diagram of detailed steps of step S3 ″ in one embodiment of the present invention.

[0032] FIG. 7( b ) is a schematic diagram of detailed steps of step S3″ in another embodiment of the present invention. DETAILED DESCRIPTION

[0033] The present invention will be described in detail below in conjunction with the specific embodiments shown in the accompanying drawings. However, these embodiments do not limit the present invention, and any structural, methodological, or functional changes made by a person skilled in the art based on these embodiments are all within the scope of protection of the present invention.

[0034] It should be noted that the term "comprising" or any other variation thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In addition, the terms "first", "second", etc. are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0035] like Figure 1 As shown, an embodiment of the present invention provides an account security detection system 100.

[0036] In one embodiment, the account security detection system 100 can determine whether a user login request is a normal request, and / or whether the device used to log in to the user account is a physical device, and / or whether the logged in user account is a secure account based on an account security detection method, thereby simplifying the detection operation and improving the security of account login.

[0037] In a specific embodiment, the account security detection method can be implemented by referring to any technical solution provided below.

[0038] The account security detection system 100 includes a client 11. The client 11 is used to receive user instructions, display system messages, and implement preliminary account security detection.

[0039] Specifically, the client 11 corresponds to the server 12 described below, and is a program or software that provides services or functions for users. The client 11 includes but is not limited to PCs, mobile devices (such as smart phones and tablets), and may also refer to applications running on these devices, such as Web clients, applets or plug-ins, desktop applications, mobile applications, etc., which are not specifically limited in the present invention.

[0040] In a specific embodiment, the client 11 is used to receive the user's login information, determine a login request according to the login information and send the login request to the server.

[0041] In a specific embodiment, the login information includes a logged-in user account, and the login request includes a login device for logging into the user account.

[0042] In a specific embodiment, the login device includes a virtual device or a physical device.

[0043] The physical devices refer to devices that have a physical form and can be touched. These devices are composed of hardware, including physical components such as circuit boards, processors, memory, sensors, etc., such as mobile phones, telephones, computers, iPads, etc.

[0044] The virtual device refers to a device that does not exist in the real world. It is implemented through software simulation. The virtual device has no specific physical form, but it can provide the same or more powerful functions as the physical device, such as a cloud phone.

[0045] The account security detection system 100 includes a server 12. The server 12 is used to receive a user request sent by the user 11, process the user request and respond to the user request.

[0046] Specifically, the server 12 corresponds to the client 11 described above, and is a computer system in the network that can provide certain services to other machines. The server 12 includes a Web server, a database server, a file server, an application server, etc., and the present invention does not make specific restrictions on this.

[0047] In a specific embodiment, the server 12 is used to obtain the login user account and the device information of the corresponding login device.

[0048] In a specific embodiment, the server 12 is used to determine whether the device information is consistent with preset information, wherein the preset information is used to determine the device information corresponding to the physical device.

[0049] In a specific embodiment, the server 12 is used to deny login to the user account when determining that the login user account is not safe.

[0050] In a specific embodiment, the server 12 is used to allow the user account to log in when it is determined that the login user account is safe.

[0051] The device information refers to the detailed data and attributes corresponding to the login device (physical device or virtual device), including but not limited to its model, manufacturer, serial number, hardware configuration, software version, network configuration, location information and operating status, etc. The device information helps users or systems identify, route, configure or maintain the device to ensure the correct operation and safety of the device.

[0052] As shown in Figure 2(a) and Figure 2(b), for example, the client 11 sends a user request to the server 12, and the user request includes but is not limited to a login account, operation records and login device information; the server 12 responds to the user request sent by the client 11, and parses the user request to determine the corresponding user account information and the device information of the corresponding login device; the user account information and the device information are stored in a database (such as a mySql database).

[0053] The risk control module in the server 12 extracts the user account information and the corresponding device information from the database in sequence, and determines whether the device information is consistent with the preset information; if not, it determines that the logged-in user account is unsafe, and marks it, generates corresponding label information (such as security labels, low-risk labels, high-risk labels, etc.) and stores it in the memory database Redis; the gateway component reads these label information from the database Redis regularly or in real time, and performs corresponding operations according to the label information. For example, if the user account is marked with a security label, the user account is allowed to log in; if the user account is marked with a low-risk label, the gateway will perform a slow response process on it, that is, delay the response time of its request to reduce its operating efficiency; if the user account is marked with a high-risk label, the gateway will refuse to log in or kick it out of the login state at a specified time point, thereby interfering with its use.

[0054] like Figure 3 As shown, an embodiment of the present invention provides an account security detection method.

[0055] The account security detection method is applied to an account security detection system.

[0056] In one embodiment, the account security detection system can be as follows: Figure 1 The configuration is carried out as described in Figure 2 and above, and the corresponding technical solution is set and referenced in the life method provided by the present invention. Of course, the account security detection system applied by the account security detection method provided by the present invention is not limited to this configuration structure.

[0057] like Figure 3 As shown, an embodiment of the present invention provides an account security detection method, including but not limited to the following steps.

[0058] Step S1, obtaining the login user account and the device information of the corresponding login device;

[0059] Step S2, determining whether the device information is consistent with preset information, wherein the preset information is used to determine the device information corresponding to the physical device;

[0060] If not, jump to step S3, determine that the logged-in user account is not safe, and deny login to the user account.

[0061] In this way, the security of the logged-in user account is determined by obtaining the device information of the logged-in user account and the corresponding login device, and based on whether the device information matches the preset information of the physical device. The preset information can reflect the key indicators of the authenticity of the physical device. Although virtual devices can simulate the basic login behavior of users, it is difficult to make the details of the device information completely consistent with the real physical device. Therefore, matching the two can effectively expose account reselling and fraud under disguise such as virtual devices, thereby improving the accuracy and defense capabilities of account security detection, and ensuring the security and stability of user rights and interests and the network environment.

[0062] In one embodiment, the preset information may include at least one of preset battery configuration information, preset communication configuration information and preset application list information.

[0063] The preset battery configuration information refers to parameter and status information related to the device battery, and the preset battery configuration information includes but is not limited to the current remaining power, battery type and charging status (such as charging progress and speed).

[0064] The preset communication configuration information refers to the parameters and status information related to the device and network communication, including but not limited to SIM card (Subscriber Identity Module) information, network type, network status, etc. The SIM card information specifically includes at least one of the SIM card number, the operator to which it belongs, and the package type.

[0065] The preset application list information refers to a list of application programs installed and running on the device and related information thereof, including but not limited to at least one of application name, application version, application status and application permissions.

[0066] It can be seen that the preset application list information is the configuration information of the digital level (software level) of the login device, while the preset battery configuration information and the preset communication configuration information are the configuration information of the physical level (hardware level). The present invention can make full use of the information complementarity at the software and hardware levels to improve the detection accuracy of account security.

[0067] Understandably, real physical devices will have natural consumption and fluctuations in battery usage, and virtual devices may not be able to fully simulate this dynamic change in battery power, thus forming differences with physical devices.

[0068] In an embodiment, if the preset information includes preset battery configuration information, step S2 may specifically include the following steps.

[0069] Step S2', based on the change in the battery power of the login device within a unit time, determine whether the device information is consistent with the preset battery configuration information.

[0070] In this way, the change in the battery power of the login device per unit time can truly reflect the working status of the physical device and the virtual device, and effectively identify potential virtual devices or simulated login behaviors, which is simple and easy.

[0071] In a specific embodiment, the current battery power of the login device is obtained and determined based on whether the current battery power is not equal to a preset battery power threshold; if not, the login device is determined to be a virtual device, and the user account that logs into the virtual device is determined to be unsafe.

[0072] In this way, by checking the current battery power, it is possible to quickly and preliminarily verify whether the device information conforms to the normal battery configuration, which is suitable for fast response occasions.

[0073] For example, when a user tries to use a virtual device to make a payment, the virtual device may report an abnormal value (such as 0%) that does not conform to the battery power pattern of a real device. In this case, the login device is suspected to be a virtual device and the payment request is rejected.

[0074] In addition, the battery configuration information of the physical device is pre-stored as preset battery configuration information, including the expected range of battery power under specific conditions (such as standby, medium use); when the user account logs in using the login device, the battery power value of the current login device is obtained, and it is compared with the preset normal preset battery configuration information; if the current battery power value falls within the expected range, it is determined that the device information of the login device is consistent with the pre-stored preset battery configuration information; if the current battery power value does not fall within the expected range, it is determined that the device information of the login device is inconsistent with the pre-stored preset battery configuration information.

[0075] Based on this, Figure 4 As shown, in another specific embodiment, step S2' may include the following steps.

[0076] Step S211, obtaining a first battery level at least at a first moment and a second battery level at a second moment within a unit time;

[0077] Step S212, determining whether the difference between the first battery level and the second battery level falls within a preset battery power range;

[0078] Based on this, if not, jump to step S3', then determine that the login device is a virtual device, and determine that the user account that logs in to the virtual device is not safe, and deny the user account to log in.

[0079] In this way, by monitoring the change in battery power at at least two time points, the change trend of the battery power can be determined, and whether the device is authentic can be judged more accurately.

[0080] For example, the preset battery configuration information is that the battery capacity at two adjacent moments has changed; assuming that the first battery capacity at the first moment is M1 and the second battery capacity at the second moment is M2, determine whether M1 is greater than or less than M2; if so, determine that the battery capacity of the device has changed; if not, determine that the battery capacity of the device has not changed.

[0081] In a specific embodiment, a first battery level at a first moment, a second battery level at a second moment, and a third battery level at a third moment within a unit time are obtained; it is determined whether at least two of the first battery level, the second battery level, and the third battery level are equal; if so, it is determined that the user account is not safe. In this way, misjudgment caused by insufficient time interval between two detections can be avoided.

[0082] In a specific embodiment, the above two embodiments can be used in combination, that is, combining the battery level determination at a single time point with the battery level difference determination at at least two time points, to form a more comprehensive and accurate verification system, which not only ensures the timeliness of the verification, but also enhances the accuracy and reliability of the verification, providing double protection for the security of user accounts and login devices.

[0083] Understandably, physical devices mainly rely on user identification cards (or SIM cards) for communication services, such as phone calls, text messages, and mobile data, and SIM cards are physically present, which directly embed the user's communication information into the card itself. Users can directly use communication services without relying on the network by inserting the physical SIM card into the device. This method of information storage is relatively stable. A virtual device is a device instance created based on software simulation or cloud computing technology without a physical form, because it does not require only real communication services and does not install a SIM card.

[0084] Based on this, Figure 5 As shown, in one embodiment, the preset information includes preset communication configuration information, and step S2 of the present invention may specifically include the following steps.

[0085] Step S221, based on a first application interface provided by the login device for accessing its actual communication configuration information, determining a first calling result after calling the first application interface;

[0086] Step S222, determining whether the first call result is consistent with the preset communication configuration information;

[0087] Based on this, if not, jump to step S3', then determine that the login device is a virtual device, and determine that the user account that logs in to the virtual device is not safe, and deny the user account to log in.

[0088] In this way, by checking the status of the user identification card, a quick judgment can be made. The technical implementation is relatively simple, the judgment criteria are clear, and the physical and network connection characteristics of the login device can be intuitively identified.

[0089] The actual communication configuration information includes a user identification card, which is used to store user contract information to achieve identity authentication. As a key component in the mobile communication network, the user identification card not only stores the user's identity information and network authentication data, but also undertakes the physical connection and identity authentication tasks between the device and the network. Therefore, by checking whether the login device supports the installation and use of SIM cards, the physical and network connection characteristics of the login device can be preliminarily determined, thereby being able to distinguish between physical devices and virtual devices to a certain extent.

[0090] The first application interface refers to the application programming interface (API) provided by the operating system (such as Android system, IOS system) installed on the login device. Through this interface, the application can read whether there is a SIM card in the login device and the corresponding related information.

[0091] For example, taking the case where the login device is an Android operating system, the getSimState() method of the TelephonyManager class (ie, the first application interface) in the Android system is called to read whether there is a user identification card in the login device.

[0092] Specifically, as shown below, the getSimState() method returns an integer indicating the state of the SIM card (corresponding to the first result). Among them, TelephonyManager.SIM_STATE_ABSENT (corresponding to the communication configuration information) is a constant indicating that the SIM card does not exist or cannot be accessed. If the value returned by getSimState() is equal to TelephonyManager.SIM_STATE_ABSENT, it indicates that there is no SIM card in the logged-in device or the SIM card cannot be read; otherwise, it indicates that there is a SIM card in the logged-in device.

[0093]

[0094] Understandably, on the one hand, virtual devices, especially cloud phones, are virtual devices based on cloud computing technology, and their memory space is often subject to strict restrictions. Since virtual devices run on cloud servers, their storage resources need to be shared with other virtual devices, and the cost of expanding memory space is relatively high. Therefore, the number of applications (or application lists) that can be installed on virtual devices is limited, making virtual devices significantly different from physical devices in terms of memory space and application installation capabilities.

[0095] Based on the above analysis, application installation capability can be used as an important basis for distinguishing physical devices from virtual devices. By checking the storage status of the login device, the number and type of installed applications, and other information, the type of the login device can be determined.

[0096] Based on this, Figure 6 As shown, in one embodiment, the preset information includes preset application list information, and step S2 of the present invention may specifically include the following steps.

[0097] Step S231, based on the second application interface for accessing the actual application list provided by the login device, determining a second calling result after calling the second application interface;

[0098] Step S232, determining whether the device information is consistent with the preset application list information;

[0099] Based on this, if not, jump to step S3', then determine that the login device is a virtual device, and determine that the user account that logs in to the virtual device is not safe, and deny the user account to log in.

[0100] In this way, by analyzing the application list of the logged-in device, we can conduct in-depth analysis based on user behavior habits, and have a high coverage rate for physical devices, because users will always install personalized application software.

[0101] The second application interface refers to the application programming interface API provided by the operating system (such as Android system, IOS system) installed on the login device. Through this interface, the application can read the actual application list information currently installed on the login device.

[0102] For example, as shown below, taking the Android operating system as an example, the PackageManager object of the current application is obtained by calling the getPackageManager() method in the Android system to obtain the list of installed applications. PackageManager.GET_META_DATA is a flag that indicates that the method returns a list of ApplicationInfo objects containing information about all installed applications.

[0103]

[0104] On the other hand, virtual devices are created for a specific purpose (such as cloud phones, emulators, etc.), and their installed application list is limited and tends to be tools or services directly related to that purpose.

[0105] Physical devices are devices that users use daily, and they will be installed with a variety of applications, covering social entertainment, work, and other aspects. Therefore, the application list on physical devices is richer and more diverse. In addition, the applications installed on physical devices can reflect the user's personal usage habits and preferences, and will continue to change with the user's use; while the application list of virtual devices is relatively fixed, and applications will only be added or removed when there is a specific need. Therefore, it can be distinguished by comparing the number and types of application lists.

[0106] Based on this, in a specific embodiment, it is determined whether the second call result falls within the range of the preset application list information; if not, the login device is determined to be a virtual device, and the user account that logs in to the virtual device is determined to be unsafe, and the user account is denied login.

[0107] In another specific embodiment, it is determined whether the amount of data in the second call result is less than or equal to a preset quantity threshold; if not, it is determined that the login device is a virtual device, and the user account that logs in to the virtual device is unsafe, and the user account is denied login.

[0108] In this way, by comparing the types and / or quantities of the application lists installed on the login device, the login device type can be distinguished, which is consistent with the actual application scenarios of the physical device, with high matching degree and strong security.

[0109] For example, assume that the preset application list information includes WeChat, Taobao, and Alipay; if the login device is a virtual device (it is highly likely that the above-mentioned applications will not be installed), the second call result will not fall within the range of the preset application list information, and the login device is determined to be a virtual device, and the user account logged in to the virtual device is determined to be unsafe, and the user account is denied login; if the login device is a physical device (most of the above-mentioned applications will be installed), the second call result falls within the range of the preset application list information, and the login device is determined to be a physical device, and the user account logged in to the physical device is determined to be safe, and the user account is allowed to log in.

[0110] In order to take corresponding measures at an appropriate time to protect the security of user accounts according to the results of security risk assessment, the timing of refusing user account login can be further determined.

[0111] Based on this, in a specific embodiment, the part of denying the user account to log in in step S3 may specifically include the following steps.

[0112] In step S3, when it is determined that the actual application list information of the login device is consistent with the preset application list information, the rejection stage of the login permission of the user account is determined according to the actual battery configuration information and the actual communication configuration information in the device information.

[0113] In this way, by setting up the hierarchy of account assessment first from the digital configuration level and then from the physical configuration level, not only the comprehensiveness and accuracy of the assessment are improved, but also the flexibility of response and the refinement of account management are improved, which facilitates more personalized security measures in the future.

[0114] The "information consistency" in step S3 can be understood as the actual application list information and the preset application list information are completely consistent, that is, the application lists are the same in quantity and type. For example, the number of actual application list information is N1, the preset application list information is N2, N1=N2, and the corresponding application list contents are exactly the same.

[0115] On the other hand, it can also be understood that the actual application list information and the preset application list information are partially consistent, for example, the application lists corresponding to M1 actual application list information and M2 preset application list information are exactly the same, where M1=M2, M1<N1, M2<N2.

[0116] As shown in FIG. 7( a ), in a specific embodiment, step S3 ″ of the present invention may specifically include the following steps.

[0117] Step S311, determining whether the number of lists whose actual application list information is consistent with the preset application list information is less than a preset number threshold;

[0118] If yes, jump to step S312, kick out the current user account and deny login at the first moment after the current user account successfully logs in.

[0119] When the number of lists whose actual application list information is consistent with the preset application list information is less than the preset number threshold, it can be understood that the user account is a low-risk account. At this time, the device information of the login device can continue to be checked to further determine whether the user account is a high-risk account.

[0120] As shown in FIG. 7( b ), in a specific embodiment, step S3 ″ of the present invention may specifically include the following steps.

[0121] Step S321, determining whether the number of lists whose actual application list information is consistent with the preset application list information is less than or equal to a preset number threshold;

[0122] If yes, jump to step S322 to determine whether the actual communication configuration information is consistent with the preset communication configuration information, and whether the actual battery configuration information is consistent with the preset battery configuration information;

[0123] If not, jump to step S323A, and directly reject the user account when logging in;

[0124] If yes, jump to step S323B, kick out the current user account and deny login at the first moment after the current user account successfully logs in.

[0125] In this way, by comparing the actual application list, communication configuration information and battery configuration information of the current login device with the preset information, it is helpful to verify the consistency of the login device information, and then evaluate the security risks of the user account, avoid fraud, and facilitate subsequent corresponding measures to improve the user experience.

[0126] Continuing with reference to FIG. 7( a) and FIG. 7( b), the present invention classifies logged-in user accounts at two levels: the digital configuration level (i.e., application list information) and then the physical configuration level (i.e., battery configuration and communication configuration), thereby enabling a more comprehensive and accurate evaluation of user accounts.

[0127] Specifically, at the software level, by verifying the consistency of the application list information, potential illegal software installation or tampering behavior can be identified; at the hardware level, by checking its battery configuration information and communication configuration information, changes in the physical environment of the device, such as abnormal device replacement or simulated attacks, can be captured. The combination of the two can more effectively identify potential security threats, so that timely measures can be taken to protect user accounts and data security, ensuring the safety and privacy of users during use.

[0128] Based on the evaluation results at the digital configuration level, the system can take immediate action. However, the evaluation results at the physical configuration level may require longer observation and verification in order to allow the account to log in after confirming that the device is secure. By setting different evaluation levels and response strategies, the system can respond to various security threats more flexibly.

[0129] One embodiment of the present invention provides a computer-readable storage medium.

[0130] In one embodiment, a computer-readable storage medium stores a computer program executed by the processor mentioned above, or an account security detection method in any of the technical solutions mentioned above.

[0131] When the processor executes the computer program, it can execute the description of the account security detection method in any of the above technical solutions, so it will not be repeated here. In addition, the description of the beneficial effects of using the same method will not be repeated.

[0132] The computer-readable storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0133] To summarize, the present invention obtains the device information of the login user account and the corresponding login device, and determines the security of the login user account based on whether the device information matches the preset information of the physical device. The preset information can reflect the key indicators of the authenticity of the physical device. Although the virtual device can simulate the basic login behavior of the user, it is difficult to make the details of the device information completely consistent with the real physical device. Therefore, matching the two can effectively expose the account reselling and fraud under disguise such as virtual devices, thereby improving the accuracy and defense capabilities of account security detection, and ensuring the security and stability of user rights and interests and the network environment.

[0134] It should be understood that although this specification is described according to implementation modes, not every implementation mode contains only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each implementation mode may also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

[0135] The series of detailed descriptions listed above are only specific descriptions of feasible implementation methods of the present invention. They are not intended to limit the scope of protection of the present invention. Any equivalent implementation methods or changes that do not deviate from the technical spirit of the present invention should be included in the scope of protection of the present invention.

Claims

1. An account security detection method, characterized in that: include: Get the login user account and the corresponding login device information; Determining whether the device information is consistent with preset information, wherein the preset information is used to determine the device information corresponding to the physical device; If not, the logged-in user account is determined to be unsafe and the user account is denied login.

2. The account security detection method according to claim 1, characterized in that: The preset information includes at least one of preset battery configuration information, preset communication configuration information and preset application list information.

3. The account security detection method according to claim 1, characterized in that: The preset information includes preset battery configuration information; The determining whether the device information is consistent with the preset information includes: Based on the change in the battery power of the login device within a unit time, determine whether the device information is consistent with the preset battery configuration information.

4. The account security detection method according to claim 3, characterized in that: The determining whether the device information is consistent with the preset battery configuration information based on the change in the battery power of the login device within a unit time includes: Obtain and determine, based on the current battery power of the login device, whether the current battery power is not equal to a preset battery power threshold.

5. The account security detection method according to claim 3, characterized in that: The determining whether the device information is consistent with the preset battery configuration information based on the change in the battery power of the login device within a unit time includes: Obtaining a first battery level at least at a first moment and a second battery level at a second moment within a unit time; It is determined whether a difference between the first battery level and the second battery level falls within a preset battery power range.

6. The account security detection method according to claim 1, characterized in that: The preset information includes preset communication configuration information, and the determining whether the device information is consistent with the preset information includes: Determine, based on a first application interface provided by the login device for accessing its actual communication configuration information, a first calling result after calling the first application interface, wherein the actual communication configuration information includes a user identification card, and the user identification card is used to store user contract information to achieve identity authentication; Determine whether the first calling result is consistent with the preset communication configuration information.

7. The account security detection method according to claim 1, characterized in that: The preset information includes preset application list information, and the determining whether the device information is consistent with the preset information includes: Determining, based on a second application interface provided by the login device for accessing its actual application list, a second calling result after calling the second application interface; According to the second calling result, it is determined whether the device information is consistent with the preset application list information.

8. The account security detection method according to claim 7, characterized in that: The determining, according to the second calling result, whether the device information is consistent with the preset application list information includes: Determine whether the second call result falls within the range of the preset application list information, and / or determine whether the amount of data in the second call result is less than or equal to a preset quantity threshold.

9. The account security detection method according to claim 2, characterized in that: The denial of login by the user account includes: When it is determined that the actual application list information and the preset application list information of the login device are not completely consistent, the rejection stage of the user account login permission is determined according to the actual battery configuration information and the actual communication configuration information in the device information.

10. The account security detection method according to claim 9, characterized in that: The step of determining the denial stage of the user account login permission according to the actual battery configuration information and the actual communication configuration information in the device information includes: Determine whether the number of lists that are consistent with the actual application list information and the preset application list information is less than a preset number threshold; If so, the current user account will be kicked out and denied login as soon as it successfully logs in.

11. The account security detection method according to claim 9, characterized in that: The step of determining the denial stage of the user account login permission according to the actual battery configuration information and the actual communication configuration information in the device information includes: Determine whether the number of lists that are consistent with the actual application list information and the preset application list information is less than or equal to a preset number threshold; If so, determining whether the actual communication configuration information is consistent with the preset communication configuration information, and whether the actual battery configuration information is consistent with the preset battery configuration information; If not, it will be directly rejected when the user account logs in; If so, the current user account will be kicked out and denied login as soon as it successfully logs in.

12. An account security detection system, characterized in that: The detection system comprises: The client is used to receive the user's login information, determine a login request according to the login information and send the login request to the server, the login information includes the user account, and the login request includes the login device for logging in to the user account; The server side is used to obtain the device information of the login user account and the corresponding login device; to determine whether the device information is consistent with the preset information, wherein the preset information is used to determine the device information corresponding to the physical device; and to deny login to the user account when it is determined that the login user account is not safe.

13. A computer storage medium storing a computer program, wherein when the computer program is executed, the device where the computer storage medium is located executes the steps of the account security detection method according to any one of claims 1 to 11.

Images