CN104468466A

CN104468466A - Operation management method and device for network account

Info

Publication number: CN104468466A
Application number: CN201310416720.1A
Authority: CN
Inventors: 贺啸; 涂杰; 林宇东; 史慧敏; 金朝林; 蔡泽霖
Original assignee: Shenzhen Tencent Computer Systems Co Ltd
Current assignee: Shenzhen Tencent Computer Systems Co Ltd
Priority date: 2013-09-12
Filing date: 2013-09-12
Publication date: 2015-03-25
Anticipated expiration: 2033-09-12
Also published as: CN104468466B

Abstract

The invention discloses an operation management method and device for a network account, belonging to the field of information security. The method comprises the steps of receiving a network account operation request with operation information sent by a terminal; judging whether the operation information in the network account operation request is matched with reference operation information acquired in advance according to the operation record of a network account; and if yes, permitting the operation of the terminal on the network account. According to the method, the network account operation request with the operation information sent by the terminal is received, then after the judgment shows that the operation information and the reference operation information acquired in advance according to the operation record of the network account are matched, the operation of the terminal on the network account is permitted, so that users can operate and manage the network account without setting and inputting an identifying code, and the convenience and safety of network account trade are improved.

Description

The operation management method of network account and device

Technical field

The present invention relates to information security field, particularly a kind of operation management method of network account and device.

Background technology

Along with the development of information technology, disparate networks application also gets more and more.In numerous network applications, the more abundant Product Experience that user has often needed various transaction to provide to obtain service provider.In order to complete transaction, the value of network account is increasing gradually, this cause network account information leakage, network account property stolen etc. event takes place frequently, user's virtual assets cannot be protected safely.In transaction, how to carry out management to the operation of network account is service provider's urgent problem.

Prior art is when managing the operation of network account, service provider is adopted to provide the mode of setting options to limit the operation of non-present networks account user, selected voluntarily the need of setting by user, if needed, arrange, after the operation of network account exceeds the scope of setting, need input validation code etc. to carry out complete operation.In practical application, the setting options that service provider provides mainly contain and arrange Spending Limit, arrange the class of business of appointment consumption, arrange secondary checking etc.

Realizing in process of the present invention, inventor finds that prior art at least exists following problem:

If user does not carry out setting initiatively, then network account cannot be effectively protected.Even user carries out setting initiatively, but owing to needing input validation code etc. to proceed transaction more at every turn, cause user to use inconvenience, the trading efficiency of network account is reduced.If the password of network account is stolen, the risk that the content that there is user's setting is modified, makes the fail safe of network account be protected.Therefore, the operation management method of existing network account is too loaded down with trivial details, and convenience and fail safe are not high.

Summary of the invention

In order to solve the problem of prior art, embodiments provide a kind of operation management method and device of network account.Described technical scheme is as follows:

On the one hand, provide a kind of operation management method of network account, described method comprises:

The network account operation requests of carrying operation information that receiving terminal sends;

Judge whether the operation information carried in described network account operation requests mates with the reference operation information that the operation note in advance according to described network account obtains;

If the reference operation information that the operation information carried in described network account operation requests obtains with the operation note in advance according to described network account mates, then allow described terminal to this time operation of described network account.

On the other hand, provide a kind of operation management device of network account, described device comprises:

Receiver module, for the network account operation requests of carrying operation information that receiving terminal sends;

First judge module, for judging whether the operation information carried in described network account operation requests mates with the reference operation information that the operation note in advance according to described network account obtains;

Administration module, for when the reference operation information that the operation information carried in described network account operation requests and the operation note in advance according to described network account obtain mates, then allows described terminal to this time operation of described network account.

The beneficial effect that the technical scheme that the embodiment of the present invention provides is brought is:

By the network account operation requests of carrying operation information that receiving terminal sends; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., management process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of network account.

Accompanying drawing explanation

In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, below the accompanying drawing used required in describing embodiment is briefly described, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.

Fig. 1 is the operation management method flow chart of a kind of network account that the embodiment of the present invention one provides;

Fig. 2 is the operation management method flow chart of a kind of network account that the embodiment of the present invention two provides;

Fig. 3 is the display interface schematic diagram of a kind of information that the embodiment of the present invention two provides;

Fig. 4 is the operation management method flow chart of a kind of network account that the embodiment of the present invention three provides;

Fig. 5 is the operation management device structural representation of the first network account that the embodiment of the present invention four provides;

Fig. 6 is the operation management device structural representation of the second network account that the embodiment of the present invention four provides;

Fig. 7 is the operation management device structural representation of the third network account that the embodiment of the present invention four provides;

Fig. 8 is the structural representation of a kind of terminal that the embodiment of the present invention five provides.

Embodiment

For making the object, technical solutions and advantages of the present invention clearly, below in conjunction with accompanying drawing, embodiment of the present invention is described further in detail.

Embodiment one

Along with the development of network virtual application, in network account, the kind of virtual objects is more and more abundanter, the value of network account is also more and more higher, if be not good at the operational administrative of network account, the phenomenon of stealing network account can be caused to happen occasionally, user not only can be made to suffer huge economic loss, and important personal information is also lost thereupon, thus brings huge potential safety hazard.In order to the safety of protecting network account, therefore, be necessary effectively to manage the operation of network account.For this reason, embodiments provide a kind of operation management method of network account, see Fig. 1, method flow comprises:

101: the network account operation requests of carrying operation information that receiving terminal sends;

102: judge whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains;

103: if the reference operation information that the operation information carried in network account operation requests and the operation note in advance according to network account obtain mates, then allow terminal to this time operation of network account.

The method that the embodiment of the present invention provides, the network account operation requests of carrying operation information sent by receiving terminal; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., management process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of network account.

Embodiment two

Embodiments provide a kind of operation management method of network account, in the method, consider that the behavioral similarity of validated user operational network account is larger, therefore, method that the present embodiment provides adopts and judges that whether operation information is the mode of reference operation information, realizes the operational administrative to network account.In conjunction with the content of above-described embodiment one, see Fig. 2, method flow comprises:

201: the network account operation requests of carrying operation information that receiving terminal sends.

Wherein, network account is the account that of the network virtual value such as bearer network virtual objects, ideal money is unique, network account includes but not limited to virtual token, virtual point certificate, virtual redemption code etc., and the present embodiment does not do concrete restriction to the content of network account.Because network account has the situation relating to user's property; in order to the user's property in protecting network account; the method that the present embodiment provides is when managing the operation of network account; if user has initiated network account operation requests by terminal; then need while initiation network account operation requests; operation information is carried, to be realized the management to terminal operation network account by operation information in this network account operation requests.About the mode of carrying the network account operation requests of operation information that receiving terminal sends, the present embodiment does not do concrete restriction, and the either type receiving data can be adopted to carry out the network account operation requests of carrying operation information of receiving terminal transmission.Wherein, due to network account meeting bearer network virtual objects, ideal money etc., therefore, when relating to the business such as network virtual article, ideal money that network account carries, all can trigger the operation requests to network account, then operation information can include but not limited to: operate the class of business of this network account, operand, business transaction quantity and exchange hour etc.The present embodiment does not limit the particular content of operation information.

For the ease of understanding, need to network account to be operating as example by terminal execution when on August 1st, 2013 buys the business of five virtual tokens with user and be described, then the class of business that operation information comprises buys in; Operand is virtual token; Number of transaction is five; Exchange hour is on August 1st, 2013.Certainly, operation information is except comprising the operation class of business of this network account, operand, business transaction quantity and exchange hour, and can also comprise other guide, the present embodiment does not do concrete restriction to this.

202: judge whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, if coupling, then perform step 203, if do not mated, then perform step 204.

Particularly, the operation that validated user often performs when passing through terminal operation network account can be reflected with reference to operation information, namely the operating habit of user to network account can be reflected, if the operation information carried in the network account operation requests that thus terminal sends matches with reference to operation information, then can illustrate that this network account operation requests is reliable, fail safe can be confirmed.Therefore, the method that the present embodiment provides is passed through to judge whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains the operational administrative foundation being used as network account.Further, before whether the reference operation information obtained in the operation information judging to carry in network account operation requests and the operation note in advance according to network account mates, first obtain with reference to operation information.About the mode obtained with reference to operation information, the present embodiment does not do concrete restriction, includes but not limited to: the operation note gathering network account in preset time period, have recorded the operation information of network account in preset time period in operation note; The reference operation information of network account is obtained according to the operation note of network account in the preset time period collected.

Particularly, when obtaining the reference operation information of network account according to the operation note of network account in the preset time period collected, the operation information of the network account recorded in the operation note of network account in the preset time period collected can be added up, obtain the operation information of network account in preset time period, again the operation information of the network account repeated in preset time period is gathered afterwards, obtain the number of repetition of the operation information of the network account of repetition, number of repetition is reached the reference operation information of operation information as network account of the network account of threshold value, and store.

Wherein, threshold value can be 1,2 and 6 etc., and the present embodiment does not limit the concrete numerical value of threshold value.

For the ease of understanding said process, carry out detailed explanation explanation with a concrete example below.

Such as, setting preset time period is ten days, and threshold value is 2, if get the operation information of the network account that three kinds are repeated in ten days.Wherein, the number of repetition of the operation information of the first network account repeated is 3, the number of repetition of the operation information of the network account that the second repeats is 4, the number of times of the operation information of the third network account repeated is 1, because the number of repetition of the operation information of the first network account repeated with the second is all greater than threshold value 2, then using the reference operation information of the operation information of the first network account repeated with the second as network account.In like manner, because the number of repetition of the operation information of the third network account repeated is less than threshold value 2, then fail the reference operation information of the operation information of the third network account repeated as network account.

Wherein, the length of Preset Time can be chosen as required, can be one month or longer time, and the present embodiment does not do concrete restriction to the length of Preset Time.Under normal circumstances, Preset Time will choose a moderate time span, makes network account in Preset Time have certain operation note; If the Preset Time chosen is too short, even in Preset Time, there is no operation note in network account, then can not embody the operating habit of user to network account; If the Preset Time chosen is oversize, then can not obtains rapidly with reference to operation information, cause network account not protected timely.It should be noted that, along with the accumulation of time, after reaching Preset Time, also will upgrade in time with reference to operation information, obtain up-to-date reference operation information, to make to have more referential with reference to operation information.

It should be noted that, operation note due to collection network account likely can relate to the individual privacy of user, therefore, the method that the present embodiment provides is before the reference operation information obtaining network account, need first to obtain mandate, and perform the step of the operation information obtaining network account more after authorization.Such as, before the operation information of collection network account, first send authorization requests to the terminal sending network account operation requests, only after receiving the license confirmation that this terminal returns, carry out the operation note of collection network account again, then obtain the reference operation information of this network account.About obtaining the mode of authorizing, the present embodiment does not do concrete restriction to this.

Further, judge the mode whether operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, include but not limited to: the content of operation information is contrasted with the content with reference to operation information one by one, judge that whether the content of operation information is identical with the content with reference to operation information; If the content of operation information is identical with the content with reference to operation information, then the reference operation information that the operation information carried in network account operation requests obtains with the operation note in advance according to network account mates; If the content of operation information is not identical with the content with reference to operation information, then the reference operation information that the operation information carried in network account operation requests obtains with the operation note in advance according to network account does not mate.Certainly, except above-mentioned judgment mode, can also adopt other judgment modes, the present embodiment does not do concrete restriction to this.

For the ease of understanding, to comprise class of business, operand, number of transaction and exchange hour with reference to operation information, and class of business be buy in, operand is virtual token, number of transaction is five, exchange hour is on August 1st, 2013 for example is described.If the operation information carried in network account operation requests is identical with reference to operation information, then judge to show that the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains; If the operation information carried in network account operation requests is different from reference to operation information, then judge to show that the operation information carried in network account operation requests does not mate with the reference operation information that the operation note in advance according to network account obtains.In addition, when judging that the operation information that carries in network account operation requests is identical with reference to operation information, except identical both will ensureing, certain coverage error can also be allowed, such as, if include class of business, operand, number of transaction and exchange hour with reference to the operation information carried in operation information and network account operation requests, but concrete exchange hour difference to some extent, or number of transaction is different, then still can think that the two is coupling.That is, criterion can adopt the standard with fixed attribute, the present embodiment does not do concrete restriction to this, by judging to draw whether character is identical with the operation information carried in network account operation requests with reference to operation information, thus can reflect that user is to the operating habit of network account.

203: allow terminal to this time operation of network account, flow process terminates.

For this step, because the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, then can think the custom operation that user is carried out network account by terminal, therefore can think that this operation requests is safe, thus allow terminal to this time operation of network account.

Further, namely the operational administrative of network account is completed by above-mentioned steps 201 to step 203, for the operation information carried in network account operation requests and in advance according to the unmatched situation of reference operation information that the operation note of network account obtains, the method that the present embodiment provides also comprises subsequent step.

204: forbid this time operation of terminal to network account;

For this step; because the operation information carried in network account operation requests does not mate with the reference operation information that the operation note in advance according to network account obtains; namely may be that non-method user is operated network account by terminal; in order to protecting network account safety; can the identity of authentication of users further; so first forbid this time operation of terminal to network account, wait for the result.

Further, after terminal is this time prohibited to the operation of network account, in order to avoid affecting the use of user to its network account when operating habitually because validated user execution is non-, and the management result in order to enable the validated user of this network account know the operation requests of this network account, the method that the present embodiment provides is after forbidding that terminal is to this time operation of network account, also comprise the step of the information sending unsuccessful operational network account to this terminal, specifically see subsequent step.

205: the information sending unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence.

For this step, after terminal is this time prohibited to the operation of network account, in order to avoid affecting the use of validated user to its network account when operating habitually because validated user execution is non-, and the management result in order to enable the validated user of this network account know the operation requests of this network account, the method that the present embodiment provides sends the information of unsuccessful operational network account to terminal.In addition, because user has reserved contact method when registered network account, after forbidding that terminal is to this operation of network account, the contact method can reserved when registered network account by user sends the information of unsuccessful operational network account to the contact device of correspondence, and then realizes the object pointed out user.Wherein, the contact method that user reserves includes but not limited to phone number, IMU signal, mailbox etc., and the contact method that the present embodiment is not reserved user does concrete restriction.Such as, if the contact method that user reserves is phone number, when the contact method then reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, the mobile phone that the phone number can reserved to user is corresponding sends this information; If the contact method that user reserves is IMU signal, when the contact method then reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, the server of the IMU signal can reserved to user sends this information; If the contact method that user reserves is mailbox, when the contact method then reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, the server that the mailbox can reserved to user is corresponding sends this information.

Wherein, the content of the information of the unsuccessful operational network account sent to the contact device of correspondence to this terminal and the contact method reserved according to the user of registered network account includes but not limited to that " this operation information does not mate with reference to operation information.Operate unsuccessful! " etc.

Such as, be depicted as example with the information sending unsuccessful operational network account to terminal as Fig. 3 (1), then terminal will show that " this operation information does not mate with reference to operation information.Operate unsuccessful! " information, with inform user this operation state and operate unsuccessful reason.Again such as, the contact method reserved with the user of registered network account is cell-phone number, SMS Tip such as the Fig. 3 (2) sending unsuccessful operational network account to the mobile phone that this cell-phone number is corresponding is depicted as example, then on mobile phone, by showing, " operation information of network account does not mate with reference to operation information, woulds you please time update password or contact contact staff." note, user thus can as required Modify password or contact contact staff, with the safety of Logistics networks account.

Certainly, in addition to the above, can also be other guide, the present embodiment do concrete restriction to the content of information to information.

By the mode of above-mentioned transmission information, if the current user operating this network account by terminal request is the validated user of this network account, when this terminal receives this information, and after being shown, validated user can be made to know the result of this solicit operation, thus other modes can be taked realize the operation to this network account.Such as, user can select other verification modes to realize to this network account by this terminal operation.About other verification modes, the present embodiment does not do concrete restriction to this.

If the current user operating this network account by terminal request is the disabled user of this network account, then sent the information of unsuccessful operational network account to the contact device of correspondence by the contact method reserved according to the user of registered network account, can realize notifying current situation to validated user, validated user is taken appropriate measures, to ensure the safety of its network account.

The method that the present embodiment provides, the network account operation requests of carrying operation information sent by receiving terminal; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., management process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of network account.

After not mated by the reference operation information obtained in the operation information judging to carry in network account operation requests and the operation note in advance according to network account, forbid this time operation of terminal to network account, the rear information sending unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, thus notify user in time afterwards account is stolen, improve the fail safe of network account.

Embodiment three

The present embodiment provides a kind of operation management method of network account, in the method, consider that the similarity system design of the behavior of validated user operational network account and position is large, therefore, the method that the present embodiment provides adopts and judges whether operation information is with reference to operation information, and judge that whether operating position is the mode with reference to operating position, realize the operational administrative to network account.In conjunction with the content of above-described embodiment one, see Fig. 4, method flow comprises:

301: the network account operation requests of carrying operation information that receiving terminal sends.

The specific implementation of this step is identical with the implementation of step 201 in above-described embodiment two, specifically refers to the content of step 201 in above-described embodiment two, repeats no more herein.

302: judge whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, if coupling, then perform step 303, if do not mated, then perform step 305.

The specific implementation of this step is identical with the implementation of step 202 in above-described embodiment two, specifically refers to the content of step 202 in above-described embodiment two, repeats no more herein.

It should be noted that, the method that the present embodiment provides, except considering operation information, also combines the operation requests of operating position to network account and manages.Therefore, after the reference operation information obtained in the operation information judging to carry in network account operation requests and the operation note in advance according to network account mates, also need to judge whether the current location information of this terminal mates with reference position information further, specifically see following steps 303.

303: the current location information obtaining terminal, and judge whether current location information mates with the reference operating position information of network account, if coupling, perform step 304, if do not mated, perform 305.

Particularly, the mode about the current location information obtaining terminal includes but not limited to: the IP address of this terminal is corresponding with the geographical position of reality by IP storehouse, obtains the geographical position at the current place of this terminal, i.e. current location information.Under normal circumstances, the geographical position at current for terminal place can be accurate to city by IP address, even can be as accurate as district.The mode of the current location information of terminal is obtained for this kind, IP storehouse can be what collect in advance with the geographical position of reality, and there are mapping relations therebetween, therefore, when behind the IP address getting terminal, by IP address base is corresponding with the geographical position of reality, thus the geographical position at the current place of terminal can be obtained, namely obtain the current location information of terminal.In addition, the method that provides of the present embodiment does not limit the geographical position of the concrete reality of the IP address in IP storehouse and correspondence.

Alternatively, except by the IP address of this terminal is corresponding with the geographical position of reality by IP storehouse, obtain the geographical position at the current place of this terminal, be i.e., outside the mode of current location information, the mode of the current location information of other acquisition terminals can also be had.Such as, if terminal opens GPS(Global PositioningSystem, global positioning system), then utilize GPS position location satellite, can position the position of terminal in the world, again by the geographical position of Map Services inquiry reality, thus obtain the current location information of terminal.Generally, the positioning precision of civil area can be as accurate as 10 meters.Can the geographical position at accurate terminal place by GPS location, improve the accuracy of positional information, the fail safe of increase network account.

Further, about the mode obtained with reference to operating position information, the present embodiment does not do concrete restriction equally, includes but not limited to: gather the positional information to the terminal that network account operates in preset time period; According to the reference operating position information in the preset time period collected, the positional information of the terminal that network account operates being obtained to network account.

Particularly, according to when obtaining the reference operating position information of network account to the positional information of the terminal that network account operates in the preset time period collected, can add up in the preset time period collected the positional information of the terminal that network account operates, the positional information of the terminal that network account operates is gathered obtaining in preset time period more afterwards, obtain positional information and the number of repetition of the terminal of repetition, number of repetition is reached the reference operating position information of positional information as network account of threshold value, and store.

Such as, setting preset time period is ten days, and threshold value is 3, if get three kinds of positional informations repeated in ten days.Wherein, the number of repetition of the first positional information repeated is 5, the number of repetition of the positional information that the second repeats is 6, the number of times of the third positional information repeated is 2, because the number of repetition of the first positional information repeated with the second is all greater than threshold value 3, then the positional information the first and the second repeated is as the reference operating position information of network account.In like manner, because the number of repetition of the third positional information repeated is less than threshold value 3, then fail the reference operating position information of the third positional information repeated as network account.

Wherein, the length of Preset Time can be chosen as required, can be one month or longer time, and the present embodiment does not do concrete restriction to the length of Preset Time.Under normal circumstances, Preset Time will choose a moderate time span, makes network account in Preset Time have certain position record; If the Preset Time chosen is too short, even in Preset Time, network account does not have operating position record, then can not embody the operating position custom of network account; If the Preset Time chosen is oversize, then can not obtains rapidly with reference to operating position information, cause network account not protected timely.It should be noted that, along with the accumulation of time, after reaching Preset Time, also will upgrade in time with reference to operation information, obtain up-to-date reference operation information.

Certainly, except the mode of the reference position information by above-mentioned acquisition network account, other modes can also be adopted to obtain the reference position information of network account, the present embodiment does not do concrete restriction to this, ensures that the reference position information of network account got is the positional information that the validated user of this network account often uses.Which kind of mode no matter is adopted to obtain the reference position information of network account, for the ease of being managed by the operation of reference position information to this network account of this network account, the reference position information of the network account got is needed to store, thus when being convenient to obtain the reference position information of network account again next time, directly can obtain from memory location, thus improve acquisition speed.About concrete storage mode, the present embodiment does not do concrete restriction.

It should be noted that, owing to gathering the individual privacy that likely can relate to user in preset time period to the positional information of the terminal that network account operates, therefore, the method that the present embodiment provides is before the information of acquisition reference position, need first to obtain mandate, and perform the step obtaining reference position information after authorization again.About obtaining the concrete mode of authorizing, the present embodiment does not do concrete restriction to this.

Further, about judging the mode whether current location information mates with the reference operating position information of network account, include but not limited to: the reference operating position information of the current location information of the terminal got and network account is contrasted, judge that whether current location information is with identical with reference to operating position information; If current location information is identical with reference to operating position information, then the reference operating position information matches of current location information and network account; If current location information is not with identical with reference to operating position information, then current location information does not mate with the reference operating position information of network account.Except above-mentioned judgment mode, can also adopt other judgment modes, the present embodiment does not do concrete restriction to this.

For the ease of understanding, be that Beijing is described for reference operating position information.If the presently used IP address of terminal sending network account operation requests is 220.231.31.22, be Beijing by IP storehouse with the real geographical position corresponding to corresponding this IP known in geographical position of reality, to be namely that terminal is current be in Beijing to current location information.After then current location information and reference operating position information being contrasted, known current location information is identical with reference to operating position information, i.e. the reference operating position information matches of current location information and network account.If the presently used IP address of terminal sending network account operation requests is 210.14.65.231, be Shanghai City by IP storehouse with the real geographical position corresponding to corresponding this IP known in geographical position of reality, to be namely that terminal is current be in Shanghai City to current location information.After then current location information and reference operating position information being contrasted, known current location information is not with identical with reference to operating position information, and namely current location information does not mate with the reference operating position information of network account.Again such as, to be A road, Haidian District, Beijing City with reference to operating position information, when terminal opens GPS, the current location information being navigated to terminal by GPS is A road, Haidian District, Beijing City.After then current location information and reference operating position information being contrasted, known current location information is identical with reference to operating position information, i.e. the reference operating position information matches of current location information and network account.If when the current location information navigating to terminal by GPS is B road, Haidian District, Beijing City, after current location information and reference operating position information are contrasted, known current location information is not with identical with reference to operating position information, and namely current location information does not mate with the reference operating position information of network account.

304: allow terminal to this time operation of network account, flow process terminates.

For this step, because the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, and the reference operating position information matches of current location information and network account, then can think that the operation requests of this network account is the request that validated user is initiated by terminal, there is certain fail safe, therefore, allow terminal to this time operation of network account.

Further, namely completed the operational administrative of network account by above-mentioned steps 301 to step 304, for the unmatched situation of reference operating position information of current location information and network account, the method that the present embodiment provides also comprises subsequent step.

305: forbid this time operation of terminal to network account;

For this step, because the operation information carried in network account operation requests does not mate with the reference operation information that the operation note in advance according to network account obtains, or, the reference operation information that the operation information carried in network account operation requests obtains with the operation note in advance according to network account mates, but current location information does not mate with the reference operating position information of network account, all likely that disabled user is operated network account by terminal, thus in order to ensure the fail safe of network account, need the identity of authentication of users further, so first forbid this time operation of terminal to network account, wait for the result.

306: the information sending unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence.

The specific implementation of this step is identical with the implementation of step 205 in above-described embodiment two, specifically refers to the content of step 205 in above-described embodiment two, repeats no more herein.

By obtaining the current location information of terminal, and after judging that current location information does not mate with the reference operating position information of network account, forbid this time operation of terminal to network account; The rear information sending unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, thus reduce the possibility of non-network account user operation, further increase the fail safe of network account.

Embodiment four

See Fig. 5, embodiments provide a kind of operation management device of network account, this device comprises:

Receiver module 501, for the network account operation requests of carrying operation information that receiving terminal sends;

First judge module 502, for judging whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains;

Administration module 503, for when the reference operation information that the operation information carried in network account operation requests and the operation note in advance according to network account obtain mates, then allows terminal to this time operation of network account.

As a kind of preferred embodiment, see Fig. 6, this device also comprises:

First acquisition module 504, for gathering the operation note of network account in preset time period, have recorded the operation information of network account in preset time period in operation note;

First acquisition module 505, for obtaining the reference operation information of network account according to the operation note of network account in the preset time period collected.

As a kind of preferred embodiment, administration module 503, also for when the reference operation information that the operation information carried in network account operation requests and the operation note in advance according to network account obtain does not mate, then forbids this time operation of terminal to network account.

As a kind of preferred embodiment, see Fig. 7, this device also comprises:

Second acquisition module 506, for obtaining the current location information of terminal;

Second judge module 507, for judging whether current location information mates with the reference operating position information of network account;

Administration module 503, during reference operating position information matches also for current location information and network account, then allows terminal to this time operation of network account.

As a kind of preferred embodiment, see Fig. 7, this device also comprises:

Second acquisition module 508, for gathering the positional information to the terminal that network account operates in preset time period;

3rd acquisition module 509, for obtaining the reference operating position information of network account to the positional information of the user terminal that network account operates in the preset time period that basis collects.

As a kind of preferred embodiment, administration module 503, when also not mating with the reference operating position information of network account for current location information, then forbids this time operation of user terminal to network account.

As a kind of preferred embodiment, administration module 503, also for sending the information of unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence.

In sum, the device that the embodiment of the present invention provides, the network account operation requests of carrying operation information sent by receiving terminal; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., operational administrative process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of network account.

Embodiment five

Embodiments provide a kind of terminal, please refer to Fig. 8, it illustrates the structural representation of the terminal involved by the embodiment of the present invention, this terminal may be used for the method for the operational administrative implementing the network account provided in above-described embodiment.Specifically:

Terminal 700 can comprise RF(Radio Frequency, radio frequency) circuit 110, the memory 120 including one or more computer-readable recording mediums, input unit 130, display unit 140, transducer 150, voicefrequency circuit 160, WiFi(Wireless Fidelity, Wireless Fidelity) module 170, include the parts such as processor 180 and power supply 190 that more than or processes core.It will be understood by those skilled in the art that the restriction of the not structure paired terminal of the terminal structure shown in Fig. 8, the parts more more or less than diagram can be comprised, or combine some parts, or different parts are arranged.Wherein:

RF circuit 110 can be used for receiving and sending messages or in communication process, the reception of signal and transmission, especially, after being received by the downlink information of base station, transfer to more than one or one processor 180 to process; In addition, base station is sent to by relating to up data.Usually, RF circuit 110 includes but not limited to antenna, at least one amplifier, tuner, one or more oscillator, subscriber identity module (SIM) card, transceiver, coupler, LNA(Low Noise Amplifier, low noise amplifier), duplexer etc.In addition, RF circuit 110 can also by radio communication and network and other devices communicatings.Described radio communication can use arbitrary communication standard or agreement, include but not limited to GSM (Global System of Mobile communication, global system for mobile communications), GPRS (General Packet Radio Service, general packet radio service), CDMA (Code Division Multiple Access, code division multiple access), WCDMA (Wideband CodeDivision Multiple Access, Wideband Code Division Multiple Access (WCDMA)), LTE (Long Term Evolution, Long Term Evolution), Email, SMS (Short Messaging Service, Short Message Service) etc.

Memory 120 can be used for storing software program and module, and processor 180 is stored in software program and the module of memory 120 by running, thus performs the application of various function and data processing.Memory 120 mainly can comprise storage program district and store data field, and wherein, storage program district can storage operation system, application program (such as sound-playing function, image player function etc.) etc. needed at least one function; Store data field and can store the data (such as voice data, phone directory etc.) etc. created according to the use of terminal 700.In addition, memory 120 can comprise high-speed random access memory, can also comprise nonvolatile memory, such as at least one disk memory, flush memory device or other volatile solid-state parts.Correspondingly, memory 120 can also comprise Memory Controller, to provide the access of processor 180 and input unit 130 pairs of memories 120.

Input unit 130 can be used for the numeral or the character information that receive input, and produces and to arrange with user and function controls relevant keyboard, mouse, action bars, optics or trace ball signal and inputs.Particularly, input unit 130 can comprise Touch sensitive surface 131 and other input equipments 132.Touch sensitive surface 131, also referred to as touch display screen or Trackpad, user can be collected or neighbouring touch operation (such as user uses any applicable object or the operations of annex on Touch sensitive surface 131 or near Touch sensitive surface 131 such as finger, stylus) thereon, and drive corresponding jockey according to the formula preset.Optionally, Touch sensitive surface 131 can comprise touch detecting apparatus and touch controller two parts.Wherein, touch detecting apparatus detects the touch orientation of user, and detects the signal that touch operation brings, and sends signal to touch controller; Touch controller receives touch information from touch detecting apparatus, and converts it to contact coordinate, then gives processor 180, and the order that energy receiving processor 180 is sent also is performed.In addition, the polytypes such as resistance-type, condenser type, infrared ray and surface acoustic wave can be adopted to realize Touch sensitive surface 131.Except Touch sensitive surface 131, input unit 130 can also comprise other input equipments 132.Particularly, other input equipments 132 can include but not limited to one or more in physical keyboard, function key (such as volume control button, switch key etc.), trace ball, mouse, action bars etc.

Display unit 140 can be used for the various graphical user interface showing information or the information being supplied to user and the terminal 700 inputted by user, and these graphical user interface can be made up of figure, text, icon, video and its combination in any.Display unit 140 can comprise display floater 141, optionally, the form such as LCD (Liquid Crystal Display, liquid crystal display), OLED (Organic Light-Emitting Diode, Organic Light Emitting Diode) can be adopted to configure display floater 141.Further, Touch sensitive surface 131 can cover display floater 141, when Touch sensitive surface 131 detects thereon or after neighbouring touch operation, send processor 180 to determine the type of touch event, on display floater 141, provide corresponding vision to export with preprocessor 180 according to the type of touch event.Although in fig. 8, Touch sensitive surface 131 and display floater 141 be as two independently parts realize input and input function, in certain embodiments, can by Touch sensitive surface 131 and display floater 141 integrated and realize input and output function.

Terminal 700 also can comprise at least one transducer 150, such as optical sensor, motion sensor and other transducers.Particularly, optical sensor can comprise ambient light sensor and proximity transducer, and wherein, ambient light sensor the light and shade of environmentally light can regulate the brightness of display floater 141, proximity transducer when terminal 700 moves in one's ear, can cut out display floater 141 and/or backlight.As the one of motion sensor; Gravity accelerometer can detect the size of all directions (are generally three axles) acceleration; size and the direction of gravity can be detected time static, can be used for identifying the application (such as horizontal/vertical screen switching, dependent game, magnetometer pose calibrating) of mobile phone attitude, Vibration identification correlation function (such as pedometer, knock) etc.; As for terminal 700 also other transducers such as configurable gyroscope, barometer, hygrometer, thermometer, infrared ray sensor, do not repeat them here.

Voicefrequency circuit 160, loud speaker 161, microphone 162 can provide the audio interface between user and terminal 700.Voicefrequency circuit 160 can by receive voice data conversion after the signal of telecommunication, be transferred to loud speaker 161, by loud speaker 161 be converted to voice signal export; On the other hand, the voice signal of collection is converted to the signal of telecommunication by microphone 162, voice data is converted to after being received by voicefrequency circuit 160, after again voice data output processor 180 being processed, through RF circuit 110 to send to such as another terminal, or export voice data to memory 120 to process further.Voicefrequency circuit 160 also may comprise earphone jack, to provide the communication of peripheral hardware earphone and terminal 700.

WiFi belongs to short range wireless transmission technology, and by WiFi module 170, terminal 700 can help that user sends and receive e-mail, browsing page and access streaming video etc., and its broadband internet wireless for user provides is accessed.Although Fig. 8 shows WiFi module 170, be understandable that, it does not belong to must forming of terminal 700, can omit in the scope of essence not changing invention as required completely.

Processor 180 is control centres of terminal 700, utilize the various piece of various interface and the whole mobile phone of connection, software program in memory 120 and/or module is stored in by running or performing, and call the data be stored in memory 120, perform various function and the deal with data of terminal 700, thus integral monitoring is carried out to mobile phone.Optionally, processor 180 can comprise one or more process core; Preferably, processor 180 accessible site application processor and modem processor, wherein, application processor mainly processes operating system, user interface and application program etc., and modem processor mainly processes radio communication.Be understandable that, above-mentioned modem processor also can not be integrated in processor 180.

Terminal 700 also comprises the power supply 190(such as battery of powering to all parts), preferably, power supply can be connected with processor 180 logic by power-supply management system, thus realizes the functions such as management charging, electric discharge and power managed by power-supply management system.Power supply 190 can also comprise one or more direct current or AC power, recharging system, power failure detection circuit, power supply changeover device or the random component such as inverter, power supply status indicator.

Although not shown, terminal 700 can also comprise camera, bluetooth module etc., does not repeat them here.Specifically in the present embodiment, the display unit of terminal is touch-screen display, terminal also includes memory, and one or more than one program, one of them or more than one program are stored in memory, and be configured to be performed by more than one or one processor, described more than one or one program package is containing the instruction for performing following operation:

Judge whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains;

If the reference operation information that the operation information carried in network account operation requests obtains with the operation note in advance according to network account mates, then allow terminal to this time operation of network account.

Suppose that above-mentioned is the first possible execution mode, then, in the execution mode that the second provided based on the execution mode that the first is possible is possible, in the memory of terminal, also comprise the instruction for performing following operation:

Before whether the reference operation information that the operation information carried in the request of circuit network account operation and the operation note in advance according to network account obtain mates, also comprise:

Gather the operation note of network account in preset time period, in operation note, have recorded the operation information of network account in preset time period;

The reference operation information of network account is obtained according to the operation note of network account in the preset time period collected.

In the third the possible execution mode provided based on the execution mode that the first is possible, in the memory of terminal, also comprise the instruction for performing following operation:

After judging whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, also comprise:

If the reference operation information that the operation information carried in network account operation requests obtains with the operation note in advance according to network account does not mate, then forbid this time operation of terminal to network account.

In the 4th kind of possible execution mode provided based on the execution mode that the first is possible to the third, in the memory of terminal, also comprise the instruction for performing following operation:

Allow user terminal to before this time operation of network account, also comprise:

Obtain the current location information of terminal;

Judge whether current location information mates with the reference operating position information of network account;

If the reference operating position information matches of current location information and network account, then allow terminal to this time operation of network account.

In the 5th kind of possible execution mode provided based on the 4th kind of possible execution mode, in the memory of terminal, also comprise the instruction for performing following operation:

Before judging whether current location information mates with the reference operating position information of network account, also comprise:

Gather the positional information to the terminal that network account operates in preset time period;

According to the reference operating position information in the preset time period collected, the positional information of the user terminal that network account operates being obtained to network account.

In the 6th kind of possible execution mode provided based on the 4th kind of possible execution mode, in the memory of terminal, also comprise the instruction for performing following operation:

After judging whether current location information mates with the reference operating position information of network account, also comprise:

If current location information does not mate with the reference operating position information of network account, then forbid this time operation of user terminal to network account.

In the 7th kind of possible execution mode provided based on the third or the 6th kind of possible execution mode, in the memory of terminal, also comprise the instruction for performing following operation:

Forbid that terminal is to after this time operation of network account, also comprises:

Send the information of unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence.

To sum up, the network account operation requests of carrying operation information of receiving terminal transmission; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., operational administrative process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of network account.

In addition, by obtaining the current location information of terminal, and after judging that current location information does not mate with the reference operating position information of network account, forbid this time operation of terminal to network account; The rear information sending unsuccessful operational network account to terminal, and the contact method reserved according to the user of registered network account sends the information of unsuccessful operational network account to the contact device of correspondence, thus reduce the possibility of non-network account user operation, further increase the fail safe of network account.

Embodiment six

The embodiment of the present invention additionally provides a kind of computer-readable recording medium, and this computer-readable recording medium can be the computer-readable recording medium comprised in the memory in above-described embodiment; Also can be individualism, be unkitted the computer-readable recording medium allocated in terminal.This computer-readable recording medium stores more than one or one program, and this more than one or one program is used for the method for an execution image procossing by one or more than one processor, the method comprises:

Before judging whether the operation information carried in network account operation requests mates with the reference operation information that the operation note in advance according to network account obtains, also comprise:

Obtain the current location information of terminal;

In sum, the terminal that the embodiment of the present invention provides, the network account operation requests of carrying operation information sent by receiving terminal; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., operational administrative process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of account.

Embodiment seven

Provide a kind of graphical user interface in the embodiment of the present invention, this graphical user interface is used in terminal, and this terminal comprises touch-screen display, memory and one or more than one processor for performing one or more than one program; This graphical user interface comprises:

In sum, the graphical user interface that the embodiment of the present invention provides, the network account operation requests of carrying operation information sent by receiving terminal; And after the reference operation information that the operation information judging to carry in network account operation requests and the operation note in advance according to network account obtain mates, allow terminal to this time operation of network account, thus the operational administrative of network account is just achieved without the need to user's setting and input validation code etc., operational administrative process is simple, decrease the operation of user, improve the convenience of customer transaction, add the fail safe of account; For the situation that network account password is stolen, also can forbid the operation of network account, further increase the fail safe of account.

It should be noted that: the device of the operational administrative of the network account that above-described embodiment provides is when the operational administrative of network account, only be illustrated with the division of above-mentioned each functional module, in practical application, can distribute as required and by above-mentioned functions and be completed by different functional modules, internal structure by device is divided into different functional modules, to complete all or part of function described above.In addition, the operation management device of the network account that above-described embodiment provides and the operation management method embodiment of network account belong to same design, and its specific implementation process refers to embodiment of the method, repeats no more here.

The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.

One of ordinary skill in the art will appreciate that all or part of step realizing above-described embodiment can have been come by hardware, the hardware that also can carry out instruction relevant by program completes, described program can be stored in a kind of computer-readable recording medium, the above-mentioned storage medium mentioned can be read-only memory, disk or CD etc.

The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. an operation management method for network account, is characterized in that, described method comprises:

2. method according to claim 1, is characterized in that, before whether the reference operation information that the described operation information judging to carry in described network account operation requests and the operation note in advance according to described network account obtain mates, also comprises:

Gather the operation note of described network account in preset time period, in described operation note, have recorded the operation information of described network account in preset time period;

The reference operation information of described network account is obtained according to the operation note of network account described in the preset time period collected.

3. method according to claim 1, is characterized in that, after whether the reference operation information that the described operation information judging to carry in described network account operation requests and the operation note in advance according to described network account obtain mates, also comprises:

If the reference operation information that the operation information carried in described network account operation requests obtains with the operation note in advance according to described network account does not mate, then forbid this time operation of described terminal to described network account.

4. the method according to claim arbitrary in claims 1 to 3, is characterized in that, the described user terminal of described permission, to before this time operation of described network account, also comprises:

Obtain the current location information of described terminal;

Judge whether described current location information mates with the reference operating position information of described network account;

If the reference operating position information matches of described current location information and described network account, then allow described terminal to this time operation of described network account.

5. method according to claim 4, is characterized in that, described judge whether described current location information mates with the reference operating position information of described network account before, also comprise:

Gather the positional information to the terminal that described network account operates in preset time period;

According to the reference operating position information in the preset time period collected, the positional information of the user terminal that described network account operates being obtained to described network account.

6. method according to claim 4, is characterized in that, described judge whether described current location information mates with the reference operating position information of described network account after, also comprise:

If described current location information does not mate with the reference operating position information of described network account, then forbid this time operation of described user terminal to described network account.

7. the method according to claim 3 or 6, is characterized in that, described in forbid that described terminal is to after this time operation of described network account, also comprises:

Send the information of the described network account of unsuccessful operation to described terminal, and send the information of the described network account of unsuccessful operation to the contact device of correspondence according to the contact method reserved of user of the described network account of registration.

8. an operation management device for network account, is characterized in that, described device comprises:

9. device according to claim 8, is characterized in that, described device, also comprises:

First acquisition module, for gathering the operation note of described network account in preset time period, have recorded the operation information of described network account in preset time period in described operation note;

First acquisition module, for obtaining the reference operation information of described network account according to the operation note of described network account in the preset time period collected.

10. device according to claim 8, it is characterized in that, described administration module, also for when the reference operation information that the operation information carried in described network account operation requests and the operation note in advance according to described network account obtain does not mate, then forbid this time operation of described terminal to described network account.

Device in 11. according to Claim 8 to 10 described in arbitrary claim, is characterized in that, described device, also comprises:

Second acquisition module, for obtaining the current location information of described terminal;

Second judge module, for judging whether described current location information mates with the reference operating position information of described network account;

Described administration module, also for when the reference operating position information matches of described current location information and described network account, then allows described terminal to this time operation of described network account.

12. devices according to claim 11, is characterized in that, described device, also comprises:

Second acquisition module, for gathering the positional information to the terminal that described network account operates in preset time period;

3rd acquisition module, for obtaining the reference operating position information of described network account to the positional information of the user terminal that described network account operates in the preset time period that basis collects.

13. devices according to claim 11, it is characterized in that, described administration module, also for when described current location information does not mate with the reference operating position information of described network account, then forbids this time operation of described user terminal to described network account.

14. devices according to claim 10 or 13, it is characterized in that, described administration module, also for sending the information of the described network account of unsuccessful operation to described terminal, and send the information of the described network account of unsuccessful operation to the contact device of correspondence according to the contact method reserved of user of the described network account of registration.