Specific embodiment
The application is described in further detail with reference to the accompanying drawings and examples.It is understood that this place is retouched
The specific embodiment stated is used only for explaining related invention, rather than the restriction to the invention.It also should be noted that in order to
Convenient for description, part relevant to related invention is illustrated only in attached drawing.
It should be noted that in the absence of conflict, the features in the embodiments and the embodiments of the present application can phase
Mutually combination.The application is described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.
Fig. 1 is shown can be using the method or the dress of interactive operation for identification of the interactive operation for identification of the application
The exemplary architecture 100 set.
As shown in Figure 1, system architecture 100 may include terminal device 101,102,103, network 104 and server 105.
Network 104 between terminal device 101,102,103 and server 105 to provide the medium of communication link.Network 104 can be with
Including various connection types, such as wired, wireless communication link or fiber optic cables etc..
Terminal device 101,102,103 is interacted by network 104 with server 105, to receive or send message etc..Terminal
Various telecommunication customer end applications can be installed in equipment 101,102,103, such as the application of web browser applications, searching class,
Instant messaging tools, mailbox client, social platform software etc..
Terminal device 101,102,103 can be hardware, be also possible to software.When terminal device 101,102,103 is hard
When part, the various electronic equipments of submission form, including but not limited to smart phone, plate are can be with display screen and supported
Computer, E-book reader, pocket computer on knee and desktop computer etc..When terminal device 101,102,103 is soft
When part, it may be mounted in above-mentioned cited electronic equipment.Its may be implemented into multiple softwares or software module (such as
Distributed Services are provided), single software or software module also may be implemented into.It is not specifically limited herein.
Server 105 can be to provide the server of various services, for example, submit table on terminal device 101,102,103
It is single that the background server supported is provided.Background server can be requested in response to receiving the submission of target list, be obtained above-mentioned
The input operation information of target list is simultaneously analyzed and processed, and determines that input operation behavior is from machine or real user.
Optionally, whether background server can also be according to identified as a result, submitting successful result to feed back above-mentioned target list
To terminal device.
It should be noted that the above-mentioned input operation to target list can also carry out on server 105, server
105 can directly acquire the input operation information of local target list collected and be handled, at this point it is possible to which there is no eventually
End equipment 101,102,103.
It should be noted that server can be hardware, it is also possible to software.When server is hardware, may be implemented
At the distributed server cluster that multiple servers form, individual server also may be implemented into.It, can when server is software
To be implemented as multiple softwares or software module (such as providing Distributed Services), single software or software also may be implemented into
Module.It is not specifically limited herein.
It should be noted that provided by the embodiment of the present application for identification the method for interactive operation generally by server
105 execute, and correspondingly, the device of interactive operation is generally positioned in server 105 for identification.
It should be understood that the number of terminal device, network and server in Fig. 1 is only schematical.According to realization need
It wants, can have any number of terminal device, network and server.
With continued reference to Fig. 2, the stream of one embodiment of the method for the interactive operation for identification according to the application is shown
Journey 200.This for identification interactive operation method the following steps are included:
Step 201, it is requested in response to receiving the submission of target list, obtains the input operation information of target list.
In the present embodiment, the executing subject (server 105 as shown in Figure 1) of the method for interactive operation can for identification
To obtain the input operation information of target list.Wherein, above-mentioned target list can be according to actual application demand, refer in advance
Fixed any list.Above-mentioned target list is also possible to the list depending on rule, such as includes user name input frame and close
The list of code input frame.As an example, above-mentioned target list can be the enrollment page of the website XX, it is also possible to energy on the website XX
It enough modifies the pages of Password Operations.Above-mentioned submission request, which can be, is sent to the collected data of above-mentioned target list institute
The various requests of above-mentioned executing subject." submission " of the page is clicked in user, " is stepped on as an example, above-mentioned submission request can be
By terminal used by a user request generated after the buttons such as record " or " registration ".
In the present embodiment, above-mentioned input operation information, which can be, has recorded user to the element in above-mentioned target pages
(for example, text box, textview field, button, scroll bar etc.) carries out the information of various operations.It may include the character sequence of input
The corresponding key of character in column presses moment and release moment.Above-mentioned character can be Arabic numerals, letter, punctuate symbol
Number, oeprator etc., be also possible to the control characters such as backspace, tabulation and carriage return character that ASCII value is 8,9 and 13.It needs
Bright, above-mentioned " the pressing moment and release moment of key " refers to that the electronic equipment for the submission request for generating target list can be adopted
The operation information collected.Therefore, above-mentioned " key " refers not only to the physical button of keyboard, also includes tablet computer, touch-screen mobile phone etc.
Soft keyboard on screen.Correspondingly, " the pressing moment and release moment of key " also may include that finger passes through touch screen to soft keyboard
On " key " at the time of pressed and discharge operation.It should also be noted that, the character string of above-mentioned input refers to passing through
The character that key generates.Above-mentioned character can be different with the character inserted in list.As an example, the word inserted in list
Symbol can be " Zhang San ".But the character in the character string of input corresponding can be " zhangsan ".As another example, it uses
Family key in list character string be " H1 ", after be changed to " Hi ".So, user can successively be grasped as follows sequentially in time
Make: pressing shift key, press " H " key, release " H " key, release shift key, press " 1 " key, release " 1 " key, press backspace
Key, presses " I " key, release " I " key at release backspace key.Correspondingly, above-mentioned input operation information may include above-mentioned each operation
At the time of corresponding.
In some optional implementations of the present embodiment, above-mentioned input operation information can also include the character of input
Character types in sequence.Above-mentioned character types may include number, letter, punctuation mark.Above-mentioned character types can also wrap
Include the control character type for only generating keystroke information without generating character visible information.For example, press shift key, Alt key,
The character types of character caused by function key, cursor movement key and spcial character key (such as Insert key and Delete key).
In practice, the character in character string that can usually key in user carries out desensitization process.It is alternatively possible to by above-mentioned character
Corresponding character types are converted into, to guarantee the safety of the inputted information of user.With continued reference to above-mentioned character string by
" H1 " is changed to the example of " Hi ", and above-mentioned input operation information can also include " control key, letter, number, control key, letter ".
In some optional implementations of this implementation, above-mentioned input operation information can also include that mouse action is believed
Breath.Above-mentioned mouse action information can refer to record by mouse or touch screen input to realize the operation and operation to Form Element
The information of the time of generation.The rollover elements of list are operated as an example, above-mentioned mouse action information can be record
The information of the number of (for example, roll mouse pulley).Above-mentioned mouse action information can be have recorded to text box, textview field,
The information of the time of the clicking operation of password box or button.Above-mentioned mouse action information can also be that having recorded cursor hovers over table
The information of the time on button in list.It should be noted that since mobile terminal browser can support touch event, gesture thing
Part, therefore Form Element is operated by modes such as mouse or touch screens and is had no for the record of operation information point
Not.
In the present embodiment, above-mentioned executing subject is requested in response to receiving the submission of target list, can be by various
Mode obtains the input operation information of target list.As an example, user can directly be clicked by above-mentioned executing subject
The operation of " registration " button.Generated keystroke message can recorde when user is by character string key entry target list holds above-mentioned
In the operating system (for example, Windows) of row main body.That is, above-mentioned executing subject can directly acquire target list
Input operation information.As another example, firstly, user can be clicked " login " by used terminal electronic device
The operation of button.Above-mentioned terminal electronic device for example can be and the laptop of above-mentioned executing subject communication connection or touching
Screen mobile phone.Then, above-mentioned terminal electronic device can directly obtain the input operation information of target list by KeyEvent.It connects
Get off, above-mentioned executing subject can obtain the input operation letter of above-mentioned target list from the terminal electronic device of above-mentioned communication connection
Breath.
It should be noted that obtaining pressing the moment and discharging the moment and pass through operation for key above by KeyEvent
System record keystroke message is the well-known technique studied and applied extensively at present, and details are not described herein.
Step 202, based on input operation information, input operating characteristics vector is generated.
In the present embodiment, above-mentioned executing subject can be based on the input operation information obtained from step 201, by various
Mode generates input operating characteristics vector.Wherein, above-mentioned input operating characteristics vector may include the above-mentioned target user's of characterization
Input the various information of operation.Continuing for the corresponding key of character is pressed when as an example, may include user inputs character sequence
Time.As another example, it may include user inputs character sequence to press the average duration of each key, adjacent press twice
Maximum time interval of key etc..
Specifically, input operating characteristics vector can be expressed asWherein, T indicate key from
Press the duration of release.Subscript n indicates that the key pressed is n-th of key.T1Expression presses the 1st key from pressing release
Duration.T2Expression presses the 2nd key from the duration pressed to release.TnN-th of key holding from pressing release is pressed in expression
The continuous time.TnIt can pass throughTo determine.Wherein, TupIndicate the release moment of key.TdownIndicate pressing for key
Moment.The release moment of n-th of key is pressed in expression.Indicate that presses n-th of key presses the moment.TMeanIndicate T1To TnThis n
The average value of numerical value.Indicate T1To TnThe variance of this n numerical value.
In the present embodiment, above-mentioned executing subject can be first from the character string for extracting input in input operation information
The corresponding key of character press the moment and release the moment.It is then possible to when determining lasting from pressing release of each key
Between.Later, the average value and variance of above-mentioned key time durations sequence can be determined.Finally, above-mentioned executing subject can will be upper
State each key time durations, above-mentioned average value and variance composition input operating characteristics vector.
In some optional implementations of the present embodiment, above-mentioned executing subject can be raw based on input operation information
Time series is spent at the input frame switching in key time durations sequence and target list.Wherein, key time durations can be with
The method of the duration of the corresponding key of character is pressed according to above-mentioned generation to determine.Input frame switching spends the time that can pass through
Mouse action information determines.Thus, it is possible to generate key time durations sequence and input frame switching cost time series.
Next, the temporal signatures and above-mentioned input frame of above-mentioned key time durations sequence can be generated in above-mentioned executing subject
Switching spends the temporal signatures of time series.Wherein, the temporal signatures of above-mentioned sequence can include but is not limited to following at least one
: maximum value, minimum value, average value, variance, the difference of maxima and minima, 10 quantiles, 50 quantiles, 90 quantiles, peak
Degree, the degree of bias.Then, above-mentioned executing subject can generate statistical information according to above-mentioned input operation information.Wherein, statistical information
Can include but is not limited at least one of following: the character types of the character in the character string of input belong to preset characters type
Number, slider bar drag number, the information input time of target list.Optionally, preset characters type can be numeric class
Type or control character type.The number that the character types of character in the character string of input belong to preset characters type can lead to
It crosses to count the data of KeyEvent record and be obtained.Optionally, slider bar dragging number can by mouse event or
Touch event and obtain.Optionally, the information input time of target list can leave the last one on list by mouse
Difference between at the time of text box and at the time of mouse clicks the 1st text box determines.
Finally, above-mentioned executing subject can by temporal signatures generated and statistical information composition input operating characteristics to
Amount.Optionally, the arrangement of elements mode inputted in operating characteristics vector is unrestricted.But in all input operating characteristics vectors
Arrangement of elements mode needs unanimously.For example, input operating characteristics vector can be [temporal signatures of key time durations sequence,
Input frame switching spend time series temporal signatures, statistical information], input operating characteristics vector be also possible to [statistical information,
Input frame switching spends the temporal signatures of time series, the temporal signatures of key time durations sequence].
As an example, user inputs to the 1st text box, mouse is at the time of leaving the 1st text box
T1', user is T at the time of clicking the 2nd text box using mouse1", then it is defeated between the 1st input frame and the 2nd input frame
Enter frame switching and spends time Δ T1=T1”-T1'.Similarly, the input frame between the 2nd input frame and the 3rd input frame switches flower
Time-consuming Δ T2=T2”-T2', wherein T2' and T2" it is respectively at the time of mouse leaves the 2nd text box and user uses mouse
At the time of clicking the 3rd text box.If only there are three text boxes in above-mentioned target list, then, input frame switching spends the time
Sequence can be { Δ T1,ΔT2}.Above-mentioned key time durations sequence can be { T1,T2,T3,T4,T5,T6,T7,T8, wherein T1
To T8It can be respectively intended to indicate the key time durations of the corresponding key of 8 characters in the character string of input.Input frame is cut
It changes and spends the temporal signatures of time series that can be expressed as Δ T1With Δ T2Average value Δ Tmean.Key time durations sequence
Temporal signatures can be expressed as T1To T8The variance of this 8 numerical valueStatistical information can be expressed as in the character string of input
The character types of character belong to the number n of preset characters type and the information input time t of target list.So, generation
Inputting operating characteristics vector can be
In some optional implementations of the present embodiment, based on input operation information, above-mentioned executing subject can be with
It generates at least one of following: adjacent key time series is adjacent to release key time series, wherein the adjacent key time is for characterizing
The difference of adjacent key pressed between the moment, the difference between the adjacent release moment for releasing the key time for characterizing adjacent key
Value.As an example, the character string of user's input is " you ".Above-mentioned adjacent key time series can be by pressing pressing for " o " key
It the lower moment and presses the difference for pressing the moment of " y " key and presses the difference for pressing the moment pressed the moment and press " o " key of " u " key
Composition.Correspondingly, above-mentioned adjacent key time series of releasing can be by pressing the release moment after " o " key and pressing releasing after " y " key
It puts the difference at moment and presses the release moment after " u " key and press the difference at the release moment after " o " key and form.
Step 203, operating characteristics vector will be inputted and is input to the man-machine identification model trained in advance, obtain classification information.
In the present embodiment, above-mentioned executing subject can input the input operating characteristics vector generated by step 202
To the man-machine identification model of training in advance, classification information is obtained.Wherein, man-machine identification model for characterize input operating characteristics to
Corresponding relationship between amount and classification information, classification information come from machine or real user for characterizing input operation.Classification letter
Breath can be various forms of information, such as: number, letter, symbol etc..As an example, can indicate input behaviour with " A "
Make to come from machine, indicates input operation from real user with " a ".
It should be noted that as an example, man-machine identification model can be technical staff based on to a large amount of input operation
The statistics of feature vector and classification information and pre-establish, be stored with it is multiple input operating characteristics vectors and classification information pairs
The mapping table that should be related to.It is also possible to technical staff to preset and stored to above-mentioned based on the statistics to mass data
It is in execution, to input operating characteristics vector in one or more numerical value carry out numerical value calculate with obtain for characterize classification letter
The calculation formula of the calculated result of breath.The key inputted in operating characteristics vector is continued for example, above-mentioned calculation formula can be
The average value of time is multiplied with the variance of key time durations, then is compared with obtained product with a preset threshold,
Finally obtain classification information.Above-mentioned preset threshold can be technical staff according to a large amount of data statistics pre-set number
Value.If result of product is greater than or equal to preset threshold, classification information can be letter of the characterization input operation from real user
Breath.If result of product is less than preset threshold, classification information can be information of the characterization input operation from machine.
Further, in some optional implementations of the present embodiment, under the application scenarios of website registration, service
Device is after obtaining above-mentioned classification information, it can obtains whether aforesaid operations information comes from machine according to category information, and holds
The corresponding subsequent operation of row.For example, can refuse if server obtains characterizing above-mentioned classification information of the input operation from machine
This time registration request.Further, server can also send the information of characterization registration failure to terminal device 301.If service
Device obtains characterizing above-mentioned classification information of the input operation from real user, can be in the case where meeting other registration conditions
Pass through this registration request.Further, server can also send the information that characterization succeeds in registration to terminal device.
With continued reference to the application scenarios that Fig. 3, Fig. 3 are according to the method for the interactive operation for identification of the embodiment of the present application
One schematic diagram.In the application scenarios 300 of Fig. 3, terminal device 301 sends the request 302 of submission form to server 303.
Server 303 obtains the input operation information 304 of above-mentioned list in response to receiving above-mentioned request.Wherein, operation information is inputted
It can be and press and discharge when inputting user name " XX ", mailbox " * * *@* * " and password " * * * * * * " on keyboard with touch screen accordingly
At the time of the key of character.Next, generating input operating characteristics vector 305 based on input operation information 304.Then, server
303 are input to above-mentioned input operating characteristics vector 305 the man-machine identification model of training in advance.Finally, server 303 obtains table
Levy above-mentioned classification information 306 of the input operation from machine or real user.Optionally, if server 303 obtain characterizing it is above-mentioned
Classification information of the input operation from machine, can refuse this registration request.Further, server 303 can also be to end
End equipment 301 sends the information of characterization registration failure.Optionally, if server 303 obtains characterizing above-mentioned input operation from true
The classification information of real user can pass through this registration request in the case where meeting other registration conditions.Further, it takes
Business device 303 can also send the information that characterization succeeds in registration to terminal device 301.
The method provided by the above embodiment of the application is requested in response to receiving the submission of target list first, is obtained
The input operation information of target list;Then, it is based on above-mentioned input operation information, generates input operating characteristics vector;Finally, will
Above-mentioned input operating characteristics vector is input to the man-machine identification model of training in advance, obtains for characterizing input operation from machine
Or the classification information of real user.So as to realize and carried out to computer program according to the input operation information of submission form
The identification of interactive operation, so avoid using computer program carry out extensive website registration, login and malice attempt it is close
The illegal operations such as code.
With further reference to Fig. 4, it illustrates the processes 400 of another embodiment of the method for interactive operation for identification.
The process 400 of the method for interactive operation for identification, comprising the following steps:
Step 401, it is requested in response to receiving the submission of target list, obtains the input operation information of target list.
Step 402, based on input operation information, input operating characteristics vector is generated.
Above-mentioned steps 401, step 402 are consistent with step 201, the step 202 in previous embodiment respectively, above with respect to step
Rapid 201, the description of step 202 is also applied for step 401, step 402, and details are not described herein again.
Step 403, input operating characteristics vector is input to machine operation identification model, obtains input operation from machine
Probability.
In the present embodiment, machine operation identification model can be CART (Classification and regression
Tree, Taxonomy and distribution), it is also possible to SVM (Support Vector Machine, support vector machines).As an example, can
With by following steps training obtain: obtain training sample set, training sample include sample input operating characteristics vector sum with
Sample inputs the corresponding sample markup information of operating characteristics vector;The sample of training sample in training sample set is inputted into behaviour
Make feature vector and is used as input, sample markup information corresponding with the sample of input input operating characteristics vector is defeated as it is expected
Out, training obtains machine operation identification model.Specifically includes the following steps:
The first step obtains initial machine and operates identification model.Initial machine operation identification model can be various classifiers.
For example, correspond to machine operation identification model be CART, initial machine operation identification model can be RF (Random forest,
Random forest), Boosted Trees (boosted tree) etc..
Second step obtains training sample set.Each training sample in training sample set may include sample input
Operating characteristics vector sum sample markup information.Wherein, sample markup information can be used for characterizing sample input operation from machine
Probability.In practice, sample input operating characteristics vector can be obtained in several ways.For example, can choose will utilize meter
The operation information that calculation machine program carries out website registration carries out the processing such as abovementioned steps 202, and it is corresponding to obtain aforesaid operations information
Sample input operating characteristics vector, and by its sample markup information be set as characterization machine operation information.For another example, it can incite somebody to action
The operation information that real user carries out website registration carries out the processing such as abovementioned steps 202, and it is corresponding to obtain aforesaid operations information
Sample inputs operating characteristics vector, and sets its sample markup information to the information of characterization real user operation.Markup information
It can be the information of diversified forms.As an example, 1 can be set by markup information of the input operation from machine, will input
Markup information of the operation from real user is set as 0.For numerical value closer to 1, above-mentioned probability of the input operation from machine is bigger.
Sample in training sample in training sample set is inputted operation using the method for machine learning by third step
Input of the feature vector as initial machine operation identification model, by sample corresponding with the sample of input input operating characteristics vector
This markup information is used as desired output, and training obtains above-mentioned machine operation identification model.
Specifically, the executing subject of above-mentioned training step can input the sample of the training sample in training sample set
Operating characteristics vector inputs initial machine and operates identification model, obtains probability of the input operation from machine of the training sample.
It is then possible to calculate the sample of obtained probability and the training sample of the input operation from machine using preset loss function
Difference degree between this markup information.Next, can use the complexity of regularization term computation model.Later, based on
The complexity of resulting difference degree and model, the structural parameters of adjustment initial machine operation identification model are calculated, and are being met in advance
If training termination condition in the case where, terminate training.Finally, the initial machine operation identification model that training obtains is determined as
Machine operates identification model.
It should be noted that above-mentioned loss function can use logarithm loss function, above-mentioned regularization term can use L2
Norm.Above-mentioned preset trained termination condition can include but is not limited at least one of following: the training time is more than preset duration;
Frequency of training is more than preset times;Resulting difference degree is calculated less than preset discrepancy threshold;Accuracy rate on test set reaches
To preset accuracy rate threshold value;Coverage rate on test set reaches preset coverage rate threshold value.
It should also be noted that, the sample mark based on probability and the training sample of the input operation from machine generated
The difference degree between information is infused, the structural parameters of adjustment initial machine operation identification model in various manners can be adopted.For example,
It can be calculated using XGBoost algorithm or GBDT (Gradient Boosting Decision Tree, gradient promote decision tree)
Method come adjust initial machine operation identification model structural parameters.
It is worth noting that, the executing subject of above-mentioned training step can be with the execution of the method for interactive operation for identification
Main body is same or different.If identical, the executing subject of above-mentioned training step can obtain machine operation identification in training
The structural information of trained machine operation identification model and parameter value are stored in local after model.If it is different, then above-mentioned
Trained machine can be operated identification model after training obtains machine operation identification model by the executing subject of training step
Structural information and parameter value be sent to interactive operation for identification method executing subject.
In the present embodiment, input operating characteristics vector can be input to and train by the above process by above-mentioned executing subject
Obtained machine operation identification model, obtains probability of the input operation from machine.
Step 404, in response to determining that inputting probability of the operation from machine is greater than or equal to preset threshold, determines that classification is believed
Breath is information of the characterization input operation from machine.
Step 405, in response to determining that inputting probability of the operation from machine is less than preset threshold, determines that classification information is table
Information of the sign input operation from real user.
In the present embodiment, above-mentioned in response to determining that inputting probability of the operation from machine is greater than or equal to preset threshold
Executing subject can determine that classification information is information of the characterization input operation from machine.In response to determining that input operation comes from machine
The probability of device is less than preset threshold, and above-mentioned executing subject can determine that classification information is characterization input operation from real user
Information.Wherein, above-mentioned preset threshold can be determined by technical staff according to actual conditions and experience.
Figure 4, it is seen that compared with the corresponding embodiment of Fig. 2, interactive operation for identification in the present embodiment
The process 400 of method, which has been refined, is input to the man-machine identification model trained in advance for input operating characteristics vector, obtains classification letter
The step of breath.The method that the scheme of the present embodiment description can use machine learning as a result, generates man-machine identification model, thus rich
The rich generation method of man-machine identification model.
With further reference to Fig. 5, as the realization to method shown in above-mentioned each figure, this application provides interaction behaviour for identification
One embodiment of the device of work, the Installation practice is corresponding with embodiment of the method shown in Fig. 2, which can specifically answer
For in various electronic equipments.
As shown in figure 5, the device 500 of interactive operation for identification provided in this embodiment includes acquiring unit 501, generates
Unit 502 and recognition unit 503.Wherein, acquiring unit 501 are configured in response to receive the submission request of target list,
Obtain the input operation information of target list.Wherein, input operation information includes that the character in the character string of input is corresponding
Key presses moment and release moment.Generation unit 502 is configured to generate input operating characteristics based on input operation information
Vector.Recognition unit 503 is configured to input the man-machine identification model that operating characteristics vector is input to training in advance, obtains
Classification information.Wherein, man-machine identification model is used to characterize the corresponding relationship between input operating characteristics vector and classification information, class
Other information comes from machine or real user for characterizing input operation.
In the present embodiment, in the device 500 of interactive operation for identification: acquiring unit 501, generation unit 502 and knowledge
The specific processing of other unit 503 and its brought technical effect can be respectively with reference to step 201, the steps in Fig. 2 corresponding embodiment
Rapid 202 and step 203 related description, details are not described herein.
In some optional implementations of the present embodiment, above-mentioned input operation information can also include following at least one
: the character types of the character in the character string of input, mouse action information.
In some optional implementations of the present embodiment, above-mentioned generation unit 502 may include sequence generating module
(not shown), temporal signatures generation module (not shown), statistical information generation module (not shown) and feature
Vector generation module (not shown).Wherein, sequence generating module is configured to generate key based on input operation information
Input frame switching in duration time sequence and target list spends time series.Temporal signatures generation module is configured to give birth to
The temporal signatures of time series are spent at temporal signatures and the input frame switching of key time durations sequence.Statistical information generates mould
Block is configured to generate statistical information based on input operation information.Wherein, statistical information includes at least one of the following: input
The character types of character in character string belong to the number of preset characters type, and slider bar drags number, the letter of target list
Cease input time.Feature vector generation module is configured to generate input behaviour based on temporal signatures generated and statistical information
Make feature vector.
In some optional implementations of the present embodiment, above-mentioned apparatus 500 can also include sequence generating unit (figure
In be not shown), be configured to generate at least one of following based on input operation information: adjacent key time series, it is adjacent to release key
Time series.Wherein, the adjacent key time is used to characterize the difference of adjacent key pressed between the moment, adjacent to release key time use
Difference between the release moment of characterization adjacent key.
In some optional implementations of the present embodiment, above-mentioned man-machine identification model may include machine operation identification
Model.Above-mentioned recognition unit 503 may include identification module (not shown) and determining module (not shown).Wherein,
Identification module is configured to input operating characteristics vector and is input to machine operation identification model, obtains input operation from machine
The probability of device.Wherein, machine operation identification model is for characterizing input operating characteristics vector with input operation from the general of machine
Corresponding relationship between rate.Determining module is configured in response to determine that probability of the input operation from machine is greater than or equal to
Preset threshold determines that classification information is information of the characterization input operation from machine;In response to determining that input operation comes from machine
Probability be less than preset threshold, determine classification information be characterization input operate the information from real user.
In some optional implementations of the present embodiment, above-mentioned machine operation identification model can be as follows
Training obtains: obtaining training sample set, training sample includes that sample input operating characteristics vector sum and sample input operation are special
Levy the corresponding sample markup information of vector.Wherein, sample markup information is used to characterize sample input operation and comes from machine or true
User.Using the sample of the training sample in training sample set input operating characteristics vector as input, by the sample with input
The corresponding sample markup information of operating characteristics vector is inputted as desired output, training obtains machine operation identification model.
The device provided by the above embodiment of the application, by acquiring unit 501 in response to receiving mentioning for target list
Request is handed over, the input operation information of target list is obtained.Then, generation unit 502 is based on input operation information, generates input behaviour
Make feature vector.Finally, recognition unit 503 is input to the man-machine identification model trained in advance for operating characteristics vector is inputted, obtain
To classification information.To realize input operation information according to submission form, to using computer program to interact operation
Identification.
Below with reference to Fig. 6, it illustrates the computer systems 600 for the server for being suitable for being used to realize the embodiment of the present application
Structural schematic diagram.Server shown in Fig. 6 is only an example, should not function and use scope band to the embodiment of the present application
Carry out any restrictions.
As shown in fig. 6, computer system 600 includes central processing unit (CPU) 601, it can be read-only according to being stored in
Program in memory (ROM) 602 or be loaded into the program in random access storage device (RAM) 603 from storage section 608 and
Execute various movements appropriate and processing.In RAM 603, also it is stored with system 600 and operates required various programs and data.
CPU 601, ROM 602 and RAM 603 are connected with each other by bus 604.Input/output (I/O) interface 605 is also connected to always
Line 604.
I/O interface 605 is connected to lower component: the importation 606 including keyboard, mouse etc.;It is penetrated including such as cathode
The output par, c 607 of spool (CRT), liquid crystal display (LCD) etc.;Storage section 608 including hard disk etc.;And including such as
The communications portion 609 of the network interface card of LAN card, modem etc..Communications portion 609 is held via the network of such as internet
Row communication process.Driver 610 is also connected to I/O interface 605 as needed.Detachable media 611, such as disk, CD, magnetic
CD, semiconductor memory etc. are mounted on as needed on driver 610, in order to from the computer program read thereon
It is mounted into storage section 608 as needed.
Particularly, in accordance with an embodiment of the present disclosure, it may be implemented as computer above with reference to the process of flow chart description
Software program.For example, embodiment of the disclosure includes a kind of computer program product comprising be carried on computer-readable medium
On computer program, which includes the program code for method shown in execution flow chart.In such reality
It applies in example, which can be downloaded and installed from network by communications portion 609, and/or from detachable media
611 are mounted.When the computer program is executed by central processing unit (CPU) 601, limited in execution the present processes
Above-mentioned function.
It should be noted that the computer-readable medium of the application can be computer-readable signal media or computer
Readable storage medium storing program for executing either the two any combination.Computer readable storage medium for example can be --- but it is unlimited
In system, device or the device of --- electricity, magnetic, optical, electromagnetic, infrared ray or semiconductor, or any above combination.It calculates
The more specific example of machine readable storage medium storing program for executing can include but is not limited to: have the electrical connection, portable of one or more conducting wires
Formula computer disk, hard disk, random access storage device (RAM), read-only memory (ROM), erasable programmable read only memory
(EPROM or flash memory), optical fiber, portable compact disc read-only memory (CD-ROM), light storage device, magnetic memory device or
The above-mentioned any appropriate combination of person.In this application, computer readable storage medium can be it is any include or storage program
Tangible medium, which can be commanded execution system, device or device use or in connection.And in this Shen
Please in, computer-readable signal media may include in a base band or as carrier wave a part propagate data-signal,
In carry computer-readable program code.The data-signal of this propagation can take various forms, including but not limited to
Electromagnetic signal, optical signal or above-mentioned any appropriate combination.Computer-readable signal media can also be computer-readable
Any computer-readable medium other than storage medium, the computer-readable medium can send, propagate or transmit for by
Instruction execution system, device or device use or program in connection.The journey for including on computer-readable medium
Sequence code can transmit with any suitable medium, including but not limited to: wireless, electric wire, optical cable, RF etc. are above-mentioned
Any appropriate combination.
The calculating of the operation for executing the application can be write with one or more programming languages or combinations thereof
Machine program code, described program design language include object-oriented programming language-such as Java, Smalltalk, C+
+, it further include conventional procedural programming language-such as " C " language or similar programming language.Program code can
Fully to execute, partly execute on the user computer on the user computer, be executed as an independent software package,
Part executes on the remote computer or executes on a remote computer or server completely on the user computer for part.
In situations involving remote computers, remote computer can pass through the network of any kind --- including local area network (LAN)
Or wide area network (WAN)-is connected to subscriber computer, or, it may be connected to outer computer (such as utilize Internet service
Provider is connected by internet).
Flow chart and block diagram in attached drawing are illustrated according to the system of the various embodiments of the application, method and computer journey
The architecture, function and operation in the cards of sequence product.In this regard, each box in flowchart or block diagram can generation
A part of one module, program segment or code of table, a part of the module, program segment or code include one or more use
The executable instruction of the logic function as defined in realizing.It should also be noted that in some implementations as replacements, being marked in box
The function of note can also occur in a different order than that indicated in the drawings.For example, two boxes succeedingly indicated are actually
It can be basically executed in parallel, they can also be executed in the opposite order sometimes, and this depends on the function involved.Also it to infuse
Meaning, the combination of each box in block diagram and or flow chart and the box in block diagram and or flow chart can be with holding
The dedicated hardware based system of functions or operations as defined in row is realized, or can use specialized hardware and computer instruction
Combination realize.
Being described in unit involved in the embodiment of the present application can be realized by way of software, can also be by hard
The mode of part is realized.Described unit also can be set in the processor, for example, can be described as: a kind of processor, packet
Include acquiring unit, generation unit, recognition unit.Wherein, the title of these units is not constituted under certain conditions to the unit
The restriction of itself, for example, generation unit is also described as " based on input operation information, generating input operating characteristics vector
Unit ".
As on the other hand, present invention also provides a kind of computer-readable medium, which be can be
Included in server described in above-described embodiment;It is also possible to individualism, and without in the supplying server.It is above-mentioned
Computer-readable medium carries one or more program, when said one or multiple programs are executed by the server,
So that the server: the submission in response to receiving target list is requested, and the input operation information of target list is obtained, wherein
The corresponding key of character inputted in the character string that operation information includes input presses moment and release moment;It is grasped based on input
Make information, generates input operating characteristics vector;Operating characteristics vector will be inputted and be input to the man-machine identification model trained in advance, obtained
To classification information, wherein man-machine identification model is used to characterize the corresponding relationship between input operating characteristics vector and classification information,
Classification information comes from machine or real user for characterizing input operation.
Above description is only the preferred embodiment of the application and the explanation to institute's application technology principle.Those skilled in the art
Member is it should be appreciated that invention scope involved in the application, however it is not limited to technology made of the specific combination of above-mentioned technical characteristic
Scheme, while should also cover in the case where not departing from foregoing invention design, it is carried out by above-mentioned technical characteristic or its equivalent feature
Any combination and the other technical solutions formed.Such as features described above has similar function with (but being not limited to) disclosed herein
Can technical characteristic replaced mutually and the technical solution that is formed.