Method and device for processing page operation behavior

Abstract

The invention discloses a method and device for processing page operation behaviors, and relates to the technical field of application development and information security. A specific embodiment of the method comprises the following steps: acquiring touch event data executed for a page; the method comprises the steps of setting triggering of touch operation for a page, dividing a set time range into a plurality of time periods, obtaining a touch pressure value included in touch event data collected by the page in each time period, and calculating a corresponding touch pressure statistical value in each time period; and determining whether the page operation behavior of the page is abnormal or not according to a comparison result of the touch pressure statistical values in different time periods. According to the embodiment of the invention, the flexibility, universality and expansibility of page touch event detection are improved, and the efficiency of processing page operation behaviors is improved.

Description

Technical Field

[0001] The present invention relates to the field of application development and information security technology, and in particular to a method and device for processing page operation behavior. Background Art

[0002] With the popularization of Internet applications, Internet applications have become an indispensable tool for people's work and life. In addition to providing more abundant functions, Internet applications also need to detect whether there are any abnormalities in the page operation behavior in the application; for example, for pages containing rewards, transactions and other content, it is particularly necessary to detect abnormal situations in targeted page operation behaviors to identify risky behaviors.

[0003] Existing methods for detecting page behavior usually directly add detection logic code for existing abnormal operation behaviors in the code, or detect the data contained in specific page operation requests; the existing methods have poor flexibility and scalability in detecting page operation behaviors, and there is a problem of being unable to identify newly added abnormal page operation behaviors. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides a method and device for processing page operation behavior, which can collect touch event data corresponding to the touch operation performed on the page; set the trigger of the touch operation for the page, divide the set time range into multiple time periods, obtain the touch pressure value contained in the touch event data collected on the page in each time period, and calculate the corresponding touch pressure statistics in each time period; according to the comparison results of the touch pressure statistics between different time periods, determine whether the page operation behavior of the page is abnormal. The embodiment of the present invention improves the flexibility, versatility and extensibility of page touch event detection, and improves the efficiency of processing page operation behavior.

[0005] To achieve the above-mentioned purpose, according to one aspect of an embodiment of the present invention, a method for processing page operation behavior is provided, which is characterized by comprising: collecting touch event data generated by performing a touch operation on a page; when it is monitored that the touch operation is a preset touch operation, dividing the set time range into multiple time periods, obtaining the touch pressure value contained in the touch event data collected on the page in each time period, and calculating the corresponding touch pressure statistics in each time period; based on the comparison results of the touch pressure statistics between different time periods, determining whether there is any abnormality in the page operation behavior of the page.

[0006] Optionally, before collecting touch event data of touch operations performed on pages, it includes: monitoring touch operations performed on multiple pages through a touch event function; wherein the touch event function is set in a basic page component of the application, and the basic page component manages one or more pages.

[0007] Optionally, the touch event data further includes: a touch event type and an event time;

[0008] After collecting the touch event data of the touch operation performed on the page, it further includes: storing the touch event type, the corresponding touch pressure value and the event time included in each collected touch event data; obtaining the current timestamp and the storage time range, and removing the historical touch event data collected at the historical time beyond the storage time range; wherein the storage time range is greater than the set time range.

[0009] Optionally, before dividing the set time range into multiple time periods, it further includes: obtaining the number of events indicated by all touch event data collected on the page within the set time range; in response to the number of events exceeding an event number threshold, executing the step of dividing the set time range into multiple time periods; in response to the number of events not exceeding the event number threshold, determining that there is no abnormality in the page operation behavior for the page.

[0010] Optionally, determining whether there is an abnormality in the page operation behavior of the page based on the touch pressure statistics between different time periods includes: obtaining the touch pressure statistics corresponding to each time period; in response to the comparison results of the touch pressure statistics corresponding to each time period being consistent, determining that there is an abnormality in the page operation behavior of the page, otherwise determining that there is no abnormality in the page operation behavior of the page.

[0011] Optionally, determining whether there is an abnormality in the page operation behavior of the page based on the comparison results of the touch pressure statistics between different time periods further includes: obtaining a setting reporting interface, taking the comparison result indicating normal or indicating abnormality as the parameter value of the interface parameter of the setting reporting interface, and reporting the comparison result to the server using the setting reporting interface and the interface parameters; so that the server performs page operation behavior analysis for the page in combination with the comparison result.

[0012] Optionally, when the touch operation is monitored to be a preset touch operation, it includes: when the touch operation is monitored to be a touch operation for a setting component, or when the touch operation is monitored to exit a page, determining that the touch operation is the preset touch operation.

[0013] To achieve the above-mentioned purpose, according to a second aspect of an embodiment of the present invention, a device for processing page operation behavior is provided, characterized in that it includes: an event collection module, a pressure value determination module and an analysis module; wherein:

[0014] An event collection module is used to collect touch event data generated by performing touch operations on a page;

[0015] A pressure value determination module is used to, when it is detected that the touch operation is a preset touch operation, divide the set time range into a plurality of time periods, obtain the touch pressure value contained in the touch event data collected on the page in each time period, and calculate the corresponding touch pressure statistics in each time period;

[0016] The analysis module is used to determine whether the page operation behavior of the page is abnormal based on the comparison results of the touch pressure statistics between different time periods.

[0017] Optionally, the device for processing page operation behavior is used to, before collecting touch event data of touch operations performed on the page, include: monitoring touch operations performed on multiple pages through a touch event function; wherein the touch event function is set in a basic page component of the application, and the basic page component manages one or more pages.

[0018] Optionally, the touch event data also includes: touch event type and event time; the device for processing page operation behavior, after collecting touch event data of performing touch operations on the page, further includes: storing the touch event type, corresponding touch pressure value and event time included in each collected touch event data; obtaining the current timestamp and storage time range, and removing historical touch event data collected at historical times beyond the storage time range; wherein the storage time range is greater than the set time range.

[0019] Optionally, the device for processing page operation behavior, before dividing the set time range into multiple time periods, further includes: obtaining the number of events indicated by all touch event data collected on the page within the set time range; in response to the number of events exceeding an event number threshold, executing the step of dividing the set time range into multiple time periods; in response to the number of events not exceeding the event number threshold, determining that there is no abnormality in the page operation behavior for the page.

[0020] Optionally, the device for processing page operation behavior is used to determine whether there is an abnormality in the page operation behavior of the page based on a comparison result of touch pressure statistics between different time periods, including: obtaining the touch pressure statistics corresponding to each time period; in response to the comparison results of the touch pressure statistics corresponding to each time period being consistent, determining that there is an abnormality in the page operation behavior of the page, otherwise determining that there is no abnormality in the page operation behavior of the page.

[0021] Optionally, the device for processing page operation behavior is used to determine whether there is an abnormality in the page operation behavior of the page based on the comparison results of the touch pressure statistics between different time periods, and further includes: obtaining a setting reporting interface, using the comparison result indicating normal or indicating abnormality as the parameter value of the interface parameter of the setting reporting interface, and using the setting reporting interface and the interface parameters to report the comparison result to the server; so that the server performs page operation behavior analysis for the page in combination with the comparison result.

[0022] Optionally, the device for processing page operation behavior is used to, when it is monitored that the touch operation is a preset touch operation, include: when it is monitored that the touch operation is a touch operation on a setting component, or when it is monitored that the touch operation is to exit the page, determine that the touch operation is the preset touch operation.

[0023] To achieve the above-mentioned purpose, according to the third aspect of an embodiment of the present invention, there is provided an electronic device for processing page operation behavior, characterized in that it includes: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement any of the methods described in the above-mentioned methods for processing page operation behavior.

[0024] To achieve the above-mentioned purpose, according to a fourth aspect of an embodiment of the present invention, a computer-readable medium is provided, on which a computer program is stored, characterized in that when the program is executed by a processor, any method as described in the above-mentioned method for processing page operation behavior is implemented.

[0025] To achieve the above-mentioned purpose, according to a fifth aspect of an embodiment of the present invention, a computer program product is provided, including a computer program, characterized in that when the computer program is executed by a processor, any of the methods for processing page operation behaviors as described above is implemented.

[0026] An embodiment of the above invention has the following advantages or beneficial effects: it can collect touch event data corresponding to a touch operation performed on an application page; when the touch operation is detected to be a preset touch operation, the set time range is divided into multiple time periods, the touch pressure value contained in the touch event data collected on the page in each time period is obtained, and the corresponding touch pressure statistics in each time period are calculated; according to the comparison results of the touch pressure statistics between different time periods, it is determined whether the page operation behavior of the page is abnormal. The embodiments of the present invention improve the flexibility, versatility and extensibility of page touch event detection, and improve the efficiency of processing page operation behavior.

[0027] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0029] Figure 1 It is a flowchart of a method for processing page operation behavior provided by an embodiment of the present invention;

[0030] FIG. 2 is a schematic diagram of a flow chart of a process for processing page operation behavior provided by an embodiment of the present invention;

[0031] Figure 3 is a schematic diagram of a process of storing touch events provided by an embodiment of the present invention;

[0032] Figure 4 It is a structural schematic diagram of a device for processing page operation behavior provided by an embodiment of the present invention;

[0033] FIG5 is a diagram of an exemplary system architecture to which an embodiment of the present invention may be applied;

[0034] Figure 6 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0035] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0036] It should be noted that in the technical solution of the present invention, the collection, use, storage, sharing and transfer of user personal information involved are in compliance with the provisions of relevant laws and regulations, and it is necessary to inform the user and obtain the user's consent or authorization. When applicable, the user's personal information is de-identified and / or anonymized and / or encrypted.

[0037] like Figure 1 As shown, an embodiment of the present invention provides a method for processing page operation behavior, which may include the following steps:

[0038] Step S101: collecting touch event data of a touch operation performed on a page.

[0039] Specifically, a touch event (MotionEvent) is an event generated when a user uses the touch screen of a device (such as a smart terminal, smart device, etc.) to perform a touch operation on one or more pages of an application. The touch operation is, for example, any one or more of click, slide, drag, and long press, that is, the touch event type is any one or more of click, slide, drag, and long press; the touch event data includes the touch event type, the event time when the touch event occurs, and the touch pressure value generated by the touch event on the device screen.

[0040] Furthermore, in response to the user triggering a touch operation on the screen, the device kernel layer passes the touch event to the system layer of the operating system. The system layer uses multiple components (such as InputReader, InputDispatcher, InputReceiver, etc.) to process the touch event and then sends it to the application layer (i.e., the page).

[0041] Furthermore, the touch event method (such as onTouchEvent) can be used to monitor the touch event, that is, when the user touches the screen (finger, mouse, group control software, etc.), the onTouchEvent method will be automatically triggered and called back to the application process, so the onTouchEvent method is used as the touch event collection entry method; further, the onTouchEvent method is set in the basic page component (such as BaseActivity), so that the onTouchEvent method can collect the touch event data of the page components (such as MainActivity, LoginActivity, ListActivity, etc.) included in the multiple pages that inherit the management of the basic page component. That is, before the touch event data of the touch operation performed on one or more pages is collected, it includes: monitoring the touch events performed on one or more pages through the touch event method; wherein the touch event method is set in the basic page component of the application, so that the touch event method monitors the touch events generated by the page components contained in one or more pages managed by the basic page component through touching the screen, and collects the touch event data corresponding to the touch event. Among them, in an embodiment of the present invention, a component for storing a touch event data set and a logic controller for collecting touch event data (controlling the timing of collecting touch events, the interval of collecting touch events, the storage control of touch events, etc.) can also be set in the basic page component.

[0042] In response to multiple touch events, the touch pressure value of each touch event on the device is obtained; further, each collected touch event data includes the touch event type, the corresponding touch pressure value and the event time. Among them, the method provided by the MotionEvent public class obtains detailed information of the touch event, such as: touch type (DOWN / UP / MOVE), touch position (X / Y coordinates), touch pressure value, touch area, etc.; the touch pressure value can be obtained through the getPressure method.

[0043] Step S102: when the touch operation is detected to be a preset touch operation, the set time range is divided into multiple time periods, the touch pressure value contained in the touch event data collected on the page in each time period is obtained, and the corresponding touch pressure statistics value in each time period is calculated.

[0044] Specifically, after the touch event data (including the touch pressure value corresponding to the touch event) is collected according to the method of step S101, calculation is further performed based on the touch pressure value.

[0045] Furthermore, the triggering timing of detecting the page operation behavior is related to the business scenario, that is, when the touch operation is monitored to be a preset touch operation, the step of dividing the set time range into multiple time periods is continued; wherein, when the touch operation is monitored to be a preset touch operation, it includes: when the touch operation is monitored to be a touch operation for a set component, or when the touch operation is monitored to exit the page, it is determined that the touch operation is the preset touch operation. For example: if the business scenario is to obtain rewards, then the page is a reward page that includes a reward business scenario, for example, the "Get Reward" button is a setting component or exits the reward page as a trigger condition for detecting page operation behavior; for the reward business scenario, the condition for obtaining the reward can correspond to a variety of page operation behaviors, for example: browsing the page for N seconds, or clicking on multiple components on the page, or entering set text on the page, etc.; further, a variety of page operation behaviors generate corresponding touch events; when the "Get Reward" button (i.e., the setting component) is selected (for example, clicked), the detection of page operation behavior is triggered to detect whether there is any abnormal page operation (for example, non-user manual operation, machine operation, etc.) in the reward business scenario. The detection step of the embodiment of the present invention reduces the business risks of reward business, transaction business and other businesses related to virtual value.

[0046] Furthermore, the following describes a detection method for page operation behavior adopted by an embodiment of the present invention.

[0047] Further, the set time range is divided into a plurality of time periods, wherein the set time range is used to determine the range to which the timestamp of the user performing the screen touch belongs, for example: the past 30 seconds calculated from the current timestamp, the past 60 seconds calculated from the current timestamp, etc.; thereby achieving the beneficial effect of real-time processing of touch events; further, the set time range is divided into a plurality of time periods, for example: when the set time range is 30 seconds, the set time range is divided into 6 time periods, each time period is 5 seconds; further from the stored data (that is, the touch event type and the corresponding touch event data included in each collected touch event data are stored) The touch pressure value contained in the touch event data collected on the page in each time period is obtained from the data of the pressure value and event time, and the corresponding touch pressure statistics in each time period are calculated; the touch pressure statistics are calculated by dividing the set time range into multiple time periods so that each time period is used as a sliding window, wherein the pressure statistics may be a mean, a median, a percentile, a maximum value, a minimum value, etc.; and the type of the touch pressure statistics calculated for each time period is the same. In the case of the average value of the touch pressure statistics, the touch pressure statistics for each time period can be calculated using formula (1):

[0048] Moving Average = (x1 + x2 + … xN) / N

[0049] Among them, Moving Average represents the statistical value (average value) of touch pressure, x1, x2, ...xN are touch pressure values, and N represents the number of touch events.

[0050] Step S103: determining whether the page operation behavior of the page is abnormal based on the comparison result of the touch pressure statistics between different time periods.

[0051] Furthermore, according to the comparison result of the touch pressure statistics between different time periods calculated in step S102, it is determined whether there is any abnormality in the page operation behavior of the page.

[0052] Specifically, according to the touch pressure statistics between different time periods, it is determined whether the page operation behavior of the page is abnormal, including: obtaining the touch pressure statistics corresponding to each time period; in response to the comparison results of the touch pressure statistics corresponding to each time period being consistent, it is determined that the page operation behavior of the page is abnormal, otherwise it is determined that the page operation behavior of the page is not abnormal. For example, there are 6 consecutive time periods. It can be understood that the touch screen operation manually performed by the user usually has different touch pressure values ​​(that is, they are not exactly the same). Therefore, there are also differences in the touch pressure statistics calculated by comparing the 6 consecutive time periods; and the page operation for the page is sent by machine methods such as tools and scripts, and touch events are generated accordingly. Since the touch pressure value needs to be set (for example, set to 0 or 1, or a fixed value), the touch pressure value corresponding to the sent touch event is usually consistent. Therefore, if it is determined that the comparison results of the touch pressure statistics corresponding to each time period are consistent, it is determined that the page operation behavior of the page is abnormal.

[0053] The embodiment of the present invention improves the real-time performance and reliability of detecting page operation behaviors, is decoupled from business codes, and can be applied to any page.

[0054] Furthermore, determining whether the page operation behavior of the page is abnormal based on the comparison results of the touch pressure statistics between different time periods further includes: determining to set a reporting interface, using the comparison results indicating normal or abnormal as the parameter value of the interface parameters of the setting reporting interface, and using the setting reporting interface and the interface parameters to report the comparison results to the server; so that the server performs page operation behavior analysis for the page in combination with the comparison results. The embodiment of the present invention is applied to the client, and after the client determines whether the page operation behavior of the page is abnormal based on the comparison results of the touch pressure statistics between different time periods, the comparison results can be reported to the server (system or platform, etc.), the result data can be reported to the server using the setting reporting interface and the interface parameters, and a request containing the setting reporting interface and the interface parameters can be sent to the server; or the comparison results can be added based on the original request containing the setting reporting interface, so as to send a normal result indicating normal or an abnormal result indicating abnormal to the server.

[0055] Furthermore, the server can perform page operation behavior or user behavior analysis through the received page data. The embodiment of the present invention provides another dimension of data support for the server's analysis. The system / platform reads the parameter value of the interface parameter as an analysis reference, so that it is sent through the interface parameter without modifying any original logic, thereby improving the ability to identify page behavior risks.

[0056] like Figure 2As shown, an embodiment of the present invention provides a process for processing page operation behavior, which may include the following steps:

[0057] Step S201: when the touch operation is detected to be a preset touch operation, the set time range is divided into a plurality of time periods.

[0058] Step S202: Obtain the number of events indicated by all touch event data collected on the page within a set time range.

[0059] Step S203: Determine whether the number of events exceeds the event number threshold, if so, execute step S204, otherwise execute step S206.

[0060] Specifically, the embodiment of the present invention provides a method for determining the page operation behavior for a page by the number of touch events, that is, before dividing the set time range into multiple time periods, further comprising: obtaining the number of events indicated by all touch event data collected on the page within the set time range; in response to the number of events exceeding the event number threshold, executing the step of dividing the set time range into multiple time periods; in response to the number of events not exceeding the event number threshold, determining that there is no abnormality in the page operation behavior for the page. For example: if the time range is set to 30 seconds, the number of events of all touch events in the last 30 seconds is obtained, and it is further determined that the number of events exceeds the event number threshold. If the number of events does not exceed the event number threshold, it is determined that there is no abnormality in the page operation behavior for the page; for example, the event number threshold is 30; it can be understood that the number of touch events generated by the user's manual touch screen is usually limited, so the reasonably set event number threshold can be used to preliminarily determine whether it is a manual operation or a machine operation; further, if the number of events exceeds the event number threshold, the steps of dividing the set time range into multiple time periods and calculating the touch pressure statistics are executed.

[0061] Step S204: acquiring the touch events collected on the page in each time period and the touch pressure values ​​caused by the touch events on the device, and calculating the corresponding touch pressure statistics in each time period.

[0062] Step S205: determine whether the touch pressure statistics corresponding to different time periods are consistent, if yes, execute step S207, otherwise execute step S206.

[0063] Step S206: Determine that there is no abnormality in the page operation behavior on the page.

[0064] Step S207: Determine whether the page operation behavior on the page is abnormal.

[0065] The description of step S204 to step S207 is consistent with the description of step S102 to step S103 and will not be repeated here.

[0066] The embodiment of the present invention improves the real-time and reliability of detecting page operation behaviors and improves the efficiency of detecting page operation behaviors by combining the determination of the event quantity of touch events with the determination of the consistency of corresponding touch pressure statistics in multiple time periods.

[0067] like Figure 3 As shown, an embodiment of the present invention provides a process for storing touch events, and the process may include the following steps:

[0068] Step S301: Monitor touch events executed on one or more pages of an application through a touch event method, wherein the touch event is generated by a user touching the screen.

[0069] Step S302: storing the touch event type, the corresponding touch pressure value and the event time included in each collected touch event data.

[0070] Step S303: judging whether the stored touch events and the corresponding touch pressure values ​​exceed the storage time range according to the current timestamp, if so, executing step S304; otherwise, executing step S301.

[0071] Step S304: remove historical touch events collected at a time beyond the storage time range.

[0072] The description of step S301 to step S304 is: after collecting touch event data of touch operations performed on the page, store each collected touch event type, corresponding touch pressure value and event time; obtain the current timestamp and storage time range, and remove historical touch event data collected at historical times beyond the storage time range; wherein the storage time range is greater than the set time range; obtain the current timestamp and storage time range, and remove historical touch event data collected at historical times beyond the storage time range; wherein the storage time range is greater than the set time range.

[0073] Specifically, for example, the time range is set to 30 seconds and the storage time range is 60 seconds, that is, the storage time range is greater than the set time range. The historical time can be determined based on the current timestamp and the storage time range. For example, if the current timestamp is 12:00 and the storage time range is 69 seconds, the historical touch events collected before 11:59 (i.e., the historical time beyond the storage time range) will be removed. The embodiment of the present invention removes the stored data so that the stored touch events and the corresponding touch pressure values ​​are the latest data, which reduces storage resources on the basis of improving data real-time performance and computing efficiency.

[0074] like Figure 4 As shown, an embodiment of the present invention provides a device 400 for processing page operation behavior, including: an event collection module 401, a pressure value determination module 402 and an analysis module 403; wherein,

[0075] The event collection module 401 is used to collect touch event data generated by performing touch operations on a page;

[0076] The pressure value determination module 402 is used to divide the set time range into multiple time periods when the touch operation is detected to be a preset touch operation, obtain the touch pressure value contained in the touch event data collected on the page in each time period, and calculate the touch pressure statistics corresponding to each time period;

[0077] The analysis module 403 is used to determine whether the page operation behavior of the page is abnormal based on the comparison results of the touch pressure statistics between different time periods.

[0078] An embodiment of the present invention also provides an electronic device for processing page operation behavior, including: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the method provided in any of the above embodiments.

[0079] An embodiment of the present invention further provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the method provided in any of the above embodiments is implemented.

[0080] An embodiment of the present invention further provides a computer program product, including a computer program, which implements any of the above methods for processing page operation behaviors when the computer program is executed by a processor.

[0081] Figure 5 An exemplary system architecture 500 is shown to which the method for processing page operation behavior or the apparatus for processing page operation behavior according to the embodiments of the present invention can be applied.

[0082] like Figure 5 As shown, system architecture 500 may include terminal devices 501, 502, 503, a network 504 and a server 505. Network 504 is used to provide a medium for communication links between terminal devices 501, 502, 503 and server 505. Network 504 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0083] Users can use terminal devices 501, 502, 503 to interact with server 505 through network 504 to receive or send messages, etc. Various client applications can be installed on terminal devices 501, 502, 503, such as e-commerce client applications, web browser applications, search applications, instant messaging tools, and email clients.

[0084] The terminal devices 501 , 502 , and 503 may be various electronic devices having a display screen and supporting various client applications, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0085] The server 505 may be a server providing various services, such as a background management server providing support for client applications used by users using the terminal devices 501, 502, and 503. The background management server may further analyze the comparison results of the received client for the touch event statistics, and feed back the analysis data to the terminal device.

[0086] It should be noted that the method for processing page operation behavior provided in the embodiment of the present invention is generally executed by the terminal devices 501 , 502 , 503 , and accordingly, the apparatus for processing page operation behavior is generally arranged in the terminal devices 501 , 502 , 503 .

[0087] It should be understood that Figure 5 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0088] Reference below Figure 6 , which shows a schematic diagram of the structure of a computer system 600 of a terminal device suitable for implementing an embodiment of the present invention. Figure 6 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0089] like Figure 6As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the system 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0090] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed into the storage section 608 as needed.

[0091] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 609, and / or installed from the removable medium 611. When the computer program is executed by the central processing unit (CPU) 601, the above-mentioned functions defined in the system of the present invention are executed.

[0092] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0093] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0094] The modules and / or units involved in the embodiments of the present invention may be implemented in software or hardware. The modules and / or units described may also be provided in a processor. For example, they may be described as follows: a processor includes an event acquisition module, a pressure value determination module, and an analysis module. The names of these modules do not, in some cases, constitute limitations on the modules themselves. For example, the event acquisition module may also be described as a "module for acquiring touch event data executed on a page."

[0095] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently without being assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes: collecting touch event data executed on one or more pages of the application; in response to a trigger for detecting a page operation behavior for any page, dividing the set time range into multiple time periods, obtaining the touch pressure value contained in the touch event data collected on the page in each time period, and calculating the corresponding touch pressure statistics in each time period; according to the touch pressure statistics between different time periods, determining whether the page operation behavior of the page is abnormal.

[0096] The embodiments of the present invention can collect touch event data executed on the application page; for the detection request of the page operation behavior, divide the set time range into multiple time periods, obtain the touch event data collected on the page in each time period and the touch pressure value formed on the device by the touch event contained in the touch event data, and calculate the corresponding touch pressure statistics in each time period; according to the comparison results of the touch pressure statistics between different time periods, determine whether the page operation behavior of the page is abnormal. The embodiments of the present invention improve the flexibility, versatility and extensibility of the detection of page touch events, and improve the efficiency of processing page operation behaviors.

[0097] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for processing page operation behavior, characterized in that: include: Collect touch event data generated by performing touch operations on the page; When the touch operation is detected to be a preset touch operation, the set time range is divided into a plurality of time periods, the touch pressure value contained in the touch event data collected on the page in each time period is obtained, and the corresponding touch pressure statistics value in each time period is calculated; According to the comparison result of the touch pressure statistics between different time periods, it is determined whether the page operation behavior of the page is abnormal.

2. The method according to claim 1, characterized in that Before collecting the touch event data of the touch operation performed on the page, the method includes: The touch operations performed on multiple pages are monitored through a touch event function; wherein the touch event function is set in a basic page component of an application, and the basic page component manages one or more pages.

3. The method according to claim 1, characterized in that The touch event data also includes: touch event type and event time; After collecting the touch event data of the touch operation performed on the page, the method further includes: Storing each collected touch event data including the touch event type, the corresponding touch pressure value and the event time; Acquire a current timestamp and a storage time range, and remove historical touch event data collected at a historical time beyond the storage time range; wherein the storage time range is greater than the set time range.

4. The method according to claim 1, characterized in that: Before dividing the set time range into a plurality of time periods, the method further includes: Acquire the number of events indicated by all touch event data collected on the page within the set time range; In response to the number of events exceeding an event number threshold, executing the step of dividing the set time range into a plurality of time periods; In response to the event quantity not exceeding the event quantity threshold, it is determined that there is no abnormality in the page operation behavior for the page.

5. The method according to claim 1, characterized in that The determining whether the page operation behavior of the page is abnormal according to the comparison results of the touch pressure statistics between different time periods includes: Get the touch pressure statistics corresponding to each time period; In response to the comparison results of the touch pressure statistics corresponding to each time period being consistent, it is determined that the page operation behavior of the page is abnormal; otherwise, it is determined that the page operation behavior of the page is not abnormal.

6. The method according to claim 1, characterized in that The determining whether the page operation behavior of the page is abnormal according to the comparison results of the touch pressure statistics between different time periods further includes: Acquire a setting reporting interface, use a comparison result indicating normal or abnormal as a parameter value of an interface parameter of the setting reporting interface, and report the comparison result to a server by using the setting reporting interface and the interface parameter; The server can perform page operation behavior analysis on the page in combination with the comparison result.

7. The method according to claim 1, characterized in that When it is detected that the touch operation is a preset touch operation, the method includes: When it is detected that the touch operation is a touch operation on a setting component, or when it is detected that the touch operation is to exit a page, it is determined that the touch operation is the preset touch operation.

8. A device for processing page operation behavior, characterized in that: include: Event acquisition module, pressure value determination module and analysis module; wherein, The event collection module is used to collect touch event data generated by performing touch operations on the page; The pressure value determination module is used to divide the set time range into multiple time periods when it is detected that the touch operation is a preset touch operation, obtain the touch pressure value contained in the touch event data collected on the page in each time period, and calculate the touch pressure statistics corresponding to each time period; The analysis module is used to determine whether the page operation behavior of the page is abnormal based on the comparison results of the touch pressure statistics between different time periods.

9. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7.

10. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

11. A computer program product, comprising a computer program, characterized in that When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images