CN107769999A - A kind of method and apparatus for identifying user agent's online - Google Patents
A kind of method and apparatus for identifying user agent's online Download PDFInfo
- Publication number
- CN107769999A CN107769999A CN201711285741.9A CN201711285741A CN107769999A CN 107769999 A CN107769999 A CN 107769999A CN 201711285741 A CN201711285741 A CN 201711285741A CN 107769999 A CN107769999 A CN 107769999A
- Authority
- CN
- China
- Prior art keywords
- user terminal
- online
- unique mark
- terminal
- behalf
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/50—Testing arrangements
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The embodiment of the present invention provides a kind of method and apparatus for identifying user agent's online, and methods described includes：The unique mark for the K user terminals that user terminal is sent one by one in cycle T is obtained, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；The comparative result between the K unique marks arranged in order is determined, wherein K is the natural number more than 1；According to the comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal.The embodiment of the present invention not only increase detection user terminal act on behalf of other users terminal online ability also reduce False Rate.
Description
Technical field
The present invention relates to data communication field, especially a kind of method and apparatus for identifying user agent's online.
Background technology
At present, in tissue or the mechanism based on every user charge is carried out online, such as：Colleges and universities, generally existing pass through profit
With network share equipment or network share software allow the people of no access authority originally can be surfed the Net so as to reach fee evasion or
From the phenomenon of the purpose of supervision.The problem of this not only causes number of opening an account to network operator service and tailed off, and charge is reduced, and
Safety to network also brings huge hidden danger.
In order to solve this problem, it would be desirable to this network share behavior at concurrent current family can be detected, work as detection
It is carried out when having the behavior of shared proxy surfing to user, such as：Alarm, force offline, addition blacklist etc. limitation, specification
The internet behavior of user, increase network operation income.It was used to detect whether a user terminal (immobile terminal) shares in the past
The method that network carries out proxy surfing to other users terminal (immobile terminal), that is, detection user terminal (non-moving end
End) method of acting on behalf of other users terminal (immobile terminal), mainly have following several：
1) OS Type of the user terminal of online, operating system version are identified using the UA information in Http messages
This, browser type etc. information；Although the method is capable of detecting when that user terminal acts on behalf of the behavior of other users terminal, but one
UA information in the Http messages that a little mobile terminals are sent can also carry these characteristic informations of user terminal, therefore easily occur
Erroneous judgement, Detection results are bad.
2) message with some characteristic informations that is sent using the application program installed on user terminal is detected.Such as：
Application program typically can all generate a unique sequence number, as long as so energy to count installation amount on the computer of installation
Enough get this unique one user terminal of sequence number can unique identification.But because this information is typically all to pass through
Encryption, and the opportunity sent is also unclear, it is more difficult to get, so also being difficult to really be used to detect.
3) some system softwares of user terminal or the information of hardware are obtained, such as operating system version number, network interface card MAC
The unique identification feature of location, hard disk serial number, screen resolution etc. as user terminal.If these information got are all
Difference, or there is part difference then to think the behavior that user terminal (immobile terminal) acts on behalf of the online of other users terminal be present.Obtain
These features of user terminal are taken, generally requiring the authority of keeper can just get.Therefore, come for network monitoring device
Say, it is substantially infeasible.
The content of the invention
In order to solve the above-mentioned technical problem, embodiments of the invention adopt the following technical scheme that：
A kind of method for identifying user agent's online, including：
The unique mark for the K user terminals that user terminal is sent one by one in cycle T is obtained, according to acquisition
The sequencing of K unique mark arranges the K unique mark；
The comparative result between the K unique marks arranged in order is determined, wherein K is the natural number more than 1；
According to the comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal.
Optionally, the unique mark is what the user terminal generated at random according to the plug-in unit obtained from anti-agent equipment
The unique mark that unique mark and/or the user terminal generate according to the font information of the operating system of the user terminal.
Optionally, the unique mark bag for obtaining the K user terminals that user terminal is sent one by one in cycle T
Include：
Obtain what the user terminal was sent one by one using the first browser corresponding to the first browser type in cycle T
The unique mark of the n user terminals；
Obtain what the user terminal was sent one by one using the second browser corresponding to the second browser type in cycle T
The unique mark of the m user terminals；
Methods described also includes：First browser type is identified, establishes the n unique mark and the first browser
First corresponding relation of type；N is the natural number less than or equal to K；Second browser type is identified, establishes the m only
One mark and the second corresponding relation of the second browser type；M is the natural number less than or equal to K；
It is described determine between the K unique marks arranged in order comparative result the step of specifically include：
Determine that first between the unique marks that the n arranges in order compares knot according to first corresponding relation
Fruit；
Determine that second between the unique marks that the m arranges in order compares knot according to second corresponding relation
Fruit；
It is described according to comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal
The step of specifically include：
Determine whether the user terminal is to act on behalf of other users terminal according to the first comparative result and the second comparative result
The user terminal of online.
Optionally, the step of identification first browser type specifically includes：According to browsing for the first browser
Device kernel font manufacturer title identifies first browser type；
The step of identification second browser type, specifically includes：According to the browser kernel word of the second browser
Body manufacturer title identifies second browser type.
Optionally, it is described to determine whether the user terminal is to act on behalf of it according to the first comparative result and the second comparative result
The step of user terminal of his user terminal online, specifically includes：
When determining user terminal to act on behalf of the user terminal of other users terminal online, and root according to the first comparative result
When determining user terminal not to act on behalf of the user terminal of other users terminal online according to the second comparative result, the use is finally determined
Family terminal is not the user terminal for acting on behalf of the online of other users terminal；
When according to the first comparative result determine user terminal be act on behalf of other users terminal online user terminal, or according to
Second comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user is whole
Hold to act on behalf of the user terminal of other users terminal online.
Optionally,
It is described according to the comparative result determine the user terminal whether be act on behalf of other users terminal online user
The step of terminal, specifically includes：
When the K unique mark is all like-identified, it is determined that user terminal is not to act on behalf of in other users terminal
The user terminal of net, or,
When there is different identification in the K unique mark, and all marks are different from, and determine that user terminal is not
The user terminal of other users terminal online is acted on behalf of, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
It is not present between mark with described two different marks of the like-identified repeated, it is determined that user terminal is not generation
The user terminal of other users terminal online is managed, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
Exist between mark with described two different marks of the like-identified repeated, it is determined that user terminal is to act on behalf of it
The user terminal of his user terminal online.
The embodiment of the present invention also provides a kind of device for identifying user agent's online, including：
Processing module is identified, for obtaining the unique of K user terminals that user terminal sends one by one in cycle T
Mark, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；
Comparison module, for determining the comparative result between the K unique marks arranged in order, wherein K is big
In 1 natural number；
Determining module, for determining whether the user terminal is to act on behalf of other users terminal according to the comparative result
The user terminal of net.
Optionally,
The unique mark is unique mark that the user terminal generates at random according to the plug-in unit obtained from anti-agent equipment
The unique mark that knowledge and/or the user terminal generate according to the font information of the operating system of the user terminal.
Optionally, processing module is identified, is specifically used for：
Obtain what the user terminal was sent one by one using the first browser corresponding to the first browser type in cycle T
The unique mark of the n user terminals, described n unique mark is arranged according to the sequencing for obtaining the n unique mark
Know；
Obtain what the user terminal was sent one by one using the second browser corresponding to the second browser type in cycle T
The unique mark of the m user terminals, described m unique mark is arranged according to the sequencing for obtaining the m unique mark
Know；
Optionally, described device also includes：Corresponding relation building module, for identifying first browser type, build
Found the n unique mark and the first corresponding relation of the first browser type；N is the natural number less than or equal to K；Described in identification
Second browser type, establish the second corresponding relation of the m unique mark and the second browser type；M is less than or equal to K
Natural number；
The comparison module is specifically used for：
Determine that first between the unique marks that the n arranges in order compares knot according to first corresponding relation
Fruit；
Determine that second between the unique marks that the m arranges in order compares knot according to second corresponding relation
Fruit；
The determining module is specifically used for：
Determine whether the user terminal is to act on behalf of other users terminal according to the first comparative result and the second comparative result
The user terminal of online.
Optionally, the corresponding relation building module, specifically for being given birth to according to the browser kernel font of the first browser
Business men title identifies first browser type, and establish the n unique mark with the first browser type first is corresponding
Relation；Second browser type is identified according to the browser kernel font manufacturer title of the second browser, establishes the m
Individual unique mark and the second corresponding relation of the second browser type.
Optionally,
The determining module is specifically used for：
When determining user terminal to act on behalf of the user terminal of other users terminal online, and root according to the first comparative result
When determining user terminal not to act on behalf of the user terminal of other users terminal online according to the second comparative result, the use is finally determined
Family terminal is not the user terminal for acting on behalf of the online of other users terminal；
When according to the first comparative result determine user terminal be act on behalf of other users terminal online user terminal, or according to
Second comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user is whole
Hold to act on behalf of the user terminal of other users terminal online.
Optionally, the determining module is specifically used for：
When the K unique mark is all like-identified, it is determined that user terminal is not to act on behalf of in other users terminal
The user terminal of net, or,
When there is different identification in the K unique mark, and all marks are different from, and determine that user terminal is not
The user terminal of other users terminal online is acted on behalf of, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
It is not present between mark with described two different marks of the like-identified repeated, it is determined that user terminal is not generation
The user terminal of other users terminal online is managed, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
Exist between mark with described two different marks of the like-identified repeated, it is determined that user terminal is to act on behalf of it
The user terminal of his user terminal online.
The beneficial effect of the embodiment of the present invention is：Described in K sent one by one in cycle T by obtaining user terminal
The unique mark of user terminal, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；It is determined that
Comparative result between the K unique marks arranged in order, wherein K are the natural number more than 1；Relatively tied according to described
Fruit determines whether the user terminal is the user terminal for acting on behalf of the online of other users terminal.Not only increase detection user terminal
The ability for acting on behalf of the online of other users terminal also reduces False Rate.
Brief description of the drawings
In order to illustrate the technical solution of the embodiments of the present invention more clearly, below will be in embodiment or description of the prior art
The required accompanying drawing used is briefly described, it should be apparent that, drawings in the following description are only some realities of the present invention
Example is applied, for those of ordinary skill in the art, on the premise of not paying creative work, can also be according to these accompanying drawings
Obtain other accompanying drawings.
Fig. 1 is the method flow diagram of one embodiment of the invention；
Fig. 2 is the method flow diagram of one embodiment of the invention；
Fig. 3 is the structure drawing of device of one embodiment of the invention；
Fig. 4 is the structure drawing of device of one embodiment of the invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete
Site preparation describes, it is clear that described embodiment is only part of the embodiment of the present invention, rather than whole embodiments.It is based on
Embodiment in the present invention, those of ordinary skill in the art are obtained every other under the premise of creative work is not made
Embodiment, belong to the scope of protection of the invention.
First embodiment of the invention provides a kind of method for identifying user agent's online, as shown in figure 1, including：
S101, the unique mark for the K user terminals that user terminal is sent one by one in cycle T is obtained,
S103, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；
S105, determines the comparative result between the K unique marks arranged in order, and wherein K is the nature more than 1
Number；
S107, according to the comparative result determine the user terminal whether be act on behalf of other users terminal online user
Terminal.
Optionally, the unique mark is what the user terminal generated at random according to the plug-in unit obtained from anti-agent equipment
The unique mark that unique mark and/or the user terminal generate according to the font information of the operating system of the user terminal.
Optionally, on the basis of first embodiment of the invention, in second embodiment of the invention, as shown in Fig. 2 described
Step S101 is specifically included：
Obtain what the user terminal was sent one by one using the first browser corresponding to the first browser type in cycle T
The unique mark of the n user terminals；
Obtain what the user terminal was sent one by one using the second browser corresponding to the second browser type in cycle T
The unique mark of the m user terminals；
Methods described also includes S1011：First browser type is identified, establishes the n unique mark and first
First corresponding relation of browser type；N is the natural number less than or equal to K；Second browser type is identified, described in foundation
M unique mark and the second corresponding relation of the second browser type；M is the natural number less than or equal to K；
The step S105 is specifically included：
Determine that first between the unique marks that the n arranges in order compares knot according to first corresponding relation
Fruit；
Determine that second between the unique marks that the m arranges in order compares knot according to second corresponding relation
Fruit；
The step S107 is specifically included：
Determine whether the user terminal is to act on behalf of other users terminal according to the first comparative result and the second comparative result
The user terminal of online.
Optionally, in third embodiment of the invention, in step S1011, identification first browser type
Step specifically includes：First browser type is identified according to the browser kernel font manufacturer title of the first browser；
The step of identification second browser type, specifically includes：According to the browser kernel word of the second browser
Body manufacturer title identifies second browser type.
Optionally, on the basis of second embodiment of the invention, in fourth embodiment of the invention, step S107 is specifically wrapped
Include：
When determining user terminal to act on behalf of the user terminal of other users terminal online, and root according to the first comparative result
When determining user terminal not to act on behalf of the user terminal of other users terminal online according to the second comparative result, the use is finally determined
Family terminal is not the user terminal for acting on behalf of the online of other users terminal；
When according to the first comparative result determine user terminal be act on behalf of other users terminal online user terminal, or according to
Second comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user is whole
Hold to act on behalf of the user terminal of other users terminal online.
Optionally, on the basis of first embodiment of the invention, in fifth embodiment of the invention,
Step S107 is specifically included：
When the K unique mark is all like-identified, it is determined that user terminal is not to act on behalf of in other users terminal
The user terminal of net, or,
When there is different identification in the K unique mark, and all marks are different from, and determine that user terminal is not
The user terminal of other users terminal online is acted on behalf of, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
It is not present between mark with described two different marks of the like-identified repeated, it is determined that user terminal is not generation
The user terminal of other users terminal online is managed, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
Exist between mark with described two different marks of the like-identified repeated, it is determined that user terminal is to act on behalf of it
The user terminal of his user terminal online.
The beneficial effect of the embodiment of the present invention is：Not only increase detection user terminal and act on behalf of the online of other users terminal
Ability also reduce False Rate.
Sixth embodiment of the invention also provides a kind of device for identifying user agent's online, as shown in figure 3, including：
Processing module 201 is identified, the K user terminals sent one by one in cycle T for obtaining user terminal
Unique mark, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；
Comparison module 203, for determining the comparative result between the K unique marks arranged in order, wherein K is
Natural number more than 1；
Determining module 205, for determining whether the user terminal is to act on behalf of other users end according to the comparative result
Hold the user terminal of online.
Optionally,
The unique mark is unique mark that the user terminal generates at random according to the plug-in unit obtained from anti-agent equipment
The unique mark that knowledge and/or the user terminal generate according to the font information of the operating system of the user terminal.
Optionally, on the basis of sixth embodiment of the invention, in seventh embodiment of the invention, as shown in figure 4, at mark
Module 201 is managed, is specifically used for：
Obtain what the user terminal was sent one by one using the first browser corresponding to the first browser type in cycle T
The unique mark of the n user terminals, described n unique mark is arranged according to the sequencing for obtaining the n unique mark
Know；
Obtain what the user terminal was sent one by one using the second browser corresponding to the second browser type in cycle T
The unique mark of the m user terminals, described m unique mark is arranged according to the sequencing for obtaining the m unique mark
Know；
Described device also includes：Corresponding relation building module 207, for identifying first browser type, establish institute
State the first corresponding relation of n unique mark and the first browser type；N is the natural number less than or equal to K；Identify described second
Browser type, establish the second corresponding relation of the m unique mark and the second browser type；M be less than or equal to K from
So number；
The comparison module 203 is specifically used for：
Determine that first between the unique marks that the n arranges in order compares knot according to first corresponding relation
Fruit；
Determine that second between the unique marks that the m arranges in order compares knot according to second corresponding relation
Fruit；
The determining module 205 is specifically used for：
Determine whether the user terminal is to act on behalf of other users terminal according to the first comparative result and the second comparative result
The user terminal of online.
Optionally, the corresponding relation building module 207, specifically for the browser kernel font according to the first browser
Manufacturer's title identifies first browser type, the first couple for establishing the n unique mark and the first browser type
It should be related to；Second browser type is identified according to the browser kernel font manufacturer title of the second browser, establishes institute
State the second corresponding relation of m unique mark and the second browser type.
Optionally, on the basis of seventh embodiment of the invention, in eighth embodiment of the invention,
The determining module 205 is specifically used for：
When determining user terminal to act on behalf of the user terminal of other users terminal online, and root according to the first comparative result
When determining user terminal not to act on behalf of the user terminal of other users terminal online according to the second comparative result, the use is finally determined
Family terminal is not the user terminal for acting on behalf of the online of other users terminal；
When according to the first comparative result determine user terminal be act on behalf of other users terminal online user terminal, or according to
Second comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user is whole
Hold to act on behalf of the user terminal of other users terminal online.
Optionally, on the basis of sixth embodiment of the invention, in ninth embodiment of the invention, the determining module
205 are specifically used for：
When the K unique mark is all like-identified, it is determined that user terminal is not to act on behalf of in other users terminal
The user terminal of net, or,
When there is different identification in the K unique mark, and all marks are different from, and determine that user terminal is not
The user terminal of other users terminal online is acted on behalf of, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
It is not present between mark with described two different marks of the like-identified repeated, it is determined that user terminal is not generation
The user terminal of other users terminal online is managed, or,
When having different identification in the K unique mark, and there is the like-identified repeated, two phases repeated
Exist between mark with described two different marks of the like-identified repeated, it is determined that user terminal is to act on behalf of it
The user terminal of his user terminal online.
The beneficial effect of the embodiment of the present invention is：Not only increase detection user terminal and act on behalf of the online of other users terminal
Ability also reduce False Rate.
The present invention is the flow with reference to method according to embodiments of the present invention, equipment (system) and computer program product
Figure and/or block diagram describe.It should be understood that can be by every first-class in computer program instructions implementation process figure and/or block diagram
Journey and/or the flow in square frame and flow chart and/or block diagram and/or the combination of square frame.These computer programs can be provided
The processors of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce
A raw machine so that produced by the instruction of computer or the computing device of other programmable data processing devices for real
The device for the function of being specified in present one flow of flow chart or one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions, which may be alternatively stored in, can guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which produces, to be included referring to
Make the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one square frame of block diagram or
The function of being specified in multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that counted
Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, so as in computer or
The instruction performed on other programmable devices is provided for realizing in one flow of flow chart or multiple flows and/or block diagram one
The step of function of being specified in individual square frame or multiple square frames.
Finally it should be noted that：The above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations；Although
The present invention is described in detail with reference to the foregoing embodiments, it will be understood by those within the art that：It still may be used
To be modified to the technical scheme described in foregoing embodiments, or equivalent substitution is carried out to which part technical characteristic；
And these modification or replace, do not make appropriate technical solution essence depart from various embodiments of the present invention technical scheme spirit and
Scope.
Claims (12)
- A kind of 1. method for identifying user agent's online, it is characterised in that including：The unique mark for the K user terminals that user terminal is sent one by one in cycle T is obtained, it is described K according to obtaining The sequencing of unique mark arranges the K unique mark；The comparative result between the K unique marks arranged in order is determined, wherein K is the natural number more than 1；According to the comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal.
- 2. the method as described in claim 1, it is characterised in that：The unique mark be the unique mark that is generated at random according to the plug-in unit obtained from anti-agent equipment of the user terminal with/ Or the unique mark that the user terminal generates according to the font information of the operating system of the user terminal.
- 3. the method as described in claim 1, it is characterised in that：The unique mark for obtaining the K user terminals that user terminal is sent one by one in cycle T includes：Obtain n that the user terminal is sent one by one using the first browser corresponding to the first browser type in cycle T The unique mark of the user terminal；Obtain m that the user terminal is sent one by one using the second browser corresponding to the second browser type in cycle T The unique mark of the user terminal；Methods described also includes：First browser type is identified, establishes the n unique mark and the first browser type The first corresponding relation；N is the natural number less than or equal to K；Second browser type is identified, establishes the m unique marks Know the second corresponding relation with the second browser type；M is the natural number less than or equal to K；It is described determine between the K unique marks arranged in order comparative result the step of specifically include：The first comparative result between the n unique marks arranged in order is determined according to first corresponding relation；The second comparative result between the m unique marks arranged in order is determined according to second corresponding relation；It is described according to comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal step Suddenly specifically include：Determine whether the user terminal is to act on behalf of the online of other users terminal according to the first comparative result and the second comparative result User terminal.
- 4. method as claimed in claim 3, it is characterised in that：The step of identification first browser type, specifically includes：Given birth to according to the browser kernel font of the first browser Business men title identifies first browser type；The step of identification second browser type, specifically includes：Given birth to according to the browser kernel font of the second browser Business men title identifies second browser type.
- 5. method as claimed in claim 3, it is characterised in that：It is described to determine whether the user terminal is to act on behalf of other users terminal according to the first comparative result and the second comparative result The step of user terminal of online, specifically includes：When determining user terminal to act on behalf of the user terminal of other users terminal online, and according to the according to the first comparative result When two comparative results determine user terminal not to act on behalf of the user terminal of other users terminal online, finally determine that the user is whole End is not the user terminal for acting on behalf of the online of other users terminal；When determining that user terminal is the user terminal of acting on behalf of the online of other users terminal according to the first comparative result, or according to second Comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user terminal is Act on behalf of the user terminal of other users terminal online.
- 6. the method as described in claim 1, it is characterised in thatIt is described according to the comparative result determine the user terminal whether be act on behalf of other users terminal online user terminal The step of specifically include：When the K unique mark is all like-identified, it is determined that what user terminal was not surfed the Net to act on behalf of other users terminal User terminal, or,When there is different identification in the K unique mark, and all marks are different from, and it is not agency to determine user terminal The user terminal of other users terminal online, or,When having different identification in the K unique mark, and there is the like-identified repeated, two identical marks repeated It is not present between knowledge with described two different marks of the like-identified repeated, it is determined that user terminal is not to act on behalf of it The user terminal of his user terminal online, or,When having different identification in the K unique mark, and there is the like-identified repeated, two identical marks repeated Exist between knowledge with described two different marks of the like-identified repeated, it is determined that user terminal is used to act on behalf of other The user terminal of family terminal online.
- A kind of 7. device for identifying user agent's online, it is characterised in that including：Processing module is identified, unique mark of the K user terminals sent one by one in cycle T for obtaining user terminal Know, the K unique mark is arranged according to the sequencing for obtaining the K unique mark；Comparison module, for determining the comparative result between the K unique marks arranged in order, wherein K is more than 1 Natural number；Determining module, for determining whether the user terminal is to act on behalf of what other users terminal was surfed the Net according to the comparative result User terminal.
- 8. device as claimed in claim 7, it is characterised in that：The unique mark be the unique mark that is generated at random according to the plug-in unit obtained from anti-agent equipment of the user terminal with/ Or the unique mark that the user terminal generates according to the font information of the operating system of the user terminal.
- 9. device as claimed in claim 7, it is characterised in that：Processing module is identified, is specifically used for：Obtain n that the user terminal is sent one by one using the first browser corresponding to the first browser type in cycle T The unique mark of the user terminal, the n unique mark is arranged according to the sequencing for obtaining the n unique mark；Obtain m that the user terminal is sent one by one using the second browser corresponding to the second browser type in cycle T The unique mark of the user terminal, the m unique mark is arranged according to the sequencing for obtaining the m unique mark；Described device also includes：Corresponding relation building module, for identifying first browser type, establish the n only One mark and the first corresponding relation of the first browser type；N is the natural number less than or equal to K；Identify second browser Type, establish the second corresponding relation of the m unique mark and the second browser type；M is the natural number less than or equal to K；The comparison module is specifically used for：The first comparative result between the n unique marks arranged in order is determined according to first corresponding relation；The second comparative result between the m unique marks arranged in order is determined according to second corresponding relation；The determining module is specifically used for：Determine whether the user terminal is to act on behalf of the online of other users terminal according to the first comparative result and the second comparative result User terminal.
- 10. device as claimed in claim 9, it is characterised in that：The corresponding relation building module, specifically for being identified according to the browser kernel font manufacturer title of the first browser First browser type, establish the first corresponding relation of the n unique mark and the first browser type；According to second The browser kernel font manufacturer title of browser identifies second browser type, establish the m unique mark and Second corresponding relation of the second browser type.
- 11. device as claimed in claim 9, it is characterised in that：The determining module is specifically used for：When determining user terminal to act on behalf of the user terminal of other users terminal online, and according to the according to the first comparative result When two comparative results determine user terminal not to act on behalf of the user terminal of other users terminal online, finally determine that the user is whole End is not the user terminal for acting on behalf of the online of other users terminal；When determining that user terminal is the user terminal of acting on behalf of the online of other users terminal according to the first comparative result, or according to second Comparative result determines that user terminal is when acting on behalf of the user terminal of other users terminal online, finally to determine that the user terminal is Act on behalf of the user terminal of other users terminal online.
- 12. device as claimed in claim 7, it is characterised in thatThe determining module is specifically used for：When the K unique mark is all like-identified, it is determined that what user terminal was not surfed the Net to act on behalf of other users terminal User terminal, or,When there is different identification in the K unique mark, and all marks are different from, and it is not agency to determine user terminal The user terminal of other users terminal online, or,When having different identification in the K unique mark, and there is the like-identified repeated, two identical marks repeated It is not present between knowledge with described two different marks of the like-identified repeated, it is determined that user terminal is not to act on behalf of it The user terminal of his user terminal online, or,When having different identification in the K unique mark, and there is the like-identified repeated, two identical marks repeated Exist between knowledge with described two different marks of the like-identified repeated, it is determined that user terminal is used to act on behalf of other The user terminal of family terminal online.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711285741.9A CN107769999B (en) | 2017-12-07 | 2017-12-07 | Method and device for identifying user agent internet surfing |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711285741.9A CN107769999B (en) | 2017-12-07 | 2017-12-07 | Method and device for identifying user agent internet surfing |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107769999A true CN107769999A (en) | 2018-03-06 |
| CN107769999B CN107769999B (en) | 2020-09-25 |
Family
ID=61277382
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711285741.9A Active CN107769999B (en) | 2017-12-07 | 2017-12-07 | Method and device for identifying user agent internet surfing |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107769999B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20100097474A (en) * | 2009-02-26 | 2010-09-03 | 조재익 | A method for detecting prohibited terminals when using proxy server |
| CN101980477A (en) * | 2010-10-09 | 2011-02-23 | 北京星网锐捷网络技术有限公司 | Method and device for detecting number of shadow users, and network equipment |
| CN103986616A (en) * | 2014-04-15 | 2014-08-13 | 深信服网络科技（深圳）有限公司 | Method and device for recognizing number of machines having access to internet through proxy |
| CN104363265A (en) * | 2014-10-23 | 2015-02-18 | 深信服网络科技（深圳）有限公司 | Proxy internet surfing detecting method and proxy internet surfing detecting device |
| CN106789413A (en) * | 2016-12-10 | 2017-05-31 | 锐捷网络股份有限公司 | A kind of method and apparatus for detecting proxy surfing |
-
2017
- 2017-12-07 CN CN201711285741.9A patent/CN107769999B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20100097474A (en) * | 2009-02-26 | 2010-09-03 | 조재익 | A method for detecting prohibited terminals when using proxy server |
| CN101980477A (en) * | 2010-10-09 | 2011-02-23 | 北京星网锐捷网络技术有限公司 | Method and device for detecting number of shadow users, and network equipment |
| CN103986616A (en) * | 2014-04-15 | 2014-08-13 | 深信服网络科技（深圳）有限公司 | Method and device for recognizing number of machines having access to internet through proxy |
| CN104363265A (en) * | 2014-10-23 | 2015-02-18 | 深信服网络科技（深圳）有限公司 | Proxy internet surfing detecting method and proxy internet surfing detecting device |
| CN106789413A (en) * | 2016-12-10 | 2017-05-31 | 锐捷网络股份有限公司 | A kind of method and apparatus for detecting proxy surfing |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107769999B (en) | 2020-09-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9870470B2 (en) | Method and apparatus for detecting a multi-stage event | |
| CN106713241B (en) | A kind of auth method, device and system | |
| CN113098870A (en) | Phishing detection method and device, electronic equipment and storage medium | |
| CN103593609B (en) | Trustworthy behavior recognition method and device | |
| CN103368957B (en) | Method and system that web page access behavior is processed, client, server | |
| WO2014012500A1 (en) | Method and device for processing messages | |
| CN106911514A (en) | SCADA network inbreak detection methods and system based on the agreements of IEC60870 5 104 | |
| CN104091140B (en) | A kind of information processing method and electronic equipment | |
| CN110933103A (en) | Anti-crawler method, device, equipment and medium | |
| CN105245489B (en) | Verification method and device | |
| CN106850687A (en) | Method and apparatus for detecting network attack | |
| CN107168844B (en) | Performance monitoring method and device | |
| CN208128283U (en) | Information security of computer network monitor system | |
| CN112307464A (en) | Fraud identification method and device and electronic equipment | |
| CN106789973B (en) | Page security detection method and terminal equipment | |
| CN107508746A (en) | Good friend's adding method, device and electronic equipment | |
| CN106161373A (en) | A kind of security protection information cuing method, safety monitoring device and system | |
| CN108595957A (en) | Main browser page altering detecting method, device and storage medium | |
| CN107995167B (en) | Equipment identification method and server | |
| CN107769999A (en) | A kind of method and apparatus for identifying user agent's online | |
| CN114257451B (en) | Verification interface replacement method and device, storage medium and computer equipment | |
| CN110266727A (en) | Recognition methods, server and the client of simulation browser behavior | |
| CN115603995A (en) | Information processing method, device, equipment and computer readable storage medium | |
| CN112565269B (en) | Method and device for detecting back door flow of server, electronic equipment and storage medium | |
| EP3885945A1 (en) | Method of monitoring and protecting access to an online service |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |