CN111666596B

CN111666596B - Data processing method, device and medium

Info

Publication number: CN111666596B
Application number: CN202010661918.6A
Authority: CN
Inventors: 周江; 王建行; 罗德志; 王枭; 刘鹏; 严明; 王程远; 李建颖; 朱佳欣; 王妙玲
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2020-07-10
Filing date: 2020-07-10
Publication date: 2023-05-05
Anticipated expiration: 2040-07-10
Also published as: CN111666596A

Abstract

The embodiment of the application provides a data processing method, device and medium, wherein the method is executed by data processing equipment, the data processing equipment is integrated in a target application program, the target application program is an installation-free application program, and the target application program belongs to a sub-application program in an application client in a terminal; the method comprises the following steps: acquiring a hardware identifier of a terminal; if the hardware identification fails to be acquired, collecting hardware capability data of the terminal from N dimensions, wherein N is an integer greater than 1, and the hardware capability data of one dimension is used for uniquely identifying one hardware capability of the terminal; and carrying out fusion operation on the hardware capability data with N dimensions to generate the device fingerprint of the terminal. The method and the device can generate the device fingerprint with good durability and uniqueness of the terminal without a networking environment.

Description

Data processing method, device and medium

Technical Field

The present invention relates to internet applications, and in particular, to the technical field of applications, and more particularly, to a data processing method, a data processing device, and a computer readable storage medium.

Background

The installation-free application is also called applet. Currently, the applet is mainly used by obtaining the device fingerprint of the terminal from a third party (such as a device fingerprint product provider), but it is found in practice that this approach has some drawbacks: (1) The networking is needed, namely, the interaction between the applet and a third party is needed, the data leakage is possibly caused in the interaction process, and the method cannot be suitable for certain product scenes (such as banks) with high confidentiality requirements; (2) the device fingerprint uniqueness of the terminal is poor. The device fingerprint of the terminal is generated by a third party, and the third party usually depends on basic data such as the model, version and the like of the terminal to generate the device fingerprint, and the device fingerprint does not have good uniqueness because the data on which the third party depends is too basic and wide, and after test, after the parent application client of the reloading applet is unloaded or after the user account of the applet is switched, the device fingerprint of the same terminal can be changed, and the uniqueness of the device fingerprint is poor.

Disclosure of Invention

The embodiment of the application provides a data processing method, which can generate device fingerprints with good durability and uniqueness of a terminal without a networking environment.

In one aspect, an embodiment of the present application provides a data processing method, where the method is performed by a data processing device, where the data processing device is integrated in a target application, the target application is an installation-free application, and the target application belongs to a sub-application in an application client in a terminal; the method comprises the following steps:

acquiring a hardware identifier of a terminal;

if the hardware identification is failed to be acquired, collecting hardware capability data of the terminal from N dimensions, wherein N is an integer greater than 1; hardware capability data of one dimension is used to uniquely identify one hardware capability of the terminal;

and carrying out fusion operation on the hardware capability data with N dimensions to generate the device fingerprint of the terminal.

In one aspect, an embodiment of the present application provides another data processing method, including:

acquiring a service request of a target application program; the target application program is an installation-free application program, and belongs to a sub-application program in one application client side in the terminal;

Acquiring a device fingerprint of a terminal;

and sending a service request to the server, wherein the service request carries the equipment fingerprint of the terminal, so that the server carries out wind control detection on the service request according to the equipment fingerprint of the terminal, and processes the service request according to a wind control detection result.

In one aspect, an embodiment of the present application provides a data processing apparatus, where the data processing apparatus is integrated in a target application, the target application is an installation-free application, and the target application belongs to a sub-application in an application client in a terminal; the apparatus includes:

the acquisition unit is used for acquiring the hardware identifier of the terminal;

the collecting unit is used for collecting hardware capability data of the terminal from N dimensions if the acquisition of the hardware identification fails, wherein N is an integer greater than 1; hardware capability data of one dimension is used to uniquely identify one hardware capability of the terminal;

and the processing unit is used for carrying out fusion operation on the hardware capability data with N dimensions and generating the device fingerprint of the terminal.

In one aspect, embodiments of the present application provide another data processing apparatus, including:

a request acquisition unit, configured to acquire a service request of a target application program; the target application program is an installation-free application program, and belongs to a sub-application program in one application client side in the terminal;

A fingerprint acquisition unit for acquiring a device fingerprint of the terminal;

the processing unit is used for sending a service request to the server, wherein the service request carries the equipment fingerprint of the terminal, so that the server carries out wind control detection on the service request according to the equipment fingerprint of the terminal, and processes the service request according to a wind control detection result.

In one aspect, an embodiment of the present application provides a terminal, including an input device and an output device, further including:

a processor adapted to implement one or more instructions; the method comprises the steps of,

a computer readable storage medium storing a target application program, the target application program being an installation-free application program, the target application program being a sub-application program in an application client in the terminal; and a data processing device is integrated in the target application, the data processing device being integrated in the target application in the form of a software development kit, the data processing device being adapted to be loaded by the processor and to perform the data processing method described above.

In one aspect, embodiments of the present application provide a computer-readable storage medium storing a target application program, where the target application program is an installation-free application program, and the target application program is a sub-application program in an application client in a terminal; and a data processing device is integrated in the target application, the data processing device being integrated in the target application in the form of a software development kit, the data processing device being adapted to be loaded by the processor and to perform the data processing method described above.

In one aspect, embodiments of the present application provide a computer program product or computer program comprising computer instructions stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the data processing method described above.

In the embodiment of the application, the hardware identifier of the terminal is obtained by the data processing equipment integrated in the target application program (namely, the applet); if the acquisition of the hardware identification fails, collecting hardware capability data of the terminal from N (N is an integer larger than 1) dimensions, and carrying out fusion operation on the hardware capability data of the N dimensions to generate a device fingerprint of the terminal; firstly, the generating process of the device fingerprint is realized in an applet without interaction with other devices (such as a third party), so that the requirement of a networking environment is not required, and the security of the device fingerprint and the generating process of the device fingerprint can be ensured; in addition, the hardware capability data of N dimensions can only identify N hardware capabilities of the terminal, so that the data processing device relies on the hardware capability data of N dimensions to generate a device fingerprint, and the dependent data can more comprehensively and fixedly reflect the bottom hardware capability of the terminal and is not changed along with the change of an operating system of the terminal (such as system upgrading, unloading and reloading of an application client, user account switching in a small program and the like), so that the uniqueness of the device fingerprint is effectively improved.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described below, it being obvious that the drawings in the following description are only some embodiments of the present application, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

FIG. 1 illustrates a flow chart of a data processing method provided by an exemplary embodiment of the present application;

FIG. 2 illustrates a flow chart of a data processing method provided in another exemplary embodiment of the present application;

FIG. 3 illustrates a flow chart for collecting system information strings provided by an exemplary embodiment of the present application;

FIG. 4a illustrates a flow chart for collecting pixel data for a flat panel graphic provided in an exemplary embodiment of the present application;

FIG. 4b illustrates a schematic diagram of a planar graphic provided in an exemplary embodiment of the present application;

FIG. 5a illustrates a flow chart for collecting pixel data and drawing protocol information for a stereoscopic image provided in an exemplary embodiment of the present application;

FIG. 5b illustrates a schematic diagram of a triangle image provided in accordance with an exemplary embodiment of the present application;

FIG. 6 is a schematic diagram of a device fingerprint of a terminal according to an exemplary embodiment of the present application;

FIG. 7 illustrates a flow chart of a data processing method provided in another exemplary embodiment of the present application;

FIG. 8 illustrates a page view of an applet windage log provided in one exemplary embodiment of the present application;

FIG. 9 is a schematic diagram of a data processing apparatus according to an exemplary embodiment of the present application;

FIG. 10 is a schematic diagram of a data processing apparatus according to another exemplary embodiment of the present application;

fig. 11 is a schematic structural diagram of a terminal according to an exemplary embodiment of the present application.

Detailed Description

The following description of the embodiments of the present application will be made clearly and fully with reference to the accompanying drawings, in which it is evident that the embodiments described are only some, but not all, of the embodiments of the present application. All other embodiments, which can be made by one of ordinary skill in the art based on the embodiments herein without making any inventive effort, are intended to be within the scope of the present application.

The embodiment of the application relates to an installation-free application program, wherein the installation-free application program refers to an application program which can be used without downloading and installing, and the installation-free application program is also called an applet. An applet typically runs as a child application in an application client, where the application client has a parent-child relationship with the applet, the application client being the applet's parent application client, and the applet being the application client's child application. An Application client (also referred to as APP (Application) client) refers to an Application program that is downloaded and installed in a terminal and runs in the terminal. Wherein the terminal may include, but is not limited to: a cell phone, a PDA (tablet computer), a smart wearable device (e.g., smart glasses, smart watches, etc.), and so forth. Various types of application clients may be installed and run in the terminal, including but not limited to: IM (Instant Messaging ) clients (e.g., micro-messaging clients, QQ clients, etc.), SNS (Social Networking Services ) clients (e.g., micro-blog clients, social-enabled map clients, etc.), content service clients (e.g., news clients), image processing clients, search clients, etc. Unless otherwise specified, all applications mentioned in the subsequent embodiments of the present application will be described by taking as examples sub-applications (i.e. applets) running in various application clients of the terminal.

A device fingerprint of a terminal refers to a device identification that can be used to uniquely identify a device feature or unique characteristic of the terminal. Traditional applications (i.e., applications that need to be installed, such as application clients in a terminal) directly acquire the underlying data of the terminal by calling the operating system API (Application Programming Interface ) of the terminal, and then generate a device fingerprint of the terminal from the underlying data of the terminal. However, the applet runs in its parent application client, specifically: the code of the applet runs in a code engine provided by its parent application client, for example: the code of the applet in the IM client runs in a JS (JavaScript, an interpreted scripting language, a dynamic-type, weak-type, prototype-based programming language, abbreviated JS) engine provided by the IM client. Therefore, the applet needs to obtain various information of the terminal by providing an API of an operating system of the terminal by means of a parent application client of the applet, but for safety, the parent application client of the applet generally does not provide the applet with an API for obtaining bottom layer data (such as a MAC address, an IMEI, etc.) of the terminal, which results in that the applet cannot directly obtain the bottom layer data of the terminal like a conventional application (i.e. an application requiring installation), and thus cannot directly generate a device fingerprint of the terminal according to the bottom layer data of the terminal.

Based on the above, the embodiment of the application provides a data processing scheme, which can generate the device fingerprint of the terminal in the applet without interaction between the applet and other devices (such as a third party), so that the requirement of a networking environment is not required, and the security of the device fingerprint and the generation process of the device fingerprint can be ensured; in addition, the device fingerprint is generated by depending on hardware capability data of multiple dimensions of the terminal, the depending data can more comprehensively and fixedly reflect the bottom hardware capability of the terminal and is not changed along with the change of an operating system of the terminal (such as system upgrade, unloading and reloading of an application client, user account switching in an applet and the like), so that the uniqueness of the device fingerprint can be effectively ensured. The uniqueness of the terminal mainly shows the following two aspects, namely that in the same terminal, whether a parent application client to which an applet belongs upgrades, downgrades, switches accounts and the like, the device fingerprint of the terminal generated by the applet is unchanged all the time; on the other hand, the generated device fingerprints must be different for different terminal devices. Through the technical scheme, the applet can bypass the limitation of the parent application client side on the bottom data access capability of the terminal, and can generate the device fingerprint with good durability and uniqueness of the terminal without a networking environment.

The following describes in detail a data processing scheme provided in an embodiment of the present application with reference to the accompanying drawings.

FIG. 1 illustrates a flow chart of a data processing method provided by an exemplary embodiment of the present application; the method is executed by a data processing device integrated in a target application, the target application being an installation-free application, and the target application belonging to a sub-application in an application client in the terminal; the method comprises the following steps S101-S103:

s101, acquiring a hardware identifier of the terminal.

The hardware identifier of the terminal refers to a unique identifier for identifying the processor information in the terminal, and may be, for example, a CPUID (CPUID refers to processor information of a user computer device), or other identifier for identifying the processor information in the terminal. The hardware identifier of the terminal has the characteristic of good uniqueness, namely, one hardware identifier can only uniquely identify the processor information in one terminal. In one embodiment, the data processing device may obtain the hardware identification of the terminal from the parent application client of the applet; or the hardware identification of the terminal is obtained by means of the calling capability of the hardware identification provided by the father application client. If the hardware identification of the terminal can be successfully obtained, the hardware identification of the terminal can be directly utilized to generate the device fingerprint of the terminal. If the hardware identification of the terminal is not successfully acquired, a device fingerprint of the terminal needs to be generated by means of steps S102-S103.

S102, if the acquisition of the hardware identification fails, collecting hardware capability data of the terminal from N dimensions, wherein N is an integer greater than 1. The hardware capability data of one dimension is used to uniquely identify one hardware capability of the terminal.

The value of N can be set according to actual needs, for example, N is 3, 4, 5, etc. The more the number of dimensions is, the more comprehensive the hardware capability data of the terminal is collected, and the better the uniqueness of the finally generated device fingerprint of the terminal is; meanwhile, the more the dimension is, the higher the operation complexity is correspondingly, and the more operation resources are consumed relatively. The value of N therefore requires a balance between the unique requirements of the device fingerprint and the reasonable consumption of computing resources. In the embodiment of the present application, taking the balance described above as an example with n=3, in one implementation, the N dimensions may include an operating system dimension, a planar graphics drawing dimension, and a stereoscopic image drawing dimension: (1) The hardware capability data of the operating system dimension may include a system information string of the terminal, which may be used to reflect information of language setting information of the operating system in the terminal, brand information of the terminal, version information of the operating system, screen size of the terminal, and the like. The language setting information and brand information of the operating system can be used for identifying different brands and models of terminals in different batches (i.e. different brands and different models). The version information and the screen size information of the operating system can be used for distinguishing terminals in the same batch, namely, for two terminals with the same brand and the same model, the difference between the two terminals in the same batch can be distinguished through the version information and the screen size information. It can be seen that, the hardware capability data of the operating system dimension (i.e. the system information character string) can uniquely identify the hardware capability of the operating system of a terminal, and then the generated device fingerprint has good uniqueness by using the hardware capability data of the operating system dimension as the generating factor of the device fingerprint. (2) The hardware capability data of the planar graphics rendering dimension may include pixel data of the planar graphics rendered by a GPU (Graphics Processing Unit, graphics processor) of the terminal. The GPU rendering capability and rendering parameters of different terminals are different, and even if the same text is rendered on a plurality of terminals in the same batch, the pixel data of the planar graphics generated by rendering are also different; therefore, based on the difference, the pixel data of the planar graph drawn by the GPU of the terminal can be used for uniquely identifying the planar graph drawing capability of the terminal, and the hardware capability data of the planar graph drawing dimension is used as a generating factor of the device fingerprint, so that the generated device fingerprint has good uniqueness. (3) The hardware capability data of the stereoscopic image drawing dimension may include pixel data of a stereoscopic image drawn by the GPU of the terminal and drawing protocol information (e.g., webgl (web Graphics Library, a stereoscopic drawing protocol) information) of the stereoscopic image. The stereo image is required to be created in real time and dynamically rendered, and because of the difference of GPU rendering capacity and rendering parameters of different terminals, even if rendering is performed on two terminals in the same batch, the pixel data of the stereo image generated by rendering also has the difference; based on the difference, pixel data of the stereoscopic image drawn by the terminal can be used to uniquely identify the stereoscopic image drawing capability of the terminal, and in addition, drawing protocol information of the stereoscopic image is static data, is related to GPU hardware capability of the terminal, and does not change with system version upgrade. Therefore, the embodiment of the application uses the pixel data of the stereoscopic image and the drawing protocol information of the stereoscopic image as the device fingerprint generating factors, so that the device fingerprint has good uniqueness.

And S103, carrying out fusion operation on the hardware capability data of the N dimensions to generate the device fingerprint of the terminal.

The hardware capability data of the N dimensions can be set as an input parameter, and then the fingerprint generation algorithm is adopted to carry out operation processing on the input parameter, so that the device fingerprint of the terminal can be generated; the fingerprint generation algorithm herein may include, but is not limited to: hash Algorithm, MD5 (Message-Digest Algorithm version 5), RSA (an encryption Algorithm) Algorithm, DES (Data Encryption Standard ) Algorithm, and the like.

In the embodiment of the application, the hardware identifier of the terminal is obtained by the data processing equipment integrated in the target application program (namely, the applet); if the acquisition of the hardware identification fails, collecting hardware capability data of the terminal from N (N is an integer larger than 1) dimensions, and carrying out fusion operation on the hardware capability data of the N dimensions to generate a device fingerprint of the terminal; firstly, the generating process of the device fingerprint is realized in an applet without interaction with other devices (such as a third party), so that the requirement of a networking environment is not required, and the security of the device fingerprint and the generating process of the device fingerprint can be ensured; in addition, the hardware capability data of N dimensions can only identify N hardware capabilities of the terminal, so that the data processing device depends on the hardware capability data of N dimensions to generate device fingerprints, the dependent data can reflect the bottom hardware capability of the terminal more comprehensively and fixedly and is not changed along with the change of an operating system of the terminal, and the uniqueness of the device fingerprints is effectively improved.

FIG. 2 illustrates a flow chart of a data processing method provided in another exemplary embodiment of the present application; the method is executed by a data processing device integrated in a target application, the target application being an installation-free application, and the target application belonging to a sub-application in an application client in the terminal; the method comprises the following steps S201-S203:

s201, calling a first API provided by a father application client of a target application program, and checking whether a leakage event of a hardware identifier exists in a terminal; if yes, go to step S202; otherwise, step S204 is performed.

S202, acquiring a hardware identifier from the leakage event.

S203, if the hardware identifier is successfully acquired, carrying out operation processing on the hardware identifier to generate a device fingerprint of the terminal; thereafter, the flow ends.

In steps S201 to S203, the data processing apparatus preferentially tries to check whether there is a leakage event of a hardware identifier (such as CPUID) in the terminal; specifically, the data processing apparatus invokes a first API provided by the parent application client of the applet to check, for example: the applet in the WeChat client invokes the open first API of the WeChat client to check for leakage events. After the first API is successfully called, it returns the CPUID, which is provided by the applet's parent application client. However, after the first API is successfully invoked, the terminal may play a frame to prompt the user for authorization, and return to the CPUID after the user is authorized; in practical application, due to security, a user usually refuses authorization, so that the CPUID cannot be obtained successfully; in addition, the process that the first API is successfully called and returns the CPUID cannot be quietly implemented, and the process that the applet generates the device fingerprint of the terminal requires quietly implemented, so that the CPUID cannot be obtained by successfully calling the first API. However, it is found through practice that if an error parameter is input in the process of calling the first API, the first API does not play a frame to prompt the user for authorization, but directly returns a call failure prompt, but the CPU ID is exposed in the call failure prompt, so that the CPU ID is leaked. Therefore, in the embodiment of the present application, the data processing device attempts to obtain the CPUID by checking the leakage event by using the above-mentioned characteristics of the first API, as described above, since the leakage event is an event generated by the failure of the first API call due to the error parameter being introduced during the process of calling the first API, the leakage event belongs to a silence event, that is, the generation of the leakage event is not perceived by the user (will not be prompted by the frame), which accords with the silence requirement of the applet on the generation process of the device fingerprint of the terminal; in addition, the CPU UID is exposed by the leakage event, and the CPU IID is a hardware identifier capable of uniquely identifying the terminal, and the CPU UID is used as a generating factor of the device fingerprint, so that the device fingerprint with good uniqueness can be obtained more conveniently. Therefore, if there is a leakage event, the CPUID character string exposed in the leakage event is directly used as an input parameter, the input parameter is operated by a fingerprint generation algorithm such as MD5 algorithm, so as to obtain a device fingerprint of the terminal, which may be a Hash string, and the process is ended. If there is no leakage event, then the following steps S204-S208 need to be continued to generate the device fingerprint of the terminal in other ways.

S204, collecting system information character strings of the terminal.

Step S204 is to collect hardware capability data of the terminal from the operating system dimension. FIG. 3 illustrates a flow chart for collecting system information strings provided by an exemplary embodiment of the present application; as shown in fig. 3, the process of collecting the system information string of the terminal in step S204 specifically includes the following steps S11-S12:

s11, calling a second API provided by a father application client of the target application program, and acquiring hardware information of an operating system; as shown in fig. 3, the hardware information includes at least one of: language setting information, brand information, version information, and screen size information. The language setting information and the brand information can be used for identifying different brands and models of terminals in different batches (namely different brands and different models); the version information and the screen size information can be used to distinguish terminals of the same batch, i.e. for two terminals of the same brand and the same model, the difference between the two terminals of the same batch can be distinguished by the version information and the screen size information.

And s12, generating a system information character string of the terminal according to the hardware information.

In step s11-s12, the hardware information of the operating system of the terminal can be directly obtained through the second API opened by the parent application client of the calling applet, and the calling process belongs to the silent process without a frame to prompt the user for authorization. The system information character string generated according to the acquired hardware information is, for example: { "System" means "android", "version" means "8.1", "brand": "xxglaxy 6" }, the system information string of this example indicates that the operating system of the terminal is an android system version 8.1, the brand is xx, and the model is glaxy 6. As can be seen from the steps s11-s12, the system information string can uniquely identify the hardware capability of the operating system of a terminal, and the system information string is used as the generating factor of the device fingerprint, so that the generated device fingerprint has good uniqueness.

S205, collecting pixel data of the plane graph drawn by the terminal.

Step S205 is to collect hardware capability data of the terminal from the planar graphic rendering dimension. FIG. 4a illustrates a flow chart for collecting pixel data for a flat panel graphic provided in an exemplary embodiment of the present application; as shown in fig. 4a, the flow of collecting pixel data of a flat pattern includes the following steps s21-s23:

s21, creating a plane drawing canvas label, and acquiring the drawing context of the plane graph according to the plane drawing canvas label. In one implementation, the flat drawing picture tag refers to a conva 2D tag, and conva is a tag for drawing graphics with JS, which is a feature of HTML5 (Hyper Text Markup Language 5.0 ). The drawing context of the planar graph can be obtained through the conva 2D label, and the drawing context of the planar graph can refer to an interface set required for drawing the planar graph.

And s22, drawing the plane graph by adopting the drawing context of the plane graph. Specifically, the data processing device transmits the text to be drawn into the drawing context of the planar graph to draw (i.e. render), that is, invokes an interface in the drawing context of the planar graph to render the text to be drawn, and generates the planar graph. In this embodiment, the text to be drawn may include text obtained by mixing multilingual text with unicode (unicode ).

s23, obtaining pixel data of the drawn plane graph.

The key points of steps s21-s23 are: when the text to be drawn is a text obtained by mixing multinational language characters and unicode expressions, because of the difference of GPU rendering capacities and rendering parameters of different terminals, even if the same text is rendered on a plurality of terminals in the same batch, the pixel data of a planar graph generated by rendering also have the difference; referring specifically to the example shown in fig. 4b, the planar graphics rendered from the same text by the 3 terminals in the same batch are 40, 41 and 42, respectively. As shown, the text to be drawn is "this is only one test", and the plane graphic 40 rendered by one of the terminals of the same batch includes text 1 and an icon 401, the text 1 being the english expression "It's just a test" of the text to be drawn. The plane graphic 41 rendered by the other terminal includes a text 2 and an icon 411, the text 2 being a cover of the japanese expression "koku" of the text to be drawn. The still further terminal rendered flat graphic 42 comprises text 3 and an icon 421, the text 3 being a chinese expression of the text to be drawn "this is just one test". The pixel data of the

plane patterns

40, 41, and 42 are different. The method and the device can use the difference to uniquely identify the drawing capability of the planar graph of the terminal by acquiring the pixel data of the planar graph, and then the pixel data of the planar graph is used as a generating factor of the device fingerprint, so that the generated device fingerprint has good uniqueness. In one implementation, the pixel data of the planar pattern refers to the RGBA value of the planar pattern.

S206, collecting pixel data of the stereoscopic image drawn by the terminal.

S207, collecting drawing protocol information of the stereoscopic image of the terminal.

Steps S206-S207 are collecting hardware capability data of the terminal from the stereoscopic image rendering dimension. FIG. 5a illustrates a flow chart for collecting pixel data and drawing protocol information for a stereoscopic image provided in an exemplary embodiment of the present application; as shown in fig. 5a, the process of collecting pixel data of a stereoscopic image includes the following steps s31-s35:

and s31, creating a stereoscopic drawing canvas label, and acquiring the drawing context of the stereoscopic image according to the stereoscopic drawing canvas label. In one implementation, the stereoscopic drawing picture label refers to a conva webgl label; the webgl is a 3D drawing protocol, which allows JS and OpenGLES (OpenGL for Embeddled Systems, which defines a cross-programming language and cross-platform programming professional graphical program interface for a terminal (such as a mobile phone, a PAD, etc.) to be combined together, and by adding a JS binding of OpenGLES, webgl can provide hardware 3D accelerated rendering for HTML5 conva tags. The rendering context of a stereoscopic image herein may refer to the set of interfaces required to render the facade image.

s32, creating triangle vertex data according to the drawing context of the stereoscopic image. A stereoscopic image (3D image) is composed of triangular patches, and drawing a triangle requires data of positions, coordinates, and the like of 3 vertices. The present embodiment creates triangle vertex data by calling an interface in the rendering context of a stereoscopic image.

s33, configuring and compiling a shader. Shaders (shaders) are editable programs used to implement image rendering, replacing fixed rendering pipelines. The compiled loader is a piece of code executed by the GPU of the terminal, and is used to determine how to render the triangle.

s34, calling a drawing interface in the drawing context of the stereoscopic image to render triangle vertex data and the shader, and generating the stereoscopic image.

First, the compiled loader is linked to a program (a linker of OpenGL ES) of the terminal to configure the use of the compiled loader. And secondly, calling a drawing interface in the drawing context of the stereoscopic image, and rendering by using the triangle data and the loader by the GPU of the terminal to obtain a 3D image. The triangle drawn can be seen in the schematic diagram of the example shown in fig. 5 b.

And s35, acquiring pixel data of the stereoscopic image.

In one implementation, the pixel data of the stereoscopic image refers to RGBA values for each triangular patch in the stereoscopic image.

Referring to fig. 5a again, the process of collecting drawing protocol information of stereoscopic images includes the following steps s36-s37:

s36, acquiring basic information of a drawing protocol of the stereoscopic image according to the drawing context of the stereoscopic image.

In one implementation of this embodiment, the drawing protocol of the stereoscopic image refers to webgl. The basic information of webgl is related to the underlying capability of the terminal hardware (such as the open gl ES of android terminal), and will not change with the upgrade of the system.

s37, acquiring extension information of a drawing protocol of the stereoscopic image according to the drawing context of the stereoscopic image. The expansion information of webgl includes: the extended names supported by webgl are enumerated.

The hardware capability data of the stereoscopic image rendering dimension acquired in steps S206 to S207 is used as an inputtable parameter for device fingerprint generation to promote uniqueness, which is mainly expressed in that:

(1) Pixel data of the stereoscopic image. Because the stereo (3D) image is created in real time through webgl and is dynamically rendered, the pixel data of the stereo image generated by rendering are different even if the rendering is performed on two terminals in the same batch due to the difference of GPU rendering capacity and rendering parameters of different terminals; according to the method and the device, the difference is utilized, the three-dimensional image drawing capability of the terminal is uniquely identified by acquiring the pixel data of the three-dimensional image, and the pixel data of the three-dimensional image is used as the generating factor of the device fingerprint, so that the uniqueness of the device fingerprint can be effectively improved.

(2) webgl information. The basic information of webgl is static data, the basic information of webgl is related to GPU hardware capability of a terminal, the basic information of webgl does not change along with upgrading of a system version, and the webgl is used as a device fingerprint generation factor, so that the device fingerprint has good uniqueness.

S208, taking the collected hardware capability data of each dimension as an input parameter, and adopting an MD5 algorithm to carry out operation processing on the input parameter to generate a device fingerprint of the terminal; thereafter, the flow ends.

In one embodiment, the 3-dimensional hardware capability data collected in steps S204-S207 may be used as an overall input parameter, and the overall input parameter may be calculated using the MD5 algorithm to generate a device fingerprint of the terminal. The device fingerprint of the terminal is a hash string, see in particular the example shown in fig. 6. The process of determining the input parameters specifically includes the following (1) - (4): (1) calculating the system information character strings collected in the step S204 by using an MD5 algorithm to obtain a hash value of the dimension of the operating system; (2) and (3) calculating the pixel data of the plane graph collected in the step S205 by using an MD5 algorithm to obtain a hash value under the drawing dimension of the plane graph. (3) And (3) calculating the pixel data of the stereoscopic image and the drawing protocol information of the stereoscopic image collected in the steps S206-S207 by using an MD5 algorithm to obtain a hash value in the drawing dimension of the stereoscopic image. (4) And performing character string splicing on the hash values of each dimension to form input parameters.

The data processing method shown in fig. 1-6 can provide mapping capability of hardware of a terminal to services of an upper layer product (such as an applet) of the terminal. By applying the device fingerprint of the terminal generated by the applet (in particular, the data processing device integrated in the applet) to the wind control management scenario, the wind control management of the service in the applet can be realized based on the device fingerprint of the terminal.

FIG. 7 illustrates a flow chart of a data processing method provided in another exemplary embodiment of the present application; the method is executed by a data processing device integrated in a target application, the target application being an installation-free application, and the target application belonging to a sub-application in an application client in the terminal; the method comprises the following steps S701-S703:

s701, acquiring a service request of a target application program. The service requests in the applet may include, but are not limited to: page requests, API call requests, function call requests, and the like.

S702, acquiring the device fingerprint of the terminal, wherein the device fingerprint of the terminal is generated by adopting the method shown in FIG. 1 or FIG. 2.

S703, sending a service request to the server, wherein the service request carries the device fingerprint of the terminal, so that the server carries out wind control detection on the service request according to the device fingerprint of the terminal, and processes the service request according to the wind control detection result.

The server may refer to the background server of the applet. The wind control detection process in step S703 may include the following: (1) After receiving a service request sent by an applet, a server compares a device fingerprint of a terminal carried in the service request with a device blacklist library; a number of malicious or illegal device fingerprints are included in the device blacklist repository herein. (2) If the device fingerprint of the terminal carried in the service request hits the device blacklist library, the risk of the service request is indicated; if the device fingerprint of the terminal carried in the service request does not hit the device blacklist library, the service request is free of risk. The processing of the service request by the server in step S703 according to the wind control detection result includes: if the service request is at risk, the server intercepts the service request or discards the service request; if the service request is not risky, the server responds to the service request. By means of wind control detection of the server, judgment and processing of risk of the service request of the small program can be achieved, and functions such as anti-pulling wool and anti-garbage registration are achieved. In addition, the server may also periodically (for example, every 12 hours, every day, etc.) count the wind control detection results of the service request of the applet, form a wind control log of the applet, and send the wind control log of the applet to the developer or the operation staff of the applet, and fig. 8 is a page display diagram of the wind control log of the applet provided in an exemplary embodiment of the present application; the developer or operator of the applet can intuitively and timely capture the anomalies in the applet through the page shown in fig. 8.

In the embodiment of the application, the data processing device integrated in the target application program (namely the applet) generates the device fingerprint of the terminal, the device fingerprint has good uniqueness, and the device fingerprint of the terminal can be applied to a wind control management scene.

FIG. 9 is a schematic diagram of a data processing apparatus according to an exemplary embodiment of the present application; the data processing device is integrated in the target application, and in one embodiment, the data processing device is integrated in the code of the target application in the form of an SDK (Software Development Kit ). The target application program is an installation-free application program, and belongs to a sub-application program in one application client side in the terminal; i.e. the target application is an applet. The data processing apparatus includes:

an acquiring unit 901, configured to acquire a hardware identifier of a terminal.

And the collecting unit 902 is configured to collect, if the obtaining of the hardware identifier fails, hardware capability data of the terminal from N dimensions, where N is an integer greater than 1.

The processing unit 903 is configured to perform a fusion operation on the hardware capability data in N dimensions, and generate a device fingerprint of the terminal.

In one embodiment, the processing unit 903 is further configured to: if the hardware identifier is successfully acquired, the hardware identifier is operated to generate the device fingerprint of the terminal.

In one embodiment, the obtaining unit 901 is specifically configured to:

invoking a first application programming interface provided by a father application client of the target application program, and checking whether a leakage event of a hardware identifier exists in the terminal;

if so, a hardware identification is obtained from the leakage event.

In one embodiment, the N dimensions include an operating system dimension, and the hardware capability data of the operating system dimension includes a system information string of the terminal; the collecting unit 902 is specifically configured to:

calling a second application programming interface provided by a father application client of the target application program to acquire hardware information of an operating system;

generating a system information character string of the terminal according to the hardware information;

wherein the hardware information includes at least one of: language setting information, brand information, version information, and screen size information.

In one embodiment, the N dimensions include a planar graphics rendering dimension, and the hardware capability data of the planar graphics rendering dimension includes pixel data of the planar graphics; the collecting unit 902 is specifically configured to:

Creating a plane drawing canvas label, and acquiring the drawing context of the plane graph according to the plane drawing canvas label;

drawing a plane graph by adopting the drawing context of the plane graph;

and acquiring pixel data of the planar graph obtained by drawing.

In one embodiment, the N dimensions include a stereoscopic image rendering dimension, and the hardware capability data of the stereoscopic image rendering dimension includes pixel data of the stereoscopic image; the collecting unit 902 is specifically configured to:

creating a three-dimensional drawing canvas label, and acquiring the drawing context of the three-dimensional image according to the three-dimensional drawing canvas label;

creating triangle vertex data according to the drawing context of the stereoscopic image, and configuring and compiling a shader; the method comprises the steps of,

invoking a drawing interface in a drawing context of the stereoscopic image to render triangle vertex data and a shader to generate the stereoscopic image;

pixel data of a stereoscopic image is acquired.

In one embodiment, the hardware capability data of the stereoscopic image rendering dimension further includes rendering protocol information of the stereoscopic image; the collecting unit 902 is further configured to:

and acquiring drawing protocol information of the stereoscopic image according to the drawing context of the stereoscopic image, wherein the drawing protocol information of the stereoscopic image comprises basic information and extension information of the drawing protocol of the stereoscopic image.

In one embodiment, the processing unit 903 is specifically configured to:

setting the hardware capability data of N dimensions as input parameters;

and carrying out operation processing on the input parameters by adopting a fingerprint generation algorithm to generate the device fingerprint of the terminal.

Based on the same inventive concept, the principle and beneficial effects of the data processing apparatus provided in this embodiment are similar to those of the data processing method shown in fig. 1 or fig. 2, so the present embodiment may refer to the principle and beneficial effects of implementation of the method shown in fig. 1 or fig. 2, and are not described herein for brevity.

FIG. 10 is a schematic diagram of a data processing apparatus according to another exemplary embodiment of the present application; the data processing device is integrated in the target application, and in one embodiment, the data processing device is integrated in the code of the target application in the form of an SDK (Software Development Kit ). The target application program is an installation-free application program, and belongs to a sub-application program in one application client side in the terminal; i.e. the target application is an applet.

The data processing apparatus includes:

a request acquiring unit 1001, configured to acquire a service request of a target application program.

A fingerprint acquisition unit 1002, configured to acquire a device fingerprint of the terminal.

The processing unit 1003 is configured to send a service request to the server, where the service request carries a device fingerprint of the terminal, so that the server performs wind control detection on the service request according to the device fingerprint of the terminal, and processes the service request according to a wind control detection result.

Wherein the device fingerprint of the terminal obtained by the fingerprint obtaining unit 1002 may be generated by the data processing device performing the method shown in fig. 1 or fig. 2.

Based on the same inventive concept, the principle and beneficial effects of the data processing apparatus provided in this embodiment are similar to those of the data processing method shown in fig. 7, so the present embodiment may refer to the principle and beneficial effects of implementation of the method shown in fig. 7, and are not repeated herein for brevity.

Fig. 11 is a schematic structural diagram of a terminal according to an exemplary embodiment of the present application. Referring to fig. 11, the terminal may be a mobile phone, a smart phone, a PDA (tablet computer), a smart wearable device (e.g., a smart watch, a smart bracelet), etc. The terminal can include input devices and output devices, as well as a processor 1101 and a computer readable storage medium 1102. The input devices, output devices, processor 1101, and computer readable storage medium 1102 may be connected by a bus or other means. Wherein the input device may include, but is not limited to: devices such as a radio frequency receiver, a keyboard, a touch screen and the like; the output devices may include, but are not limited to, radio frequency transmitters and the like.

The computer-readable storage medium 1101 is a memory device in the terminal, and is provided in a memory of the terminal. The computer readable storage medium 1101 herein may include a built-in storage medium in the terminal, or may include an extended storage medium supported by the terminal, or may be a high-speed RAM memory or a non-volatile memory (non-volatile memory), such as at least one disk memory; optionally, at least one computer readable storage medium remotely located from the aforementioned processor. The computer readable storage medium 1101 provides a storage space for storing an operating system of the terminal and also for storing programs and data. In one implementation of the present embodiment, a computer readable storage medium stores 1101 a target application, the target application being an installation-free application, the target application being a sub-application in an application client in a terminal; and the target application has integrated therein a data processing device in the form of an SDK, i.e. a data processing device, adapted to be loaded by the processor 1102 for implementing the respective steps of the data processing method in the embodiments shown in fig. 1-2 or fig. 7.

In one embodiment, the processor 1102 loads the SDK in the computer readable storage medium 1101 and performs the steps of:

acquiring a hardware identifier of a terminal;

if the hardware identification is failed to be acquired, collecting hardware capability data of the terminal from N dimensions, wherein N is an integer greater than 1;

In one implementation, the processor 1102 loads the SDK in the computer readable storage medium 1101 and also performs the steps of: if the hardware identifier is successfully acquired, the hardware identifier is operated to generate the device fingerprint of the terminal.

In one embodiment, when the processor 1102 loads the SDK in the computer-readable storage medium 1101 to perform the step of obtaining the hardware identification of the terminal, the following steps are specifically performed:

if so, a hardware identification is obtained from the leakage event.

In one embodiment, the N dimensions include an operating system dimension, and the hardware capability data of the operating system dimension includes a system information string of the terminal; when the SDK loaded in the computer-readable storage medium 1101 performs the step of collecting hardware capability data of the terminal from N dimensions, the processor 1102 specifically performs the steps of:

In one embodiment, the N dimensions include a planar graphics rendering dimension, and the hardware capability data of the planar graphics rendering dimension includes pixel data of the planar graphics; when the SDK loaded in the computer-readable storage medium 1101 performs the step of collecting hardware capability data of the terminal from N dimensions, the processor 1102 specifically performs the steps of:

drawing a plane graph by adopting the drawing context of the plane graph;

and acquiring pixel data of the planar graph obtained by drawing.

In one embodiment, the N dimensions include a stereoscopic image rendering dimension, and the hardware capability data of the stereoscopic image rendering dimension includes pixel data of the stereoscopic image; when the SDK loaded in the computer-readable storage medium 1101 performs the step of collecting hardware capability data of the terminal from N dimensions, the processor 1102 specifically performs the steps of:

pixel data of a stereoscopic image is acquired.

In one embodiment, the hardware capability data of the stereoscopic image rendering dimension further includes rendering protocol information of the stereoscopic image; when the processor 1102 loads the SDK in the computer-readable storage medium 1101 to perform the step of collecting hardware capability data of the terminal from N dimensions, the following steps are also performed:

In one embodiment, when the processor 1102 loads the SDK in the computer readable storage medium 1101 to perform a fusion operation on the hardware capability data of N dimensions, the following steps are specifically executed to generate a device fingerprint of the terminal:

Setting the hardware capability data of N dimensions as input parameters;

In another embodiment, the processor 1102 loads the SDK in the computer readable storage medium 1101 and performs the steps of:

acquiring a device fingerprint of the terminal, wherein the device fingerprint of the terminal is generated by adopting the method in the embodiment shown in the figures 1-2;

According to one aspect of the present application, there is provided a computer program product or computer program comprising computer instructions stored in a computer readable storage medium. The processor of the computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions, so that the computer device performs the data processing method in the embodiments shown in fig. 1-2 and 7.

Those skilled in the art will appreciate that implementing all or part of the above-described methods in accordance with the embodiments may be accomplished by way of a computer program stored on a computer readable storage medium, which when executed may comprise the steps of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), or the like.

The foregoing disclosure is only illustrative of the preferred embodiments of the present application and is not intended to limit the scope of the claims herein, as the equivalent of the claims herein shall be construed to fall within the scope of the claims herein.

Claims

1. A data processing method, characterized in that the method is performed by a data processing device integrated in a target application, the target application being an installation-free application and the target application belonging to a sub-application in an application client in a terminal; the method comprises the following steps:

acquiring a hardware identifier of the terminal;

if the hardware identification fails to be acquired, collecting hardware capability data of the terminal from N dimensions, wherein N is an integer greater than 1; hardware capability data of one dimension is used to uniquely identify one hardware capability of the terminal;

performing fusion operation on the hardware capability data of N dimensions to generate device fingerprints of the terminal;

the N dimensions comprise at least two dimensions of an operating system dimension, a plane graph drawing dimension and a stereoscopic image drawing dimension; the hardware capability data of the planar graph drawing dimension is used for uniquely identifying the planar graph drawing capability of the terminal; the hardware capability data of the stereoscopic image drawing dimension is used for uniquely identifying the stereoscopic image drawing capability of the terminal and the hardware capability of the graphics processor.

2. The method of claim 1, wherein the obtaining the hardware identification of the terminal comprises:

and if the hardware identification exists, acquiring the hardware identification from the leakage event.

3. The method of claim 1, wherein the N dimensions include an operating system dimension, and the hardware capability data of the operating system dimension includes a system information string of the terminal, the system information string being used to uniquely identify a hardware capability of an operating system of the terminal;

the collecting hardware capability data of the terminal from N dimensions includes:

invoking a second application programming interface provided by a father application client of the target application program to acquire hardware information of the operating system;

4. The method of claim 1, wherein the N dimensions comprise a planar graphics rendering dimension, and the hardware capability data of the planar graphics rendering dimension comprises pixel data of a planar graphic; the pixel data of the plane graph is used for uniquely identifying the plane graph drawing capability of the terminal;

creating a plane drawing canvas label, and acquiring the drawing context of a plane graph according to the plane drawing canvas label;

drawing the plane graph by adopting the drawing context of the plane graph;

and acquiring pixel data of the planar graph obtained by drawing.

5. The method of claim 1, wherein the N dimensions comprise a stereoscopic image rendering dimension, the hardware capability data of the stereoscopic image rendering dimension comprising pixel data of a stereoscopic image; the pixel data of the stereoscopic image is used for uniquely identifying the stereoscopic image drawing capability of the terminal;

creating a three-dimensional drawing canvas tag, and acquiring a drawing context of a three-dimensional image according to the three-dimensional drawing canvas tag;

invoking a drawing interface in the drawing context of the stereoscopic image to render the triangle vertex data and the shader to generate the stereoscopic image;

And acquiring pixel data of the stereoscopic image.

6. The method of claim 5, wherein the hardware capability data of the stereoscopic image rendering dimension further comprises rendering protocol information of a stereoscopic image; the drawing protocol information of the stereoscopic image is used for uniquely identifying the hardware capability of a graphic processor of the terminal;

the collecting the hardware capability data of the terminal from the N dimensions further comprises:

7. The method of claim 1, wherein the fusing the N-dimensional hardware capability data to generate the device fingerprint of the terminal comprises:

carrying out hash calculation on the hardware capacity data of each dimension respectively to obtain hash values of each dimension;

splicing the hash values of the N dimensions to form input parameters;

and performing fingerprint operation processing on the input parameters to generate the device fingerprint of the terminal.

8. A method of data processing, the method comprising:

Acquiring a service request of a target application program; the target application program is an installation-free application program, and belongs to a sub-application program in an application client in the terminal;

acquiring a device fingerprint of the terminal, the device fingerprint of the terminal being generated using the method of any one of claims 1-7;

and sending the service request to a server, wherein the service request carries the equipment fingerprint of the terminal, so that the server carries out wind control detection on the service request according to the equipment fingerprint of the terminal, and processes the service request according to the wind control detection result.

9. A data processing device, characterized in that the data processing device is integrated in a target application, the target application being an installation-free application and the target application belonging to a sub-application in an application client in a terminal; the apparatus comprises:

the collecting unit is used for collecting the hardware capability data of the terminal from N dimensions if the hardware identification fails to be obtained, wherein N is an integer greater than 1; hardware capability data of one dimension is used to uniquely identify one hardware capability of the terminal;

The processing unit is used for carrying out fusion operation on the hardware capability data of N dimensions and generating equipment fingerprints of the terminal;

10. A data processing apparatus, the apparatus comprising:

a request acquisition unit, configured to acquire a service request of a target application program; the target application program is an installation-free application program, and belongs to a sub-application program in an application client in the terminal;

a fingerprint acquisition unit for acquiring a device fingerprint of the terminal, the device fingerprint of the terminal being generated using the method of any one of claims 1-7;

the processing unit is used for sending the service request to a server, wherein the service request carries the equipment fingerprint of the terminal, so that the server carries out wind control detection on the service request according to the equipment fingerprint of the terminal, and processes the service request according to the wind control detection result.

11. A terminal comprising an input device and an output device, further comprising:

a computer readable storage medium storing a target application program, the target application program being an installation-free application program, the target application program being a sub-application program in an application client in the terminal; and the target application has integrated therein a data processing device, which is integrated in the target application in the form of a software development kit, which is adapted to be loaded by the processor and to perform the data processing method according to any of claims 1-8.

12. A computer-readable storage medium storing a computer program, the computer-readable storage medium storing a target application program, the target application program being an installation-free application program, the target application program being a sub-application program in an application client in the terminal; and the target application has integrated therein a data processing device, which is integrated in the target application in the form of a software development kit, which data processing device is adapted to be loaded by the processor and to perform the data processing method according to any of claims 1-8.