Object authentication information generation method, system and device and medium

Abstract

The invention relates to an object authentication information generation method, system and device, and a medium. The method comprises the following steps: receiving a first environment parameter of a first object sent by an application end; determining a second object related to the first environment parameter, and constructing a target parameter set according to a second environment parameter corresponding to the second object; the environment parameters meeting the preset conditions in the target parameter set serve as target environment parameters; and generating first authentication information of the first object according to the target environment parameter. The authentication information is actively generated for the equipment where the application end is located so as to authenticate the equipment, so that malicious groups can be effectively prevented from cheating a content provider in a way of counterfeiting an application end environment so as to obtain content services of the content provider.

Description

Technical Field

[0001] The present application relates to the field of computers, and in particular to a method, system, device and medium for generating authentication information of an object. Background Art

[0002] With the development of the Internet, browsers have become the main tool for obtaining Internet content. The identification of browsers that access web pages has become a key factor for content service providers to analyze their users' access behavior. Traditionally, browser identification is mainly based on special fingerprint data generated by the browser to identify the corresponding browser. However, since this feature is controlled by the user who uses the browser, some means can be used to control the browser to regenerate new special fingerprint data, such as the privacy mode provided by some browsers, which is used to protect the user's privacy data and provide a new browser identity to the outside world. This feature happens to be used by some users to disguise themselves as new devices through a computer device, with the help of special modes such as the browser's privacy mode, and network proxy tools, to register content service platform accounts as new users, obtain new user discounts, and even register new users in batches to seek improper benefits. For the authentication method based on the automatic generation of special fingerprint data by the browser, it is difficult for content service providers to distinguish whether the corresponding browser belongs to the same device or different devices. Summary of the invention

[0003] The present application provides a method for generating authentication information of an object to solve the problem that a content service provider cannot accurately identify a browser.

[0004] In a first aspect, the present application provides a method for generating authentication information of an object, comprising:

[0005] Receiving a first environment parameter of a first object sent by an application end;

[0006] Determine a second object related to the first environmental parameter, and construct a target parameter set with a second environmental parameter corresponding to the second object;

[0007] Taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0008] First authentication information of the first object is generated according to the target environment parameter.

[0009] In some embodiments of the present application, determining a second object related to the first environmental parameter, and constructing a target parameter set with the second environmental parameter corresponding to the second object includes:

[0010] determining a first characteristic value of the first environmental parameter;

[0011] determining a second object having a characteristic value identical to the first characteristic value;

[0012] A second environmental parameter of the second object is added to the target parameter set.

[0013] In some embodiments of the present application, the environmental parameters that meet the predetermined conditions in the target parameter set are taken as the target environmental parameters, including:

[0014] For any environmental parameter in the target parameter set, determine a score corresponding to each item in the environmental parameter based on a relationship with the first environmental parameter;

[0015] Obtaining a certification score for the environmental parameter according to each score;

[0016] The environmental parameter whose authentication score exceeds the first predetermined threshold is used as the target environmental parameter.

[0017] In some embodiments of the present application, generating first authentication information of the first object according to the target environment parameter includes:

[0018] Determining a second object corresponding to the target environmental parameter;

[0019] The first authentication information of the first object is generated according to the second authentication information corresponding to the second object.

[0020] In some embodiments of the present application, the method further comprises:

[0021] When the authentication score corresponding to any environmental parameter in the target parameter set does not exceed the first predetermined threshold, the first authentication information is generated according to the first environmental parameter.

[0022] In some embodiments of the present application, the method further comprises:

[0023] When generating first authentication information of the first object according to the target environment parameter, increasing the number of successful authentications of the second object corresponding to the target environment parameter by a predetermined value;

[0024] The number of successful authentications of all second objects is counted, and the second objects whose number of successful authentications meets a specific condition are regarded as abnormal objects.

[0025] In some embodiments of the present application, counting the number of successful authentications of all second objects, and treating the second objects whose number of successful authentications meets a specific condition as abnormal objects, includes:

[0026] A distribution interval of the number of successful authentications of all second objects is determined, and a second object whose number of successful authentications is outside a specific interval is regarded as an abnormal object.

[0027] In a second aspect, the present application provides a system for generating authentication information of an object, comprising:

[0028] A data acquisition module, used for receiving a first environmental parameter of a first object sent by an application end;

[0029] a target parameter set building module, used to determine a second object related to the first environmental parameter, and to build a target parameter set with a second environmental parameter corresponding to the second object;

[0030] A target parameter determination module, used for taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0031] An authentication information generation module is used to generate first authentication information of the first object according to the target environment parameters.

[0032] The third aspect of the present application also proposes a computer device: at least one communication interface; at least one bus connected to the at least one communication interface; at least one processor connected to the at least one bus; at least one memory connected to the at least one bus, wherein the processor is configured to execute the authentication information generation method of the object described in any one of the above embodiments.

[0033] The fourth aspect of the present application further proposes a computer storage medium storing computer executable instructions, wherein the computer executable instructions are used to execute the method for generating authentication information of an object described in any one of the above embodiments.

[0034] The above technical solution provided by the embodiment of the present application has the following advantages over the prior art: unlike the traditional authentication method, the authentication information is not generated by the device or program where the application is located, but is generated based on the environmental parameters collected by the application and the environmental parameters of the saved device. It can effectively prevent some malicious users from obtaining improper benefits through the traditional generation mechanism of authentication information. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0036] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0037] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0038] Figure 1 A flowchart of a method for generating authentication information of an object provided in an embodiment of the present application;

[0039] Figure 2 A schematic diagram of a process for determining a target parameter set according to a characteristic value provided in an embodiment of the present application;

[0040] Figure 3 A schematic diagram of a process for determining target environment parameters provided in an embodiment of the present application;

[0041] Figure 4 A schematic diagram of a process for regenerating first authentication information according to second authentication information corresponding to a target environment parameter provided in an embodiment of the present application;

[0042] Figure 5 A schematic diagram of a process for screening abnormal devices according to the target environment parameters and the authentication times provided in an embodiment of the present application;

[0043] Figure 6 A schematic diagram of the structure of a system for generating authentication information of an object provided in an embodiment of the present application;

[0044] Figure 7 A schematic diagram of the structure of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0046] The disclosure below provides many different embodiments or examples to implement different structures of the present invention. In order to simplify the disclosure of the present invention, the parts and settings of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present invention. In addition, the present invention can repeat reference numbers and / or letters in different examples. This repetition is for the purpose of simplification and clarity, and does not itself indicate the relationship between the various embodiments and / or settings discussed.

[0047] This application aims to solve the problem in the traditional browser authentication scenario that the browser authentication information is generated by the browser, which results in the content service provider being unable to accurately identify the browser.

[0048] like Figure 1 As shown, the present application provides a method for generating authentication information of an object, comprising:

[0049] Step S1, receiving a first environmental parameter of a first object sent by an application end;

[0050] Step S2: determining a second object related to the first environmental parameter, and constructing a target parameter set with the second environmental parameter corresponding to the second object;

[0051] Step S3, taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0052] Step S4: Generate first authentication information of the first object according to the target environment parameters.

[0053] In the embodiments of the present application, the application end is divided into two categories, one category refers to the web application located in the browser, that is, the common front-end application, and the other category is the client. The client is the software released by the corresponding content service provider and is generally only used to access the network content of the content service provider. The front-end application runs in the corresponding browser and can indirectly access the interface of the operating system to obtain the hardware and software information of the device with the help of the relevant interface of the browser. The client can directly access the interface of the operating system to obtain the hardware and software information of the device. The environmental parameters in this application refer to pre-set hardware and software information of different dimensions.

[0054] The first object refers to the device used by the current user, that is, the device to be authenticated, in which an application program is running, which can be a front-end application running in a browser, or a client running in the operating system of the device to be authenticated, or both of them exist in the device to be authenticated.

[0055] The first environment parameter refers to the hardware and software related information of the device used by the user. In some embodiments, the environment parameters include: CPU information, BIOS information, memory information, disk information, wireless transmission module information, screen resolution, font currently used by the device, canvas component, audio component, webgl component in the browser, browser corresponding UserAgent, network address, Plugins related plug-ins and other information; as well as the type of the device's operating system, operating system version, application list and other software related information.

[0056] The second object refers to other devices that have been obtained and saved by the application end, that is, historical devices previously collected by the content service provider, and the second environmental parameter refers to the environmental parameter corresponding to the historical device. The environmental parameter corresponding to the historical device may be partially the same or completely the same as the environmental parameter of the device to be authenticated.

[0057] The target parameter set refers to the set of environmental parameters corresponding to all historical devices related to the device to be authenticated. Each record corresponds to an environmental parameter of a historical device. And due to the difference in historical devices, the parameter items in different environmental parameters may be different, that is, some parameter items may be missing because they cannot be obtained.

[0058] The target environment parameter is an item in the target parameter set, which corresponds to a historical device and indicates that the historical device and the device to be authenticated may be the same device.

[0059] The first authentication information is authentication information used to identify the device to be authenticated, and is a unique identification data. In some embodiments of the present application, it is a unique data generated by the target environment parameter, and is used to mark the corresponding device to be authenticated. In some embodiments of the present application, the first authentication information can also be generated by the environment information of the device to be authenticated.

[0060] In addition, it should be noted that the execution subject of the method for generating authentication information of the object provided in the embodiment of the present application is located at the content service provider end, or is other data service end that acts as an agent for the content service provider to authenticate the device where the application end is located.

[0061] In step S1, since the environmental parameters of the device to be authenticated are collected by the application, it is necessary to receive the environmental parameters of the device to be authenticated sent by the application.

[0062] In step S2, according to the received environmental parameters of the device to be authenticated, a historical device with the same environmental parameters as the device to be authenticated is searched from the saved historical devices, or a historical device with partially the same environmental parameters as the device to be authenticated is searched from the saved historical devices. If the corresponding historical device is found, the environmental parameters of the corresponding historical device are obtained, and the target parameter set is constructed with the environmental parameters; if all the environmental parameters are the same, it may be difficult to find the exact same historical device to a large extent. A screening condition with the same partial environmental parameters can be selected to screen the historical devices related to the device to be authenticated.

[0063] Further, in some embodiments, when determining the historical devices related to the device to be authenticated by the same partial environmental parameters. The historical devices can be sorted according to the number of the same parameter values ​​corresponding to the environmental parameters of the device to be authenticated, so as to screen out the appropriate historical devices. For example, the parameters in the environmental parameters include: CPU information, BIOS information, memory information, operating system type, operating system version and other parameters. For the acquired device A to be authenticated, its CPU information and BIOS information are the same as those of the historical device B, and the others are different; its memory information, operating system type and operating system version are the same as those of the historical device C; at this time, there is a historical device D, and only the memory information is the same as that of the device A to be authenticated. Then the historical device C is prioritized over the historical device B, and the historical device B is prioritized over the historical device D. If the preset requirement is to take the top ranked device (for ease of understanding, only one historical device is used as the screening result, more screening results may be set in the actual business, and there will be more data with the same parameter type) as the relevant historical device, then only the historical device B is selected at this time. If the preset requirement is to require the top two historical devices, then historical devices B and C are selected at this time. And the target parameter set is constructed with the environmental parameters corresponding to the historical devices B and C.

[0064] In step S3, for each environmental parameter in the target parameter set, it is determined whether it meets the preset conditions. For example, in some embodiments, whether the authentication score corresponding to the environmental parameter exceeds the preset value, if it exceeds, the corresponding environmental parameter is used as the target environmental parameter. If there are multiple environmental parameters that meet the predetermined conditions, they are sorted by the corresponding authentication scores, and the environmental parameter with the highest score is selected as the target environmental parameter.

[0065] In some embodiments of the present application, different importance levels are divided according to different parameter types in the environmental parameters. According to the different importance levels, the importance of each corresponding parameter in the target parameter set is re-determined for the level of the same parameter as the device to be authenticated, and the importance is sorted according to the importance, and the most important environmental parameters are selected as the target environmental parameters. For example, the importance of BIOS information is higher than that of CPU information, the importance of CPU information is higher than that of memory information, and the importance of memory information is higher than that of operating system information. Then, a corresponding weight value is assigned to each importance level, and the weighted value corresponding to each environmental parameter in the target parameter set is determined according to the weight, and the one with the highest weighted value is selected as the target environmental parameter.

[0066] In step S4, when generating the authentication information of the device to be authenticated according to the target environment parameters, since the target environment parameters are the environment parameters of the corresponding historical device, there is corresponding authentication information previously generated for the historical device, so the authentication information of the previous historical device can be directly used as the authentication information of the device to be authenticated.

[0067] In some embodiments of the present application, according to the need to update the algorithm, the characters of various parameters corresponding to the target environment parameters can also be merged as needed, and the characteristic values ​​of the merged characters can be recalculated, for example, using the corresponding uniqueness algorithm to calculate the corresponding unique characteristic value. For example, calculate the hash value corresponding to MD5 or other hash algorithms. It should be noted that the authentication information of the device to be authenticated is based on the data of the unique identification corresponding to the device, and the algorithm or method for generating such unique data can select the corresponding algorithm or generation method according to different implementation needs, and is not limited to the MD5 algorithm in the above example.

[0068] like Figure 2 As shown, in some embodiments of the present application, determining a second object related to the first environmental parameter, and constructing a target parameter set with the second environmental parameter corresponding to the second object includes:

[0069] Step S21, determining a first characteristic value of the first environmental parameter;

[0070] Step S22, determining a second object having a characteristic value identical to the first characteristic value;

[0071] Step S23: Add the second environmental parameter of the second object to the target parameter set.

[0072] In this embodiment, when determining the historical device associated with the device to be authenticated, if only the corresponding environmental parameters are compared to see whether they are the same, multiple rounds of comparisons are required. The calculation process may be more complicated. For this reason, in this embodiment of the application, the application uses a feature value comparison method to determine the correlation between the device to be authenticated and the historical device.

[0073] Specifically, select several parameters from the environmental parameters as core parameters to calculate the corresponding characteristic values ​​based on the core parameters. For each received device's environmental parameters, select the parameter value of the corresponding core parameter from its environmental parameters to calculate its corresponding characteristic value. When saving the environmental parameters of the corresponding device, save it in the database with the characteristic value as an index, so as to facilitate the subsequent query of these devices as historical devices for subsequent devices to be authenticated. For example, select CPU information and memory information as core parameters. For the received device to be authenticated, merge the CPU information and memory information of the device to be authenticated, calculate the corresponding hash value, and use the hash value as the first characteristic value of the device to be authenticated. Then, based on the first characteristic value, query the historical device with the same characteristic value as the first characteristic value. If the corresponding characteristic value is found, the historical device corresponding to the characteristic value is used as the historical device related to the device to be authenticated.

[0074] It should be noted that only some parameters in the environmental parameters are used as core parameters to calculate the characteristic value. This will inevitably result in multiple historical devices with only some parameters being the same as the device to be authenticated, but other parameters being different. For example, in the above example, the data is in two dimensions of CPU and memory. In the actual environment, the same model of CPU and memory are everywhere. Therefore, in theory, there will be many corresponding matching historical devices. Therefore, historical devices with the same core parameters can be quickly located according to the hash matching method. Only one calculation is required to screen out more historical devices, and devices with different CPUs and memories can also be filtered out. Therefore, as long as the dimensions of the core parameters for calculating the characteristic value are selected appropriately, the accuracy and efficiency of the relevant historical devices can be further improved. The above embodiment is only an example of CPU and memory as core parameters. In practice, there will be more choices for core parameters, and the relevance of the device to be authenticated can be better reflected.

[0075] Furthermore, after determining the historical device related to the device to be authenticated by the characteristic value, the environmental parameters of the determined historical device are added to the target parameter set, that is, the corresponding target parameter set is constructed by the environmental parameters of the historical device.

[0076] like Figure 3 As shown, in some embodiments of the present application, the environmental parameters that meet the predetermined conditions in the target parameter set are taken as the target environmental parameters, including:

[0077] Step S31: for any environmental parameter in the target parameter set, determine a corresponding score for each item in the environmental parameter based on its relationship with the first environmental parameter;

[0078] Step S32, obtaining the certification score of the environmental parameter according to each score;

[0079] Step S33: taking the environmental parameter whose authentication score exceeds the first predetermined threshold as the target environmental parameter.

[0080] In this embodiment, each parameter in the environmental parameters has a fixed reference score. However, when determining the target environmental parameters from the target parameter set, the corresponding reference score is not used directly, but each score of the environmental parameters needs to be determined based on the relationship with the environmental parameters of the device to be authenticated.

[0081] Specifically, for each environmental parameter in the target parameter set, it is determined whether each item in the environmental parameter is the same as the value of the corresponding item of the device to be authenticated. If they are the same, the reference score corresponding to the item is used as the corresponding score of the environmental parameter on the item.

[0082] For example, if the environmental parameters of the device A to be authenticated are: CPU model is i7-14700, operating system version is win10, browser is edge, IP address is 10.0.0.1, and device manufacturer is manufacturer A;

[0083] The first environmental parameter in the target parameter set (corresponding to historical device B) has the following information: CPU model is i7-14700, operating system version is win11, browser is edge, IP address is 10.0.0.1, and device manufacturer is manufacturer A.

[0084] The second environmental parameter in the target parameter set (corresponding to historical device C) corresponds to the following information: CPU model is i7-14700, operating system version is win10, browser is edge, IP address is 10.0.0.2, and device manufacturer is manufacturer B;

[0085] The corresponding information of the third environmental parameter in the target parameter set (corresponding to historical device D) is: CPU model is i7-14700, operating system version is win10, browser is edge, IP address is 10.0.0.1, and device manufacturer is manufacturer B.

[0086] From the above examples, we can see that the only difference between the device A to be authenticated and the historical device B is the operating system version; the device manufacturer and IP address are different from the historical device C; and the device manufacturer is different from the historical device D.

[0087] If the reference score corresponding to the CPU model is 20, the reference score corresponding to the operating system version is 20, the reference score corresponding to the browser is 8, the reference score corresponding to the IP address is 2, and the reference score corresponding to the device manufacturer is 50.

[0088] For the first environmental parameter, the corresponding scores for each item are: 20, 0, 8, 2, 50, and the corresponding certification score is 20+0+8+2+50=80;

[0089] The corresponding scores for each of the second environmental parameters are: 20, 20, 8, 0, 0, and the corresponding certification score is 20+20+8+0+0=48;

[0090] The third environmental parameter, each corresponding score is: 20, 20, 8, 2, 0, and the corresponding certification score is 20+20+8+2+0=50;

[0091] If the preset threshold is 79% of the reference score of all items, only the authentication score of the first environmental parameter is satisfied, that is, the historical device B is closest to the device to be authenticated. From the above comparison, it can be seen that the historical device B and the device to be authenticated A are only inconsistent in the operating system version, while other hardware information, such as CPU model, manufacturer, and IP address, are the same. It can be objectively considered that the corresponding user only upgraded the operating system. Although the application end has collected two sets of environmental parameters, they actually belong to the same computer device physically. Therefore, it is reasonable to select the environmental parameters of the historical device B as the target environmental parameters to generate the corresponding authentication information for the device A to be authenticated.

[0092] In contrast, for historical device D, except for the different device manufacturers and the device A to be certified, the environmental parameters of other items are exactly the same. However, since the score involved in the manufacturer item is very large, its certification score is only 50, which is a large gap. This means that historical device D and device A to be certified are two devices (because of different manufacturers), which happen to have the same hardware specifications and are in the same local area network.

[0093] It should be noted that, in order to facilitate understanding of the technical solution of the present invention, only 5 parameters are used as examples. In actual applications, it is necessary to expand the corresponding environmental parameter content according to the specific application scenario. And different reference scores are set for different environmental parameters. The reference score is the score of the corresponding item of the environmental parameter and is not bound to the specific parameter value. That is, as mentioned above, only when the corresponding item parameters of the device to be authenticated are the same as the corresponding item parameters of the historical device, the corresponding reference score will be used as the score of the corresponding item. If the two are not the same, the corresponding reference score is invalid in the specific instance.

[0094] Moreover, the reference score gap of the corresponding items in the environmental parameters reflects the importance of different parameter items, or reflects the corresponding weight difference. In some embodiments, all reference scores can be set to 100 points, but different parameter items will have different weights, and the product of the weight and the reference score is used as the score of the corresponding item. For example, in the above example, the weight corresponding to the CPU model is 0.2, the weight corresponding to the operating system version is 0.2, the weight corresponding to the browser is 0.08, the weight corresponding to the IP address is 0.02, and the weight corresponding to the device manufacturer is 0.5. The essence of the above different scoring mechanisms is the same, except that the values ​​of each environmental parameter are quantized into the same data domain (100-point system). For this reason, this application does not limit the implementation method of the specific values ​​of the scoring and certification points, and can be flexibly quantified according to specific needs.

[0095] like Figure 4 As shown, in some embodiments of the present application, generating first authentication information of the first object according to the target environment parameter includes:

[0096] Step S41, determining a second object corresponding to the target environment parameter;

[0097] Step S42: Generate first authentication information of the first object according to second authentication information corresponding to the second object.

[0098] In this embodiment, when generating authentication information for the device to be authenticated according to the target environment parameter, since the target environment parameter is the environment parameter of the historical device, and the content service provider has generated corresponding authentication information for the historical device when it first receives the historical device, that is, the second authentication information. Therefore, in order to reduce the process of regenerating authentication information, after the historical device corresponding to the target environment parameter is determined, the previous authentication information of the historical device is directly used as the authentication information of the device to be authenticated. There is no need to perform the corresponding calculation operation, which further reduces the corresponding performance consumption.

[0099] Furthermore, after the authentication information of the historical device is used as the authentication information of the device to be authenticated, the environmental parameters of the device to be authenticated are saved in the storage category corresponding to the authentication information.

[0100] In some embodiments of the present application, combined with the previous example, authentication information, environmental parameters of historical devices, and corresponding feature values ​​can be stored in association. That is, the feature value calculated with the core dimension of the environmental parameter is the key value. Each key value corresponds to multiple historical devices, and each historical device has corresponding environmental parameters and corresponding authentication points.

[0101] Therefore, when the application sends the corresponding new environment parameters of the device to be authenticated, the corresponding feature value can be calculated according to the core parameters of the device to be authenticated. Then the record corresponding to the feature value is searched in the database to see whether there is one or more corresponding historical devices. If there is only one historical device, the authentication score calculation logic described above is used to determine whether the authentication score of this historical device meets the first predetermined threshold. If it does, the authentication information of this historical device is used as the authentication information of the device to be authenticated. If there are multiple historical devices, the corresponding authentication information is determined according to the selection logic of the previous example.

[0102] In some embodiments of the present application, the method further comprises:

[0103] When the authentication score corresponding to any environmental parameter in the target parameter set does not exceed the first predetermined threshold, the first authentication information is generated according to the first environmental parameter.

[0104] In this embodiment, if the authentication score corresponding to the environmental parameter in the target parameter set does not exceed the first predetermined threshold, it means that there is no historical device in the historical devices that is close to the device to be authenticated or can be regarded as the same device. Therefore, the device to be authenticated should be regarded as a new device. Generate corresponding authentication information for it. The authentication information can be generated by directly performing a hash calculation on the environmental parameters of the device to be authenticated to obtain the corresponding authentication information. Or it can be calculated by other algorithms to obtain unique identification information. For example, each item in the environmental parameters of the device to be authenticated can be converted into a corresponding string and then spliced, and the corresponding algorithm can be used to generate a unique value for the spliced ​​result. The unique value is used as the authentication information of the device to be authenticated. Figure 5 As shown, in some embodiments of the present application, the method further includes:

[0105] Step S51, when generating the first authentication information of the first object according to the target environment parameter, increasing the number of successful authentications of the second object corresponding to the target environment parameter by a predetermined value;

[0106] Step S52: Count the number of successful authentications of all second objects, and treat the second objects whose successful authentications meet a specific condition as abnormal objects.

[0107] In this embodiment, as mentioned above, when the first authentication information of the first object is generated according to the target environment parameter, it means using the authentication information of the historical device as the authentication information of the device to be authenticated. In this embodiment, when the previous authentication information of the historical device is used as the authentication information of the device to be authenticated, the number of successful authentications of the authentication information of the corresponding historical device is increased by 1. It is used to indicate the number of retrievals of the corresponding device. This parameter can reflect the regularity of the user's access behavior on the other hand.

[0108] It should be noted that in the embodiments of the present application, the authentication information is the authentication information indicating the identity of the device where the application is located. The behavior of the application collecting the environmental parameters of the device only occurs when the corresponding application initiates access to the content provider for the first time. In subsequent accesses, collecting environmental parameters and sending them to the content provider is just sending redundant information, which is meaningless.

[0109] Therefore, if a device or user triggers multiple authentication information generation operations in a short period of time, it means that the corresponding user or device has multiple acquisition or reset of the application end. For example, after closing the browser or clearing the cache and accessing the content provider's website, the corresponding front-end program will be re-acquired. After the browser runs, the front-end program will collect the device's environmental parameters and send them to the content provider to generate the corresponding authentication information.

[0110] Normal users will not frequently trigger authentication information when accessing content provided by a content provider. Therefore, in the embodiment of the present application, when a user frequently triggers multiple authentications using a certain device, the same environment parameters will inevitably be sent to the content provider multiple times. Therefore, the authentication information of the historical device that is used multiple times in a short period of time will be sent to the application end as authentication.

[0111] Furthermore, statistics are collected on this behavior, that is, the number of successful authentications of the corresponding historical devices is counted, and historical devices that frequently trigger authentications in a short period of time are regarded as abnormal historical devices.

[0112] On the other hand, some malicious groups will simulate new devices by randomly generating environmental parameters to access the content of the content provider. And each time they access, they will generate a new set of environmental parameters to evade the restrictions imposed by the content provider on frequent access to a single device. This will result in the content provider's service receiving a large amount of information about historical devices that have only been used once or several times. These historical device information will almost never match the subsequent devices to be authenticated in the subsequent authentication information. This will only lead to an increase in the corresponding data volume, which is manifested as the number of successful authentications of the corresponding authentication information being 0 or very low.

[0113] Therefore, in this case, according to the number of successful authentications of the corresponding historical devices' authentication information, historical devices with lower number of authentications can be treated as abnormal devices.

[0114] In some embodiments of the present application, counting the number of successful authentications of all second objects, and treating the second objects whose number of successful authentications meets a specific condition as abnormal objects, includes:

[0115] A distribution interval of the number of successful authentications of all second objects is determined, and a second object whose number of successful authentications is outside a specific interval is regarded as an abnormal object.

[0116] In this embodiment, as described above, when determining an abnormal historical device based on the number of successful authentications of the authentication information of the historical device, since the historical devices include normal historical devices and abnormal historical devices, a normal historical device should be in an active state, and each time it accesses the content of the content provider, the successful authentication count of the corresponding historical device will be increased once.

[0117] Therefore, in this embodiment, the corresponding distribution interval is determined according to the number of authentications of all historical devices, and the corresponding specific interval is divided within the distribution interval. The numerical range of the specific interval can be set based on experience, for example, 5 to 100 times is used as the specific interval, and the historical devices corresponding to the number of successful authentications outside the specific interval are regarded as abnormal devices. For example, if the number of successful authentications of a historical device is 0, it is regarded as an abnormal device. Or if the number of successful authentications of a certain historical device is 1000, it is regarded as an abnormal device.

[0118] In some embodiments of the present application, since a normal device uses the application end to access the content of the content provider for the first time within a certain period of time, the number of successful authentications of the corresponding historical device will be increased once, which will cause the corresponding number of successful authentications to continue to increase, and the corresponding specific intervals must also be frequently confirmed. To solve this problem, when counting the number of successful authentications of the corresponding historical device, only the number of successful authentications close to the current time is counted, that is, the number of successful authentications of the historical device within a period of time is used as the basis for judging abnormal devices.

[0119] In addition, according to the duration and frequency of each visit to the content provider of different user behaviors, the appropriate range of times in the corresponding time period is determined, and the corresponding specific interval is determined accordingly. The abnormality of the device in the corresponding time period is judged by the interval. It can effectively distinguish the behavior of frequently initiating authentication using a single device, and can also screen out fake devices generated by some malicious groups through simulation means.

[0120] The above technical solution provided by the embodiment of the present application has the following advantages over the prior art: the method provided by the embodiment of the present application is not like the traditional authentication method, where the authentication information is generated by the device or program where the application is located, but is generated based on the environmental parameters collected by the application and the environmental parameters of the saved device. It can effectively prevent some malicious users from obtaining improper benefits through the traditional generation mechanism of authentication information. On the other hand, by autonomously generating authentication information for the device where the application is located, it is possible to provide accurate data support for the user's behavior record of using the device, and provide reliable sample data for subsequent user behavior analysis.

[0121] like Figure 6 As shown, in a second aspect, the present application provides a system for generating authentication information of an object, comprising:

[0122] A data acquisition module 1 is used to receive a first environmental parameter of a first object sent by an application end;

[0123] A target parameter set building module 2 is used to determine a second object related to the first environmental parameter, and to build a target parameter set with a second environmental parameter corresponding to the second object;

[0124] A target parameter determination module 3, used to take the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0125] The authentication information generating module 4 is used to generate first authentication information of the first object according to the target environment parameters.

[0126] like Figure 7 As shown, the embodiment of the present application provides a computer device, including a processor 711, a communication interface 712, a memory 713 and a communication bus 714, wherein the processor 711, the communication interface 712, and the memory 713 communicate with each other through the communication bus 714.

[0127] Memory 713, used for storing computer programs;

[0128] In one embodiment of the present application, the processor 711 is used to execute the program stored in the memory 713 to implement a method for generating authentication information of an object provided by any of the aforementioned method embodiments, including:

[0129] Receiving a first environment parameter of a first object sent by an application end;

[0130] Determine a second object related to the first environmental parameter, and construct a target parameter set with a second environmental parameter corresponding to the second object;

[0131] Taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0132] First authentication information of the first object is generated according to the target environment parameter.

[0133] In some embodiments of the present application, determining a second object related to the first environmental parameter, and constructing a target parameter set with the second environmental parameter corresponding to the second object includes:

[0134] determining a first characteristic value of the first environmental parameter;

[0135] determining a second object having a characteristic value identical to the first characteristic value;

[0136] A second environmental parameter of the second object is added to the target parameter set.

[0137] In some embodiments of the present application, the environmental parameters that meet the predetermined conditions in the target parameter set are taken as the target environmental parameters, including:

[0138] For any environmental parameter in the target parameter set, determining a corresponding score for each of the environmental parameters based on a relationship with the first environmental parameter;

[0139] Obtaining a certification score for the environmental parameter according to each score;

[0140] The environmental parameter whose authentication score exceeds the first predetermined threshold is used as the target environmental parameter.

[0141] In some embodiments of the present application, generating first authentication information of the first object according to the target environment parameter includes:

[0142] Determining a second object corresponding to the target environmental parameter;

[0143] The first authentication information of the first object is generated according to the second authentication information corresponding to the second object.

[0144] In some embodiments of the present application, the method further comprises:

[0145] When the authentication score corresponding to any environmental parameter in the target parameter set does not exceed the first predetermined threshold, the first authentication information is generated according to the first environmental parameter.

[0146] In some embodiments of the present application, the method further comprises:

[0147] When generating first authentication information of the first object according to the target environment parameter, increasing the number of successful authentications of the second object corresponding to the target environment parameter by a predetermined value;

[0148] The number of successful authentications of all second objects is counted, and the second objects whose number of successful authentications meets a specific condition are regarded as abnormal objects.

[0149] In some embodiments of the present application, counting the number of successful authentications of all second objects, and treating the second objects whose number of successful authentications meets a specific condition as abnormal objects, includes:

[0150] A distribution interval of the number of successful authentications of all second objects is determined, and a second object whose number of successful authentications is outside a specific interval is regarded as an abnormal object.

[0151] The present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, a method for generating authentication information of an object is provided as provided in any of the above method embodiments, including:

[0152] Receiving a first environment parameter of a first object sent by an application end;

[0153] Determine a second object related to the first environmental parameter, and construct a target parameter set with a second environmental parameter corresponding to the second object;

[0154] Taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters;

[0155] First authentication information of the first object is generated according to the target environment parameter.

[0156] In some embodiments of the present application, determining a second object related to the first environmental parameter, and constructing a target parameter set with the second environmental parameter corresponding to the second object includes:

[0157] determining a first characteristic value of the first environmental parameter;

[0158] determining a second object having a characteristic value identical to the first characteristic value;

[0159] A second environmental parameter of the second object is added to the target parameter set.

[0160] In some embodiments of the present application, the environmental parameters that meet the predetermined conditions in the target parameter set are taken as the target environmental parameters, including:

[0161] For any environmental parameter in the target parameter set, determining a corresponding score for each of the environmental parameters based on a relationship with the first environmental parameter;

[0162] Obtaining a certification score for the environmental parameter according to each score;

[0163] The environmental parameter whose authentication score exceeds the first predetermined threshold is used as the target environmental parameter.

[0164] In some embodiments of the present application, generating first authentication information of the first object according to the target environment parameter includes:

[0165] Determining a second object corresponding to the target environmental parameter;

[0166] The first authentication information of the first object is generated according to the second authentication information corresponding to the second object.

[0167] In some embodiments of the present application, the method further comprises:

[0168] When the authentication score corresponding to any environmental parameter in the target parameter set does not exceed the first predetermined threshold, the first authentication information is generated according to the first environmental parameter.

[0169] In some embodiments of the present application, the method further comprises:

[0170] When generating first authentication information of the first object according to the target environment parameter, increasing the number of successful authentications of the second object corresponding to the target environment parameter by a predetermined value;

[0171] The number of successful authentications of all second objects is counted, and the second objects whose number of successful authentications meets a specific condition are regarded as abnormal objects.

[0172] In some embodiments of the present application, counting the number of successful authentications of all second objects, and treating the second objects whose number of successful authentications meets a specific condition as abnormal objects, includes:

[0173] A distribution interval of the number of successful authentications of all second objects is determined, and a second object whose number of successful authentications is outside a specific interval is regarded as an abnormal object.

[0174] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0175] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a general hardware platform, and of course, by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0176] It should be understood that the terms used herein are only for the purpose of describing specific example embodiments and are not intended to be limiting. Unless the context clearly indicates otherwise, the singular forms "one", "an" and "said" as used herein may also be meant to include plural forms. The terms "include", "comprise", "contain", and "have" are inclusive, and therefore specify the existence of stated features, steps, operations, elements and / or parts, but do not exclude the existence or addition of one or more other features, steps, operations, elements, parts, and / or combinations thereof. The method steps, processes, and operations described herein are not interpreted as necessarily requiring them to be performed in the specific order described or illustrated, unless the execution order is clearly indicated. It should also be understood that additional or alternative steps may be used.

[0177] The foregoing is merely a specific embodiment of the present invention, which enables those skilled in the art to understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features claimed herein.

Claims

1. A method for generating authentication information of an object, characterized in that: include: Receiving a first environment parameter of a first object sent by an application end; Determine a second object related to the first environmental parameter, and construct a target parameter set with a second environmental parameter corresponding to the second object; Taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters; First authentication information of the first object is generated according to the target environment parameter.

2. The method according to claim 1, characterized in that The determining a second object related to the first environmental parameter and constructing a target parameter set with the second environmental parameter corresponding to the second object includes: determining a first characteristic value of the first environmental parameter; determining a second object having a characteristic value identical to the first characteristic value; A second environmental parameter of the second object is added to the target parameter set.

3. The method according to claim 1, characterized in that The step of taking the environmental parameters that meet the predetermined conditions in the target parameter set as the target environmental parameters comprises: For any environmental parameter in the target parameter set, determine a score corresponding to each item in the environmental parameter based on a relationship with the first environmental parameter; Obtaining a certification score for the environmental parameter according to each score; The environmental parameter whose authentication score exceeds the first predetermined threshold is used as the target environmental parameter.

4. The method according to claim 3, characterized in that The step of generating first authentication information of the first object according to the target environment parameter includes: Determining a second object corresponding to the target environmental parameter; The first authentication information of the first object is generated according to the second authentication information corresponding to the second object.

5. The method according to claim 3, characterized in that: The method further comprises: When the authentication score corresponding to any environmental parameter in the target parameter set does not exceed the first predetermined threshold, the first authentication information is generated according to the first environmental parameter.

6. The method according to claim 1, characterized in that The method further comprises: When generating first authentication information of the first object according to the target environment parameter, increasing the number of successful authentications of the second object corresponding to the target environment parameter by a predetermined value; The number of successful authentications of all second objects is counted, and the second objects whose number of successful authentications meets a specific condition are regarded as abnormal objects.

7. The method according to claim 6, characterized in that The counting of the number of successful authentications of all second objects and treating the second objects whose number of successful authentications meets a specific condition as abnormal objects includes: A distribution interval of the number of successful authentications of all second objects is determined, and a second object whose number of successful authentications is outside a specific interval is regarded as an abnormal object.

8. A system for generating authentication information of an object, characterized in that: include: A data acquisition module, used for receiving a first environmental parameter of a first object sent by an application end; a target parameter set building module, used to determine a second object related to the first environmental parameter, and to build a target parameter set with a second environmental parameter corresponding to the second object; A target parameter determination module, used for taking the environmental parameters that meet the predetermined conditions in the target parameter set as target environmental parameters; An authentication information generation module is used to generate first authentication information of the first object according to the target environment parameters.

9. A computer device: at least one communication interface; at least one bus connected to the at least one communication interface; at least one processor connected to the at least one bus; at least one memory connected to the at least one bus, wherein: The processor is configured to execute the method for generating authentication information of an object as described in any one of claims 1 to 7.

10. A computer storage medium storing computer executable instructions, wherein the computer executable instructions are used to execute the method for generating authentication information of an object according to any one of claims 1 to 7.

Images