Cloning terminal detection method, device and equipment, storage medium and product

Abstract

The embodiment of the invention provides a cloning terminal detection method and device, equipment, a storage medium and a product. According to the technical scheme provided by the embodiment of the invention, the first session information sent by the first front-end server and the second session information sent by the second front-end server are acquired, and the first session information and the second session information correspond to the same terminal; determining a first session duration of the first terminal in the first front-end server according to the first session information, and determining a second session duration of the second terminal in the second front-end server according to the second session information, the clone terminal detection result of the first terminal and the second terminal can be determined according to the first session duration and the second session duration, the clone terminal can be accurately detected according to the session duration of the two terminal devices, and the clone terminal detection effect is improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of computer technology, and in particular to a method, apparatus, device, storage medium and product for detecting cloned terminals. Background Art

[0002] In Internet application systems, application service providers often limit the same account to be logged in and used only on a single terminal, in order to prevent illegal user terminals from abusing system data and resources, which would affect the service experience of legitimate users and even cause system overload or service interruption.

[0003] Clone terminal detection generally distinguishes different terminals by terminal ID. When the same user uses two different terminals to log in to the application at the same time, the application server can use the terminal ID to maintain that the current login account is only available on one terminal. However, there are still users who can completely clone all the information of a terminal through technical means. When these users log in on multiple cloned terminals, the server cannot detect the cloned terminals by terminal ID and ensure that a single user only uses the service on one terminal, so the cloned terminal detection effect is poor. Summary of the invention

[0004] The embodiments of the present application provide a clone terminal detection method, apparatus, device, storage medium and product to solve the technical problem in the related art of detecting clone terminals by terminal ID and having poor clone terminal detection effect. The clone terminals can be accurately detected and the clone terminal detection effect can be improved.

[0005] In a first aspect, an embodiment of the present application provides a clone terminal detection method, comprising:

[0006] Obtaining first session information sent by a first front-end server and second session information sent by a second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of a first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of a second terminal and updated according to a second network activity of the second terminal;

[0007] In a case where the first session information and the second session information correspond to the same terminal, determining a first session duration of the first terminal at the first front-end server according to the first session information, and determining a second session duration of the second terminal at the second front-end server according to the second session information;

[0008] Determine clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

[0009] In a second aspect, an embodiment of the present application provides a clone terminal detection device, including an information acquisition module, a time analysis module and a clone detection module, wherein:

[0010] The information acquisition module is configured to acquire first session information sent by the first front-end server and second session information sent by the second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of the first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of the second terminal and updated according to a second network activity of the second terminal;

[0011] the time analysis module is configured to determine, when the first session information and the second session information correspond to the same terminal, a first session duration of the first terminal at the first front-end server according to the first session information, and to determine a second session duration of the second terminal at the second front-end server according to the second session information;

[0012] The clone detection module is configured to determine clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

[0013] In a third aspect, an embodiment of the present application provides a cloned terminal detection device, including: a memory and one or more processors;

[0014] The memory is used to store one or more programs;

[0015] When the one or more programs are executed by the one or more processors, the one or more processors implement the cloned terminal detection method as described in the first aspect.

[0016] In a fourth aspect, an embodiment of the present application provides a non-volatile storage medium storing computer executable instructions, wherein the computer executable instructions are used to execute the clone terminal detection method as described in the first aspect when executed by a computer processor.

[0017] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored in a computer-readable storage medium. At least one processor of a device reads and executes the computer program from the computer-readable storage medium, so that the device performs the clone terminal detection method as described in the first aspect.

[0018] The embodiment of the present application obtains first session information sent by a first front-end server and second session information sent by a second front-end server. When the first session information and the second session information correspond to the same terminal, the first session duration of the first terminal at the first front-end server is determined according to the first session information, and the second session duration of the second terminal at the second front-end server is determined according to the second session information. The clone terminal detection results for the first terminal and the second terminal can be determined according to the first session duration and the second session duration, wherein the first session information is generated by the first front-end server according to a first login request of the first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of the second terminal and updated according to a second network activity of the second terminal. In this case, when clone terminals are online at the same time, the clone terminals can be accurately detected according to the session durations of the two terminal devices, thereby improving the clone terminal detection effect. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 is a flow chart of a cloned terminal detection method provided in an embodiment of the present application;

[0020] Figure 2 is a flow chart of another cloned terminal detection method provided in an embodiment of the present application;

[0021] Figure 3 It is a structural schematic diagram of a clone terminal detection device provided in an embodiment of the present application;

[0022] Figure 4 It is a structural schematic diagram of a clone terminal detection device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical scheme and advantages of the present application clearer, the specific embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. It is understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for the convenience of description, only the part related to the present application but not all the contents are shown in the accompanying drawings. Before discussing the exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow chart describes each operation (or step) as a sequential process, many of the operations therein can be implemented in parallel, concurrently or simultaneously. In addition, the order of each operation can be rearranged. The above process can be terminated when its operation is completed, but it can also have additional steps not included in the accompanying drawings. The above process can correspond to a method, a function, a procedure, a subroutine, a subprogram, etc.

[0024] The clone terminal detection method provided in the present application can be applied to clone terminal detection in Internet applications, and aims to accurately detect clone terminals according to the session duration of two terminal devices, thereby improving the clone terminal detection effect.

[0025] In the existing clone terminal detection scheme, different terminals are distinguished by terminal ID. When the same user uses two different terminals to log in to the application at the same time, the application server can maintain the current login account available only on one terminal based on the terminal ID. However, when the user completely clones all the information of a terminal through technical means and logs in on multiple clone terminals, the server cannot judge and ensure that a single user uses the service only on one terminal through the terminal ID. For example, if a session with a terminal with the same terminal ID as the login terminal is detected, it will be considered that there is a clone terminal, but the complexity of the actual network situation is ignored. There may be uncertain delays, packet loss and other abnormalities in the network between the user and the server. When the network situation of a normal user terminal is poor, the user terminal may initiate multiple access requests in a short period of time. At this time, the normal user is easily identified as a clone terminal, and the access request initiated earlier in a complex network may arrive at the server later. At this time, the method cannot accurately determine which is the latest access information that should be used, which will mislead the subsequent operations. Based on this, a clone terminal detection method of an embodiment of the present application is provided to solve the technical problem that the existing clone terminal detection effect is poor.

[0026] Figure 1 A flowchart of a clone terminal detection method provided in an embodiment of the present application is given. The clone terminal detection method provided in an embodiment of the present application can be executed by a clone terminal detection apparatus, which can be implemented in hardware and / or software and integrated in a clone terminal detection device.

[0027] The following description is made by taking the clone terminal detection device executing the clone terminal detection method as an example. Figure 1 , the clone terminal detection method comprises:

[0028] S110: Obtain first session information sent by the first front-end server and second session information sent by the second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of the first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of the second terminal and updated according to a second network activity of the second terminal.

[0029] A cloned terminal can be understood as a terminal that copies or imitates the identity or features of a legitimate terminal to impersonate a real terminal to obtain network, system or service access rights. This type of terminal cloning usually includes copying the hardware address (such as MAC address) and terminal identification (such as IMEI, serial number) of the legitimate terminal, so that the cloned terminal looks the same as the legitimate terminal in the network or system.

[0030] Exemplarily, the clone terminal detection device provided by the present solution receives first session information generated and updated by the first front-end server based on the login and session with the first terminal, and receives second session information generated and updated by the second front-end server based on the login and session with the second terminal. Wherein, when the first session information is updated, the first front-end server will send the updated first session information to the clone terminal detection device, and when the second session information is updated, the second front-end server will send the updated second session information to the clone terminal detection device.

[0031] The front-end server provided by this scheme may be multiple, each of which can establish a connection with a user terminal and provide business services for the user terminal. This scheme is described by taking the first front-end server and the second front-end server as an example. The front-end server provided by this scheme (including the first front-end server and the second front-end server) can receive and respond to login requests from multiple user terminals, as well as receive business requests from user terminals and provide preset business services to user terminals. When the front-end server receives the login request of the terminal device, it will generate the session information corresponding to the user terminal (for example, recording the start time of the session, the latest session time, the session duration, etc.). When the front-end server detects the network activity of the user terminal, it will update the session information corresponding to the user terminal (for example, update the latest session time, the session duration, etc.). Among them, the session information can be used to determine the duration of the session between the user terminal and the front-end server. Optionally, when the user terminal is offline and the duration of the network activity of the user terminal is not detected to reach a preset time threshold, the session information corresponding to the user terminal can be deleted, and the clone terminal detection device is notified to delete the corresponding session information.

[0032] For example, when the first front-end server receives a login request from the first terminal, it generates first session information and sends it to the clone terminal detection device. When the first network activity of the first terminal (such as data uploaded by the first terminal, service requests, heartbeat information, etc.) is subsequently detected, the first session information is updated and the updated first session information is sent to the clone terminal detection device. When the second front-end server receives a login request from the second terminal, it generates second session information and sends it to the clone terminal detection device. When the second network activity of the second terminal (such as data uploaded by the second terminal, service requests, heartbeat information, etc.) is subsequently detected, the second session information is updated and the updated second session information is sent to the clone terminal detection device. After receiving the session information (including the first session information and the second session information), the clone terminal detection device saves the session information, and when receiving the updated session information, it saves the updated session information or overwrites the session information of the corresponding user terminal.

[0033] In one embodiment, the clone terminal detection device may also obtain session information from each front-end server at a preset time interval, that is, the clone terminal detection device may also obtain first session information from the first front-end server and second session information from the second front-end server at a preset time interval.

[0034] S120: When the first session information and the second session information correspond to the same terminal, determine a first session duration of the first terminal at the first front-end server according to the first session information, and determine a second session duration of the second terminal at the second front-end server according to the second session information.

[0035] The cloned terminal detection device provided by this solution continuously receives session information sent by each front-end server and determines whether there is session information from the same user terminal. When there is no cloned device and the network is normal, a user terminal will only have one ongoing session information at the same time. When different session information corresponding to the same user terminal is received, a cloned terminal may appear. Whether a cloned terminal appears can be determined based on the different session information of the user terminal.

[0036] Exemplarily, when the first session information and the second session information correspond to the same terminal (i.e., correspond to the same user terminal), the first session duration of the first terminal on the first front-end server (i.e., the time length from the time the first terminal logs in to the time the first terminal last sends information to the first front-end server) is determined based on the first session information, and the second session duration of the second terminal on the second front-end server (i.e., the time length from the time the second terminal logs in to the time the second terminal last sends information to the second front-end server) is determined based on the second session information.

[0037] In one embodiment, when the first session information and the second session information correspond to the same terminal, the latest update time of the first session information and the second session information of the user terminal can be determined (for example, the upload time of the session information, or the latest network activity time recorded in the session information is used as the latest update time), and when the time distance between the current time and the latest update time of the first session information and / or the second session information exceeds a preset time duration threshold, it can be considered that the session that exceeds the preset time duration threshold has ended, and the first terminal and the second terminal may not be cloned. Terminal judgment.

[0038] S130: Determine clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

[0039] Exemplarily, after determining the first session duration of the first terminal and the second session duration of the second terminal, clone terminal detection results for the first terminal and the second terminal may be determined according to the first session duration and the second session duration.

[0040] For example, under normal circumstances, the same user terminal will only have one ongoing session at the same time. When the first session duration of the first session information and the second session duration of the second session information that exist simultaneously are both greater than the set duration, a clone terminal detection result indicating that a clone terminal exists in the first terminal and the second terminal is generated.

[0041] In one embodiment, when the session duration of only one session information (the first session duration of the first session information or the second session duration of the second session information) is greater than the set duration, or the first session duration of the first session information and the second session duration of the second session information are both less than the set duration, a clone terminal detection result indicating that no clone terminals exist in the first terminal and the second terminal may be generated.

[0042] In the above, by obtaining the first session information sent by the first front-end server and the second session information sent by the second front-end server, when the first session information and the second session information correspond to the same terminal, the first session duration of the first terminal on the first front-end server is determined according to the first session information, and the second session duration of the second terminal on the second front-end server is determined according to the second session information. The clone terminal detection results for the first terminal and the second terminal can be determined according to the first session duration and the second session duration, wherein the first session information is generated by the first front-end server according to the first login request of the first terminal and updated according to the first network activity of the first terminal, and the second session information is generated by the second front-end server according to the second login request of the second terminal and updated according to the second network activity of the second terminal. In this case, when there are clone terminals online at the same time, the clone terminals can be accurately detected according to the session durations of the two terminal devices, thereby improving the clone terminal detection effect.

[0043] Based on the above embodiments, Figure 2 A flowchart of another clone terminal detection method provided in an embodiment of the present application is given, which is a specific implementation of the above clone terminal detection method. Figure 2 , the clone terminal detection method comprises:

[0044] S210: Obtain first session information sent by the first front-end server and second session information sent by the second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of the first terminal and is updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of the second terminal and is updated according to a second network activity of the second terminal.

[0045] The front-end server provided by this solution will maintain a session information for each user terminal that accesses it. The session (session) may include the following data: terminal identification information (which may be the user's unique ID (uid) and / or the user terminal ID (dev_id), the server identification information (sid) of the front-end server), connection identification information (conn_id, the unique ID of the user terminal connected to the front-end server, generated by the front-end server), the login request time (login_t) of receiving the login request from the user terminal, and the network activity time (recv_t, the time when the user terminal last sent data to the front-end server, i.e., the last network activity time).

[0046] In a possible embodiment, the first front-end server provided by the present solution generates first session information based on a first login request from the first terminal. It may be that upon receiving the first login request from the first terminal, the first connection identification information corresponding to the first terminal is generated, and the first session information is generated based on the first terminal identification information of the first terminal, the first server identification information of the first front-end server, the first connection identification information, and the login request time when the first login request is received.

[0047] Exemplarily, when the first terminal needs to log in to the first front-end server, it will send a first login request to the first front-end server. After receiving the first login request sent by the first terminal, the first front-end server will generate (for example, randomly generate) first connection identification information for the first terminal, and generate first session information based on the first terminal identification information of the first terminal, the first server identification information of the first front-end server, the first connection identification information, and the login request time when the first login request is received. Among them, the first network activity time in the first session information can be set to the time corresponding to the login request time. This solution can accurately determine the duration of the first session of the first terminal on the first front-end server by accurately generating the first session information based on the first terminal identification information of the first terminal, the first server identification information of the first front-end server, the first connection identification information, and the login request time when the first login request is received, thereby ensuring the accuracy of clone terminal detection.

[0048] In a possible embodiment, the second front-end server provided by the present solution generates second session information based on a second login request from the second terminal. It may be that upon receiving the second login request from the second terminal, the second connection identification information corresponding to the second terminal is generated, and the second session information is generated based on the second terminal identification information of the second terminal, the second server identification information of the second front-end server, the second connection identification information, and the login request time when the second login request is received.

[0049] Exemplarily, when the second terminal needs to log in to the second front-end server, it will send a second login request to the second front-end server. After receiving the second login request sent by the second terminal, the second front-end server will generate (for example, randomly generate) second connection identification information for the second terminal, and generate second session information based on the second terminal identification information of the second terminal, the second server identification information of the second front-end server, the second connection identification information, and the login request time when the second login request is received. Among them, the second network activity time in the second session information can be set to the time corresponding to the login request time. This solution can accurately determine the duration of the second session of the second terminal on the second front-end server by accurately generating the second session information based on the second terminal identification information of the second terminal, the second server identification information of the second front-end server, the second connection identification information, and the login request time when the second login request is received, thereby ensuring the accuracy of clone terminal detection.

[0050] After generating the session information of the user terminal, the front-end server will detect the network activities between the user terminal and the front-end server in real time (for example, the user terminal sends data, service requests, heartbeat information, etc. to the front-end server), and when the network activities between the user terminal and the front-end server are detected, the network activity time in the session information of the user terminal is updated to complete the update of the session information of the user terminal.

[0051] In a possible embodiment, the first front-end server provided by the present solution updates the first session information according to the first network activity of the first terminal. When the first network activity of the first terminal is detected, the first network activity time recorded in the first session information is updated according to the network activity time of the detected first network activity.

[0052] Exemplarily, after successfully logging into the first front-end server, the first terminal can conduct network activities with the first front-end server, such as sending business data, business requests, heartbeat information, etc. to the first front-end server. When the first front-end server detects the first network activity of the first terminal, it updates the first network activity time recorded in the first session information according to the network activity time of the first network activity (the network activity time may be the time when the first network activity was detected), thereby updating the first session information. By updating the first session information according to the network activity time of the first network activity of the first terminal, this solution can accurately determine the duration of the first session of the first terminal on the first front-end server, thereby ensuring the accuracy of clone terminal detection.

[0053] In a possible embodiment, the second front-end server provided by the present solution updates the second session information according to the second network activity of the second terminal. When the second network activity of the second terminal is detected, the second network activity time recorded in the second session information is updated according to the network activity time of the detected second network activity.

[0054] Exemplarily, after successfully logging into the second front-end server, the second terminal can conduct network activities with the second front-end server, such as sending business data, business requests, heartbeat information, etc. to the second front-end server. When the second front-end server detects the second network activity of the second terminal, it updates the second network activity time recorded in the second session information according to the network activity time of the second network activity (the network activity time may be the time when the second network activity is detected), thereby updating the second session information. By updating the second session information according to the network activity time of the second network activity of the second terminal, this solution can accurately determine the duration of the second session of the second terminal on the second front-end server, thereby ensuring the accuracy of clone terminal detection.

[0055] S220: When the first session information and the second session information correspond to the same terminal, determine the first session duration of the first terminal on the first front-end server according to the first network activity time and the first login request time in the first session information, and determine the second session duration of the second terminal on the second front-end server according to the second network activity time and the second login request time in the second session information.

[0056] Exemplarily, when the received first session information and the second session information are session information corresponding to the same terminal (for example, the user unique ID and the user terminal ID are the same), the first network activity time and the first login request time in the first session information can be determined, the difference between the first network activity time and the first login request time can be calculated, and the difference can be used as the first session duration of the first terminal at the first front-end server; and the second network activity time and the second login request time in the second session information can be determined, the difference between the second network activity time and the second login request time can be calculated, and the difference can be used as the second session duration of the second terminal at the second front-end server. This solution can accurately determine whether there is a cloned terminal by determining the session duration of the user terminal at the front-end server according to the network activity time and the login request time, thereby ensuring the accuracy of cloned terminal detection.

[0057] S230: When both the first session duration and the second session duration reach a preset time length, determine that the clone terminal detection results of the first terminal and the second terminal are clone terminals.

[0058] Exemplarily, after determining the duration of the first session and the duration of the second session, it is determined whether the first session duration and the second session duration reach a preset time length (e.g., 10s, 20s, 30s, etc.). When both the duration of the first session and the duration of the second session reach the preset time length, it can be determined that the clone terminal detection results of the first terminal and the second terminal are clone terminals, and it is possible that the first terminal or the second terminal is a clone terminal, or it is possible that both the first terminal and the second terminal are clone terminals; and when either the duration of the first session or the duration of the second session does not reach the preset time length, it can be determined that the clone terminal detection results of the first terminal and the second terminal are clone terminals.

[0059] In a possible embodiment, after determining the clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration, the clone terminal detection method provided by the present solution may also determine a target terminal in the first terminal and the second terminal when the clone terminal detection result is that the clone terminal detection result for the first terminal and the second terminal is that a clone terminal exists, and perform a preset operation on the target terminal.

[0060] Exemplarily, when the clone terminal detection result of the first terminal and the second terminal is that there is a clone terminal, the target terminal can be determined in the first terminal and the second terminal, and a preset operation can be performed on the target terminal. The target terminal can be one of the first terminal and the second terminal (for example, the user terminal with a login request time before or after is determined as the target terminal), and the preset operation can be disconnecting the target terminal, sending a warning message to the target terminal or the monitoring system, and asking the target terminal to verify user information. This solution reduces the abuse of system data and resources by clone terminals by performing preset operations in the first terminal and the second terminal, resulting in the service experience of legitimate users being affected.

[0061] For example, when a user terminal logs in to a front-end server, the front-end server continuously sends the currently logged-in session information: {sid, uid, dev_id, conn_id, login_t, recv_t} to the clone terminal detection device at a configured time interval. While the user terminal is online, the front-end server continuously reports updated session information to the clone terminal detection device at a configured interval. Before the user terminal's existing session ends, if the clone terminal is used to log in again to connect to another front-end server, the front-end server will also report the newly generated session information to the clone terminal detection device. At this time, there are two session information records for the same user terminal on the clone terminal detection device: {sid1, conn1, uid, dev_id, login_t1, recv_t1} and {sid2, conn2, uid, dev_id, login_t2, recv_t2}. If the duration of the two sessions (recv_t1-login_t1 and recv_t2-login_t2) exceeds the threshold, the clone terminal detection device can determine that there is a clone terminal login based on this group of sessions.

[0062] For normal users, there will only be a session on one front-end server at the same time, that is, there is only one session record for the same (uid, dev_id) on the clone terminal detection device, so the user terminal will not be judged as a clone terminal. For network anomalies, suppose a normal user terminal initiates two login connection requests in a short period of time. At this time, the clone terminal detection device will record two session information, but for normal users, there will only be network activity on one session, that is, only one session will continue to grow, that is, only one session satisfies: (recv_t-login_t)>T j , T j It is a preset time length. In this case, a normal user terminal will not be determined as a clone terminal.

[0063] For cloned terminals, when more than two cloned terminals maintain a continuous session, as long as there is network activity on the terminal, the front-end server will update the last network activity time of the terminal and report it to the cloned terminal detection device. Each time the cloned terminal detection device receives a session report from the front-end server, it can query the duration of each session (recv_t-lt) in combination with the recorded session information. When the duration of two sessions of the same (uid, dev_id) exceeds the configured preset time length, the user's session can be determined as a cloned terminal, and then processed according to business needs. For existing user terminals (or Internet application apps), there is no need to make additional modifications to the user terminals, only modifications on the server side are required, which can cover both new and old user terminals, improving the applicability of cloned terminal detection.

[0064] In the above, by obtaining the first session information sent by the first front-end server and the second session information sent by the second front-end server, when the first session information and the second session information correspond to the same terminal, the first session duration of the first terminal in the first front-end server is determined according to the first session information, and the second session duration of the second terminal in the second front-end server is determined according to the second session information. The clone terminal detection results of the first terminal and the second terminal can be determined according to the first session duration and the second session duration, wherein the first session information is generated by the first front-end server according to the first login request of the first terminal and updated according to the first network activity of the first terminal, and the second session information is generated by the second front-end server according to the second login request of the second terminal and updated according to the second network activity of the second terminal. When there are clone terminals online at the same time, the clone terminals can be accurately detected according to the session duration of the two terminal devices, thereby improving the clone terminal detection effect. At the same time, by determining the session duration of the user terminal in the front-end server according to the network activity time and the login request time, it is possible to accurately determine whether there is a clone terminal, thereby ensuring the accuracy of clone terminal detection. In addition, clone terminal detection does not require additional modification of the user terminal, but only requires modification on the server side, which can cover both new and old user terminals, thereby improving the applicability of clone terminal detection.

[0065] Figure 3 Schematic diagram of a cloned terminal detection device provided in an embodiment of the present application. Figure 3 The clone terminal detection device includes an information acquisition module 31, a time analysis module 32 and a clone detection module 33.

[0066] Among them, the information acquisition module 31 is configured to obtain first session information sent by the first front-end server and second session information sent by the second front-end server, wherein the first session information is generated by the first front-end server according to the first login request of the first terminal and updated according to the first network activity of the first terminal, and the second session information is generated by the second front-end server according to the second login request of the second terminal and updated according to the second network activity of the second terminal; the time analysis module 32 is configured to determine the first session duration of the first terminal on the first front-end server according to the first session information when the first session information and the second session information correspond to the same terminal, and determine the second session duration of the second terminal on the second front-end server according to the second session information; the clone detection module 33 is configured to determine the clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

[0067] In the above, by obtaining the first session information sent by the first front-end server and the second session information sent by the second front-end server, when the first session information and the second session information correspond to the same terminal, the first session duration of the first terminal on the first front-end server is determined according to the first session information, and the second session duration of the second terminal on the second front-end server is determined according to the second session information. The clone terminal detection results for the first terminal and the second terminal can be determined according to the first session duration and the second session duration, wherein the first session information is generated by the first front-end server according to the first login request of the first terminal and updated according to the first network activity of the first terminal, and the second session information is generated by the second front-end server according to the second login request of the second terminal and updated according to the second network activity of the second terminal. In this case, when there are clone terminals online at the same time, the clone terminals can be accurately detected according to the session durations of the two terminal devices, thereby improving the clone terminal detection effect.

[0068] In a possible embodiment, the time analysis module 32 determines the duration of the first session of the first terminal on the first front-end server according to the first session information, and is configured as follows:

[0069] Determine a first session duration of the first terminal on the first front-end server according to the first network activity time and the first login request time in the first session information;

[0070] The time analysis module 32 determines the duration of the second session of the second terminal at the second front-end server according to the second session information, and is configured as follows:

[0071] Determine the second session duration of the second terminal on the second front-end server according to the second network activity time and the second login request time in the second session information.

[0072] In a possible embodiment, the clone detection module 33 determines clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration, and is configured as follows:

[0073] When both the first session duration and the second session duration reach a preset time length, it is determined that the clone terminal detection results of the first terminal and the second terminal are that clone terminals exist.

[0074] In a possible embodiment, the first front-end server generates first session information according to the first login request of the first terminal, and is configured as follows:

[0075] In the case of receiving a first login request from a first terminal, generating first connection identification information corresponding to the first terminal, and generating first session information according to the first terminal identification information of the first terminal, the first server identification information of the first front-end server, the first connection identification information, and the login request time when the first login request is received;

[0076] The second front-end server generates second session information according to the second login request of the second terminal, and is configured as follows:

[0077] When a second login request from a second terminal is received, second connection identification information corresponding to the second terminal is generated, and second session information is generated based on the second terminal identification information of the second terminal, the second server identification information of the second front-end server, the second connection identification information, and the login request time when the second login request is received.

[0078] In a possible embodiment, the first front-end server updates the first session information according to the first network activity of the first terminal, and is configured as follows:

[0079] When a first network activity of the first terminal is detected, updating the first network activity time recorded in the first session information according to the network activity time when the first network activity is detected;

[0080] The second front-end server updates the second session information according to the second network activity of the second terminal, and is configured as follows:

[0081] In a case where the second network activity of the second terminal is detected, the second network activity time recorded in the second session information is updated according to the network activity time when the second network activity is detected.

[0082] In a possible embodiment, the clone terminal detection device further includes a result processing module, which is configured to: when the clone terminal detection result is that the clone terminal detection result of the first terminal and the second terminal indicates that there is a clone terminal, determine a target terminal in the first terminal and the second terminal, and perform a preset operation on the target terminal.

[0083] It is worth noting that in the above-mentioned embodiment of the clone terminal detection device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be realized; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the embodiments of the present application.

[0084] The embodiment of the present application further provides a clone terminal detection device, which can be integrated with the clone terminal detection apparatus provided in the embodiment of the present application. Figure 4 Schematic diagram of a cloned terminal detection device provided in an embodiment of the present application. Figure 4 The clone terminal detection device includes: an input device 43, an output device 44, a memory 42 and one or more processors 41; the memory 42 is used to store one or more programs; when the one or more programs are executed by the one or more processors 41, the one or more processors 41 implement the clone terminal detection method provided in the above embodiment. The clone terminal detection device, equipment and computer provided above can be used to execute the clone terminal detection method provided in any of the above embodiments, and have corresponding functions and beneficial effects.

[0085] The embodiment of the present application also provides a non-volatile storage medium storing computer executable instructions, which are used to execute the clone terminal detection method provided in the above embodiment when executed by a computer processor. Of course, the non-volatile storage medium storing computer executable instructions provided in the embodiment of the present application, whose computer executable instructions are not limited to the clone terminal detection method provided above, can also execute the related operations in the clone terminal detection method provided in any embodiment of the present application. The clone terminal detection apparatus, device and storage medium provided in the above embodiment can execute the clone terminal detection method provided in any embodiment of the present application. For technical details not described in detail in the above embodiment, please refer to the clone terminal detection method provided in any embodiment of the present application.

[0086] On the basis of the above embodiments, the embodiments of the present application also provide a computer program product. The technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer program product is stored in a storage medium and includes a number of instructions for enabling a computer device, a mobile terminal or a processor therein to execute all or part of the steps of the cloned terminal detection method provided in each embodiment of the present application.

Claims

1. A method for detecting a cloned terminal, characterized in that: include: Obtaining first session information sent by a first front-end server and second session information sent by a second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of a first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of a second terminal and updated according to a second network activity of the second terminal; In a case where the first session information and the second session information correspond to the same terminal, determining a first session duration of the first terminal at the first front-end server according to the first session information, and determining a second session duration of the second terminal at the second front-end server according to the second session information; Determine clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

2. The method for detecting cloned terminals according to claim 1, characterized in that: The determining, according to the first session information, the first session duration of the first terminal in the first front-end server includes: Determine a first session duration of the first terminal on the first front-end server according to the first network activity time and the first login request time in the first session information; The determining, according to the second session information, the second session duration of the second terminal in the second front-end server includes: Determine the second session duration of the second terminal in the second front-end server according to the second network activity time and the second login request time in the second session information.

3. The method for detecting cloned terminals according to claim 1, characterized in that: The determining, according to the first session duration and the second session duration, clone terminal detection results for the first terminal and the second terminal includes: When both the first session duration and the second session duration reach a preset time length, it is determined that the clone terminal detection result of the first terminal and the second terminal is that clone terminals exist.

4. The method for detecting cloned terminals according to claim 1, characterized in that: The first front-end server generates first session information according to a first login request of the first terminal, including: In the case of receiving a first login request from a first terminal, generating first connection identification information corresponding to the first terminal, and generating first session information according to the first terminal identification information of the first terminal, the first server identification information of the first front-end server, the first connection identification information, and the login request time when the first login request is received; The second front-end server generates second session information according to the second login request of the second terminal, including: When a second login request from a second terminal is received, second connection identification information corresponding to the second terminal is generated, and second session information is generated based on the second terminal identification information of the second terminal, the second server identification information of the second front-end server, the second connection identification information, and the login request time when the second login request is received.

5. The method for detecting cloned terminals according to claim 1, characterized in that: The first front-end server updates the first session information according to the first network activity of the first terminal, including: In a case where a first network activity of the first terminal is detected, updating the first network activity time recorded in the first session information according to the network activity time when the first network activity is detected; The second front-end server updates the second session information according to the second network activity of the second terminal, including: In a case where a second network activity of the second terminal is detected, the second network activity time recorded in the second session information is updated according to the network activity time when the second network activity is detected.

6. The method for detecting cloned terminals according to claim 1, characterized in that: After determining clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration, the method further includes: In a case where the clone terminal detection result is that the clone terminal detection result of the first terminal and the second terminal indicates that a clone terminal exists, a target terminal is determined among the first terminal and the second terminal, and a preset operation is performed on the target terminal.

7. A clone terminal detection device, characterized in that: It includes information acquisition module, time analysis module and clone detection module, among which: The information acquisition module is configured to acquire first session information sent by the first front-end server and second session information sent by the second front-end server, wherein the first session information is generated by the first front-end server according to a first login request of the first terminal and updated according to a first network activity of the first terminal, and the second session information is generated by the second front-end server according to a second login request of the second terminal and updated according to a second network activity of the second terminal; the time analysis module is configured to determine, when the first session information and the second session information correspond to the same terminal, a first session duration of the first terminal at the first front-end server according to the first session information, and to determine a second session duration of the second terminal at the second front-end server according to the second session information; The clone detection module is configured to determine clone terminal detection results for the first terminal and the second terminal according to the first session duration and the second session duration.

8. A clone terminal detection device, characterized in that: include: memory and one or more processors; The memory is used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the cloned terminal detection method according to any one of claims 1 to 6.

9. A non-volatile storage medium storing computer executable instructions, characterized in that: The computer executable instructions are used to execute the cloned terminal detection method according to any one of claims 1 to 6 when executed by a computer processor.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the cloned terminal detection method according to any one of claims 1 to 6 is implemented.

Images