CN104796275B

CN104796275B - Abnormal state processing method, system and device

Info

Publication number: CN104796275B
Application number: CN201410026439.1A
Authority: CN
Inventors: 胡育辉; 王宇飞; 王小叶; 芦姗
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2014-01-21
Filing date: 2014-01-21
Publication date: 2019-11-15
Anticipated expiration: 2034-01-21
Also published as: CN104796275A

Abstract

The invention discloses a kind of abnormal state processing method, system and devices, belong to Internet technical field.The described method includes: server obtains the abnormality of user account according to the network operations information of user account, the grade of abnormality is divided, the grade of abnormality is carried to the wearable electronic being pushed in abnormality with user account binding；Wearable electronic receives abnormality, shows prompt information corresponding with grade according to the grade of abnormality；The operational order according to prompt information corresponding with grade triggering is received, and operational order is sent to server；Server receives operational order, executes at least one security strategy processing operation corresponding with grade according to abnormality of the operational order to user account；The effect for solving the problems, such as the real-time for the abnormal state processing method that background technique provides and avoiding risk is all poor；Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Description

Abnormal state processing method, system and device

Technical field

The present invention relates to Internet technical field, in particular to a kind of abnormal state processing method, system and device.

Background technique

Various network services are typically based on user account to provide services to the user, therefore safeguard user account operation Safety become important topic, the abnormality that user account is handled by terminal becomes maintenance user account operational safety Important means.

In existing abnormal state processing method, server obtains the abnormality of the user account, when server is examined When logging in again of the user account is measured, server sends the user account sheet by pop-up message for the abnormality Secondary to log in used terminal, user triggers corresponding operating according to the abnormality and instructs, and corresponding, terminal receives the operation It instructs and the operational order is sent to server, server is handled abnormality according to the operational order.

In the implementation of the present invention, inventor has found above-mentioned technology the prior art has at least the following problems: using above-mentioned exception Condition processing method is needed in user account when logging in again, and terminal can just receive the abnormal shape that server detects State, therefore terminal can not handle the abnormality of user account in time, often can just receive after destructive result occurs The notice of abnormality, the real-time of abnormality processing and the effect avoided risk are all poor.

Summary of the invention

In order to which the effect for solving the real-time for the abnormal state processing method that background technique provides and avoiding risk is all poor The problem of, the embodiment of the invention provides a kind of abnormal state processing method, system and devices.The technical solution is as follows:

In a first aspect, a kind of abnormal state processing method is provided, for including server and wearable electronic In abnormality processing system, which comprises

The server obtains the abnormality of the user account according to the network operations information of user account, divides institute The grade for stating the abnormality of user account carries the grade of the abnormality of the user account in the user account The wearable electronic with user account binding is pushed in abnormality；

The wearable electronic receives the user with wearable electronic binding of the server push The abnormality of account shows prompt information corresponding with the grade according to the grade of the abnormality of the user account, Different grades of abnormality corresponds to different grades of prompt information；

The wearable electronic receives the operational order according to prompt information corresponding with grade triggering, and will The operational order is sent to the server；

The server receives the operational order, is held according to abnormality of the operational order to the user account Row at least one security strategy processing operation corresponding with the grade.

Second aspect provides a kind of abnormal state processing method, is used in wearable electronic, the method packet It includes:

Receive the abnormality with the user account of wearable electronic binding of server push, the user The abnormality of account is that the server is obtained according to the network operations information of the user account, the user account The grade of the abnormality of the user account is carried in abnormality, the grade of the abnormality of the user account is institute State server division；

Prompt information corresponding with the grade, different brackets are shown according to the grade of the abnormality of the user account Abnormality correspond to different grades of prompt information；

The operational order according to prompt information corresponding with grade triggering is received, and the operational order is sent to The server, so that the server is corresponding with the grade extremely to abnormality execution according to the operational order A kind of few security strategy processing operation.

The third aspect provides a kind of abnormal state processing method, in server, which comprises

The abnormality of the user account is obtained according to the network operations information of user account, and divides user's account Number abnormality grade；

The grade of the abnormality of the user account is carried be pushed in the abnormality of the user account with The wearable electronic of the user account binding；

The operational order that the wearable electronic is sent is received, the operational order is according to the user account The corresponding prompt information triggering of the grade of abnormality, the prompt information is the wearable electronic according to the use What the grade of the abnormality of family account was shown, different grades of abnormality corresponds to different grades of prompt information；

At least one corresponding with the grade is executed according to abnormality of the operational order to the user account Security strategy processing operation.

Fourth aspect, provides a kind of abnormality processing system, the abnormality processing system include server and Wearable electronic, the system comprises:

The server obtains the abnormality of the user account for the network operations information according to user account, The grade for dividing the abnormality of the user account carries the grade of the abnormality of the user account in the user The wearable electronic with user account binding is pushed in the abnormality of account；

The wearable electronic, for receiving the server push and wearable electronic binding The abnormality of user account shows that prompt corresponding with the grade is believed according to the grade of the abnormality of the user account Breath, different grades of abnormality correspond to different grades of prompt information；

The wearable electronic refers to for receiving according to the operation of prompt information corresponding with grade triggering It enables, and the operational order is sent to the server；

The server, for being executed and the grade according to abnormality of the operational order to the user account Corresponding at least one security strategy processing operation.

5th aspect, provides a kind of abnormality processing unit, is used in wearable electronic, described device packet It includes:

State receiving module, for receiving server push and the user account of wearable electronic binding Abnormality, the abnormality of the user account are that the server is obtained according to the network operations information of the user account , the grade of the abnormality of the user account is carried in the abnormality of the user account, the user account The grade of abnormality is that the server divides；

Information display module is shown corresponding with the grade for the grade according to the abnormality of the user account Prompt information, different grades of abnormality correspond to different grades of prompt information；

First receiving module, for receiving the operational order according to prompt information corresponding with grade triggering, and will The operational order is sent to the server, so that the server executes the abnormality according to the operational order At least one security strategy processing operation corresponding with the grade.

6th aspect, provides a kind of abnormality processing unit, in server, described device to include:

State acquisition module obtains the abnormal shape of the user account for the network operations information according to user account State, and divide the grade of the abnormality of the user account；

State sending module, for carrying the grade of the abnormality of the user account in the different of the user account The wearable electronic with user account binding is pushed in normal state；

Second receiving module, the operational order sent for receiving the wearable electronic, the operational order are According to the corresponding prompt information triggering of the grade of the abnormality of the user account, the prompt information is described wearable Electronic equipment shows that different grades of abnormality corresponds to different brackets according to the grade of the abnormality of the user account Prompt information；

Status processing module, for according to the operational order to the abnormality of the user account execute with it is described etc. The corresponding at least one security strategy processing operation of grade.

Technical solution provided in an embodiment of the present invention has the benefit that

The abnormality of user account is obtained according to the network operations information of user account by server, divides user's account Number abnormality grade, the grade of the abnormality of user account is carried and is pushed in the abnormality of user account With the wearable electronic of user account binding；Wearable electronic receive server push and wearable electronic The abnormality of the user account of binding shows that prompt corresponding with grade is believed according to the grade of the abnormality of user account Breath；Wearable electronic receives the operational order according to prompt information corresponding with grade triggering, and operational order is sent To server；Server receives operational order, is executed according to abnormality of the operational order to user account corresponding with grade At least one security strategy processing operation；The real-time of the abnormal state processing method of background technique offer is provided and evades wind The all poor problem of the effect of danger；Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Detailed description of the invention

To describe the technical solutions in the embodiments of the present invention more clearly, make required in being described below to embodiment Attached drawing is briefly described, it should be apparent that, drawings in the following description are only some embodiments of the invention, for For those of ordinary skill in the art, without creative efforts, it can also be obtained according to these attached drawings other Attached drawing.

Figure 1A is a kind of showing for implementation environment involved in the abnormal state processing method of each embodiment offer of the present invention Example property structural schematic diagram；

Figure 1B is the method flow diagram of abnormal state processing method provided by one embodiment of the present invention；

Fig. 2 is the method flow diagram for the abnormal state processing method that another embodiment of the present invention provides；

Fig. 3 is the method flow diagram for the abnormal state processing method that another embodiment of the present invention provides；

Fig. 4 A is the method flow diagram for the abnormal state processing method that another embodiment of the present invention provides；

Fig. 4 B is the method flow diagram for the abnormal state processing method that another embodiment of the present invention provides；

Fig. 4 C is the schematic diagram for the display reminding information that another embodiment of the present invention provides；

Fig. 4 D is the schematic diagram for the display security strategy processing operation that another embodiment of the present invention provides；

Fig. 5 is the structural schematic diagram of abnormality processing unit provided by one embodiment of the present invention；

Fig. 6 is the structural schematic diagram for the abnormality processing unit that another embodiment of the present invention provides；

Fig. 7 is the structural schematic diagram for the abnormality processing system that another embodiment of the present invention provides；

Fig. 8 is the structural schematic diagram of wearable electronic provided by one embodiment of the present invention；

Fig. 9 is the structural schematic diagram of server provided by one embodiment of the present invention.

Specific embodiment

To make the object, technical solutions and advantages of the present invention clearer, below in conjunction with attached drawing to embodiment party of the present invention Formula is described in further detail.

Figure 1A is please referred to, one kind involved in the abnormal state processing method provided it illustrates each embodiment of the present invention The structural schematic diagram of implementation environment.The implementation environment includes server 120 and wearable electronic 140.

Server 120 can be a server, or the server cluster consisted of several servers or one A cloud computing service center.Server 120 is connected by wireless network with wearable electronic 140.

Wearable electronic 140 is directly to wear, for example, being worn in wrist, or is integrated into the clothes of user Or a kind of portable electronic device of accessory.Wearable electronic 140, which possesses, to be received signal, sends signal and display reminding letter The functions such as breath, and can be that user provides triggering for the operation button of above-mentioned prompt information or touch screen etc..It is wearable to set Standby not only a kind of hardware device, additionally it is possible to which powerful function is realized by software support and data interaction, cloud interaction etc. Energy.

Abnormal state processing method provided in an embodiment of the present invention relates generally to two parts, and first part is mainly to take Business device obtains the abnormality of user account, and the abnormality is pushed to and is set with the wearable electronic of user account binding It is standby upper；Second part is that wearable electronic shows different prompt informations according to abnormality, then receive user according to The operational order is sent to server by the operational order that different prompt informations is triggered, so that server is according to the operation Instruction is handled, and the abnormality of the user account is eliminated.A system embodiment is provided first below, then providing one can The embodiment of electronic equipment side and the embodiment of a server side are dressed, then one is provided and this two sides is combined into description Embodiment.

Figure 1B is please referred to, it illustrates the method flows of abnormal state processing method provided by one embodiment of the present invention Figure.The present embodiment is applied to the abnormality processing including server and wearable electronic with the abnormal state processing method It is illustrated in system.The abnormal state processing method, comprising:

Step 102, server obtains the abnormality of user account according to the network operations information of user account, divides and uses The grade of the abnormality of user account is carried and is pushed away in the abnormality of user account by the grade of the abnormality of family account It is sent to the wearable electronic with user account binding；

Step 104, wearable electronic receives the user account with wearable electronic binding of server push Abnormality, prompt information corresponding with grade is shown according to the grade of the abnormality of user account, it is different grades of different Normal state corresponds to different grades of prompt information；

Step 106, wearable electronic receives the operational order according to prompt information corresponding with grade triggering, and will Operational order is sent to server；

Step 108, server receives operational order, according to operational order to the abnormality execution of user account and grade Corresponding at least one security strategy processing operation.

In conclusion abnormal state processing method provided in this embodiment, by server according to the network of user account Operation information obtains the abnormality of user account, divides the grade of the abnormality of user account, by the exception of user account The grade of state carries the wearable electronic being pushed in abnormality with user account binding；Wearable electronic The abnormality for receiving server push shows that prompt corresponding with grade is believed according to the grade of the abnormality of user account Breath；Wearable electronic receives the operational order according to prompt information corresponding with grade triggering, and operational order is sent To server；Server receives operational order, is executed according to abnormality of the operational order to user account corresponding with grade At least one security strategy processing operation；The real-time of the abnormal state processing method of background technique offer is provided and evades wind The all poor problem of the effect of danger；Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Referring to FIG. 2, it illustrates the method flow diagrams of abnormal state processing method provided by one embodiment of the present invention. The present embodiment is applied to illustrate in wearable electronic as shown in Figure 1A with the abnormal state processing method.This is different Normal condition processing method, comprising:

Step 202, the abnormality with the user account of wearable electronic binding of server push, user are received The abnormality of account is that server is obtained according to the network operations information of user account, in the abnormality of the user account The grade of the abnormality of user account is carried, the grade of the abnormality of user account is that server divides；

Step 204, prompt information corresponding with grade, different brackets are shown according to the grade of the abnormality of user account Abnormality correspond to different grades of prompt information；

Step 206, the operational order according to prompt information corresponding with grade triggering is received, and the operational order is sent To server, so that server executes at least one security strategy processing corresponding with grade to abnormality according to operational order Operation.

In conclusion abnormal state processing method provided in this embodiment, by receive server push with it is wearable The abnormality of the user account of electronic equipment binding, the abnormal shape of user account is carried in the abnormality of the user account The grade of state；Prompt information corresponding with grade is shown according to the grade of the abnormality of user account；Receive basis and grade The operational order of corresponding prompt information triggering, and operational order is sent to server, so that server is according to operational order At least one security strategy processing operation corresponding with grade is executed to abnormality；The abnormal shape of background technique offer is provided The real-time of state processing method and all poor problem of the effect avoided risk；Abnormality can be handled in real time by having reached, real It is existing to imitate the effect avoided risk.

Referring to FIG. 3, it illustrates the method flow diagrams of abnormal state processing method provided by one embodiment of the present invention. The present embodiment is applied to illustrate in server as shown in Figure 1A with the abnormal state processing method.At the abnormality Reason method, comprising:

Step 302, the abnormality of user account is obtained according to the network operations information of user account, and divides user's account Number abnormality grade；

Step 304, the grade of the abnormality of user account is carried be pushed in the abnormality of user account with The wearable electronic of user account binding；

Step 306, the operational order that wearable electronic is sent is received, operational order is the exception according to user account The corresponding prompt information triggering of the grade of state, prompt information is abnormality of the wearable electronic according to user account Grade show that different grades of abnormality corresponds to different grades of prompt information；

Step 308, at least one safety corresponding with grade is executed according to abnormality of the operational order to user account Tactful processing operation.

In conclusion abnormal state processing method provided in this embodiment, by being believed according to the network operation of user account Breath obtains the abnormality of user account, and divides the grade of the abnormality of user account；By the abnormality of user account Grade carry be pushed in the abnormality of user account with user account binding wearable electronic；Reception can be worn The operational order that wearing electronic equipment is sent, operational order is the corresponding prompt information of grade according to the abnormality of user account Triggering；At least one security strategy processing behaviour corresponding with grade is executed according to abnormality of the operational order to user account Make；The effect for solving the problems, such as the real-time for the abnormal state processing method that background technique provides and avoiding risk is all poor； Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Fig. 4 A is please referred to, it illustrates the method flows of abnormal state processing method provided by one embodiment of the present invention Figure.The present embodiment is applied to illustrate in implementation environment as shown in Figure 1A with the abnormal state processing method.The exception Condition processing method, comprising:

Step 401, server obtains the abnormality of user account according to the network operations information of user account, and divides The grade of the abnormality of user account；

The abnormality of user account refers to the network operation in user account current network operation information and historical record Information compares changed state.The grade of the abnormality of user account is the difference according to the abnormality of user account What degree was divided.

Such as Fig. 4 B, specifically, server obtains the abnormal shape of user account according to the network operations information of user account State includes following sub-step:

Step 401a, server obtain the network operations information of user account；

Network operations information includes network environment, the geographical location of user account login, user's account that user account logs in Used IP address, the login time that user account logs in and the network behavior rail occurred using user account when number logging in At least one of mark.

What the network environment that user account logs in generally referred to that the user account logs in is private network or public network, and private network is such as It is home network, the network of the public places such as the network of public network such as Internet bar or dining room；Network behavior track refers to that user makes With the user account carried out which activity, such as using the user account browsed what webpage and using the user account into Gone what transaction etc..

Step 401b, server are analyzed to obtain the abnormality of user account according to network operations information.

Since the network operations information of user account is about user account, which can be to a certain degree The state of upper reaction user account, therefore server can be analyzed to obtain the abnormal shape of user account according to network operations information State.

This step includes but is not limited to following five kinds of situations:

The first, is when network operations information includes the network environment that user account logs in, server analysis user account Whether the network environment of login changes compared with most commonly used network environment when user account historical log；If becoming Change, then the abnormality that the network environment that server obtains that user account logs in occurs；

Second, when network operations information includes the geographical location that user account logs in, server analysis user account Whether the geographical location of login changes compared with most commonly used geographical location when user account historical log；If becoming Change, then the abnormality that the geographical location that server obtains that user account logs in occurs；

The third, when network operations information includes used IP address when user account logs in, server analysis is used Whether used IP address becomes compared with most commonly used IP address when user account historical log when the login of family account Change；If changing, server obtains the abnormality that used IP address occurs when user account logs in；

4th kind, when network operations information includes the login time that user account logs in, server analysis user account Whether the login time of the login affiliated period occurs compared with most commonly used login time section when user account historical log Variation；If changing, server obtains the abnormality that the login time that user account logs in occurs；

5th kind, when network operations information includes the network behavior track occurred using user account, server point The network behavior track occurred when analysing the network behavior track occurred using user account and being logged in using user account history Compared to whether changing；If changing, server obtains the different of the network behavior track generation that user account is occurred Normal state.

Server can also detect the abnormality before user account logs in, and the abnormality before user account logs in is main Refer to whether the behavior that password is inputted when user logs in the user account is abnormal.For example, if user typically enters the user account The speed of password can all be verified quickly and disposably, if server detects the input speed of user account password It is very slow, and by multiple authentication could by when, then server think user account log in front of exception has occurred.In addition, Whether the mode that server can also detect user's input user account password is abnormal, for example, if user is typically all logical The password that duplication+stickup mode inputs the user account is crossed, if server detects that user is inputted in such a way that hand is beaten One by one when code characters, then server thinks that exception has occurred before user account logs in.

It should be added that server according to network operations information analyze to obtain user account abnormality it Afterwards, server can also divide the grade of the abnormality of user account.

Such as by the grade classification of the abnormality of user account be advanced, intermediate and rudimentary, advanced expression user account Abnormality it is very serious, for example user account is stolen；Middle rank indicates that the abnormality of user account is generally serious, such as user The keywords such as " bank ", " stock " involved in account and " cash "；The abnormality of rudimentary expression user account it is not serious namely It can ignore, for example browse the external website infrequently browsed using the user account.

The grade that server divides the abnormality of user account can use the division mode of threshold value, can also use hundred Divide the division mode of ratio.Server uses the division mode of threshold value, and wherein threshold value is not fixed and invariable, and server can pass through The current network operation information of comprehensive analysis user account is adjusted the threshold value, for example user account carries out in private network It logs in, then server then thinks that a possibility that user account is abnormal state can be smaller, then according to the actual situation Threshold value is tuned up or turned down.Server uses the division mode of percentage, for example, presetting a preparatory percentage, leads to The percentage for crossing the abnormality that the methods of data analysis analysis obtains the user account is greater than predetermined percentage, then it is assumed that the use The abnormality of family account is advanced；If the percentage of the abnormality of the user account is less than predetermined percentage, then it is assumed that should The abnormality of user account is middle rank.

Also it should be added that, server can also to above-mentioned user account log in network environment, user account The geographical location of login, the user account login time that used IP address, user account log in when logging in and use user The network behavior track that account is occurred carries out comprehensive analysis.

Step 402, server pushes away the grade carrying of the abnormality of user account in the abnormality of the user account It is sent to the wearable electronic with user account binding；

If user account is bound in advance with wearable electronic, server can be inquired directly and be tied up with user account Fixed wearable electronic.Wearable electronic with user account binding is to refer to receptions related user account letter The wearable electronic of breath, the wearable electronic can not only receive the user account for information about, moreover it is possible to this A little information are shown, and provide button, sensor, touch screen and/or the audio-frequency module for handling these information.

The grade of the abnormality of user account is carried the abnormality in user account by wireless network by server In be pushed to user account binding wearable electronic.

Step 403, wearable electronic receives the user account with wearable electronic binding of server push Abnormality；

Wearable electronic receives the user with wearable electronic binding of server push by wireless network The abnormality of account；The abnormality of user account is that server is obtained according to the network operations information of user account.It should The grade of the abnormality of user account is carried in the abnormality of user account, the grade of the abnormality of user account is What server divided.

Step 404, wearable electronic shows mention corresponding with grade according to the grade of the abnormality of user account Show that information, different grades of abnormality correspond to different grades of prompt information；

Since server is into the abnormality for the user account that the wearable electronic bound with user account pushes The grade of the abnormality of user account is carried, then wearable electronic can be according to the grade of the abnormality of user account Show that prompt information corresponding with grade, different grades of abnormality correspond to different grades of prompt information, every kind of prompt letter Breath includes at least one of prompt light, sound and vibration.For example, the light of different colours, the sound of different volumes and not With the vibration of amplitude.The color of the more high then warning light of the grade of abnormality is deeper, and the volume of voice prompt is bigger, the width of vibration It spends also bigger.For example, as shown in Figure 4 C, the abnormality of highest level being indicated with red light 41, is indicated with orange light 42 The abnormality of general grade, yellowish colored lights 43 indicate negligible abnormality.

Step 405, wearable electronic receives the operational order according to prompt information corresponding with grade triggering；

Specifically, this step can use the following two kinds implementation:

The first, wearable electronic shows the place of the corresponding at least one security strategy processing operation of different brackets After managing recommended information, receives the operation triggered for one of processing recommended information security strategy processing operation and refer to It enables, specifically includes following sub-step:

1, wearable electronic obtains from least one security strategy processing operation corresponding with grade from server Manage recommended information, the security levels etc. of at least one security strategy processing operation corresponding to the grade of each abnormality In or higher than the corresponding minimum safe protection level of grade；

Security strategy processing operation includes the net for being forbidden to use user account, offline, limitation user account being forced to be possessed Network behavior permission and again verifying etc..Handling recommended information is the information for referring to illustrate security strategy processing operation.It is each different The grade of normal state can correspond to one or more security strategy processing operations, such as, it is assumed that abnormality has grade A, grade B With grade C three grades, grade A is higher than grade B, and grade B is higher than grade C, and the more high then abnormality of grade is more serious.It is corresponding , there are security strategy processing operation a, security strategy processing operation b and tri- kinds of security strategy processing operation c operations, each safety The corresponding security levels of tactful processing operation, such as security strategy processing operation a are highest level, security strategy processing Operation b is that time high-level and security strategy processing operation c is lowest level, then the grade A of abnormality corresponds to security strategy Processing operation a；The grade B of abnormality can correspond to security strategy processing operation b, be also can correspond to security strategy processing Operate a；The grade C of abnormality can correspond to security strategy processing operation c, can correspond to security strategy processing operation b, It is also can correspond to security strategy processing operation a.

2, wearable electronic shows the place of at least one security strategy processing operation corresponding with grade got Manage recommended information；

When the display screen of wearable electronic is smaller, the safe plan of at least one corresponding with grade can be scrolled The slightly processing recommended information of processing operation；When the display screen of wearable electronic is larger, display and grade can be arranged The processing recommended information of corresponding at least one security strategy processing operation.

For example, as shown in Figure 4 D, figure a is to scroll showing at least one security strategy processing operation corresponding with grade It is intended to, security strategy processing operation 1, security strategy processing operation 2 and security strategy processing behaviour is scrolled in display screen 46 Make 3；Figure b is the schematic diagram that arrangement shows at least one security strategy processing operation corresponding with grade, is arranged in display screen 47 The corresponding security strategy processing operation A of column display level C, security strategy processing operation B and security strategy processing operation C.Certainly, The corresponding security strategy processing operation of each grade can also all be shown in display screen 47, it but, will be currently abnormal Security strategy processing operation corresponding to the grade of state is shown as available mode.

In addition, wearable electronic can also by voice prompting to user show get it is corresponding with grade extremely A kind of processing recommended information of few security strategy processing operation.

3, wearable electronic, which receives, is directed to what one of processing recommended information security strategy processing operation was triggered Operational order.

User can handle the safe plan of one of recommended information according to shown in the display screen of wearable electronic Slightly processing operation trigger action instruction.For example, user clicks the security strategy processing operation C in figure b shown in Fig. 4 D, then touch Hair executes the operational order of security strategy processing operation C, and corresponding, wearable electronic receives the operational order.

It is second, specific as follows:

1, wearable electronic obtains at least one security strategy processing operation corresponding with grade respectively from server Triggering mode information, the tier of security protection of at least one security strategy processing operation corresponding to the grade of each abnormality It Deng Yuhuogaoyu not the corresponding minimum safe protection level of grade；

Security strategy processing operation includes the net for being forbidden to use user account, offline, limitation user account being forced to be possessed Network behavior permission is verified again and ignores abnormality etc..Which kind of mode is triggering mode information be used to indicate user using to touch Operational order is sent out, for example, clicking button indication " being forbidden to use user account ", shakes wearable electronic expression " forcing offline ", sliding, which touches, indicates " the network behavior permission that limitation user account is possessed ".

2, wearable electronic shows the touching of at least one security strategy processing operation corresponding with grade got Originating party formula information；

3, wearable electronic reception refers to according to the operation that the triggering mode in the triggering mode information of displaying is triggered It enables.

After wearable electronic shows triggering mode information, user can according to need trigger action instruction.

It should be added that can be worn when wearable electronic does not obtain triggering mode information from server Wearing electronic equipment receives the operational order triggered by scheduled triggering mode namely user knows different safe plans in advance Slightly processing operation is using which kind of triggering mode come trigger action instruction.Wearable electronic is provided by wearable electronic Button, sensor, touch screen and/or audio-frequency module receive operational order, operational order includes that button click commands, gesture refer to It enables, at least one of touching instruction or phonetic order.

Since wearable electronic directly can be worn or be integrated into the clothes or accessory of user, it uses It family can also be with different action behaviors come trigger action instruction.Such as, it is assumed that wearable electronic is a wrist-watch type Electronic equipment, user can teetertotter the three lower operations for indicating triggering and representing the security strategy processing operations of " forcing offline " Instruction.

Step 406, operational order is sent to server by wearable electronic；

Operational order is sent to server by wearable electronic, so as to server according to operational order to abnormality It is handled.

Step 407, server receives the operational order that wearable electronic is sent；

Operational order is that wearable electronic is triggered according to prompt information, and prompt information is wearable electronic root It is shown according to abnormality.

Step 408, server executes at least one security strategy corresponding with grade to abnormality according to operational order Processing operation.

Since each grade has at least one security strategy processing operation, operational order is at least one security strategy Completely or partially operation is triggered in processing operation, thus server can according to operational order to abnormality execute with etc. The corresponding at least one security strategy processing operation of grade.

This step has the following two kinds implementation:

The first, server executes the targeted security strategy of operational order to the abnormality of user account and handles behaviour Make；

Operational order is that wearable electronic is handled from server acquisition at least one security strategy corresponding with grade After the processing recommended information of operation, show that the processing of at least one security strategy processing operation corresponding with grade got is situated between Continue information, sends after the operational order that reception is triggered for one of processing recommended information security strategy processing operation, Wherein the security levels of at least one security strategy processing operation corresponding to the grade of each abnormality are equal to or high In the corresponding minimum safe protection level of grade；Security strategy processing operation includes being forbidden to use user account, forcing offline, limit Network behavior permission that user account processed is possessed at least one of is verified again and ignores abnormality.

For example, being shown at least one security strategy corresponding with grade if wearable electronic is directly rolled or arranged After managing operation processing recommended information, server is receiving grasping for one of processing recommended information for wearable device transmission After instructing, server can abnormality directly to user account execute the targeted security strategy processing of operational order Operation.

Second, server inquires security strategy processing behaviour corresponding with operational order is received in predetermined corresponding relationship Make, and executes the security strategy processing operation inquired；Operational order is that wearable electronic is received through scheduled triggering It is sent after the operational order that mode is triggered, triggering mode includes clicking, shake or touching, and operational order is for triggering grade One of corresponding at least one security strategy processing operation, the safety of at least one corresponding to the grade of each abnormality The security levels of tactful processing operation are equal to or higher than the corresponding minimum safe protection level of grade；Predetermined corresponding relationship packet The corresponding relationship between different operational orders and different security strategy processing operations is included, security strategy processing operation includes prohibiting Only using user account, force it is offline, limitation user account possessed network behavior permission, verify and ignore abnormal shape again At least one of state.

In addition, inquired in predetermined corresponding relationship before security strategy processing operation corresponding with operational order is received, Server can also send the respective touching of at least one security strategy processing operation corresponding with grade to wearable electronic Originating party formula information, so that wearable electronic is receiving at least one security strategy processing operation corresponding with grade respectively Triggering mode information after, show at least one security strategy processing operation corresponding with grade got triggering mode letter Breath after receiving the operational order triggered according to the triggering mode in the triggering mode information of displaying, sends to server and operates Instruction.

Security strategy processing operation includes the net for being forbidden to use user account, offline, limitation user account being forced to be possessed Network behavior permission at least one of is verified again and ignores abnormality.For example, user account is by steal-number, server is to can After dressing electronic equipment transmission abnormality, user passes through wearable electronic prompt information according to abnormality It carries out selection processing or does not handle, if user's selection is handled, server is after receiving the process instruction, to user's account It number carries out being forbidden to use the user account.

When abnormality is ignored in operational order instruction, server ignores abnormality.For example, in abnormality When junior, abnormality can be ignored namely not handled, for example, one foreign countries never browsed of browsing Website.

In conclusion abnormal state processing method provided in this embodiment, by server according to the network of user account Operation information obtains the abnormality of user account, and abnormality is pushed to and is set with the wearable electronic of user account binding It is standby；Wearable electronic receives the abnormality of server push, according to abnormality display reminding information；Wearable electronic Equipment receives the operational order triggered according to prompt information, and operational order is sent to server；Server receives operation and refers to It enables, when operational order instruction handles abnormality, server is according to operational order to the abnormality of user account It is handled；The effect for solving the real-time of the abnormal state processing method of background technique offer and avoiding risk is all poor Problem；Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

In addition, since wearable electronic directly can be worn or be integrated into the clothes or accessory of user, because This user can facilitate operation, especially operate when driving and too with different action behaviors come trigger action instruction Under the similar occasion such as do-nothing operation, the convenience of operation is improved using wearable electronic.It can also be according to abnormality Grade abnormality is targetedly handled, improve the treatment effect to abnormality.

The following are the device of the invention embodiments can refer to above-mentioned corresponding the details of wherein not detailed description Embodiment of the method.

Referring to FIG. 5, it illustrates the structural schematic diagrams of abnormality processing unit provided by one embodiment of the present invention. The abnormality processing unit can pass through the whole of software, hardware or both being implemented in combination with as wearable electronic Or a part, the abnormality processing unit include: state receiving module 520, information display module 540 and the first reception mould Block 560；

State receiving module 520, for receiving server push and the user account of wearable electronic binding Abnormality, the abnormality of user account are that server is obtained according to the network operations information of user account, user account Abnormality in carry user account abnormality grade, the grade of the abnormality of user account be server draw Point；

Information display module 540, the abnormality of the user account for being received according to state receiving module 520 etc. Grade shows that prompt information corresponding with grade, different grades of abnormality correspond to different grades of prompt information；

First receiving module 560, for receiving the prompt information corresponding with grade shown according to information display module 540 The operational order of triggering, and operational order is sent to server, so that server executes abnormality according to operational order At least one security strategy processing operation corresponding with grade.

In conclusion abnormality processing unit provided in this embodiment, by receive server push with it is wearable The abnormality of the user account of electronic equipment binding；It is shown according to the grade of the abnormality of user account corresponding with grade Prompt information；For receiving the operational order according to prompt information corresponding with grade triggering, and operational order is sent to clothes Business device, so that server executes at least one security strategy processing behaviour corresponding with grade to abnormality according to operational order Make；The effect for solving the problems, such as the real-time for the abnormal state processing method that background technique provides and avoiding risk is all poor； Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Referring to FIG. 6, it illustrates the structural schematic diagrams of abnormality processing unit provided by one embodiment of the present invention. The abnormality processing unit being implemented in combination with as the whole of server or one by software, hardware or both Point, which includes: state acquisition module 620, state sending module 640, the second receiving module 660 and shape State processing module 680；

State acquisition module 620 obtains the abnormality of user account for the network operations information according to user account, And divide the grade of the abnormality of user account；

State sending module 640, the grade of the abnormality of the user account for getting state acquisition module 620 Carry the wearable electronic being pushed in the abnormality of user account with user account binding；

Second receiving module 660, for receive wearable electronic transmission operational order, operational order be according to The corresponding prompt information triggering of the grade of the abnormality of family account, prompt information is wearable electronic according to user's account Number the grade of abnormality show that different grades of abnormality corresponds to different grades of prompt information；

Status processing module 680, abnormal shape of the operational order received according to the second receiving module 660 to user account State executes at least one security strategy processing operation corresponding with grade.

In conclusion abnormality processing unit provided in this embodiment, by being believed according to the network operation of user account Breath obtains the abnormality of user account, and divides the grade of the abnormality of user account；By the abnormality of user account Grade carry be pushed in the abnormality of user account with user account binding wearable electronic；Reception can be worn The operational order that wearing electronic equipment is sent, operational order is the corresponding prompt information of grade according to the abnormality of user account Triggering, prompt information is that wearable electronic is shown according to the abnormality of user account；In operational order instruction pair When abnormality is handled, at least one peace corresponding with grade is executed according to abnormality of the operational order to user account Full strategy processing operation；The real-time for solving the abnormal state processing method of background technique offer and the effect avoided risk are all Poor problem；Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Referring to FIG. 7, it illustrates the structural schematic diagrams of abnormality processing system provided by one embodiment of the present invention. The abnormality processing system includes server 600 and wearable electronic 500, server 600 and wearable electronic 500 are connected by wireless network, specific as follows:

The wearable electronic 500, comprising: state receiving module 520, information display module 540 and first receive Module 560；

Further, the first receiving module 560, comprising: first acquisition unit 561, the first display unit 562 and first connect Receive unit 563；

First acquisition unit 561, for obtaining at least one security strategy processing operation corresponding with grade from server Processing recommended information, the tier of security protection of at least one security strategy processing operation corresponding to the grade of each abnormality It Deng Yuhuogaoyu not the corresponding minimum safe protection level of grade；

First display unit 562, for showing at least one security strategy processing operation corresponding with grade got Processing recommended information；

First receiving unit 563 is touched for receiving for one of processing recommended information security strategy processing operation The operational order of hair.

Further, the first receiving module 560, further includes: the second receiving unit 566；

Second receiving unit 566, for receiving the operational order for passing through scheduled triggering mode and being triggered, triggering mode packet Click, shaking or touch are included, operational order is used to trigger one of corresponding at least one security strategy processing operation of grade, The security levels of at least one security strategy processing operation corresponding to the grade of each abnormality be equal to or higher than etc. The corresponding minimum safe protection level of grade.

Further, the first receiving module 560, further includes: second acquisition unit 564, the second display unit 565 and second Receiving unit 566；

Second acquisition unit 564, for obtaining at least one security strategy processing operation corresponding with grade from server Respective triggering mode information；

Second display unit 565, for showing at least one security strategy processing operation corresponding with grade got Triggering mode information；

Second receiving unit 566 is also used to receive what the triggering mode in the triggering mode information according to displaying was triggered Operational order.

Server 600, comprising: state acquisition module 620, state sending module 640, the second receiving module 660 and state Processing module 680；

Further, state acquisition module 620, comprising: information acquisition unit 621 and state acquiring unit 622；

Information acquisition unit 621, for obtaining the network operations information of user account, network operations information includes user's account Used IP address, user account when geographical location that number network environment logged in, user account log in, user account log in The login time of login and at least one of the network behavior track occurred using user account；

State acquiring unit 622, the network operations information for being obtained according to information acquisition unit 621 are analyzed to obtain user The abnormality of account.

Further, state acquisition module 620, further includes:

Third acquiring unit, for analyzing user when network operations information includes the network environment that user account logs in Whether the network environment that account logs in changes compared with most commonly used network environment when user account historical log；If hair Changing then obtains the abnormality that the network environment of user account login occurs；

4th acquiring unit, for analyzing user when network operations information includes the geographical location that user account logs in Whether the geographical location that account logs in changes compared with most commonly used geographical location when user account historical log；If hair Changing then obtains the abnormality that the geographical location of user account login occurs；

5th acquiring unit, for dividing when network operations information includes used IP address when user account logs in Whether used IP address is sent out compared with most commonly used IP address when user account historical log when analysis user account login Changing；If changing, the abnormality that used IP address occurs when user account logs in is obtained；

6th acquiring unit, for analyzing user when network operations information includes the login time that user account logs in Account log in the login time affiliated period when user account historical log compared with most commonly used login time section whether It changes；If changing, the abnormality that the login time of user account login occurs is obtained；

7th acquiring unit, for including the network behavior track occurred using user account in network operations information When, the network behavior track that analysis is occurred using user account and the network behavior occurred when being logged in using user account history Compare whether change in track；If changing, the exception that the network behavior track that user account is occurred occurs is obtained State.

Further, status processing module 680 are also used to server and execute operational order to the abnormality of user account Targeted security strategy processing operation, operational order, which is wearable electronic, obtains at least one corresponding with grade from server After the processing recommended information of security strategy processing operation, at least one security strategy processing corresponding with grade got is shown The processing recommended information of operation receives the operation triggered for one of processing recommended information security strategy processing operation and refers to It is sent after order, wherein the tier of security protection of at least one security strategy processing operation corresponding to the grade of each abnormality It Deng Yuhuogaoyu not the corresponding minimum safe protection level of grade；Security strategy processing operation include be forbidden to use user account, The network behavior permission of forcing offline, limitation user account to be possessed at least one of is verified again and ignores abnormality.

Further, status processing module 680, it is corresponding with operational order is received for being inquired in predetermined corresponding relationship Security strategy processing operation, and execute the security strategy processing operation that inquires, operational order is that wearable electronic connects It is sent after the operational order that receipts are triggered by scheduled triggering mode, triggering mode includes click, shaking or touch, operation For triggering one of corresponding at least one security strategy processing operation of grade, the grade institute of each abnormality is right for instruction The security levels for at least one security strategy processing operation answered are equal to or higher than the corresponding minimum safe protected level of grade Not；Predetermined corresponding relationship includes the corresponding relationship between different operational orders and different security strategy processing operations, safety Tactful processing operation includes the network behavior permission, again for being forbidden to use user account, offline, limitation user account being forced to be possessed Secondary verifying and at least one of ignore abnormality.

Further, server 600, further includes: information sending module 670；

Information sending module 670, for sending at least one security strategy corresponding with grade to wearable electronic The respective triggering mode information of processing operation, so that wearable electronic is receiving at least one safety corresponding with grade After the tactful respective triggering mode information of processing operation, at least one security strategy processing corresponding with grade got is shown The triggering mode information of operation, after receiving the operational order triggered according to the triggering mode in the triggering mode information of displaying, Operational order is sent to server.

In conclusion abnormality processing system provided in this embodiment, by receive server push with it is wearable The abnormality of the user account of electronic equipment binding；It is shown according to the grade of the abnormality of user account corresponding with grade Prompt information；For receiving the operational order according to prompt information corresponding with grade triggering, and operational order is sent to clothes Business device, so that server executes at least one security strategy processing behaviour corresponding with grade to abnormality according to operational order Make；The effect for solving the problems, such as the real-time for the abnormal state processing method that background technique provides and avoiding risk is all poor； Abnormality can be handled in real time by having reached, and realize the effect effectively avoided risk.

Referring to FIG. 8, the structural schematic diagram of the wearable electronic provided it illustrates one embodiment of the present of invention. The wearable electronic 800 is used for the abnormal state processing method for implementing to provide in above-described embodiment, specifically:

Wearable electronic 800 may include RF(Radio Frequency, radio frequency) circuit 810, include one or Memory 820, input unit 830, display unit 840, the sensor 850, audio of more than one computer readable storage medium Circuit 860, short range wireless transmission module 870, the processor 880 for including one or more than one processing core and The components such as power supply 890.It will be understood by those skilled in the art that wearable electronic structure shown in Fig. 8 is not constituted pair The restriction of wearable electronic may include perhaps combining certain components or difference than illustrating more or fewer components Component layout.Wherein:

RF circuit 810 can be used for receiving and sending messages or communication process in, signal sends and receivees, particularly, by base station After downlink information receives, one or the processing of more than one processor 880 are transferred to；In addition, the data for being related to uplink are sent to Base station.In general, RF circuit 810 includes but is not limited to antenna, at least one amplifier, tuner, one or more oscillators, uses Family identity module (SIM) card, transceiver, coupler, LNA(Low Noise Amplifier, low-noise amplifier), duplex Device etc..In addition, RF circuit 810 can also be communicated with network and other equipment by wireless communication.Wireless communication, which can be used, appoints (Global System of Mobile communication, the whole world are moved for one communication standard or agreement, including but not limited to GSM Dynamic communication system), GPRS (General Packet Radio Service, general packet radio service), CDMA (Code Division Multiple Access, CDMA), WCDMA (Wideband Code Division Multiple Access, wideband code division multiple access), LTE (Long Term Evolution, long term evolution), Email, SMS (Short Messaging Service, short message service) etc..Memory 820 can be used for storing software program and module, for example, storage Device 820 can be used for storing preset time list, can be also used for the software program of storage acquisition voice signal, realizes keyword The software program of identification, the software program for realizing continuous speech recognition and the software program for realizing setting prompting item, may be used also Wireless access point and the binding relationship of user account etc. for storage.Processor 880 is stored in memory 820 by operation Software program and module, thereby executing in various function application and data processing, such as the embodiment of the present invention " receive clothes Be engaged in device push with wearable electronic binding user account abnormality " function, " according to the exception of user account The grade of state shows prompt information corresponding with grade " function etc..Memory 820 can mainly include storing program area and Storage data area, wherein storing program area can (such as the sound of application program needed for storage program area, at least one function Playing function, image player function etc.) etc.；Storage data area can be stored to be created according to using for wearable electronic 800 Data (such as audio data, phone directory etc.) etc..In addition, memory 820 may include high-speed random access memory, may be used also To include nonvolatile memory, for example, at least a disk memory, flush memory device or other volatile solid-states Part.Correspondingly, memory 820 can also include Memory Controller, to provide processor 880 and 830 pairs of input unit storages The access of device 820.

Input unit 830 can be used for receiving the number or character information of input, and generate and user setting and function Control related keyboard, mouse, operating stick, optics or trackball signal input.Specifically, input unit 830 may include touching Sensitive surfaces 831 and other input equipments 832.Touch sensitive surface 831, also referred to as touch display screen or Trackpad are collected and are used Family on it or nearby touch operation (such as user using any suitable object or attachment such as finger, stylus in touch-sensitive table Operation on face 831 or near touch sensitive surface 831), and corresponding attachment device is driven according to preset formula.It is optional , touch sensitive surface 831 may include both touch detecting apparatus and touch controller.Wherein, touch detecting apparatus detection is used The touch orientation at family, and touch operation bring signal is detected, transmit a signal to touch controller；Touch controller is from touch Touch information is received in detection device, and is converted into contact coordinate, then gives processor 880, and can receive processor 880 The order sent simultaneously is executed.Furthermore, it is possible to using multiple types such as resistance-type, condenser type, infrared ray and surface acoustic waves Realize touch sensitive surface 831.In addition to touch sensitive surface 831, input unit 830 can also include other input equipments 832.Specifically, Other input equipments 832 can include but is not limited to physical keyboard, function key (such as volume control button, switch key etc.), One of trace ball, mouse, operating stick etc. are a variety of.

Display unit 840 can be used for showing information input by user or the information and wearable electronic that are supplied to user The various graphical user interface of equipment 800, these graphical user interface can be by figure, text, icon, video and its any groups It closes to constitute.Display unit 840 may include display panel 841, optionally, can use LCD (Liquid Crystal Display, liquid crystal display), the forms such as OLED (Organic Light-Emitting Diode, Organic Light Emitting Diode) come Configure display panel 841.Further, touch sensitive surface 831 can be covered on display panel 841, when touch sensitive surface 831 detects After arriving touch operation on it or nearby, processor 880 is sent to determine the type of touch event, is followed by subsequent processing device 880 Corresponding visual output is provided on display panel 841 according to the type of touch event.Although in fig. 8, touch sensitive surface 831 with Display panel 841 is to realize input and input function as two independent components, but in some embodiments it is possible to will Touch sensitive surface 831 and display panel 841 integrate and realize and output and input function.

Wearable electronic 800 may also include at least one sensor 850, such as optical sensor, motion sensor with And other sensors.Specifically, optical sensor may include ambient light sensor and proximity sensor, wherein ambient light sensor The brightness of display panel 841 can be adjusted according to the light and shade of ambient light, proximity sensor can be moved in wearable electronic 800 When moving in one's ear, display panel 841 and/or backlight are closed.As a kind of motion sensor, gravity accelerometer can be examined The size for surveying (generally three axis) acceleration in all directions, can detect that size and the direction of gravity, can be used for knowing when static The application (such as horizontal/vertical screen switching, dependent game, magnetometer pose calibrating) of other mobile phone posture, Vibration identification correlation function (ratio Such as pedometer taps);The gyroscope that can also configure as wearable electronic 800, barometer, hygrometer, thermometer, The other sensors such as infrared sensor, details are not described herein.

Voicefrequency circuit 860, loudspeaker 861, microphone 862 can provide the sound between user and wearable electronic 800 Frequency interface.Electric signal after the audio data received conversion can be transferred to loudspeaker 861, by loudspeaker by voicefrequency circuit 860 861 are converted to voice signal output；On the other hand, the voice signal of collection is converted to electric signal by microphone 862, by audio-frequency electric Road 860 is converted to audio data after receiving, then by after the processing of audio data output processor 880, through RF circuit 810 to be sent to Another wearable electronic, or audio data is exported to memory 820 to be further processed.Voicefrequency circuit 860 is also It may include earphone jack, to provide the communication of peripheral hardware earphone Yu wearable electronic 800.

Short range wireless transmission module 870 can be WIFI(wireless fidelity, Wireless Fidelity) module or indigo plant Tooth module etc..Wearable electronic 800 can help user to send and receive e-mail by short range wireless transmission module 870, Webpage and access streaming video etc. are browsed, it provides wireless broadband internet access for user.Although Fig. 8 shows short distance From wireless transport module 870, but it is understood that, and it is not belonging to must be configured into for wearable electronic 800, completely It can according to need within the scope of not changing the essence of the invention and omit.

Processor 880 is the control centre of wearable electronic 800, can entirely be worn using various interfaces and connection The various pieces of wearing electronic equipment, by running or execute the software program and/or module that are stored in memory 820, and The data being stored in memory 820 are called, the various functions and processing data of wearable electronic 800 are executed, thus right Wearable electronic carries out integral monitoring.Optionally, processor 880 may include one or more processing cores；Optionally, locate Reason device 880 can integrate application processor and modem processor, wherein the main processing operation system of application processor, user Interface and application program etc., modem processor mainly handle wireless communication.It is understood that above-mentioned modulation /demodulation processing Device can not also be integrated into processor 880.

Wearable electronic 800 further includes the power supply 890(such as battery powered to all parts), it is preferred that power supply Can be logically contiguous by power-supply management system and processor 880, to realize management charging by power-supply management system, put The functions such as electricity and power managed.Power supply 890 can also include one or more direct current or AC power source, recharge The random components such as system, power failure detection circuit, power adapter or inverter, power supply status indicator.

Although being not shown, wearable electronic 800 can also include camera, bluetooth module etc., and details are not described herein.

Wearable electronic 800 further includes having memory and one or more than one program, one of them or More than one program of person is stored in memory, and be configured to be executed by one or more than one processor above-mentioned Figure 1A, Abnormal state processing method described in Fig. 2 or Fig. 4 A embodiment.

It should be added that in another embodiment, wearable electronic may include it is more than Fig. 8 or Less component combines certain components or different component layouts, perhaps to realize all or part of function.

In addition, being also implemented as the computer program executed by CPU, the computer program according to the method for the present invention It may be stored in a computer readable storage medium.When the computer program is executed by CPU, executes and limited in method of the invention Fixed above-mentioned function.

Referring to FIG. 9, it illustrates the structural schematic diagrams of server provided by one embodiment of the present invention.The server is used In the abnormal state processing method for implementing to provide in above-described embodiment, specifically:

Server 900 includes central processing unit (CPU) 901 including random-access memory (ram) 902 and read-only deposits The system storage 904 of reservoir (ROM) 903, and the system bus of connection system storage 904 and central processing unit 901 905.Server 900 further includes the basic input/output (I/O that information is transmitted between each device helped in computer System) 906, and for the mass-memory unit of storage program area 913, application program 914 and other program modules 915 907。

Basic input/output 906 includes display 908 for showing information and inputs information for user The input equipment 909 of such as mouse, keyboard etc.Wherein display 908 and input equipment 909 are all by being connected to system bus 905 input and output controller 910 is connected to central processing unit 901.Basic input/output 906 can also include defeated Enter o controller 910 for receiving and handling from the defeated of multiple other equipment such as keyboard, mouse or electronic touch pen Enter.Similarly, input and output controller 910 also provides output to display screen, printer or other kinds of output equipment.

Mass-memory unit 907 is connected by being connected to the bulk memory controller (not shown) of system bus 905 To central processing unit 901.Mass-memory unit 907 and its associated computer-readable medium provide for client device Non-volatile memories.That is, mass-memory unit 907 may include such as hard disk or CD-ROM drive etc Computer-readable medium (not shown).

Without loss of generality, computer-readable medium may include computer storage media and communication media.Computer storage Medium includes any of the information such as computer readable instructions, data structure, program module or other data for storage The volatile and non-volatile of method or technique realization, removable and irremovable medium.Computer storage medium include RAM, ROM, EPROM, EEPROM, flash memory or other solid-state storages its technologies, CD-ROM, DVD or other optical storages, cassette, magnetic Band, disk storage or other magnetic storage devices.Certainly, skilled person will appreciate that computer storage medium is not limited to It states several.Above-mentioned system storage 904 and mass-memory unit 907 may be collectively referred to as memory.

According to various embodiments of the present invention, server 900 can also pass through the network connections such as internet to network On remote computer operation.Namely server 900 can be by the Network Interface Unit 911 that is connected on system bus 905 It is connected to network 912, in other words, Network Interface Unit 911 can be used also to be connected to other kinds of network or long-range meter Calculation machine system (not shown).

Memory further includes one, and perhaps more than one program one or more than one program are stored in memory In, and be configured to by one or more than one central processing unit 901 to execute one or more than one program include to use The abnormal state processing method provided by execution Figure 1A, Fig. 3 or Fig. 4 A illustrated embodiment.

The serial number of the above embodiments of the invention is only for description, does not represent the advantages or disadvantages of the embodiments.

Those of ordinary skill in the art will appreciate that realizing that all or part of the steps of above-described embodiment can pass through hardware It completes, relevant hardware can also be instructed to complete by program, the program can store in a kind of computer-readable In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..

The foregoing is merely presently preferred embodiments of the present invention, is not intended to limit the invention, it is all in spirit of the invention and Within principle, any modification, equivalent replacement, improvement and so on be should all be included in the protection scope of the present invention.

Claims

1. a kind of abnormal state processing method, which is characterized in that for including the different of server, wearable electronic and terminal In normal status processing system, which comprises

The server obtains the different of the user account according to the network operations information of the user account logged in the terminal Normal state divides the grade of the abnormality of the user account, and the grade of the abnormality of the user account is carried The wearable electronic with user account binding, the user account are pushed in the abnormality of the user account For providing a user network service；

The wearable electronic receives the user account with wearable electronic binding of the server push Abnormality, prompt information corresponding with the grade is shown according to the grade of the abnormality of the user account, it is different The abnormality of grade corresponds to different grades of prompt information；

The wearable electronic receives the operational order according to prompt information corresponding with grade triggering, and will be described Operational order is sent to the server；Wherein, the operational order for the wearable electronic by scrolling Perhaps the operation of the processing recommended information at least one security strategy processing operation that arrangement is shown is triggered or the operation Instruction is by clicking, shaking or touch the wearable electronic and triggered；

The server receives the operational order, according to abnormality of the operational order to the user account execute with The corresponding at least one security strategy processing operation of the grade.

2. the method according to claim 1, wherein network operations information of the server according to user account Obtain the abnormality of the user account, comprising:

The server obtains the network operations information of the user account, and the network operations information includes the user account The network environment of login, the geographical location of user account login, the user account used IP address, institute when logging in At least one of the network behavior track stating the login time of user account login and being occurred using the user account；

The server is analyzed to obtain the abnormality of the user account according to the network operations information.

3. according to the method described in claim 2, it is characterized in that, the server is analyzed according to the network operations information To the abnormality of the user account, comprising:

When the network operations information includes the network environment that the user account logs in, user described in the server analysis Whether the network environment that account logs in changes compared with most commonly used network environment when the user account historical log； If changing, the server obtains the abnormality that the network environment that the user account logs in occurs；

When the network operations information includes the geographical location that the user account logs in, user described in the server analysis Whether the geographical location that account logs in changes compared with most commonly used geographical location when the user account historical log； If changing, the server obtains the abnormality that the geographical location that the user account logs in occurs；

When the network operations information includes used IP address when the user account logs in, the server analysis institute State used IP address when user account logs in is compared with most commonly used IP address when the user account historical log It is no to change；If changing, the server obtains what used IP address when the user account logs in occurred Abnormality；

When the network operations information includes the login time that the user account logs in, user described in the server analysis The login time affiliated period that account logs in is when the user account historical log compared with most commonly used login time section Whether change；If changing, the server obtains the exception that the login time that the user account logs in occurs State；

When the network operations information includes the network behavior track occurred using the user account, the server point The network occurred when analysing the network behavior track occurred using the user account and being logged in using the user account history Action trail compares whether change；If changing, the server obtains the network that the user account is occurred The abnormality that action trail occurs.

4. method according to any one of claims 1 to 3, which is characterized in that the wearable electronic receive according to The operational order of the corresponding prompt information triggering of the grade, comprising:

The wearable electronic obtains at least one security strategy processing behaviour corresponding with the grade from the server The processing recommended information of work, the safeguard protection of at least one security strategy processing operation corresponding to the grade of each abnormality Rank is equal to or higher than the corresponding minimum safe protection level of the grade；Scrolling display or arrangement display get with institute State the processing recommended information of the corresponding at least one security strategy processing operation of grade；It receives in the processing recommended information A kind of operational order that security strategy processing operation is triggered；

The server is corresponding with the grade extremely according to abnormality execution of the operational order to the user account A kind of few security strategy processing operation, comprising:

The server executes the targeted security strategy processing behaviour of the operational order to the abnormality of the user account Make, the security strategy processing operation includes being forbidden to use the user account, offline, the limitation user account being forced to be gathered around Some network behavior permissions at least one of are verified again and ignore abnormality.

5. method according to any one of claims 1 to 3, which is characterized in that the wearable electronic receive according to The operational order of the corresponding prompt information triggering of the grade, comprising:

The wearable electronic receives the operational order triggered by scheduled triggering mode, and the triggering mode includes It clicks, shake or touches, the operational order is for triggering in the corresponding at least one security strategy processing operation of the grade One kind, the security levels of at least one security strategy processing operation corresponding to the grade of each abnormality be equal to or Minimum safe protection level corresponding higher than the grade；

The server inquires security strategy processing operation corresponding with the operational order is received in predetermined corresponding relationship, And execute the security strategy processing operation that inquires, the predetermined corresponding relationship include different operational order from it is different Corresponding relationship between security strategy processing operation, the security strategy processing operation include be forbidden to use the user account, The network behavior permission of forcing offline, the limitation user account to be possessed is verified again and is ignored in abnormality at least It is a kind of.

6. according to the method described in claim 5, it is characterized in that, wearable electronic reception passes through scheduled triggering Before the operational order that mode is triggered, comprising:

The wearable electronic obtains at least one security strategy processing behaviour corresponding with the grade from the server Make respective triggering mode information；Show the touching of at least one security strategy processing operation corresponding with the grade got Originating party formula information；

The wearable electronic receives the operational order triggered by scheduled triggering mode, comprising:

The wearable electronic receives the operation triggered according to the triggering mode in the triggering mode information of displaying Instruction.

7. a kind of abnormal state processing method, which is characterized in that in wearable electronic, which comprises

Receive the abnormality with the user account of wearable electronic binding of server push, the user account It logs at the terminal, and the user account, for providing a user network service, the abnormality of the user account is institute It states what server was obtained according to the network operations information of the user account, is carried in the abnormality of the user account The grade of the abnormality of user account is stated, the grade of the abnormality of the user account is that the server divides；

Prompt information corresponding with the grade is shown according to the grade of the abnormality of the user account, it is different grades of different Normal state corresponds to different grades of prompt information；

The operational order according to prompt information corresponding with grade triggering is received, and the operational order is sent to described Server, so that the server executes corresponding with the grade at least one to the abnormality according to the operational order Kind security strategy processing operation；Wherein, the operational order for the wearable electronic by scrolling or arranging The operation for arranging the processing recommended information of at least one security strategy processing operation of display is triggered or the operational order is logical It crosses and clicks, shakes or touch the wearable electronic and triggered.

8. the method according to the description of claim 7 is characterized in that the reception is according to prompt information corresponding with the grade The operational order of triggering, comprising:

The processing recommended information of at least one security strategy processing operation corresponding with the grade is obtained from the server, often The security levels of at least one security strategy processing operation corresponding to the grade of a abnormality are equal to or higher than described The corresponding minimum safe protection level of grade；

The place at least one security strategy processing operation corresponding with the grade that scrolling display or arrangement display are got Manage recommended information；

Receive the operational order triggered for one of processing recommended information security strategy processing operation.

9. the method according to the description of claim 7 is characterized in that the reception is according to prompt information corresponding with the grade The operational order of triggering, comprising:

The operational order triggered by scheduled triggering mode is received, the triggering mode includes clicking, shake or touching, institute Operational order is stated for triggering one of corresponding at least one security strategy processing operation of the grade, each abnormality Grade corresponding at least one security strategy processing operation security levels be equal to or higher than the grade it is corresponding Minimum safe protection level.

10. according to the method described in claim 9, it is characterized in that, described receive passes through what scheduled triggering mode was triggered Before operational order, comprising:

The respective triggering mode letter of at least one security strategy processing operation corresponding with the grade is obtained from the server Breath；

Show the triggering mode information of at least one security strategy processing operation corresponding with the grade got；

It is described to receive the operational order triggered by scheduled triggering mode, comprising:

Receive the operational order triggered according to the triggering mode in the triggering mode information of displaying.

11. a kind of abnormal state processing method, which is characterized in that in server, which comprises

The abnormality of the user account is obtained according to the network operations information of the user account logged in terminal, and divides institute The grade of the abnormality of user account is stated, the user account is for providing a user network service；

The grade of the abnormality of the user account is carried be pushed in the abnormality of the user account with it is described The wearable electronic of user account binding；

The operational order that the wearable electronic is sent is received, the operational order is the exception according to the user account The corresponding prompt information triggering of the grade of state, the prompt information is the wearable electronic according to user's account Number the grade of abnormality show that different grades of abnormality corresponds to different grades of prompt information；Wherein, the behaviour Instruct at least one security strategy processing behaviour by the way that display is scrolled or arranged for the wearable electronic The operation of the processing recommended information of work is triggered or the operational order is by clicking, shaking or touch the wearable electricity Sub- equipment is triggered；

At least one safety corresponding with the grade is executed according to abnormality of the operational order to the user account Tactful processing operation.

12. according to the method for claim 11, which is characterized in that described to be obtained according to the network operations information of user account The abnormality of the user account, comprising:

The network operations information of the user account is obtained, the network operations information includes the network that the user account logs in Environment, the geographical location of user account login, the user account used IP address, the user account when logging in The login time of login and at least one of the network behavior track occurred using the user account；

It is analyzed to obtain the abnormality of the user account according to the network operations information.

13. according to the method for claim 12, which is characterized in that described to be analyzed to obtain institute according to the network operations information State the abnormality of user account, comprising:

When the network operations information includes the network environment that the user account logs in, analyze what the user account logged in Whether network environment changes compared with most commonly used network environment when the user account historical log；If becoming Change, then obtains the abnormality that the network environment that the user account logs in occurs；

When the network operations information includes the geographical location that the user account logs in, analyze what the user account logged in Whether geographical location changes compared with most commonly used geographical location when the user account historical log；If becoming Change, then obtains the abnormality that the geographical location that the user account logs in occurs；

When the network operations information includes used IP address when the user account logs in, the user account is analyzed Whether used IP address changes compared with most commonly used IP address when the user account historical log when login； If changing, the abnormality that used IP address occurs when the user account logs in is obtained；

When the network operations information includes the login time that the user account logs in, analyze what the user account logged in Whether the login time affiliated period becomes compared with most commonly used login time section when the user account historical log Change；If changing, the abnormality that the login time that the user account logs in occurs is obtained；

When the network operations information includes the network behavior track occurred using the user account, analyze described in use The network behavior track that user account is occurred and the network behavior track phase occurred when being logged in using the user account history Than whether changing；If changing, the abnormal shape that the network behavior track that the user account is occurred occurs is obtained State.

14. 1 to 13 any method according to claim 1, which is characterized in that it is described according to the operational order to described The abnormality of user account executes at least one security strategy processing operation corresponding with the grade, comprising:

The server executes the targeted security strategy processing behaviour of the operational order to the abnormality of the user account Make；The operational order is that the wearable electronic is pacified from server acquisition at least one corresponding with the grade After the processing recommended information of full strategy processing operation, scrolling display or arrangement display get it is corresponding with the grade extremely A kind of processing recommended information of few security strategy processing operation, receives for one of processing recommended information security strategy It is sent after the operational order that processing operation is triggered, wherein the safe plan of at least one corresponding to the grade of each abnormality Slightly the security levels of processing operation are equal to or higher than the corresponding minimum safe protection level of the grade；The security strategy Processing operation includes the network behavior power for being forbidden to use the user account, offline, the limitation user account being forced to be possessed At least one of limit, verify again and ignore abnormality.

15. 1 to 13 any method according to claim 1, which is characterized in that it is described according to the operational order to described The abnormality of user account executes at least one security strategy processing operation corresponding with the grade, comprising:

Security strategy processing operation corresponding with the operational order is received is inquired in predetermined corresponding relationship, and executes inquiry The security strategy processing operation arrived；The operational order is that the wearable electronic is received through scheduled triggering side It is sent after the operational order that formula is triggered, the triggering mode includes clicking, shake or touching, and the operational order is for touching One of corresponding at least one security strategy processing operation of sending out grade described, corresponding to the grade of each abnormality extremely A kind of security levels of few security strategy processing operation are equal to or higher than the corresponding minimum safe protection level of the grade； The predetermined corresponding relationship includes the corresponding relationship between different operational orders and different security strategy processing operations, described Security strategy processing operation includes the net for being forbidden to use the user account, offline, the limitation user account being forced to be possessed Network behavior permission at least one of is verified again and ignores abnormality.

16. according to the method for claim 15, which is characterized in that described to inquire and receive institute in predetermined corresponding relationship Before stating the corresponding security strategy processing operation of operational order, comprising:

The respective touching of at least one security strategy processing operation corresponding with the grade is sent to the wearable electronic Originating party formula information, so that the wearable electronic is receiving at least one security strategy corresponding with the grade After the respective triggering mode information of processing operation, at least one security strategy processing corresponding with the grade got is shown The triggering mode information of operation receives the operational order triggered according to the triggering mode in the triggering mode information of displaying Afterwards, Xiang Suoshu server sends the operational order.

17. a kind of abnormality processing system, which is characterized in that the abnormality processing system includes server, wearable Electronic equipment and terminal, the system comprises:

The server, for obtaining the user account according to the network operations information of the user account logged in the terminal Abnormality, divide the grade of the abnormality of the user account, the grade of the abnormality of the user account taken Band is pushed to the wearable electronic with user account binding, the user in the abnormality of the user account Account is for providing a user network service；

The wearable electronic, for receiving the user with wearable electronic binding of the server push The abnormality of account shows prompt information corresponding with the grade according to the grade of the abnormality of the user account, Different grades of abnormality corresponds to different grades of prompt information；

The wearable electronic, for receiving the operational order according to prompt information corresponding with grade triggering, and The operational order is sent to the server；Wherein, the operational order for the wearable electronic by rolling The operation of the processing recommended information of at least one security strategy processing operation of dynamic display or arrangement display is triggered, Huo Zhesuo Operational order is stated by clicking, shaking or touch the wearable electronic and triggered；

The server, it is corresponding with the grade for being executed according to abnormality of the operational order to the user account At least one security strategy processing operation.

18. system according to claim 17, which is characterized in that

The server, for obtaining the network operations information of the user account, the network operations information includes the use The network environment of family account login, the geographical location of user account login, the user account used IP when logging in In login time that address, the user account log in and the network behavior track occurred using the user account at least It is a kind of；It is analyzed to obtain the abnormality of the user account according to the network operations information.

19. system according to claim 18, which is characterized in that

The server, when the network operations information includes the network environment that the user account logs in, for analyzing Whether the network environment for stating user account login is sent out compared with most commonly used network environment when the user account historical log Changing；If changing, the server obtains the abnormality that the network environment that the user account logs in occurs；

The server, for analyzing institute when the network operations information includes the geographical location that the user account logs in Whether sent out compared with most commonly used geographical location when the user account historical log in the geographical location for stating user account login Changing；If changing, the server obtains the abnormality that the geographical location that the user account logs in occurs；

The server, for the network operations information include the user account log in when used IP address when, Analyze most commonly used IP address when used IP address is with the user account historical log when user account logs in Compared to whether changing；If changing, the server obtains used IP address when the user account logs in The abnormality of generation；

The server, for analyzing institute when the network operations information includes the login time that the user account logs in Most commonly used login time when stating the login time affiliated period of user account login with the user account historical log Section compares whether change；If changing, the server obtains the login time that the user account logs in and occurs Abnormality；

The server, for including the network behavior track occurred using the user account in the network operations information When, occur when analyzing the network behavior track occurred using the user account and being logged in using the user account history Compare whether change in network behavior track；If changing, the server obtains what the user account was occurred The abnormality that network behavior track occurs.

20. 7 to 19 any system according to claim 1, which is characterized in that

At least one security strategy processing corresponding with the grade is obtained from the server in the wearable electronic The safety of the processing recommended information of operation, at least one security strategy processing operation corresponding to the grade of each abnormality is protected It protects rank and is equal to or higher than the corresponding minimum safe protection level of the grade；Scrolling display or arrangement display get with The processing recommended information of the corresponding at least one security strategy processing operation of the grade；It receives and is directed to the processing recommended information One of the operational order that is triggered of security strategy processing operation；

21. 7 to 19 any system according to claim 1, which is characterized in that

The wearable electronic, for receiving the operational order for passing through scheduled triggering mode and being triggered, the triggering side Formula includes clicking, shake or touching, and the operational order is for triggering the corresponding at least one security strategy processing of the grade One of operation, the security levels of at least one security strategy processing operation corresponding to the grade of each abnormality Minimum safe protection level corresponding equal to or higher than the grade；

The server, for inquiring security strategy processing corresponding with the operational order is received in predetermined corresponding relationship Operation, and execute the security strategy processing operation that inquires, the predetermined corresponding relationship include different operational order with Corresponding relationship between different security strategy processing operations, the security strategy processing operation include being forbidden to use the user Account, is verified again and is ignored in abnormality the network behavior permission for forcing offline, the limitation user account to be possessed It is at least one.

22. system according to claim 21, which is characterized in that the wearable electronic reception passes through scheduled touching Before the operational order that originating party formula is triggered, comprising:

23. a kind of abnormality processing unit, which is characterized in that in wearable electronic, described device to include:

State receiving module, for receiving the exception with the user account of wearable electronic binding of server push State, the user account log at the terminal, and the user account is for providing a user network service, user's account Number abnormality be that the server is obtained according to the network operations information of the user account, the user account it is different The grade of the abnormality of the user account is carried in normal state, the grade of the abnormality of the user account is described What server divided；

Information display module, the grade for the abnormality according to the user account show prompt corresponding with the grade Information, different grades of abnormality correspond to different grades of prompt information；

First receiving module, for receiving the operational order according to prompt information corresponding with grade triggering, and will be described Operational order is sent to the server, so that the server executes the abnormality according to the operational order and institute State the corresponding at least one security strategy processing operation of grade；Wherein, the operational order is by being directed to the wearable electronic The operation that device rolling showed or arranged the processing recommended information of at least one security strategy processing operation of display is triggered, Or the operational order is by clicking, shaking or touch the wearable electronic and triggered.

24. device according to claim 23, which is characterized in that first receiving module, comprising:

First acquisition unit, for obtaining at least one security strategy processing operation corresponding with the grade from the server Processing recommended information, the tier of security protection of at least one security strategy processing operation corresponding to the grade of each abnormality It Deng Yuhuogaoyu not the corresponding minimum safe protection level of the grade；

First display unit, at least one safety corresponding with the grade got for scrolling or arranging display The processing recommended information of tactful processing operation；

First receiving unit is directed to what one of processing recommended information security strategy processing operation was triggered for receiving Operational order.

25. device according to claim 23, which is characterized in that first receiving module, comprising:

Second receiving unit, for receiving the operational order for passing through scheduled triggering mode and being triggered, the triggering mode includes It clicks, shake or touches, the operational order is for triggering in the corresponding at least one security strategy processing operation of the grade One kind, the security levels of at least one security strategy processing operation corresponding to the grade of each abnormality be equal to or Minimum safe protection level corresponding higher than the grade.

26. device according to claim 25, which is characterized in that first receiving module, further includes:

Second acquisition unit, for obtaining at least one security strategy processing operation corresponding with the grade from the server Respective triggering mode information；

Second display unit, for showing the touching of at least one security strategy processing operation corresponding with the grade got Originating party formula information；

Second receiving unit is also used to receive what the triggering mode in the triggering mode information according to displaying was triggered Operational order.

27. a kind of abnormality processing unit, which is characterized in that in server, described device to include:

State acquisition module, for obtaining the user account according to the network operations information of the user account logged in terminal Abnormality, and the grade of the abnormality of the user account is divided, the user account is for providing a user network clothes Business；

State sending module, for the grade of the abnormality of the user account to be carried to the abnormal shape in the user account The wearable electronic with user account binding is pushed in state；

Second receiving module, the operational order sent for receiving the wearable electronic, the operational order is basis The corresponding prompt information triggering of the grade of the abnormality of the user account, the prompt information is the wearable electronic Equipment shows that different grades of abnormality corresponds to different grades of mention according to the grade of the abnormality of the user account Show information；Wherein, the operational order for the wearable electronic by scrolling or arranging display at least A kind of operation of the processing recommended information of security strategy processing operation is triggered or the operational order is by clicking, shaking Or it touches the wearable electronic and is triggered；

Status processing module, for being executed and the grade pair according to abnormality of the operational order to the user account At least one security strategy processing operation answered.

28. device according to claim 27, which is characterized in that the state acquisition module, comprising: information acquisition unit With state acquiring unit；

The information acquisition unit, for obtaining the network operations information of the user account, the network operations information includes The network environment of the user account login, the geographical location of user account login, the user account are made when logging in In login time that IP address, the user account log in and the network behavior track occurred using the user account At least one；

The state acquiring unit obtains the abnormality of the user account for analyzing according to the network operations information.

29. device according to claim 28, which is characterized in that the state acquisition module, comprising:

Third acquiring unit, for analyzing when the network operations information includes the network environment that the user account logs in The network environment that the user account logs in when the user account historical log compared with most commonly used network environment whether It changes；If changing, the abnormality that the network environment that the user account logs in occurs is obtained；

4th acquiring unit, for analyzing when the network operations information includes the geographical location that the user account logs in The geographical location that the user account logs in when the user account historical log compared with most commonly used geographical location whether It changes；If changing, the abnormality that the geographical location that the user account logs in occurs is obtained；

5th acquiring unit, for including used IP address when the user account logs in the network operations information When, with analyzing when used IP address and the user account historical log when user account logs in most commonly used IP Compare whether change in location；If changing, used IP address occurs different when obtaining user account login Normal state；

6th acquiring unit, for analyzing when the network operations information includes the login time that the user account logs in When the login time affiliated period of the user account login and the user account historical log when most commonly used login Between section compared to whether change；If changing, the abnormal shape that the login time that the user account logs in occurs is obtained State；

7th acquiring unit, for including the network behavior rail occurred using the user account in the network operations information When mark, when analyzing the network behavior track occurred using the user account and being logged in using the user account history Network behavior track compared to whether change；If changing, the network behavior that the user account is occurred is obtained The abnormality that track occurs.

30. according to any device of claim 27 to 29, which is characterized in that

The status processing module executes the operational order institute for abnormality of the server to the user account For security strategy processing operation, the operational order is the wearable electronic to be obtained and the grade from the server After the processing recommended information of corresponding at least one security strategy processing operation, scrolling display or arrangement display get with The processing recommended information of the corresponding at least one security strategy processing operation of the grade, receives and is directed to the processing recommended information One of send after the operational order that is triggered of security strategy processing operation, wherein corresponding to the grade of each abnormality The security levels of at least one security strategy processing operation be equal to or higher than the grade corresponding minimum safe protection Rank；The security strategy processing operation includes being forbidden to use the user account, forcing offline, the limitation user account institute The network behavior permission that possesses at least one of is verified again and ignores abnormality.

31. according to any device of claim 27 to 29, which is characterized in that

The status processing module, for inquiring safe plan corresponding with the operational order is received in predetermined corresponding relationship Slightly processing operation, and the security strategy processing operation inquired is executed, the operational order is that the wearable electronic is set Standby receive sends after the operational order triggered by scheduled triggering mode, the triggering mode include click, shake or It touches, the operational order is for triggering one of corresponding at least one security strategy processing operation of the grade, each The security levels of at least one security strategy processing operation corresponding to the grade of abnormality are equal to or higher than described etc. The corresponding minimum safe protection level of grade；The predetermined corresponding relationship include different operational order from different security strategies Corresponding relationship between reason operation, the security strategy processing operation include being forbidden to use the user account, forcing offline, limit At least one of make network behavior permission that the user account possessed, verify again and ignore abnormality.

32. device according to claim 31, which is characterized in that described device includes:

Information sending module, for sending at least one security strategy corresponding with the grade to the wearable electronic The respective triggering mode information of processing operation, so as to the wearable electronic receive it is described corresponding with the grade After at least one respective triggering mode information of security strategy processing operation, show get it is corresponding with the grade at least A kind of triggering mode information of security strategy processing operation is received according to the triggering mode in the triggering mode information of displaying After the operational order triggered, Xiang Suoshu server sends the operational order.