CN107256488B - Order cheating detection method and device - Google Patents

Order cheating detection method and device Download PDF

Info

Publication number
CN107256488B
CN107256488B CN201710423430.8A CN201710423430A CN107256488B CN 107256488 B CN107256488 B CN 107256488B CN 201710423430 A CN201710423430 A CN 201710423430A CN 107256488 B CN107256488 B CN 107256488B
Authority
CN
China
Prior art keywords
cheating
order
weight
score
terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201710423430.8A
Other languages
Chinese (zh)
Other versions
CN107256488A (en
Inventor
崔航
朱润山
孙松
夏侯有杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Xingxuan Technology Co Ltd
Original Assignee
Beijing Xingxuan Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Xingxuan Technology Co Ltd filed Critical Beijing Xingxuan Technology Co Ltd
Priority to CN201710423430.8A priority Critical patent/CN107256488B/en
Publication of CN107256488A publication Critical patent/CN107256488A/en
Application granted granted Critical
Publication of CN107256488B publication Critical patent/CN107256488B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/018—Certifying business or products
    • G06Q30/0185—Product, service or business identity fraud
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/02—Marketing; Price estimation or determination; Fundraising
    • G06Q30/0207—Discounts or incentives, e.g. coupons or rebates
    • G06Q30/0211—Determining the effectiveness of discounts or incentives
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions
    • G06Q30/0601—Electronic shopping [e-shopping]
    • G06Q30/0633—Lists, e.g. purchase orders, compilation or processing
    • G06Q30/0635—Processing of requisition or of purchase orders

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • Engineering & Computer Science (AREA)
  • Development Economics (AREA)
  • Marketing (AREA)
  • Economics (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Game Theory and Decision Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

The embodiment of the invention relates to a method and a device for detecting order cheating, wherein the method comprises the following steps: when an order placing instruction of a target order is received, acquiring at least one cheating characteristic information of a terminal; determining at least one cheating weight corresponding to the at least one cheating characteristic information; calculating a cheating score corresponding to the target order according to the at least one cheating weight; and when the cheating score meets the cheating condition, determining the target order as a cheating order. When the terminal receives an order placing instruction of a target order, the cheating feature information in the terminal needs to be acquired, the cheating weight is obtained according to the cheating feature information to calculate a cheating score, and finally whether the cheating score meets the cheating condition or not is judged, if yes, the target order is indicated as the cheating order, and therefore the order of the cheating can be detected through the method provided by the embodiment of the invention.

Description

Order cheating detection method and device
Technical Field
The embodiment of the invention relates to the technical field of communication, in particular to a method and a device for detecting order cheating.
Background
At present, a user can order or shop on application software through a mobile phone, and the application software can also release preferential subsidies, so that the account can enjoy the preferential subsidies in an order placing mode when meeting special conditions. However, in order to obtain the benefits released by the application software, some illegal users may cheat the benefit subsidies released by the application software by modifying the operating system of the mobile phone and other means to make the users meet special conditions.
For example, assuming that the ordering application launches an activity, the user's account may enjoy a B offer as long as the account meets the A criteria. Assuming that the user X owns the account S100, the account S100 does not conform to the condition a, so the account S100 cannot enjoy the benefit B, but the user X may cheat the benefit B by placing an order by modifying the operating system of the mobile phone or the like to conform the account S100 to the condition a.
Therefore, how to provide a detection method to detect a cheated order is a technical problem that needs to be solved urgently.
Disclosure of Invention
The embodiment of the invention provides a method and a device for detecting order cheating, which are used for detecting cheated orders.
According to a first aspect of the embodiments of the present invention, there is provided a method for detecting order cheating, including:
when an order placing instruction of a target order is received, acquiring at least one cheating characteristic information of a terminal, wherein the terminal is equipment for generating the target order;
determining at least one cheating weight corresponding to the at least one cheating characteristic information;
calculating a cheating score corresponding to the target order according to the at least one cheating weight;
and when the cheating score meets the cheating condition, determining the target order as a cheating order.
Optionally, the step of determining at least one cheating weight corresponding to the at least one cheating feature information includes:
acquiring a historical order with the at least one cheating characteristic information and the cheating identifier;
calculating information gain corresponding to at least one cheating characteristic information according to the at least one cheating characteristic information in the historical order and the cheating identification;
and determining an information gain corresponding to the at least one cheating feature information as a cheating weight corresponding to the at least one cheating feature information.
Optionally, the step of determining at least one cheating weight corresponding to the at least one cheating feature information includes:
acquiring a preset corresponding relation table of the cheating characteristic information and the cheating weight;
and determining at least one cheating weight corresponding to the at least one cheating characteristic information according to the corresponding relation table of the cheating characteristic information and the cheating weight.
Optionally, the step of calculating a cheating score corresponding to the target order according to the at least one cheating weight includes:
calculating the sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order; or,
calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights so as to obtain a cheating score corresponding to the target order.
Optionally, when the cheating score meets the cheating condition, the step of determining the target order as the cheating order includes:
and when the cheating score is larger than a cheating threshold or the cheating score is smaller than the cheating threshold, determining the target order as a cheating order.
According to a second aspect of the embodiments of the present invention, there is provided an order cheating detection apparatus, including:
the system comprises an acquisition module, a processing module and a processing module, wherein the acquisition module is used for acquiring at least one cheating characteristic information of a terminal when an order placing instruction of a target order is received, and the terminal is equipment for generating the target order;
a first determining module, configured to determine at least one cheating weight corresponding to the at least one cheating feature information;
the computing module is used for computing a cheating score corresponding to the target order according to the at least one cheating weight;
and the second determining module is used for determining the target order as the cheating order when the cheating score meets the cheating condition.
Optionally, the first determining module is specifically configured to obtain a history order with the at least one cheating feature information and the cheating identifier; calculating information gain corresponding to at least one cheating characteristic information according to the at least one cheating characteristic information in the historical order and the cheating identification; and determining an information gain corresponding to the at least one cheating feature information as a cheating weight corresponding to the at least one cheating feature information.
Optionally, the first determining module is specifically configured to obtain a preset correspondence table between the cheating feature information and the cheating weight; and determining at least one cheating weight corresponding to the at least one cheating characteristic information according to the corresponding relation table of the cheating characteristic information and the cheating weight.
Optionally, the calculating module is specifically configured to calculate a sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order; or calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights so as to obtain the cheating score corresponding to the target order.
Optionally, the second determining module is specifically configured to determine the target order as a cheating order when the cheating score is greater than a cheating threshold or the cheating score is smaller than the cheating threshold.
Compared with the prior art, the technical scheme provided by the embodiment has the following advantages and characteristics:
in the scheme provided by the embodiment of the invention, when the terminal receives an order placing instruction of a target order, the cheating characteristic information in the terminal needs to be acquired, the cheating score is calculated according to the cheating characteristic information to obtain the cheating weight, and finally whether the cheating score meets the cheating condition is judged, if so, the target order is the cheating order, so that the cheating order can be detected by the method provided by the embodiment of the invention.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings needed in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.
Fig. 1 is a flowchart of a method for detecting order cheating according to an embodiment of the present invention.
Fig. 2 is a schematic diagram of an order cheating detection apparatus according to an embodiment of the present invention.
Fig. 3 is a schematic diagram of a server according to an embodiment of the present invention.
Detailed Description
In order to make the technical solutions of the present invention better understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention.
In some of the flows described in the present specification and claims and in the above figures, a number of operations are included that occur in a particular order, but it should be clearly understood that these operations may be performed out of order or in parallel as they occur herein, with the order of the operations being indicated as 101, 102, etc. merely to distinguish between the various operations, and the order of the operations by themselves does not represent any order of performance. Additionally, the flows may include more or fewer operations, and the operations may be performed sequentially or in parallel. It should be noted that, the descriptions of "first", "second", etc. in this document are used for distinguishing different messages, devices, modules, etc., and do not represent a sequential order, nor limit the types of "first" and "second" to be different.
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a flowchart of a method for detecting order cheating according to an embodiment of the present invention. The order cheating detection method shown in fig. 1 can detect cheated orders. The method comprises the following steps.
Step S11, when receiving an order placing instruction of the target order, acquiring at least one cheating characteristic information of the terminal, wherein the terminal is a device for generating the target order.
The method provided by the embodiment of the invention can be applied to a server, and the server can be a computer and other equipment. The terminal mentioned in the embodiment of the present invention is a device for generating a target order, and for example, the terminal may be a smart phone or a tablet computer.
The target order is an order for a user to purchase a commodity by using the terminal, and the target order is provided with the information of the commodity purchased at this time, the information of the user and the information of a merchant. The order placing instruction is a request which is sent to a server after a terminal generates a target order so as to inform the server that the target order is generated and request for subsequent processing.
The cheating characteristic information is cheating information on the terminal. For example, the cheating feature information may be whether the operating system of the terminal has acquired system authority, that is, whether the operating system of the terminal has root. As another example, the cheating characteristic information may be whether the operating system of the terminal has successfully crossed the prison. As another example, the cheating feature information may be whether the operating system of the terminal uses a network proxy. Of course, the cheating feature information is not limited to the above-mentioned examples, and may be other illegal operations performed on the operating system of the terminal.
In step S11, when the terminal generates the target order, the terminal sends an order placing instruction of the target order to the server. When the server receives an order placing instruction of a target order, the server can acquire at least one cheating characteristic information of the terminal in real time, and the server can also acquire at least one cheating characteristic information sent by the terminal at a certain previous time point.
For example, assume that when the terminal generates a target order, the terminal sends an order placing instruction of the target order to the server. When the server receives an order placing instruction of a target order, the server immediately acquires at least one cheating characteristic message of the terminal, wherein the at least one cheating characteristic message comprises that an operating system of the terminal acquires system authority and the operating system of the terminal uses a network agent.
And step S12, determining at least one cheating weight corresponding to the at least one cheating characteristic information.
Wherein the cheating weight is a numerical value, e.g., the cheating weight is 0.35.
In step S12, the server determines a cheating weight corresponding to each cheating feature message.
For example, suppose the server acquires the cheating feature information a and the cheating feature information B of the terminal, at this time, the server needs to determine the cheating weight X corresponding to the cheating feature information a, and the server needs to determine the cheating weight Y corresponding to the cheating feature information B.
Since there are many ways for the server to determine the at least one cheating weight corresponding to the at least one cheating feature information, two ways are briefly described below.
In a first manner, determining at least one cheating weight corresponding to at least one cheating feature information includes the following steps: firstly, acquiring a preset corresponding relation table of cheating characteristic information and cheating weight; secondly, determining at least one cheating weight corresponding to at least one cheating characteristic information according to a corresponding relation table of the cheating characteristic information and the cheating weights.
In the first way, the server may first obtain a pre-configured correspondence table between the cheating feature information and the cheating weight, where the correspondence table is a one-to-one mapping relationship between the cheating feature information and the cheating weight. After the corresponding relation table of the cheating feature information and the cheating weight is obtained, the server determines the cheating weight corresponding to the obtained feature cheating information in the corresponding relation table.
For example, please refer to table 1, where table 1 is a correspondence table between the cheating feature information and the cheating weight, and the correspondence table is pre-established and stored in the server, so that the server can directly obtain the correspondence table and obtain the cheating weight according to the specific cheating feature information.
Numbering Cheating feature information Cheating weight
1 Obtaining system permissions 0.09
2 Successful jail surmounting 0.17
3 Using a network proxy 0.59
4 … …
TABLE 1
In a second manner, determining at least one cheating weight corresponding to at least one cheating feature information includes the following steps: firstly, acquiring a historical order with at least one cheating characteristic information and a cheating identifier; secondly, calculating information gain corresponding to at least one cheating characteristic information according to at least one cheating characteristic information and the cheating identification in the historical order; and finally, determining the information gain corresponding to the at least one cheating characteristic information as the cheating weight corresponding to the at least one cheating characteristic information.
In the second method, the server may calculate an information gain corresponding to the cheating feature information based on the historical order, and determine the information gain as the cheating weight. In the information theory, the larger the information gain of an attribute is, the stronger the capability of indicating that the attribute makes the uncertainty of the category to which the data belongs become deterministic, so from the perspective of cheating, the larger the information gain of a certain cheating feature information of a cheating user is, the stronger the capability of indicating the user cheating is, so the larger the weight is, the stronger the capability of determining the user cheating is by using the information gain as a weight.
The following describes how to calculate an information gain corresponding to at least one cheating feature according to at least one cheating feature in a historical order and a cheating identity. Since there are many ways to calculate the information gain, one way is briefly described below by way of example.
For example, referring to table 2, shown in table 2 is a historical order with at least one of cheating feature information and cheating identity, wherein the cheating feature information includes obtaining system privileges, successfully crossing prisons, and using network agents. First, according to the evaluation of historical orders, whether cheating suspicion exists or not is identified for each order sample. For the order 1, the server knows that the operating system of the terminal of the order 1 successfully acquires the system authority, that the operating system of the terminal of the order 1 unsuccessfully breaks through the prison, that the operating system of the terminal of the order 1 does not use a network agent, and knows corresponding information by yes or no in table 2.
Order numbering Obtaining system permissions Successful jail surmounting Using a network proxy Cheating mark
1 Is that Whether or not Whether or not Whether or not
2 Is that Whether or not Whether or not Whether or not
3 Whether or not Whether or not Is that Is that
4 Is that Is that Is that Is that
5 Is that Is that Is that Is that
6 Is that Is that Whether or not Whether or not
7 Whether or not Is that Is that Is that
8 Is that Whether or not Whether or not Whether or not
9 Is that Is that Is that Is that
10 Is that Is that Is that Is that
11 Whether or not Is that Is that Is that
12 Whether or not Whether or not Is that Is that
13 Whether or not Whether or not Is that Is that
14 Whether or not Whether or not Is that Whether or not
TABLE 2
After the server obtains the historical order, the information gain corresponding to the cheating feature information is calculated based on the formula (1), the formula (2) and the formula (3).
Formula (1):
Figure BDA0001315610030000061
wherein, the formula (1) can calculate the information entropy; d is a sample set, namely 14 lines of order information in Table 2; m is the number of categories, if the entropy of the information of the sample set is solved, 2 categories are totally arranged in 14 rows of samples in the table 2, namely a cheating category and an unsanitary category; if the information entropy of the cheating characteristic information is obtained, for example, the successful prison-crossing categories are 2, namely the prison-crossing categories are already prison and not are obtained; pi is the proportion of each category, if the entropy of the information of the sample set is obtained, the proportion of the category marked as "yes" in table 2 in the total sample set is 9/14; if the information entropy of the cheating feature information is obtained, the number of the categories which successfully cross the place and stay in the yes state in table 2 is 7, the number of the categories which are judged to be yes by the cheating marks in the corresponding sample set is 6, pi is 6/7, and the number of the categories which are judged to be no by the cheating marks in the corresponding sample set is 1, pi is 1/7.
Formula (2):
Figure BDA0001315610030000071
wherein, the mathematical expectation can be calculated by formula (2); a is cheating feature information, i.e., in Table 2, the cheating feature informationThe cheating characteristic information can be successful prison surmounting and can also be network agent usage for acquiring system authority; v is the number of categories of the cheating feature information itself, that is, in table 2, the number of categories for obtaining the system permission is 2, "yes" and "no"; dj is the number of a certain category in the cheating characteristic information, namely the number of successful jail-breaking yes in table 2 is 7; d represents the total number of sample sets, i.e., in table 2, the total number of sample sets is 14; info (D)j) The information entropy of the cheating characteristic information is obtained.
Formula (3): gain (A) info (D) -infoA(D) The value obtained by formula (3) is the difference between formula (1) and formula (2), that is, the difference between the information entropy and the mathematical expectation. The difference obtained by the formula (3) is the information gain corresponding to the cheating feature information, i.e., the cheating weight corresponding to the cheating feature information.
Numerical values calculated based on the information of table 2, formula (1), formula (2), and formula (3) are given below.
info(D)＝-(9/14)*log2(9/14)-(5/14)*log2(5/14)＝0.94；
Wherein 9/14, 14 represents the total number of samples, 9 represents the number of identified cheats; 5/14, 5 indicates the number of recognized non-cheats and 14 indicates the total number of samples.
infoObtaining system permissions(D)＝(8/14)*(-(4/8)*log2(4/8)-(4/8)*log2(4/8))+(6/14)*(-(5/6)*log2(5/6)-(1/6)*log2(1/6))＝0.85。
gain (acquisition system authority) info (d) -infoObtaining system permissions(D)＝0.94-0.85＝0.09。
infoSuccessful jail surmounting(D)＝0.77。
gain (successful jail) ═ info (D) -infoSuccessful jail surmounting(D)＝0.94-0.77＝0.17。
infoUsing a network proxy(D)＝0.35。
gain (using network agent) ═ info (d) -infoUsing a network proxy(D)＝0.94-0.35＝0.59。
And step S13, calculating a cheating score corresponding to the target order according to at least one cheating weight.
There are many ways to calculate the cheating score corresponding to the target order according to the at least one cheating weight, and two ways are briefly described below.
In a first mode, the step of calculating the cheating score corresponding to the target order according to at least one cheating weight comprises the following steps: and calculating the sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order.
For example, assuming that the cheating feature information includes an acquisition system authority, a successful jail-breaking and a use of a network agent, and the cheating weight of the acquisition system authority is 0.09, the cheating weight of the successful jail-breaking is 0.17, and the cheating weight of the use of the network agent is 0.59, the sum of each cheating weight is 0.09+0.17+ 0.59-0.85.
In a second mode, the step of calculating the cheating score corresponding to the target order according to at least one cheating weight comprises the following steps: calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights to obtain a cheating score corresponding to the target order.
For example, assuming that the cheating feature information includes an acquisition system authority, a successful jail breaking and a use of a network agent, and the cheating weight of the acquisition system authority is 0.2, the cheating weight of the successful jail breaking is 0.4, and the cheating weight of the use of the network agent is 0.3, the sum of the cheating weights is 0.2+0.4+ 0.3-0.9, and the cheating score corresponding to the target order is 0.9/3-0.3.
And step S14, when the cheating score meets the cheating condition, determining the target order as the cheating order.
If the cheating condition is preset to be that the target location is suspicious of cheating when the cheating score is larger than the cheating threshold, the server judges whether the cheating score is larger than the cheating threshold, and determines the target order as the cheating order when the cheating score is larger than the cheating threshold.
For example, assuming a cheating score of 0.9, the cheating condition is preset to be that the target location is suspect of cheating when the cheating score is greater than a cheating threshold of 0.8. The server will determine whether the cheating score 0.9 is greater than the cheating threshold value 0.8, and after the server determines that the cheating score 0.9 is greater than the cheating threshold value 0.8, the server will determine the target order as a cheating order.
If the cheating condition is preset to be that the target location has a cheating suspicion when the cheating score is smaller than the cheating threshold, the server judges whether the cheating score is smaller than the cheating threshold, and determines the target order as the cheating order when the cheating score is smaller than the cheating threshold.
For example, assuming a cheating score of 0.5, the cheating condition is preset to be that the target location is suspect of cheating when the cheating score is less than a cheating threshold of 0.6. The server will determine whether the cheating score 0.5 is less than the cheating threshold value 0.6, and after the server determines that the cheating score 0.5 is less than the cheating threshold value 0.6, the server will determine the target order as the cheating order.
In the embodiment shown in fig. 1, when the terminal receives an order placing instruction of a target order, the cheating feature information in the terminal needs to be acquired, the cheating weight is obtained according to the cheating feature information to calculate a cheating score, and finally whether the cheating score meets the cheating condition is judged, if yes, the target order is the cheating order, so that the cheating order can be detected by the method provided by the embodiment of the invention.
Fig. 2 is a schematic diagram of an order cheating detection apparatus according to an embodiment of the present invention. Fig. 2 is a view of the embodiment corresponding to fig. 1, and the same contents in fig. 2 as those in fig. 1 may refer to the embodiment corresponding to fig. 1. Referring to fig. 2, the apparatus includes the following modules:
the acquisition module 11 is configured to acquire at least one piece of cheating feature information of a terminal when an order placing instruction of a target order is received, where the terminal is a device for generating the target order;
a first determining module 12, configured to determine at least one cheating weight corresponding to at least one cheating feature information;
the calculating module 13 is configured to calculate a cheating score corresponding to the target order according to the at least one cheating weight;
a second determining module 14, configured to determine the target order as a cheating order when the cheating score meets the cheating condition.
Optionally, the first determining module 12 is specifically configured to obtain a history order with at least one cheating feature information and a cheating identifier; calculating information gain corresponding to at least one cheating characteristic information according to at least one cheating characteristic information and the cheating identification in the historical order; and determining an information gain corresponding to the at least one cheating feature information as a cheating weight corresponding to the at least one cheating feature information.
Optionally, the first determining module 12 is specifically configured to obtain a preset correspondence table between the cheating feature information and the cheating weight; and determining at least one cheating weight corresponding to the at least one cheating characteristic information according to the corresponding relation table of the cheating characteristic information and the cheating weight.
Optionally, the calculating module 13 is specifically configured to calculate a sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order; or calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights so as to obtain the cheating score corresponding to the target order.
Optionally, the second determining module 14 is specifically configured to mark the target order as a cheating order when the cheating score is greater than the cheating threshold or the cheating score is smaller than the cheating threshold.
Fig. 3 is a schematic diagram of a server according to an embodiment of the present invention. Referring to fig. 3, the server includes: a processor 21 and a memory 22, wherein the memory 22 is configured to store one or more computer instructions, and the one or more computer instructions are invoked for execution by the processor 21;
the processor 21 is configured to: when an order placing instruction of a target order is received, acquiring at least one cheating characteristic information of a terminal, wherein the terminal is equipment for generating the target order; determining at least one cheating weight corresponding to the at least one cheating characteristic information; calculating a cheating score corresponding to the target order according to at least one cheating weight; and when the cheating score meets the cheating condition, determining the target order as the cheating order.
With regard to the apparatus in the above-described embodiment, the specific manner in which each module performs the operation has been described in detail in the embodiment related to the method, and will not be elaborated here.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and the parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods of the various embodiments or some parts of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (7)

1. A method for detecting order cheating is characterized by comprising the following steps:
when an order placing instruction of a target order is received, acquiring at least one cheating characteristic information of a terminal, wherein the terminal is equipment for generating the target order; wherein the at least one cheating feature information comprises: whether the operating system of the terminal has acquired the system authority or not, whether the operating system of the terminal has used a network agent or whether the operating system of the terminal has successfully crossed one of the prisons or not;
acquiring a historical order with the at least one cheating characteristic information and the cheating identifier;
calculating information gain corresponding to at least one cheating characteristic information according to the at least one cheating characteristic information in the historical order and the cheating identification;
determining an information gain corresponding to the at least one cheating feature information as a cheating weight corresponding to the at least one cheating feature information;
calculating a cheating score corresponding to the target order according to the at least one cheating weight;
and when the cheating score meets the cheating condition, determining the target order as a cheating order.
2. The method of detecting order cheating according to claim 1, wherein the step of calculating a cheating score corresponding to the target order according to the at least one cheating weight comprises:
calculating the sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order; or,
calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights so as to obtain a cheating score corresponding to the target order.
3. The method of detecting order cheating according to claim 1, wherein the step of determining the target order as a cheating order when the cheating score meets a cheating condition comprises:
and when the cheating score is larger than a cheating threshold or the cheating score is smaller than the cheating threshold, determining the target order as a cheating order.
4. An apparatus for detecting order cheating, comprising:
the system comprises an acquisition module, a processing module and a processing module, wherein the acquisition module is used for acquiring at least one cheating characteristic information of a terminal when an order placing instruction of a target order is received, and the terminal is equipment for generating the target order; the at least one cheating characteristic message comprises one of whether the operating system of the terminal has acquired system authority or not, whether the operating system of the terminal has used a network agent or whether the operating system of the terminal has successfully crossed the jail or not;
the first determining module is used for acquiring a historical order with the at least one cheating characteristic information and the cheating identifier; calculating information gain corresponding to at least one cheating characteristic information according to the at least one cheating characteristic information in the historical order and the cheating identification; determining an information gain corresponding to the at least one cheating feature information as a cheating weight corresponding to the at least one cheating feature information;
the computing module is used for computing a cheating score corresponding to the target order according to the at least one cheating weight;
and the second determining module is used for determining the target order as the cheating order when the cheating score meets the cheating condition.
5. The apparatus for detecting order cheating according to claim 4,
the calculation module is specifically configured to calculate a sum of each cheating weight in the at least one cheating weight to obtain a cheating score corresponding to the target order; or calculating the sum of each cheating weight in the at least one cheating weight, determining the number of the cheating weights in the at least one cheating weight, and calculating the quotient of the sum of each cheating weight and the number of the cheating weights so as to obtain the cheating score corresponding to the target order.
6. The apparatus for detecting order cheating according to claim 4,
the second determining module is specifically configured to determine the target order as a cheating order when the cheating score is greater than a cheating threshold or the cheating score is less than the cheating threshold.
7. A server, comprising a memory and a processor; the memory is used for storing one or more computer instructions which, when executed by the processor, are capable of implementing the steps of the method of any one of the preceding claims 1 to 3.
CN201710423430.8A 2017-06-07 2017-06-07 Order cheating detection method and device Expired - Fee Related CN107256488B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710423430.8A CN107256488B (en) 2017-06-07 2017-06-07 Order cheating detection method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710423430.8A CN107256488B (en) 2017-06-07 2017-06-07 Order cheating detection method and device

Publications (2)

Publication Number Publication Date
CN107256488A CN107256488A (en) 2017-10-17
CN107256488B true CN107256488B (en) 2020-10-13

Family

ID=60024560

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710423430.8A Expired - Fee Related CN107256488B (en) 2017-06-07 2017-06-07 Order cheating detection method and device

Country Status (1)

Country Link
CN (1) CN107256488B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111833064B (en) * 2019-04-17 2022-04-12 马上消费金融股份有限公司 Cheating detection method and device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105335883A (en) * 2015-10-30 2016-02-17 小米科技有限责任公司 Order processing method and device
CN105894360A (en) * 2016-03-31 2016-08-24 百度在线网络技术（北京）有限公司 Cheated order identification method, device and system
CN106611321A (en) * 2015-10-22 2017-05-03 百度在线网络技术（北京）有限公司 An identification method and apparatus for fake handset numbers

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013027991A2 (en) * 2011-08-22 2013-02-28 Kim Ho Kyum System and method for preventing fraudulent calls in advertisement using electronic communication medium
CN106096996A (en) * 2016-05-31 2016-11-09 北京奇虎科技有限公司 The detection method of mobile terminal cheating and related device
CN106203931A (en) * 2016-08-12 2016-12-07 北京东方车云信息技术有限公司 A kind of go out the method that prevents cheating in car and go out car client, service end

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106611321A (en) * 2015-10-22 2017-05-03 百度在线网络技术（北京）有限公司 An identification method and apparatus for fake handset numbers
CN105335883A (en) * 2015-10-30 2016-02-17 小米科技有限责任公司 Order processing method and device
CN105894360A (en) * 2016-03-31 2016-08-24 百度在线网络技术（北京）有限公司 Cheated order identification method, device and system

Also Published As

Publication number Publication date
CN107256488A (en) 2017-10-17

Similar Documents

Publication Publication Date Title
CN105282131B (en) Method of Information Security Evaluation, apparatus and system based on the scanning of risk item
CN105991590B (en) A kind of method, system, client and server for verifying user identity
US20210248604A1 (en) Electronic-certificate-based interaction methods and apparatuses, and electronic devices
CN109257321B (en) Secure login method and device
CN108256721B (en) Task scheduling method, terminal device and medium
RU2016144759A (en) METHOD AND SYSTEM FOR AUTHENTICATION OF USERS
CN106657062B (en) User identification method and device
CN107465642A (en) A kind of method and device for judging account abnormal login
CN111355681A (en) Address book-based authentication method, terminal device, server and storage medium
JP2019507424A5 (en)
WO2022257731A1 (en) Method, device and system for performing algorithm negotiation on privacy computation
CN105871983A (en) Method and device for selecting servers
US20170252653A1 (en) Matching method and matching system for users in game
CN113114770B (en) User identification method, electronic device, and computer-readable storage medium
CN108650289A (en) A kind of method and apparatus of the management data based on block chain
CN111611572B (en) Real-name authentication method and device based on face authentication
CN107256488B (en) Order cheating detection method and device
CN114157720A (en) Method, device, electronic equipment and medium for processing service request
CN110222297B (en) Identification method of tag user and related equipment
CN107016294A (en) A kind of data permission control method and device
CN112950314B (en) Method, device, equipment and storage medium for determining ticket purchasing qualification
CN112738742B (en) Method, apparatus, electronic device and medium for communicating with user
CN111625817A (en) Abnormal user identification method and device, electronic equipment and storage medium
JP2021149339A (en) User terminal device, program, and literacy level estimation system
JP2017191500A (en) Device for providing point information to portable terminal, method, and program

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information

Address after: 100085 Beijing, Haidian District on the road to the information on the ground floor of the 1 to the 3 floor of the 2 floor, room 11, 202

Applicant after: Beijing Xingxuan Technology Co.,Ltd.

Address before: 100085 Beijing, Haidian District on the road to the information on the ground floor of the 1 to the 3 floor of the 2 floor, room 11, 202

Applicant before: Beijing Xiaodu Information Technology Co.,Ltd.

CB02 Change of applicant information
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20201013

CF01 Termination of patent right due to non-payment of annual fee