Device fingerprint update method, apparatus, electronic device and storage medium

Abstract

This application provides a device fingerprint update method, apparatus, electronic device, and storage medium. It includes: generating first device fingerprint information based on first user agent information when a user logs into an email account; determining whether the first device fingerprint information is in a device fingerprint database; if the first device fingerprint information is not in the database, performing a recall operation of the device fingerprint database, the recall operation including: determining whether the first device fingerprint information meets device fingerprint update conditions based on the user agent information and the first user agent information; if the first device fingerprint information meets the device fingerprint update conditions, updating the stored second device fingerprint information to the first device fingerprint information, enabling the user to log into the email account, and verifying the user's device fingerprint information upon the next login using the updated device fingerprint database. This application can improve email security and reduce the erroneous blocking of legitimate users.

Description

Technical Field

[0001] This application relates to the field of email security technology, and in particular to a device fingerprint update method, apparatus, electronic device, and storage medium. Background Technology

[0002] With the widespread application of internet technology, email has become an important communication tool for individuals and businesses. Email account security is crucial for information protection. Therefore, email service providers typically employ device fingerprinting technology to identify login devices and enhance account security. When a user logs into their email account, the system obtains the user's UserAgent (UA) and generates a corresponding device fingerprint based on the UA. By comparing the device fingerprint, it can determine whether the login device is a frequently used device, thereby issuing warnings and preventing abnormal login behavior and strengthening account protection.

[0003] While device fingerprints generated based on the device's User Agent (UA) have played a role in enhancing email security, this method has certain limitations. Sometimes, a user's device system or applications undergo upgrades, causing changes to the UA and affecting the original device fingerprint. If the device fingerprint is lost or mismatched, it may incorrectly identify legitimate user login behavior as abnormal, impacting the user experience. Summary of the Invention

[0004] The purpose of this application is to provide a device fingerprint update method, apparatus, electronic device, and storage medium to improve the overall security of email and reduce the false blocking of legitimate users. The specific technical solution is as follows:

[0005] In a first aspect of this application, a device fingerprint update method is provided, comprising:

[0006] Based on the first user agent information obtained when the user logs into the email, generate the first device fingerprint information;

[0007] Determine whether the first device fingerprint information is in the pre-stored user's device fingerprint information database;

[0008] If it is determined that the first device fingerprint information is not in the device fingerprint information database, a recall operation of the device fingerprint information database is performed. The recall operation includes: determining whether the first device fingerprint information meets the device fingerprint update conditions based on the user's pre-stored user agent information and the first user agent information; if it is determined that the first device fingerprint information meets the device fingerprint update conditions, updating the second device fingerprint information already stored in the device fingerprint database to the first device fingerprint information, so that the user can log in to the email, and verifying the user's device fingerprint information when logging in to the email next time according to the updated device fingerprint database;

[0009] Wherein, the second device fingerprint information is device fingerprint information generated based on the second user agent information, and the second user agent information is user agent information that matches the first user agent information in the user agent information.

[0010] In a second aspect of this application, a device fingerprint update apparatus is provided, comprising:

[0011] The first fingerprint information generation module is used to generate first device fingerprint information based on the first user agent information obtained when the user logs in to the email address.

[0012] The first fingerprint information determination module is used to determine whether the first device fingerprint information is in the pre-stored device fingerprint information database of the user;

[0013] The recall operation execution module is used to perform a recall operation of the device fingerprint information database when it is determined that the first device fingerprint information is not in the device fingerprint information database. The recall operation includes: determining whether the first device fingerprint information meets the device fingerprint update conditions based on the user agent information and the first user agent information that are pre-stored in the database; if it is determined that the first device fingerprint information meets the device fingerprint update conditions, updating the second device fingerprint information already stored in the device fingerprint database to the first device fingerprint information, so that the user can log in to the email, and verifying the device fingerprint information of the user when logging in to the email next time according to the updated device fingerprint database.

[0014] Wherein, the second device fingerprint information is device fingerprint information generated based on the second user agent information, and the second user agent information is user agent information that matches the first user agent information in the user agent information.

[0015] In another aspect of this application, an electronic device is also provided, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0016] Memory, used to store computer programs;

[0017] A processor, when executing a program stored in memory, implements any of the methods described above.

[0018] In another aspect of this application, a computer-readable storage medium is also provided, wherein instructions are stored therein, which, when executed on a computer, cause the computer to perform any of the device fingerprint update methods described above.

[0019] In another aspect of this application, a computer program product containing instructions is also provided, wherein a computer program is stored thereon, characterized in that, when the computer program is run on a computer, it causes the computer to perform any of the methods described above.

[0020] The solution provided in this application generates a first device fingerprint based on the first user agent information obtained when a user logs into their email account. It then determines whether the first device fingerprint is in a pre-stored user device fingerprint database. If the first device fingerprint is not in the database, a recall operation is performed. This recall operation includes determining whether the first device fingerprint meets the device fingerprint update conditions based on the pre-stored user agent information and the first user agent information. If the first device fingerprint meets the update conditions, the second device fingerprint already stored in the database is updated to the first device fingerprint. The second device fingerprint is generated based on the second user agent information, which is the user agent information that matches the first user agent information. This application, by utilizing the user's existing user agent information when a new device fingerprint is not in the user's device fingerprint database, automatically recalls the user's device fingerprint. Even if the user agent information changes after an email user's device upgrade, the intelligent recall mechanism maintains the consistency and availability of the device fingerprint, improving the overall security of the email account and reducing the possibility of erroneously blocking legitimate users. Attached Figure Description

[0021] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below.

[0022] Figure 1A flowchart illustrating the steps of a device fingerprint update method provided in this application embodiment;

[0023] Figure 2 A flowchart illustrating the steps of a method for determining device fingerprint update conditions provided in this application embodiment;

[0024] Figure 3 A flowchart illustrating the steps of another method for determining device fingerprint update conditions provided in this application embodiment;

[0025] Figure 4 A flowchart illustrating the steps of another method for determining device fingerprint update conditions provided in this application embodiment;

[0026] Figure 5 A flowchart illustrating the steps of a method for obtaining comparison results provided in this application embodiment;

[0027] Figure 6 A flowchart illustrating the steps of a method for generating fingerprint information for a first device, as provided in an embodiment of this application;

[0028] Figure 7 A flowchart illustrating the steps of a first device fingerprint processing method provided in this application embodiment;

[0029] Figure 8 A schematic diagram illustrating an abnormal email device login detection process provided in an embodiment of this application;

[0030] Figure 9 A schematic diagram illustrating an automatic fingerprint retrieval process for an email device, provided as an embodiment of this application;

[0031] Figure 10 This is a schematic diagram of the structure of a device fingerprint update device provided in an embodiment of this application;

[0032] Figure 11 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0033] The technical solutions in the embodiments of this application will now be described with reference to the accompanying drawings.

[0034] Figure 1 A flowchart illustrating the steps of a device fingerprint update method provided in this application embodiment is shown below. Figure 1 As shown, the device fingerprint update method may include steps 101, 102 and 103.

[0035] Step 101: Generate the first device fingerprint information based on the first user agent information obtained when the user logs in to the email address.

[0036] The embodiments of this application can be applied to scenarios where the stored user UA information is used to automatically recall email device fingerprints when the user UA changes.

[0037] The embodiments of this application can be applied to email servers, that is, the executing entity is an email server.

[0038] User agent information (UA) is a string sent in an HTTP request that informs the server about the device brand / model, browser type, version, operating system, email application name / version number, and other information that initiated the request.

[0039] When a user logs into their email account, the browser on the user's electronic device can send user agent information, i.e., the first user agent information in this embodiment, to the email server. At this time, the email server can obtain the first user agent information when the user logs into their email account.

[0040] After obtaining the first user agent information when a user logs into their email account, a first device fingerprint can be generated based on this first user agent information. This first device fingerprint can be used to uniquely identify the device used by the user to log into their email account. In a specific implementation, the first user agent information can be parsed to obtain the device model, operating system name, and email application name of the electronic device used by the user to log into their email account, and the first device fingerprint information can be generated based on the device model, operating system name, and email application name. This implementation process will be discussed in the following embodiments. Figure 6 A detailed description will not be repeated here.

[0041] After generating the first device fingerprint information based on the first user agent information obtained when the user logs in to the email, step 102 is executed.

[0042] Step 102: Determine whether the first device fingerprint information is in the user's pre-stored device fingerprint information database.

[0043] A device fingerprint database refers to a database pre-stored within an email server to store users' device fingerprint information. The device fingerprint information in this database is obtained by parsing user-agent information (such as user-agent strings). User-agent information is automatically sent to the server by the device when the user previously accessed the email service through a browser or other client software on their electronic device.

[0044] Within the email server, there can be corresponding device fingerprint information databases for different users. For example, users can include: User 1, User 2, and User 3. Then, the email server can set up device fingerprint information databases for User 1, User 2, and User 3, etc.

[0045] The user's device fingerprint information database pre-stores device fingerprint information generated by different user agent information when the user logs into email using different electronic devices and / or different application versions in the past.

[0046] It is understood that the above examples are merely examples listed to better understand the technical solutions of the embodiments of this application, and are not intended to be the only limitation on the embodiments.

[0047] After generating the first device fingerprint information based on the first user agent information obtained when the user logs into their email account, it can be determined whether the first device fingerprint information is in the user's pre-stored device fingerprint information database. Specifically, the user's device fingerprint information database can be queried from the email server based on the user's user identifier (such as the username information used by the user when logging into their email account), and the first device fingerprint information can be compared one by one with the device fingerprint information in the user's device fingerprint information database to determine whether the first device fingerprint information is in the user's device fingerprint information database.

[0048] If it is determined that the first device fingerprint information is in the user's device fingerprint information database, it indicates that the first device fingerprint information is the device fingerprint information frequently used by the user when logging into email. In this case, the expiration time of the first device fingerprint information in the device fingerprint information database can be extended. In this embodiment, the method to extend the expiration time of the first device fingerprint information can be: obtaining the pre-set storage duration of the first device fingerprint information and the current time when the user logs into email using the first device fingerprint information. In this case, after extending the expiration time, the expiration time of the first device fingerprint information is equal to the sum of the current time and the storage duration. For example, if the storage duration is 30 days and the current time is September 21, 2024, 13:00, after extending the expiration time of the first device fingerprint information, the expiration time of the first device fingerprint information will be October 21, 2024, 13:00, etc.

[0049] It is understood that the above examples are merely examples listed to better understand the technical solutions of the embodiments of this application, and are not intended to be the only limitation on the embodiments.

[0050] If it is determined that the fingerprint information of the first device is not in the user's device fingerprint information database, then step 103 is executed.

[0051] Step 103: If it is determined that the first device fingerprint information is not in the device fingerprint information database, a recall operation of the device fingerprint information database is performed. The recall operation includes: determining whether the first device fingerprint information meets the device fingerprint update conditions based on the user agent information and the first user agent information that are pre-stored in the database; if it is determined that the first device fingerprint information meets the device fingerprint update conditions, updating the second device fingerprint information stored in the device fingerprint database to the first device fingerprint information, so that the user can log in to the email, and verifying the device fingerprint information of the user when logging in to the email next time according to the updated device fingerprint database.

[0052] The user agent information pre-stored in the email server may include: device information of the electronic device used by the user when logging into the email (such as device model, operating system name, etc.), and email application information (such as email application name, application version number, etc.).

[0053] Device fingerprint update conditions refer to pre-set conditions used to determine whether the device fingerprint generated when a user logs into their email account meets the conditions for updating the device fingerprint in the user's device fingerprint information database.

[0054] If it is determined that the first device fingerprint information is not in the user's device fingerprint information database, a recall operation of the device fingerprint information database can be performed. That is, when the first device fingerprint information meets the recall conditions, the first device fingerprint information replaces the corresponding device fingerprint information in the device fingerprint information database, thus completing the recall of the device fingerprint information.

[0055] In this example, the retrieval operation of the device fingerprint information database may include: determining whether the first device fingerprint information meets the device fingerprint update conditions based on pre-stored user agent information and first user agent information. If it is determined that the first device fingerprint information meets the device fingerprint update conditions, the second device fingerprint information already stored in the device fingerprint database can be updated to the first device fingerprint information, enabling the user to log in to the email account, and verifying the user's device fingerprint information upon the next login to the email account based on the updated device fingerprint database. In this embodiment, the device fingerprint information in the device fingerprint information database can be compared one-to-one with the first device fingerprint information to identify the second device fingerprint that matches the first device fingerprint information.

[0056] The second device fingerprint information is generated based on the second user agent information, which is the user agent information that matches the first user agent information from the stored user agent information. In this example, matching the second user agent information with the first user agent information means that the device model, operating system name, and email application name in the second user agent information are all the same as those in the first user agent information, and the application version number in the first user agent information is greater than the application version number in the stored user agent information.

[0057] When the first device fingerprint information meets the device fingerprint update conditions, it means that the user logged into their email account using an electronic device that had previously been used to log in, but the application version number was different. In this case, the second device fingerprint information in the device fingerprint database can be updated to the first device fingerprint information. Specifically, the first device fingerprint information can be written into the user's device fingerprint database to replace the second device fingerprint information already in the database.

[0058] In specific implementation, the system can determine whether the first device fingerprint information meets the device fingerprint update conditions based on the device model and operating system name of the electronic device used by the user to log in to the email account, as well as the email application name and version number, and the existing user's corresponding device and application information. This implementation process will be combined with the following embodiments. Figure 2 A detailed description will not be repeated here.

[0059] If the first device fingerprint information does not meet the device fingerprint update conditions, it indicates that the user is currently using a new device to log in to the email account. In this case, a device login alert can be sent to the user, and the device fingerprint can be stored, or the IP address and username can be added to a blacklist based on the user's actions. This implementation process will be discussed in the following embodiments. Figure 7 A detailed description will not be repeated here.

[0060] This application embodiment determines whether a new device fingerprint meets the recall conditions (i.e., the matching conditions between the second user agent information and the first user agent information at the time of the user's current login) when the new device fingerprint is not in the user's device fingerprint database. If the conditions are met, the new device fingerprint is automatically recalled. Even if the user agent information changes after the email user's device is upgraded, the consistency and availability of device fingerprints can be maintained through the intelligent recall mechanism, which improves the overall security of the email and reduces the situation of erroneously blocking legitimate users.

[0061] Next, combined Figure 2 The process of updating device fingerprints is described in detail.

[0062] Reference Figure 2 The diagram illustrates a flowchart of a method for determining device fingerprint update conditions according to an embodiment of this application. Figure 2 As shown, the method for determining the fingerprint update conditions of the device may include steps 201 and 202.

[0063] Step 201: Parse the first user agent information to obtain the first device model and first operating system name of the electronic device, as well as the first application name and first application version number of the email; the electronic device is the device used by the user to log in to the email.

[0064] In this embodiment, after obtaining the first user agent information, the first user agent information can be parsed to obtain the first device model and first operating system name of the electronic device, as well as the first application name and first application version number of the email account. The electronic device is the device used by the user to log in to the email account.

[0065] After parsing the first user agent information to obtain the first device model and first operating system name of the electronic device, and the first application name and first application version number of the email, step 202 is executed.

[0066] Step 202: Based on the first device model, the first operating system name, the first application name, and the first application version number, as well as the device model, operating system name, application name, and application version number obtained by parsing the user agent information, determine whether the first device fingerprint information meets the device fingerprint update conditions.

[0067] After parsing the first user agent information to obtain the first device model and first operating system name of the electronic device, and the first application name and first application version number of the email address, it is possible to determine whether the first device fingerprint information meets the device fingerprint update conditions based on the first device model, first operating system name, first application name, and first application version number, as well as the device model, operating system name, application name, and application version number obtained by parsing the user's device fingerprint information from the user agent information in the device fingerprint information database. Specifically, the device model can be compared first, then the operating system name can be compared, and finally the application name and application version number can be combined to determine whether the first device fingerprint information meets the device fingerprint update conditions. This implementation process will be discussed in the following embodiments. Figure 3 A detailed description will not be repeated here.

[0068] This application embodiment improves the accuracy of device fingerprint recall by combining the user's current hardware type, hardware version, system type, system version, application type, and application version with the user's pre-stored hardware type, hardware version, system type, system version, application type, and application version to determine the device fingerprint update conditions.

[0069] Next, combined Figure 3 The process for determining the conditions for device fingerprint updates is described in detail.

[0070] Reference Figure 3 The diagram illustrates a flowchart of another method for determining device fingerprint update conditions provided in an embodiment of this application. Figure 3 As shown, the method for determining the fingerprint update conditions of the device may include steps 301, 302, 303, 304 and 305.

[0071] Step 301: Obtain the second device model that is the same as the first device model from the device models.

[0072] In this embodiment, after parsing the device model, operating system name, application name, and application version number obtained from the user agent information, a second device model that is the same as the first device model can be obtained.

[0073] After obtaining the second device model that is the same as the first device model, proceed to step 302.

[0074] Step 302: Determine whether the operating system name corresponding to the second device model is the same as the first operating system name.

[0075] After obtaining the second device model that is the same as the first device model, it can be determined whether the operating system name corresponding to the second device model is the same as the first operating system name.

[0076] If the operating system name corresponding to the second device model is different from the first operating system name, the device fingerprint retrieval will fail.

[0077] If the operating system name corresponding to the second device model is the same as the first operating system name, then proceed to step 303.

[0078] Step 303: If the operating system name corresponding to the second device model is the same as the first operating system name, determine whether the first application name is the same as the application name corresponding to the second device model.

[0079] If the operating system name corresponding to the second device model is the same as the first operating system name, then it can be determined whether the first application name is the same as the application name corresponding to the second device model.

[0080] If the first application name is different from the application name corresponding to the second device model, the device fingerprint retrieval will fail.

[0081] If the first application name is the same as the application name corresponding to the second device model, then proceed to step 304.

[0082] Step 304: If it is determined that the first application name is the same as the application name corresponding to the second device model, the first application version number and the application version number corresponding to the second device model are segmented to obtain a first version number segmentation list of the first application version number and a second version number segmentation list of the application version number corresponding to the second device model.

[0083] If the application name corresponding to the first application and the application name corresponding to the second device model are the same, then the application version number of the first application and the application version number corresponding to the second device model can be segmented to obtain a first version number segmentation list for the first application version number and a second version number segmentation list for the application version number corresponding to the second device model. Specifically, the application version number can be segmented according to a segmentation identifier to obtain a segmentation list formed by segmented version numbers. For example, if the application version number is 10.9.1, then segmenting the application version number according to the segmentation identifier "." will result in a segmented version number of 1091. These three segmented version numbers constitute the segmentation list, etc.

[0084] This application embodiment removes invalid characters from the application version number by segmenting it. Furthermore, the segmented version number makes segment-by-segment comparison easier, improving version number comparison efficiency. For example, when comparing 10.9.1 and 10.10.0, segmentation clearly shows that the first digit is the same (major version number), but the second digit is different (minor version number), thus determining that 10.10.0 is the newer version.

[0085] It is understood that the above examples are merely examples listed to better understand the technical solutions of the embodiments of this application, and are not intended to be the only limitation on the embodiments.

[0086] After dividing the application version number corresponding to the first application version number and the application version number corresponding to the second device model into a first version number segmentation list for the first application version number and a second version number segmentation list for the application version number corresponding to the second device model, step 305 is executed.

[0087] Step 305: Based on the first version number segmentation list and the second version number segmentation list, determine whether the first device fingerprint information meets the device fingerprint update conditions.

[0088] After obtaining the first version number segmentation list and the second version number segmentation list, it can be determined whether the first device fingerprint information meets the device fingerprint update conditions based on the first and second version number segmentation lists. Specifically, the segmentation version numbers in the first and second version number segmentation lists can be compared bit by bit in sequence, and the comparison results can be used to determine whether the first device fingerprint information meets the device fingerprint update conditions. This implementation process will be combined with the following embodiments. Figure 4 A detailed description will not be repeated here.

[0089] This application embodiment improves the accuracy of device fingerprint recall by combining the user's current hardware type, hardware version, system type, system version, application type, and application version with the user's pre-stored hardware type, hardware version, system type, system version, application type, and application version to determine the device fingerprint update conditions.

[0090] Next, combined Figure 4 The process of determining device fingerprint update conditions based on the first version number segmentation list and the second version number segmentation list is described in detail.

[0091] Reference Figure 4 This illustrates a flowchart of the steps in another method for determining device fingerprint update conditions provided in an embodiment of this application. Figure 4 As shown, the method for determining the fingerprint update conditions of the device may include steps 401, 402 and 403.

[0092] Step 401: Determine whether the lengths of the first version number segmentation list and the second version number segmentation list are the same.

[0093] In this embodiment, after obtaining the first version number segmentation list and the second version number segmentation list, it can be determined whether the lengths of the first version number segmentation list and the second version number segmentation list are the same.

[0094] If the lengths of the first version number segmentation list and the second version number segmentation list are different, it indicates that the device fingerprint recall has failed.

[0095] If the first version number split list and the second version number split list have the same length, then proceed to step 402.

[0096] Step 402: If the first version number segmentation list and the second version number segmentation list have the same length, compare the segmentation version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain the comparison result.

[0097] If the first version number segmentation list and the second version number segmentation list have the same length, the segmented version number information in the first and second version number segmentation lists can be compared bit by bit to obtain the comparison result. In this embodiment, it can be first determined whether the system of the electronic device used by the user to log in to the email is a specified system. If so, the segmented version numbers in the version number segmentation list are directly compared. If it is not a specified system, the length of the version number with a specified number of digits in the segmentation list can be matched first. If they are equal, the segmented version numbers are compared bit by bit. This implementation process will be combined with the following embodiments. Figure 5 A detailed description will not be repeated here.

[0098] After comparing the segmented version number information in the first version number segmentation list with the second version number segmentation list bit by bit to obtain the comparison result, step 403 is executed.

[0099] Step 403: Based on the comparison results, determine whether the first device fingerprint information meets the device fingerprint update conditions.

[0100] After comparing the segmented version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain the comparison result, it can be determined whether the first device fingerprint information meets the device fingerprint update conditions. Specifically, if the comparison result indicates that the first application version number is greater than the application version number corresponding to the second device model, it can be determined that the first device fingerprint information meets the device fingerprint update conditions, and device fingerprint retrieval can be performed. If the comparison result indicates that the first application version number is less than or equal to the application version number corresponding to the second device model, it can be determined that the first device fingerprint information does not meet the device fingerprint update conditions, and device fingerprint retrieval fails.

[0101] The embodiments of this application can improve the accuracy of device fingerprint recall by comparing version numbers when the device model, operating system name, and application name are all the same.

[0102] Next, combined Figure 5 The implementation process of version number comparison is described in detail.

[0103] Reference Figure 5 The diagram illustrates a flowchart of a method for obtaining comparison results provided in an embodiment of this application. Figure 5As shown, the method for obtaining the comparison result may include steps 501, 502 and 503.

[0104] Step 501: Determine whether the electronic device is a device of the specified system.

[0105] In this embodiment, if the lengths of the first version number segmentation list and the second version number segmentation list are the same, it can be determined whether the electronic device is a device of the specified system. In this embodiment, the device of the specified system can be a device of Apple system (such as iOS, iPadOS, macOS, watchOS, and visionOS, etc.), and the device of the non-specified system can be a non-Apple device.

[0106] Step 502: If the electronic device is a device of a specified system, compare the segmented version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain the comparison result.

[0107] If the electronic device is confirmed to be a device running a specific operating system, the version number segments in the first version number segmentation list and the second version number segmentation list can be compared digit by digit to obtain the comparison result. That is, when the electronic device is an Apple system device, the version number of the same application has the same number of digits. In this case, the version number comparison result can be obtained by directly comparing the version number segments in the first version number segmentation list and the second version number segmentation list digit by digit.

[0108] Step 503: If the electronic device is not a device of the specified system, after determining that the lengths of both the first version number segmentation list and the second version number segmentation list are greater than the set length, obtain the version number of the remaining digits (excluding the last N digits) in the first version number segmentation list and the second version number segmentation list. When it is determined that the version number of the remaining digits is equal, compare the segmented version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain the comparison result.

[0109] If the electronic device is determined to be a device operating on a non-designated system, it can be determined whether the lengths of both the first and second version number segment lists are greater than a set length. If both are greater than the set length, the version number digits (excluding the last N digits) of the version number in both lists can be retrieved. If the remaining digits are equal, the version number information in the first and second version number segment lists is compared digit by digit to obtain the comparison result. For example, if the electronic device is operating on a non-Apple system, the version number digits are identical except for the last 3 digits. In this case, it is necessary to first determine whether the lengths of both the first and second version number segment lists are greater than 3. If so, the remaining digits are then extracted to determine if they are equal. If they are not equal, the version number comparison fails, and no further processing is performed. If they are equal, the version number information in the first version number segmentation list and the second version number segmentation list can be compared bit by bit to obtain the comparison result.

[0110] This application embodiment improves the accuracy of device fingerprint retrieval by setting corresponding version number comparison methods for different systems, avoiding comparison errors caused by using the same comparison method. This prevents low accuracy in device fingerprint retrieval. Furthermore, for electronic devices not belonging to a specified system, the length of the version number segmentation list is first checked to ensure it exceeds a set length. This quickly eliminates version numbers that clearly do not meet the comparison criteria, reducing unnecessary comparison operations and improving comparison efficiency.

[0111] Next, combined Figure 6 The process of generating the first device fingerprint is described in detail.

[0112] Reference Figure 6 The diagram illustrates a flowchart of a method for generating fingerprint information for a first device according to an embodiment of this application. Figure 6 As shown, the method for generating fingerprint information for the first device may include steps 601, 602 and 603.

[0113] Step 601: In response to the user's login to the email address, obtain the first user agent information, the IP address of the electronic device, and the username information entered by the user. The electronic device is the device used by the user to log in to the email address.

[0114] In this embodiment, upon receiving a user's email login request, the system can obtain the first user agent information, the IP address of the electronic device, and the username entered by the user. The electronic device is the device used by the user to log in to the email.

[0115] Step 602: Determine whether the IP address and the username information are in the blacklist.

[0116] Then, it can be determined whether the IP address and the username entered by the user are on the blacklist.

[0117] If the IP address and the username entered by the user are on the blacklist, it means that this email login is illegal. In this case, the user can be refused access to the email.

[0118] Step 603: In response to the fact that neither the IP address nor the username information is in the blacklist, execute the step of generating the first device fingerprint information based on the first user agent information obtained when the user logs in to the email address.

[0119] If the IP address and the username entered by the user are not in the blacklist, then in response to the fact that neither the IP address nor the username is in the blacklist, the step of generating the first device fingerprint information based on the first user agent information obtained when the user logs into the email address can be executed. That is, the first device fingerprint information is generated based on the parsed first device model, first operating system name, and first application name. In this embodiment, the first device model, first operating system name, and first application name can be directly used as the first device fingerprint information. Alternatively, a connector can be used to concatenate the first device model, first operating system name, and first application name to form the first device fingerprint information. This embodiment does not limit the method of generating the first device fingerprint information.

[0120] This application embodiment can prevent unauthorized users from logging into the email account by first determining whether the IP address and username are on a blacklist, thereby improving the overall security of the email account.

[0121] Next, combined Figure 7 The process of processing fingerprint information of the first device is described in detail.

[0122] Reference Figure 7 The diagram illustrates a flowchart of a first device fingerprint information processing method provided in an embodiment of this application. Figure 7 As shown, the fingerprint information processing method of the first device may include steps 701, 702 and 703.

[0123] Step 701: If it is determined that the first device fingerprint information does not meet the device fingerprint update conditions, output device login alarm information to the user.

[0124] In this embodiment, if the first device fingerprint information does not meet the device fingerprint update conditions, a device login alarm message can be output to the user.

[0125] Step 702: Upon receiving login confirmation information for the electronic device sent by the user, the first device fingerprint information is stored in the device fingerprint database, wherein the electronic device is the device used by the user to log in to the email address.

[0126] Upon receiving login confirmation information for an electronic device from a user, the first device fingerprint information is stored in the device fingerprint database.

[0127] Step 703: Upon receiving the abnormal login confirmation information for the electronic device sent by the user, add the IP address of the electronic device and the username information entered by the user when logging into the email to the blacklist.

[0128] Upon receiving confirmation of abnormal login to an electronic device from a user, the device's IP address and the username entered by the user when logging into their email account are added to the blacklist.

[0129] This application embodiment sends a login alarm to the user when the device fingerprint currently logged into the email account is not in the user's device fingerprint information database and does not meet the device fingerprint recall conditions. This can prevent unauthorized users from logging into the email account and improve the security of the email account.

[0130] Next, combined Figure 8 This document provides a detailed description of the process for detecting login errors from abnormal devices.

[0131] Reference Figure 8 This diagram illustrates a process for detecting abnormal email device logins according to an embodiment of this application. Figure 8 As shown, the process may include:

[0132] 1. When a user logs into their email account, the system can obtain the username entered by the user, as well as the IP address and user agent (UA) information of the electronic device used by the user to log in.

[0133] 2. A risk control system combined with a username + IP blacklist database can be used to check if the username entered by the user and the IP address of the electronic device are on the blacklist. If so, the current login is considered high-risk, and the user's email login is blocked. If not, the current login is considered risk-free, and the user's current email login can be stopped, proceeding to step 3.

[0134] 3. Parse the User Agent (UA) to generate the email device fingerprint and determine if it is a frequently used device fingerprint. Specifically, check if the generated email device fingerprint is already in the user's device fingerprint database. If it is a frequently used device fingerprint, update its expiration time.

[0135] 4. If the device fingerprint is not commonly used, attempt to recall the device fingerprint. The specific recall process will be described in the following embodiments. Figure 9 Provide a detailed description. If the recall is successful, the matched fingerprints of frequently used devices can be written to the device fingerprint database. If not, it indicates a new device login, in which case an email device login alert can be sent to the user.

[0136] 5. The user must confirm whether the currently logged-in device is a frequently used device. If not, the username and IP address of this login session will be added to the blacklist. If so, the device fingerprint generated during this login session will be written to the user's frequently used device fingerprint database.

[0137] Next, combined Figure 9 The recall process for device fingerprints is described in detail.

[0138] Reference Figure 9 This diagram illustrates an automatic fingerprint retrieval process for an email device provided in an embodiment of this application. Figure 9 As shown, the process may include:

[0139] 1. Based on the User Agent (UA), the device brand / model, operating system name / version number, and email application name / version number can be obtained.

[0140] 2. In the device fingerprint database, find a list of devices of the same brand / model as the user with that email address.

[0141] 3. Determine if the device information list is empty. If it is empty, the recall will fail. If it is not empty, proceed to step 4.

[0142] 4. Retrieve the latest device information from the device information list.

[0143] 5. Determine if the new and old system names are the same. If they are different, proceed to step 3. If they are the same, proceed to step 6.

[0144] 6. Determine if the new and old application names are the same. If they are different, proceed to step 3. If they are the same, proceed to step 7.

[0145] 7. Cut the application version number from left to right to obtain a list of new / old version numbers.

[0146] 8. Determine if the lengths of the new and old version number lists are the same. If they are different, proceed to step 3. If they are the same, proceed to step 9 or step 10.

[0147] 9. If it is not an Apple device, check if the length of the new / old version number list is greater than 3. If not, proceed to step 11. If yes, check if all version numbers on the left side of the new / old version number list are equal, except for the 3 version numbers on the right. If yes, proceed to step 11.

[0148] 10. If it is an Apple device, proceed to step 11.

[0149] 11. Determine if the new / old version number list is empty (i.e., retrieve one version number from the list for each comparison until the list is empty). If yes, the device fingerprint retrieval is successful, and the old device fingerprint matching the new device fingerprint in the device fingerprint information database is replaced with the new device fingerprint. If not, proceed to step 12.

[0150] 12. Retrieve the last version number from the new / old list.

[0151] 13. Is the new version number greater than the old version number? If so, proceed to step 11 until the list is empty. This indicates that the device fingerprint meets the recall conditions, and at this point, the new device fingerprint can be used for overwriting.

[0152] This application embodiment utilizes email proxy UA parsing information, leverages long-term accumulated login information and device update experience, and constructs a relationship between hardware type, hardware version, system type, system version, application type, and application version to achieve automatic device fingerprint retrieval.

[0153] The device fingerprint update method provided in this application generates first device fingerprint information based on first user agent information obtained when a user logs into an email account. It then determines whether the first device fingerprint information is in a pre-stored user device fingerprint information database. If the first device fingerprint information is not in the database, a recall operation is performed, including determining whether the first device fingerprint information meets the device fingerprint update conditions based on the pre-stored user agent information and the first user agent information. If the first device fingerprint information meets the update conditions, the second device fingerprint information already stored in the database is updated to the first device fingerprint information, enabling the user to log into the email account. The updated device fingerprint database is then used to verify the user's device fingerprint information upon the next login to the email account. The second device fingerprint information is generated based on second user agent information, which is user agent information that matches the first user agent information. This application embodiment automatically recalls a user's device fingerprint by utilizing the user's existing user agent information when a new device fingerprint is not in the user's device fingerprint database. Even if the user agent information changes after the email user's device is upgraded, the consistency and availability of the device fingerprint can be maintained through the intelligent recall mechanism, thereby improving the overall security of the email and reducing the situation of erroneously blocking legitimate users.

[0154] Reference Figure 10 The diagram shows a structural schematic of a device fingerprint update apparatus provided in an embodiment of this application. Figure 10 As shown, the fingerprint update device 1000 may include the following modules:

[0155] The first fingerprint information generation module 1010 is used to generate first device fingerprint information based on the first user agent information obtained when the user logs in to the email address.

[0156] The first fingerprint information determination module 1020 is used to determine whether the first device fingerprint information is in the user's device fingerprint information database that has been stored in advance;

[0157] The recall operation execution module 1030 is used to perform a recall operation of the device fingerprint information database when it is determined that the first device fingerprint information is not in the device fingerprint information database. The recall operation includes: determining whether the first device fingerprint information meets the device fingerprint update conditions based on the user agent information and the first user agent information that are pre-stored in the database; if it is determined that the first device fingerprint information meets the device fingerprint update conditions, updating the second device fingerprint information stored in the device fingerprint database to the first device fingerprint information, so that the user can log in to the email, and verifying the device fingerprint information of the user when logging in to the email next time according to the updated device fingerprint database.

[0158] Wherein, the second device fingerprint information is device fingerprint information generated based on the second user agent information, and the second user agent information is user agent information that matches the first user agent information in the user agent information.

[0159] Optionally, the recall operation execution module includes:

[0160] The user agent information parsing unit is used to parse the first user agent information to obtain the first device model and first operating system name of the electronic device, as well as the first application name and first application version number of the email; the electronic device is the device used by the user to log in to the email.

[0161] The fingerprint update condition determination unit is used to determine whether the first device fingerprint information meets the device fingerprint update conditions based on the first device model, the first operating system name, the first application name, and the first application version number, as well as the device model, operating system name, application name, and application version number obtained by parsing the user agent information.

[0162] Optionally, the fingerprint update condition determination unit includes:

[0163] The device model acquisition subunit is used to acquire a second device model that is the same as the first device model from the device models;

[0164] The system name determination subunit is used to determine whether the operating system name corresponding to the second device model is the same as the first operating system name;

[0165] The application name determination subunit is used to determine whether the first application name is the same as the application name corresponding to the second device model when the operating system name corresponding to the second device model is the same as the first operating system name.

[0166] The segmentation list acquisition sub-unit is used to segment the first application version number and the application version number corresponding to the second device model respectively when it is determined that the first application name is the same as the application name corresponding to the second device model, to obtain a first version number segmentation list of the first application version number and a second version number segmentation list of the application version number corresponding to the second device model.

[0167] The fingerprint update condition determination subunit is used to determine whether the first device fingerprint information meets the device fingerprint update conditions based on the first version number segmentation list and the second version number segmentation list.

[0168] Optionally, the fingerprint update condition determination subunit includes:

[0169] The segment list length determination subunit is used to determine whether the lengths of the first version number segment list and the second version number segment list are the same;

[0170] The comparison result acquisition subunit is used to compare the segmented version number information in the first version number segmentation list and the second version number segmentation list bit by bit in turn, when the lengths of the first version number segmentation list and the second version number segmentation list are the same, to obtain the comparison result.

[0171] The update condition determination subunit is used to determine whether the first device fingerprint information meets the device fingerprint update condition based on the comparison result.

[0172] Optionally, the comparison result acquisition subunit includes:

[0173] An electronic device determination subunit is used to determine whether the electronic device is a device of a specified system.

[0174] The first comparison result acquisition subunit is used to compare the segmented version number information in the first version number segmentation list with the segmented version number information in the second version number segmentation list in turn when the electronic device is a device of a specified system, and obtain the comparison result.

[0175] The second comparison result acquisition subunit is used to, when the electronic device is a device of a non-specified system, after determining that the lengths of both the first version number segmentation list and the second version number segmentation list are greater than a set length, acquire the version number of the remaining digits (excluding the last N digits) in the first version number segmentation list and the second version number segmentation list, and when it is determined that the version number of the remaining digits is equal, compare the segmented version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain the comparison result.

[0176] Optionally, the recall operation execution module includes:

[0177] The device fingerprint update condition determination unit is used to determine that the first device fingerprint information meets the device fingerprint update condition when the comparison result indicates that the first application version number is greater than the application version number corresponding to the second device model.

[0178] Optionally, the device includes:

[0179] The user agent information acquisition module is used to acquire the first user agent information and the IP address of the electronic device, as well as the username information entered by the user, in response to the user's login operation of the email; the electronic device is the device used by the user to log in to the email.

[0180] The blacklist determination module is used to determine whether the IP address and the username information are in the blacklist;

[0181] The device fingerprint generation module is used to execute the first fingerprint information generation module in response to the fact that neither the IP address nor the username information is in the blacklist.

[0182] Optionally, the device further includes:

[0183] The login alarm output module is used to output device login alarm information to the user when it is determined that the first device fingerprint information does not meet the device fingerprint update conditions;

[0184] The first device fingerprint storage module is used to store the first device fingerprint information in the device fingerprint database when it receives login confirmation information for the electronic device sent by the user; the electronic device is the device used by the user to log in to the email.

[0185] The username addition module is used to add the IP address of the electronic device and the username information entered by the user when logging into the email to the blacklist when receiving abnormal login confirmation information sent by the user for the electronic device.

[0186] Optionally, the device further includes:

[0187] The expiration time extension module is used to extend the expiration time of the first device fingerprint information in the device fingerprint information database when it is determined that the first device fingerprint information is in the device fingerprint information database.

[0188] The device fingerprint update apparatus provided in this application generates first device fingerprint information based on first user agent information obtained when a user logs into an email account. It then determines whether the first device fingerprint information is in a pre-stored user device fingerprint information database. If the first device fingerprint information is not in the database, a recall operation is performed, including determining whether the first device fingerprint information meets the device fingerprint update conditions based on the pre-stored user agent information and the first user agent information. If the first device fingerprint information meets the update conditions, the second device fingerprint information in the database is updated to the first device fingerprint information, enabling the user to log into the email account. The updated device fingerprint database is then used to verify the user's device fingerprint information upon the next login to the email account. The second device fingerprint information is generated based on second user agent information, which is user agent information that matches the first user agent information. This application embodiment automatically recalls a user's device fingerprint by utilizing the user's existing user agent information when a new device fingerprint is not in the user's device fingerprint database. Even if the user agent information changes after the email user's device is upgraded, the consistency and availability of the device fingerprint can be maintained through the intelligent recall mechanism, thereby improving the overall security of the email and reducing the situation of erroneously blocking legitimate users.

[0189] This application also provides an electronic device, such as... Figure 11 As shown, it includes a processor 1101, a communication interface 1102, a memory 1103, and a communication bus 1104. The processor 1101, communication interface 1102, and memory 1103 communicate with each other via the communication bus 1104.

[0190] Memory 1103 is used to store computer programs;

[0191] When processor 1101 executes the program stored in memory 1103, it performs the following steps:

[0192] Based on the first user agent information obtained when the user logs into the email, generate the first device fingerprint information;

[0193] Determine whether the first device fingerprint information is in the pre-stored user's device fingerprint information database;

[0194] If it is determined that the first device fingerprint information is not in the device fingerprint information database, a recall operation of the device fingerprint information database is performed. The recall operation includes: determining whether the first device fingerprint information meets the device fingerprint update conditions based on the user's user agent information and the first user agent information that are pre-stored; if it is determined that the first device fingerprint information meets the device fingerprint update conditions, updating the second device fingerprint information in the device fingerprint database to the first device fingerprint information, so that the user can log in to the email, and verifying the user's device fingerprint information when logging in to the email next time according to the updated device fingerprint database.

[0195] Wherein, the second device fingerprint information is device fingerprint information generated based on the second user agent information, and the second user agent information is user agent information that matches the first user agent information in the user agent information.

[0196] Optionally, determining whether the first device fingerprint information meets the device fingerprint update conditions based on the pre-stored user agent information of the user and the first user agent information includes:

[0197] Parse the first user agent information to obtain the first device model and first operating system name of the electronic device, as well as the first application name and first application version number of the email; the electronic device is the device used by the user to log in to the email.

[0198] Based on the first device model, the first operating system name, the first application name, and the first application version number, as well as the device model, operating system name, application name, and application version number obtained by parsing the user agent information, it is determined whether the first device fingerprint information meets the device fingerprint update conditions.

[0199] Optionally, determining whether the first device fingerprint information meets the device fingerprint update conditions based on the first device model, the first operating system name, the first application name, and the first application version number, as well as the device model, operating system name, application name, and application version number obtained by parsing the user agent information, includes:

[0200] Obtain the second device model that is the same as the first device model from the device models;

[0201] Determine whether the operating system name corresponding to the second device model is the same as the first operating system name;

[0202] If the operating system name corresponding to the second device model is the same as the first operating system name, determine whether the first application name is the same as the application name corresponding to the second device model.

[0203] If it is determined that the first application name is the same as the application name corresponding to the second device model, the first application version number and the application version number corresponding to the second device model are segmented to obtain a first version number segmentation list of the first application version number and a second version number segmentation list of the application version number corresponding to the second device model.

[0204] Based on the first version number segmentation list and the second version number segmentation list, determine whether the first device fingerprint information meets the device fingerprint update conditions.

[0205] Optionally, determining whether the first device fingerprint information meets the device fingerprint update conditions based on the first version number segmentation list and the second version number segmentation list includes:

[0206] Determine whether the lengths of the first version number segmentation list and the second version number segmentation list are the same;

[0207] When the first version number segmentation list and the second version number segmentation list have the same length, the segmentation version number information in the first version number segmentation list and the second version number segmentation list are compared bit by bit to obtain the comparison result.

[0208] Based on the comparison results, it is determined whether the first device fingerprint information meets the device fingerprint update conditions.

[0209] Optionally, the step of comparing the segmented version number information in the first version number segmentation list with that in the second version number segmentation list bit by bit to obtain the comparison result includes:

[0210] Determine whether the electronic device is a device of the designated system;

[0211] When the electronic device is a device of a specified system, the segmented version number information in the first version number segmentation list and the second version number segmentation list are compared bit by bit to obtain the comparison result;

[0212] When the electronic device is not a device of a specified system, after determining that the lengths of both the first version number segmentation list and the second version number segmentation list are greater than a set length, the version numbers of the remaining digits (excluding the last N digits) in the first and second version number segmentation lists are obtained. When it is determined that the version numbers of the remaining digits are equal, the segmented version number information in the first and second version number segmentation lists is compared digit by digit in turn to obtain the comparison result.

[0213] Optionally, determining that the first device fingerprint information satisfies the device fingerprint update condition includes:

[0214] If the comparison result indicates that the first application version number is greater than the application version number corresponding to the second device model, it is determined that the first device fingerprint information meets the device fingerprint update condition.

[0215] Optionally, before generating the first device fingerprint information based on the first user agent information obtained when the user logs into the email address, the method further includes:

[0216] In response to the user's login to the email address, the system obtains the first user agent information, the IP address of the electronic device, and the username information entered by the user. The electronic device is the device used by the user to log in to the email address.

[0217] Determine whether the IP address and username information are on the blacklist;

[0218] In response to the fact that neither the IP address nor the username information is in the blacklist, the step of generating the first device fingerprint information based on the first user agent information obtained when the user logs in to the email address is executed.

[0219] Optionally, after determining whether the first device fingerprint information meets the device fingerprint update conditions based on the pre-stored user agent information of the user and the first user agent information, the method further includes:

[0220] If it is determined that the first device fingerprint information does not meet the device fingerprint update conditions, a device login alarm message is output to the user;

[0221] Upon receiving login confirmation information for an electronic device sent by the user, the first device fingerprint information is stored in the device fingerprint database, wherein the electronic device is the device used by the user to log in to the email address;

[0222] Upon receiving an abnormal login confirmation message from the user regarding the electronic device, the IP address of the electronic device and the username entered by the user when logging into the email account are added to the blacklist.

[0223] Optionally, after determining whether the first device fingerprint information is in the pre-stored user's device fingerprint information database, the method further includes:

[0224] If it is determined that the first device fingerprint information is in the device fingerprint information database, the expiration time of the first device fingerprint information in the device fingerprint information database is extended.

[0225] The communication bus mentioned above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0226] The communication interface is used for communication between the aforementioned terminal and other devices.

[0227] The memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0228] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0229] In another embodiment provided in this application, a computer-readable storage medium is also provided, which stores instructions that, when executed on a computer, cause the computer to perform any of the device fingerprint update methods described in the above embodiments.

[0230] In another embodiment provided in this application, a computer program product containing instructions is also provided, on which a computer program is stored, which, when run on a computer, causes the computer to perform any of the methods described above.

[0231] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially as a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (SSD)).

[0232] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0233] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0234] The above description is merely a preferred embodiment of this application and is not intended to limit the scope of protection of this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application are included within the scope of protection of this application.

Claims

1. A device fingerprint update method, comprising: The method comprises: generating first device fingerprint information according to first user agent information of a user when logging into an email account; determining whether the first device fingerprint information is in a pre-stored device fingerprint information library of the user; in a case where it is determined that the first device fingerprint information is not in the device fingerprint information library, performing a recall operation of the device fingerprint information library, which comprises: parsing the first user agent information to obtain a first device model and a first operating system name of an electronic device, and a first application name and a first application version number of the email account; the electronic device is a device used by the user to log into the email account; a second device model identical to the first device model; determining whether the operating system name corresponding to the second device model is identical to the first operating system name; in a case where the operating system name corresponding to the second device model is identical to the first operating system name, determining whether the first application name is identical to an application name corresponding to the second device model; in a case where it is determined that the first application name is identical to the application name corresponding to the second device model, respectively segmenting the first application version number and the application version number corresponding to the second device model to obtain a first version number segmentation list of the first application version number and a second version number segmentation list of the application version number corresponding to the second device model; based on the first version number segmentation list and the second version number segmentation list, determining whether the first device fingerprint information satisfies a device fingerprint update condition; in a case where it is determined that the first device fingerprint information satisfies the device fingerprint update condition, updating second device fingerprint information already stored in the device fingerprint library to the first device fingerprint information, so as to enable the user to log into the email account and verify device fingerprint information of the user when next logging into the email account based on the updated device fingerprint library. The second device fingerprint information is device fingerprint information generated based on second user agent information, and the second user agent information is user agent information matching the first user agent information.

2. The method of claim 1, wherein, The determination of whether the first device fingerprint information satisfies the device fingerprint update condition based on the first version number segmentation list and the second version number segmentation list comprises: determining whether the lengths of the first version number segmentation list and the second version number segmentation list are identical; in a case where the lengths of the first version number segmentation list and the second version number segmentation list are identical, sequentially comparing the segmentation version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain a comparison result; determining whether the first device fingerprint information satisfies the device fingerprint update condition based on the comparison result.

3. The method of claim 2, wherein, The sequential comparison of the segmentation version number information in the first version number segmentation list and the second version number segmentation list bit by bit to obtain a comparison result comprises: determining whether the electronic device is a device of a specified system. In a case where the electronic device is a device of a designated system, the split version number information in the first version number split list and the second version number split list are sequentially compared bit by bit to obtain a comparison result; In a case where the electronic device is a device of a non-designated system, after it is determined that the lengths of the first version number split list and the second version number split list are both greater than a set length, version numbers of other bit numbers except the last N bits of version numbers in the first version number split list and the second version number split list are obtained, and in a case where the version numbers of the other bit numbers are equal, the split version number information in the first version number split list and the second version number split list are sequentially compared bit by bit to obtain a comparison result.

4. The method of claim 2, wherein, The determination that the first device fingerprint information satisfies the device fingerprint update condition includes: In a case where the comparison result indicates that the first application version number is greater than the application version number corresponding to the second device model, it is determined that the first device fingerprint information satisfies the device fingerprint update condition.

5. The method of claim 1, wherein, Before the first device fingerprint information is generated according to the obtained first user agent information of the user when logging into the electronic mailbox, the method further includes: In response to the operation of the user logging into the electronic mailbox, the first user agent information and the IP address of an electronic device used by the user to log into the electronic mailbox, and the username information input by the user are obtained; It is determined whether the IP address and the username information are in a blacklist; In response to the fact that neither the IP address nor the username information is in the blacklist, the step of generating the first device fingerprint information according to the obtained first user agent information of the user when logging into the electronic mailbox is performed.

6. The method of claim 1, wherein, After it is determined whether the first device fingerprint information satisfies a device fingerprint update condition based on the pre-stored user agent information of the user and the first user agent information, the method further includes: In a case where it is determined that the first device fingerprint information does not satisfy the device fingerprint update condition, device login alert information is output to the user; In a case where login confirmation information of the electronic device sent by the user is received, the first device fingerprint information is stored in the device fingerprint library, the electronic device being a device used by the user to log into the electronic mailbox; In a case where abnormal login confirmation information of the electronic device sent by the user is received, the IP address of the electronic device and the username information input by the user when logging into the electronic mailbox are added to a blacklist.

7. The method of claim 1, wherein, After it is determined whether the first device fingerprint information is in the pre-stored device fingerprint information library of the user, the method further includes: In a case where it is determined that the first device fingerprint information is in the device fingerprint information library, the expiration time of the first device fingerprint information in the device fingerprint information library is extended.

8. An apparatus fingerprint update device, comprising: The method includes: A first fingerprint information generation module is configured to generate first device fingerprint information according to first user agent information of a user when logging into an electronic mailbox. The first fingerprint information determination module is configured to determine whether the first device fingerprint information is in the pre-stored device fingerprint information library of the user. The recall operation execution module is configured to, in a case where it is determined that the first device fingerprint information is not in the device fingerprint information library, perform a recall operation of the device fingerprint information library, the recall operation including: parsing the first user agent information to obtain a first device model and a first operating system name of an electronic device, and a first application name and a first application version number of the electronic mailbox; the electronic device being a device used by the user to log in to the electronic mailbox; obtaining a second device model same as the first device model; determining whether an operating system name corresponding to the second device model is same as the first operating system name; in a case where the operating system name corresponding to the second device model is same as the first operating system name, determining whether the first application name is same as an application name corresponding to the second device model; in a case where it is determined that the first application name is same as the application name corresponding to the second device model, respectively segmenting the first application version number and the application version number corresponding to the second device model to obtain a first version number segmentation list of the first application version number and a second version number segmentation list of the application version number corresponding to the second device model; based on the first version number segmentation list and the second version number segmentation list, determining whether the first device fingerprint information satisfies a device fingerprint update condition; in a case where it is determined that the first device fingerprint information satisfies the device fingerprint update condition, updating second device fingerprint information already stored in the device fingerprint library to the first device fingerprint information, so as to enable the user to log in to the electronic mailbox and verify device fingerprint information of the user when the user next logs in to the electronic mailbox according to the updated device fingerprint library. The second device fingerprint information is device fingerprint information generated based on second user agent information, and the second user agent information is user agent information matching the first user agent information in the user agent information.

9. An electronic device, comprising: The computer device comprises a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are in communication with each other through the communication bus. The memory is configured to store a computer program. The processor is configured to execute the program stored on the memory to implement the method in any one of claims 1-7.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the method in any one of claims 1-7.

11. A computer program product comprising instructions stored thereon, a computer program, characterized in that, The computer program is executed on the computer to enable the computer to implement the method in any one of claims 1-7.

Images