CN107158697A - A kind of method and device that process is identified - Google Patents
A kind of method and device that process is identified Download PDFInfo
- Publication number
- CN107158697A CN107158697A CN201710206840.7A CN201710206840A CN107158697A CN 107158697 A CN107158697 A CN 107158697A CN 201710206840 A CN201710206840 A CN 201710206840A CN 107158697 A CN107158697 A CN 107158697A
- Authority
- CN
- China
- Prior art keywords
- identified
- file
- server
- details
- local
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/55—Controlling game characters or game objects based on the game progress
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/30—Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
- A63F13/35—Details of game servers
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/55—Controlling game characters or game objects based on the game progress
- A63F13/58—Controlling game characters or game objects based on the game progress by computing conditions of game characters, e.g. stamina, strength, motivation or energy level
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/70—Game security or game management aspects
- A63F13/77—Game security or game management aspects involving data related to game devices or game servers, e.g. configuration data, software version or amount of memory
Abstract
The invention discloses a kind of method that process is identified, including：Determine process to be identified；Obtain the local details of the process to be identified；The local details are reported into server, to cause accurate details of the server based on the local details and the process to be identified being stored in the server that the process to be identified is identified；Receive the recognition result of the server feedback.The present invention is solved can not realize the technique effect that whether process is identified extremely exactly to process with the presence or absence of the abnormal technical problem being identified in the prior art.Meanwhile, the invention also discloses a kind of device that process is identified.
Description
Technical field
The present invention relates to network direct broadcasting technical field, more particularly to the method and device for sending out a kind of process is identified.
Background technology
With the progress and the speed-raising of broadband network of the network communications technology, network direct broadcasting obtained it is increasing development and
Using.Especially in live field of playing, increasing spectators can watch the live of game main broadcaster.
At present, it is necessary to which by process title, desired live trip is selected in process list when user carries out playing live
The process of play, so as to realize that game is live.But, there is substantial amounts of tool software or bogusware on the market at present, can make
User is confused with the title as game process, this causes user can not obtain accurate game process, so that can not be suitable
It is live that profit carries out game.
To sum up, a kind of urgently method that process is identified at present, process to be identified with the presence or absence of abnormal.
The content of the invention
The embodiment of the present application by providing a kind of method and device that process is identified, solve in the prior art without
Method, with the presence or absence of the abnormal technical problem being identified, realizes the skill that whether process is identified extremely exactly to process
Art effect.
On the one hand, the application provides following technical scheme by the embodiment of the application：
A kind of method that process is identified, including：
Determine process to be identified；
Obtain the local details of the process to be identified；
The local details are reported into server, with cause the server be based on the local details and
The process to be identified is identified the accurate details for the process to be identified being stored in the server；
Receive the recognition result of the server feedback.
Preferably, the process to be identified is game process.
Preferably, the determination process to be identified, including：
Obtain the process list of current system；
Export the process list；
Obtain the selection operation that user is performed based on the process list；
Based on the selection operation, the process to be identified is determined from the process list.
Preferably, the local details for obtaining the process to be identified, including：
In the complete trails for the process file for locally obtaining the process to be identified；
In the cryptographic Hash for the process file for locally obtaining the process to be identified；
In the version information and company information of the process file for locally obtaining the process to be identified.
Preferably, the complete trails in the process file for locally obtaining the process to be identified, including：
Obtain the handle of the process to be identified；
Based on the handle of the process to be identified, call and wait to know described in the acquisition of GetProcessImageFileName functions
The complete trails of the process file of other process.
Preferably, the cryptographic Hash in the process file for locally obtaining the process to be identified, including：
The process file of the process to be identified is read in internal memory；
MD5 algorithms are called to calculate the cryptographic Hash of the process file of the process to be identified.
Preferably, the version information and company information in the process file for locally obtaining the process to be identified, bag
Include：
VerQueryValue functions are called to obtain the version information and company's letter of the process file of the process to be identified
Breath.
Preferably, it is described that the local details are reported into server, including：
Complete trails, the cryptographic Hash of the process file of the process to be identified to the process file of the process to be identified,
The version information and company information of the process file of the process to be identified are packed together, obtain packaging file；
The packaging file is sent to the server.
Preferably, the recognition result for receiving the server feedback, including：
Receive the first recognition result of the server feedback, first recognition result be used to representing it is described it is to be identified enter
Cheng Zhengchang；Or
Receive the second recognition result of the server feedback, second recognition result be used to representing it is described it is to be identified enter
Cheng Yichang.
On the other hand, there is provided following technical scheme by the embodiment of the application by the application：
A kind of device that process is identified, including：
Determining module, for determining process to be identified；
Acquisition module, the local details for obtaining the process to be identified；
Reporting module, for the local details to be reported into server, to cause the server is based on described
The accurate details of local details and the process to be identified being stored in the server to it is described it is to be identified enter
Journey is identified；
Receiving module, the recognition result for receiving the server feedback.
Preferably, the process to be identified is game process.
Preferably, the determining module, specifically for：
Obtain the process list of current system；Export the process list；User is obtained to perform based on the process list
Selection operation；Based on the selection operation, the process to be identified is determined from the process list.
Preferably, the acquisition module, including：
First acquisition submodule, for the complete trails in the process file for locally obtaining the process to be identified；
Second acquisition submodule, for the cryptographic Hash in the process file for locally obtaining the process to be identified；
3rd acquisition submodule, for locally obtaining the version information of the process file of the process to be identified and company
Information.
Preferably, first acquisition submodule, specifically for：
Obtain the handle of the process to be identified；Based on the handle of the process to be identified, call
GetProcessImageFileName functions obtain the complete trails of the process file of the process to be identified.
Preferably, second acquisition submodule, specifically for：
The process file of the process to be identified is read in internal memory；MD5 algorithms are called to calculate the process to be identified
Process file cryptographic Hash.
Preferably, the 3rd acquisition submodule, specifically for：
VerQueryValue functions are called to obtain the version information and company's letter of the process file of the process to be identified
Breath.
Preferably, the reporting module, specifically for：
Complete trails, the cryptographic Hash of the process file of the process to be identified to the process file of the process to be identified,
The version information and company information of the process file of the process to be identified are packed together, obtain packaging file；By the packing
File is sent to the server.
Preferably, it is characterised in that the receiving module, specifically for：
Receive the first recognition result of the server feedback, first recognition result be used to representing it is described it is to be identified enter
Cheng Zhengchang；Or the second recognition result of the server feedback is received, second recognition result is used to represent described to be identified
Process exception.
The one or more technical schemes provided in the embodiment of the present application, have at least the following technical effects or advantages：
In application embodiment, a kind of method that process is identified is disclosed, including：Determine process to be identified；Obtain
Take the local details of the process to be identified；The local details are reported into server, to cause the service
Accurate details of the device based on the local details and the process to be identified being stored in the server are to institute
Process to be identified is stated to be identified；Receive the recognition result of the server feedback.So, solving in the prior art can not be right
Process realizes and whether process is identified extremely exactly with the presence or absence of the abnormal technical problem being identified, it is ensured that trip
Play is live to be smoothed out, it is ensured that the technique effect of secure user data.
Brief description of the drawings
Technical scheme in order to illustrate the embodiments of the present invention more clearly, makes required in being described below to embodiment
Accompanying drawing is briefly described, it should be apparent that, drawings in the following description are some embodiments of the present invention, for this
For the those of ordinary skill of field, on the premise of not paying creative work, it can also obtain other according to these accompanying drawings
Accompanying drawing.
Fig. 1 is a kind of flow chart for the method that process is identified in the embodiment of the present application；
Fig. 2 is a kind of structure chart for the device that process is identified in the embodiment of the present application.
Embodiment
The embodiment of the present application by providing a kind of method and device that process is identified, solve in the prior art without
Method, with the presence or absence of the abnormal technical problem being identified, realizes the skill that whether process is identified extremely exactly to process
Art effect.
The technical scheme of the embodiment of the present application is in order to solve the above technical problems, general thought is as follows：
A kind of method that process is identified, including：Determine process to be identified；Obtain the local of the process to be identified
Details；The local details are reported into server, to cause the server to be based on the local details
The process to be identified is identified with the accurate details for the process to be identified being stored in the server；Connect
Receive the recognition result of the server feedback.
In order to be better understood from above-mentioned technical proposal, below in conjunction with Figure of description and specific embodiment to upper
Technical scheme is stated to be described in detail.
Embodiment one
A kind of method that process is identified is present embodiments provided, applied in the client of network direct broadcasting, the visitor
Family end may be mounted on computer or mobile phone or tablet personal computer on, the client is connected with live Platform Server, can be obtained
Cut-off broadcasts the live video data that Platform Server is issued, so that the local user of client watches that other main broadcasters' is live
Content；Meanwhile, the live video data of local user can also be sent to live Platform Server by the client, and by live
Platform Server is transmitted to other clients, so as to realize network direct broadcasting.In addition, local user can also lead to when playing game
Cross the client live game content.
Specifically, as shown in figure 1, the method that process is identified, including：
Step S101：Determine process to be identified.
As a kind of optional embodiment, the process to be identified is game process.
In specific implementation process, when user carries out playing live, user is needed by process title, in process list
In select the process of desired live game, to cause the client of network direct broadcasting to result in the game process, so as to realize
Game is live.But, there is substantial amounts of tool software or bogusware on the market at present, can use as game process
Title confuses user, and this causes user can not obtain accurate game process, so that it is live to be smoothed out game.Cause
This, whether the present invention mainly has abnormal be identified to game process.
As a kind of optional embodiment, step S101, including：
Obtain the process list of current system；Output process list；Obtain the selection behaviour that user is performed based on process list
Make；Based on selection operation, process to be identified is determined from process list.
In specific implementation process, want to obtain corresponding game process, then firstly the need of the process list of the system of acquisition,
Then all game process titles interested are found from process list.It is implemented as follows：
(1) system process list of file names is obtained (i.e.：Process list) snapshot.
, can be by calling as minor function is real when obtaining the snapshot of system process list of file names in specific implementation process
It is existing：
HSnapshot=CreateToolhelp32Snapshot (TH32CS_SNAPALL, 0)
Wherein, API calls CreateToolhelp32Snapshot is used for the snapshot for obtaining system process name, its
In, first parameter is TH32CS_SNAPPROCESS, and what sign was obtained is the snapshot of process, and second parameter is 0, and sign is obtained
Take the process list of current system.
(2) title of first process is obtained.
, can be by calling minor function such as to realize in the title of first process of acquisition in specific implementation process：
Process32First(hSnapshot,&procEntry32)
Wherein, API calls Process32First is used for the information for obtaining first process of system.Wherein,
One parameter hSnapshot is the handle of process list snapshot in previous step, and second parameter is then used to return to entering for acquisition
The information of journey.ProcEntry32 has the title that an attribute szExeFile is process, so procEntry32.szExeFile
It is then the title of process.
(3) acquisition system is left the title of all processes.
In specific implementation process, the title of all processes is left in acquisition system, can be by calling following code real
It is existing：
while(bMore){
BMore=Process32Next (hProcessSnap, ＆procEntry32)；}
Wherein, the name of next process is constantly obtained come call function Process32Next by a while circulation
Claim, finished until all processes are all obtained.Often call a Process32Next, then can from procEntry32.szExeFile
To get the title of a process.
In specific implementation process, the process name list of all operations can be then got by above-mentioned steps.It
Afterwards, you can show process list, user then can therefrom find the process title of needs, wherein, the process can be
User wants live game process, is also the process to be identified in the present embodiment.For example：Require to look up game
" QQGAME.exe ", then can find out promising " QQGAME.exe " process.
In addition, the client of network direct broadcasting can also find out whole processes of entitled game in process list automatically, and
As process to be identified.
Step S102：Obtain the local details of process to be identified.
In specific implementation process, the local details of process to be identified are obtained, it is therefore intended that, these are local detailed
Information is sent to server (for example：Live Platform Server), thus the true and false to process to be identified or with the presence or absence of it is abnormal enter
Row identification.
As a kind of optional embodiment, step S102, including：
In the complete trails for the process file for locally obtaining process to be identified；Locally obtaining the process file of process to be identified
Cryptographic Hash (i.e.：HASH values)；Locally obtaining the version information and company information of the process file of process to be identified.
As a kind of optional embodiment, in the complete trails for the process file for locally obtaining process to be identified, including：
Obtain the handle of process to be identified；Based on the handle of process to be identified, GetProcessImageFileName is called
Function obtains the complete trails of the process file of process to be identified.
In specific implementation process, after the handle of process to be identified has been got, then Windows functions can be called
GetProcessImageFileName obtains the file full path footpath of process to be identified.The function prototype is as follows：
DWORD GetProcessImageFileName(HANDLE hProcess,LPTSTR lpImageFileName,
DWORD nSize)
Wherein, parameter HANDLE hProcess are the handles of incoming process to be identified.
Wherein, parameter LPTSTR lpImageFileName are the names of the complete trails of the process file to be identified got
Claim.
Wherein, parameter DWORD nSize are the length of the title of the complete trails of the process file to be identified got.
Therefore, call after GetProcessImageFileName functions, then can get the system-wide of process to be identified
Footpath.
As a kind of optional embodiment, in the cryptographic Hash for the process file for locally obtaining process to be identified, including：
The process file of process to be identified is read in internal memory；MD5 algorithms are called to calculate the process text of process to be identified
The cryptographic Hash of part.
In specific implementation process, first, the process file of process to be identified is opened using fopen functions.Then, adjust
With fread (void*buffer, size_t size, size_t count, FILE*file), to read file content, wherein reading
The content taken is stored in buffer.Finally, call MD5 come to whole buffer contents calculate MD5 values, that is, obtain it is to be identified enter
The cryptographic Hash of the process file of journey.
As a kind of optional embodiment, the version information of the process file of process to be identified and company's letter are locally being obtained
Breath, including：
VerQueryValue functions are called to obtain the version information and company information of the process file of process to be identified.
In specific implementation process, first, calling system function GetFileVersionInfoSize is to be identified to obtain
The size that process file is stored.Then, calling system function GetFileVersionInfo (strFilePath, NULL,
DwSize, pbuf), then the details of process file to be identified can be got, wherein, details are stored in pbuf cachings
In.Wherein, parameter strFilePath is then the complete trails of the process file to be identified obtained.Wherein, dwSize is then to be identified
The details of process file.Finally, calling system function VerQueryValue, then can be from the process to be identified got
The Business Name of process file to be identified, version information etc. are got in the details of file.
Step S103：Local details are reported into server, to cause server to be based on local details and deposit
Process to be identified is identified the accurate details of the process to be identified of storage in the server.
As a kind of optional embodiment, step S103, including：
Title, the complete trails of the process file of process to be identified, process to be identified to the process of process to be identified are entered
The cryptographic Hash of journey file, the version information of the process file of process to be identified and company information are packed together, obtain packaging file；
Packaging file is sent to server.
In specific implementation process, the server is the server of live platform, in the server of live platform,
It is the information for the game that can store current main flows all on the market, includes the process title of each game, the public affairs of game process
Take charge of title, the version information of game process, the information such as HASH (Hash) value of the file of game process, these information are that truly have
Effect, accurate details as herein.These information are when game renewal, and server can also update therewith, so that
Server preserves the accurate details of a all game.
In specific implementation process, after client has reported the details of local process, server passes through to be identified
Process title can then find the accurate details of the process, then contrast the local details reported and be stored in clothes
Whether the accurate details being engaged in device are consistent, illustrate that process to be identified is real game process if consistent, rather than
One viral wooden horse etc., in the absence of risk or exception.
In specific implementation process, server is to the local details of process to be identified that report and is stored in service
After the accurate details of correspondence are compared in device, if unanimously, to the recognition result of client feedback first, the first recognition result is used for
Represent that process to be identified is normal (i.e.：It is game process, devoid of risk)；If inconsistent, to the recognition result of client feedback second,
First recognition result is used to represent process exception to be identified (i.e.：It is not game process, it may be possible to virus, there is risk).
Step S104：The recognition result of the reception server feedback.
The recognition result fed back as a kind of optional embodiment, the reception server, including：
First recognition result of the reception server feedback, the first recognition result is used to represent that process to be identified is normal；Or
Second recognition result of the reception server feedback, the second recognition result is used to represent process exception to be identified.
In specific implementation process, when client receives the first recognition result, this it can wait to know in process list
The position display first of other process is marked (for example：Check the number " √ ", " smiling face " pattern, etc.), for representing that process to be identified is
Normally, safety；When client receives the second recognition result, it can show the position of the process to be identified in process list
Show the second mark (for example：Wrong number "×", " human skeleton " pattern, etc.), for representing that process to be identified is abnormal, danger.
In specific implementation process, the normal game process identified can also be collected, generate one
New game process list, greatly reduces wherein entering number of passes, so, and user is when carrying out playing live, you can in the new trip
Selection in process list of playing needs live game process, convenient and swift, safe devoid of risk, reduces that game is live accident occurs
Probability, so as to improve Consumer's Experience.
Technical scheme in above-mentioned the embodiment of the present application, at least has the following technical effect that or advantage：
In application embodiment, a kind of method that process is identified is disclosed, including：Determine process to be identified；Obtain
Take the local details of the process to be identified；The local details are reported into server, to cause the service
Accurate details of the device based on the local details and the process to be identified being stored in the server are to institute
Process to be identified is stated to be identified；Receive the recognition result of the server feedback.So, solving in the prior art can not be right
Process realizes and whether process is identified extremely exactly with the presence or absence of the abnormal technical problem being identified, it is ensured that trip
Play is live to be smoothed out, it is ensured that the technique effect of secure user data.
Embodiment two
Based on same inventive concept, a kind of device that process is identified is present embodiments provided, as shown in Fig. 2 bag
Include：
Determining module 201, for determining process to be identified；
Acquisition module 202, the local details for obtaining the process to be identified；
Reporting module 203, for the local details to be reported into server, to cause the server to be based on institute
Local details and the accurate details for the process to be identified being stored in the server are stated to described to be identified
Process is identified；
Receiving module 204, the recognition result for receiving the server feedback.
As a kind of optional embodiment, the process to be identified is game process.
As a kind of optional embodiment, determining module 201, specifically for：
Obtain the process list of current system；Export the process list；User is obtained to perform based on the process list
Selection operation；Based on the selection operation, the process to be identified is determined from the process list.
As a kind of optional embodiment, acquisition module 202, including：
First acquisition submodule, for the complete trails in the process file for locally obtaining the process to be identified；
Second acquisition submodule, for the cryptographic Hash in the process file for locally obtaining the process to be identified；
3rd acquisition submodule, for locally obtaining the version information of the process file of the process to be identified and company
Information.
As a kind of optional embodiment, the first acquisition submodule, specifically for：
Obtain the handle of the process to be identified；Based on the handle of the process to be identified, call
GetProcessImageFileName functions obtain the complete trails of the process file of the process to be identified.
As a kind of optional embodiment, the second acquisition submodule, specifically for：
The process file of the process to be identified is read in internal memory；MD5 algorithms are called to calculate the process to be identified
Process file cryptographic Hash.
As a kind of optional embodiment, the 3rd acquisition submodule, specifically for：
VerQueryValue functions are called to obtain the version information and company's letter of the process file of the process to be identified
Breath.
As a kind of optional embodiment, reporting module 203, specifically for：
Complete trails, the cryptographic Hash of the process file of the process to be identified to the process file of the process to be identified,
The version information and company information of the process file of the process to be identified are packed together, obtain packaging file；By the packing
File is sent to the server.
As a kind of optional embodiment, receiving module 204, specifically for：
Receive the first recognition result of the server feedback, first recognition result be used to representing it is described it is to be identified enter
Cheng Zhengchang；Or the second recognition result of the server feedback is received, second recognition result is used to represent process to be identified
It is abnormal.
By the device that process is identified that the present embodiment is introduced is to implement to enter process in the embodiment of the present application
Row knows the device that method for distinguishing is used, so based on the method that process is identified described in the embodiment of the present application,
Those skilled in the art can understand the device that process is identified of the present embodiment embodiment and its
Various change form, so how to realize method in the embodiment of the present application not for the device that this pair of process is identified at this
It is discussed in detail again.As long as those skilled in the art implement to use the method that process is identified in the embodiment of the present application
Device, belong to the scope to be protected of the application.
Technical scheme in above-mentioned the embodiment of the present application, at least has the following technical effect that or advantage：
In application embodiment, a kind of device that process is identified is disclosed, it is characterised in that including：Determine mould
Block, for determining process to be identified；Acquisition module, the local details for obtaining the process to be identified；Reporting module,
For the local details to be reported into server, to cause the server to be based on the local details and storage
The process to be identified is identified the accurate details of the process to be identified in the server；Receive mould
Block, the recognition result for receiving the server feedback.So, solving in the prior art can not be to process with the presence or absence of different
The technical problem being often identified, is realized and whether process is identified extremely exactly, it is ensured that game is live to be smoothed out,
Ensure the technique effect of secure user data.
It should be understood by those skilled in the art that, embodiments of the invention can be provided as method, system or computer program
Product.Therefore, the present invention can be using the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware
Apply the form of example.Moreover, the present invention can be used in one or more computers for wherein including computer usable program code
The computer program production that usable storage medium is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.)
The form of product.
The present invention is the flow with reference to method according to embodiments of the present invention, equipment (system) and computer program product
Figure and/or block diagram are described.It should be understood that can be by every first-class in computer program instructions implementation process figure and/or block diagram
Journey and/or the flow in square frame and flow chart and/or block diagram and/or the combination of square frame.These computer programs can be provided
The processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce
A raw machine so that produced by the instruction of computer or the computing device of other programmable data processing devices for real
The device for the function of being specified in present one flow of flow chart or one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions, which may be alternatively stored in, can guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which is produced, to be included referring to
Make the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one square frame of block diagram or
The function of being specified in multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that in meter
Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, thus in computer or
The instruction performed on other programmable devices is provided for realizing in one flow of flow chart or multiple flows and/or block diagram one
The step of function of being specified in individual square frame or multiple square frames.
, but those skilled in the art once know basic creation although preferred embodiments of the present invention have been described
Property concept, then can make other change and modification to these embodiments.So, appended claims are intended to be construed to include excellent
Select embodiment and fall into having altered and changing for the scope of the invention.
Obviously, those skilled in the art can carry out the essence of various changes and modification without departing from the present invention to the present invention
God and scope.So, if these modifications and variations of the present invention belong to the scope of the claims in the present invention and its equivalent technologies
Within, then the present invention is also intended to comprising including these changes and modification.
Claims (10)
1. a kind of method that process is identified, it is characterised in that including：
Determine process to be identified；
Obtain the local details of the process to be identified；
The local details are reported into server, to cause the server to be based on the local details and storage
The process to be identified is identified the accurate details of the process to be identified in the server；
Receive the recognition result of the server feedback.
2. the as claimed in claim 1 method that process is identified, it is characterised in that the process to be identified for play into
Journey.
3. the method as claimed in claim 1 that process is identified, it is characterised in that the determination process to be identified, bag
Include：
Obtain the process list of current system；
Export the process list；
Obtain the selection operation that user is performed based on the process list；
Based on the selection operation, the process to be identified is determined from the process list.
4. the method as claimed in claim 1 that process is identified, it is characterised in that the acquisition process to be identified
Local details, including：
In the complete trails for the process file for locally obtaining the process to be identified；
In the cryptographic Hash for the process file for locally obtaining the process to be identified；
In the version information and company information of the process file for locally obtaining the process to be identified.
5. the method as claimed in claim 4 that process is identified, it is characterised in that described to wait to know described in local obtain
The complete trails of the process file of other process, including：
Obtain the handle of the process to be identified；
Based on the handle of the process to be identified, call GetProcessImageFileName functions obtain it is described it is to be identified enter
The complete trails of the process file of journey.
6. the method as claimed in claim 4 that process is identified, it is characterised in that described to wait to know described in local obtain
The cryptographic Hash of the process file of other process, including：
The process file of the process to be identified is read in internal memory；
MD5 algorithms are called to calculate the cryptographic Hash of the process file of the process to be identified.
7. the method as claimed in claim 4 that process is identified, it is characterised in that described to wait to know described in local obtain
The version information and company information of the process file of other process, including：
VerQueryValue functions are called to obtain the version information and company information of the process file of the process to be identified.
8. the method as claimed in claim 4 that process is identified, it is characterised in that described by the local details
Server is reported to, including：
It is complete trails, the cryptographic Hash of the process file of the process to be identified to the process file of the process to be identified, described
The version information and company information of the process file of process to be identified are packed together, obtain packaging file；
The packaging file is sent to the server.
9. the method that process is identified as described in claim 1~8 is any, it is characterised in that the reception clothes
The recognition result for device feedback of being engaged in, including：
The first recognition result of the server feedback is received, first recognition result is used to represent the process to be identified just
Often；Or
The second recognition result of the server feedback is received, second recognition result is used to represent that the process to be identified is different
Often.
10. a kind of device that process is identified, it is characterised in that including：
Determining module, for determining process to be identified；
Acquisition module, the local details for obtaining the process to be identified；
Reporting module, for the local details to be reported into server, to cause the server is based on described local
The accurate details of details and the process to be identified being stored in the server are entered to the process to be identified
Row identification；
Receiving module, the recognition result for receiving the server feedback.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710206840.7A CN107158697A (en) | 2017-03-31 | 2017-03-31 | A kind of method and device that process is identified |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710206840.7A CN107158697A (en) | 2017-03-31 | 2017-03-31 | A kind of method and device that process is identified |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107158697A true CN107158697A (en) | 2017-09-15 |
Family
ID=59849882
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710206840.7A Pending CN107158697A (en) | 2017-03-31 | 2017-03-31 | A kind of method and device that process is identified |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107158697A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109324952A (en) * | 2018-09-30 | 2019-02-12 | 武汉斗鱼网络科技有限公司 | A kind of method and device of the detection procedure of mapped file based on memory example number |
| CN110933448A (en) * | 2019-11-29 | 2020-03-27 | 广州市百果园信息技术有限公司 | Live list service system and method |
| CN111135571A (en) * | 2019-12-30 | 2020-05-12 | 广州酷狗计算机科技有限公司 | Game identification method, device, terminal, server and readable storage medium |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140259155A1 (en) * | 2013-03-11 | 2014-09-11 | Samsung Electronics Co., Ltd. | Process authentication method and electronic device implementing the same |
| CN104660606A (en) * | 2015-03-05 | 2015-05-27 | 中南大学 | Method for remotely monitoring safety of application program |
-
2017
- 2017-03-31 CN CN201710206840.7A patent/CN107158697A/en active Pending
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140259155A1 (en) * | 2013-03-11 | 2014-09-11 | Samsung Electronics Co., Ltd. | Process authentication method and electronic device implementing the same |
| CN104660606A (en) * | 2015-03-05 | 2015-05-27 | 中南大学 | Method for remotely monitoring safety of application program |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109324952A (en) * | 2018-09-30 | 2019-02-12 | 武汉斗鱼网络科技有限公司 | A kind of method and device of the detection procedure of mapped file based on memory example number |
| CN109324952B (en) * | 2018-09-30 | 2021-09-07 | 武汉斗鱼网络科技有限公司 | Method and device for detecting number of process instances based on memory mapping file |
| CN110933448A (en) * | 2019-11-29 | 2020-03-27 | 广州市百果园信息技术有限公司 | Live list service system and method |
| CN110933448B (en) * | 2019-11-29 | 2022-07-12 | 广州市百果园信息技术有限公司 | Live list service system and method |
| CN111135571A (en) * | 2019-12-30 | 2020-05-12 | 广州酷狗计算机科技有限公司 | Game identification method, device, terminal, server and readable storage medium |
| CN111135571B (en) * | 2019-12-30 | 2024-04-09 | 广州酷狗计算机科技有限公司 | Game identification method, game identification device, terminal, server and readable storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103443781A (en) | Data delivery | |
| CN106713964A (en) | Method of generating video abstract viewpoint graph and apparatus thereof | |
| CN108335150A (en) | Device and computer readable storage medium for monitoring media presentation | |
| WO2015020599A1 (en) | Method for creating signals for time-stamping of documents and method for time-stamping of documents | |
| CN106686419A (en) | Screensaver display method and display device | |
| CN107158697A (en) | A kind of method and device that process is identified | |
| CN109981322A (en) | The method and apparatus of cloud resource management based on label | |
| CN105956131A (en) | Resource search method and device | |
| CN106921682A (en) | File uploading method and device | |
| CN110321675A (en) | Generation, source tracing method and device based on webpage watermark | |
| CN108776692A (en) | Method and apparatus for handling information | |
| CN106296760A (en) | The method of cutting out of picture and device | |
| CN107710263A (en) | Shop accesses data creation and management | |
| CN110348730A (en) | Risk subscribers judgment method and its system, electronic equipment | |
| CN108235004A (en) | Video playing performance test methods, device and system | |
| CN107509080B (en) | Method and device for displaying coded image and electronic equipment | |
| US9934291B2 (en) | Dynamic presentation of a results set by a form-based software application | |
| CN109068150A (en) | A kind of excellent picture extracting method, terminal and the computer-readable medium of video | |
| CN104168117A (en) | Voice digital signature method | |
| JP6405370B2 (en) | Method for mining information template, apparatus, program, and recording medium | |
| CN111142863B (en) | Page generation method and device | |
| CN108765579A (en) | One kind being based on VR technology exhibition display connection methods and device | |
| CN105550240B (en) | A kind of method and device of recommendation | |
| CN108512803A (en) | Remind the method and device of change account bound phone number | |
| KR20170102878A (en) | Method and apparatus for verifying user |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170915 |