CN103685254B

CN103685254B - The safety detection method and server of public account information

Info

Publication number: CN103685254B
Application number: CN201310655368.7A
Authority: CN
Inventors: 魏钦刚
Original assignee: Beijing Qihoo Technology Co Ltd; Qizhi Software Beijing Co Ltd
Current assignee: Beijing Qihoo Technology Co Ltd
Priority date: 2013-12-05
Filing date: 2013-12-05
Publication date: 2017-11-14
Anticipated expiration: 2033-12-05
Also published as: CN103685254A

Abstract

The invention provides a kind of safety detection method and server of public account information, wherein, the safety detection method of public account information includes：Obtain the information processing mandate of the public account of social networks；The application programming interfaces API provided according to the social network-i i-platform where the public account of social networks described in the authorization invocation；The information of current server is configured to the public account of the social networks by the API, wherein, the information of the current server includes the uniform resource position mark URL address of current server, so that the current server that public account information is sent to the URL addresses instruction by the public account of the social networks carries out safety detection.By the present invention, the security of the public account of social networks is effectively increased, ensure that the public account of social networks can efficiently and safely provide the user corresponding service.

Description

The safety detection method and server of public account information

Technical field

The present invention relates to network technique field, safety detection method and service more particularly to a kind of public account information Device.

Background technology

Social networks passes through social networking service（Social Networking Service, SNS）Possess for a group identical Interest and the people of activity create on-line communities, wherein, social networking service is based on internet, provides the user various contacts, friendship The interaction path of stream, thus, most social networks can provide a variety of modes for allowing user mutual to get up, and such as chat, post a letter, shadow Sound, sharing files, blog, discussion group etc..

With the development of social networking service technology, social networks plays more and more important angle in the life of people Color, turn into people obtain information, show self, the window of promotion.But at the same time, there is also such as believe for social networks A series of safe drawbacks of leakage of breath etc..By taking wechat public platform as an example, by wechat public platform, personal and enterprise all may be used To make the i.e. public account of the public number of a wechat.On the one hand, the public account owner can pass through this public account group The contents such as dispatch word, picture, voice；On the other hand, public account can receive the request of user, use the resource of public account For the user service.However, under existing pattern, it is possible to carry malicious code in the information that user sends to public account Or malicious act information, and existing wechat public platform can not be differentiated to this, so as to cause the generation of malicious act, such as Information in public account, resource etc. are stolen, utilizes public account to carry out unlawful activities.

Therefore, the safety of public account in the public account such as wechat public platform of social networks how is effectively ensured Property, so that public account can efficiently and safely provide the user service, become urgent problem to be solved.

The content of the invention

In view of the public account number safety of above-mentioned existing social networks is poor, service can not be efficiently and safely provided the user The problem of, it is proposed that the present invention is to provide a kind of public account for overcoming above mentioned problem or solving the above problems at least in part The safety detection method and server of number information.

According to one aspect of the present invention, there is provided a kind of safety detection method of public account information, including：Obtain society Hand over the information processing mandate of the public account of network；According to the society where the public account of social networks described in the authorization invocation The application programming interfaces API for handing over the network platform to provide；Pass through public account configuration current clothes of the API to the social networks The information of business device, wherein, the information of the current server includes the uniform resource position mark URL address of current server, with Make the public account of the social networks that public account information to be sent to the current server of the URL addresses instruction to be pacified Full inspection is surveyed.

Alternatively, in the information for configuring current server to the public account of the social networks by the API The step of after, in addition to：The public account of the social networks is sent to from the public account acquisition user of the social networks Number information；The information that the public account of the social networks is sent to the user carries out safety detection, and detection is tied Fruit returns to the public account of the social networks.

Alternatively, it is described testing result is returned to the social networks public account the step of include：If according to inspection Survey result and determine that the information that the user is sent to the public account of the social networks is dangerous information, then to the social network The public account of network returns to response message, is carried in the response message and indicates that the user is sent to the social networks The information of public account is the content of dangerous information；If determine that the user is sent to the social networks according to testing result The information of public account is security information, then the source in the information for the public account that the user is sent to the social networks Address and destination address are exchanged, and the user after exchanging is sent to the information of the public account of the social networks Carry in the response message, and the response message is returned to the public account of the social networks.

Alternatively, the information of the public account that the social networks is sent to the user carries out safety detection Step includes：The public account of the social networks is sent to the user using the safety detection instrument of current server Information carries out safety detection；And/or the user is sent to the information of the public account of the social networks and is sent to high in the clouds Safety detection is carried out, and receives the testing result that the high in the clouds returns.

Alternatively, it is described that the social networks is sent to the user using the safety detection instrument of current server The step of information progress safety detection of public account, includes：The public account of the social networks is sent to from the user The information of the user is obtained in information；By the information in the safety detection database of the information of the user and current server Matched, wherein, user's black and white lists of various safe classes are preserved in the safety detection database；Tied according to matching Fruit determines that the user is sent to the safe class of the information of the public account of the social networks.

Alternatively, it is described that the social networks is sent to the user using the safety detection instrument of current server The step of information progress safety detection of public account, includes：The public account of the social networks is sent to from the user The information content is obtained in information；Feature extraction is carried out to described information content；The feature of extraction and current server are preserved Information in safety detection database is matched, wherein, preserve various safe classes in the safety detection database Characteristic information；Determine that the user is sent to safety of the information of the public account of the social networks etc. according to matching result Level.

Alternatively, the social network-i i-platform where the public account of the social networks according to the authorization invocation carries The step of application programming interfaces API of confession, includes：According to the mandate, the society where the public account of the social networks is called The unified API for handing over the public account that the network platform is all social networks in the social network-i i-platform to set；Or root According to the mandate, call in the social network-i i-platform, API corresponding to the public account of the social networks, wherein, Ge Gesuo The public account for stating social networks corresponds to different API.

Alternatively, before the step of information processing mandate of the public account of the acquisition social networks, in addition to：To Social network-i i-platform where the public account of the social networks is registered；And after succeeding in registration, open the social activity The development mode of the network platform, to carry out the configuration of the information of the current server.

According to another aspect of the present invention, there is provided a kind of server, including：First acquisition module, for obtaining social activity The information processing mandate of the public account of network；Calling module, for according to the authorization invocation social networks it is public The application programming interfaces API that social network-i i-platform where account provides；Configuration module, for by the API to the society The information of the public account configuration current server of network is handed over, wherein, the information of the current server includes current server Uniform resource position mark URL address so that public account information is sent to the URL by the public account of the social networks The current server of address instruction carries out safety detection.

Alternatively, the server also includes：Second acquisition module, for the configuration module by the API to After the information of the public account configuration current server of the social networks, obtain and use from the public account of the social networks Family is sent to the information of the public account of the social networks；Detection module, for being sent to the social network to the user The information of the public account of network carries out safety detection；Module is returned to, for testing result to be returned to the public affairs of the social networks Account altogether.

Alternatively, the return module includes：First returns to module, if for the testing result according to the detection module Determine that the information that the user is sent to the public account of the social networks is dangerous information, then to the public affairs of the social networks Account returns to response message altogether, and the public account for indicating that the user is sent to the social networks is carried in the response message Number information be dangerous information content；Second returns to module, if for determining institute according to the testing result of the detection module The information for stating the public account that user is sent to the social networks is security information, then the user is sent into the social activity Source address and destination address in the information of the public account of network are exchanged, and the user after exchanging is sent to institute The information for stating the public account of social networks is carried in the response message, and is returned to the public account of the social networks The response message.

Alternatively, the detection module includes：Current server detection module, for the safety inspection using current server The information that survey instrument is sent to the public account of the social networks to the user carries out safety detection；And/or high in the clouds detection Module, high in the clouds progress safety detection is sent to for the user to be sent to the information of public account of the social networks, And receive the testing result that the high in the clouds returns.

Alternatively, the current server detection module includes：User profile acquisition module, for being sent from the user To the information that the user is obtained in the information of the public account of the social networks；User profile matching module, for by institute The information stated in the information of user and the safety detection database of current server is matched, wherein, the safety detection number According to user's black and white lists that various safe classes are preserved in storehouse；User profile determining module, for being determined according to matching result The user is sent to the safe class of the information of the public account of the social networks.

Alternatively, the current server detection module includes：Information content acquisition module, for being sent from the user The information content is obtained in information to the public account of the social networks；Characteristic extracting module, for described information content Carry out feature extraction；Characteristic information matching module, for the safety detection data for preserving the feature of extraction and current server Information in storehouse is matched, wherein, the characteristic informations of various safe classes is preserved in the safety detection database；Feature Information determination module, for determining that the user is sent to the information of the public account of the social networks according to matching result Safe class.

Alternatively, the calling module includes：First calling module, for according to the mandate, calling the social network Social network-i i-platform where the public account of network sets for the public account of all social networks in the social network-i i-platform The unified API put；Or second calling module, for according to the mandate, calling in the social network-i i-platform, described API corresponding to the public account of social networks, wherein, the public account of each social networks corresponds to different API.

Alternatively, the server also includes：Registering modules, for obtaining social networks in first acquisition module Before the information processing mandate of public account, noted to the social network-i i-platform where the public account of the social networks Volume；Pattern opening module, for after succeeding in registration, opening the development mode of the social network-i i-platform, to carry out described work as The configuration of the information of preceding server.

In the safety detection scheme of the public account information of the embodiment of the present invention, the public account of social networks is being got Information processing mandate after, pass through social network-i i-platform provide API（Application Programming Interface, Application programming interfaces）By in the public account of the information configuration of current server to social networks, wherein, the letter of current server Breath includes the URL of current server（Uniform Resource Locator, URL）Address.So, when After public account receives the information that user sends, corresponding server can be sent information to according to the URL addresses and entered Row safety detection, to determine the security of information that user sends, and then handled accordingly.Pass through the embodiment of the present invention Public account information safety detection scheme, effectively increase the security of the public account of social networks, ensure that social network The public account of network can efficiently and safely provide the user corresponding service.

Described above is only the general introduction of technical solution of the present invention, in order to better understand the technological means of the present invention, And can be practiced according to the content of specification, and in order to allow above and other objects of the present invention, feature and advantage can Become apparent, below especially exemplified by the embodiment of the present invention.

Brief description of the drawings

By reading the detailed description of hereafter preferred embodiment, it is various other the advantages of and benefit it is common for this area Technical staff will be clear understanding.Accompanying drawing is only used for showing the purpose of preferred embodiment, and is not considered as to the present invention Limitation.And in whole accompanying drawing, identical part is denoted by the same reference numerals.In the accompanying drawings：

Fig. 1 is a kind of step flow chart of the safety detection method of according to embodiments of the present invention one public account information；

Fig. 2 is a kind of step flow chart of the safety detection method of according to embodiments of the present invention two public account information；

Fig. 3 is a kind of step flow chart of the safety detection method of according to embodiments of the present invention three public account information；

Fig. 4 is a kind of structured flowchart of according to embodiments of the present invention four server.

Embodiment

The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although the disclosure is shown in accompanying drawing Exemplary embodiment, it being understood, however, that may be realized in various forms the disclosure without should be by embodiments set forth here Limited.On the contrary, these embodiments are provided to facilitate a more thoroughly understanding of the present invention, and can be by the scope of the present disclosure Completely it is communicated to those skilled in the art.

Embodiment one

Reference picture 1, show a kind of step of the safety detection method of according to embodiments of the present invention one public account information Rapid flow chart.

The safety detection method of the public account information of the present embodiment comprises the following steps：

Step S102：Obtain the information processing mandate of the public account of social networks.

The public account of each social networks is externally provided with certain mandate, and such as providing message reference to user awards Power, resource use mandate etc..In the present embodiment, the server of safety detection is carried out to public account information to be needed to obtain public account Number information processing mandate, the mandate includes but is not limited to：Acquisition of information, message reference, information processing, feedback of the information etc..

Step S104：There is provided according to the social network-i i-platform where the public account of information processing authorization invocation social networks API.

Wherein, the API is used for the relevant information that server configures book server to corresponding public account, e.g., this service The URL addresses of device, mark, information processing capability etc..

The API that social network-i i-platform provides can be the unified API for public account all on platform, and server can Using the part or all of interface in the unified API, to carry out corresponding information configuration and processing；Social network-i i-platform provides API can also be the different API provided for each public account, different API has different interfaces and function, takes The API that business device can be directed to the public account for needing to be serviced carries out corresponding information configuration and processing.It is of course also possible to Partial account number in multiple public accounts has identical API, it is also possible to which the API of each account is differed.

Step S106：The information of current server is configured to the public account of social networks by API, so that social networks Public account by public account information be sent to current server carry out safety detection.

Wherein, the information of current server includes the URL addresses of current server, by the URL addresses, can make social activity The current server that public account information is sent to URL addresses instruction by the public account of network carries out safety detection.

By the present embodiment, after the information processing mandate of public account of social networks is got, pass through social networks The API that platform provides by the public account of the information configuration of current server to social networks, wherein, the letter of current server Breath includes the URL addresses of current server.So, can basis after public account receives the information that user sends The URL addresses send information to corresponding server and carry out safety detection, to determine the security of information that user sends, And then handled accordingly.By the safety detection scheme of the public account information of the present embodiment, social network is effectively increased The security of the public account of network, it ensure that the public account of social networks can efficiently and safely provide the user corresponding service.

Embodiment two

Reference picture 2, show a kind of step of the safety detection method of according to embodiments of the present invention two public account information Rapid flow chart.

Step S202：Current server is registered to the social network-i i-platform where the public account of social networks.

Step S204：Current server opens the development mode of social network-i i-platform after succeeding in registration, current to carry out The configuration of the information of server.

Social network-i i-platform provides development mode for its user, and under development mode, developer can pass through social network The interface that network platform provides, realizes much information processing function, e.g., can carry out information configuration；User can be received to be transmitted across The message come, the system developed by developer feedback corresponding content；The geographical position that user sends over can be received Put, nearby dining room information or transport information can be fed back by geographical position；Pushed by event, user can be identified to the public The situation of operation is subscribed to and unsubscribed to account；The interface of development mode, can also feedback sound except that can feed back picture and text message Frequency content is to user；Can be by the contents such as general-purpose interface uploading pictures, voice, video to public platform, and can adjust With these materials；Menu customizing function, etc. can be managed.

Development mode is set on by current server after succeeding in registration, and then binds corresponding interface document, just The unlatching of development mode is completed, can subsequently carry out system development in this mode.

Step S206：Current server obtains the information processing mandate of the public account of social networks.

Each public account has authorization function, only obtains public account and authorizes accordingly, could be in the mandate In the range of carry out corresponding information processing.

Step S208：Current server is according to the public account of the information processing authorization invocation of the public account social networks The API that the social network-i i-platform at place provides.

Wherein, the API is used for the relevant information that current server configures current server to public account, e.g., current clothes It is engaged in the URL addresses of device, mark, information processing capability etc..

The API that social network-i i-platform provides can be for all public accounts on platform unified API or The different API provided for each public account, then preferably, this step includes：Awarded according to the information processing of public account Power, the social network-i i-platform where calling the public account of the social networks are all social networks in social network-i i-platform The unified API that public account is set；Or the information processing mandate according to public account, call in social network-i i-platform, be somebody's turn to do API corresponding to the public account of social networks, now, the public account of each social networks correspond to different API.

Step S210：Current server configures the information of current server by API to the public account of social networks.

Wherein, the information of current server includes the URL addresses of current server, so that the public account of social networks will The current server that public account information is sent to the instruction of URL addresses carries out safety detection.

Step S212：Current server is sent to the public account of social networks from the public account acquisition user of social networks Number information.

Step S214：The information that current server is sent to the public account of social networks to user carries out safety detection, And testing result is returned to the public account of social networks.

Wherein, current server is sent to the step of information progress safety detection of the public account of social networks to user Including but not limited to：The information of the public account of social networks is sent to user using the safety detection instrument of current server Carry out safety detection；And/or user is sent to the information of the public account of social networks and is sent to high in the clouds and carries out safe inspection Survey, and receive the testing result of high in the clouds return.

In general, safety detection instrument is provided with current server, such as safety detection program or safety detection application, The information that safety detection instrument is sent to the public account of social networks by corresponding safety detection strategy to user carries out safety Detection, determines that user is sent to the safe class of the information of the public account of social networks according to testing result.In current server When can not be sent to the information of the public account of social networks to user exactly and carrying out safety detection, current server can be with The information that user is sent to the public account of social networks is sent to high in the clouds progress safety detection.High in the clouds has than current service Device more fully safety detection strategy and data, it may call upon third-party application and safety detection carried out to information.Examining in high in the clouds Measure user be sent to social networks public account information safe class after, testing result is returned into current service Device, the information that current server is sent to the public account of social networks according to the testing result that high in the clouds returns to user perform phase The operation answered.

Preferably, the letter of the public account of social networks is sent to user using the safety detection instrument of current server The step of breath progress safety detection, includes：

The information that user is obtained in the information of the public account of social networks is sent to from user；By the information of user with working as Information in the safety detection database of preceding server is matched, wherein, various safety are preserved in safety detection database User's black and white lists of grade；Determine that user is sent to safety of the information of the public account of social networks etc. according to matching result Level；And/or be sent to from user social networks public account information in obtain the information content；The information content is carried out special Sign extraction；Information in the safety detection database that the feature of extraction is preserved with current server is matched, wherein, safety The characteristic information of various safe classes is preserved in Test database；Determine that user is sent to social networks according to matching result The safe class of the information of public account.By black and white lists, user can be quickly determined and be sent to the public of social networks The safe class of the information of account；By feature extraction, the public account that user is sent to social networks can be accurately determined Information property, and then exactly detection user be sent to social networks public account information safe class.

Above-mentioned black and white lists strategy and feature extraction strategy can select one and be used in combination using or according to certain rule, e.g., Black and white lists strategy is first carried out, if the failure of black and white lists strategy performs feature extraction strategy again, or it is opposite etc..

On this basis, it is preferable that the step of testing result is returned to the public account of social networks includes：If according to Testing result determines that the information that user is sent to the public account of social networks is dangerous information, then to the public account of social networks Number response message is returned to, the information that the public account that instruction user is sent to social networks is carried in response message is believed to be dangerous The content of breath；, will if determining that the information that user is sent to the public account of social networks is security information according to testing result The source address and destination address that user is sent in the information of the public account of social networks are exchanged, and by the use after exchanging The information that family is sent to the public account of social networks is carried in response message, and is returned and rung to the public account of social networks Answer information.Exchanged by source address and destination address, on the one hand indicate the letter that user is sent to the public account of social networks The security of breath, on the other hand also mitigate the information processing burden of social network-i i-platform.

It should be noted that determine that the information that user is sent to the public account of social networks is above according to testing result Dangerous information or security information are merely illustrative, and in actual applications, user is sent to the letter of the public account of social networks The safe class not limited to this of breath, can be including a variety of, e.g., and safe class is safe, unknown, suspicious/highly suspicious and evil Meaning etc..Setting for safe class, it is safe class when can to set grade be 10-29（The information of the grade is white letter Breath）, it is unknown grade when grade is 30-49（The information of the grade is gray information）, be when grade is 50-69 it is suspicious/highly may be used Doubt grade（The information of the grade is suspicious information）, it is malice grade when grade is more than or equal to 70（The information of the grade is evil Meaning information）.It is, of course, also possible to which it is other forms to set the grade, the present invention is not any limitation as to this.

Preferably, high in the clouds can also send safety detection strategy to current server, with to the safety in current server Safety detection strategy in detection instrument is updated, as update current server safety detection instrument in black and white lists or Person's characteristic information etc..

By the present embodiment, current server is realized to the information of public account that is sent in social network-i i-platform Safety detection, the security of the public account of social networks is effectively increased, ensure that the public account of social networks can efficiently pacify Corresponding service is provided the user entirely.

Embodiment three

Reference picture 3, show a kind of step of the safety detection method of according to embodiments of the present invention three public account information Rapid flow chart.

For the present embodiment with the public number of public account, i.e. wechat in wechat public platform, current server is to be provided with Exemplified by 360 safety detection servers of safety detection instrument, the safety detection of the public account information of the present invention is illustrated.

The safety detection of the public account information of the present embodiment comprises the following steps：

Step S302：360 safety detection servers are registered to the wechat public platform where the public account of wechat.

Step S304：360 safety detection servers open the development mode of wechat public platform after succeeding in registration, with Carry out the configuration of the information of 360 safety detection servers.

Under the development module of wechat public platform, it is possible to achieve：Information configuration；The message that user sends over is received, The system developed by developer feedbacks corresponding content；The geographical position that user sends over is received, passes through geographical position Put feedback nearby dining room information or transport information；Pushed by event, identification user subscribes to and unsubscribed behaviour to public's account The situation of work；Picture and text message and audio content are fed back to user；Arrived by contents such as general-purpose interface uploading pictures, voice, videos On public platform, and these materials can be called；Menu customizing function is managed, waits various functions.

The development mode of wechat public platform is set on, then by 360 safety detection servers after succeeding in registration Corresponding interface document is bound, to carry out the configuration of the information of 360 safety detection servers and follow-up safety detection.

Step S306：360 safety detection servers obtain the information processing mandate of the public account of wechat.

In wechat public platform, the information processing mandate of public account is a TOKEN, obtains the TOKEN, that is, obtains The mandate of the public account of corresponding wechat.

In the present embodiment, so that 360 safety detection servers are to the safety detection of a public account of wechat as an example, this is micro- It can be the public account in any wechat public platform for needing safety detection service to believe public account, then in this step, 360 Safety detection server needs to obtain the TOKEN that the public account of the wechat is authorized.

Step S308：The wechat is public according to the information processing authorization invocation of the public account of wechat for 360 safety detection servers The API that the wechat public platform where account provides altogether, 360 safety detection services are configured to the public account of wechat by the API The URL addresses of device, so that 360 safety detections that public account information is sent to URL addresses instruction by the public account of wechat take Business device carries out safety detection.

Step S310：360 safety detection servers obtain user from the public account of wechat and are sent to the public account of wechat Information.

Such as, 360 safety detection servers can enter to the message interface that existing wechat public platform provides to developer Row improves, and makes message interface except the message that can be used for receiving user's transmission, is then fed back to by the interface corresponding to user Outside graph-text content or audio content, the 360 safety detection servers that can also be indicated to URL addresses send the user received Message.But not limited to this, 360 safety detection servers can also be obtained by other appropriate ways from the public account of wechat User is sent to the information of the public account of wechat, such as by sending request message to the public account of wechat, to ask user Xiang Wei Believe the mode for the message that public account is sent, obtaining user in the response message returned from the public account of wechat is sent to wechat public affairs The information of account altogether.It is similar, other information that the public account of wechat is sent to from the public account acquisition user of wechat Mode is equally applicable.

Step S312：The information that 360 safety detection servers are sent to the public account of wechat to user carries out safety detection.

It is provided with a variety of safety detection strategies in the safety detection instrument of 360 safety detection servers, including user's is black The feature extraction strategy of white list strategy and information.But not limited to this, other safety detection strategies in actual applications can also It is attached in above-mentioned strategy or substitutes above-mentioned strategy.

For example, user to the public account of some wechat have sent bar, " hello！" information, the public account of the wechat believes this Breath content and the information of the user send jointly to 360 safety detection servers, and 360 safety detection servers are getting this After information, the mark of user is therefrom extracted, such as the title either ID number of user or the other marks of user, then to user Black and white lists storehouse in carry out matching inquiry.Wherein, the user that various safe classes are stored with the black and white lists storehouse of user is black White list.If determining that the user is white list user according to matching inquiry result, by the source address in the information and destination Location is exchanged, and generates response message according to the information after exchanging, the response message is returned to the public account of wechat.If according to Black list user is determined that the user is with Query Result, then response message is returned to the public account of wechat, in the response message Carry the content for indicating that the information is dangerous information.The public account of wechat can abandon the use after the response message is received Family is sent to the information of the public account of wechat, can also shield the subsequent message of the user, can not also deal with.

If matching the mark of user not successfully in the black and white lists storehouse of user, wechat can be sent to the user The information of public account carries out feature extraction, then the result of feature extraction is matched with the characteristic information in characteristic information storehouse Inquiry.Wherein, the superfine characteristic information of various safety in characteristic information storehouse.Preferably, it is sent to the public account of wechat from user Information in the information extracted, and the characteristic information stored in characteristic information storehouse is behavior description information.Equally, if according to The characteristic information that extraction is determined with Query Result is security information, then the source being sent to user in the information of the public account of wechat Address and destination address are exchanged, and generate response message according to the information after exchanging, the response is returned to the public account of wechat Information.If determining that the characteristic information of extraction is danger according to matching inquiry result, response message is returned to the public account of wechat, The content for indicating that the information is dangerous information is carried in the response message.

If by said process, it can not still determine that user is sent to the safe class of the information of the public account of wechat, then 360 Safety detection server can transmit this information to high in the clouds and carry out matching inquiry, and then true according to the matching inquiry result in high in the clouds The security of the fixed information, and then carry out the follow-up processing that testing result is returned to the public account of wechat.

In addition, the safety detection instrument in 360 safety detection servers can also be according to the testing result that high in the clouds returns more New local safety detection database, such as the black and white lists storehouse and/or characteristic information storehouse of user.Such as, 360 safety detection server The user of extraction is identified to send and to high in the clouds, determines that the user is identified as safe user's mark after the inquiry of high in the clouds, then 360 safety Detection service device can identify the user black and white name for adding local user according to the information in the testing result that high in the clouds returns In single storehouse, and it is identified as white list.For another example 360 safety detection servers send the characteristic information of extraction to high in the clouds, high in the clouds This feature information is determined after inquiry as dangerous characteristic information, then the detection that 360 safety detection servers can return according to high in the clouds As a result the information in, this feature information is added in local characteristic information storehouse, and is identified as the characteristic information of danger.

Step S314：Testing result is returned to the public account of wechat by 360 safety detection servers.

User is obtained from the public account of wechat be sent to the public account of wechat with 360 safety detection servers in step S310 Information it is similar, in this step, 360 safety detection servers can also pass through the message interface after improvement or other message transmissions Mode, return to testing result to the public account of wechat.

Step S316：The testing result that the public account of wechat returns according to 360 safety detection servers, is sent to user The information of the public account of wechat is handled.

Such as, the testing result that the public account of wechat returns according to 360 safety detection servers, it is micro- to determine that user is sent to When the information for believing public account is dangerous information, the information that the user is sent to the public account of wechat can be abandoned, can also be shielded The subsequent message of the user is covered, can not also be dealt with.The detection that the public account of wechat returns according to 360 safety detection servers As a result, when to determine the information that user is sent to the public account of this wechat be security information, then corresponding return can be returned to user Complex information etc..

By the present embodiment, 360 safety detection servers are realized to the public account of wechat in wechat public platform Safety detection, the security of the public account of wechat is effectively improved and ensured, avoid malicious user to the public account of wechat Malicious act.

Example IV

Reference picture 4, show a kind of structured flowchart of according to embodiments of the present invention four server.

The server of the present embodiment includes：First acquisition module 402, the information of the public account for obtaining social networks Processing authorizes；Calling module 404, for the social network-i i-platform where the public account according to the authorization invocation social networks The API of offer；Configuration module 406, for configuring the letter of current server to the public account of social networks by the API Breath, wherein, the information of current server includes the URL addresses of current server, so that the public account of social networks will be public The current server that account information is sent to the URL addresses instruction carries out safety detection.

Preferably, the server of the present embodiment also includes：Second acquisition module 408, for passing through institute in configuration module 406 State after API configures the information of current server to the public account of social networks, obtain and use from the public account of social networks Family is sent to the information of the public account of social networks；Detection module 410, for being sent to the public account of social networks to user Number information carry out safety detection；Module 412 is returned to, for testing result to be returned to the public account of social networks.

Preferably, returning to module 412 includes：First returns to module 4122, if for the detection knot according to detection module 410 Fruit determines that the information that user is sent to the public account of social networks is dangerous information, then is returned to the public account of social networks Response message, the information that the public account that instruction user is sent to social networks is carried in the response message is dangerous information Content；Second returns to module 4124, if for determining that user is sent to social networks according to the testing result of detection module 410 The information of public account be security information, then source address in the information for the public account that user is sent to social networks and Destination address is exchanged, and the information that the user after exchanging is sent to the public account of social networks is carried in the response In information, and the response message is returned to the public account of social networks.

Preferably, detection module 410 includes：Current server detection module 4102, for the peace using current server The information that full inspection surveys the public account that instrument is sent to social networks to user carries out safety detection；And/or high in the clouds detection module 4104, high in the clouds progress safety detection is sent to for user to be sent to the information of public account of social networks, and receive cloud Hold the testing result returned.

Preferably, current server detection module 4102 includes：User profile acquisition module 41022, for being sent out from user Give the information that user is obtained in the information of the public account of social networks；User profile matching module 41024, for by user Information matched with the information in the safety detection database of current server, wherein, preserved in safety detection database There are user's black and white lists of various safe classes；User profile determining module 41026, for determining that user sends out according to matching result Give the safe class of the information of the public account of social networks.

Preferably, current server detection module 4102 also includes：Information content acquisition module 41028, for from user It is sent in the information of the public account of social networks and obtains the information content；Characteristic extracting module 41030, for the information content Carry out feature extraction；Characteristic information matching module 41032, for the safety detection for preserving the feature of extraction and current server Information in database is matched, wherein, the characteristic informations of various safe classes is preserved in safety detection database；Feature Information determination module 41034, for determining that user is sent to the peace of the information of the public account of social networks according to matching result Congruent level.

Preferably, calling module 404 includes：First calling module 4042, for according to the mandate, calling social networks Public account where the system that is set for the public account of all social networks in social network-i i-platform of social network-i i-platform One API；Or second calling module 4044, for according to the mandate, calling in social network-i i-platform, social networks API corresponding to public account, wherein, the public account of each social networks corresponds to different API.

Preferably, the server of the present embodiment also includes：Registering modules 414, for obtaining society in the first acquisition module 402 Before the information processing mandate for handing over the public account of network, carried out to the social network-i i-platform where the public account of social networks Registration；Pattern opening module 416, for after succeeding in registration, opening the development mode of social network-i i-platform, currently to be taken The configuration of the information of business device.

The server of the present embodiment is used for the safety for realizing corresponding public account information in aforesaid plurality of embodiment of the method Detection method, and the beneficial effect with corresponding embodiment of the method, will not be repeated here.

Provided herein the safety detection scheme of public account information not with any certain computer, virtual system or its Its equipment is inherently related.Various general-purpose systems can also be used together with teaching based on this.As described above, construct It is obvious with the structure required by the system of the present invention program.In addition, the present invention is not also directed to any certain programmed Language.It should be understood that the content of invention described herein can be realized using various programming languages, and above to specific language The done description of speech is to disclose the preferred forms of the present invention.

In the specification that this place provides, numerous specific details are set forth.It is to be appreciated, however, that the implementation of the present invention Example can be put into practice in the case of these no details.In some instances, known method, structure is not been shown in detail And technology, so as not to obscure the understanding of this description.

Similarly, it will be appreciated that in order to simplify the disclosure and help to understand one or more of each inventive aspect, Above in the description to the exemplary embodiment of the present invention, each feature of the invention is grouped together into single implementation sometimes In example, figure or descriptions thereof.However, the method for the disclosure should be construed to reflect following intention：I.e. required guarantor The application claims of shield features more more than the feature being expressly recited in each claim.More precisely, such as right As claim reflects, inventive aspect is all features less than single embodiment disclosed above.Therefore, it then follows tool Thus claims of body embodiment are expressly incorporated in the embodiment, wherein the conduct of each claim in itself The separate embodiments of the present invention.

Those skilled in the art, which are appreciated that, to be carried out adaptively to the module in the equipment in embodiment Change and they are arranged in one or more equipment different from the embodiment.Can be the module or list in embodiment Member or component be combined into a module or unit or component, and can be divided into addition multiple submodule or subelement or Sub-component.In addition at least some in such feature and/or process or unit exclude each other, it can use any Combination is to this specification（Including adjoint claim, summary and accompanying drawing）Disclosed in all features and so disclosed appoint Where all processes or unit of method or equipment are combined.Unless expressly stated otherwise, this specification（Including adjoint power Profit requirement, summary and accompanying drawing）Disclosed in each feature can be by providing the alternative features of identical, equivalent or similar purpose come generation Replace.

In addition, it will be appreciated by those of skill in the art that although some embodiments described herein include other embodiments In included some features rather than further feature, but the combination of the feature of different embodiments means in of the invention Within the scope of and form different embodiments.For example, in detail in the claims, embodiment claimed it is one of any Mode it can use in any combination.

The all parts embodiment of the present invention can be realized with hardware, or to be run on one or more processor Software module realize, or realized with combinations thereof.It will be understood by those of skill in the art that it can use in practice Microprocessor or digital signal processor（DSP）To realize the safety detection of public account information according to embodiments of the present invention The some or all functions of some or all parts in scheme.The present invention is also implemented as being used to perform being retouched here The some or all equipment or program of device for the method stated（For example, computer program and computer program product）. Such program for realizing the present invention can store on a computer-readable medium, or can have one or more signal Form.Such signal can be downloaded from internet website and obtained, either provide on carrier signal or with it is any its He provides form.

It should be noted that the present invention will be described rather than limits the invention for above-described embodiment, and ability Field technique personnel can design alternative embodiment without departing from the scope of the appended claims.In the claims, Any reference symbol between bracket should not be configured to limitations on claims.Word "comprising" does not exclude the presence of not Element or step listed in the claims.Word "a" or "an" before element does not exclude the presence of multiple such Element.The present invention can be by means of including the hardware of some different elements and being come by means of properly programmed computer real It is existing.In if the unit claim of equipment for drying is listed, several in these devices can be by same hardware branch To embody.The use of word first, second, and third does not indicate that any order.These words can be explained and run after fame Claim.

The embodiment of the invention discloses A1, a kind of safety detection method of public account information, including：

Obtain the information processing mandate of the public account of social networks；

The application journey provided according to the social network-i i-platform where the public account of social networks described in the authorization invocation Sequence interface API；

The information of current server is configured to the public account of the social networks by the API, wherein, it is described current The information of server includes the uniform resource position mark URL address of current server, so that the public account of the social networks The current server that public account information is sent to the URL addresses instruction carries out safety detection.

A2, the method according to A1, wherein, matched somebody with somebody described by the API to the public account of the social networks After the step of putting the information of current server, in addition to：

The information of the public account of the social networks is sent to from the public account acquisition user of the social networks；

The information that the public account of the social networks is sent to the user carries out safety detection, and by testing result Return to the public account of the social networks.

A3, the method according to A2, wherein, the public account that testing result is returned to the social networks Step includes：

If determine that the information that the user is sent to the public account of the social networks is dangerous letter according to testing result Breath, then return to response message to the public account of the social networks, is carried in the response message and indicates user's hair The information for giving the public account of the social networks is the content of dangerous information；

If determine that the information that the user is sent to the public account of the social networks is safety letter according to testing result Breath, then source address and destination address in the information for the public account that the user is sent to the social networks are carried out pair Adjust, and the user after exchanging is sent to the information of the public account of the social networks and carried in the response message In, and return to the response message to the public account of the social networks.

A4, the method according to A2, wherein, the public account that the social networks is sent to the user The step of information progress safety detection, includes：

The public account of the social networks is sent to the user using the safety detection instrument of current server Information carries out safety detection；

And/or

The information that the user is sent to the public account of the social networks is sent to high in the clouds progress safety detection, and Receive the testing result that the high in the clouds returns.

A5, the method according to A4, wherein, it is described that the user is sent out using the safety detection instrument of current server The step of information progress safety detection for giving the public account of the social networks, includes：

The information that the user is obtained in the information of the public account of the social networks is sent to from the user；

The information of the user is matched with the information in the safety detection database of current server, wherein, institute State user's black and white lists that various safe classes are preserved in safety detection database；

Determine that the user is sent to the safe class of the information of the public account of the social networks according to matching result.

A6, the method according to A4, wherein, it is described that the user is sent out using the safety detection instrument of current server The step of information progress safety detection for giving the public account of the social networks, includes：

It is sent to from the user in the information of the public account of the social networks and obtains the information content；

Feature extraction is carried out to described information content；

Information in the safety detection database that the feature of extraction is preserved with current server is matched, wherein, institute State the characteristic information that various safe classes are preserved in safety detection database；

A7, the method according to A1, wherein, the public account institute of the social networks according to the authorization invocation Social network-i i-platform provide application programming interfaces API the step of include：

According to the mandate, the social network-i i-platform where calling the public account of the social networks is the social network The unified API that the public account of all social networks on network platform is set；

Or

According to the mandate, call in the social network-i i-platform, API corresponding to the public account of the social networks, Wherein, the public account of each social networks corresponds to different API.

A8, the method according to A1, wherein, in the information processing mandate of the public account of the acquisition social networks Before step, in addition to：

Registered to the social network-i i-platform where the public account of the social networks；

And after succeeding in registration, the development mode of the social network-i i-platform is opened, to carry out the current server The configuration of information.

The embodiment of the invention also discloses B9, a kind of server, including：

First acquisition module, the information processing mandate of the public account for obtaining social networks；

Calling module, for the social network-i i-platform where the public account of social networks according to the authorization invocation The application programming interfaces API of offer；

Configuration module, for the information of current server to be configured to the public account of the social networks by the API, Wherein, the information of the current server includes the uniform resource position mark URL address of current server, so that the social network The current server that public account information is sent to the URL addresses instruction by the public account of network carries out safety detection.

B10, the server according to B9, wherein, the server also includes：

Second acquisition module, for being matched somebody with somebody in the configuration module by the API to the public account of the social networks After putting the information of current server, the public affairs of the social networks are sent to from the public account acquisition user of the social networks The information of account altogether；

Detection module, safe inspection is carried out for being sent to the information of public account of the social networks to the user Survey；

Module is returned to, for testing result to be returned to the public account of the social networks.

B11, the server according to B10, wherein, the return module includes：

First returns to module, if for determining that the user is sent to the society according to the testing result of the detection module The information for handing over the public account of network is dangerous information, then response message is returned to the public account of the social networks, in institute State and the information for indicating the public account that the user is sent to the social networks is carried in response message as the interior of dangerous information Hold；

Second returns to module, if for determining that the user is sent to the society according to the testing result of the detection module The information for handing over the public account of network is security information, then the user is sent to the letter of the public account of the social networks Source address and destination address in breath are exchanged, and the user after exchanging is sent to the public account of the social networks Number information carry in the response message, and return to the response message to the public account of the social networks.

B12, the server according to B10, wherein, the detection module includes：

Current server detection module, for being sent to institute to the user using the safety detection instrument of current server The information for stating the public account of social networks carries out safety detection；

And/or

High in the clouds detection module, cloud is sent to for the user to be sent to the information of public account of the social networks End carries out safety detection, and receives the testing result that the high in the clouds returns.

B13, the server according to B12, wherein, the current server detection module includes：

User profile acquisition module, obtain in the information for the public account that the social networks is sent to from the user Take the information of the user；

User profile matching module, for by the safety detection database of the information of the user and current server Information is matched, wherein, user's black and white lists of various safe classes are preserved in the safety detection database；

User profile determining module, for determining that the user is sent to the public of the social networks according to matching result The safe class of the information of account.

B14, the server according to B12, wherein, the current server detection module includes：

Information content acquisition module, obtain in the information for the public account that the social networks is sent to from the user Take the information content；

Characteristic extracting module, for carrying out feature extraction to described information content；

Characteristic information matching module, for by the feature of extraction and the safety detection database of current server preservation Information is matched, wherein, the characteristic informations of various safe classes is preserved in the safety detection database；

Characteristic information determining module, for determining that the user is sent to the public of the social networks according to matching result The safe class of the information of account.

B15, the server according to B9, wherein, the calling module includes：

First calling module, for according to the mandate, calling the social network where the public account of the social networks Network platform is the unified API that the public account of all social networks in the social network-i i-platform is set；

Or

Second calling module, for according to the mandate, calling in the social network-i i-platform, the public affairs of the social networks API corresponding to account altogether, wherein, the public account of each social networks corresponds to different API.

B16, the server according to B9, wherein, the server also includes：

Registering modules, for first acquisition module obtain social networks public account information processing mandate it Before, registered to the social network-i i-platform where the public account of the social networks；

Pattern opening module, for after succeeding in registration, opening the development mode of the social network-i i-platform, to carry out institute State the configuration of the information of current server.

Claims

1. a kind of safety detection method of public account information, including：

Registered to the social network-i i-platform where the public account of social networks；

And after succeeding in registration, the development mode of the social network-i i-platform is opened, to carry out matching somebody with somebody for the information of current server Put；

Connect according to the application program that the social network-i i-platform where the public account of social networks described in the authorization invocation provides Mouth API；

The information of current server is configured to the public account of the social networks by the API, wherein, the current service The information of device includes the uniform resource position mark URL address of current server, so that the public account of the social networks is by public affairs Account information is sent to the current server progress safety detection of the URL addresses instruction altogether.

2. the method according to claim 11, wherein, in the public account by the API to the social networks After the step of configuring the information of current server, in addition to：

The information that the public account of the social networks is sent to the user carries out safety detection, and testing result is returned Public account to the social networks.

3. the method according to claim 11, wherein, the public account that testing result is returned to the social networks The step of include：

If determining that the information that the user is sent to the public account of the social networks is dangerous information according to testing result, Response message is returned to the public account of the social networks, is carried in the response message and indicates that the user is sent to institute The information for stating the public account of social networks is the content of dangerous information；

If determining that the information that the user is sent to the public account of the social networks is security information according to testing result, The source address and the destination address user being sent in the information of the public account of the social networks are exchanged, and will The information that the user after exchanging is sent to the public account of the social networks is carried in the response message, and to institute The public account for stating social networks returns to the response message.

4. the method according to claim 11, wherein, the public account that the social networks is sent to the user Information carry out safety detection the step of include：

The information of the public account of the social networks is sent to the user using the safety detection instrument of current server Carry out safety detection；

And/or

The information that the user is sent to the public account of the social networks is sent to high in the clouds progress safety detection, and receives The testing result that the high in the clouds returns.

5. according to the method for claim 4, wherein, the safety detection instrument using current server is to the user The step of being sent to the information progress safety detection of the public account of the social networks includes：

The information of the user is matched with the information in the safety detection database of current server, wherein, the peace User's black and white lists of various safe classes are preserved in full Test database；

6. according to the method for claim 4, wherein, the safety detection instrument using current server is to the user The step of being sent to the information progress safety detection of the public account of the social networks includes：

Feature extraction is carried out to described information content；

Information in the safety detection database that the feature of extraction is preserved with current server is matched, wherein, the peace The characteristic information of various safe classes is preserved in full Test database；

7. the method according to claim 11, wherein, the public account of the social networks according to the authorization invocation The step of application programming interfaces API that the social network-i i-platform at place provides, includes：

According to the mandate, the social network-i i-platform where calling the public account of the social networks is put down for the social networks The unified API that the public account of all social networks on platform is set；

Or

8. a kind of server, including：

Registering modules, before the information processing mandate for the public account that social networks is obtained in the first acquisition module, to institute Social network-i i-platform where stating the public account of social networks is registered；

Pattern opening module, for after succeeding in registration, opening the development mode of the social network-i i-platform, currently to be taken The configuration of the information of business device；

Calling module, provided for the social network-i i-platform where the public account of social networks according to the authorization invocation Application programming interfaces API；

Configuration module, for the information of current server to be configured to the public account of the social networks by the API, its In, the information of the current server includes the uniform resource position mark URL address of current server, so that the social networks Public account public account information be sent to the current server of URL addresses instruction carry out safety detection.

9. server according to claim 8, wherein, the server also includes：

Second acquisition module, for being worked as in the configuration module by public account configurations of the API to the social networks After the information of preceding server, the public account of the social networks is sent to from the public account acquisition user of the social networks Number information；

Detection module, safety detection is carried out for being sent to the information of public account of the social networks to the user；

10. server according to claim 9, wherein, the return module includes：

First returns to module, if for determining that the user is sent to the social network according to the testing result of the detection module The information of the public account of network is dangerous information, then response message is returned to the public account of the social networks, in the sound It is the content of dangerous information to answer and the information for indicating the public account that the user is sent to the social networks is carried in information；

Second returns to module, if for determining that the user is sent to the social network according to the testing result of the detection module The information of the public account of network is security information, then the user is sent in the information of public account of the social networks Source address and destination address exchanged, and the user after exchanging is sent to the public account of the social networks Information is carried in the response message, and returns to the response message to the public account of the social networks.

11. server according to claim 9, wherein, the detection module includes：

Current server detection module, for being sent to the society to the user using the safety detection instrument of current server The information of the public account of network is handed over to carry out safety detection；

And/or

High in the clouds detection module, high in the clouds is sent to for the user to be sent to the information of public account of the social networks and is entered Row safety detection, and receive the testing result that the high in the clouds returns.

12. server according to claim 11, wherein, the current server detection module includes：

User profile acquisition module, institute is obtained in the information for the public account that the social networks is sent to from the user State the information of user；

User profile matching module, for by the information in the safety detection database of the information of the user and current server Matched, wherein, user's black and white lists of various safe classes are preserved in the safety detection database；

User profile determining module, for determining that the user is sent to the public account of the social networks according to matching result Information safe class.

13. server according to claim 11, wherein, the current server detection module includes：

Information content acquisition module, for obtaining letter in the information for the public account that the social networks is sent to from the user Cease content；

Characteristic information matching module, for the information in the safety detection database that preserves the feature of extraction and current server Matched, wherein, the characteristic informations of various safe classes is preserved in the safety detection database；

Characteristic information determining module, for determining that the user is sent to the public account of the social networks according to matching result Information safe class.

14. server according to claim 8, wherein, the calling module includes：

First calling module, for according to the mandate, the social networks where calling the public account of the social networks to be put down Platform is the unified API that the public account of all social networks in the social network-i i-platform is set；

Or

Second calling module, for according to the mandate, calling in the social network-i i-platform, the public account of the social networks API corresponding to number, wherein, the public account of each social networks corresponds to different API.