CN106708697A - Method and device for detecting applications used by user - Google Patents

Method and device for detecting applications used by user Download PDF

Info

Publication number
CN106708697A
CN106708697A CN201610865515.7A CN201610865515A CN106708697A CN 106708697 A CN106708697 A CN 106708697A CN 201610865515 A CN201610865515 A CN 201610865515A CN 106708697 A CN106708697 A CN 106708697A
Authority
CN
China
Prior art keywords
application program
application
detection
duration
moment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201610865515.7A
Other languages
Chinese (zh)
Other versions
CN106708697B (en
Inventor
邓雨星
黄浩鑫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tencent Technology Shenzhen Co Ltd
Original Assignee
Tencent Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology Shenzhen Co Ltd filed Critical Tencent Technology Shenzhen Co Ltd
Priority to CN201610865515.7A priority Critical patent/CN106708697B/en
Publication of CN106708697A publication Critical patent/CN106708697A/en
Application granted granted Critical
Publication of CN106708697B publication Critical patent/CN106708697B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/302—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/54—Interprogram communication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2209/00—Indexing scheme relating to G06F9/00
    • G06F2209/54—Indexing scheme relating to G06F9/54
    • G06F2209/541—Client-server

Abstract

The invention relates to a method and a device for detecting applications used by a user. The method comprises the steps that an application in a stack top of a running application stack is monitored and managed through a hook function; whether the application detected this time and the adjacent application detected last time are the same or not is judged; if the application detected this time and the adjacent application detected last time are not the same, a first moment recorded when last detection is different and a second moment of this detection are acquired, and the use duration of the adjacent application detected last time is acquired according to the first moment and the second moment; and a user identifier is acquired to perform statistics on an accumulative use duration of all the applications corresponding to the user identifier within preset time. According to the method for detecting the applications used by the user, the use duration, obtained through detection, of the applications is high in accuracy, and the accumulative use duration, obtained through statistics, of the applications within the preset time is also high in accuracy.

Description

The method and apparatus that detection user uses application program
Technical field
The present invention relates to application program management field, more particularly to it is a kind of detect user using the method for application program and Device.
Background technology
With the development of computer and network technologies, increasing user is entered by installing application program on electronic product Row internet exchange.User can install corresponding application program, different user installations and the application journey for using according to self-demand Sequence may be different.The use time of the application program for counting user to being installed, traditional mode is by detecting use Family starts application program, between recording at the beginning of the application program, after detecting that the application program is closed, and the record end time, The use time of the application program is obtained according to time started and end time, the application program being calculated by this way makes It is low with time accuracy.
The content of the invention
Based on this, it is necessary to for the low problem of the accuracy of the use time of traditional calculations application program, there is provided a kind of Detection user can be improved detection user and be used the accurate of the use time of application program using the method and apparatus of application program Property.
A kind of method for detecting user using application program, including：
Application program in the stack top of application heap is run by hooking function monitoring management；
Judge whether the application program of this detection is identical with the application program of adjacent last detection；
If the application program of this detection is different from the application program of adjacent last detection, last inspection is obtained The first moment recorded when surveying different and the second moment of this detection, obtained according to first moment and the second moment The use duration of the application program of the adjacent last detection；
ID is obtained, when the corresponding each application program of the ID accumulative uses in statistics Preset Time It is long.
A kind of method for detecting user using application program, including：
Receive ID, the corresponding application program of the ID, each application program correspondence of user terminal uploads Use duration every time, wherein, the corresponding each use duration of each application program is transported by hooking function monitoring management Application program in the stack top of row application heap, and judge the application program of this detection and answering for adjacent last detection It is whether identical with program, if the application program of this detection is different from the application program of adjacent last detection, in acquisition The first moment and the second moment of this detection that one-time detection is recorded when different, during according to first moment and second Carve the use duration of the application program of acquired described adjacent last detection；
The accumulative use duration of the corresponding each application program of the ID in statistics Preset Time.
A kind of device for detecting user using application program, including：
Monitoring modular, for the application program in the stack top that application heap is run by hooking function monitoring management；
First judge module, whether the application program that the application program for judging this detection is detected with the adjacent last time It is identical；
First single duration acquisition module, if for the application program of this detection and answering for adjacent last detection First moment and this second moment detected different with program, then being recorded when the last detection of acquisition is different, according to First moment and the second moment obtain the use duration of the application program of the adjacent last detection；
Statistical module, for obtaining ID, the corresponding each application program of the ID in statistics Preset Time Accumulative use duration.
A kind of device for detecting user using application program, including：
Data reception module, ID, the corresponding application journey of the ID for receiving user terminal uploads The corresponding each use duration of sequence, each application program, wherein, the corresponding each use duration of each application program is the use Family terminal runs the application program in the stack top of application heap by hooking function monitoring management, and judges this detection Whether application program is identical with the application program of adjacent last detection, if the application program and adjacent upper of this detection The application program of secondary detection is different, obtain last detection it is different when the first moment for being recorded and this detection second when Carve, the use duration of the application program of the described adjacent last detection according to acquired in first moment and the second moment；
Accumulation module, for count the corresponding each application program of the ID in Preset Time it is accumulative use when It is long.
Above-mentioned detection user runs application program using the method and apparatus of application program by hooking function monitoring management Application program in the stack top of storehouse, when the application program that this is detected is different from the application program of adjacent last detection, Get last detection it is different when the first moment for being recorded and this detection second moment, the adjacent last time can be obtained The use duration of the application program of detection, during the use of the application program obtained by the change for detecting application program in stack top Long, the application program that user is being currently used during because of application program in stack top so detects making for the application program for obtaining High with duration accuracy, the accumulative use duration accuracy that the application program for obtaining is counted in Preset Time is also high.
Brief description of the drawings
Fig. 1 be one embodiment in detect user using application program method applied environment schematic diagram；
Fig. 2A is the internal structure schematic diagram of user terminal in one embodiment；
Fig. 2 B are the internal structure schematic diagram of server in one embodiment；
Fig. 3 be one embodiment on the desktop of user terminal start a timing diagram for application program；
Fig. 4 be one embodiment in detect user using application program method flow chart；
Fig. 5 is to detect that user uses the flow chart of the method for application program in another embodiment；
Fig. 6 is to detect that user uses the flow chart of the method for application program in another embodiment；
Fig. 7 is to detect that user uses the flow chart of the method for application program in another embodiment；
Fig. 8 is the user shown on user terminal often with the schematic diagram of application program；
Fig. 9 be one embodiment in detect user using application program device structured flowchart；
Figure 10 is to detect that user uses the structured flowchart of the device of application program in another embodiment；
Figure 11 is to detect that user uses the structured flowchart of the device of application program in another embodiment；
Figure 12 is to detect that user uses the structured flowchart of the device of application program in another embodiment.
Specific embodiment
In order to make the purpose , technical scheme and advantage of the present invention be clearer, it is right below in conjunction with drawings and Examples The present invention is further elaborated.It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, and It is not used in the restriction present invention.
Fig. 1 be one embodiment in detect user using application program method applied environment schematic diagram.Such as Fig. 1 institutes Show, the applied environment includes user terminal 110 and server 120.Application program management client is installed on user terminal 110 End, is provided with application program management service end on server 120, user terminal 110 and server 120 enter row data communication.With Family terminal 110 runs the application program in the stack top of application heap by hooking function monitoring management, by comparing this Whether the application program of detection is identical with the application program of adjacent last detection, if it is different, it is different then to obtain last detection When the first moment for being recorded and this detection second moment, adjacent last inspection is obtained according to the first moment and the second moment The use duration of the application program of survey, the application program that the last time is detected and corresponding use duration, ID are uploaded Stored to server 120.
Fig. 2A is the internal structure schematic diagram of user terminal (or electronic equipment etc.) in one embodiment.As shown in Figure 2 A, The user terminal include by system bus connect processor, non-volatile memory medium, built-in storage, network interface, show Display screen and input unit.Wherein, the non-volatile memory medium of terminal is stored with operating system, also makes including one kind detection user With the device of application program, detection user is used to realize that a kind of detection user uses application program using the device of application program Method.The processor is used to provide calculating and control ability, supports the operation of whole terminal.Built-in storage in user terminal For the detection user in non-volatile memory medium provides environment using the operation of the device of application program, can in the built-in storage Computer-readable instruction is stored, when the computer-readable instruction is by the computing device, the computing device is may be such that A kind of method for detecting user using application program.Network interface is used to carry out network service with server, such as uploads and applies journey Application information that sequence and corresponding use duration are pushed to server, the reception server etc..The display screen of user terminal can To be LCDs or electric ink display screen etc., input unit can be the touch layer covered on display screen, it is also possible to It is button, trace ball or the Trackpad, or external keyboard, Trackpad or mouse etc. set in terminal enclosure.The use Family terminal can be mobile phone, panel computer or personal digital assistant or Wearable etc..Those skilled in the art can manage Solution, the structure shown in Fig. 2A, only the block diagram of the part-structure related to application scheme, is not constituted to the application side The restriction of the terminal that case is applied thereon, specific terminal can include than more or less part shown in figure, or Some parts are combined, or is arranged with different parts.
Fig. 2 B are the internal structure schematic diagram of server (or high in the clouds etc.) in one embodiment.As shown in Figure 2 B, the service Device includes the processor, non-volatile memory medium, built-in storage and the network interface that are connected by system bus.Wherein, the clothes Be engaged in device non-volatile memory medium be stored with operating system, database and detection user use application program device, data Be stored with ID, application program identification and corresponding use duration in storehouse, and detection user uses the device of application program For the method that a kind of detection user realized suitable for server uses application program.The processor of the server is used to provide Calculate and control ability, support the operation of whole server.The built-in storage of the server is in non-volatile memory medium Detection user provides environment using the operation of the device of application program, and computer-readable instruction can be stored in the built-in storage, When the computer-readable instruction is by the computing device, may be such that a kind of detection user of the computing device uses application journey The method of sequence.The network interface of the server is used to be communicated by network connection with outside terminal according to this, such as receive user Recovery request and return to application program etc. to terminal that terminal sends.Server can use independent server or multiple Server group into server cluster realize.It will be understood by those skilled in the art that the structure shown in Fig. 2 B, only with The block diagram of the related part-structure of application scheme, does not constitute the limit of the server being applied thereon to application scheme Fixed, specific server can include than more or less part shown in figure, or combine some parts, or with not Same part arrangement.
Fig. 3 be one embodiment on the desktop of user terminal start a timing diagram for application program.Such as Fig. 3 institutes Show, application icon of being arranged on desktop (Launcher)；AMS (Activity Manager Service, activity management clothes Business) work such as startup, switching, scheduling and management and scheduling of application process of four big components in main responsible system, responsibility and Management of process and scheduler module in operating system is similar.Activity Thread (thread), pause states refer to one Activity is partially visible, has simply been blocked by later view component and has lost focus, in this case, loses focus Activity be at pause states.The sequential of application program launching includes：
(1) launcher (desktop) obtains the icon for clicking on application program, then start Activity (start a boundary Face)；
(2) desktop sends to AMS (campaign management services) will start an activity (activity)；
(3) AMS notifies that launcher enters pause (pause) state；
(4) laucher enters pause states；
(5) laucher notifies AMS, is ready for entering pause states；
(6) AMS creates a new process, creates ActivityThread；
(7) AMS notifies that ActivityThread starts ActivityThread examples；
(8) program process is tied to AMS by ActivityThread；
(9) AMS notifies to start activity to ActivityThread.
When application program is started, the interface of management operating application heap, monitoring can be linked up with by hook functions Application program in stack top, detects the change of application program, if changing, is carved at the beginning of recording this application program, instantly It is secondary to record the finish time of the application program when changing again, the application program is obtained according to finish time and start time This use duration.
Fig. 4 be one embodiment in detect user using application program method flow chart.As shown in figure 4, a kind of inspection Method of the user using application program is surveyed, is run on user terminal, including step 402 is to step 408, wherein：
Step 402, the application program in the stack top of application heap is run by hooking function monitoring management.
Specifically, application program management software runs application heap by hook functions (hooking function) monitoring management Stack top in application program.The application program of operation is activated on the subscriber terminal by the storehouse of management operating application program Be managed, the application program in the stack top of management operating application heap represent user be being currently used and interact should Use program.For example user is chatted by instant messaging application program, then in the stack top of management operating application heap Application program is the instant messaging application program, when user is switched to desktop by home buttons or desktop switching command, Application program in the stack top of management operating application heap is desktop.
Step 404, judges whether the application program of this detection is identical with the application program of adjacent last detection, if not Together, step 406 is performed, if identical, step 402 is performed.
In the present embodiment, in real time by the application journey in the stack top of hook function check management operating application heaps Sequence.The application program of this detection can be the application program of the moment detection of this poll；The then application of adjacent last detection Program can be the application program of the last moment detection adjacent with the moment of this poll.Detected according to timing, then this inspection The application program of survey can be the application program of current detection, then the application program of adjacent last detection can be and current detection phase The application program of adjacent last detection.Detection in every 3 seconds is for example regularly detected as once, when this application program for detecting is 6 The application program of moment second detection, then the application program of adjacent last detection is the application program of 3 second moment detection.
Judge whether the application program of this detection is identical with the application program of adjacent last detection, if this detection Application program is different from the application program of adjacent last detection, then the first moment recorded when the last detection of acquisition is different And the second moment of this detection, making for the adjacent last application program for detecting is obtained according to the first moment and the second moment Use duration.Wherein, the first moment referred to quarter at the beginning of the adjacent last application program for detecting, the second moment referred on adjacent The finish time of the application program of one-time detection, answering for adjacent last detection is obtained by the difference of finish time and start time With this use duration of program.
If this application program is identical with the application program of adjacent last detection, the application journey for detecting twice is illustrated Sequence does not change, and can continue the application program in the stack top of detection management operation application heap, judges the application of this detection Whether program identical with the application program of adjacent last detection, if it is different, obtain last detection it is different when recorded the One moment and the second moment of this detection, the adjacent last detection is obtained according to first moment and the second moment Application program use duration.
In one embodiment, judge application program of this detection and adjacent last detection application program whether phase Together, it may include：Obtain the application program identification of this detection and the application program identification of adjacent last detection；Judge that this is examined Whether the application program identification of the application program identification of survey and adjacent last detection is identical.
In the present embodiment, application program identification is to represent application identity for unique.The application program identification can It is application package name etc..Whether identical it is compared by application program identification, amount of calculation is small, save resources.
Step 406, the first moment and second moment of this detection that the last detection of acquisition is recorded when different, root The use duration of the application program of the adjacent last detection is obtained according to first moment and the second moment.
In the present embodiment, ID can be also obtained, by ID, the application program and correspondence of adjacent last detection Use duration upload onto the server and preserved.Progress when convenient service device is to the use of ID corresponding application program Row statistics receives inquiry etc..
Step 408, obtains ID, and the corresponding each application program of ID adds up in statistics Preset Time Use duration.
In the present embodiment, the application program in the stack top of application heap is run by each detection management, used The each use duration of each application program in the terminal of family.
Preset Time is obtained, by the use duration of each application program of statistics is sued for peace every time in the Preset Time, obtains pre- If the accumulative use duration of each application program in the time, ID is obtained, can obtain the corresponding each application program of ID Accumulative use duration.
Preset Time can be selected as needed, such as apart from the current time time period of 1 month, apart from current time 3 months Time period etc., not limited to this.ID is to represent user identity for unique.The ID can be instant messaging account Number, E-mail address, mobile communication mark, the user account etc. in the registration of application program management platform.
Above-mentioned detection user runs application heap using the method for application program by hooking function monitoring management Application program in stack top, when the application program that this is detected is different from the application program of adjacent last detection, gets The first moment and the second moment of this detection that last time detection is recorded when different, adjacent last detection can be obtained The use duration of application program, the use duration of the application program obtained by the change for detecting application program in stack top, because of stack The application program that user is being currently used during application program in top, so detects that the use duration of the application program for obtaining is accurate True property is high, and the accumulative use duration accuracy that the application program for obtaining is counted in Preset Time is also high.
In one embodiment, above-mentioned detection user is also included using the method for application program：When adding up to use according to this Length filters out the application program of predetermined quantity as conventional application program corresponding with the ID from high to low.
In the present embodiment, predetermined quantity can set as needed, such as 1,2,3,4,5,6.User marks It refers to the application program that ID is commonly used on the subscriber terminal to know corresponding conventional application program.
In one embodiment, above-mentioned detection user is also included using the method for application program：By the accumulative use duration More than duration threshold value application program as conventional application program corresponding with the ID.
In the present embodiment, duration threshold value can set as needed, such as 1 week, 1 month, 3 months.
Further, above-mentioned detection user is also included using the method for application program：Will be corresponding with ID conventional Application program is uploaded onto the server and is stored.
In the present embodiment, preserved by the way that the corresponding conventional application program of ID is uploaded onto the server, it is convenient It is follow-up to carry out user often with the recovery of application program.
In one embodiment, as shown in figure 5, above-mentioned detection user is also included using the method for application program：
Step 502, when the interface that the management operating application heap is linked up with by hooking function is failed, records institute That states application program in stack top begins to use the moment.
In the present embodiment, when an application program is started, the application program is located in stack top, records the application program Begin to use the moment.Or when the application program of this poll is different from the application program of adjacent last poll, minute book The application program at the moment of secondary poll, i.e. this poll begins to use the moment.
Step 504, poll is initiated according to the appointed interval time to the stack top, obtains the application program in the stack top.
In the present embodiment, the appointed interval time can set as needed, such as 100 milliseconds, 200 milliseconds, 500 milliseconds.Should Poll is initiated to stack top according to the appointed interval time with program management software, the application program in the stack top is obtained.
Application program in stack top can be obtained by poll.
Step 506, judges whether the application program of this poll is identical with the application program of adjacent last poll, if not Together, step 508 is performed, if identical, step 504 is performed.
Step 508, at the moment of minute book time poll, application program according to the last poll begins to use the moment With the use duration of the application program that moment of this poll obtains the last poll, and by the moment of this poll Application program as this poll begins to use the moment, and step 504 is then performed again.
In the present embodiment, the moment of this poll refers to the moment of this poll.Moment and upper one according to this poll The application program of secondary poll begin to use the moment difference obtain the last poll application program use duration.Meanwhile, The moment of this poll is begun to use into the moment as the application program of this poll, according still further to the appointed interval time to described Stack top initiates poll, obtains the application program in the stack top, judges the application program of the adjacent poll next time of this poll Whether the application program with this poll is identical, if it is different, the moment of adjacent poll next time is then recorded, according to this poll Moment and this poll application program the use duration for beginning to use the application program for obtaining this poll constantly.
Above-mentioned detection user is linking up with the management operating application program using the method for application program by hooking function When the interface of storehouse fails, by way of poll stack top, the application program in inquiry stack top, when obtaining the use of application program It is long, because of the application program in the stack top of poll, detect that the use duration accuracy of application program is high.
In one embodiment, the application journey in the stack top for running application heap by hooking function monitoring management Before sequence, above-mentioned detection user is also included using the method for application program：Detect whether with super administration authority；If having super Level administration authority, then run the application program in the stack top of application heap by hooking function monitoring management；If not having Super administration authority, then perform that this records application program in the stack top begins to use the moment, according to the appointed interval time pair The stack top initiates poll, the step of obtain the application program in the stack top.
In the present embodiment, super administration authority refers to root authority, i.e. authority at the highest level.It is convenient by root authority Carry out the interface of hook management operating application heaps.
In one embodiment, the application journey in the stack top for running application heap by hooking function monitoring management Before sequence, above-mentioned detection user is also included using the method for application program：Detect whether with super administration authority；If having super Level administration authority, then perform the application program run by hooking function monitoring management in the stack top of application heap Step；If not having super administration authority, whether detection user terminal has interim super administration authority；If having interim Super administration authority, then perform the application journey run by hooking function monitoring management in the stack top of application heap The step of sequence；If without interim super administration authority, initiating to obtain interim super administration authority strategy to server Request, receive the interim super administration authority strategy that the server is returned；If according to the interim super administrative power Limit strategy obtains interim super administration authority success, then execution is described runs application program heap by hooking function monitoring management The step of application program in the stack top of stack；If obtaining interim super management according to the interim super administration authority strategy Authority fails, then perform it is described record application program in the stack top begin to use the moment, according to the appointed interval time to institute State stack top and initiate poll, in acquisition stack top the step of application program.
Fig. 6 is to detect that user uses the flow chart of the method for application program in another embodiment.As shown in fig. 6, one In individual embodiment, detection user is included using the method for application program：
Step 602, detects whether with super administration authority, if having super administration authority, performs step 612, if Without super administration authority, then step 604 is performed.
Whether step 604, detection user terminal has interim super administration authority, if with interim super administrative power Limit, then perform step 612, if without interim super administration authority, performing step 606.
Step 606, the request of the super administration authority strategy for initiating to obtain interim to server, then perform step 608.
Step 608, if the interim super administration authority strategy that the server is returned is received, if so, performing step Rapid 610, if it is not, performing step 624.
Step 610, judges whether interim super administration authority strategy successfully obtains interim super administration authority, if It is then to perform step 612, if it is not, performing step 614；If it is not, performing step 624.
Step 612, the interface of management operating application heap is linked up with by hooking function, then performs step 614.
Step 614, judges whether to link up with successfully, if so, step 616 is performed, if it is not, performing step
Step 616, runs the application program in the stack top of application heap, then perform by hooking function monitoring management Step 618.
Step 618, judges whether the application program of this detection is identical with the application program of adjacent last detection, if phase Together, step 616 is performed, if it is different, performing step 620.
Step 620, the first moment and second moment of this detection that the last detection of acquisition is recorded when different, root The use duration of the application program of the adjacent last detection is obtained according to first moment and the second moment, then performs step 622。
Step 622, service is uploaded to by ID, the application program of adjacent last detection and corresponding use duration Device, then perform step 616.
Step 624, application program begins to use the moment in record stack top, then performs step 626.
Step 626, poll is initiated according to the appointed interval time to the stack top, obtains the application program in the stack top, Step 628 is performed again.
Step 628, judges whether the application program of this poll is identical with the application program of adjacent last poll, if phase Together, then step 626 is performed, if it is different, then performing step 630.
Step 630, at the moment of minute book time poll, application program according to the last poll begins to use the moment With the use duration of the application program that the moment of this poll obtains the last poll.
Step 632, clothes are uploaded to by ID, the application program of adjacent last poll and corresponding use duration Business device, then perform step 624.
Specifically, ID is obtained, by ID, the application program of adjacent last poll and corresponding is used Duration is uploaded onto the server, and can be stored on the server, facilitates subsequent query or statistical analysis etc..
Step 622 and step 632 can be omitted in method of the above-mentioned detection user using application program.
The method that above-mentioned detection user uses application program, by root authority or temporary root authority, it is ensured that hook To systematic difference routine interface, the application program in the stack top of application heap is run by hooking function monitoring management, When the application program that this is detected is different from the application program of adjacent last detection, the different when institutes of last detection are got First moment of record and the second moment of this detection, during the use of the application program that can obtain adjacent last detection It is long, the use duration of the application program obtained by the change for detecting application program in stack top, during because of application program in stack top The application program that user is being currently used, so detects that the use duration accuracy of the application program for obtaining is high, when default The interior accumulative use duration accuracy for counting the application program for obtaining is also high；The management operating is being linked up with by hooking function When the interface of application heap fails, by way of poll stack top, the application program in inquiry stack top obtains application program Use duration, because of the application program in the stack top of poll, detect that the use duration accuracy of application program is high；User is marked Know, the application program of adjacent last poll and corresponding use duration are uploaded onto the server, can be deposited on the server Storage, facilitates subsequent query or statistical analysis etc..
In one embodiment, above-mentioned detection user is also included using the method for application program：By the ID, institute The corresponding application program identification of ID is stated, and the corresponding application program of each application program identification is uploaded using duration every time To server；Receive the similar application journey of the accumulative use duration more than the application program of preset duration of the server push Sequence information.
In the present embodiment, server is according to the ID for receiving, corresponding application program and uses duration, can obtain The accumulative use duration of each application program, compares according to accumulative use duration with preset duration, obtains exceeding answering for preset duration With program, the application program similar more than the application program of preset duration is chosen, the similar application information is pushed to User, reaches the purpose for precisely recommending application program, improves application program and propagates success rate.
In one embodiment, above-mentioned detection user is also included using the method for application program：By the ID, institute The corresponding application program identification of ID is stated, and the corresponding application program of each application program identification is uploaded using duration every time To server；The similar application information of corresponding with the ID conventional application program of the server push is received, Conventional application program refers to the application program of the predetermined quantity chosen from high to low according to accumulative use duration or accumulative when using Application program more than duration threshold value long.
In the present embodiment, server is according to the ID for receiving, corresponding application program and uses duration, can obtain The accumulative use duration of each application program, conventional application program is obtained according to accumulative use duration, chooses conventional application program same The application program of class, user is pushed to by the similar application information, reaches the purpose for precisely recommending application program, is improved Application program propagates success rate.
In one embodiment, above-mentioned detection user is also included using the method for application program：By the ID, institute The corresponding application program identification of ID is stated, and the corresponding application program of each application program identification is uploaded using duration every time To server；Receive the similar application journey of the accumulative use duration more than the application program of preset duration of the server push Sequence information, and receive the similar application program letter of corresponding with ID conventional application program of the server push Breath, conventional application program refers to the application program of the predetermined quantity chosen from high to low according to accumulative use duration or adds up to use Duration exceedes the application program of duration threshold value.
Fig. 7 is to detect that user uses the flow chart of the method for application program in another embodiment.As shown in fig. 7, a kind of Detection user is run on server using the method for application program, including：
Step 702, receives ID, the corresponding application program of the ID, each application of user terminal uploads The corresponding each use duration of program, wherein, the corresponding each use duration of each application program is supervised by hooking function The application program surveyed in the stack top of management operating application heap, and judge the application program of this detection and adjacent last time Whether the application program of detection is identical, if the application program that the application program of this detection is detected with the adjacent last time is not Together, the first moment recorded when the last detection of acquisition is different and second moment of this detection, during according to described first Carve the use duration of the application program of last detection described adjacent with acquired in the second moment.
Step 704, the accumulative use duration of the corresponding each application program of the ID in statistics Preset Time.
Above-mentioned detection user receives ID, the ID pair of user terminal uploads using the method for application program Application program, the corresponding each use duration of each application program answered, the corresponding each use duration of each application program is to pass through Application program in the stack top of hooking function monitoring management operation application heap, the application program detected when this with it is adjacent When the application program of last time detection is different, get last detection it is different when the first moment for being recorded and this detection At the second moment, the use duration of the application program of adjacent last detection can be obtained, by detecting application program in stack top The use duration of application program that change is obtained, the application program that user is being currently used during because of application program in stack top, So detect that the use duration accuracy of the application program for obtaining is high, the accumulative of the application program that obtains is counted in Preset Time It is also high using duration accuracy.
In one embodiment, the corresponding each use duration of each application program is by recording application journey in the stack top Sequence begins to use the moment；Poll is initiated to the stack top according to the appointed interval time, the application program in the stack top is obtained； Judge whether the application program of this poll is identical with the application program of adjacent last poll；If the application program of this poll Application program from adjacent last poll is different, then the moment of minute book time poll, according to the application of the last poll The moment that begins to use of program obtains the use duration of the application program of the last poll with the moment of this poll.
In one embodiment, above-mentioned detection user is also included using the method for application program：Add up to use according to described Duration filters out the application program of application program or the accumulative use duration more than duration threshold value of predetermined quantity from high to low As conventional application program corresponding with the ID.
In the present embodiment, predetermined quantity can set as needed, such as 1,2,3,4,5,6.User marks It refers to the application program that ID is commonly used on the subscriber terminal to know corresponding conventional application program.Duration threshold value can basis Need setting, such as 1 week, 1 month, 3 months.
In one embodiment, above-mentioned detection user is also included using the method for application program：Receive and include ID Application recovery request；ID in application recovery request finds and the ID pair The conventional application program answered；The conventional application program is returned to the ID institute of the initiation application recovery request User terminal.
Fig. 8 is the user shown on user terminal often with the schematic diagram of application program.As shown in figure 8, the conventional application of user Program is including video player A, instant messaging application program B, mobile terminal house keeper C, application market D etc..
In the present embodiment, it is necessary to again after the terminal device that user renews or existing equipment are resumed Default Value Needed for installing during application program, application recovery request can be sent by ID login application program management client, Application program management service end on server receives the application recovery request comprising ID, find with mark Know corresponding conventional application program, the installation kit or mount message (including download address etc.) of conventional application program are returned into hair User terminal where playing the ID of application recovery request, installs user and often uses application program on the subscriber terminal, Preferential recovery user is realized often with application program, the efficiency of the changes terminal of user is improve, moving for changes terminal is reduced Move into this, there is provided good data recovery experience.
In one embodiment, above-mentioned detection user is also included using the method for application program：Receive and include ID Application recovery request；ID in application recovery request finds and the ID pair The conventional application program answered, and obtain the application program of the ID pre-selection；By the conventional application program and described The application program of ID pre-selection returns to the user terminal where initiating the ID that application recovery is asked.
In the present embodiment, the application program of pre-selection refers to the required application program that user pre-sets.
, it is necessary to reinstall required application after the terminal device that user renews or existing equipment are resumed Default Value During program, application recovery request can be sent by ID login application program management client, answering on server Terminated with program management service and receive the application recovery request comprising ID, found corresponding conventional with mark Application program, while the application program of user's pre-selection is got, by conventional application program and the installation kit of advance application program Or mount message returns to the user terminal where initiating the ID that application recovery is asked, and installs on the subscriber terminal User often uses application program, realizes preferential recovery user often with application program, improves the efficiency of the changes terminal of user, drops The low moving costs of changes terminal, there is provided good data recovery experience.
In one embodiment, above-mentioned detection user is also included using the method for application program：According to the ID The accumulative use duration of corresponding each application program filters out the accumulative application program for exceeding preset duration using duration；Obtain with The accumulative use duration exceedes the similar application information of application program of preset duration, and by the similar application journey Sequence information pushing is to the user terminal where the ID.
In the present embodiment, server is according to the ID for receiving, corresponding application program and uses duration, can obtain The accumulative use duration of each application program, compares according to accumulative use duration with preset duration, obtains exceeding answering for preset duration With program, the application program similar more than the application program of preset duration is chosen, the similar application information is pushed to User, reaches the purpose for precisely recommending application program, improves application program and propagates success rate.
In one embodiment, above-mentioned detection user is also included using the method for application program：Obtain ID correspondence The similar application information of conventional application program, by the similar application program letter of the corresponding conventional application program of ID Cease the user terminal where being pushed to ID.
In the present embodiment, server is according to the ID for receiving, corresponding application program and uses duration, can obtain The accumulative use duration of each application program, conventional application program is obtained according to accumulative use duration, chooses conventional application program same The application program of class, user is pushed to by the similar application information, reaches the purpose for precisely recommending application program, is improved Application program propagates success rate.
In one embodiment, above-mentioned detection user is also included using the method for application program：According to the ID The accumulative use duration of corresponding each application program filters out the accumulative application program for exceeding preset duration using duration；Obtain with The accumulative use duration exceedes the similar application information of application program of preset duration, and by the similar application journey Sequence information pushing is to the user terminal where the ID；And the corresponding conventional application program of acquisition ID is similar Application information, the similar application information of the corresponding conventional application program of ID is pushed to ID institute User terminal.
Fig. 9 be one embodiment in detect user using application program device structured flowchart.As shown in figure 9, a kind of Detection user runs on user terminal using the device of application program, including monitoring modular 902, the first judge module 904, the One single duration acquisition module 906, statistical module 908.Wherein：
Monitoring modular 902 is used to run the application journey in the stack top of application heap by hooking function monitoring management Sequence.
First judge module 904 is used to judge that the application program of this detection to be with the application program of adjacent last detection It is no identical.
First judge module 904 is additionally operable to obtain the application program identification of this detection and the application of adjacent last detection Program identification, judges whether the application program identification and the adjacent last application program identification for detecting of this detection are identical.
If the first single duration acquisition module 906 is used for the application program of this detection and adjacent last detection Application program is different, then the first moment and this second moment detected, root recorded when the last detection of acquisition is different The use duration of the application program of the adjacent last detection is obtained according to first moment and the second moment.
Statistical module 908 is used to obtain ID, the corresponding each application journey of the ID in statistics Preset Time The accumulative use duration of sequence.
Above-mentioned detection user runs application heap using the device of application program by hooking function monitoring management Application program in stack top, when the application program that this is detected is different from the application program of adjacent last detection, gets The first moment and the second moment of this detection that last time detection is recorded when different, adjacent last detection can be obtained The use duration of application program, the use duration of the application program obtained by the change for detecting application program in stack top, because of stack The application program that user is being currently used during application program in top, so detects that the use duration of the application program for obtaining is accurate True property is high, and the accumulative use duration accuracy that the application program for obtaining is counted in Preset Time is also high.
Figure 10 is to detect that user uses the structured flowchart of the device of application program in another embodiment.As shown in Figure 10, A kind of device for detecting user using application program, runs on user terminal, except judging mould including monitoring modular 902, first Block 904, the first single duration acquisition module 906, statistical module 908, also including screening module 910, logging modle 912, poll Module 914, the second judge module 916, the request of the second single duration acquisition module 918, authority detection module 920, authorization policy Module 922, authorization policy receiver module 924, uploading module 926, information receiving module 928.Wherein：
Screening module 910 be used for according to the accumulative use duration filter out from high to low predetermined quantity application program or It is described it is accumulative use duration exceed duration threshold value application program as conventional application program corresponding with the ID.
Logging modle 912 is used to fail when the interface for linking up with the management operating application heap by hooking function When, record application program in the stack top begins to use the moment.
Poller module 914 is used to initiate the stack top poll, answering in the acquisition stack top according to the appointed interval time Use program.
Second judge module 916 is used to judge that the application program of this poll to be with the application program of adjacent last poll It is no identical.
If the application program that logging modle 912 is additionally operable to this poll is different from the application program of adjacent last poll, Then moment of minute book time poll.
Second single duration acquisition module 918 begins to use the moment for the application program according to the last poll With the use duration of the application program that moment of this poll obtains the last poll, and by the moment of this poll Application program as this poll begins to use the moment；
If the application program that poller module 914 is additionally operable to this poll is identical with the application program of adjacent last poll, Then continue to initiate poll to the stack top according to the appointed interval time, obtain the application program in the stack top.
Authority detection module 920 is used for answering in the stack top for running application heap by hooking function monitoring management Before with program, detect whether with super administration authority；
If monitoring modular 902 is additionally operable to have super administration authority, is run by hooking function monitoring management and apply journey Application program in the stack top of sequence storehouse；
If logging modle 912 is additionally operable to without super administration authority, record application program in the stack top start make With the moment, the poller module be additionally operable to according to the appointed interval time stack top is initiated poll obtain in the stack top should Use program.
Authority detection module 920 is used for answering in the stack top for running application heap by hooking function monitoring management Before with program, detect whether with super administration authority.
If monitoring modular 902 is additionally operable to have super administration authority, is run by hooking function monitoring management and apply journey Application program in the stack top of sequence storehouse.
If authority detection module 920 is additionally operable to without super administration authority, it is interim whether detection user terminal has Super administration authority.
If monitoring modular 902 is additionally operable to, with interim super administration authority, be run by hooking function monitoring management Application program in the stack top of application heap.
If authorization policy request module 922 is used for without interim super administration authority, initiate to obtain to server The request of interim super administration authority strategy.
Authorization policy receiver module 924 is used to receive the interim super administration authority strategy that the server is returned.
If monitoring modular 902 is additionally operable to obtain interim super administrative power according to the interim super administration authority strategy Limit successfully, the application program in the stack top of application heap is run by hooking function monitoring management；
If logging modle 912 is additionally operable to obtain interim super administrative power according to the interim super administration authority strategy Limit failure, record application program in the stack top begins to use the moment, and the poller module 914 is additionally operable to according to appointed interval Time initiates poll to the stack top, obtains the application program in the stack top.
Uploading module 926 is used for the ID, the corresponding application program identification of the ID, and respectively should Uploaded onto the server using duration every time with the corresponding application program of program identification.
Information receiving module 928 is used to receive the application of the accumulative use duration more than preset duration of the server push The similar application information of program, and/or, receive corresponding with the ID conventional application journey of the server push The similar application information of sequence, the conventional application program refers to the predetermined number chosen from high to low according to accumulative use duration The application program of amount or the accumulative application program for exceeding duration threshold value using duration.
In other embodiments, a kind of device for detecting user using application program, it may include monitoring modular 902, first Judge module 904, the first single duration acquisition module 906, statistical module 908, screening module 910, logging modle 912, poll Module 914, the second judge module 916, the request of the second single duration acquisition module 918, authority detection module 920, authorization policy Any possible combination of module 922, authorization policy receiver module 924, uploading module 926, information receiving module 928.
Figure 11 is to detect that user uses the structured flowchart of the device of application program in another embodiment.As shown in figure 11, A kind of device for detecting user using application program, including data reception module 1102, accumulation module 1104.
Data reception module 1102 is used to receive ID, the corresponding application of the ID of user terminal uploads The corresponding each use duration of program, each application program, wherein, the corresponding each use duration of each application program is described User terminal runs the application program in the stack top of application heap by hooking function monitoring management, and judges that this is detected Application program it is whether identical with the application program of adjacent last detection, if the application program of this detection with it is adjacent on The application program of one-time detection is different, the first moment and the second of this detection that the last detection of acquisition is recorded when different Moment, during the use of the application program of the described adjacent last detection according to acquired in first moment and the second moment It is long.
Accumulation module 1104 is used to counting corresponding the accumulative of each application program of the ID in Preset Time and uses Duration.
Above-mentioned detection user receives ID, the ID pair of user terminal uploads using the device of application program Application program, the corresponding each use duration of each application program answered, the corresponding each use duration of each application program is to pass through Application program in the stack top of hooking function monitoring management operation application heap, the application program detected when this with it is adjacent When the application program of last time detection is different, get last detection it is different when the first moment for being recorded and this detection At the second moment, the use duration of the application program of adjacent last detection can be obtained, by detecting application program in stack top The use duration of application program that change is obtained, the application program that user is being currently used during because of application program in stack top, So detect that the use duration accuracy of the application program for obtaining is high, the accumulative of the application program that obtains is counted in Preset Time It is also high using duration accuracy.
Figure 12 is to detect that user uses the structured flowchart of the device of application program in another embodiment.As shown in figure 12, A kind of device for detecting user using application program, except including data reception module 1102, accumulation module 1104, also including the One sieve modulus block 1106, recovery request receiver module 1108, searching modul 1110, the return sieve modulus block of module 1112, second 1114 and pushing module 1116.
First sieve modulus block 1106 is used to be filtered out from high to low according to the accumulative use duration application of predetermined quantity Program or it is described it is accumulative use duration exceed duration threshold value application program as conventional application corresponding with the ID Program.
Recovery request receiver module 1108 is used to receive the application recovery request comprising ID；
The ID that searching modul 1110 is used in application recovery request finds and the user Identify corresponding conventional application program；
Returning to module 1112 is used to return to the conventional application program use of the initiation application recovery request User terminal where the mark of family.
In other embodiments, recovery request receiver module 1108 is used to receive the application recovery comprising ID Request.
The ID that searching modul 1110 is used in application recovery request finds and the user Identify corresponding conventional application program, and the application program for obtaining the ID pre-selection.
Returning to module 1112 is used to return to the application program that the conventional application program and the ID are preselected User terminal where the ID for initiating application recovery request.
Second sieve modulus block 1114 is used to be sieved according to the accumulative use duration of the corresponding each application program of the ID Select the accumulative application program for exceeding preset duration using duration.
Pushing module 1116 is used to obtain similar with the application program that the accumulative use duration exceedes preset duration answering With program information, and the user terminal where the similar application information is pushed into the ID, and/or, The similar application information of the corresponding conventional application program of ID is obtained, by the corresponding conventional application of the ID The similar application information of program be pushed to the ID where user terminal, the conventional application program refer to by The application program of the predetermined quantity chosen from high to low according to accumulative use duration or accumulative the answering more than duration threshold value using duration Use program.
In other embodiments, a kind of device for detecting user using application program, runs on server, it may include number According to receiver module 1102, the sieve modulus block 1106, recovery request receiver module 1108, searching modul of accumulation module 1104, first 1110th, the sieve modulus of module 1112, second block 1114 and any possible combination of pushing module 1116 are returned.
One of ordinary skill in the art will appreciate that all or part of flow in realizing above-described embodiment method, can be The hardware of correlation is instructed to complete by computer program, described program can be stored in a non-volatile computer and can read In storage medium, the program is upon execution, it may include such as the flow of the embodiment of above-mentioned each method.Wherein, described storage is situated between Matter can be magnetic disc, CD, read-only memory (Read-Only Memory, ROM) etc..
Embodiment described above only expresses several embodiments of the invention, and its description is more specific and detailed, but simultaneously Therefore the limitation to the scope of the claims of the present invention can not be interpreted as.It should be pointed out that for one of ordinary skill in the art For, without departing from the inventive concept of the premise, various modifications and improvements can be made, these belong to guarantor of the invention Shield scope.Therefore, the protection domain of patent of the present invention should be determined by the appended claims.

Claims (24)

1. a kind of method that detection user uses application program, including：
Application program in the stack top of application heap is run by hooking function monitoring management；
Judge whether the application program of this detection is identical with the application program of adjacent last detection；
If the application program of this detection is different from the application program of adjacent last detection, last detection is obtained not The first moment for being recorded simultaneously and the second moment of this detection, according to first moment and the second moment obtain The use duration of the application program of adjacent last detection；
ID is obtained, the accumulative use duration of the corresponding each application program of the ID in statistics Preset Time.
2. method according to claim 1, it is characterised in that methods described also includes：
The application program or the accumulative use duration for filtering out predetermined quantity from high to low according to the accumulative use duration surpass The application program of duration threshold value is crossed as conventional application program corresponding with the ID.
3. method according to claim 1 and 2, it is characterised in that methods described also includes：
When the interface that the management operating application heap is linked up with by hooking function is failed, record and apply in the stack top Program begins to use the moment；
Poll is initiated to the stack top according to the appointed interval time, the application program in the stack top is obtained；
Judge whether the application program of this poll is identical with the application program of adjacent last poll；
If the application program of this poll is different from the application program of adjacent last poll, the moment of minute book time poll, The moment that begins to use of the application program according to the last poll obtains the last poll with the moment of this poll Application program use duration, and using the moment of this poll as the application program of this poll start make With the moment；
If the application program of this poll is identical with the application program of adjacent last poll, continue according to the appointed interval time Poll is initiated to the stack top, the application program in the stack top is obtained.
4. method according to claim 1 and 2, it is characterised in that the application program of the judgement this detection with it is adjacent Whether the last time application program of detection is identical, including：
Obtain the application program identification of this detection and the application program identification of adjacent last detection；
Judge whether the application program identification and the adjacent last application program identification for detecting of this detection are identical.
5. method according to claim 3, it is characterised in that application program heap is being run by hooking function monitoring management Before application program in the stack top of stack, methods described also includes：
Detect whether with super administration authority；
If having super administration authority, the application journey in the stack top of application heap is run by hooking function monitoring management Sequence；
If not having super administration authority, perform it is described record application program in the stack top begin to use the moment, according to The appointed interval time initiates poll to the stack top, the step of obtain the application program in the stack top.
6. method according to claim 3, it is characterised in that application program heap is being run by hooking function monitoring management Before application program in the stack top of stack, methods described also includes：
Detect whether with super administration authority；
If having super administration authority, in the execution stack top by hooking function monitoring management operation application heap Application program the step of；
If not having super administration authority, whether detection user terminal has interim super administration authority；
If with interim super administration authority, performing the hooking function monitoring management that passes through and running application heap The step of application program in stack top；
If without interim super administration authority, initiating to obtain asking for interim super administration authority strategy to server Ask, receive the interim super administration authority strategy that the server is returned；
If successful according to the interim super administration authority of the interim super administration authority strategy acquisition, pass through described in execution The step of hooking function monitoring management runs the application program in the stack top of application heap；
If obtaining interim super administration authority according to the interim super administration authority strategy to fail, described in the record Application program begins to use the moment in stack top, and poll is initiated to the stack top according to the appointed interval time, obtains the stack top In application program the step of.
7. method according to claim 1, it is characterised in that methods described also includes：
By the ID, the corresponding application program identification of the ID, and each application program identification it is corresponding should Uploaded onto the server using duration every time with program；
The similar application program of the application program that the accumulative use duration for receiving the server push exceedes preset duration is believed Breath,
And/or, the similar application information of corresponding with the ID conventional application program of the server push is received, The conventional application program refers to the application program of the predetermined quantity chosen from high to low according to accumulative use duration or adds up to make Exceed the application program of duration threshold value with duration.
8. a kind of method that detection user uses application program, including：
The ID of reception user terminal uploads, the corresponding application program of the ID, each application program are corresponding every Secondary use duration, wherein, the corresponding each use duration of each application program is that run by hooking function monitoring management should With the application program in the stack top of program stack, and judge the application program of this detection and the application journey of adjacent last detection Whether sequence is identical, if the application program of this detection is different from the application program of adjacent last detection, obtains last The first moment recorded when detecting different and the second moment of this detection, according to first moment and the second moment institute The use duration of the application program of the described adjacent last detection for obtaining；
The accumulative use duration of the corresponding each application program of the ID in statistics Preset Time.
9. method according to claim 8, it is characterised in that methods described also includes：
The application program or the accumulative use duration for filtering out predetermined quantity from high to low according to the accumulative use duration surpass The application program of duration threshold value is crossed as conventional application program corresponding with the ID.
10. method according to claim 9, it is characterised in that methods described also includes：
The application recovery comprising ID is received to ask；
ID in application recovery request finds conventional application journey corresponding with the ID Sequence；
User terminal where the conventional application program is returned into the ID of the initiation application recovery request.
11. methods according to claim 9, it is characterised in that methods described also includes：
The application recovery comprising ID is received to ask；
ID in application recovery request finds conventional application journey corresponding with the ID Sequence, and obtain the application program of the ID pre-selection；
The application program that the conventional application program and the ID are preselected is returned into the initiation application recovery User terminal where the ID of request.
12. method according to claim 8,10 or 11, it is characterised in that methods described also includes：
Accumulative use duration according to the corresponding each application program of the ID is filtered out to add up to be exceeded using duration and preset The application program of duration；
The application information similar with the application program that the accumulative use duration exceedes preset duration is obtained, and will be described same The application information of class be pushed to the ID where user terminal,
And/or, the similar application information of the corresponding conventional application program of ID is obtained, by ID correspondence The similar application information of conventional application program be pushed to the ID where user terminal, the conventional application Program refers to the application program of the predetermined quantity chosen from high to low according to accumulative use duration or accumulative when being exceeded using duration The application program of threshold value long.
A kind of 13. devices for detecting user using application program, it is characterised in that including：
Monitoring modular, for the application program in the stack top that application heap is run by hooking function monitoring management；
First judge module, for judge application program of this detection and adjacent last detection application program whether phase Together；
First single duration acquisition module, if for the application program and the adjacent last application journey for detecting of this detection Sequence is different, then the first moment and this second moment detected recorded when the last detection of acquisition is different, according to described First moment and the second moment obtain the use duration of the application program of the adjacent last detection；
Statistical module, for obtaining ID, the corresponding each application program of ID tires out in statistics Preset Time Meter uses duration.
14. devices according to claim 13, it is characterised in that described device also includes：
Screening module, for filtering out the application program of predetermined quantity or described tired from high to low according to the accumulative use duration Meter uses duration to exceed the application program of duration threshold value as conventional application program corresponding with the ID.
15. device according to claim 13 or 14, it is characterised in that described device also includes：
Logging modle, for when the interface that the management operating application heap is linked up with by hooking function is failed, recording Application program begins to use the moment in the stack top；
Poller module, for initiating poll to the stack top according to the appointed interval time, obtains the application program in the stack top；
Second judge module, for judge the application program of this poll and adjacent last poll application program whether phase Together；
If the application program that the logging modle is additionally operable to this poll is different from the application program of adjacent last poll, remember Record the moment of this poll；
Second single duration acquisition module, for the application program according to the last poll begin to use the moment and this Moment of poll obtains the use duration of the application program of the last poll, and using the moment of this poll as institute The application program for stating this poll begins to use the moment；
If the application program that the poller module is additionally operable to this poll is identical with the application program of adjacent last poll, after It is continuous that poll is initiated to the stack top according to the appointed interval time, obtain the application program in the stack top.
16. device according to claim 13 or 14, it is characterised in that first judge module is additionally operable to obtain this The application program identification of detection and the application program identification of adjacent last detection, judge this detection application program identification and Whether the application program identification of adjacent last detection is identical.
17. devices according to claim 15, it is characterised in that described device also includes：
Authority detection module, for the application program in the stack top for running application heap by hooking function monitoring management Before, detect whether with super administration authority；
If the monitoring modular is additionally operable to have super administration authority, application program heap is run by hooking function monitoring management Application program in the stack top of stack；
If the logging modle is additionally operable to, without super administration authority, record when beginning to use of application program in the stack top Carve, the poller module is additionally operable to initiate the stack top according to the appointed interval time application journey in the poll acquisition stack top Sequence.
18. devices according to claim 15, it is characterised in that described device also includes：
Authority detection module, for the application program in the stack top for running application heap by hooking function monitoring management Before, detect whether with super administration authority；
If the monitoring modular is additionally operable to have super administration authority, application program heap is run by hooking function monitoring management Application program in the stack top of stack；
If the authority detection module is additionally operable to without super administration authority, whether detection user terminal has interim surpassing Level administration authority；
If the monitoring modular is additionally operable to interim super administration authority, is run by hooking function monitoring management and applied Application program in the stack top of program stack；
Authorization policy request module, if for without interim super administration authority, initiating to obtain interim to server The request of super administration authority strategy；
Authorization policy receiver module, for receiving the interim super administration authority strategy that the server is returned；
If the monitoring modular is additionally operable to obtain interim super administration authority according to the interim super administration authority strategy Success, the application program in the stack top of application heap is run by hooking function monitoring management；
If the logging modle is additionally operable to obtain interim super administration authority according to the interim super administration authority strategy Failure, record application program in the stack top begins to use the moment, and the poller module was additionally operable to according to the appointed interval time Poll is initiated to the stack top, the application program in the stack top is obtained.
19. device according to claim 13 or 14, it is characterised in that described device also includes：
Uploading module, for by the ID, the corresponding application program identification of the ID, and each application program Corresponding application program is identified to be uploaded onto the server using duration every time；
Information receiving module, the accumulative use duration for receiving the server push exceedes the application program of preset duration Similar application information, and/or, corresponding with the ID conventional application program for receiving the server push is similar Application information, the conventional application program refer to the predetermined quantity chosen from high to low according to accumulative use duration should With program or the accumulative application program for exceeding duration threshold value using duration.
A kind of 20. devices for detecting user using application program, it is characterised in that including：
Data reception module, for receiving the ID of user terminal uploads, the corresponding application program of the ID, each The corresponding each use duration of application program, wherein, the corresponding each use duration of each application program is user's end The application program in the stack top of application heap is run at end by hooking function monitoring management, and judges the application of this detection Whether program is identical with the application program of adjacent last detection, if the application program of this detection and adjacent last inspection The application program of survey is different, the first moment and second moment of this detection that the last detection of acquisition is recorded when different, The use duration of the application program of the described adjacent last detection according to acquired in first moment and the second moment；
Accumulation module, the accumulative use duration for counting the corresponding each application program of the ID in Preset Time.
21. devices according to claim 20, it is characterised in that described device also includes：
First sieve modulus block, application program or institute for filtering out predetermined quantity from high to low according to the accumulative use duration The application program for adding up to use duration to exceed duration threshold value is stated as conventional application program corresponding with the ID.
22. devices according to claim 21, it is characterised in that described device also includes：
Recovery request receiver module, asks for receiving the application recovery comprising ID；
Searching modul, finds corresponding with the ID for the ID in application recovery request Conventional application program；
Module is returned to, the ID institute for the conventional application program to be returned to the initiation application recovery request User terminal.
23. devices according to claim 21, it is characterised in that described device also includes：
Recovery request receiver module, asks for receiving the application recovery comprising ID；
Searching modul, finds corresponding with the ID for the ID in application recovery request Conventional application program, and the application program for obtaining ID pre-selection；
Module is returned to, for the application program that the conventional application program and the ID are preselected to be returned into the initiation User terminal where the ID of application recovery request.
24. device according to claim 20,22 or 23, it is characterised in that described device also includes：
Second sieve modulus block, it is accumulative for being filtered out according to the accumulative use duration of the corresponding each application program of the ID Exceed the application program of preset duration using duration；
Pushing module, the application program for obtaining similar more than the application program of preset duration with the accumulative use duration is believed Breath, and the user terminal where the similar application information is pushed into the ID, and/or, obtain user The similar application information of corresponding conventional application program is identified, the corresponding conventional application program of the ID is similar Application information be pushed to the ID where user terminal, the conventional application program refers to make according to accumulative The application program of the predetermined quantity chosen from high to low with duration or the accumulative application program for exceeding duration threshold value using duration.
CN201610865515.7A 2016-09-29 2016-09-29 Method and device for detecting application program used by user Active CN106708697B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610865515.7A CN106708697B (en) 2016-09-29 2016-09-29 Method and device for detecting application program used by user

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610865515.7A CN106708697B (en) 2016-09-29 2016-09-29 Method and device for detecting application program used by user

Publications (2)

Publication Number Publication Date
CN106708697A true CN106708697A (en) 2017-05-24
CN106708697B CN106708697B (en) 2020-12-22

Family

ID=58940428

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610865515.7A Active CN106708697B (en) 2016-09-29 2016-09-29 Method and device for detecting application program used by user

Country Status (1)

Country Link
CN (1) CN106708697B (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108769235A (en) * 2018-06-08 2018-11-06 河南嘟嘟计算机科技有限公司 A kind of statistical method obtaining user's browsing pages time
CN109150642A (en) * 2017-06-16 2019-01-04 腾讯科技（深圳）有限公司 Application memory error-detecting method, detection device and storage medium
CN110018942A (en) * 2019-03-14 2019-07-16 深圳市六度人和科技有限公司 Application program use information management system, method, apparatus and computer equipment
CN110618913A (en) * 2019-09-18 2019-12-27 青岛海信移动通信技术股份有限公司 Application use duration segmented statistics method and terminal
CN110990241A (en) * 2019-11-27 2020-04-10 腾讯科技（深圳）有限公司 Application trial method and device, terminal and storage medium
CN111314160A (en) * 2018-12-12 2020-06-19 北京奇虎科技有限公司 Testing method and device for application duration statistical function
CN112235451A (en) * 2020-10-21 2021-01-15 广州三星通信技术研究有限公司 Method and device for providing alarm about deleted contact
CN112799746A (en) * 2019-11-14 2021-05-14 青岛海信移动通信技术股份有限公司 Communication terminal and terminal data processing method

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1926510A (en) * 2004-03-31 2007-03-07 英特尔公司 Event processing mechanism
US20070240215A1 (en) * 2006-03-28 2007-10-11 Blue Coat Systems, Inc. Method and system for tracking access to application data and preventing data exploitation by malicious programs
CN102629935A (en) * 2012-03-07 2012-08-08 中兴通讯股份有限公司 Method for installing application software based on cloud service, device thereof and system thereof
CN103714287A (en) * 2013-12-25 2014-04-09 北京奇虎科技有限公司 Method and device for obtaining temporary Root authority
CN104166696A (en) * 2014-08-01 2014-11-26 小米科技有限责任公司 Method and device for pushing application programs
CN104281513A (en) * 2013-07-05 2015-01-14 贝壳网际（北京）安全技术有限公司 Application power consumption detection method and system
CN104462952A (en) * 2014-12-31 2015-03-25 北京奇虎科技有限公司 Method and device for preventing self-starting of application
CN104615525A (en) * 2013-11-01 2015-05-13 腾讯科技（深圳）有限公司 Method and device for detecting running time of application programs in mobile terminal
CN105320578A (en) * 2015-11-09 2016-02-10 青岛海信移动通信技术股份有限公司 Method and apparatus for backing up and recovering APP
CN105786550A (en) * 2014-12-26 2016-07-20 联想(北京)有限公司 Memory application processing method and apparatus

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1926510A (en) * 2004-03-31 2007-03-07 英特尔公司 Event processing mechanism
US20070240215A1 (en) * 2006-03-28 2007-10-11 Blue Coat Systems, Inc. Method and system for tracking access to application data and preventing data exploitation by malicious programs
CN102629935A (en) * 2012-03-07 2012-08-08 中兴通讯股份有限公司 Method for installing application software based on cloud service, device thereof and system thereof
CN104281513A (en) * 2013-07-05 2015-01-14 贝壳网际（北京）安全技术有限公司 Application power consumption detection method and system
CN104615525A (en) * 2013-11-01 2015-05-13 腾讯科技（深圳）有限公司 Method and device for detecting running time of application programs in mobile terminal
CN103714287A (en) * 2013-12-25 2014-04-09 北京奇虎科技有限公司 Method and device for obtaining temporary Root authority
CN104166696A (en) * 2014-08-01 2014-11-26 小米科技有限责任公司 Method and device for pushing application programs
CN105786550A (en) * 2014-12-26 2016-07-20 联想(北京)有限公司 Memory application processing method and apparatus
CN104462952A (en) * 2014-12-31 2015-03-25 北京奇虎科技有限公司 Method and device for preventing self-starting of application
CN105320578A (en) * 2015-11-09 2016-02-10 青岛海信移动通信技术股份有限公司 Method and apparatus for backing up and recovering APP

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109150642A (en) * 2017-06-16 2019-01-04 腾讯科技（深圳）有限公司 Application memory error-detecting method, detection device and storage medium
CN109150642B (en) * 2017-06-16 2021-01-08 腾讯科技（深圳）有限公司 Application memory error detection method, detection device and storage medium
CN108769235A (en) * 2018-06-08 2018-11-06 河南嘟嘟计算机科技有限公司 A kind of statistical method obtaining user's browsing pages time
CN111314160A (en) * 2018-12-12 2020-06-19 北京奇虎科技有限公司 Testing method and device for application duration statistical function
CN111314160B (en) * 2018-12-12 2023-02-17 北京奇虎科技有限公司 Testing method and device for application duration statistical function
CN110018942A (en) * 2019-03-14 2019-07-16 深圳市六度人和科技有限公司 Application program use information management system, method, apparatus and computer equipment
CN110618913A (en) * 2019-09-18 2019-12-27 青岛海信移动通信技术股份有限公司 Application use duration segmented statistics method and terminal
CN112799746A (en) * 2019-11-14 2021-05-14 青岛海信移动通信技术股份有限公司 Communication terminal and terminal data processing method
CN110990241A (en) * 2019-11-27 2020-04-10 腾讯科技（深圳）有限公司 Application trial method and device, terminal and storage medium
CN112235451A (en) * 2020-10-21 2021-01-15 广州三星通信技术研究有限公司 Method and device for providing alarm about deleted contact

Also Published As

Publication number Publication date
CN106708697B (en) 2020-12-22

Similar Documents

Publication Publication Date Title
CN106708697A (en) Method and device for detecting applications used by user
US11296923B2 (en) Network fault originator identification for virtual network infrastructure
US9405665B1 (en) Application testing based on user input captured during a trial period and priority scheme analysis
KR102471165B1 (en) Systems and methods for identifying process flows from log files and visualizing the flow
US10530878B2 (en) Method and system for pushing information to end users adaptively
EP2863607A2 (en) System and method for improving internet communication by using intermediate nodes
CN107104984B (en) Unified policy across heterogeneous device types
JP2004227359A (en) Operation management method for storage system based on policy
CN107205057A (en) A kind of game resource update method, device and client
CN106294151B (en) Log test method and device
US20070078841A1 (en) System and method for network resource management
US20190238422A1 (en) Methods, systems, and computer readable media for managing deployment and maintenance of network tools
CN113792341B (en) Automatic detection method, device, equipment and medium for privacy compliance of application program
CN106790895A (en) A kind of fault handling method and device
US10608907B2 (en) Open-loop control assistant to guide human-machine interaction
CN108039956A (en) Using monitoring method, system and computer-readable recording medium
US11507463B2 (en) System and method for consolidated BIOS-level event logging
US8676968B2 (en) Determining information about a computing system
CN110134558B (en) Method and device for detecting server
US8271879B2 (en) Workstation management application
US20230066698A1 (en) Compute instance warmup operations
CN113176997B (en) Test case loading method and device, computer equipment and readable storage medium
KR102147978B1 (en) User assist system using user assist app
CN112711518B (en) Log uploading method and device
CN109101253B (en) Management method and device for host in cloud computing system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant