CN111079140B - Method, device and system for preventing cheating - Google Patents

Abstract

Embodiments of the present disclosure relate to a method, apparatus, and system for anti-cheating. The method includes running a check-in application on the mobile device for a swipe check-in, and detecting whether the check-in application is running on the virtualized system. The method also includes determining that there is a cheating behavior on the mobile device in response to detecting that the check-in application is running on the virtualized system. The embodiment of the disclosure can judge whether the check-in application has cheating behaviors by detecting whether the check-in application runs in the virtualized environment, thereby preventing the user from cheating check-in.

Description

Method, device and system for preventing cheating

technical field

Embodiments of the present disclosure generally relate to the field of computers, and more particularly relate to methods, devices and systems for preventing cheating.

Background technique

With the rapid development of the mobile Internet, various smart applications have emerged on mobile terminals. Instead of traditional card swiping sign-in or fingerprint sign-in, people began to use mobile terminals to sign in. For example, after people click the face-swiping button of the sign-in application, the server can verify whether the mobile terminal is in a legal place. In addition, after passing the location verification, it can also use face recognition to verify whether it is operated by the user himself. In this way, the smart check-in service on the mobile terminal can be realized.

Since the user's check-in affects attendance, and even affects the user's performance appraisal and economic income, some users will use various methods to cheat in order to achieve successful check-in without arriving at the specified place. For example, users use some cheating tools to simulate the application program interface (API) of the operating system to cheat. As long as this cheating tool successfully records the legal location information, it can bypass the verification link of the system for the check-in location. This allows users to sign in with their faces at home or even anywhere.

Contents of the invention

Embodiments of the present disclosure provide a method, device and computer program product for preventing cheating.

In a first aspect of the present disclosure, a method for preventing cheating is provided. The method includes: running a sign-in application for face-swiping sign-in on the mobile device; detecting whether the sign-in application is running on a virtualization system; and determining that there is cheating on the mobile device in response to detecting that the sign-in application is running on a virtualization system Behavior.

In a second aspect of the present disclosure, a method for preventing cheating is provided. The method includes: obtaining the IP address of the mobile device, wherein the mobile device is running a sign-in application for face-swiping sign-in; detecting whether the IP address is abnormal; and in response to detecting that the IP address is abnormal, determining that there is cheating on the mobile device Behavior.

In a third aspect of the present disclosure, a mobile device is provided. The mobile device includes a processing unit and a memory coupled to the processing unit and storing instructions. The instructions perform the following actions when executed by the processing unit: run a sign-in application for face-scanning sign-in on the mobile device; detect whether the sign-in application is running on the virtualization system; and respond to detecting that the sign-in application is running on the virtualization system run on mobile devices to determine the presence of cheating on mobile devices.

In a fourth aspect of the present disclosure, a server is provided. The mobile device includes a processing unit and a memory coupled to the processing unit and storing instructions. The instructions perform the following actions when executed by the processing unit: obtain the IP address of the mobile device, where the mobile device is running a sign-in application for face-swiping sign-in; detect whether the IP address is abnormal; and respond to detecting that the IP address is There is an anomaly that determines that cheating has occurred on the mobile device.

In a fifth aspect of the present disclosure, a system for preventing cheating is provided. The system includes a mobile device according to an embodiment of the present disclosure and a server according to an embodiment of the present disclosure.

This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or principal characteristics of the disclosure, nor is it intended to limit the scope of the various embodiments of the disclosure.

Description of drawings

The above and other objects, features and advantages of the present disclosure will become more apparent by describing the exemplary embodiments of the present disclosure in more detail with reference to the accompanying drawings, wherein in the exemplary embodiments of the present disclosure, the same reference numerals generally represent the same elements.

Fig. 1 shows the schematic diagram of the conventional technique of cheating using a virtualization system;

Figure 2 shows a schematic diagram of an example environment for anti-cheating according to an embodiment of the present disclosure;

FIG. 3 shows a flowchart of a method for preventing cheating according to an embodiment of the present disclosure;

FIG. 4 shows a flowchart of a method for adding a cheating user to a blacklist according to an embodiment of the present disclosure;

FIG. 5 shows a diagram of a graphical user interface (GUI) for prompting a user to cheat according to an embodiment of the present disclosure;

FIG. 6 shows a flowchart of another method for preventing cheating according to an embodiment of the present disclosure;

Figure 7 shows a flow diagram of an example process for preventing cheating according to an embodiment of the present disclosure; and

Fig. 8 shows a schematic block diagram of an apparatus that may be used to implement embodiments of the present disclosure.

specific embodiment

Preferred embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although specific embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be embodied in various forms and is not limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

As used herein, the term "comprise" and its variants mean open inclusion, ie "including but not limited to". The term "or" means "and/or" unless otherwise stated. The term "based on" means "based at least in part on". The terms "one example embodiment" and "one embodiment" mean "at least one example embodiment." The term "another embodiment" means "at least one further embodiment". The terms "first", "second", etc. may refer to different or the same object, unless a different is clearly indicated.

To break the check on the user's location, some cheat tools use a virtualized space to simulate the location of the mobile device. FIG. 1 shows a schematic diagram 100 of a conventional technique of cheating using a virtualization system. After the cheating software is installed on the mobile device, in addition to the operating system 110 itself, a virtualized space will be created in the mobile device, and a virtualized system 120 exists in the virtualized space. There is an application virtualization engine in the virtualization system 120 , which allows users to install, start or uninstall applications in the virtualization system 120 while being isolated from the operating system 110 . In addition, this technology can also obtain any system service of the operating system 110 and establish a proxy service corresponding to the system service in the virtualization system 120 . When the sign-in application running in the virtualization system 120 calls the system service, what is actually called is the proxy service provided in the virtualization system 120 . As shown by the arrow 131 in FIG. 1 , the sign-in application 125 running in the virtualization system 110 invokes the system service of the operating system 110 ; as shown by the arrow 132 , the operating system 110 provides the system service and sends it to the proxy service module 123 . Next, as shown by arrow 133 , the proxy service module 123 sends the replaced proxy service to the sign-in application 125 , so as to provide false system services to the sign-in application 125 . It can be seen that the existing cheating scheme can bypass the verification of the wireless router information by the operating system and realize false cheating check-in. It can record the workplace wireless router information and save it in the virtualization space, and then in the subsequent check-in process Use the saved wireless router information to forge, so that users can successfully swipe their faces anywhere.

For this reason, the embodiments of the present disclosure propose a new scheme for preventing cheating. According to the embodiments of the present disclosure, by detecting whether the sign-in application is running in a virtualized environment, it can be determined whether the sign-in application has cheating behavior, thereby preventing cheating sign-in of the user. In addition, the embodiments of the present disclosure may alternatively or additionally detect cheating by detecting whether the IP address of the mobile device is abnormal at the server side.

The basic principles and several example implementations of the present disclosure are explained below with reference to FIGS. 2 to 8 . It should be understood that these exemplary embodiments are given only to enable those skilled in the art to better understand and implement the embodiments of the present disclosure, but not to limit the scope of the present disclosure in any way.

FIG. 2 shows a schematic diagram of an example environment 200 for anti-cheat according to an embodiment of the disclosure. As shown in FIG. 2, an environment 200 includes a mobile device 210 (ie, a client) and a server 220, which are connected to each other through a network 230, which may be a wired network and/or a wireless network. The mobile device 210 can be any mobile electronic device, such as a smart phone, a tablet computer, etc., which generally have a wireless network connection function and a camera function. Server 220 generally refers to a remotely located high-performance processing device. It should be understood that the mobile device and the server in FIG. 1 may also include other components or modules not shown.

Referring to FIG. 2 , a sign-in application 215 is running on the mobile device 210 , and the attendance service based on the mobile network can be realized through the sign-in application 215 . According to the embodiments of the present disclosure, by detecting whether the sign-in application is running in a virtualized environment, it can be determined whether the sign-in application has cheating behavior, thereby preventing cheating sign-in of the user. Additionally or alternatively, the server 220 may detect whether the IP address of the mobile device 210 is abnormal to detect whether there is cheating. Example implementations of how to detect cheating are further described below with reference to FIGS. 3-8 .

Fig. 3 shows a flowchart of a method 300 for preventing cheating according to an embodiment of the present disclosure. It should be understood that the method 300 may be performed by the mobile device 210 described above with reference to FIG. 2 . In block 302, a sign-in application for sign-in by facial recognition is run on the mobile device. For example, first run the check-in application 215 on the mobile device 210 for subsequent fraud detection.

At block 304, it is detected whether the sign-in application is running on the virtualization system. In some embodiments, it may be detected whether a specific class in the operating system of the mobile device is provided by virtualization technology. For example, the operating system may be an Android operating system, and the specific class may be an Instrumentation class in the Android operating system. However, the mobile device can also be other operating systems and detect specific classes related to virtualization calls in other operating systems.

At block 306, in response to detecting that the check-in application is running on the virtualized system, it is determined that cheating is present on the mobile device. For example, there are differences between the Instrumentation class in the Android operating system and the virtualization system, and the virtualization technology cannot bypass detection and cheat. In the Android operating system, the existence form of the Instrumentation class is android.app.Instrumentation; on the contrary, in the virtualization system, the existence form of the Instrumentation class is com.lody.virtual.client.hook.delegate.AppInstrumentation. Therefore, by detecting the name or existence form of the Instrumentation class, it can be determined whether the sign-in application is running in a virtualization system, thereby detecting whether there is cheating sign-in behavior on the mobile device.

FIG. 4 shows a flowchart of a method 400 for adding a cheating user to a blacklist according to an embodiment of the present disclosure. It should be understood that the method 400 may be performed by the mobile device 210 described above with reference to FIG. 2 and may be performed after the method 300 described in FIG. 3 .

In block 402, the face-swiping sign-in function in the sign-in application is prohibited on the mobile device. In some embodiments, users of mobile devices can be prevented from using virtualization to forge wireless router information for facial recognition sign-in. In some embodiments, the user of the mobile device may be notified of abnormal behavior and prompted to exit the sign-in application and restart the sign-in application. For example, FIG. 5 shows a diagram of a GUI 500 for prompting a user to cheat, according to an embodiment of the present disclosure. The user clicks the facial scan button 211 on the interface of the mobile device 210, and then performs facial scan to sign in. When it is detected that the sign-in application is running in the virtualization system, a warning 212 may be prompted to the user, and the user may choose to restart the sign-in application to try again. For users who use cheating software, they cannot achieve successful sign-in in the sign-in application of the mobile device.

In block 404, the mobile device sends to the server the user account information that has been logged in in the check-in application. At block 406, the server adds the user account information to a blacklist. For example, if cheating is detected, the mobile device will send the cheating user account information to the server, and the server will then add the cheating user to a blacklist.

FIG. 6 shows a flowchart of another method 600 for preventing cheating according to an embodiment of the present disclosure. It should be understood that the method 600 may be performed by the server 220 described above with reference to FIG. 2 . At block 602, an IP address of a mobile device on which a sign-in application for sign-in is running is obtained. For example, a check-in application 215 is running on the mobile device 210 depicted in FIG. 2 .

In block 604, it is detected whether the IP address is abnormal. In some embodiments, an IP address whitelist can be pre-set, which can be collected manually or automatically, and includes the network addresses of routers in legal places such as the user's workplace and meeting place, and then, the mobile device can be detected Whether your IP address is on the IP address whitelist.

In some embodiments, the Basic Service Set Identifier (BSSID) of the wireless router to which the mobile device is connected may also be obtained, and then based on the BSSID, it is detected whether the IP address is abnormal. In some embodiments, the IP address with the highest probability corresponding to the BSSID can be counted; and based on the comparison between the IP address and the IP address with the highest probability, it is determined whether the IP address is abnormal. For example, for the same BSSID (its IP address should be fixed and/or unique), there are two kinds of addresses for three mobile devices, that is, the first device and the second device are the first address, the third device is the second address, Then it can be considered that the address corresponding to this BSSID should be the first address, and the third device has cheating behavior. In addition, the IP address distribution of each BSSID in some days can be counted, so as to determine the best trusted IP address of each BSSID.

At block 606, in response to detecting that the IP address is anomalous, it is determined that cheating is present on the mobile device. That is to say, although the client may bypass the detection of BSSID and WiFi through virtualization technology, etc., it cannot pretend to be a real IP address to communicate with the server. For example, under normal circumstances, the mobile device connected to the corresponding BSSID should have a certain address, if it appears that the mobile device connected to the BSSID does not have this address, it means that the device is suspected of cheating. Generally speaking, normal sign-in corresponds to the IP address of the router in the workplace, while cheating sign-in corresponds to the IP address at home or in the mobile network. Thus, by detecting anomalies in the IP address of the mobile device, cheating by the user may alternatively and/or additionally be detected. In some embodiments, by combining the virtualization detection at the mobile device end and the IP address anomaly detection at the server end, an anti-cheating solution with double detection can be formed.

In some embodiments, the embodiments of the present disclosure can be used for smart sign-in based on mobile internet. In some embodiments, the anti-cheating scheme of the present disclosure can be used for the sign-in of the salesperson of the insurance company, so that it can be judged whether the salesperson attends the meeting by himself at the correct place and time.

FIG. 7 shows a flow diagram of an example process 700 for preventing cheating, according to an embodiment of the disclosure. At block 702, the user logs into the sign-in application using their account and password, or the sign-in is performed automatically. In block 704, it is detected whether the sign-in application is running in the virtualization system, for example, the embodiments described above may be used to determine whether the sign-in application is running in the virtualization system. If it is detected at block 704 that the sign-in application is running in the virtualization system, it indicates that there is cheating, and at block 720 it is indicated that sign-in fails.

If it is detected in block 704 that the sign-in application is not running in the virtualization system, then in block 706 the user clicks the click button to brush my face. At block 708, the check-in application reads the WiFi information and IP address to which the mobile device is connected. In block 710, the server detects whether the IP address of the mobile device is abnormal, for example, the embodiments described above may be used to determine whether the IP address is abnormal. If it is detected at 710 that there is an abnormality in the IP address, it indicates that there is cheating, and at block 720 it is indicated that the sign-in fails.

If it is detected at 710 that there is no abnormality in the IP address, then at block 712 it is further checked whether the WiFi information is compliant, for example, it may be determined whether the BSSID address of the connected wireless router is in a predetermined list. If it is detected at 712 that the WiFi information is not in compliance, it indicates that there is cheating, and at block 720 it is indicated that the sign-in failed.

If it is detected at 712 that the WiFi information is compliant, then at block 714 the camera is invoked to start the user's face scanning. That is to say, only when the IP address and BSSID are in compliance can the user scan the face. Next, at block 716, it is detected whether the face brushing is passed. For example, it is possible to detect whether or not it is a living body image, and to detect whether or not the captured image is of the user himself. If the facial recognition detection is passed, the sign-in is indicated at block 718 as successful, otherwise at block 720, the sign-in is indicated as failed. It should be appreciated that the actions in process 700 may be performed in an order different than that shown in FIG. 7 .

FIG. 8 shows a schematic block diagram of a device 800 that can be used to implement embodiments of the present disclosure, and the device 800 can be the mobile device 210 or the server 220 described above with reference to FIG. 2 . As shown, device 800 includes a central processing unit (CPU) 801 that can be programmed according to computer program instructions stored in read only memory (ROM) 802 or loaded from storage unit 808 into random access memory (RAM) 803 program instructions to perform various appropriate actions and processes. In the RAM 803, various programs and data necessary for the operation of the device 800 can also be stored. The CPU 801 , ROM 802 , and RAM 803 are connected to each other through a bus 804 . An input/output (I/O) interface 805 is also connected to the bus 804 .

Multiple components in the device 800 are connected to the I/O interface 805, including: an input unit 806, such as a keyboard, a mouse, etc.; an output unit 807, such as various types of displays, speakers, etc.; a storage unit 808, such as a magnetic disk, an optical disk, etc. ; and a communication unit 809, such as a network card, a modem, a wireless communication transceiver, and the like. The communication unit 809 allows the device 800 to exchange information/data with other devices over a computer network such as the Internet and/or various telecommunication networks.

Each method or process described above can be executed by the processing unit 801 . For example, in some embodiments, the methods may be implemented as a computer software program tangibly embodied on a machine-readable medium, such as storage unit 808 . In some embodiments, part or all of the computer program may be loaded and/or installed onto the device 800 via the ROM 802 and/or the communication unit 809 . When the computer program is loaded into the RAM 803 and executed by the CPU 801, one or more steps or actions in the methods or processes described above may be performed.

In some embodiments, the methods and processes described above can be implemented as a computer program product. A computer program product may include a computer readable storage medium having computer readable program instructions thereon for carrying out various aspects of the present disclosure.

A computer readable storage medium may be a tangible device that can retain and store instructions for use by an instruction execution device. A computer readable storage medium may be, for example, but is not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of computer-readable storage media include: portable computer diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), or flash memory), static random access memory (SRAM), compact disc read only memory (CD-ROM), digital versatile disc (DVD), memory stick, floppy disk, mechanically encoded device, such as a printer with instructions stored thereon A hole card or a raised structure in a groove, and any suitable combination of the above. As used herein, computer-readable storage media are not to be construed as transient signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through waveguides or other transmission media (e.g., pulses of light through fiber optic cables), or transmitted electrical signals.

Computer-readable program instructions described herein may be downloaded from a computer-readable storage medium to a respective computing/processing device, or downloaded to an external computer or external storage device over a network, such as the Internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and/or edge servers. A network adapter card or a network interface in each computing/processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in each computing/processing device .

Computer program instructions for performing the operations of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or Source or object code written in any combination, including object-oriented programming languages, and conventional procedural programming languages. Computer readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer, or entirely on the remote computer or server implement. In cases involving a remote computer, the remote computer can be connected to the user computer through any kind of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (such as via the Internet using an Internet service provider). connect). In some embodiments, an electronic circuit, such as a programmable logic circuit, field programmable gate array (FPGA), or programmable logic array (PLA), can be customized by utilizing state information of computer-readable program instructions, which can Various aspects of the present disclosure are implemented by executing computer readable program instructions.

These computer readable program instructions may be provided to a processing unit of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine such that when executed by the processing unit of the computer or other programmable data processing apparatus , resulting in means for realizing the functions/actions specified in one or more blocks in the flowchart and/or block diagrams. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause computers, programmable data processing devices and/or other devices to work in a specific way, so that the computer-readable medium storing instructions includes An article of manufacture comprising instructions for implementing aspects of the functions/acts specified in one or more blocks in flowcharts and/or block diagrams.

It is also possible to load computer-readable program instructions into a computer, other programmable data processing device, or other equipment, so that a series of operational steps are performed on the computer, other programmable data processing device, or other equipment to produce a computer-implemented process , so that instructions executed on computers, other programmable data processing devices, or other devices implement the functions/actions specified in one or more blocks in the flowcharts and/or block diagrams.

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatuses, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in a flowchart or block diagram may represent a module, a program segment, or a portion of an instruction that contains one or more Executable instructions. In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks in succession may, in fact, be executed substantially concurrently, or they may sometimes be executed in the reverse order, depending upon the functionality involved. It is also to be noted that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented by a dedicated hardware-based system that performs the specified function or action , or may be implemented by a combination of dedicated hardware and computer instructions.

Having described various embodiments of the present disclosure above, the foregoing description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and alterations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen to best explain the principle of each embodiment, practical application or technical improvement over the technology in the market, or to enable other persons of ordinary skill in the art to understand each embodiment disclosed herein.

Claims (13)

1. A method for preventing cheating, comprising:

running a check-in application for a swipe check-in on a mobile device;

detecting whether the check-in application is running on a virtualized system; and

in response to detecting that the check-in application is running on the virtualized system, determining that a cheating behavior is present on the mobile device,

wherein detecting whether the check-in application is running on the virtualized system comprises:

detecting whether a particular class in the operating system of the mobile device is provided by the virtualization system,

wherein the operating system is an android operating system and the particular class is an Instrumentation class in the android operating system.

2. The method of claim 1, further comprising:

disabling a face-brushing check-in function in the check-in application; and

user account information associated with the check-in application is sent to a server for addition to a blacklist.

3. The method of claim 2, wherein disabling a face check-in function in the check-in application comprises:

users of the mobile devices are prevented from using a virtualized environment to falsify wireless router information for face-up.

4. The method of claim 3, wherein disabling a face check-in function in the check-in application comprises:

prompting a user of the mobile device for an abnormal operation; and

prompting the user to exit the check-in application and restarting the check-in application.

5. A method for preventing cheating, comprising:

obtaining an internet protocol, IP, address of a mobile device on which a check-in application for swipe-in is running;

detecting whether the IP address is abnormal; and

in response to detecting that the IP address is present as an anomaly, determining that a cheating behavior is present on the mobile device,

wherein detecting whether the IP address has an exception comprises:

obtaining a Basic Service Set Identifier (BSSID) of a wireless router connected with the mobile device; and

detecting whether the IP address has an exception based on the BSSID,

wherein detecting whether the IP address has an exception based on the BSSID comprises:

counting the maximum probability IP address corresponding to the BSSID;

based on a comparison between the IP address and the most probable IP address, it is determined whether an anomaly exists in the IP address.

6. The method of claim 5, wherein detecting whether the IP address has an exception comprises:

detecting whether the IP address is on an IP address white list, wherein the IP address white list is collected in advance.

7. A mobile device, comprising:

a processing unit; and

a memory coupled to the processing unit and storing instructions that, when executed by the processing unit, perform the actions of:

running a check-in application for a swipe check-in on the mobile device;

detecting whether the check-in application is running on a virtualized system; and

in response to detecting that the check-in application is running on the virtualized system, determining that a cheating behavior is present on the mobile device,

wherein detecting whether the check-in application is running on the virtualized system comprises:

detecting whether a particular class in the operating system of the mobile device is provided by the virtualization system,

wherein the operating system is an android operating system and the particular class is an Instrumentation class in the android operating system.

8. The apparatus of claim 7, further comprising:

disabling a face-brushing check-in function in the check-in application; and

user account information associated with the check-in application is sent to a server for addition to a blacklist.

9. The apparatus of claim 8, wherein disabling a face-swipe check-in function in the check-in application comprises:

users of the mobile devices are prevented from using a virtualized environment to falsify wireless router information for face-up.

10. The apparatus of claim 9, wherein disabling a face-swipe check-in function in the check-in application comprises:

prompting a user of the mobile device for an abnormal operation; and

prompting the user to exit the check-in application and restarting the check-in application.

11. A server, comprising:

a processing unit; and

a memory coupled to the processing unit and storing instructions that, when executed by the processing unit, perform the actions of:

obtaining an internet protocol, IP, address of a mobile device on which a check-in application for swipe-in is running;

detecting whether the IP address is abnormal; and

in response to detecting that the IP address is present as an anomaly, determining that a cheating behavior is present on the mobile device,

wherein detecting whether the IP address has an exception comprises:

obtaining a Basic Service Set Identifier (BSSID) of a wireless router connected with the mobile device; and

detecting whether the IP address has an exception based on the BSSID,

wherein detecting whether the IP address has an exception based on the BSSID comprises:

counting the maximum probability IP address corresponding to the BSSID;

based on a comparison between the IP address and the most probable IP address, it is determined whether an anomaly exists in the IP address.

12. The server of claim 11, wherein detecting whether the IP address has an exception comprises:

detecting whether the IP address is on an IP address white list, wherein the IP address white list is collected in advance.

13. A system for anti-cheating comprising a mobile device according to any of claims 7-10 and a server according to any of claims 11-12.

Images