Asset identification method, device, equipment, storage medium and program product

Abstract

The present application discloses an asset identification method, apparatus, device, storage medium, and program product, relating to the field of network security technology. The asset identification method is applied to an identification end, comprising: sending a probe message to a host end to be identified, and the host end generating probe response data based on the probe message; receiving the probe response data sent by the host end, and performing data induction on the host end based on the probe response data to obtain induced response data returned by the host end; performing asset identification on the host end based on the induced response data to obtain an asset identification result. The present application implements asset identification based on data induction, solves the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improves the accuracy of asset identification.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to an asset identification method, apparatus, device, storage medium, and program product. Background Art

[0002] With the continuous development of the network and the growth of user network usage demand, the network scale continues to expand and the network space becomes more complex. It is necessary to use network asset identification technology to detect the network space and identify potential security risks in a timely manner.

[0003] Existing asset identification methods mainly rely on active detection and traffic analysis, and usually use the messages returned by the host when it first connects to the client for asset identification. However, in certain scenarios, some servers may not return sufficient identifiable asset information on the first connection, thus affecting the accuracy of asset identification.

[0004] The above content is only used to assist in understanding the technical solution of this application and does not constitute an admission that the above content is prior art. Summary of the Invention

[0005] The main purpose of this application is to provide an asset identification method, device, equipment, storage medium and program product, aiming to solve the technical problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification.

[0006] To achieve the above objectives, this application proposes an asset identification method, which is applied to the identification end and includes:

[0007] Sending a probe message to the host to be identified, and generating probe response data by the host according to the probe message;

[0008] Receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end;

[0009] According to the induced response data, asset identification is performed on the host end to obtain an asset identification result.

[0010] In one embodiment, before the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side, the step further includes:

[0011] Performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result;

[0012] If the detection asset identification result is identification failure, the following steps are executed: data induction is performed on the host end according to the detection response data to obtain the induction response data returned by the host end.

[0013] In one embodiment, before the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side, the step further includes:

[0014] Perform application identification based on the detection response data to obtain an application identification result;

[0015] The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: data induction is performed on the host side according to the detection response data, and the induction response data returned by the host side is obtained.

[0016] In one embodiment, the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side includes:

[0017] generating an inducement data packet according to the detection response data, and sending the inducement data packet to the host end;

[0018] Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induced reaches the maximum and the induced response data is received.

[0019] In one embodiment, after the step of receiving the response data returned by the host in response to the inducement data packet, the method further includes:

[0020] judging whether the data induction is successful according to the response data;

[0021] If the data induction is successful, the induced response data is obtained according to the response data.

[0022] In addition, to achieve the above objectives, the present application also proposes an asset identification method, which is applied to a host side and includes:

[0023] Receive a detection message sent by the identification terminal, and generate detection response data according to the detection message;

[0024] The detection response data is sent to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the host end is subjected to asset identification according to the induced response data to obtain an asset identification result.

[0025] In addition, to achieve the above-mentioned purpose, the present application also proposes an asset identification device, which includes:

[0026] A detection module is used to send a detection message to the host end to be identified, and the host end generates detection response data according to the detection message;

[0027] an induction module, configured to receive the probe response data sent by the host end, perform data induction on the host end according to the probe response data, and obtain induction response data returned by the host end;

[0028] The identification module is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

[0029] In addition, to achieve the above-mentioned purpose, the present application also proposes an asset identification device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the asset identification method described above.

[0030] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium. A computer program is stored on the storage medium, and when the computer program is executed by a processor, the steps of the asset identification method described above are implemented.

[0031] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, it implements the steps of the asset identification method described above.

[0032] The present application provides an asset identification method, which actively sends a detection message to a host side that needs to be identified. After receiving the detection response data generated by the host side according to the detection message, the host side is induced with data according to the detection response data, and then the asset identification is performed on the host side according to the induced response data returned by the host side to obtain the result of asset identification. The active detection and data induction of the host side that needs to be identified are combined to obtain sufficient response data for asset identification, thereby solving the problem that the relevant asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improving the accuracy of asset identification. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0034] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following is a brief introduction to the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0035] Figure 1 A flowchart of the first embodiment of the asset identification method of this application is provided;

[0036] Figure 2 A flowchart of the second embodiment of the asset identification method of this application is provided;

[0037] Figure 3 This is a schematic diagram of the module structure of the asset identification device according to an embodiment of the present application;

[0038] Figure 4 This is a schematic diagram of the device structure of the hardware operating environment involved in the asset identification method in the embodiment of the present application.

[0039] The purpose, features and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0040] It should be understood that the specific embodiments described herein are merely used to explain the technical solutions of the present application and are not intended to limit the present application.

[0041] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0042] The main solution of the embodiment of the present application is: sending a probe message to the host end to be identified, and the host end generates probe response data based on the probe message; receiving the probe response data sent by the host end, and according to the probe response data, performing data induction on the host end to obtain induced response data returned by the host end; according to the induced response data, performing asset identification on the host end to obtain an asset identification result.

[0043] Network asset identification technology aims to automatically identify, classify, and manage all assets within an organization's network using a variety of methods and tools. These assets include, but are not limited to, servers, routers, switches, workstations, mobile devices, and virtual machines. Existing asset identification methods primarily rely on active probing and traffic analysis, identifying as many asset attributes as possible through in-depth analysis of interaction protocols.

[0044] In active detection, asset identification typically extracts asset attribute data based on the context of the interaction protocol. This data primarily includes server banner information, error messages, and protocol interaction information. The server banner information refers to the first message pushed by the server after the client first connects to the server. This mechanism is effective in identifying basic server information in most cases.

[0045] However, in some specific scenarios, some servers do not send banner information during the initial connection, or the banner information is very limited, which significantly reduces the asset identification capability. In such cases, traditional asset identification methods have difficulty obtaining complete asset information, thus affecting the accuracy of asset identification.

[0046] Technical terms involved in this application:

[0047] Network asset identification: refers to the process of using technical means to obtain the device attribute information and application attribute information of the target host, mainly involving three aspects: device component identification, application component identification, and business type inference.

[0048] Active probing: A technology that identifies network assets by sending probes and analyzing responses. It sends information to the target host and analyzes its response to identify network asset information such as operating system type, open ports, and services.

[0049] Application identification: Identify and classify various application services in the network to understand the functions, usage, and security issues of each application service.

[0050] This application dynamically adjusts the content of the sent data packets according to the server's response through multiple interactions to induce the server to output more valuable information and gradually obtain complete information from the server, rather than relying solely on the response of the first connection. It can adapt to the response modes of different servers in complex network environments and provide more accurate asset identification results. It solves the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improves the accuracy of asset identification.

[0051] It should be noted that the execution subject of this embodiment may be a computing service device with data processing, network communication, and program execution capabilities, such as a tablet computer, personal computer, or mobile phone, or an electronic device or asset identification device capable of performing the aforementioned functions. This embodiment and the following embodiments will be described below using an asset identification device as an example.

[0052] Based on this, the embodiment of the present application provides an asset identification method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the asset identification method of the present application.

[0053] In this embodiment, the asset identification method is applied to the identification end, including steps S10 to S30:

[0054] Step S10, sending a probe message to the host to be identified, and the host generates probe response data according to the probe message;

[0055] It should be noted that probe messages are specially crafted network data packets used to trigger a response from the target host. These packets, such as those from protocols like ICMP, TCP, and UDP, are used to collect asset information for active detection. Probe response data refers to the target host's response to the probe message and contains characteristic information about the host, such as server banners, error messages, and protocol interaction information.

[0056] It is understandable that in order to detect the network behavior and response mode of the host and provide basic data for subsequent identification and analysis, by sending specific detection messages to the host side that requires asset identification targets, the host side response can be triggered, thereby obtaining the asset information of the host side.

[0057] Step S20, receiving the probe response data sent by the host end, and performing data induction on the host end according to the probe response data to obtain induction response data returned by the host end;

[0058] It should be noted that data induction refers to specific data or commands sent to the host to induce it to return more information. Induced response data refers to the host's response to the data induction, which may contain more detailed host asset information.

[0059] It can be understood that by analyzing the detection response data returned by actively detecting the host side, further data induction is performed on the host based on the content of the detection response data, and the response data returned by the host side data induction is obtained to obtain more comprehensive and detailed host side asset information and improve the accuracy of identification.

[0060] Step S30: performing asset identification on the host end according to the induced response data to obtain an asset identification result.

[0061] It should be noted that asset identification refers to determining the type and characteristics of network assets, such as operating systems, services, and applications. The asset identification results are the output of the identification process, including detailed information and classification of the assets.

[0062] It can be understood that in order to finally determine the network asset type of the host side and provide a basis for network security management and risk assessment, the response data returned by the host side is analyzed based on the data induction, the asset type and characteristics of the host side are identified, and the asset identification result is obtained.

[0063] In a feasible implementation manner, before the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side, the step further includes:

[0064] Step S21, performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result;

[0065] It's important to note that asset identification refers to the preliminary asset identification process based on probe response data. This refers to the asset identification process based on the response data containing asset information obtained from active probing of the target host. The asset identification result is the preliminary identification result of active probing and may include information such as the asset type and version.

[0066] It is understandable that after receiving the detection response data from the host side, these data are used for preliminary asset identification to try to determine the type and characteristics of the asset in order to quickly identify the host asset. If the identification is successful, no further data induction steps are required, thereby improving efficiency.

[0067] Step S22: If the detection asset identification result is identification failure, execute the following steps: according to the detection response data, perform data induction on the host end to obtain the induction response data returned by the host end.

[0068] It is understandable that when the initial identification fails, more detailed data is needed for a deeper asset identification, and the detection response data is used to induce the host side to return response data information through data induction to improve the accuracy of asset identification.

[0069] In this implementation, rapid asset identification is first performed using probe response data. If successful, the asset identification result is directly obtained, improving identification efficiency. If identification fails, data induction is used to obtain more response data for deeper analysis and identification. This approach improves both accuracy and depth while maintaining identification efficiency. This method, combined with preliminary active probing for network asset identification, allows for more comprehensive identification of network assets, providing more accurate asset information for network security management and risk assessment, thereby enhancing the relevance and effectiveness of network security protection.

[0070] In a feasible implementation manner, before the step of performing data induction on the host side according to the detection response data and obtaining the induction response data returned by the host side, the step further includes:

[0071] Step S23, performing application identification based on the detection response data to obtain an application identification result;

[0072] It should be noted that application identification refers to the process of identifying application services and application components running on the host and their characteristics. The application identification result is the output of the application identification process, including information such as the application type and version.

[0073] It is understandable that after receiving the detection response data from the host side, the type and version of the application running on the host are identified by analyzing the features in this data, and the network asset features that meet the requirements on the host side are further understood, providing a basis for subsequent asset identification.

[0074] Step S24, searching for the dynamic inducer of the host side according to the application identification result, so as to execute the steps through the dynamic inducer: performing data induction on the host side according to the detection response data, and obtaining the induction response data returned by the host side.

[0075] It should be noted that a dynamic inducer is a tool that is dynamically generated or selected based on application identification results and is used to send specific data packets to obtain more response data. Data inducement refers to the process of sending specific data packets to induce the host to return more information.

[0076] It is understandable that based on the application identification results, specific dynamic inducers are selected or generated. These inducers are able to send specific inducement data packets for specific applications to induce the host to return more response data. By performing data induction through dynamic inducers, the detailed characteristics of the host can be obtained more accurately, thereby improving the accuracy of asset identification.

[0077] In this implementation, application identification is first used to analyze the host's probe response data to identify the applications running on the host. If successful, a corresponding dynamic inducer is searched or generated based on the characteristics of these applications. This dynamic inducer then sends specific data packets to the host to induce it to return more response data, thereby enabling deeper asset identification. By combining application identification and dynamic inducement, the accuracy and depth of asset identification can be improved while maintaining identification efficiency.

[0078] In a feasible implementation manner, the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side includes:

[0079] Step S201, generating an inducement data packet according to the detection response data, and sending the inducement data packet to the host end;

[0080] It should be noted that the induced data packet refers to a data packet customized according to the detection response data, which is used to trigger a specific response from the host side, thereby returning more asset information to the identification side through the response data. For example, the induced data packet contains induced instructions for asset information not included in the previously received detection response data or other response data, which can instruct the host side to return these asset information to the identification side.

[0081] It can be understood that the detection response data is analyzed to understand the behavior and characteristics of the host side, and specific induced data packets are generated based on this information. These data packets are designed to trigger specific responses from the host. By sending induced data packets, the detailed characteristics and behavior of the host side are further detected, providing richer data for asset identification.

[0082] Step S202, receiving the response data returned by the host end in response to the induced data packet, and repeatedly adjusting and sending the induced data packet according to the response data until the depth of the data induced reaches the maximum and the induced response data is received.

[0083] It should be noted that the response data includes the host's feedback on the induced data packet, including further asset-related feature data from the host. Data induced depth refers to the level of detail or level of information obtained through data induced data, which can be determined through an interactive protocol or a pre-defined asset information list.

[0084] It can be understood that the host side receives response data to the induced data packet, and changes the induced strategy according to the response data to readjust the content of the induced data packet, continuously optimizes the induced data packet to obtain deeper information, and gradually probes the host side in depth by iteratively adjusting and sending the induced data packet until the maximum depth of data induction is reached to obtain the most detailed asset information possible.

[0085] In this implementation, a decoy data packet is first generated and sent to trigger a host response. Based on the host's response data, the decoy data packet is then continuously adjusted and optimized to progressively deepen the host's characteristics and behavior. This iterative process allows the system to gradually increase the depth of data decoy until it reaches the maximum depth, thereby acquiring the most detailed asset information possible. This not only improves the accuracy of asset identification, but also reveals potential security vulnerabilities and configuration details on the host side through deep probing, providing deeper insights for network security protection. This enables comprehensive and in-depth identification of network assets, significantly enhancing network security management and risk assessment capabilities.

[0086] In a feasible implementation manner, after the step of receiving the response data returned by the host in response to the induced data packet, the step further includes:

[0087] Step S2021, judging whether the data induction is successful based on the response data;

[0088] It should be noted that successful data induction means that the response data returned by the host contains the expected information, indicating that the induction has achieved its purpose. Specific methods for determining this include verifying the response data based on relevant data fields such as the data type and data ID. Regular expressions can be used to check whether the response data contains the expected characteristics or information. Specific thresholds for the response data, such as response time and packet size, can also be set. If these thresholds are exceeded, the induction is considered successful.

[0089] It is understandable that the response data returned by the host to the induced data packet is analyzed to determine whether the expected behavior is successfully triggered or useful information is obtained, to verify the effect of data induction, and to decide whether further operation or adjustment is required.

[0090] Step S2022: If the data induction is successful, the induced response data is obtained according to the response data.

[0091] It can be understood that after confirming the success of data induction, useful asset information is extracted from the response data to form induced response data, and key data obtained during the induction process are collected and organized to provide a basis for subsequent asset identification and analysis.

[0092] In this embodiment, the host's response data to the induced data packet is first received and analyzed to determine whether the data induction is successful. Success means that the induced data packet successfully triggers the host's expected behavior that complies with the data induction, thereby obtaining useful response data. Key information of network asset identification information is extracted and sorted out from these response data to form induced response data, ensuring that data extraction and subsequent processing are performed only when data induction is successful, thereby improving the accuracy and efficiency of asset identification and more effectively identifying network assets.

[0093] In a feasible implementation manner, the method is applied to a host side, comprising steps S40 to S50:

[0094] Step S40: receiving a probe message sent by the identification terminal, and generating probe response data according to the probe message;

[0095] It can be understood that the host side receives probe messages from the identification side, which may be requests for detecting the host side's network behavior, service status or operating system characteristics, and generates probe response data to feed back to the identification side. The response data will be used by the identification side for further network asset identification.

[0096] In step S50, the detection response data is sent to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the host end is subjected to asset identification according to the induced response data to obtain an asset identification result.

[0097] It can be understood that the host side sends the generated detection response data back to the identification side, and the identification side analyzes this data and induces data on the host side based on the analysis results. By sending data-induced response data, the identification side is allowed to perform deeper detection and identification to obtain more detailed asset information.

[0098] In this embodiment, the host side first receives the detection message from the identification side, generates corresponding detection response data and sends it back to the identification side. The identification side performs data induction on the host side based on these data to induce the host side to return more detailed induced response data. Finally, the identification side uses these induced response data to perform asset identification on the host side and obtains asset identification results, so that the identification side can obtain necessary information from the host side for accurate asset identification, thereby providing detailed asset information for network security management and risk assessment.

[0099] This embodiment provides an asset identification method, which further refines the understanding of host-side asset information by sending and receiving responses through detection messages, combined with data induction, more accurately identifies service and operating system types, and ultimately determines the type and characteristics of host-side network assets. It can achieve comprehensive identification of network assets, provide accurate asset information for network security management and risk assessment, thereby improving the pertinence and effectiveness of network security protection, and solves the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, thereby improving the accuracy of asset identification.

[0100] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned first embodiment can be referred to the above introduction and will not be repeated later.

[0101] On this basis, please refer to Figure 2 , Figure 2 This is a flow chart of the second embodiment of the asset identification method of the present application. Specifically, the asset identification method is applied to a client and includes the following steps:

[0102] Step 1: Active detection startup: Initialize the active detector and prepare to send a detection message;

[0103] Step 2: Sending a probe message and receiving a response: Sending a probe message to the target server through an active probe, and receiving the probe response data from the target server;

[0104] Step 3: Application identification: Perform application identification based on the target server's probe response data;

[0105] Step 4: Dynamic Inducer Search and Judgment: Based on the application identification results, the active detector searches for the corresponding dynamic inducer. If the dynamic inducer does not exist, the detection ends.

[0106] Step 5: Data induction demand analysis: The dynamic induction device intelligently analyzes whether data induction is needed based on the response data. If data induction is not needed, the detection ends;

[0107] Step 6: Select and send the induced data: The dynamic inducer intelligently selects the induced data to be sent according to the response data, and sends the induced data to the target server through the dynamic inducer;

[0108] Step 7: Receiving the induced response and loop judgment: The detector receives the induced response data from the server. Based on the induced response data, the dynamic inducer determines whether it is necessary to continue the data induction. If the induction fails, it returns to step 6 to continue selecting and sending new induced data.

[0109] Step 8: Determine the induced depth: Determine whether the induced depth has reached the maximum. If it has reached the maximum depth, stop sending induced data.

[0110] Step 9: Asset identification and result output: Based on the collected induction response data, the dynamic inducer performs asset identification and outputs the asset identification results.

[0111] By analyzing the interaction protocol between the client and server and dynamically adjusting the exchange messages based on the server's response, the system gradually induces the server to output more banner information and other relevant data. By continuously sending specific data packets and analyzing the server's responses, the client can obtain more detailed information about the server, achieving more comprehensive and accurate asset identification. This dynamic induction method not only improves identification accuracy but also enhances adaptability in complex network environments, effectively addressing the shortcomings of traditional methods.

[0112] In this embodiment, through multiple interactions, the content of the sent data packet is dynamically adjusted according to the response of the server to induce the server to output more valuable information and gradually obtain complete information of the server, rather than relying solely on the response of the first connection. It can adapt to the response modes of different servers in complex network environments and provide more accurate asset identification results. It solves the problem that related asset identification methods are difficult to obtain complete asset information, affecting the accuracy of asset identification, and improves the accuracy of asset identification.

[0113] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the asset identification method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0114] This application also provides an asset identification device, please refer to Figure 3 The asset identification device is applied to the identification end and includes:

[0115] The detection module 10 is used to send a detection message to the host end to be identified, and the host end generates detection response data according to the detection message;

[0116] The induction module 20 is configured to receive the probe response data sent by the host end, perform data induction on the host end according to the probe response data, and obtain induction response data returned by the host end;

[0117] The identification module 30 is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

[0118] Optionally, the induction module 20 is further configured to:

[0119] Performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result;

[0120] If the detection asset identification result is identification failure, the following steps are executed: data induction is performed on the host end according to the detection response data to obtain the induction response data returned by the host end.

[0121] Optionally, the induction module 20 is further configured to:

[0122] Perform application identification based on the detection response data to obtain an application identification result;

[0123] The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: data induction is performed on the host side according to the detection response data, and the induction response data returned by the host side is obtained.

[0124] Optionally, the induction module 20 is further configured to:

[0125] generating an inducement data packet according to the detection response data, and sending the inducement data packet to the host end;

[0126] Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induced reaches the maximum and the induced response data is received.

[0127] Optionally, the induction module 20 is further configured to:

[0128] judging whether the data induction is successful according to the response data;

[0129] If the data induction is successful, the induced response data is obtained according to the response data.

[0130] Optionally, the asset identification device is applied to a host and further includes:

[0131] The response module 40 is configured to receive a detection message sent by the identification terminal and generate detection response data according to the detection message;

[0132] The sending module 50 is used to send the detection response data to the identification end, and the identification end performs data induction on the host end according to the detection response data. After obtaining the induced response data returned by the host end, the host end is subjected to asset identification according to the induced response data to obtain an asset identification result.

[0133] The asset identification device provided in this application, utilizing the asset identification method described in the aforementioned embodiments, can address the technical issue that related asset identification methods struggle to obtain complete asset information, thus impacting the accuracy of asset identification. Compared to the prior art, the asset identification device provided in this application achieves the same beneficial effects as the asset identification method described in the aforementioned embodiments. Other technical features of the asset identification device are the same as those disclosed in the aforementioned embodiments and are not further elaborated here.

[0134] The present application provides an asset identification device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the asset identification method in the above-mentioned first embodiment.

[0135] Reference below Figure 4 , which shows a schematic diagram of the structure of an asset identification device suitable for implementing embodiments of the present application. The asset identification device in the embodiments of the present application may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), and in-vehicle terminals (e.g., in-vehicle navigation terminals), as well as fixed terminals such as digital TVs and desktop computers. Figure 4The asset identification device shown is merely an example and should not limit the functions and scope of use of the embodiments of the present application.

[0136] like Figure 4 As shown, the asset identification device may include a processing device 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes based on programs stored in a read-only memory (ROM) 1002 or programs loaded from a storage device 1003 into a random access memory (RAM) 1004. RAM 1004 also stores various programs and data required for the operation of the asset identification device. Processing device 1001, ROM 1002, and RAM 1004 are interconnected via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to I / O interface 1006: input devices 1007 including, for example, a touchscreen, touchpad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage device 1003 including, for example, a magnetic tape, hard disk, etc.; and communication devices 1009. Communication device 1009 can allow the asset identification device to communicate with other devices wirelessly or wired to exchange data. Although the figure shows an asset identification device with various systems, it should be understood that it is not required to implement or have all of the systems shown. More or fewer systems may be implemented or provided instead.

[0137] In particular, according to the embodiments disclosed in the present application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, the embodiments disclosed in the present application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program comprising program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0138] The asset identification device provided in this application, utilizing the asset identification method described in the aforementioned embodiment, can address the technical issue that related asset identification methods struggle to obtain complete asset information, thus impacting the accuracy of asset identification. Compared to the prior art, the asset identification device provided in this application achieves the same beneficial effects as the asset identification method described in the aforementioned embodiment. Other technical features of this asset identification device are the same as those disclosed in the aforementioned embodiment and are not further elaborated here.

[0139] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0140] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

[0141] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer program) stored thereon, and the computer-readable program instructions are used to execute the asset identification method in the above embodiment.

[0142] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared or semiconductor systems, systems or devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0143] The computer-readable storage medium may be included in the asset identification device, or may exist independently without being assembled into the asset identification device.

[0144] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the asset identification device, the asset identification device enables the asset identification device to: send a probe message to the host end to be identified, and the host end generates probe response data based on the probe message; receive the probe response data sent by the host end, and according to the probe response data, perform data induction on the host end to obtain induced response data returned by the host end; according to the induced response data, perform asset identification on the host end to obtain an asset identification result.

[0145] Computer program code for performing the operations of the present application may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages such as Java, Smalltalk, C++, and conventional procedural programming languages such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on the remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0146] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, program segment or part of code, and the module, program segment or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, as well as the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or can be implemented using a combination of dedicated hardware and computer instructions.

[0147] The modules described in the embodiments of the present application may be implemented in software or hardware, wherein the name of a module does not necessarily limit the unit itself.

[0148] The computer-readable storage medium provided in this application stores computer-readable program instructions (i.e., a computer program) for executing the aforementioned asset identification method. This computer-readable storage medium can address the technical issue that related asset identification methods struggle to obtain complete asset information, thus affecting the accuracy of asset identification. Compared to the prior art, the beneficial effects of the computer-readable storage medium provided in this application are similar to those of the asset identification method provided in the aforementioned embodiments and are not further elaborated here.

[0149] The present application also provides a computer program product, comprising a computer program, which implements the steps of the above-mentioned asset identification method when executed by a processor.

[0150] The computer program product provided in this application can address the technical issue that related asset identification methods struggle to obtain complete asset information, thus affecting the accuracy of asset identification. Compared to the prior art, the beneficial effects of the computer program product provided in this application are similar to those of the asset identification method provided in the aforementioned embodiments and are not further elaborated here.

[0151] The above description is only part of the embodiments of the present application and does not limit the patent scope of the present application. All equivalent structural transformations made by using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An asset identification method, characterized in that: The method is applied to the identification terminal and includes: Sending a probe message to the host to be identified, and generating probe response data by the host according to the probe message; Receiving the detection response data sent by the host end, and performing data induction on the host end according to the detection response data to obtain the induction response data returned by the host end; Wherein, before the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side, the method further includes: Performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result; If the detection asset identification result is an identification failure, the following steps are performed: according to the detection response data, data induction is performed on the host end to obtain induction response data returned by the host end; The step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side includes: Generate an inducement data packet according to the detection response data, and send the inducement data packet to the host end, wherein the inducement data packet includes inducement instructions for asset information not included in the previously received detection response data or other response data; receiving response data returned by the host end in response to the induced data packet, and repeatedly adjusting and sending the induced data packet according to the response data until the depth of the data induced reaches a maximum and the induced response data is received; According to the induced response data, asset identification is performed on the host end to obtain an asset identification result.

2. The method according to claim 1, wherein: Before the step of performing data induction on the host side according to the detection response data to obtain the induction response data returned by the host side, the method further includes: Perform application identification based on the detection response data to obtain an application identification result; The dynamic inducer of the host side is searched according to the application identification result, so as to execute the steps through the dynamic inducer: data induction is performed on the host side according to the detection response data, and the induction response data returned by the host side is obtained.

3. The method according to claim 1, wherein: After the step of receiving the response data returned by the host end in response to the induced data packet, the method further includes: judging whether the data induction is successful according to the response data; If the data induction is successful, the induced response data is obtained according to the response data.

4. An asset identification method, characterized in that: The method is applied to the host side and includes: Receive a detection message sent by the identification terminal, and generate detection response data according to the detection message; The detection response data is sent to the identification end, and the identification end performs data induction on the host end according to the detection response data, obtains the induction response data returned by the host end, and then performs asset identification on the host end according to the induction response data to obtain an asset identification result; The identification terminal is further used for: Performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result; If the detection asset identification result is an identification failure, the following steps are performed: according to the detection response data, data induction is performed on the host end to obtain induction response data returned by the host end; The identification terminal is further used for: Generate an inducement data packet according to the probe response data, and send the inducement data packet to the host end, wherein the inducement data packet includes inducement instructions for asset information not included in the previously received probe response data or other response data; Receive response data returned by the host end in response to the induced data packet, and repeatedly adjust and send the induced data packet according to the response data until the depth of the data induced reaches the maximum and the induced response data is received.

5. An asset identification device, characterized in that: The device comprises: A detection module is used to send a detection message to the host end to be identified, and the host end generates detection response data according to the detection message; an induction module, configured to receive the probe response data sent by the host end, perform data induction on the host end according to the probe response data, and obtain induction response data returned by the host end; Wherein, the induction module is further used for: Performing detection asset identification on the host end according to the detection response data to obtain a detection asset identification result; If the detection asset identification result is an identification failure, the following steps are performed: according to the detection response data, data induction is performed on the host end to obtain induction response data returned by the host end; Wherein, the induction module is further used for: Generate an inducement data packet according to the probe response data, and send the inducement data packet to the host end, wherein the inducement data packet includes inducement instructions for asset information not included in the previously received probe response data or other response data; receiving response data returned by the host end in response to the induced data packet, and repeatedly adjusting and sending the induced data packet according to the response data until the depth of the data induced reaches a maximum and the induced response data is received; The identification module is used to perform asset identification on the host end according to the induced response data to obtain an asset identification result.

6. An asset identification device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the asset identification method according to any one of claims 1 to 4.

7. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the asset identification method according to any one of claims 1 to 4 are implemented.

8. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the asset identification method according to any one of claims 1 to 4 are implemented.

Images