CN106126707A - Information identifying method and information recognition device - Google Patents

Information identifying method and information recognition device Download PDF

Info

Publication number
CN106126707A
CN106126707A CN201610509346.3A CN201610509346A CN106126707A CN 106126707 A CN106126707 A CN 106126707A CN 201610509346 A CN201610509346 A CN 201610509346A CN 106126707 A CN106126707 A CN 106126707A
Authority
CN
China
Prior art keywords
link
target information
source identification
final
redirect
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201610509346.3A
Other languages
Chinese (zh)
Inventor
张皓秋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Qihoo Technology Co Ltd
Qizhi Software Beijing Co Ltd
Original Assignee
Beijing Qihoo Technology Co Ltd
Qizhi Software Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Qihoo Technology Co Ltd, Qizhi Software Beijing Co Ltd filed Critical Beijing Qihoo Technology Co Ltd
Priority to CN201610509346.3A priority Critical patent/CN106126707A/en
Publication of CN106126707A publication Critical patent/CN106126707A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/95Retrieval from the web
    • G06F16/955Retrieval from the web using information identifiers, e.g. uniform resource locators [URL]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441Countermeasures against malicious traffic
    • H04L63/1491Countermeasures against malicious traffic using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud

Abstract

The present invention relates to a kind of information identifying method and information recognition device, said method includes: obtains the source identification of target information, wherein, there is link in described target information;Judge whether described source identification is associated with described link;If unconnected, then target information described in labelling.According to technical scheme, by judging the source identification of target information and linking the whether safety of linking determining in target information that whether is associated, in the case of link and source identification are unconnected, then can be determined that link danger, can also judge that target information derives from pseudo-base station further, thus labelling target information, to remind user not believe this target information, and avoid the link a little opening in target information, thus user profile is avoided to reveal and cause the economic loss of user.

Description

Information identifying method and information recognition device
Technical field
The present invention relates to technical field of network security, know in particular to a kind of information identifying method and a kind of information Other device.
Background technology
Pseudo-base station equipment is typically made up of main frame and notebook computer, relevant by sending short messages in groups device, note sender etc. Equipment can search the Mobile phone card information taken centered by it, in the range of certain radius, by the base station of the operator that disguises oneself as, falsely uses Other people send the short messages such as swindle, ad promotions by phone number by force to user mobile phone.
Pseudo-base station be mainly characterized by arbitrarily changing the number of transmission, such as can use Service Dialing Numbers 10086 or Bank numbers 95555 etc., make cellphone subscriber take for the note that really commmunication company or China Merchants Bank send, thus according to short Instruction in letter performs operation, such as, access the link in note, and the website opened simply disguises oneself as commmunication company or trade and investment promotion The website of bank, inputs personal information in this website, then can be gained personal information by cheating by criminal gang, cause economic loss.
Summary of the invention
The technical problem to be solved is, how to identify and effectively judges whether information is that pseudo-base station sends , to avoid link in access information to cause the economic loss of self.
For this purpose it is proposed, the present invention proposes a kind of information identifying method, including: obtain the source identification of target information, its In, described target information exists link;
Judge whether described source identification is associated with described link;
If unconnected, then target information described in labelling.
Preferably, described step judge described source identification with described link whether to be associated include:
Judge that whether described link is for redirecting link;
If redirecting link, then redirecting link described in parsing, redirecting, described in determining, the final link that link is corresponding;
Judge whether described source identification is associated with described final link,
Wherein, described source identification with described final link unconnected time, target information described in labelling.
Preferably, described step resolve described in redirect link, include with the final link redirecting link described in determining corresponding:
Foreground by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, target information described in labelling, with And by browser display information.
Preferably, described step resolve described in redirect link, include with the final link redirecting link described in determining corresponding:
The described sequence identification redirecting link and described target information is transmitted to browser;
Backstage by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, described browser is according to described Sequence identification determines target information, target information described in labelling.
Preferably, described step resolve described in redirect link, include with the final link redirecting link described in determining corresponding:
By described source identification and described redirect link transmission to cloud server, to be determined by described cloud server The described final link redirecting link correspondence,
Wherein, it is judged that described source identification with described link whether to be associated include:
Judge whether described source identification is associated with described final link by described cloud server;
Receive the judged result of described cloud server.
Preferably, described step resolve described in redirect link, include with the final link redirecting link described in determining corresponding:
This locality by preset algorithm resolve described in redirect link, the final link corresponding to redirect link described in determining.
Preferably, said method also includes:
Judge that described final link links with the leak prestored whether to mate,
Wherein, when described final link links with the leak prestored and to mate, target information described in labelling.
Preferably, there is also communication identifier in described target information, the most described method also includes:
Whether source identification shown in judging is associated with described communication identifier;
If unconnected, then target information described in labelling.
The invention allows for a kind of information recognition device, including:
Mark acquiring unit, obtains the source identification of target information, wherein, there is link in described target information;
First judging unit, it is judged that whether described source identification is associated with described link, if unconnected
Indexing unit, described source identification with described link do not associate in the case of, target information described in labelling.
Preferably, described first judging unit includes:
Redirect link judgment sub-unit, it is judged that whether described link is for redirecting link;
Resolve subelement, when described link is for redirecting link, described in parsing, redirect link, to determine described skip chain Connect the final link of correspondence;
Association judgment sub-unit, it is judged that whether described source identification is associated with described final link,
Wherein, described indexing unit described source identification with described final link unconnected time, target described in labelling Information.
Preferably, described parsing subelement includes:
Browser subelement, foreground by browser open described in redirect link, to redirect link correspondence described in determining Final link, described source identification with described final link unconnected in the case of, believed by browser display prompting Breath.
Preferably, described parsing subelement includes:
Transmission subelement, transmits the described sequence identification redirecting link and described target information to browser;
Browser subelement, backstage by browser open described in redirect link, to redirect link correspondence described in determining Final link, described source identification with described final link unconnected in the case of, determine according to described sequence identification Target information.
Preferably, described parsing subelement includes:
Transmission subelement, by described source identification and described redirect link transmission to cloud server, with by described cloud End server redirects, described in determining, the final link that link is corresponding, and judges described source identification by described cloud server Whether it is associated with described final link;
Receive subelement, receive the judged result of described cloud server.
Preferably, described parsing subelement for this locality by preset algorithm resolve described in redirect link, to determine State and redirect the final link that link is corresponding.
Preferably, said apparatus also includes:
Whether the second judging unit, mate for judging that described final link links with the leak prestored,
Wherein, described indexing unit when described final link links with the leak prestored and to mate, target letter described in labelling Breath.
Preferably, there is also communication identifier in described target information, then the first judging unit is additionally operable to judge shown source Whether mark is associated with described communication identifier;Described indexing unit is judging shown source identification and described communication identifier not phase Associate in the case of, target information described in labelling.
According to technique scheme, techniques below effect at least can be realized:
When 1, comprising link in target information, by judging whether the source identification of target information is associated with linking Determine the whether safety of the link in target information, in the case of link and source identification are unconnected, then can be determined that link Danger, can also judge that target information derives from pseudo-base station further, thus labelling target information, to remind user not believe This target information, and avoid the link a little opening in target information, thus avoid user profile to reveal and cause the economy of user Loss;
2, can comprise in target information further when redirecting link, resolve and redirect link, and it is right to judge to redirect link Whether the final link answered is associated with source identification, thus in the case of only comprising in target information and redirecting link, still Can judge exactly to redirect and link whether safety, and then judge target information whether safety exactly, it is to avoid user is at point Hitting after skip chain takes out corresponding final link, the corresponding website of final link has been stolen user part message and has been judged Finally link whether safety;
3, skip chain can be opened on foreground or backstage by browser to fetch and determine final link, it is also possible to by will Redirect link transmission to cloud server to carry out resolving to determine final link, it is also possible to resolved by preset algorithm in this locality and jump Turn link and determine final link, thus provided the user the multiple analysis mode redirecting link, in order to be applicable to multiple operation Occasion.
Accompanying drawing explanation
By being more clearly understood from the features and advantages of the present invention with reference to accompanying drawing, accompanying drawing is schematic and should not manage Solve as the present invention is carried out any restriction, in the accompanying drawings:
Fig. 1 shows the schematic flow diagram of information identifying method according to an embodiment of the invention;
Fig. 2 shows the schematic diagram according to one embodiment of the invention target information;
Fig. 3 shows the schematic flow diagram of information identifying method in accordance with another embodiment of the present invention;
Fig. 4 shows the schematic diagram operated target information according to an embodiment of the invention;
Fig. 5 shows the schematic diagram operated target information in accordance with another embodiment of the present invention;
Fig. 6 shows the schematic diagram to target information operation according to another embodiment of the present invention;
Fig. 7 shows the schematic block diagram of information recognition device according to an embodiment of the invention.
Detailed description of the invention
Embodiments of the invention are described below in detail, and the example of described embodiment is shown in the drawings, the most from start to finish Same or similar label represents same or similar element or has the element of same or like function.Below with reference to attached The embodiment that figure describes is exemplary, is only used for explaining the present invention, and is not construed as limiting the claims.
Those skilled in the art of the present technique are appreciated that unless expressly stated, singulative used herein " ", " Individual ", " described " and " being somebody's turn to do " may also comprise plural form.It is to be further understood that use in the description of the present invention arranges Diction " including " refers to there is described feature, integer, step, operation, element and/or assembly, but it is not excluded that existence or adds Other features one or more, integer, step, operation, element, assembly and/or their group.It should be understood that when we claim unit Part is " connected " or during " coupled " to another element, and it can be directly connected or coupled to other elements, or can also exist Intermediary element.Additionally, " connection " used herein or " coupling " can include wireless connections or wireless couple.Used herein arrange Diction "and/or" includes that one or more list the whole of item or any cell being associated combines with whole.
Those skilled in the art of the present technique are appreciated that unless otherwise defined, and all terms used herein (include technology art Language and scientific terminology), have with the those of ordinary skill in art of the present invention be commonly understood by identical meaning.Also should Be understood by, those terms defined in such as general dictionary, it should be understood that have with in the context of prior art The meaning that meaning is consistent, and unless by specific definitions as here, otherwise will not use idealization or the most formal implication Explain.
Those skilled in the art of the present technique are appreciated that " terminal " used herein above, " terminal unit " had both included wireless communication The equipment of number receptor, it only possesses the equipment of wireless signal receiver of non-emissive ability, includes again receiving and launching hardware Equipment, its have can on bidirectional communication link, perform two-way communication reception and launch hardware equipment.This equipment May include that honeycomb or other communication equipments, it has single line display or multi-line display or does not has multi-line to show The honeycomb of device or other communication equipments;PCS (Personal Communications Service, PCS Personal Communications System), it can Process with combine voice, data, fax and/or its communication ability;PDA (Personal Digital Assistant, individual Digital assistants), it can include the access of radio frequency receiver, pager, the Internet/intranet, web browser, notepad, day Go through and/or GPS (Global Positioning System, global positioning system) receptor;Conventional laptop and/or palm Type computer or other equipment, its have and/or include the conventional laptop of radio frequency receiver and/or palmtop computer or its His equipment." terminal " used herein above, " terminal unit " can be portable, can transport, be arranged on the vehicles (aviation, Sea-freight and/or land) in, or be suitable for and/or be configured at local runtime, and/or with distribution form, operate in the earth And/or any other position operation in space." terminal " used herein above, " terminal unit " can also is that communication terminal, on Network termination, music/video playback terminal, such as, can be that (Mobile Intemet Device, mobile Internet sets for PDA, MID Standby) and/or there is the mobile phone of music/video playing function, it is also possible to it is the equipment such as intelligent television, Set Top Box.
Those skilled in the art of the present technique are appreciated that server used herein above, cloud server, remote network devices Etc. concept, having effects equivalent, it includes but not limited to computer, network host, single network server, multiple network service The cloud that device collection or multiple server are constituted.Here, cloud is by a large amount of computers based on cloud computing (Cloud Computing) or net Network server is constituted, and wherein, cloud computing is the one of Distributed Calculation, be made up of a group loosely-coupled computer collection Super virtual machine.In embodiments of the invention, can be by appointing between remote network devices, terminal unit and WNS server What communication mode realizes communication, includes but not limited to, mobile communication based on 3GPP, LTE, WIMAX, assists based on TCP/IP, UDP View computer network communication and based on bluetooth, the low coverage wireless transmission method of infrared transmission standard.
It will be appreciated by those skilled in the art that " application ", " application program ", " application software " and the class alleged by the present invention Like the concept of statement, it is those skilled in the art known same concept, refers to be instructed and related data by series of computation machine The computer software being suitable to electronics operation of the organic structure of resource.Unless specified, this name itself is not by programming language Kind, rank, do not limited by operating system or the platform institute of its operation of relying.In the nature of things, this genus is the most by appointing The terminal of what form is limited.
As it is shown in figure 1, information identifying method according to an embodiment of the invention, including:
Step S1, obtains the source identification of target information, wherein, there is link in target information;
Step S2, it is judged that whether source identification is associated with linking;
Step S3, if unconnected, then labelling target information.
When user terminal receives information, information typically can a corresponding source identification, such as when information is wechat, that Source identification can be public number, the good friend's pet name etc. paid close attention to;Such as when information is note, then source identification can be hands Plane No. code or service calls etc..The main situation with target information as note illustrates below, certainly, and the skill of the present embodiment Art scheme is applied equally to other kinds of information.
User terminal typically has the function identifying note, and some short breath can be automatically recognized as harassing note in addition Mark, but existing note identification function is based on identifying that source identification realizes, namely be prestore black in source identification During mark in list, then be then identified as harassing note disease and label, in source identification is the white list prestored Mark time, then it is not processed.
Such as the customer service number of operator or bank, existing user terminal always can determine that it is prestore white Mark in list, thus giving tacit consent to it is secure short message, and will directly be presented to user.But, owing to pseudo-base station has change Sending the characteristic of information number, the source identification that its note being sent to user terminal is used can be such as commmunication company visitor Service number 10086 or China Merchants Bank's customer service number 95555 etc., and these notes have generally comprised false link, once use Family is clicked on these links and is opened the website of disguise oneself as commmunication company or China Merchants Bank, it is possible to causes leakage of personal information, enters And cause economic loss, but existing user terminal is when receiving the note from some corporate client, and still can be by it It is supplied to user as secure short message.
According to the present embodiment, when the target information received comprises link, can be by judging coming of target information Source mark with link the whether safety of linking determining in target information that whether is associated, unconnected with source identification linking In the case of, then can be determined that link danger, can also judge that target information derives from pseudo-base station further, thus labelling target Information, to remind user not believe this target information, and avoids the link a little opening in target information, thus avoids user to believe Breath is revealed and is caused the economic loss of user.
Such as shown in Fig. 2, when user terminal receives the note that source identification is 95555, short message content is:
" China Merchants Bank's emergency notice:
Your Mobile banking will lose efficacy in recently, log in me the most immediately and manage it network address:
wap.cmbybf.com
To carry out the checking of amended record again, the bank card that exceeds the time limit will be as processing [China Merchants Bank] "
Wherein comprise link wap.cmbybf.com, then may determine that source identification " 95555 " and link Whether " wap.cmbybf.com " exists incidence relation, such as, can prestore in the user terminal and source identification There are all secure link of incidence relation in " 95555 ", if link " wap.cmbybf.com " and all safety prestored Link all differs, then can be determined that link " wap.cmbybf.com " links for danger, and then labelling target information.
It should be noted that for the target information that there is not link, owing to user typically will not be in this information On the basis of carry out jeopardizing the operation of user information safety, therefore can directly be presented to user, and need not judge.Separately Outward, the mode of labelling target information can have multiple, such as, whole piece target information can be filled to yellow, or believe in target At the source identification of breath, labelling " dangerous information " etc. identify.
Preferably, as it is shown on figure 3, whether step judges source identification include with linking to be associated:
Step S21, it is judged that whether link is for redirecting link, if it is not, then perform step S3;
Step S22, if redirecting link, then resolves and redirects link, redirects, to determine, the final link that link is corresponding;
Step S23, it is judged that whether source identification is associated with final link,
Wherein, source identification with when finally linking unconnected, labelling target information.
Owing to a complete URL may be the longest, such as, may be up to dozens of character, greatly affect the length of note Degree, therefore can use in note and redirect link (such as short chain connects), to shorten network address URL link number of words, reaches to reduce code The purpose of character string, it is simple to user quotes network address, in write code.After click redirects link, browser can be carried out once Or repeatedly redirect, and eventually settle at the page that final link (such as long link) is corresponding.
According to this embodiment, it can judge in target information redirecting link with final link the most relevant with source identification Connection, only comprises in the case of redirecting link in target information, still can judge exactly to redirect and links whether safety, thus Judge target information whether safety exactly, it is to avoid user is clicking on after skip chain takes out corresponding final link, final chain Connect corresponding corresponding website to have stolen user part message and judge finally to link whether safety again, it is ensured that judge that target is believed in time Cease whether safety.
Such as source identification be 95555 note in comprise link cmbt.cn/ap, determine that it is redirect link after (example As determined by structure that judgement links, number of characters etc.), resolve this and redirect link, determine finally being linked as of its correspondence:
Http:// market.cmbchina.com/personal/ApplePay_Introduction_wxwb. html
Then determine whether source identification 9555 and link whether cmbt.cn/ap is associated with redirecting, and judge that source is marked Know 95555 with finally link
Http:// market.cmbchina.com/personal/ApplePay_Introduction_wxwb. html
Whether be associated, only source identification with redirect link be associated and with finally link and be associated in the case of, Just judge this note as secure short message, the most no matter source identification with redirect link unconnected or uncorrelated with finally linking Connection, all judge this note as dangerous note, and this note of labelling.
Preferably, step resolves and redirects link, to determine that the final link redirecting link corresponding includes:
Opened by browser on foreground and redirect link, redirect, to determine, the final link that link is corresponding,
Wherein, source identification with finally link unconnected in the case of, labelling target information, and pass through browser Display reminding information.
In the present embodiment, user can click directly in target information and redirect link, thus triggers browser front Platform runs, and opens on foreground and redirect link, redirects, to determine, the final link that link is corresponding.
Source identification with finally link unconnected in the case of, one side can be with labelling target information, in order to When target information is checked again in family, it is possible to determine that target information is dangerous information;On the other hand can be carried by browser display Show information, owing in the present embodiment, user clicks directly on and redirects link so that browser at front stage operation, therefore browser display Information can directly be presented on foreground, information such as can represent with the form of prompting frame, and its content can be " there is potential safety hazard in the page that current link is pointed to, determines the page that current link to be opened is pointed to?", and provide "Yes" and Two options of "No", when user clicks on "Yes" option, are continued by browser and open the page that final link is pointed to, when user's point When hitting "No" option, close browser or return browser homepage.
Wherein, after browser is opened and redirected link, redirect link and may repeatedly redirect and just can jump to final chain Connecing, therefore this link just can be determined after in jump procedure, stabilization time of certain link exceedes Preset Time by browser For final link.
It should be noted that the operation of labelling target information can be by the application at target information self place in the present embodiment Program completes, it is also possible to completed by browser, when being completed by browser, needs to be transmitted by the sequence identification of target information in advance To browser, in order to browser can determine target information in the application.
Preferably, step resolves and redirects link, to determine that the final link redirecting link corresponding includes:
The sequence identification redirecting link and target information is transmitted to browser;
Opened by browser on backstage and redirect link, redirect, to determine, the final link that link is corresponding,
Wherein, source identification with finally link unconnected in the case of, browser determines target according to sequence identification Information, labelling target information.
In the present embodiment, user can be able to select will to redirect link transmission to browser in target information.Such as Fig. 4 Shown in, the option such as " directly opening ", " transmission is to browser " can be ejected by length by redirecting link, " transmit to clear clicking on Look at device " can will redirect link transmission to browser after option, thus trigger browser at running background, and open jumping on backstage Turn link, redirect, to determine, the final link that link is corresponding.
Relative to browser in the embodiment of front stage operation, in the present embodiment, browser is at running background, in order to Yong Huke To remain in the application of target information.And owing to browser is at running background, user is nothing in the application of target information Method sees the content in browser, therefore can pass through the browser sequence identification labelling target information according to target information.
Wherein, after browser is opened and redirected link, redirect link and may repeatedly redirect and just can jump to final chain Connecing, therefore this link just can be determined after in jump procedure, stabilization time of certain link exceedes Preset Time by browser For final link.
Preferably, step resolves and redirects link, to determine that the final link redirecting link corresponding includes:
Source identification is transmitted to cloud server with redirecting link, redirects link correspondence to be determined by cloud server Final link,
Wherein, it is judged that whether source identification includes with linking to be associated:
Judge whether source identification is associated with final link by cloud server;
Receive the judged result of cloud server.
Transmission can complete, such as such as Fig. 5 institute to the operation of cloud server in the application program at target information place Show, the option such as " directly opening ", " transmission is to high in the clouds " can be ejected by length by redirecting link, click on " transmission is to high in the clouds " choosing Can transmit redirecting link to cloud server after Xiang, cloud server can perform parsing and redirect link to determine final chain The operation connect, and perform to judge source identification and the final operation linking and whether being associated.
According to the present embodiment, parsing redirects the operation of link and can be completed by cloud server, on the one hand can avoid Open on user terminal after redirecting link, redirect dangerous script or wood in the page pointed by final link that link is corresponding Horse, causes user terminal to be invaded;On the other hand user terminal can be avoided to run browser caused to open to redirect to link Power consumption.
Preferably, step resolves and redirects link, to determine that the final link redirecting link corresponding includes:
Resolved by preset algorithm in this locality and redirect link, redirect, to determine, the final link that link is corresponding.
Resolved by preset algorithm in this locality redirect the operation of link can be complete in the application program at target information place Become, such as, shown in Fig. 6, the option such as " directly opening ", " local parsing " can be ejected by long by redirecting link, click on " this Ground resolves " skip chain can be resolved in this locality by preset algorithm after option, so that it is determined that redirect the final link that link is corresponding.
Redirect link in local parsing and be connected to network without user terminal, facilitate user to resolve skip chain whenever and wherever possible Connect.
Preferably, above-mentioned information identifying method also includes:
Judge to redirect to link and/or finally link to link with the leak prestored and whether mate,
Wherein, finally link link with the leak prestored mate time, labelling target information.
Owing to businessman is when creating webpage, some test links can be created and test, but these test links are not It is supplied to user in accessing the link of webpage in the future, but remains effective link, but initial use of these links are only For testing, so after test completion, it typically will not be added patch or be modified by tester again, and this link Often there is more leak, easily utilized by lawless person.
According to this embodiment, it can set up leak chained library for each source identification, this source identification of pre-stored is corresponding Leak link, if finally link to link with leak and matches in target information, then illustrate that access finally links and there is wind Danger, but be not necessarily to have access to illegal web page, based on this, information can be generated, in order to user is according to actual feelings Condition chooses whether to continue to open webpage.
Except being linked by the leak finally linked with prestore directly, this relatively judges whether finally link is that leak links, can Judge whether final link is that leak links with the domain name by the final link of detection step by step.As a example by bank links, such as the Top-level domain is businessman's homepage, such as cmbchina (China Merchants Bank), and second level domain name is type of service, such as mbankweb (individual Web bank), third level domain name is business support terminal type, such as pad (Fructus Mali pumilae panel computer), then at this chain Connect and link for leak, such as, during test link, there may be " text " character after certain top-level domain therein, therefore detecting When certain top-level domain of final link there is also text character, then can be defined as leak link.
It should be noted that opened on foreground or backstage by browser in above-described embodiment, to redirect link final to determine Link, determines final link by cloud server and can be simultaneously suitable for same use by the way of this locality determines final link Family terminal, user can be in the way of selecting to determine final link as required.
Preferably, there is also communication identifier in described target information, the most described method also includes:
Whether source identification shown in judging is associated with described communication identifier;
If unconnected, then target information described in labelling.
Except link can be comprised in target information, it is also possible to comprise communication identifier, such as telephone number, micro-signal etc.. According to this embodiment, it can determine target information by judging whether the source identification of target information is associated with communication identifier In communication identifier whether safety, in the case of communication identifier and source identification are unconnected, then can be determined that communication identifier Danger, can also judge that target information derives from pseudo-base station further, thus labelling target information, to remind user not believe This target information, and avoid dialing or adding the communication identifier in target information, thus avoid user profile to reveal and cause The economic loss of user.
As it is shown in fig. 7, information recognition device 70 according to an embodiment of the invention, including:
Mark acquiring unit 71, obtains the source identification of target information, wherein, there is link in target information;
First judging unit 72, it is judged that whether source identification is associated with linking, if unconnected
Indexing unit 73, source identification with link and do not associate in the case of, labelling target information.
Preferably, the first judging unit 72 includes:
Redirect link judgment sub-unit 721, it is judged that whether link is for redirecting link;
Resolve subelement 722, when link is for redirecting link, resolves and redirect link, redirect link correspondence to determine Final link;
Association judgment sub-unit 723, it is judged that whether source identification is associated with final link,
Wherein, indexing unit 73 source identification with when finally linking unconnected, labelling target information.
Preferably, resolve subelement 722 to include:
Browser subelement 7221, is opened by browser on foreground and redirects link, to determine that to redirect link corresponding Eventually link, source identification with final link unconnected in the case of, by browser display information.
Preferably, resolve subelement 722 to include:
Transmission subelement 7222, transmits the sequence identification redirecting link and target information to browser;
Browser subelement 7221, is opened by browser on backstage and redirects link, to determine that to redirect link corresponding Eventually link, source identification with final link unconnected in the case of, determine target information according to sequence identification.
Preferably, resolve subelement 722 to include:
Transmission subelement 7222, transmits source identification to cloud server with redirecting link, to pass through cloud server Determine and redirect the final link that link is corresponding, and by cloud server judge source identification to final link the most relevant Connection;
Receive subelement 7223, receive the judged result of cloud server.
Preferably, resolve subelement in this locality by preset algorithm resolve redirect link, with determine redirect link right The final link answered.
Preferably, said apparatus 70 also includes:
Whether the second judging unit 74, mate for judging that the leak finally linking with prestoring links,
Wherein, indexing unit 73 finally link link with the leak prestored mate time, labelling target information.
Preferably, there is also communication identifier in described target information, then the first judging unit 72 is additionally operable to shown in judgement come Whether source mark is associated with described communication identifier;Described indexing unit 73 is judging shown source identification and described communication identifier In the case of unconnected, target information described in labelling.
The invention allows for following technical scheme:
A1, a kind of information identifying method, including:
Obtain the source identification of target information, wherein, described target information exists link;
Judge whether described source identification is associated with described link;
If unconnected, then target information described in labelling.
A2, according to the information identifying method described in A1, described step judges described source identification and the described whether phase of linking Association includes:
Judge that whether described link is for redirecting link;
If redirecting link, then redirecting link described in parsing, redirecting, described in determining, the final link that link is corresponding;
Judge whether described source identification is associated with described final link,
Wherein, described source identification with described final link unconnected time, target information described in labelling.
A3, according to the information identifying method described in A2, described step resolve described in redirect link, to determine described skip chain The final link connecing correspondence includes:
Foreground by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, target information described in labelling, with And by browser display information.
A4, according to the information identifying method described in A2, described step resolve described in redirect link, to determine described skip chain The final link connecing correspondence includes:
The described sequence identification redirecting link and described target information is transmitted to browser;
Backstage by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, described browser is according to described Sequence identification determines target information, target information described in labelling.
A5, according to the information identifying method described in A2, described step resolve described in redirect link, to determine described skip chain The final link connecing correspondence includes:
By described source identification and described redirect link transmission to cloud server, to be determined by described cloud server The described final link redirecting link correspondence,
Wherein, it is judged that described source identification with described link whether to be associated include:
Judge whether described source identification is associated with described final link by described cloud server;
Receive the judged result of described cloud server.
A6, according to the information identifying method described in A2, described step resolve described in redirect link, to determine described skip chain The final link connecing correspondence includes:
This locality by preset algorithm resolve described in redirect link, the final link corresponding to redirect link described in determining.
A7, according to the information identifying method according to any one of A2 to A6, also include:
Judge that described final link links with the leak prestored whether to mate,
Wherein, when described final link links with the leak prestored and to mate, target information described in labelling.
A8, according to the information identifying method according to any one of A1 to A7, described target information there is also communication identifier, The most described method also includes:
Whether source identification shown in judging is associated with described communication identifier;
If unconnected, then target information described in labelling.
B1: a kind of information recognition device, including:
Mark acquiring unit, obtains the source identification of target information, wherein, there is link in described target information;
First judging unit, it is judged that whether described source identification is associated with described link, if unconnected
Indexing unit, described source identification with described link do not associate in the case of, target information described in labelling.
B2: according to the device described in B1, described first judging unit includes:
Redirect link judgment sub-unit, it is judged that whether described link is for redirecting link;
Resolve subelement, when described link is for redirecting link, described in parsing, redirect link, to determine described skip chain Connect the final link of correspondence;
Association judgment sub-unit, it is judged that whether described source identification is associated with described final link,
Wherein, described indexing unit described source identification with described final link unconnected time, target described in labelling Information.
B3: according to the device described in B2, described parsing subelement includes:
Browser subelement, foreground by browser open described in redirect link, to redirect link correspondence described in determining Final link, described source identification with described final link unconnected in the case of, believed by browser display prompting Breath.
B4: according to the device described in B2, described parsing subelement includes:
Transmission subelement, transmits the described sequence identification redirecting link and described target information to browser;
Browser subelement, backstage by browser open described in redirect link, to redirect link correspondence described in determining Final link, described source identification with described final link unconnected in the case of, determine according to described sequence identification Target information.
B5: according to the device described in B2, described parsing subelement includes:
Transmission subelement, by described source identification and described redirect link transmission to cloud server, with by described cloud End server redirects, described in determining, the final link that link is corresponding, and judges described source identification by described cloud server Whether it is associated with described final link;
Receive subelement, receive the judged result of described cloud server.
B6: according to the device described in B2, described parsing subelement for this locality by preset algorithm resolve described in redirect Link, redirects, described in determining, the final link that link is corresponding.
B7: according to the device according to any one of B2 to B6, also include:
Whether the second judging unit, mate for judging that described final link links with the leak prestored,
Wherein, described indexing unit when described final link links with the leak prestored and to mate, target letter described in labelling Breath.
B8, according to the information recognition device according to any one of B1 to B7, described target information there is also communication identifier, Then the first judging unit is additionally operable to judge whether shown source identification is associated with described communication identifier;Described indexing unit is being sentenced Source identification shown in disconnected unconnected with described communication identifier in the case of, target information described in labelling.
In sum, by technical scheme, when comprising link in target information, by judging target information Source identification with link the whether safety of linking determining in target information that whether is associated, in link and source identification not phase In the case of association, then can be determined that link danger, can also judge that target information derives from pseudo-base station further, thus labelling Target information, to remind user not believe this target information, and avoids the link a little opening in target information, thus avoids using Family information leakage and cause the economic loss of user.
It should be noted that, provided herein algorithm and formula not with any certain computer, virtual system or miscellaneous equipment Intrinsic relevant.Various general-purpose systems can also be used together with based on example in this.As described above, this kind of system is constructed Structure required by system is apparent from.Additionally, the present invention is also not for any certain programmed language.It should be understood that permissible Utilize various programming language to realize the content of invention described herein, and the description above language-specific done be in order to Disclose the preferred forms of the present invention.
In description mentioned herein, illustrate a large amount of detail.It is to be appreciated, however, that the enforcement of the present invention Example can be put into practice in the case of not having these details.In some instances, it is not shown specifically known method, structure And technology, in order to do not obscure the understanding of this description.
Similarly, it will be appreciated that one or more in order to simplify that the present invention helping understands in various aspects of the present invention, Above in the description of the exemplary embodiment of the present invention, each feature of the present invention is grouped together into single enforcement sometimes In example, figure or descriptions thereof.But, the method and apparatus of the disclosure should not be construed to reflect an intention that i.e. institute Claimed invention requires this more feature of feature being expressly recited in each claim.More precisely, As claims reflect, inventive aspect is all features less than single embodiment disclosed above.Therefore, it then follows tool Claims of body embodiment are thus expressly incorporated in this detailed description of the invention, the conduct of the most each claim itself The independent embodiment of the present invention.
Those skilled in the art are appreciated that and can carry out the module in the equipment in embodiment adaptively Change and they are arranged in one or more equipment different from this embodiment.Can be the module in embodiment or list Unit or assembly are combined into a module or unit or assembly, and can put them in addition multiple submodule or subelement or Sub-component.In addition at least some in such feature and/or process or unit excludes each other, can use any Combine all features disclosed in this specification (including adjoint claim, summary and accompanying drawing) and so disclosed appoint Where method or all processes of equipment or unit are combined.Unless expressly stated otherwise, this specification (includes adjoint power Profit requires, summary and accompanying drawing) disclosed in each feature can be carried out generation by providing identical, equivalent or the alternative features of similar purpose Replace.
Although additionally, it will be appreciated by those of skill in the art that embodiments more described herein include other embodiments Some feature included by rather than further feature, but the combination of the feature of different embodiment means to be in the present invention's Within the scope of and form different embodiments.
The all parts embodiment of the present invention can realize with hardware, or to run on one or more processor Software module realize, or with combinations thereof realize.It will be understood by those of skill in the art that and can use in practice Microprocessor or digital signal processor (DSP) realize in web portal security detection equipment according to embodiments of the present invention The some or all functions of a little or whole parts.The present invention is also implemented as performing method as described herein Part or all equipment or device program (such as, computer program and computer program).Such realization The program of the present invention can store on a computer-readable medium, or can be to have the form of one or more signal.This The signal of sample can be downloaded from internet website and obtain, or provides on carrier signal, or carries with any other form Supply.
The above is only the some embodiments of the present invention, it is noted that for the ordinary skill people of the art For Yuan, under the premise without departing from the principles of the invention, it is also possible to make some improvements and modifications, these improvements and modifications also should It is considered as protection scope of the present invention.

Claims (10)

1. an information identifying method, it is characterised in that including:
Obtain the source identification of target information, wherein, described target information exists link;
Judge whether described source identification is associated with described link;
If unconnected, then target information described in labelling.
Information identifying method the most according to claim 1, it is characterised in that described step judges described source identification and institute State whether link is associated and includes:
Judge that whether described link is for redirecting link;
If redirecting link, then redirecting link described in parsing, redirecting, described in determining, the final link that link is corresponding;
Judge whether described source identification is associated with described final link,
Wherein, described source identification with described final link unconnected time, target information described in labelling.
Information identifying method the most according to claim 2, it is characterised in that redirect link described in the parsing of described step, with The final link redirecting link described in determining corresponding includes:
Foreground by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, target information described in labelling, Yi Jitong Cross browser display information.
Information identifying method the most according to claim 2, it is characterised in that redirect link described in the parsing of described step, with The final link redirecting link described in determining corresponding includes:
The described sequence identification redirecting link and described target information is transmitted to browser;
Backstage by browser open described in redirect link, the final link corresponding to redirect link described in determining,
Wherein, described source identification with described final link unconnected in the case of, described browser is according to described order Mark determines target information, target information described in labelling.
Information identifying method the most according to claim 2, it is characterised in that redirect link described in the parsing of described step, with The final link redirecting link described in determining corresponding includes:
By described source identification with described redirect link transmission to cloud server, described to be determined by described cloud server Redirect the final link that link is corresponding,
Wherein, it is judged that described source identification with described link whether to be associated include:
Judge whether described source identification is associated with described final link by described cloud server;
Receive the judged result of described cloud server.
Information identifying method the most according to claim 2, it is characterised in that redirect link described in the parsing of described step, with The final link redirecting link described in determining corresponding includes:
This locality by preset algorithm resolve described in redirect link, the final link corresponding to redirect link described in determining.
7. according to the information identifying method according to any one of claim 2 to 6, it is characterised in that also include:
Judge that described final link links with the leak prestored whether to mate,
Wherein, when described final link links with the leak prestored and to mate, target information described in labelling.
Information identifying method the most according to any one of claim 1 to 7, it is characterised in that in described target information also There is communication identifier, the most described method also includes:
Whether source identification shown in judging is associated with described communication identifier;
If unconnected, then target information described in labelling.
9. an information recognition device, it is characterised in that including:
Mark acquiring unit, obtains the source identification of target information, wherein, there is link in described target information;
First judging unit, it is judged that whether described source identification is associated with described link, if unconnected
Indexing unit, described source identification with described link do not associate in the case of, target information described in labelling.
Information recognition device the most according to claim 9, it is characterised in that described first judging unit includes:
Redirect link judgment sub-unit, it is judged that whether described link is for redirecting link;
Resolve subelement, when described link is for redirecting link, described in parsing, redirect link, right to redirect link described in determining The final link answered;
Association judgment sub-unit, it is judged that whether described source identification is associated with described final link,
Wherein, described indexing unit described source identification with described final link unconnected time, target information described in labelling.
CN201610509346.3A 2016-06-30 2016-06-30 Information identifying method and information recognition device Pending CN106126707A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610509346.3A CN106126707A (en) 2016-06-30 2016-06-30 Information identifying method and information recognition device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610509346.3A CN106126707A (en) 2016-06-30 2016-06-30 Information identifying method and information recognition device

Publications (1)

Publication Number Publication Date
CN106126707A true CN106126707A (en) 2016-11-16

Family

ID=57468832

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610509346.3A Pending CN106126707A (en) 2016-06-30 2016-06-30 Information identifying method and information recognition device

Country Status (1)

Country Link
CN (1) CN106126707A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106686562A (en) * 2016-11-29 2017-05-17 中国移动通信集团江苏有限公司 Method for processing links in short messages sent by pseudo base station, device and server
CN106941673A (en) * 2017-02-28 2017-07-11 珠海市魅族科技有限公司 Fraud text message recognition methods and device
CN107301242A (en) * 2017-07-03 2017-10-27 北京小米移动软件有限公司 Method, device and the storage medium of page jump
CN108702318A (en) * 2017-06-23 2018-10-23 华为技术有限公司 A kind of RCS communication means and equipment
CN109634683A (en) * 2018-12-05 2019-04-16 珠海市小源科技有限公司 The configuration of short message operation frame and method for pushing and device based on enterprise expectations
CN109905394A (en) * 2019-03-05 2019-06-18 中国联合网络通信集团有限公司 Method for anti-counterfeit, base station, user terminal, user support system based on block chain
CN110689377A (en) * 2019-09-30 2020-01-14 北京达佳互联信息技术有限公司 Data detection method and device and electronic equipment
CN111355732A (en) * 2020-02-28 2020-06-30 腾讯科技(深圳)有限公司 Link detection method and device, electronic equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101729516A (en) * 2008-10-15 2010-06-09 中国联合网络通信集团有限公司 Method and system for registering internet protocol multimedia subsystem (IMS) service
CN103678307A (en) * 2012-08-31 2014-03-26 腾讯科技(深圳)有限公司 Page display method and client-side
CN104079475A (en) * 2014-06-27 2014-10-01 北京奇虎科技有限公司 Message processing method and system
CN104185158A (en) * 2014-09-01 2014-12-03 北京奇虎科技有限公司 Malicious short message processing method and client based on false base station

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101729516A (en) * 2008-10-15 2010-06-09 中国联合网络通信集团有限公司 Method and system for registering internet protocol multimedia subsystem (IMS) service
CN103678307A (en) * 2012-08-31 2014-03-26 腾讯科技(深圳)有限公司 Page display method and client-side
CN104079475A (en) * 2014-06-27 2014-10-01 北京奇虎科技有限公司 Message processing method and system
CN104185158A (en) * 2014-09-01 2014-12-03 北京奇虎科技有限公司 Malicious short message processing method and client based on false base station

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106686562A (en) * 2016-11-29 2017-05-17 中国移动通信集团江苏有限公司 Method for processing links in short messages sent by pseudo base station, device and server
CN106941673A (en) * 2017-02-28 2017-07-11 珠海市魅族科技有限公司 Fraud text message recognition methods and device
CN108702318A (en) * 2017-06-23 2018-10-23 华为技术有限公司 A kind of RCS communication means and equipment
WO2018232758A1 (en) * 2017-06-23 2018-12-27 华为技术有限公司 Rcs communication method and device
CN107301242A (en) * 2017-07-03 2017-10-27 北京小米移动软件有限公司 Method, device and the storage medium of page jump
CN109634683A (en) * 2018-12-05 2019-04-16 珠海市小源科技有限公司 The configuration of short message operation frame and method for pushing and device based on enterprise expectations
CN109905394A (en) * 2019-03-05 2019-06-18 中国联合网络通信集团有限公司 Method for anti-counterfeit, base station, user terminal, user support system based on block chain
CN109905394B (en) * 2019-03-05 2021-10-01 中国联合网络通信集团有限公司 Anti-counterfeiting method based on block chain, base station, user terminal and user support system
CN110689377A (en) * 2019-09-30 2020-01-14 北京达佳互联信息技术有限公司 Data detection method and device and electronic equipment
CN111355732A (en) * 2020-02-28 2020-06-30 腾讯科技(深圳)有限公司 Link detection method and device, electronic equipment and storage medium
WO2021169382A1 (en) * 2020-02-28 2021-09-02 腾讯科技(深圳)有限公司 Link test method and apparatus, electronic device and storage medium
US11943256B2 (en) 2020-02-28 2024-03-26 Tencent Technology (Shenzhen) Company Limited Link detection method and apparatus, electronic device, and storage medium

Similar Documents

Publication Publication Date Title
CN106126707A (en) Information identifying method and information recognition device
CN102930211B (en) A kind of multi-core browser intercepts method and the multi-core browser of malice network address
US20180300475A1 (en) Method, means, system, processor, and memory for intercepting malicious websites
CN102957694B (en) A kind of method and device judging fishing website
KR102355973B1 (en) Apparatus and method for detecting smishing message
CN106357644A (en) Method, system and server for authenticating identities on basis of block chain networks
CN106357640A (en) Method, system and server for authenticating identities on basis of block chain networks
CN104539605B (en) Website XSS leak detection methods and equipment
CN102739653B (en) Detection method and device aiming at webpage address
CN105162768A (en) Method and device for detecting phishing Wi-Fi hotspots
CN105407074A (en) Authentication method, apparatus and system
CN104519070A (en) Method and system for detecting website permission vulnerabilities
CN104954372A (en) Method and system for performing evidence acquisition and verification on phishing website
CN106332024A (en) Insecure short message recognition method and related equipment
CN104363251B (en) Website security detection method and device
CN103685290A (en) Vulnerability scanning system based on GHDB
CN104363252B (en) Website security detection method and device
CN106211157A (en) Base station reorientation method and base station redirection device
CN106453436A (en) Method and device for detecting network security
CN104363253A (en) Website security detecting method and device
CN104580197A (en) Code detection method and code detection system
CA2398380C (en) Method and device for authenticating user
CN103179552A (en) Method and device for inquiring information of opposite call party
CN107016074A (en) A kind of webpage loading method and device
CN107318104A (en) Account register method, device, computer equipment and medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20161116