Asset identification method, device and equipment, storage medium and program product

Abstract

The invention discloses an asset identification method and device, equipment, a storage medium and a program product, and relates to the technical field of network security, the asset identification method is applied to an identification end, and comprises the steps that a detection message is sent to a host end to be identified, and the host end generates detection response data according to the detection message; receiving detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain induction response data returned by the host end; and performing asset identification on the host end according to the induction response data to obtain an asset identification result. According to the asset identification method and device, asset identification based on data induction is realized, the problem that the accuracy of asset identification is affected due to the fact that complete asset information is difficult to obtain by a related asset identification method is solved, and the accuracy of asset identification is improved.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to an asset identification method, device, equipment, storage medium and program product. Background Art

[0002] With the continuous development of the network and the growth of user network usage demand, the network scale continues to expand and the network space becomes more complex. It is necessary to detect the network space through network asset identification technology to identify potential security risks in a timely manner.

[0003] Existing asset identification methods mainly rely on active detection and traffic analysis, and usually perform asset identification based on the messages returned by the host when it first connects to the client. However, in certain scenarios, some servers may not return sufficient identifiable asset information when they first connect, thus affecting the accuracy of asset identification.

[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of this application is to provide an asset identification method, device, equipment, storage medium and program product, aiming to solve the technical problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification.

[0006] To achieve the above purpose, the present application proposes an asset identification method, which is applied to the identification end and includes:

[0007] Sending a detection message to the host end to be identified, and the host end generating detection response data according to the detection message;

[0008] Receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end;

[0009] According to the induced response data, asset identification is performed on the host end to obtain an asset identification result.

[0010] In one embodiment, before the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end, the step further includes:

[0011] According to the detection response data, the host end is detected and identified to obtain a detection asset identification result;

[0012] If the detection asset identification result is identification failure, the following steps are executed: according to the detection response data, data induction is performed on the host end to obtain the induced response data returned by the host end.

[0013] In one embodiment, before the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end, the step further includes:

[0014] Perform application identification according to the detection response data to obtain an application identification result;

[0015] The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: according to the detection response data, data induction is performed on the host side to obtain the induced response data returned by the host side.

[0016] In one embodiment, the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end includes:

[0017] Generate an inducement data packet according to the detection response data, and send the inducement data packet to the host end;

[0018] Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induction reaches the maximum and the induced response data is received.

[0019] In one embodiment, after the step of receiving the response data returned by the host end in response to the induced data packet, the method further includes:

[0020] According to the response data, judging whether the data induction is successful;

[0021] If the data induction is successful, the induced response data is obtained according to the response data.

[0022] In addition, to achieve the above purpose, the present application also proposes an asset identification method, which is applied to a host side and includes:

[0023] Receiving a detection message sent by the identification terminal, and generating detection response data according to the detection message;

[0024] The detection response data is sent to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the host end is subjected to asset identification according to the induced response data to obtain an asset identification result.

[0025] In addition, to achieve the above-mentioned purpose, the present application also proposes an asset identification device, the asset identification device comprising:

[0026] A detection module, used for sending a detection message to a host end to be identified, and the host end generates detection response data according to the detection message;

[0027] An induction module, used for receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end;

[0028] The identification module is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

[0029] In addition, to achieve the above-mentioned purpose, the present application also proposes an asset identification device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the asset identification method described above.

[0030] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the asset identification method described above are implemented.

[0031] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the asset identification method described above are implemented.

[0032] The present application provides an asset identification method, which actively sends a detection message to a host side that needs to be identified. After receiving the detection response data generated by the host side according to the detection message, the host side is induced to perform data according to the detection response data, and then the asset is identified on the host side according to the induced response data returned by the host side to obtain the result of asset identification. The present application combines active detection and data induction on the host side that needs to be identified to obtain response data sufficient for asset identification, thereby solving the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improving the accuracy of asset identification. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0034] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0035] Figure 1 A flowchart of the first embodiment of the asset identification method of the present application is provided;

[0036] Figure 2 A flowchart of the second embodiment of the asset identification method of the present application is provided;

[0037] Figure 3 This is a schematic diagram of the module structure of the asset identification device according to an embodiment of the present application;

[0038] Figure 4 Schematic diagram of the device structure of the hardware operating environment involved in the asset identification method in the embodiment of the present application.

[0039] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0040] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0041] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0042] The main solution of the embodiment of the present application is: sending a detection message to the host end to be identified, and the host end generates detection response data according to the detection message; receiving the detection response data sent by the host end, and according to the detection response data, performing data induction on the host end to obtain induced response data returned by the host end; according to the induced response data, performing asset identification on the host end to obtain an asset identification result.

[0043] Network asset identification technology aims to automatically identify, classify and manage all assets in an organization's network through a variety of methods and tools. These assets include but are not limited to servers, routers, switches, workstations, mobile devices and virtual machines. Existing asset identification methods mainly rely on active detection and traffic analysis to identify as many asset attributes as possible through in-depth analysis of interaction protocols.

[0044] In active detection, asset identification usually extracts asset attribute data based on the context of the interactive protocol. This data mainly includes the server's banner information, error information, and protocol interaction information. The server's banner information refers to the first message pushed by the server after the client connects to the server for the first time. This mechanism can effectively identify the basic information of the server in most cases.

[0045] However, in some specific scenarios, some servers do not send banner information when they are first connected, or the banner information is very limited, which significantly reduces the asset identification capability. In this case, traditional asset identification methods are difficult to obtain complete asset information, thus affecting the accuracy of asset identification.

[0046] Technical terms involved in this application:

[0047] Network asset identification: refers to the process of using technical means to obtain the device attribute information and application attribute information of the target host, which mainly involves three aspects: device component identification, application component identification, and business type inference.

[0048] Active probing: A technique for identifying network assets by sending probes and analyzing responses. It sends information to the target host and analyzes its response to identify network asset information such as operating system type, open ports, services, etc.

[0049] Application identification: Identify and classify various application services in the network to understand the functions, usage, and security issues of each application service.

[0050] Through multiple interactions, the present application dynamically adjusts the content of the sent data packets according to the response of the server to induce the server to output more valuable information and gradually obtain the complete information of the server, rather than relying solely on the response of the first connection. It can adapt to the response modes of different servers in complex network environments and provide more accurate asset identification results. It solves the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improves the accuracy of asset identification.

[0051] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, an asset identification device, etc. The following takes the asset identification device as an example to illustrate this embodiment and the following embodiments.

[0052] Based on this, the present application embodiment provides an asset identification method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the asset identification method of the present application.

[0053] In this embodiment, the asset identification method is applied to the identification end, including steps S10 to S30:

[0054] Step S10, sending a detection message to the host end to be identified, and the host end generates detection response data according to the detection message;

[0055] It should be noted that the probe message is a specially crafted network data packet used to trigger the target host to respond, so as to collect asset information that needs to be identified through active detection, such as messages of protocols such as ICMP, TCP, and UDP. The probe response data refers to the target host's response to the probe message, which contains the host's characteristic information, such as the server's banner information, error information, and protocol interaction information.

[0056] It can be understood that in order to detect the network behavior and response mode of the host and provide basic data for subsequent identification and analysis, by sending specific detection messages to the host side that requires asset identification targets, the host side response can be triggered, thereby obtaining the asset information of the host side.

[0057] Step S20, receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end;

[0058] It should be noted that data induction refers to specific data or commands sent to the host to induce the host to return more information. Induced response data refers to the host's response data to data induction, which may contain more detailed host asset information.

[0059] It can be understood that by analyzing the detection response data returned by actively detecting the host side, further data induction is performed on the host according to the content of the detection response data, and the response data returned by the host side data induction is obtained, so as to obtain more comprehensive and detailed host side asset information and improve the accuracy of identification.

[0060] Step S30: performing asset identification on the host end according to the induced response data to obtain an asset identification result.

[0061] It should be noted that asset identification refers to determining the types and characteristics of network assets, such as operating systems, services, applications, etc. The asset identification results are the output of the identification process, including detailed information and classification of assets.

[0062] It can be understood that in order to finally determine the network asset type of the host side and provide a basis for network security management and risk assessment, the response data returned by the host side is analyzed according to the data induction, the asset type and characteristics of the host side are identified, and the asset identification result is obtained.

[0063] In a feasible implementation manner, before the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end, the step further includes:

[0064] Step S21, performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result;

[0065] It should be noted that detection asset identification refers to the preliminary asset identification process based on detection response data, that is, asset identification information is performed based on the response data containing asset information obtained by actively detecting the target host. The detection asset identification result refers to the result of preliminary identification through active detection, which can include information such as asset type and version.

[0066] It is understandable that after receiving the detection response data from the host, the data is used for preliminary asset identification to try to determine the type and characteristics of the asset to quickly identify the host asset. If the identification is successful, no further data induction steps are required, thereby improving efficiency.

[0067] Step S22, if the detection asset identification result is identification failure, execute the step: according to the detection response data, perform data induction on the host end to obtain the induced response data returned by the host end.

[0068] It is understandable that when initial identification fails, more detailed data is required for deeper asset identification, and the detection response data is used to induce the host side to return response data information through data induction to improve the accuracy of asset identification.

[0069] In this implementation, firstly, rapid asset identification is performed by detecting response data. If the identification is successful, the asset identification result can be directly obtained, which improves the identification efficiency. If the identification fails, more response data can be obtained through data induction for more in-depth analysis and identification. While ensuring the identification efficiency, the accuracy and depth of identification can be improved. By combining this method of initial active detection with network asset identification, network assets can be identified more comprehensively, providing more accurate asset information for network security management and risk assessment, thereby improving the pertinence and effectiveness of network security protection.

[0070] In a feasible implementation manner, before the step of performing data induction on the host end according to the detection response data and obtaining the induction response data returned by the host end, the step further includes:

[0071] Step S23, performing application identification according to the detection response data to obtain an application identification result;

[0072] It should be noted that application identification refers to the process of identifying application services and application components running on the host and their characteristics. The application identification result is the output result of the application identification process, including information such as the type and version of the application.

[0073] It is understandable that after receiving the detection response data from the host, the type and version of the application running on the host are identified by analyzing the features in the data, and the network asset features that meet the requirements on the host are further understood, providing a basis for subsequent asset identification.

[0074] Step S24, searching the dynamic inducer of the host side according to the application identification result, so as to execute the steps through the dynamic inducer: performing data induction on the host side according to the detection response data, and obtaining the induced response data returned by the host side.

[0075] It should be noted that a dynamic inducer refers to an inducement tool that is dynamically generated or selected based on the application identification result and is used to send specific data packets to obtain more response data. Data inducement refers to the process of sending specific data packets to induce the host to return more information.

[0076] It can be understood that based on the application identification results, specific dynamic inducers are selected or generated. These inducers are capable of sending specific inducement data packets for specific applications to induce the host to return more response data. By performing data induction through dynamic inducers, the detailed characteristics of the host can be obtained more accurately, thereby improving the accuracy of asset identification.

[0077] In this implementation, the detection response data of the host side is first analyzed through application identification to identify the applications running on the host. If the identification is successful, the corresponding dynamic inducer will be found or generated according to the characteristics of these applications, and a specific data packet will be sent to the host through the dynamic inducer to induce the host to return more response data, so as to perform more in-depth asset identification. By combining the method of application identification and dynamic induction, the accuracy and depth of asset identification can be improved while ensuring the identification efficiency.

[0078] In a feasible implementation manner, the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end includes:

[0079] Step S201, generating an inducement data packet according to the detection response data, and sending the inducement data packet to the host end;

[0080] It should be noted that the induced data packet refers to a data packet customized according to the detection response data, which is used to trigger a specific response from the host side, so as to return more asset information to the identification side through the response data. For example, the induced data packet contains induced instructions for asset information not included in the previously received detection response data or other response data, which can instruct the host side to return the asset information to the identification side.

[0081] It can be understood that the detection response data is analyzed to understand the behavior and characteristics of the host side, and specific induced data packets are generated based on this information. These data packets are designed to trigger specific responses from the host. By sending induced data packets, the detailed characteristics and behavior of the host side are further detected, providing richer data for asset identification.

[0082] Step S202, receiving response data returned by the host end in response to the induced data packet, and repeatedly adjusting and sending the induced data packet according to the response data until the depth of the data induction reaches the maximum and the induced response data is received.

[0083] It should be noted that the response data includes the host's feedback information on the induced data packet, including further asset information-related feature data of the host. The depth of data induction refers to the level of detail or level of information obtained through data induction, which can be determined by an interactive protocol or a pre-set asset information list.

[0084] It can be understood that the host side receives response data to the induced data packet, and changes the induced strategy according to the response data to readjust the content of the induced data packet, continuously optimize the induced data packet to obtain deeper information, and gradually probe the host side in depth by iteratively adjusting and sending the induced data packet until the maximum depth of data induction is reached to obtain the most detailed asset information possible.

[0085] In this implementation, an inducement data packet is first generated and sent to trigger the host's response, and then, based on the host's response data, the inducement data packet is continuously adjusted and optimized to gradually and deeply detect the host's characteristics and behaviors. The iterative process allows the system to gradually increase the depth of data induction until the maximum depth is reached, thereby obtaining the most detailed asset information possible. Not only does it improve the accuracy of asset identification, but through deep detection, it can reveal potential security vulnerabilities and configuration details on the host side, providing deeper insights for network security protection, thereby enabling comprehensive and in-depth identification of network assets, greatly enhancing network security management and risk assessment capabilities.

[0086] In a feasible implementation manner, after the step of receiving the response data returned by the host end in response to the induced data packet, the step further includes:

[0087] Step S2021, judging whether the data induction is successful according to the response data;

[0088] It should be noted that successful data induction means that the response data returned by the host contains the expected information, indicating that the induction has achieved its purpose. The specific judgment method can be to verify according to the data type, data ID and other related data fields in the response data, and to use regular expressions to check whether the response data contains the expected features or information. You can also set specific thresholds for the response data, such as response time, data packet size, etc. If the threshold is exceeded, the induction is considered successful.

[0089] It is understandable that the response data returned by the host to the induced data packet is analyzed to determine whether the expected behavior is successfully triggered or useful information is obtained, to verify the effect of data induction, and to decide whether further operation or adjustment is needed.

[0090] Step S2022: If the data induction is successful, the induced response data is obtained according to the response data.

[0091] It can be understood that after confirming the success of data induction, useful asset information is extracted from the response data to form induced response data, and key data obtained during the induction process are collected and organized to provide a basis for subsequent asset identification and analysis.

[0092] In this implementation, the host's response data to the induced data packet is first received and analyzed to determine whether the data induction is successful. Success means that the induced data packet successfully triggers the host's expected behavior that complies with the data induction, thereby obtaining useful response data. Key information of network asset identification information is extracted and sorted out from these response data to form induced response data, ensuring that data extraction and subsequent processing are performed only when data induction is successful, thereby improving the accuracy and efficiency of asset identification and more effectively identifying network assets.

[0093] In a feasible implementation manner, the method is applied to a host side, comprising steps S40 to S50:

[0094] Step S40, receiving a detection message sent by the identification terminal, and generating detection response data according to the detection message;

[0095] It can be understood that the host side receives detection messages from the identification side, which may be requests for detecting the host side's network behavior, service status or operating system characteristics, and generates detection response data to feed back to the identification side. The response data will be used by the identification side for further network asset identification.

[0096] Step S50, sending the detection response data to the identification end, and the identification end performs data induction on the host end according to the detection response data, and after obtaining the induced response data returned by the host end, performs asset identification on the host end according to the induced response data to obtain an asset identification result.

[0097] It can be understood that the host side sends the generated detection response data back to the identification side, and the identification side analyzes the data and induces data to the host side based on the analysis results. By sending data-induced response data, the identification side is allowed to perform deeper detection and identification to obtain more detailed asset information.

[0098] In this implementation, the host end first receives the detection message from the identification end, generates corresponding detection response data and sends it back to the identification end. The identification end performs data induction on the host end based on these data to induce the host end to return more detailed induced response data. Finally, the identification end uses these induced response data to perform asset identification on the host end and obtains asset identification results, so that the identification end can obtain necessary information from the host end for accurate asset identification, thereby providing detailed asset information for network security management and risk assessment.

[0099] This embodiment provides an asset identification method, which further refines the understanding of host-side asset information by sending and receiving responses through detection messages and combining data induction, more accurately identifies service and operating system types, and ultimately determines the types and characteristics of host-side network assets. It can achieve comprehensive identification of network assets and provide accurate asset information for network security management and risk assessment, thereby improving the pertinence and effectiveness of network security protection, solving the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improving the accuracy of asset identification.

[0100] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those of the above-mentioned first embodiment can be referred to the above introduction and will not be repeated later.

[0101] On this basis, please refer to Figure 2 , Figure 2 This is a flow chart of the second embodiment of the asset identification method of the present application. Specifically, the asset identification method is applied to a client and includes the following steps:

[0102] Step 1: Active detection startup: Initialize the active detector and prepare to send a detection message;

[0103] Step 2: Sending a probe message and receiving a response: Sending a probe message to the target server through an active probe, and receiving the probe response data responded by the target server;

[0104] Step 3: Application identification: Perform application identification based on the detection response data of the target server;

[0105] Step 4: Dynamic inducer search and judgment: According to the application identification result, the active detector searches for the corresponding dynamic inducer. If the dynamic inducer does not exist, the detection ends;

[0106] Step 5: Data induction demand analysis: The dynamic induction device intelligently analyzes whether data induction is needed based on the response data. If data induction is not needed, the detection ends;

[0107] Step 6: Select and send induced data: The dynamic inducer intelligently selects the induced data to be sent according to the response data, and sends the induced data to the target server through the dynamic inducer;

[0108] Step 7, receiving the induced response and loop judgment: the detector receives the induced response data responded by the server. According to the induced response data, the dynamic inducer determines whether it is necessary to continue the data induction. If the induction fails, it returns to step 6 to continue to select and send new induced data;

[0109] Step 8: Determine the induced depth: Determine whether the induced depth has reached the maximum. If the maximum depth is reached, stop sending induced data;

[0110] Step 9: Asset identification and result output: Based on the collected induced response data, the dynamic inducer performs asset identification and outputs the asset identification results.

[0111] By analyzing the interaction protocol between the client and the server and dynamically adjusting the interaction message according to the server's response, the server is gradually induced to output more banner information and other relevant data. By continuously sending specific data packets and analyzing the server's response, the client can obtain more detailed information about the server, thereby achieving more comprehensive and accurate asset identification. This dynamic induction method not only improves the accuracy of identification, but also enhances adaptability in complex network environments, effectively making up for the shortcomings of traditional methods.

[0112] In this embodiment, through multiple interactions, the content of the sent data packet is dynamically adjusted according to the response of the server to induce the server to output more valuable information and gradually obtain complete information of the server, rather than relying solely on the response of the first connection. It can adapt to the response modes of different servers in complex network environments and provide more accurate asset identification results, solving the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improving the accuracy of asset identification.

[0113] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the asset identification method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0114] This application also provides an asset identification device, please refer to Figure 3 , the asset identification device is applied to the identification end, including:

[0115] The detection module 10 is used to send a detection message to the host end to be identified, and the host end generates detection response data according to the detection message;

[0116] The induction module 20 is used to receive the detection response data sent by the host end, and perform data induction on the host end according to the detection response data to obtain the induction response data returned by the host end;

[0117] The identification module 30 is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

[0118] Optionally, the induction module 20 is further used for:

[0119] According to the detection response data, the host end is detected and identified to obtain a detection asset identification result;

[0120] If the detection asset identification result is identification failure, the following steps are executed: according to the detection response data, data induction is performed on the host end to obtain the induced response data returned by the host end.

[0121] Optionally, the induction module 20 is further used for:

[0122] Perform application identification according to the detection response data to obtain an application identification result;

[0123] The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: according to the detection response data, data induction is performed on the host side to obtain the induced response data returned by the host side.

[0124] Optionally, the induction module 20 is further used for:

[0125] Generate an inducement data packet according to the detection response data, and send the inducement data packet to the host end;

[0126] Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induction reaches the maximum and the induced response data is received.

[0127] Optionally, the induction module 20 is further used for:

[0128] According to the response data, judging whether the data induction is successful;

[0129] If the data induction is successful, the induced response data is obtained according to the response data.

[0130] Optionally, the asset identification device is applied to a host side and further includes:

[0131] The response module 40 is used to receive the detection message sent by the identification terminal and generate detection response data according to the detection message;

[0132] The sending module 50 is used to send the detection response data to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the identification end performs asset identification on the host end according to the induced response data to obtain an asset identification result.

[0133] The asset identification device provided by the present application adopts the asset identification method in the above embodiment, which can solve the technical problem that the relevant asset identification method is difficult to obtain complete asset information, affecting the accuracy of asset identification. Compared with the prior art, the beneficial effects of the asset identification device provided by the present application are the same as the beneficial effects of the asset identification method provided by the above embodiment, and the other technical features of the asset identification device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0134] The present application provides an asset identification device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the asset identification method in the above-mentioned first embodiment.

[0135] Reference below Figure 4 , which shows a schematic diagram of the structure of an asset identification device suitable for implementing the embodiment of the present application. The asset identification device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 4The asset identification device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0136] like Figure 4 As shown, the asset identification device may include a processing device 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the asset identification device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the asset identification device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an asset identification device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0137] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0138] The asset identification device provided by the present application adopts the asset identification method in the above embodiment, which can solve the technical problem that the relevant asset identification method is difficult to obtain complete asset information, affecting the accuracy of asset identification. Compared with the prior art, the beneficial effects of the asset identification device provided by the present application are the same as the beneficial effects of the asset identification method provided by the above embodiment, and the other technical features in the asset identification device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0139] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0140] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0141] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the asset identification method in the above-mentioned embodiment.

[0142] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0143] The computer-readable storage medium may be included in the asset identification device; or may exist independently without being assembled into the asset identification device.

[0144] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the asset identification device, the asset identification device: sends a detection message to the host end to be identified, and the host end generates detection response data according to the detection message; receives the detection response data sent by the host end, and according to the detection response data, performs data induction on the host end to obtain induced response data returned by the host end; performs asset identification on the host end according to the induced response data to obtain an asset identification result.

[0145] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0146] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0147] The modules involved in the embodiments of the present application may be implemented by software or hardware, wherein the name of the module does not limit the unit itself in some cases.

[0148] The readable storage medium provided in this application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned asset identification method, and can solve the technical problem that the related asset identification method is difficult to obtain complete asset information, which affects the accuracy of asset identification. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the asset identification method provided in the above-mentioned embodiment, and will not be repeated here.

[0149] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned asset identification method when executed by a processor.

[0150] The computer program product provided by the present application can solve the technical problem that the relevant asset identification method is difficult to obtain complete asset information, which affects the accuracy of asset identification. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the asset identification method provided by the above embodiment, which will not be repeated here.

[0151] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An asset identification method, characterized in that: The method is applied to the identification end, and includes: Sending a detection message to the host end to be identified, and the host end generating detection response data according to the detection message; Receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end; According to the induced response data, asset identification is performed on the host end to obtain an asset identification result.

2. The method according to claim 1, characterized in that: Before the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end, the step further includes: According to the detection response data, the host end is detected and identified to obtain a detection asset identification result; If the detection asset identification result is identification failure, the following steps are executed: according to the detection response data, data induction is performed on the host end to obtain the induced response data returned by the host end.

3. The method according to claim 1, characterized in that: Before the step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end, the step further includes: Perform application identification according to the detection response data to obtain an application identification result; The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: according to the detection response data, data induction is performed on the host side to obtain the induced response data returned by the host side.

4. The method according to claim 1, characterized in that: The step of performing data induction on the host end according to the detection response data to obtain the induced response data returned by the host end includes: Generate an inducement data packet according to the detection response data, and send the inducement data packet to the host end; Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induction reaches the maximum and the induced response data is received.

5. The method according to claim 4, characterized in that: After the step of receiving the response data returned by the host end in response to the induced data packet, the step further includes: According to the response data, judging whether the data induction is successful; If the data induction is successful, the induced response data is obtained according to the response data.

6. An asset identification method, characterized in that: The method is applied to the host side, comprising: Receiving a detection message sent by the identification terminal, and generating detection response data according to the detection message; The detection response data is sent to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the host end is subjected to asset identification according to the induced response data to obtain an asset identification result.

7. An asset identification device, characterized in that: The device comprises: A detection module, used for sending a detection message to a host end to be identified, and the host end generates detection response data according to the detection message; An induction module, used for receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end; The identification module is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

8. An asset identification device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the asset identification method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the asset identification method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the asset identification method according to any one of claims 1 to 6 are implemented.

Images