CN108009844A - Determine the method, apparatus and Cloud Server of advertisement cheating - Google Patents

Determine the method, apparatus and Cloud Server of advertisement cheating Download PDF

Info

Publication number
CN108009844A
CN108009844A CN201711160918.2A CN201711160918A CN108009844A CN 108009844 A CN108009844 A CN 108009844A CN 201711160918 A CN201711160918 A CN 201711160918A CN 108009844 A CN108009844 A CN 108009844A
Authority
CN
China
Prior art keywords
advertisement
cheating
information
terminal
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201711160918.2A
Other languages
Chinese (zh)
Other versions
CN108009844B (en
Inventor
穆音凯
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Suzhou Lifeng Zhilian Technology Co.,Ltd.
Original Assignee
Beijing Zhi Key Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Zhi Key Technology Co Ltd filed Critical Beijing Zhi Key Technology Co Ltd
Priority to CN201711160918.2A priority Critical patent/CN108009844B/en
Publication of CN108009844A publication Critical patent/CN108009844A/en
Application granted granted Critical
Publication of CN108009844B publication Critical patent/CN108009844B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/02—Marketing; Price estimation or determination; Fundraising
    • G06Q30/0241—Advertisements
    • G06Q30/0248—Avoiding fraud
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90—Details of database functions independent of the retrieved data types
    • G06F16/95—Retrieval from the web
    • G06F16/951—Indexing; Web crawling techniques
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/02—Marketing; Price estimation or determination; Fundraising
    • G06Q30/0241—Advertisements
    • G06Q30/0251—Targeted advertisements
    • G06Q30/0261—Targeted advertisements based on user location

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Development Economics (AREA)
  • Strategic Management (AREA)
  • Finance (AREA)
  • Theoretical Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Game Theory and Decision Science (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Databases & Information Systems (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • General Business, Economics & Management (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Mining & Analysis (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The invention discloses a kind of method, apparatus and Cloud Server of definite advertisement cheating, it is related to technical field of advertisement, it can realize and be analyzed based on the corresponding telecom operation quotient data of advertisement behavior to determine whether there are advertisement cheating, the accuracy that advertisement cheating is analyzed can be improved.Wherein method includes：Obtain the corresponding telecom operation quotient data of advertisement behavior；Check analysis are carried out from telecom operators' extracting data characteristic corresponding with default verification rule, and with reference to the default verification rule；According to the check analysis under different default verification rules as a result, determining whether there is advertisement cheating.The present invention is suitable for ad campaign analysis.

Description

Determine the method, apparatus and Cloud Server of advertisement cheating
Technical field
The present invention relates to technical field of advertisement, more particularly to a kind of method, apparatus and cloud of definite advertisement cheating Server.
Background technology
With the development of information technology (Information Technology, IT) and intelligent terminal, advertising sector and letter The combination of breath technology, the market scale of internet online advertisement industry is increasing, in addition to showing series advertisements, other according to Family signature analysis, which carries out different audients the behaviors such as consumption recommendation, commercial activity guiding, should also belong to online advertisement behavior.Online Advertisement with it is various informative, it is accurate matching, pay according to quantity the advantages that, welcome be subject to advertiser, but online advertising system is related to The link arrived is more and more, and advertiser is difficult that advertising results are made with objective and accurate evaluation, therefore mass advertising work occurs The phenomenon of disadvantage.Faked by flow, program virtual operation the methods of pretend to be normal manual operation, gain advertising expenditure by cheating, some are wide Data accounting is palmed off in announcement business and reaches more than 80%, very big loss is caused to advertiser.
Practise fraud in order to prevent, reduce loss, advertiser can utilize the ad data and row that advertising platform is collected at present To carry out analysis judgement to advertising campaign, the sham publicity activity for simulation normal person's operation is assessed whether.It can specifically be based on The terminal data of the advertisement behavior user collected carries out discriminating whether that there are advertisement cheating.However, the control of terminal Not in this side of advertiser, end message can be arbitrarily forged after obtaining the control of terminal, while current security software is increasingly It is more, the authority of advertising platform reading terminals information is limited, therefore it is easy to situation about judging by accident occur, and then have impact on advertisement work The accuracy of disadvantage behavioural analysis.
The content of the invention
In view of this, the present invention provides a kind of method, apparatus and Cloud Server of definite advertisement cheating, main mesh Be solve the control of current terminal not in this side of advertiser, can arbitrarily forge terminal letter after obtaining the control of terminal Breath, while security software is more and more at present, limits the authority of advertising platform reading terminals information, therefore be easy to miss Situation about sentencing, and then the problem of have impact on advertisement cheating precision of analysis.
According to one aspect of the invention, there is provided a kind of method of definite advertisement cheating, this method include：
Obtain the corresponding telecom operation quotient data of advertisement behavior；
From telecom operators' extracting data characteristic corresponding with default verification rule, and with reference to described default Verification rule carries out check analysis；
According to the check analysis under different default verification rules as a result, determining whether there is advertisement cheating.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
When accessing telecom operators' service equipment from the user terminal of telecom operators' extracting data advertisement behavior Terminal access position information, and corresponding turn-on time information；
According to the terminal access position information and the turn-on time information, detect in scheduled duration with the presence or absence of shifting Dynamic scope is less than the customer mobile terminal of preset range threshold value, and the customer mobile terminal has the multiple and different advertisement rows of access For；And/or
Detect whether the identical multiple customer mobile terminals of existence position variation track；
If it is detected that there are the identical multiple customer mobile terminals in the change in location track, and/or in scheduled duration There are during the customer mobile terminal, it is determined that there are advertising campaign abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the user terminal internet records inventory information of telecom operators' extracting data advertisement behavior；
According to the internet records inventory information, in statistics preset time period and/or the advertisement behavior in the unit interval User terminal accounting of the access ad traffic in all flows；
Detect whether accounting of the access ad traffic in all flows is more than default accounting threshold value；
If, it is determined that there are advertising campaign abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the user terminal surfing flow Detailed log information of telecom operators' extracting data advertisement behavior；
According to the surfing flow Detailed log information, detection advertisement access to web page record is front and rear to be whether there is and advertising page phase Associated website or the flow information of application；
If it is not present, it is determined that there are advertising campaign abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the terminal identification information of the user terminal of telecom operators' extracting data advertisement behavior；
According to the terminal identification information, the end message of the user terminal of inquiry advertisement behavior, the terminating packet Include but be not limited to model information, time of making the product information, place of production information, batch information of dispatching from the factory；
Detect whether there are the cheating terminal of multiple same or similar end messages, and the quantity of the cheating terminal is more than Preset number threshold value；
If in the presence of, it is determined that there are advertising campaign abnormal behaviour.
Preferably, if it is described in the presence of, it is determined that before advertising campaign abnormal behaviour, the method further includes：
From the access telecom operators service equipment of the user terminal of telecom operators' extracting data advertisement behavior When terminal access position information, and corresponding turn-on time information；
If it is described in the presence of, it is determined that there are advertising campaign abnormal behaviour, specifically include：
If there are multiple cheating terminals, with reference to the terminal access position information and the turn-on time information, Synthesis determines whether there is advertising campaign abnormal behaviour.
Preferably, it is if described there are multiple cheating terminals, with reference to the terminal access position information and described connect Angle of incidence information, synthesis determine whether there is advertising campaign abnormal behaviour, specifically include：
If there are multiple cheating terminals of same or similar end message in the terminal of same advertising campaign, and it is the multiple The terminal access position information of cheating terminal is in the range of same position, and the turn-on time information of the multiple cheating terminal In same time range, it is determined that there are advertising campaign abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the international mobile equipment identification number IMEI of the user terminal of telecom operators' extracting data advertisement behavior Code or MAC Address, and service number information；
Detect the IMEI code or MAC Address, the service number information register whether uniquely on network；And/or
Detect whether the IMEI code or the MAC Address corresponding service number conversion quantity in preset time period are more than in advance If threshold value；And/or
IMEI code or MAC of the detection service number corresponding with the IMEI code or MAC Address in preset time period Whether location conversion quantity is more than predetermined threshold；And/or
Detect the IMEI code of the IMEI code or MAC Address and the advertisement behavior terminal being collected into from terminal data Or whether MAC Address is consistent；
If it is detected that inconsistent, and/or the equipment unique identification information and the service number information are noted on network Volume is not unique, and/or service number conversion quantity is more than predetermined threshold value, and/or the IMEI code or MAC Address conversion number Amount is more than predetermined threshold value, it is determined that there are advertising campaign abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the subscriber information message of telecom operators' extracting data advertisement behavior；
According to the subscriber information message, detection carries out advertising campaign number is more than the advertisement behavior user of predetermined threshold value No is server user；And/or
If the advertisement behavior user for same IP address or close IP address occur carries out same advertising campaign number more than pre- Frequency threshold value is put, then according to the subscriber information message, the advertisement behavior for detecting the same IP address or close IP address is used Whether family is collective Internet user；And/or
According to the subscriber information message, whether the advertisement behavior user of the same advertisement of test access is same user or opens Family time interval is less than the user of predetermined space threshold value；And/or
According to the subscriber information message, whether the advertisement behavior user of the same advertisement of test access is the user that registers on the net Title is close or enters user similar in net address；
It is server user when detecting the progress advertising campaign number more than the advertisement behavior user of predetermined threshold value, And/or the advertisement behavior user of the same IP address or close IP address is not collective Internet user, and/or access same wide The advertisement behavior user of announcement is less than the user of predetermined space threshold value for same user or time interval of opening an account, and/or accesses same The advertisement behavior user of advertisement is close or when entering user similar in net address for user's name of registering on the net, and determines that there are advertisement work Dynamic abnormal behaviour.
Preferably, from telecom operators' extracting data characteristic corresponding with default verification rule, and combine The default verification rule carries out check analysis, specifically includes：
From the communication activity information of telecom operators' extracting data advertisement behavior, the communication activity information includes But it is not limited to average networking duration information, average call duration information, average communication services consumption information；
According to the communication activity information, whether the communication activity of detection advertisement behavior there is exception；
If, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the check analysis according under different default verification rules are as a result, determine whether there is advertisement cheating Behavior, specifically includes：
Corresponding weight is respectively configured for the check analysis result under different default verification rules；
Calculate the corresponding score value of check analysis result under different default verification rules；
Each single item score value is multiplied by corresponding weight, and is added and averages；
The average value is compared with preset standard value；
If the gap between the average value and preset standard value is more than predetermined threshold, it is determined that there are advertisement cheating to go For.
Preferably, the check analysis according under different default verification rules are as a result, determine whether there is advertisement cheating Behavior, specifically includes：
According to the check analysis under different default verification rules as a result, obtaining the check analysis knot of advertising campaign abnormal behaviour The accounting of fruit；
Detect whether the accounting is more than preset ratio threshold value；
If, it is determined that there are advertisement cheating.
Preferably, it is described to determine that the method further includes there are after advertisement cheating：
Obtain the advertising message there are advertisement cheating, and corresponding cheating user and/or cheating end message；
The cheating user and/or cheating end message are stored in blacklist；And
According to described there are the advertising message of advertisement cheating, the cheating user and cheating end message, generation is extensively Accuse the analysis report information of cheating activity.
Preferably, the method further includes：
Count the cheating user and/or the corresponding positional information of cheating end message, and historical movement path information；
According to described there are the advertising message of advertisement cheating, the cheating user and cheating end message, generation is extensively The analysis report information of cheating activity is accused, is specifically included：
According to described there are the advertising message of advertisement cheating, the cheating user and cheating end message, with reference to institute Positional information and the historical movement path information are stated, generates the analysis report information of advertisement cheating activity.
According to another aspect of the invention, there is provided a kind of device of definite advertisement cheating, the device include：
Acquiring unit, for obtaining the corresponding telecom operation quotient data of advertisement behavior；
Analytic unit, for from telecom operators' extracting data and the corresponding characteristic of default verification rule, And carry out check analysis with reference to the default verification rule；
Determination unit, for being made according to the check analysis under different default verification rules as a result, determining whether there is advertisement Disadvantage behavior.
Preferably, the analytic unit, specifically for the user from telecom operators' extracting data advertisement behavior Terminal accesses terminal access position information during telecom operators' service equipment, and corresponding turn-on time information；
According to the terminal access position information and the turn-on time information, detect in scheduled duration with the presence or absence of shifting Dynamic scope is less than the customer mobile terminal of preset range threshold value, and the customer mobile terminal has the multiple and different advertisement rows of access For；And/or
Detect whether the identical multiple customer mobile terminals of existence position variation track；
If it is detected that there are the identical multiple customer mobile terminals in the change in location track, and/or in scheduled duration There are during the customer mobile terminal, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the analytic unit, specifically for the user from telecom operators' extracting data advertisement behavior The internet records inventory information of terminal；
According to the internet records inventory information, in statistics preset time period and/or the advertisement behavior in the unit interval User terminal accounting of the access ad traffic in all flows；
Detect whether accounting of the access ad traffic in all flows is more than default accounting threshold value；
If, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the analytic unit, specifically for the user from telecom operators' extracting data advertisement behavior Terminal surfing flow Detailed log information；
According to the surfing flow Detailed log information, detection advertisement access to web page record is front and rear to be whether there is and advertising page phase Associated website or the flow information of application；
If it is not present, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the analytic unit, specifically for the user from telecom operators' extracting data advertisement behavior The terminal identification information of terminal；
According to the terminal identification information, the end message of the user terminal of inquiry advertisement behavior, the terminating packet Include but be not limited to model information, time of making the product information, place of production information, batch information of dispatching from the factory；
Detect whether there are the cheating terminal of multiple same or similar end messages, and the quantity of the cheating terminal is more than Preset number threshold value；
If in the presence of, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the analytic unit, is specifically additionally operable to the use from telecom operators' extracting data advertisement behavior Terminal access position information during access telecom operators' service equipment of family terminal, and corresponding turn-on time information；
If there are multiple cheating terminals, with reference to the terminal access position information and the turn-on time information, Synthesis determines whether there is advertising campaign abnormal behaviour.
Preferably, the analytic unit, if being specifically additionally operable in the terminal of same advertising campaign, there are same or similar end Multiple cheating terminals of client information, and the terminal access position information of the multiple cheating terminal is in the range of same position, And the turn-on time information of the multiple cheating terminal is in same time range, it is determined that there are advertising campaign exception row For.
Preferably, the analytic unit, is specifically additionally operable to the use from telecom operators' extracting data advertisement behavior The international mobile equipment identification number IMEI code or MAC Address of family terminal, and service number information；
Detect the IMEI code or MAC Address, the service number information register whether uniquely on network；And/or
Detect whether the IMEI code or the MAC Address corresponding service number conversion quantity in preset time period are more than in advance If threshold value；And/or
IMEI code or MAC of the detection service number corresponding with the IMEI code or MAC Address in preset time period Whether location conversion quantity is more than predetermined threshold；And/or
Detect the IMEI code of the IMEI code or MAC Address and the advertisement behavior terminal being collected into from terminal data Or whether MAC Address is consistent；
If it is detected that inconsistent, and/or the IMEI code or MAC Address register not unique, and/or clothes on network Business FH-number transform quantity is more than predetermined threshold value, and/or the IMEI code or MAC Address conversion quantity are more than predetermined threshold value, then really Surely there are advertising campaign abnormal behaviour.
Preferably, the analytic unit, is specifically additionally operable to the use from telecom operators' extracting data advertisement behavior Family data information；
According to the subscriber information message, detection carries out advertising campaign number is more than the advertisement behavior user of predetermined threshold value No is server user；And/or
If the advertisement behavior user for same IP address or close IP address occur carries out same advertising campaign number more than pre- Frequency threshold value is put, then according to the subscriber information message, the advertisement behavior for detecting the same IP address or close IP address is used Whether family is collective Internet user；And/or
According to the subscriber information message, whether the advertisement behavior user of the same advertisement of test access is same user or opens Family time interval is less than the user of predetermined space threshold value；And/or
According to the subscriber information message, whether the advertisement behavior user of the same advertisement of test access is the user that registers on the net Title is close or enters user similar in net address；
It is server user when detecting the progress advertising campaign number more than the advertisement behavior user of predetermined threshold value, And/or the advertisement behavior user of the same IP address or close IP address is not collective Internet user, and/or access same wide The advertisement behavior user of announcement is less than the user of predetermined space threshold value for same user or time interval of opening an account, and/or accesses same The advertisement behavior user of advertisement is close or when entering user similar in net address for user's name of registering on the net, and determines that there are advertisement work Dynamic abnormal behaviour.
Preferably, the analytic unit, is specifically additionally operable to from the logical of telecom operators' extracting data advertisement behavior Believe action message, the communication activity information includes but not limited to averagely networking duration information, average call duration information, average Communication service consumption information；
According to the communication activity information, whether the communication activity of detection advertisement behavior there is exception；
If, it is determined that there are advertising campaign abnormal behaviour.
Preferably, the determination unit, specifically for matching somebody with somebody respectively for the check analysis result under different default verification rules Put corresponding weight；
Calculate the corresponding score value of check analysis result under different default verification rules；
Each single item score value is multiplied by corresponding weight, and is added and averages；
The average value is compared with preset standard value；
If the gap between the average value and preset standard value is more than predetermined threshold, it is determined that there are advertisement cheating to go For.
Preferably, the determination unit, specifically for presetting the check analysis verified under rule as a result, obtaining according to different The accounting of the check analysis result of advertising campaign abnormal behaviour；
Detect whether the accounting is more than preset ratio threshold value；
If, it is determined that there are advertisement cheating.
Preferably, described device further includes：Storage unit and generation unit；
The acquiring unit, is additionally operable to obtain the advertising message there are advertisement cheating, and the user that practises fraud accordingly And/or cheating end message；
Storage unit, for the cheating user and/or cheating end message to be stored in blacklist；
Generation unit, for according to advertising message, the cheating user and the cheating there are advertisement cheating eventually Client information, generates the analysis report information of advertisement cheating activity.
Preferably, described device further includes：Statistic unit；
Statistic unit, for counting the cheating user and/or the corresponding positional information of cheating end message, and history Motion track information；
Generation unit, specifically for according to advertising message, the cheating user and the work there are advertisement cheating Disadvantage end message, with reference to the positional information and the historical movement path information, the analysis report of generation advertisement cheating activity Information.
According to another aspect of the present invention, there is provided a kind of storage device, is stored thereon with computer program, the program quilt The method that processor realizes above-mentioned definite advertisement cheating when performing.
According to another aspect of the present invention, there is provided a kind of Cloud Server, including storage device, processor and be stored in The computer program that can be run in equipment and on a processor is stored up, the processor realizes above-mentioned determine extensively when performing described program The method for accusing cheating.
By above-mentioned technical proposal, a kind of method, apparatus of definite advertisement cheating provided by the invention and cloud service Device, carries out discriminating whether the mode phase there are advertisement cheating with being currently based on the click advertising user terminal data collected Than the present invention can be analyzed based on the corresponding telecom operation quotient data of advertisement behavior to determine whether there are advertisement cheating row Since telecom operation quotient data comes from non-basic interests affiliated party, will not arbitrarily to forge end message, therefore data compare Accurately, and then method using the present invention can improve the accuracy of advertisement cheating analysis, and when need not extend one section Between settle accounts advertising expenditure again to see whether for advertisement cheating, can quickly analyze advertising campaign, it is wide to accelerate clearing The announcement phase.
Described above is only the general introduction of technical solution of the present invention, in order to better understand the technological means of the present invention, And can be practiced according to the content of specification, and in order to allow above and other objects of the present invention, feature and advantage can Become apparent, below especially exemplified by the embodiment of the present invention.
Brief description of the drawings
By reading the detailed description of hereafter preferred embodiment, it is various other the advantages of and benefit it is common for this area Technical staff will be clear understanding.Attached drawing is only used for showing the purpose of preferred embodiment, and is not considered as to the present invention Limitation.And in whole attached drawing, identical component is denoted by the same reference numerals.In the accompanying drawings：
Fig. 1 shows a kind of flow diagram of the method for definite advertisement cheating provided in an embodiment of the present invention；
Fig. 2 shows a kind of virtual architecture signal of the device of definite advertisement cheating provided in an embodiment of the present invention Figure；
Fig. 3 shows the virtual architecture signal of the device of another definite advertisement cheating provided in an embodiment of the present invention Figure；
Fig. 4 shows a kind of entity structure schematic diagram of Cloud Server provided in an embodiment of the present invention.
Embodiment
The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although the disclosure is shown in attached drawing Exemplary embodiment, it being understood, however, that may be realized in various forms the disclosure without should be by embodiments set forth here Limited.On the contrary, these embodiments are provided to facilitate a more thoroughly understanding of the present invention, and can be by the scope of the present disclosure Completely it is communicated to those skilled in the art.
An embodiment of the present invention provides a kind of method of definite advertisement cheating, it is possible to achieve is corresponded to based on advertisement behavior Telecom operation quotient data analyzed to determine whether there are advertisement cheating, advertisement cheating analysis can be improved Accuracy, as shown in Figure 1, this method includes：
101st, the corresponding telecom operation quotient data of advertisement behavior is obtained.
Wherein, telecom operators can refer to the enterprise for providing the telecommunications service such as phone, online to the user, small-sized such as each school Garden network operation business, Wireless Fidelity (Wireless-Fidelity, WIFI) Internet Service Provider, virtual operator etc..Telecommunications is transported Terminal access position information, turn-on time when can be comprising user terminal access telecom operators' service equipment in battalion's quotient data Information, user's communication information, internet records information, network registry record information, used end message etc..
Executive agent for the embodiment of the present invention can be the device for analyzing advertising campaign, can be carried for advertiser For service, it can accurately analyze to obtain and whether there is advertisement cheating., can be from electricity when needing to carry out ad campaign analysis Believe that the corresponding telecom operation quotient data of advertisement behavior that record is obtained in the server of operator is analyzed.
102nd, from the telecom operators' extracting data got characteristic corresponding with default verification rule, and combine Default verification rule carries out check analysis.
Wherein, verification rule is preset to be carried out in advance according to the practical business situation of sham publicity behavior by technical staff Set, which can be multiple, it is necessary to which explanation, the analysis result that verification rule obtains are more accurate more comprehensively Really.
In the present embodiment, from telecom operators' extracting data, which characteristic can be according to default verification rule Depending on content, if for example, default verification rule is known for the international mobile device of detection advertisement behavior terminal used by a user Other code (International Mobile Equipment Identity, IMEI) whether necessary being, if falseness IMEI Code, it is determined that there are advertising campaign abnormal behaviour, correspondingly, can be from the user of telecom operators' extracting data advertisement behavior The IMEI code of terminal, as characteristic.
103rd, according to the check analysis under different default verification rules as a result, determining whether there is advertisement cheating.
In the present embodiment, after the check analysis result under obtaining different default verification rules, can be integrated Analysis, specific comprehensive analysis mode can such as be carried out according to depending on actual demand using preconfigured comprehensive analysis formula Analysis judges；Analysis there is a possibility that advertisement cheating, if the possibility is more than certain percentage, illustrate that there are advertisement Cheating；If by comprehensive analysis, analyze and there is a possibility that advertisement cheating is very small, then illustrate that advertisement is practised fraud Behavior can be ignored.
A kind of method of definite advertisement cheating provided in an embodiment of the present invention is wide with being currently based on the click collected Accuse user terminal data to carry out discriminating whether that there are the mode of advertisement cheating to compare, the embodiment of the present invention can be based on advertisement The corresponding telecom operation quotient data of behavior is analyzed to determine whether there are advertisement cheating, can improve advertisement cheating row For the accuracy of analysis, while based on reasons such as charging safety, to preserve call, internet records, network registry record, position letter Breath, end message etc., method provided in this embodiment, can be point-device by accumulation of the regular period to these data Judge the true and false of advertising campaign, and settle accounts advertising expenditure again without extension a period of time and go to see whether to practise fraud for advertisement Can quickly to analyze advertising campaign, accelerate the clearing advertisement phase.
Further, the refinement and extension as above-described embodiment embodiment, with different default verification rules Exemplified by, point different angle illustrates the implementation process of step 102, wherein in an alternate embodiment of the present invention where, step 102 can specifically include：Telecom operators are accessed from the user terminal of telecom operators' extracting data advertisement behavior of acquisition Terminal access position information during service equipment, and corresponding turn-on time information；According to the terminal access position extracted Information and turn-on time information, detect the user's movement for being less than preset range threshold value with the presence or absence of moving range in scheduled duration Terminal, and there are the multiple and different advertisement behaviors of access in the user's mobile terminal；And/or detect whether existence position variation track phase Same multiple customer mobile terminals；If it is detected that there are the identical multiple customer mobile terminals in the change in location track, and/or There are during the customer mobile terminal in scheduled duration, it is determined that there are advertising campaign abnormal behaviour.
Wherein, terminal access position information can be linked into carrier service equipment (such as base station, accessing wirelessly according to terminal Access point, sender unit, the access device such as cross-connecting box of fixation) after, user's physics for being determined according to access device information Position, such as common mobile phone, by terminal in the position that base station network is registered, can calculate the position of the mobile phone；For another example The wireless access points (Wireless Access Point, AP) of WIFI, are logged in by the signal cover and terminal of AP The information of AP can also analyze position range.Turn-on time information can be that the user terminal of advertisement behavior accesses telecom operators Temporal information during service equipment.Scheduled duration and preset range threshold value can be configured in advance according to the actual requirements.
For example, for a mobile phone terminal, under normal circumstances, which needs frequent shift position, because using The people of mobile phone can often move, if the mobile phone terminal often participated in clicking on advertising campaign in two months, but the mobile phone is whole End within the two moons only used under same base station, position does not change, such case be it is very abnormal, very It is probably one and is specifically used to the machine of brush advertisement, because determines that there are advertising campaign abnormal behaviour.
For another example some cribbers are in order to imitate real user sometimes, it is possible to can cell phone terminal, but because save The reason for cost and easy management aspect, can only move more mobile phone terminals at the same time, will result in the position of more mobile phone terminals Variation track is identical, by above-mentioned check analysis process, if there is the identical mobile phone terminal in more change in location tracks, and it All carry out often participate in ad click activity, then these mobile phone terminals are likely to be specifically used to the machine of brush advertisement, because For that cannot have multiple people using mobile phone terminal, all together, therefore such case also easily determines as there are advertisement work whole day Dynamic abnormal behaviour；An opposite mobile phone terminal, usually all mobile and use, simply once in a while there occurs advertisement behavior, that can be with It is judged as normal behaviour.
In another alternative embodiment of the invention, step 102 can specifically include：From the telecom operators got The internet records inventory information of extracting data advertisement behavior terminal；It is pre- according to the internet records inventory information extracted, statistics If access ad traffic the accounting in all flows of the user terminal of the advertisement behavior in the period and/or in the unit interval Than；Then detect whether the accounting of the access ad traffic in all flows is more than default accounting threshold value；If, it is determined that deposit In advertising campaign abnormal behaviour.
Wherein, internet records inventory information can include：Access key information and procotol (Internet Protocol, IP) address information etc.；Preset time period, unit interval, default accounting threshold value can be pre- advanced according to the actual requirements Row configuration.For example, according to the information such as keyword and network IP, daily accumulation can separate ad content in customer flow and substantially account for Than certain period of time being taken, if certain hour user is altogether there occurs the flow of 10KB, wherein it is ad traffic to have 8K, it is clear that it is excessive, say Bright user does not do other things, only opens advertising page, it is likely to the operation of brush ad click rate is being carried out, it is thus determined that depositing In advertising campaign abnormal behaviour.
For another example by statistical analysis, ad traffic accounting is excessive, or the excessive situation of flow accounting is non-in the unit interval Chang Duo, it may determine that is to be abnormal, if not being the intentional malicious traffic stream practised fraud, should also be virus generation of owner, because This determines that there are advertising campaign abnormal behaviour.
In another alternative embodiment of the present invention, step 102 can specifically include：From the telecom operators got The user terminal surfing flow Detailed log information of extracting data advertisement behavior；Remembered in detail according to the surfing flow extracted Record, the front and rear flow information that whether there is the website associated with advertising page or application of detection advertisement access to web page record；If do not deposit , it is determined that there are advertising campaign abnormal behaviour.
For example, if web advertisement, user, which will generally pass through web page browsing, can just open relevant advertisements, and generally can Continue to open other links, if the advertisement built in application program (Application, APP) etc., before should also having advertisement The data traffic of particular ip address is occurred with after advertisement, the advertisement of only operator's push, the overwhelming majority can have in a word Leading and follow-up operation, such as the terminal of certain advertisement behavior, this feature is obvious, then very suspicious, it may be determined that there are advertising campaign Abnormal behaviour.
In yet another alternative embodiment of the invention, step 102 can specifically include：From the telecom operators got The terminal identification information of the user terminal of extracting data advertisement behavior；According to the terminal identification information extracted, advertisement is inquired about The end message of the user terminal of behavior；Detect whether there are the cheating terminal of multiple same or like end messages, and it is described The quantity of cheating terminal is more than preset number threshold value；If in the presence of, it is determined that there are advertising campaign abnormal behaviour.
Wherein, end message include but be not limited to model information, time of making the product information, place of production information, batch information of dispatching from the factory Deng；Terminal identification information can include the information such as IMEI number, the MAC Address of terminal.
For example, pass through the IMEI of the user terminal of advertisement behavior that is collected into telecom operators' database, MAC Address etc. Information is analyzed, and the information such as the type of equipment, the time of making the product, the place of production can be analyzed, as certain a collection of advertising campaign behavior Terminal, such facility information is also very consistent, it is likely that is the cheating terminal for being exclusively used in brush amount of volume procurement.
According to the content of above-mentioned alternative embodiment, in order to enable analysis result is more accurate, advertisement behavior can be combined The comprehensive descisions such as the network entry time of user terminal, positional information, therefore before determining there are advertising campaign abnormal behaviour, may be used also With including：From the access telecom operators service equipment of the user terminal of telecom operators' extracting data advertisement behavior of acquisition When terminal access position information, and corresponding turn-on time information；If correspondingly, there are multiple cheating terminals, with reference to Terminal access position information and turn-on time information, synthesis determine whether there is advertising campaign abnormal behaviour.And then by this Many comprehensive analysis modes, can more accurately analyze to obtain and whether there is advertising campaign abnormal behaviour.
Specifically, above-mentioned synthesis determines whether there is the mode of advertising campaign abnormal behaviour, can specifically include：It is if same There are multiple cheating terminals of same or similar end message in the terminal of advertising campaign, and the terminal of multiple cheating terminals accesses Positional information is in the range of same position, and the turn-on time information of multiple cheating terminals is in same time range, then Determine that there are advertising campaign abnormal behaviour.
For example, it was discovered that there are great amount of terminals all same types, the same time of making the product in the terminal of a certain advertising campaign Equipment, and position is very fixed, while network entry time and customer information also compare concentration, then the possibility of cheating is very Greatly, thus may determine that there are advertising campaign abnormal behaviour；Again or find that IMEI number, MAC Address regularity are very strong, as before All, only one or two order arranges below, this also abnormal in face.
In yet another alternative embodiment of the invention, step 102 can specifically include：From the telecom operators got The IMEI code or MAC Address of extracting data advertisement behavior terminal, and service number information；IMEI code that Detection and Extraction are arrived or MAC Address, service number information register whether uniquely on network；And/or the IMEI code or MAC Address are detected in preset time Whether corresponding service number conversion quantity is more than predetermined threshold value in section；And/or detection and the IMEI code or mac address information pair Whether IMEI code or MAC Address conversion quantity of the service number answered in preset time period are more than predetermined threshold；And/or detection Whether the IMEI code or MAC Address and the IMEI code of advertisement behavior terminal or MAC Address that are collected into from terminal data are consistent； If it is detected that inconsistent, and/or IMEI code or MAC Address and service number information register not unique, and/or service on network FH-number transform quantity is more than predetermined threshold value, and/or IMEI code or MAC Address conversion quantity are more than predetermined threshold value, it is determined that exists Advertising campaign abnormal behaviour.
Wherein, service number can be phone number, access terminals number etc..For example, the IMEI number of terminal has uniquely Property, user information was collected by end side in the past, obtained IMEI number is controlled by terminal authorization, cannot get sometimes, there may come a time when Changed, but be collected into by communication network side just very accurate, end side is unable to control；Received with communication network side The IMEI number of the user terminal of the advertisement behavior integrated is reference frame, should if the IMEI number is registered not uniquely on network IMEI number is illegal, illustrate the user's terminal be probably null hypothesis it is spare come brush ad click amount, it may be determined that there are advertisement work Dynamic abnormal behaviour.
For another example the other information such as IMEI number and phone number determines correspondence, if it find that certain phone number passes through Often change IMEI number or some IMEI number often change phone number, illustrate abnormal, it may be determined that abnormal there are advertising campaign Behavior.
For another example if the IMEI number for the advertisement behavior terminal being collected into by communication network side by end side with being collected The IMEI number of the advertisement behavior terminal arrived is inconsistent, and also explanation has false problem, it may be determined that abnormal there are advertising campaign Behavior.
In yet another alternative embodiment of the invention, step 102 can specifically include：From the telecom operators got The subscriber information message of extracting data advertisement behavior user；According to the subscriber information message of extraction, detection carries out advertising campaign Whether the advertisement behavior user that number is more than predetermined threshold value is server user；If and/or there is same IP address or close IP The advertisement behavior user of address carries out same advertising campaign number and is more than predetermined times threshold value, then according to subscriber information message, inspection Whether the advertisement behavior user for surveying same IP address or close IP address is collective Internet user；And/or believed according to subscriber data Breath, whether the advertisement behavior user of the same advertisement of test access is same user or time interval of opening an account is less than predetermined space threshold value User；And/or according to subscriber information message, whether the advertisement behavior user of the same advertisement of test access is the user that registers on the net Title is close or enters user similar in net address；When the advertisement behavior for detecting to carry out advertising campaign number and being more than predetermined threshold value is used Family is server user, and/or the advertisement behavior user of same IP address or close IP address is not collective Internet user, and/ Or the advertisement behavior user of the same advertisement of access is less than the user of predetermined space threshold value for same user or time interval of opening an account, And/or to access the advertisement behavior user of same advertisement close or when entering user similar in net address for user's name of registering on the net, Determine that there are advertising campaign abnormal behaviour.
Wherein, the related data of user can be included in subscriber information message, such as user's property, address name, identity card Piece number code etc..At the telecom operators of communication network side, subscriber data can be inputted when networking, after system of real name, The user's data is just more accurate, therefore judges whether that advertising campaign abnormal behaviour is more accurate based on the user's data information Really.
It can be analysed whether at present by accessing IP address as sham publicity activity, under normal circumstances, same IP Terminal quantity is limited under location, and IP sections of same IP or close such as occur, to carry out same advertising campaign numbers excessive, excessively concentrates, then table Show suspicious.But in this case it could also be possible that some of certain large enterprise or Large places for activities access advertising user, because This carries out determining whether that sham publicity activity is inaccurate in this way.By way of being provided in this alternative embodiment It can effectively solve the problems, such as this, for example, it is excessive if there is IP sections of same advertising campaign numbers of progress of same IP or close, excessively Concentrate, can be according to the subscriber information message of IP sections of the same IP or close, detecting the user of IP sections of the same IP or close is No is collective Internet user (such as large enterprise, market, Internet bar), if not collective Internet user, illustrates there is exception, such as Fruit is collective Internet user, illustrates to belong to normal condition.
If for another example according to subscriber information message, it is certain Large-scale Data Rooms to determine user, if the access of the user Advertising campaign number is more, more than certain frequency threshold value, illustrates in the presence of exception, because can seldom access advertisement on the server.
For another example according to subscriber information message, if accessing the advertisement behavior user of same advertisement as same people or opening an account Time very close user, illustrates that the user may carry out intentional brush advertisement behavior, then can determine that there are advertising campaign Abnormal behaviour；The networking registration title for either accessing the advertisement behavior user of same advertisement is very close or to enter net address non- Very close to, then the card that batch is opened is can be understood as, for brush ad click amount.
In yet another alternative embodiment of the invention, step 102 can specifically include：From the telecom operators got The communication activity information of extracting data advertisement behavior；Then according to the communication activity information extracted, advertisement behavior is detected Whether communication activity there is exception；If, it is determined that there are advertising campaign abnormal behaviour.
Wherein, communication activity information includes but not limited to averagely networking duration information, average call duration information, average logical Telecommunications services consumption information etc..Whether can be analyzed by communication activity information is normal users.
For example, there is some features substantially to determine that advertisement behavior user is real user, as network entry time is very long, often There is other expenses the moon in addition to surfing flow, and such as call rate, short message is taken, and spending amount monthly is very more, then says The bright advertisement behavior user is real user, his these activities belong to normal behaviour；If on the contrary, after networking, never have The behaviors such as generation phone, short message, or monthly only produce the expenses of surfing Internet of certain flow, it is determined that abnormal, which may For fictitious users, for the click volume of brush advertisement, and then it can determine that there are advertising campaign abnormal behaviour.
Above-mentioned each alternative embodiment may be considered according to telecom operation quotient data, utilize different default verification rules Check analysis are carried out, it is necessary to which explanation, presetting verification rule can be with not limited to this, can also be according to other operational demands It is configured in advance, carries out check analysis using more comprehensive verification rule, the final ad campaign analysis result arrived is more accurate Really.
Further, in order to illustrate the specific implementation process of step 103, a kind of optional embodiment of step 103 be for Corresponding weight is respectively configured in check analysis result under the default verification rule of difference；Calculate under different default verification rules The corresponding score value of check analysis result；Each single item score value is multiplied by corresponding weight, and is added and averages；Most The average value being calculated is compared with preset standard value afterwards；If the gap between the average value and preset standard value is more than Predetermined threshold, it is determined that there are advertisement cheating.It should be noted that the gap between the average value and preset standard value is got over Big more to illustrate problematic, specific weight and score value can according to circumstances be set.
For example, according to the check analysis result under every kind of default verification rule to the important of final ad campaign analysis result Property, corresponding weight is respectively configured for the check analysis result under these default verification rules, it is default then to calculate these Which score value section the corresponding score value of check analysis result under verification rule, can specifically see result in, it is then determined that Corresponding score value；Then each single item score value is multiplied by corresponding weight, and is added and averages, will be finally calculated Average value is compared with preset standard value, if the gap between the average value and preset standard value is more than certain threshold value, Then determine that there are advertisement cheating.
Another optional embodiment of step 103 is as a result, obtaining according to the check analysis under different default verification rules Take the accounting of the check analysis result of advertising campaign abnormal behaviour；Then detect whether the accounting is more than preset ratio threshold value；If It is, it is determined that there are advertisement cheating.
For example, preset ratio threshold value is 75%, check analysis have obtained presetting the school under verification rule according to 10 kinds of differences Analysis result is tested, if wherein indicating advertising campaign abnormal behaviour with the presence of 8 check analysis results, determines advertising campaign exception The accounting of the check analysis result of behavior is 80%, more than preset ratio threshold value, and then can determine that there are advertisement cheating.
Further, in order to help user to understand which advertisement cheating occur, which user and terminal take part in Cheating, as foundation is referred to during subsequently to settle accounts advertising expenditure, in yet another alternative embodiment of the invention, true Surely after there are advertisement cheating, can also include：Obtain the advertising message there are advertisement cheating, and corresponding work Disadvantage user and/or cheating end message；Cheating user and/or cheating end message are stored in blacklist, and then in next time Cheating user and cheating terminal are effectively shielded using the blacklist during subsequent statistical ad click amount；Can also be according to depositing Advertising message, cheating user and cheating end message in advertisement cheating, the analysis report letter of generation advertisement cheating activity Breath.
Wherein, the form of the analysis report information can be the forms such as figure or table.For example, to go determining that there are advertisement cheating For afterwards, data that can be by depth analysis there are advertising campaign abnormal behaviour therefrom find that there are advertisement cheating Advertising message, and corresponding cheating user and/or cheating end message, are then based on the generation advertisement cheating activity of these information Analysis report information, the advertising message being directed to there are advertisement cheating, cheating can also be included in the analysis report information The contents such as the cheating violation number of user and cheating terminal.
Further, for the ease of being subsequently tracked to cheating user and cheating terminal, in above-mentioned alternative embodiment also It can include：Statistics cheating user and/or the corresponding positional information of cheating end message, and historical movement path information；Phase Answer, it is above-mentioned to live according to there are the advertising message of advertisement cheating, cheating user and cheating end message, generation advertisement cheating The step of dynamic analysis report information, specifically include：According to there are the advertising message of advertisement cheating, cheating user and cheating End message, combining position information and historical movement path information, generate the analysis report information of advertisement cheating activity.
For example, the position being currently located according to cheating user or terminal of practising fraud, and historical movement path, it can determine Cheating user will move to which region, it is tracked, and convenient follow-up cheating user or cheating terminal are in this area Domain carries out to accomplish rapid identification during sham publicity activity again.
Further, the specific implementation as Fig. 1 the methods, an embodiment of the present invention provides a kind of definite advertisement to practise fraud The device of behavior, as shown in Fig. 2, the device includes：Acquiring unit 21, analytic unit 22, determination unit 23.
Acquiring unit 21, can be used for obtaining the corresponding telecom operation quotient data of advertisement behavior；
Analytic unit 22, can be used for feature corresponding with default verification rule from telecom operators' extracting data Data, and carry out check analysis with reference to the default verification rule；
Determination unit 23, can be used for according to the check analysis under different default verification rules as a result, determining whether there is Advertisement cheating.
In specific application scenarios, the analytic unit 22, specifically can be used for from the telecom operation quotient data Terminal access position information during user terminal access telecom operators' service equipment of advertisement behavior is extracted, and is connect accordingly Angle of incidence information；According to the terminal access position information and the turn-on time information, detect and whether deposited in scheduled duration It is less than the customer mobile terminal of preset range threshold value in moving range, and the customer mobile terminal is multiple and different wide in the presence of accessing Announcement behavior；And/or detect whether the identical multiple customer mobile terminals of existence position variation track；If it is detected that there are institute's rheme Put the identical multiple customer mobile terminals of variation track, and/or there are during the customer mobile terminal in scheduled duration, then really Surely there are advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The internet records inventory information of the user terminal access of middle extraction advertisement behavior；According to the internet records inventory information, statistics The access ad traffic of the user terminal of the advertisement behavior is in all flows in preset time period and/or in the unit interval Accounting；Detect whether accounting of the access ad traffic in all flows is more than default accounting threshold value；If, it is determined that deposit In advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The user terminal surfing flow Detailed log information of middle extraction advertisement behavior；According to the surfing flow Detailed log information, inspection Survey the front and rear flow information that whether there is the website associated with advertising page or application of advertisement access to web page record；If being not present, Determine that there are advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The terminal identification information of the user terminal of middle extraction advertisement behavior；According to the terminal identification information, the use of inquiry advertisement behavior The end message of family terminal, the end message includes but is not limited to model information, time of making the product information, place of production information, dispatches from the factory Batch information；Detect whether multiple cheating terminals there are multiple same or similar end messages, and the number of the cheating terminal Amount is more than preset number threshold value；If in the presence of, it is determined that there are advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data Terminal access position information during access telecom operators' service equipment of the user terminal of middle extraction advertisement behavior, and accordingly Turn-on time information；If there are multiple cheating terminals, during with reference to the terminal access position information and the access Between information, synthesis determine whether there is advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, if specifically can be also used for the terminal of same advertising campaign Middle multiple cheating terminals there are same or similar end message, and at the terminal access position information of the multiple cheating terminal In the range of same position, and the turn-on time information of the multiple cheating terminal is in same time range, it is determined that is deposited In advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The IMEI code or MAC Address of the user terminal of middle extraction advertisement behavior, and service number information；Detect the IMEI code or MAC Address, the service number information register whether uniquely on network；And/or the detection IMEI code or MAC Address are pre- If whether corresponding service number conversion quantity is more than predetermined threshold value in the period；And/or detection is with the IMEI code or MAC Whether IMEI code or MAC Address conversion quantity of the information corresponding service number in location in preset time period are more than predetermined threshold； And/or the detection IMEI code or MAC Address and the advertisement behavior terminal being collected into from terminal data IMEI code or Whether MAC Address is consistent；If it is detected that inconsistent, and/or the IMEI code or MAC Address registered on network it is not unique, and/ Or the service number conversion quantity is more than predetermined threshold value, and/or the IMEI code or MAC Address conversion quantity are more than default threshold Value, it is determined that there are advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The subscriber information message of middle extraction advertisement behavior；According to the subscriber information message, detection carries out advertising campaign number and is more than in advance If whether the advertisement behavior user of threshold value is server user；If and/or there is the advertisement of same IP address or close IP address Behavior user carries out same advertising campaign number and is more than predetermined times threshold value, then according to the subscriber information message, described in detection Whether the advertisement behavior user of same IP address or close IP address is collective Internet user；And/or according to the subscriber data Information, whether the advertisement behavior user of the same advertisement of test access is same user or time interval of opening an account is less than predetermined space threshold The user of value；And/or according to the subscriber information message, the advertisement behavior user of the same advertisement of test access whether be register into Network users title is close or enters user similar in net address；When detecting that the progress advertising campaign number is more than predetermined threshold value Advertisement behavior user is server user, and/or the advertisement behavior user of the same IP address or close IP address is not collection Body Internet user, and/or access the advertisement behavior user of same advertisement for same user or time interval of opening an account be less than it is predetermined between Every the user of threshold value, and/or to access the advertisement behavior user of same advertisement close or enter net address for user's name of registering on the net During similar user, determine that there are advertising campaign abnormal behaviour.
In specific application scenarios, the analytic unit 22, specifically can be also used for from the telecom operation quotient data The communication activity information of middle extraction advertisement behavior, the communication activity information include but not limited to averagely networking duration information, flat Equal duration of call information, average communication services consumption information；According to the communication activity information, the communication of detection advertisement behavior is lived It is dynamic whether exception occur；If, it is determined that there are advertising campaign abnormal behaviour.
In specific application scenarios, the determination unit 23, specifically can be used for under the default verification rule of difference Corresponding weight is respectively configured in check analysis result；The check analysis result calculated under different default verification rules is right respectively The score value answered；Each single item score value is multiplied by corresponding weight, and is added and averages；By the average value and preset standard Value is compared；If the gap between the average value and preset standard value is more than predetermined threshold, it is determined that there are advertisement cheating Behavior.
In specific application scenarios, the determination unit 23, specifically can be also used for according to the default verification rule of difference Under check analysis as a result, obtain advertising campaign abnormal behaviour check analysis result accounting；Whether big detect the accounting In preset ratio threshold value；If, it is determined that there are advertisement cheating.
In specific application scenarios, there is which advertisement cheating to help user to understand, which user and Terminal take part in cheating, as foundation is referred to during subsequently to settle accounts advertising expenditure, as shown in figure 3, described device is also wrapped Include：Storage unit 24 and generation unit 25；
The acquiring unit 21, can be also used for obtaining the advertising message there are advertisement cheating, and corresponding work Disadvantage user and/or cheating end message；
Storage unit 24, can be used for the cheating user and/or cheating end message being stored in blacklist；
Generation unit 25, can be used for according to the advertising message there are advertisement cheating, the cheating user and Cheating end message, generates the analysis report information of advertisement cheating activity.
In specific application scenarios, for the ease of being subsequently tracked to cheating user and cheating terminal, such as Fig. 3 institutes Show, described device further includes：Statistic unit 26；
Statistic unit 26, can be used for counting the cheating user and/or the corresponding positional information of cheating end message, with And historical movement path information；
Generation unit 25, specifically can be used for according to advertising message, the cheating use there are advertisement cheating Family and cheating end message, with reference to the positional information and the historical movement path information, point of generation advertisement cheating activity Analyse report information.
It should be noted that each function involved by a kind of device of definite advertisement cheating provided in an embodiment of the present invention Other corresponding descriptions of unit, may be referred to the corresponding description in Fig. 1, details are not described herein.
Based on above-mentioned method as shown in Figure 1, correspondingly, the embodiment of the present invention additionally provides a kind of storage device, deposit thereon Computer program is contained, which realizes the definite advertisement cheating shown in Fig. 1 method when being executed by processor.
Based on above-mentioned method as shown in Figure 1, the embodiment of the present invention additionally provides a kind of Cloud Server, as shown in figure 4, the cloud Server includes：Storage device 32 and processor 31 and storage are on a storage device and the computer journey that can run on a processor Sequence, wherein storage device 32 and processor 31 are arranged in bus 33, and when 31 executive program of processor is realized described in Fig. 1 really Determine the method for advertisement cheating.
By applying the technical scheme of the present invention, the accuracy of advertisement cheating analysis can be improved, will not be by mistake Meter is paired, will not by meter into wrong, and by analyzing the user behavior of regular period before advertisement behavior occurs, The authenticity of user can be specified, can be judged faster, settles accounts advertising expenditure again without extension a period of time to see Whether be advertisement cheating, can quickly analyze advertising campaign if examining, accelerates the clearing advertisement phase.
Through the above description of the embodiments, those skilled in the art can be understood that the application can lead to Hardware realization is crossed, the mode of necessary general hardware platform can also be added by software to realize.Based on such understanding, this Shen Technical solution please can be embodied in the form of software product, which can be stored in a non-volatile memories In medium (can be CD-ROM, USB flash disk, mobile hard disk etc.), including some instructions are used so that a computer equipment (can be Personal computer, server, or network equipment etc.) perform each implement scene of the application described in method.
It will be appreciated by those skilled in the art that attached drawing is a schematic diagram for being preferable to carry out scene, module in attached drawing or Flow is not necessarily implemented necessary to the application.
It will be appreciated by those skilled in the art that the module in device in implement scene can be described according to implement scene into Row is distributed in the device of implement scene, can also carry out one or more dresses that respective change is disposed other than this implement scene In putting.The module of above-mentioned implement scene can be merged into a module, can also be further split into multiple submodule.
Above-mentioned the application sequence number is for illustration only, does not represent the quality of implement scene.
Disclosed above is only several specific implementation scenes of the application, and still, the application is not limited to this, Ren Heben What the technical staff in field can think change should all fall into the protection domain of the application.

Claims (10)

  1. A kind of 1. method of definite advertisement cheating, it is characterised in that including：
    Obtain the corresponding telecom operation quotient data of advertisement behavior；
    From telecom operators' extracting data characteristic corresponding with default verification rule, and with reference to the default verification Rule carries out check analysis；
    According to the check analysis under different default verification rules as a result, determining whether there is advertisement cheating.
  2. 2. according to the method described in claim 1, it is characterized in that, verified from telecom operators' extracting data with default The corresponding characteristic of rule, and check analysis are carried out with reference to the default verification rule, specifically include：
    End when accessing telecom operators' service equipment from the user terminal of telecom operators' extracting data advertisement behavior Hold accessing position information, and corresponding turn-on time information；
    According to the terminal access position information and the turn-on time information, detect in scheduled duration with the presence or absence of mobile model The customer mobile terminal less than preset range threshold value is enclosed, and the customer mobile terminal has the multiple and different advertisement behaviors of access； And/or
    Detect whether the identical multiple customer mobile terminals of existence position variation track；
    If it is detected that there are the identical multiple customer mobile terminals in the change in location track, and/or exist in scheduled duration During the customer mobile terminal, it is determined that there are advertising campaign abnormal behaviour.
  3. 3. according to claim 1 to 2 any one of them method, it is characterised in that from telecom operators' extracting data Characteristic corresponding with default verification rule, and check analysis are carried out with reference to the default verification rule, specifically include：
    From the user terminal internet records inventory information of telecom operators' extracting data advertisement behavior；
    According to the internet records inventory information, the use of the advertisement behavior in statistics preset time period and/or in the unit interval Accounting of the access ad traffic of family terminal in all flows；
    Detect whether accounting of the access ad traffic in all flows is more than default accounting threshold value；
    If, it is determined that there are advertising campaign abnormal behaviour.
  4. 4. method according to any one of claims 1 to 3, it is characterised in that from telecom operators' extracting data Characteristic corresponding with default verification rule, and check analysis are carried out with reference to the default verification rule, specifically include：
    From the user terminal surfing flow Detailed log information of telecom operators' extracting data advertisement behavior；
    According to the surfing flow Detailed log information, detection advertisement access to web page record is front and rear with the presence or absence of associated with advertising page Website or application flow information；
    If it is not present, it is determined that there are advertising campaign abnormal behaviour.
  5. 5. method according to any one of claims 1 to 4, it is characterised in that from telecom operators' extracting data Characteristic corresponding with default verification rule, and check analysis are carried out with reference to the default verification rule, specifically include：
    From the terminal identification information of the user terminal of telecom operators' extracting data advertisement behavior；
    According to the terminal identification information, inquire about the end message of the user terminal of advertisement behavior, the end message include but It is not limited to model information, time of making the product information, place of production information, batch information of dispatching from the factory；
    Detect whether there are the cheating terminal of multiple same or similar end messages, and the quantity of the cheating terminal is more than preset Number threshold value；
    If in the presence of, it is determined that there are advertising campaign abnormal behaviour.
  6. If 6. according to the method described in claim 5, it is characterized in that, it is described in the presence of, it is determined that there are advertising campaign exception row For before, the method further includes：
    From access telecom operators' service equipment of the user terminal of telecom operators' extracting data advertisement behavior when Terminal access position information, and corresponding turn-on time information；
    If it is described in the presence of, it is determined that there are advertising campaign abnormal behaviour, specifically include：
    It is if comprehensive with reference to the terminal access position information and the turn-on time information there are multiple cheating terminals Determine whether there is advertising campaign abnormal behaviour.
  7. 7. if according to the method described in claim 6, it is characterized in that, described there are multiple cheating terminals, with reference to institute Terminal access position information and the turn-on time information are stated, synthesis determines whether there is advertising campaign abnormal behaviour, specific bag Include：
    If there are multiple cheating terminals of same or similar end message in the terminal of same advertising campaign, and the multiple cheating The terminal access position information of terminal is in the range of same position, and the turn-on time information of the multiple cheating terminal is in In same time range, it is determined that there are advertising campaign abnormal behaviour.
  8. A kind of 8. device of definite advertisement cheating, it is characterised in that including：
    Acquiring unit, for obtaining the corresponding telecom operation quotient data of advertisement behavior；
    Analytic unit, for from telecom operators' extracting data and the corresponding characteristic of default verification rule, and is tied Close the default verification rule and carry out check analysis；
    Determination unit, for presetting the check analysis verified under rule as a result, determining whether there is advertisement cheating row according to different For.
  9. 9. a kind of storage device, is stored thereon with computer program, it is characterised in that is realized when described program is executed by processor The method of definite advertisement cheating any one of claim 1 to 7.
  10. 10. a kind of Cloud Server, including storage device, processor and storage can be run on a storage device and on a processor Computer program, it is characterised in that the processor is realized any one of claim 1 to 7 when performing described program The method for determining advertisement cheating.
CN201711160918.2A 2017-11-20 2017-11-20 Method and device for determining advertisement cheating behaviors and cloud server Active CN108009844B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201711160918.2A CN108009844B (en) 2017-11-20 2017-11-20 Method and device for determining advertisement cheating behaviors and cloud server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711160918.2A CN108009844B (en) 2017-11-20 2017-11-20 Method and device for determining advertisement cheating behaviors and cloud server

Publications (2)

Publication Number Publication Date
CN108009844A true CN108009844A (en) 2018-05-08
CN108009844B CN108009844B (en) 2021-06-29

Family

ID=62052912

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711160918.2A Active CN108009844B (en) 2017-11-20 2017-11-20 Method and device for determining advertisement cheating behaviors and cloud server

Country Status (1)

Country Link
CN (1) CN108009844B (en)

Cited By (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108681908A (en) * 2018-05-17 2018-10-19 广州爱九游信息技术有限公司 Anti- cheat method, device, computing device and storage medium
CN109151828A (en) * 2018-09-30 2019-01-04 中国联合网络通信集团有限公司 Support recognition methods, device, equipment and the storage medium of card user
CN109194627A (en) * 2018-08-16 2019-01-11 深圳乐信软件技术有限公司 Cheat detection method, device, equipment and medium
CN109413103A (en) * 2018-12-11 2019-03-01 泰康保险集团股份有限公司 Processing method, device, equipment and the storage medium of fictitious users identification
CN109905738A (en) * 2019-03-26 2019-06-18 湖南快乐阳光互动娱乐传媒有限公司 Video advertisement abnormal display monitoring method and device, storage medium and electronic equipment
CN110111155A (en) * 2019-05-14 2019-08-09 重庆天蓬网络有限公司 The anti-processing method of practising fraud of advertisement, system, medium and electronic equipment
CN110300123A (en) * 2019-07-26 2019-10-01 秒针信息技术有限公司 Abnormal flow recognition methods, device, electronic equipment and storage medium
CN110602184A (en) * 2019-08-29 2019-12-20 微梦创科网络科技（中国）有限公司 Method and device for monitoring and processing cheating behaviors in website
CN110650146A (en) * 2019-09-26 2020-01-03 秒针信息技术有限公司 Anti-cheating method and device and electronic equipment
CN111105261A (en) * 2018-10-29 2020-05-05 北京奇虎科技有限公司 A user identification method, device, electronic device and storage medium
CN111340571A (en) * 2020-04-02 2020-06-26 上海妙迹信息科技有限公司 Advertisement fee distribution method and system
CN111417077A (en) * 2020-04-16 2020-07-14 刘丽容 Traffic anti-cheating method and system based on micro SDK for mobile advertisement
CN111612550A (en) * 2020-05-28 2020-09-01 北京学之途网络科技有限公司 Advertisement trigger cheating identification method and device, electronic equipment and storage medium
CN112188291A (en) * 2020-09-24 2021-01-05 北京明略昭辉科技有限公司 Method and device for identifying advertisement position abnormity
CN112258221A (en) * 2020-10-12 2021-01-22 上海酷量信息技术有限公司 System and method for identifying cheating terminal
CN112468461A (en) * 2020-11-13 2021-03-09 北京明略昭辉科技有限公司 Multi-dimensional abnormal flow identification method and device and computer equipment
CN112529605A (en) * 2019-09-17 2021-03-19 北京奥维互娱科技有限公司 Advertisement abnormal exposure recognition system and method
CN112700287A (en) * 2021-01-11 2021-04-23 郑州阿帕斯数云信息科技有限公司 Anti-cheating method and device for application program
CN112822680A (en) * 2021-01-07 2021-05-18 北京明略昭辉科技有限公司 False flow identification method and system for user mobile terminal and computer equipment
CN114078016A (en) * 2020-08-12 2022-02-22 腾讯科技（深圳）有限公司 Anti-cheating behavior identification method and device, electronic equipment and storage medium
CN114268957A (en) * 2021-11-30 2022-04-01 中国联合网络通信集团有限公司 Abnormal business data processing method, device, server and storage medium
CN114372828A (en) * 2022-01-12 2022-04-19 上海销氪信息科技有限公司 An advertising delivery method, device, equipment and medium

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101014072A (en) * 2007-02-15 2007-08-08 北京互联易通信息技术有限公司 Method and apparatus for obtaining and analyzing data information aimed at data object
CN103593415A (en) * 2013-10-29 2014-02-19 北京国双科技有限公司 Method and device for detecting cheating on visitor volumes of web pages
CN104050178A (en) * 2013-03-13 2014-09-17 北京思博途信息技术有限公司 Internet monitoring anti-spamming method and device
CN104715395A (en) * 2015-02-13 2015-06-17 北京集奥聚合科技有限公司 Method and system for filtering cheat clicks
CN105760455A (en) * 2016-02-04 2016-07-13 腾讯科技（深圳）有限公司 Anti-cheating method and device for advertisement clicking
CN106934627A (en) * 2015-12-28 2017-07-07 中国移动通信集团公司 The detection method and device of a kind of electric business industry cheating

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101014072A (en) * 2007-02-15 2007-08-08 北京互联易通信息技术有限公司 Method and apparatus for obtaining and analyzing data information aimed at data object
CN104050178A (en) * 2013-03-13 2014-09-17 北京思博途信息技术有限公司 Internet monitoring anti-spamming method and device
CN103593415A (en) * 2013-10-29 2014-02-19 北京国双科技有限公司 Method and device for detecting cheating on visitor volumes of web pages
CN104715395A (en) * 2015-02-13 2015-06-17 北京集奥聚合科技有限公司 Method and system for filtering cheat clicks
CN106934627A (en) * 2015-12-28 2017-07-07 中国移动通信集团公司 The detection method and device of a kind of electric business industry cheating
CN105760455A (en) * 2016-02-04 2016-07-13 腾讯科技（深圳）有限公司 Anti-cheating method and device for advertisement clicking

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
常艳等: ""网络广告中反CPC点击作弊研究"", 《科学技术与工程》 *

Cited By (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108681908A (en) * 2018-05-17 2018-10-19 广州爱九游信息技术有限公司 Anti- cheat method, device, computing device and storage medium
CN109194627A (en) * 2018-08-16 2019-01-11 深圳乐信软件技术有限公司 Cheat detection method, device, equipment and medium
CN109151828A (en) * 2018-09-30 2019-01-04 中国联合网络通信集团有限公司 Support recognition methods, device, equipment and the storage medium of card user
CN111105261A (en) * 2018-10-29 2020-05-05 北京奇虎科技有限公司 A user identification method, device, electronic device and storage medium
CN111105261B (en) * 2018-10-29 2024-04-19 北京奇虎科技有限公司 User identification method, device, electronic equipment and storage medium
CN109413103A (en) * 2018-12-11 2019-03-01 泰康保险集团股份有限公司 Processing method, device, equipment and the storage medium of fictitious users identification
CN109905738A (en) * 2019-03-26 2019-06-18 湖南快乐阳光互动娱乐传媒有限公司 Video advertisement abnormal display monitoring method and device, storage medium and electronic equipment
CN109905738B (en) * 2019-03-26 2022-03-08 湖南快乐阳光互动娱乐传媒有限公司 Video advertisement abnormal display monitoring method and device, storage medium and electronic equipment
CN110111155A (en) * 2019-05-14 2019-08-09 重庆天蓬网络有限公司 The anti-processing method of practising fraud of advertisement, system, medium and electronic equipment
CN110300123A (en) * 2019-07-26 2019-10-01 秒针信息技术有限公司 Abnormal flow recognition methods, device, electronic equipment and storage medium
CN110602184B (en) * 2019-08-29 2022-03-25 微梦创科网络科技（中国）有限公司 A method and device for monitoring and processing cheating behavior in a website
CN110602184A (en) * 2019-08-29 2019-12-20 微梦创科网络科技（中国）有限公司 Method and device for monitoring and processing cheating behaviors in website
CN112529605A (en) * 2019-09-17 2021-03-19 北京奥维互娱科技有限公司 Advertisement abnormal exposure recognition system and method
CN112529605B (en) * 2019-09-17 2023-12-22 北京互娱数字科技有限公司 Advertisement abnormal exposure recognition system and method
CN110650146A (en) * 2019-09-26 2020-01-03 秒针信息技术有限公司 Anti-cheating method and device and electronic equipment
CN111340571A (en) * 2020-04-02 2020-06-26 上海妙迹信息科技有限公司 Advertisement fee distribution method and system
CN111340571B (en) * 2020-04-02 2022-05-31 上海妙迹信息科技有限公司 Advertisement fee distribution method and system
CN111417077B (en) * 2020-04-16 2020-12-08 刘丽容 Traffic anti-cheating method and system based on micro SDK for mobile advertisement
CN111417077A (en) * 2020-04-16 2020-07-14 刘丽容 Traffic anti-cheating method and system based on micro SDK for mobile advertisement
CN111612550A (en) * 2020-05-28 2020-09-01 北京学之途网络科技有限公司 Advertisement trigger cheating identification method and device, electronic equipment and storage medium
CN114078016A (en) * 2020-08-12 2022-02-22 腾讯科技（深圳）有限公司 Anti-cheating behavior identification method and device, electronic equipment and storage medium
CN114078016B (en) * 2020-08-12 2023-10-10 腾讯科技（深圳）有限公司 Anti-cheating behavior identification method and device, electronic equipment and storage medium
CN112188291A (en) * 2020-09-24 2021-01-05 北京明略昭辉科技有限公司 Method and device for identifying advertisement position abnormity
CN112258221A (en) * 2020-10-12 2021-01-22 上海酷量信息技术有限公司 System and method for identifying cheating terminal
CN112468461A (en) * 2020-11-13 2021-03-09 北京明略昭辉科技有限公司 Multi-dimensional abnormal flow identification method and device and computer equipment
CN112468461B (en) * 2020-11-13 2022-09-23 北京明略昭辉科技有限公司 Multi-dimensional abnormal flow identification method and device and computer equipment
CN112822680B (en) * 2021-01-07 2023-09-22 北京明略昭辉科技有限公司 False flow identification method, system and computer equipment for user mobile terminal
CN112822680A (en) * 2021-01-07 2021-05-18 北京明略昭辉科技有限公司 False flow identification method and system for user mobile terminal and computer equipment
CN112700287A (en) * 2021-01-11 2021-04-23 郑州阿帕斯数云信息科技有限公司 Anti-cheating method and device for application program
CN114268957B (en) * 2021-11-30 2023-07-04 中国联合网络通信集团有限公司 Abnormal business data processing method, device, server and storage medium
CN114268957A (en) * 2021-11-30 2022-04-01 中国联合网络通信集团有限公司 Abnormal business data processing method, device, server and storage medium
CN114372828A (en) * 2022-01-12 2022-04-19 上海销氪信息科技有限公司 An advertising delivery method, device, equipment and medium

Also Published As

Publication number Publication date
CN108009844B (en) 2021-06-29

Similar Documents

Publication Publication Date Title
CN108009844A (en) Determine the method, apparatus and Cloud Server of advertisement cheating
Soska et al. Measuring the longitudinal evolution of the online anonymous marketplace ecosystem
Becker et al. Fraud detection in telecommunications: History and lessons learned
US10129288B1 (en) Using IP address data to detect malicious activities
CN107248082B (en) Card maintenance identification method and device
CN107566358A (en) A kind of Risk-warning reminding method, device, medium and equipment
JP2018536956A (en) Method, device and storage medium for preventing illegal acts related to advertisement
CN107948172A (en) A kind of car networking Network Intrusion detection method and system based on artificial intelligence behavioural analysis
CN104424433A (en) Anti-cheating method and anti-cheating system of application program
CN107767138A (en) On-line payment is counter to cheat method and system
CN106506454A (en) Fraud business recognition method and device
CN108197987A (en) Advertisement integrated management monitors system and method
CN113837512B (en) Abnormal user identification method and device
CN101686444B (en) System and method for detecting spam SMS sender number in real time
CN107391359A (en) A kind of service test method and device
CN117217830B (en) Advertisement bill monitoring and identifying method, system and readable storage medium
CN110493476B (en) Detection method, device, server and storage medium
CN107819747A (en) A kind of telecommunication fraud correlation analysis system and method based on communication event sequence
CN110267272A (en) A kind of fraud text message recognition methods and identifying system
CN106445796A (en) Cheating channel automatic detection method and device
CN106886906A (en) A kind of device identification method and device
CN111738770B (en) Advertisement abnormal flow detection method and device
CN108156334A (en) A kind of control system that swindle scene is obtained based on internet
KR20170006158A (en) System and method for detecting fraud usage of message
CN107993056A (en) With reference to weekly wage and the emolument delivery system and method for monthly pay

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20211216

Address after: 215159 room 410, building 04, No. 78, Keling Road, science and Technology City, high tech Zone, Suzhou, Jiangsu Province

Patentee after: Suzhou Lifeng Zhilian Technology Co.,Ltd.

Address before: 100036 b632, 3rd floor, building 14, Cuiwei Zhongli, Haidian District, Beijing

Patentee before: BEIJING ZHIYUE TECHNOLOGY CO.,LTD.