KR101356584B1 - The method, server and system for monitoring unfair user in the game - Google Patents

Abstract

The present invention relates to a technique for monitoring fraudulent users in a game.
According to the present invention, a game user who normally proceeds with a game can select a user who is supposed to proceed with a game in a fraudulent manner, and monitor a fraudulent progress of the selected user to control the fraudulent user more quickly. A method, server, and system for monitoring fraudulent users in a game to make them feel reliable.

Description

How to monitor fraudulent users in games, servers and systems {THE METHOD, SERVER AND SYSTEM FOR MONITORING UNFAIR USER IN THE GAME}

The present invention relates to a technique for monitoring fraudulent users in a game.

As online games become more active and item trading becomes more active, more and more users are exploiting it.

The representative one is the 'workshop', which refers to a group that develops game characters, acquires items, and sells them by using an abnormal method for the purpose of profiting.

The workplace sells items and takes unfair profits using the psychology of game users who want good characters and good items, and runs illegal programs such as autorun programs to obtain more items faster than ordinary gamers. Let the game proceed without stopping.

The autorun program is a game autohunt program that allows to increase the speed of a character in a game without legitimate authority or to continue hunting or the like without consuming energy. In general, there is a limit to the number of monsters that appear simultaneously in the game, and monsters that offer good items as rewards tend to appear concentrated in certain areas of the game. Therefore, when a workplace force using an autorun program occupies the area, it is common that general game users cannot even enter the area.

As workplace power increases and the consequences of this increase, the importance of using the autorun program to crack down on characters running games is becoming increasingly important. However, a method of automatically identifying a workplace through a game progress control signal from a server controlling a game includes a game progress control signal received from a user terminal using an autorun program and a game progress control of a user terminal normally using a game. There is a problem that the identification is not easy because the signals are similar.

Against this background, the object of the present invention is to select a user who is suspected of proceeding with the game in an illegal manner, and to monitor the illegal progress of the selected users more quickly to crack down on the illegal user. It is to make game users feel reliable about game service.

In order to achieve the above object, in one aspect, the present invention, in the method for the server to monitor the illegal user in the game, among the plurality of user identification information satisfying the preset condition for extracting the illegal user candidate based on the user's game history A negative user candidate extracting step of extracting user identification information; A grouping step of classifying user identification information corresponding to a predetermined grouping condition based on the game access information of the user among the extracted user identification information to generate a negative user group; And providing an illegal user information for providing a user terminal with user identification information belonging to each of the illegal user groups.

In another aspect, the present invention, the negative user candidate extracting unit for extracting the user identification information satisfying the predetermined negative user candidate extraction condition of the plurality of user identification information; A group generation unit configured to classify user identification information matching the preset grouping condition among the extracted user identification information and to generate a negative user group; And a communication unit which transmits user identification information belonging to each illegal user group to an administrator terminal.

In another aspect, the present invention, the user identification information satisfying a predetermined negative user candidate extraction condition of the plurality of user identification information, classify the user identification information matching each other to the preset grouping condition to generate a negative user group and A server for transmitting user identification information belonging to each illegal user group; And an administrator terminal for receiving and outputting the user identification information.

As described above, according to the present invention, it is possible to prevent the game from being progressed unfairly by some users in the game, thereby preventing illegal character growth, item acquisition, and commercial use thereof. have.

In addition, the present invention screens the users who are supposed to proceed with the game in an illegal manner, and monitors whether or not the proceeding is illegal for the selected users. There is an effect that can increase the satisfaction of the game service you feel.

In addition, the present invention can reduce the human and physical resources required to monitor fraudulent users by first selecting users corresponding to a predetermined condition that can be estimated as fraudulent users, and furthermore, there is an advantage that the game service can be more efficiently provided. .

1 is a block diagram showing a system for monitoring an illegal user in a game according to an embodiment of the present invention.
2 is a block diagram showing the configuration of a server for monitoring illegal users in a game according to a temporary embodiment of the present invention.
3 and 4 are exemplary diagrams showing an example of a method for creating a negative user group according to an embodiment of the present invention.
5 is a flowchart illustrating a method for monitoring an illegal user in a game according to an embodiment of the present invention.

The present invention is characterized in that the users extracted based on the game access information of the user are grouped according to a specific condition, and whether the game is played in an unfair manner for the users belonging to the group.

In the present invention, the meaning of "playing the game in an unfair manner" means that the character proceeds the game automatically without any manipulation in the game, increases the speed of the character in the game without proper authority, or hunts without consuming energy. If you use an auto-run program that allows you to continue your activities, etc. If you find a bug in the game program and take unfair advantage of it, it is executed during the game, such as a crack or bug program, to develop characters or to develop items in an abnormal way. It may include all kinds of illegal programs that can be obtained.

In addition, the game provided by the present invention is a multiplayer online game based on a mutual relationship with other users while connected to a wired or wireless network, and the user can proceed with or connected to a wired or wireless network. In games of various genres, such as action games, simulation games, shooting games, and the like, the game may be easily modified and applied as long as the above-described illegal methods can be applied.

Hereinafter, some embodiments of the present invention will be described in detail with reference to exemplary drawings. It should be noted that, in adding reference numerals to the constituent elements of the drawings, the same constituent elements are denoted by the same reference symbols as possible even if they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In describing the components of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are intended to distinguish the constituent elements from other constituent elements, and the terms do not limit the nature, order or order of the constituent elements. When a component is described as being "connected", "coupled", or "connected" to another component, the component may be directly connected to or connected to the other component, It should be understood that an element may be "connected,""coupled," or "connected."

1 is a block diagram showing a system for monitoring an illegal user in a game according to an embodiment of the present invention.

Referring to FIG. 1, a system for monitoring an illegal user in a game according to an exemplary embodiment of the present invention includes a server 100 and an administrator terminal 200 connected to each other through a network N.

The server 100 presets an illegal user candidate extraction condition and a grouping condition based on user identification information, and compares the user identification information among the plurality of user identification information with the grouping condition with respect to user identification information that satisfies the illegal user candidate extraction condition. The matching user identification information may be classified and generated as a negative user group, the user identification information belonging to each illegal user group may be transmitted, and the administrator terminal 200 may receive and output the user identification information.

After receiving the user identification information belonging to the illegal user group from the server 100, the manager terminal 200 requests the server 100 for game progress information of the game user corresponding to the user identification information. In addition, it is determined whether the game user actually proceeds with the game in an illegal manner according to the received game progress information of the game user, and the illegal user so that the server access or game execution for the user identification information is restricted according to the determination result. A sanction command is generated and sent to the server 100.

The server 100 receiving the illegal user sanction command from the administrator terminal 200 may limit the server access to the user identification information included in the received illegal user sanction command or stop the progress of the game.

In addition, the server 100 may transmit the user identification information belonging to the unauthorized user group in the form of a message or an email to the manager terminal 200, and the user identification information transmitted to the manager terminal 200 may be in a text format or spread. It can be transferred in the form of a file in a sheet format. In this case, the format of the file including the user identification information and transmitted to the manager terminal 100 is not limited to the above-described text format or spreadsheet format, and the server 100 or the manager terminal 200 according to an embodiment of the present invention. The file formats supported by) can be applied.

The manager terminal 200 may include a general PC such as a general desktop or a notebook, and may include a mobile terminal such as a smart phone, a tablet PC, a personal digital assistant (PDA) and a mobile communication terminal, but is not limited thereto. Rather, it should be broadly interpreted as any electronic device that can communicate with the server 100.

The server 100 has the same configuration as a conventional web server, a web application server, or a WAP server. However, in software, as described in detail below with respect to FIG. 2, a program module implemented through various languages such as C, C ++, Java, PHP, .Net, Python, Ruby, and performing various functions. (Module) may be included.

In addition, the server 100 may be connected to an unspecified number of clients (including the manager terminal 200) and / or another server through the network N, whereby the server 100 may be a client or another server. It may refer to a computer system that receives a request for performance and derives and provides a work result thereof, or computer software (server program) installed for the computer system.

In addition to the above-described server programs, the server 100 may also include a broad concept including a series of application programs running on the server 100 and, in some cases, various databases built in or outside the server 100 It should be understood.

Here, the database may mean a collection of data in which data such as information or data is structured and managed for the purpose of being used by the server 100 or another device, and may mean a storage medium storing the collection of data. have.

Such a database may include a plurality of databases classified according to a data structure, a management method, and the like.

In some cases, the database may include a database management system (DBMS), which is software for adding, modifying, or deleting information or data.

The server 100 may be implemented using a server program that is variously provided according to operating systems such as DOS, Windows, Linux, UNIX, Macintosh, and the like for general server hardware. Representative examples include Apache, Nginx, and Light HTTP, which are used in a web site (Website), Internet Information Server (IIS), and Unix.

The network N is a network connecting the server 100 and the manager terminal 200, and may be a closed network such as a local area network (LAN), a wide area network (WAN), or the like. It may be an open network such as Here, the Internet includes various services existing in the TCP / IP protocol and its upper layers such as HTTP (HyperText Transfer Protocol), Telnet, File Transfer Protocol (FTP), Domain Name System (DNS), Simple Mail Transfer Protocol (SMTP), The global open computer network architecture that provides Simple Network Management Protocol (SNMP), Network File Service (NFS), and Network Information Service (NIS).

In addition, when the manager terminal 200 includes a mobile terminal such as a smartphone, a tablet PC, a personal digital assistant (PDA), and a mobile communication terminal, the network N may be wirelessly accessed, such as a mobile communication network or a Wi-Fi network. It may further include a network.

Hereinafter, a method and a server for monitoring an illegal user in a game according to an embodiment of the present invention described with reference to FIG. 1 will be described in more detail with reference to FIGS. 2 to 4.

2 is a block diagram showing the configuration of a server for monitoring illegal users in a game according to a temporary embodiment of the present invention.

Referring to FIG. 2, the server 100 for monitoring an illegal user in a game according to a temporary embodiment of the present invention may extract irregularities for extracting user identification information satisfying a predetermined illegal user candidate extraction condition from a plurality of user identification information. A user candidate extracting unit 110, a group generation unit 130 for classifying user identification information matching the preset grouping condition among the extracted user identification information, and generating a user group as an illegal user group; And a communication unit 150 for transmitting belonging user identification information to the manager terminal.

The apparatus may further include a monitoring controller 140 which generates a list of user identification information belonging to each illegal user group and information linked with the user identification information and transmits the list to the administrator terminal 200. The controller 140 may extract game progress information associated with user identification information belonging to each illegal user group for each illegal user group, and monitor whether the game is progressed in an illegal manner.

In addition, the grouping condition management unit 120 for setting and managing the game access information of the terminal corresponding to the extracted user identification information and including the personal information corresponding to the user identification information as the grouping condition, the user identification information, The apparatus may further include a user information storage unit 160 that stores game progress information, game history information, or personal information associated with the user identification information.

The monitoring control unit 140 may extract game history information linked with user identification information of each user who uses a game service from the user information storage unit and transfer the game history information to the unauthorized user candidate extracting unit 110.

The fraudulent user candidate extracting unit 110 may analyze or analyze the game history information received from the monitoring control unit 140 to calculate or confirm a game progress time of a user corresponding to user identification information. Check the number of tasks completed while the terminal is connected to the server providing the game service.

The fraudulent user candidate extracting unit 110 corresponds to a case where the user access information corresponding to the user identification information is equal to or greater than a certain value or when the user identification information with a certain number of tasks completed or more while accessing a server providing a game service exists. The user identification information is extracted as a fraudulent user candidate.

That is, in general, a fraudster such as a workplace tends to maintain a connection with a server providing a game service for a relatively long time compared with a general user who normally uses a game service. The negative user candidate extracting unit 110 according to the embodiment of the present invention is devised in this regard, and the negative user candidate extracting unit 110 calculates an average access time of users who use a game service, and the calculated In comparison with the average access time and the access time of each user, a user having an extremely long access time may be extracted as a user candidate for a user who needs to confirm whether the user is an unauthorized user or not.

Similarly, since the fraudulent user is more likely to use the game service for a long time, the number of tasks completed in the game when connected is higher than that of the general user. ) Is calculated by averaging the number of tasks performed by the general user once connected, and comparing the calculated average number of completed tasks with the number of tasks completed by each user once connected to have a significantly higher number of completed tasks. In the case of a user, the user identification information of the user can be extracted by estimating the user candidate who needs to check whether the user is not a fraudster.

The group generation unit 130 classifies user identification information matching the preset grouping condition among the user identification information extracted by the negative user candidate extracting unit 110 to generate a negative user group.

The grouping condition is based on the game access information linked with the user identification information extracted as the candidate for the illegal user, the minimum number of users grouping the same IP number up to a specific class of the access IP information included in each extracted game access information The above-mentioned IP grouping condition, the network uniqueness information of the terminal included in each extracted game access information, and the same network grouping condition in which the same user is greater than or equal to the minimum number of groups, and the user identification information extracted as the candidate for the illegal user target One or more of the personal information grouping conditions may correspond to a user whose information described in a specific item of the personal information is equal to or greater than the minimum number of groups.

The minimum number of groups means a minimum number of user identification information in which user identification information having the same grouping condition can be generated as one group. This is a 'group' of fraudulent users who work to develop game characters, acquire items, and sell them using abnormal methods for the purpose of gaining profits. In reality, several computing devices are placed in one place to play the game in an abnormal way. do.

That is, when the user identification information having the same grouping condition is classified as less than the minimum number of groups, it may be determined that the user is less likely to be a fraudulent user and may not be generated as a group.

The grouping condition manager 120 sets and manages the game access information of the terminal 200 corresponding to the extracted user identification information as the grouping condition as described above, wherein the game access information is the extracted user identification. Includes personal information associated with the information.

As described above, the monitoring control unit 140 may generate each user identification information included in the group as a list and control the list to be transmitted to the manager terminal 200 through the communication unit 150. In addition, when the list is received by the manager terminal 200, a command may be generated and transmitted together so that the list is displayed on the screen of the manager terminal 200.

When the list is transmitted to the manager terminal 200, the monitoring control unit 140 may be configured to transmit the user ID information included in the illegal user sanction command according to the illegal user sanction command received from the manager terminal 200. It is possible to limit the connection to the server providing the game service or to generate and transmit a command to stop the progress of the game in the terminal proceeding the game through the user identification information.

In addition, the monitoring control unit 140 may directly extract game progress information linked with the user identification information included in the list, and monitor whether the user terminal corresponding to the user identification information proceeds in an illegal manner.

Meanwhile, the grouping condition will be described in more detail with reference to FIGS. 3 and 4 as follows.

3 and 4 are exemplary diagrams showing an example of a method for creating a negative user group according to an embodiment of the present invention.

Referring to FIG. 3, a negative user group generated according to an embodiment of the present invention may be generated by applying grouping conditions to game access information linked with user identification information.

Grouping condition according to an embodiment of the present invention, as shown in Figure 3 (a), for the game connection information corresponding to the user identification information, IP to the specific class of the connection IP information contained in the game connection information The same number of users may be more than the minimum number of groups.

IP information, or IP address, is a special number used by devices on a computer network to recognize and communicate with each other.If a device is connected to a network, it must be held by all machines, whether routers or general servers. Messages are sent and received using. The IP address is generally composed of 12 numbers and can be distinguished into 4 units based on dots. The user identification information having the same number representing IPs up to a certain unit is used for game service through the same network or adjacent networks. It can be assumed that the server is connected to the providing server.

Referring to FIG. 3 (a) as an example, when looking at the IP address for each user identification information located below the user identification information N01pm023i, the numbers from the leftmost digit to the ninth digit are identical. . As shown in FIG. 3A, each user identification information generated as a group can be estimated to be connected to a server providing a game service through the same network.

As such, when the user identification information corresponding to a certain number of numbers and digits for each number constituting the IP address is equal to or greater than the minimum number of groups, the group generator assumes that the corresponding user identification information belongs to one group. The user identification information such as N09nwpek belonging to the game is actually monitored using an illegal method to proceed.

Grouping conditions according to an embodiment of the present invention, as shown in Figure 3 (b), with respect to the game access information corresponding to the user identification information extracted as the candidate for the illegal user target, the terminal of the terminal included in the game access information; User identification information having the same network specific information with respect to the network specific information may be more than the minimum number of groups.

The network specific information includes a MAC address, which is a media access control address (MAC address), an Ethernet hardware address, and an adapter address as a quasi-unique identifier attached to most network adapters (NICs) in computer networking. All of these possible computing devices are assigned.

When connecting to a server providing a game service through a network device such as a switch, a switching hub, or a router controlling multiple computers to simultaneously communicate with the Internet, game access information recorded in the server providing the game service is It may be a MAC address assigned to the network equipment, in which case the same MAC address may be identified in game access information of multiple users.

As described above, a user who runs a game through an illegal method in a group, such as a workplace, can play the game with a related facility in one place. It can be created as a group to monitor whether the user corresponding to each user identification information included in one group is not a fraudulent user.

On the other hand, the grouping condition according to an embodiment of the present invention, based on the personal information of the user stored with the user identification information in the server providing the game service, and the user identification information extracted as the candidate candidate for the illegal user; Among the personal information to be linked, the information described in a specific item may be equal to or more than a minimum number of groups.

Referring to Figure 4, in relation to the grouping condition according to an embodiment of the present invention, the personal information associated with the user identification information, the question is provided so that the ID, the user's name, email address, address, password can be confirmed when lost And accordingly data such as an answer written by a user.

Among these personal information, the e-mail address C1 is necessary for notifying the contents related to the game service by e-mail. If a general user using the game service, a different e-mail address is typically described for each user identification information. Similarly, the question or answer (C2) provided to check if the password is lost is implemented to be selected and written by the user. Therefore, if a general user using the game service has the same password verification question and answer information for each user identification information, Very unlikely to be recorded.

Therefore, if the e-mail address (C1) or password confirmation question and answer information (C2) having a uniqueness to the user identification information as a grouping condition, the user identification information or password confirmation question and answer information that is determined to be the same The user identification information determined to be the same may be selected, and when the number of the selected user identification information is greater than or equal to the minimum number of groups, the selected user identification information may be bundled into one group. Accordingly, the monitoring control unit or the manager terminal can monitor whether the user corresponding to the user identification information belonging to the group is an illegal user.

5 is a flowchart illustrating a method for monitoring an illegal user in a game according to an embodiment of the present invention.

Referring to FIG. 5, a method for monitoring an illegal user in a game according to an exemplary embodiment of the present disclosure may include extracting a negative user candidate extracting user identification information satisfying a preset negative user candidate extraction condition from a plurality of user identification information. And a grouping step (S120) of classifying user identification information matching the preset grouping condition among the extracted user identification information as a negative user group, and generating user identification information belonging to each of the illegal user groups. Provided to the unauthorized user information providing step (S130).

The illegal user candidate extracting step may include: extracting game history information (S100) for extracting game history information linked to each of the user identification information, and accessing the game progress time or the server included in the extracted game history information; And a candidate condition checking step (S110) of extracting user identification information, which is determined to be greater than or equal to a predetermined value, as a negative user candidate.

In the negative user information providing step (S130), a negative user list is generated based on user identification information belonging to each negative user group and game history information corresponding to the user identification information, and an administrator terminal is generated based on the generated negative user list. To provide.

When the illegal user sanction command is received from the administrator terminal after transmitting the illegal user list to the administrator terminal, access to a server that provides a game service to a terminal corresponding to the user identification information included in the illegal user sanction command. It may further include a negative user sanction step (S140) is made to limit the sanctions or the like, the process of stopping the progress of the game performed in the terminal.

The fraudulent user candidate extracting step (S100, S110), the grouping step (S120), and the fraudulent user information providing step (S130) may be repeatedly performed by a predetermined time unit, and a plurality of fraudulent user candidates that are repeatedly generated are repeatedly performed. By comparing the information and the fraudulent user group information, it is possible to more accurately detect fraudulent users who are supposed to play the game in a fraudulent manner.

That is, as the negative user candidate extraction steps S100 and S110 are repeatedly performed in a predetermined time unit, negative user candidate information derived in the steps S100 and S110 may also be repeatedly generated. Compared with the user candidate information, if the previously generated negative user candidate information and the subsequently generated negative user candidate information include the same user identification information, the probability that the user corresponding to the user identification information is the illegal user It can be judged that this is high.

Similarly, when the grouping step (S120) is performed repeatedly by a predetermined time unit, a group is generated according to the same grouping conditions by comparing the previously generated grouping information and the later generated grouping information and containing the same user identification information If each is included, it can be determined that the user corresponding to the user identification information belonging to the group has a high probability of being a fraudulent user.

Therefore, the monitoring control unit may monitor the game progress information corresponding to the user identification information or generate a fraudulent user list and provide it to the manager terminal.

In the above description, a method for monitoring an illegal user in a game according to an embodiment of the present invention has been described as being performed in the same manner as in FIG. In the implementation procedure of each step may be changed, two or more steps may be integrated, or one step may be separated into two or more steps.

The method for monitoring an illegal user in a game according to the above-described embodiment of the present invention is implemented as an application (that is, a program) installed in the server 100 or directly installed by an administrator, and the terminal 200. Or a computer readable recording medium.

A program implementing the method for monitoring an illegal user in a game according to an embodiment of the present invention includes a function of extracting user identification information satisfying a predetermined illegal user candidate extraction condition among a plurality of user identification information, and the extracted user. The function of classifying user identification information matching the preset grouping condition among the identification information into a negative user group, and providing a user terminal with user identification information belonging to each illegal user group to the administrator terminal. In addition, all functions corresponding to the method for monitoring the illegal user in the game according to the embodiment of the present invention described above with reference to FIGS. 1 to 5 may be executed.

Such a program may be recorded on a recording medium that can be read by a computer and executed by a computer so that the above-described functions can be executed.

As described above, in order to execute a method in which a computer reads a program recorded on a recording medium and monitors an illegal user in a game implemented as a program, the above-described program may be read by C, C ++, JAVA that a computer processor (CPU) can read. It may include a code (Code) coded in a computer language, such as machine language.

The code may include a function code related to a function or the like that defines the functions described above and may include an execution procedure related control code necessary for the processor of the computer to execute the functions described above according to a predetermined procedure.

In addition, such code may further include memory reference related code as to what additional information or media needed to cause the processor of the computer to execute the aforementioned functions should be referenced at any location (address) of the internal or external memory of the computer .

In addition, when a processor of a computer needs to communicate with any other computer or server, etc., to perform the above-described functions, the code may be stored in a computer's communication module (e.g., a wired and / ) May be used to further include communication related codes such as how to communicate with any other computer or server in the remote, and what information or media should be transmitted or received during communication.

The functional program for implementing the present invention and the related code and code segment may be implemented by programmers of the technical field of the present invention in consideration of the system environment of the computer that reads the recording medium and executes the program, Or may be easily modified or modified by the user.

Also, the computer-readable recording medium on which the above-described program is recorded may be distributed to a computer system connected via a network so that computer-readable codes can be stored and executed in a distributed manner. In this case, one or more of the plurality of distributed computers may execute some of the functions presented above and send the results of the execution to one or more of the other distributed computers, The computer may also perform some of the functions described above and provide the results to other distributed computers as well.

As described above, a computer-readable recording medium recording a program for executing a method for monitoring an illegal user in a game according to an embodiment of the present invention may be, for example, a ROM, a RAM, a CD-ROM, a magnetic. Tapes, floppy disks, optical media storage, and the like.

In addition, a computer-readable recording medium recording an application, which is a program for executing a method for monitoring a fraudulent user in a game according to an embodiment of the present invention, may be associated with an application store server, an application, or a corresponding service. The storage medium (eg, hard disk, etc.) included in an application provider server including a web server, or the like, or the application providing server itself, or another computer or a storage medium for recording a program. It may be.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiments, it is to be understood that the invention is not limited to the disclosed embodiments. That is, within the scope of the present invention, all of the components may be selectively coupled to one or more of them. In addition, although all of the components may be implemented as one independent hardware, some or all of the components may be selectively combined to perform a part or all of the functions in one or a plurality of hardware. As shown in FIG. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program can be stored in a computer-readable storage medium, readable and executed by a computer, thereby realizing an embodiment of the present invention. As a storage medium of the computer program, a magnetic recording medium, an optical recording medium, or the like can be included.

It is also to be understood that the terms such as " comprises, "" comprising," or "having ", as used herein, mean that a component can be implanted unless specifically stated to the contrary. But should be construed as including other elements. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used terms, such as predefined terms, should be interpreted to be consistent with the contextual meanings of the related art, and are not to be construed as ideal or overly formal, unless expressly defined to the contrary.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

Claims (12)

In the way the server monitors in-game fraudsters,
A negative user candidate extraction step of extracting user identification information satisfying a preset negative user candidate extraction condition from among a plurality of user identification information based on a game history of the user;
A grouping step of classifying user identification information corresponding to a predetermined grouping condition based on the game access information of the user among the extracted user identification information to generate a negative user group; And
A negative user information providing step of providing the user terminal with user identification information belonging to each illegal user group
How to spy on in-game fraudulent users. The method of claim 1,
The fraudulent user candidate extraction step,
A game history information extraction step of extracting game history information associated with each user identification information; And
Negative user identification information that is determined to be equal to or more than a predetermined value during the game access time included in the extracted game history information or the terminal corresponding to each user identification information is connected to a server providing a game service. Candidate condition checking step to extract user candidate
How to spy on in-game fraudulent users. Claim 3 has been abandoned due to the setting registration fee. The method of claim 1,
In the negative user information providing step, generating a negative user list based on user identification information belonging to each negative user group and game history information corresponding to the user identification information, and providing the generated negative user list to an administrator terminal. To monitor for in-game fraudulent users. Claim 4 has been abandoned due to the setting registration fee. The method of claim 1,
The illegal user candidate extraction step, the grouping step and the negative user information providing step is repeated in a predetermined time unit, the method for monitoring in-game illegal users. The method of claim 1,
The grouping condition is,
Extracting game access information linked with user identification information extracted as the unauthorized user candidate,
An IP grouping condition in which a part of the numbers constituting the IP address of the access IP information included in each extracted game access information is equal to or greater than a minimum number of user identification information in a group for the same user to group; And
A network grouping condition in which the same network unique information of the terminal included in each extracted game access information is equal to or greater than the minimum number.
At least one of the in-game illegal users. The method of claim 1,
The grouping condition is,
Extracting game access information linked with user identification information extracted as the unauthorized user candidate,
Personal information grouping condition such that the same user has more than the minimum number of user identification information in the group for the same user among the personal information included in each extracted game access information
How to monitor for in-game fraudsters. A negative user candidate extracting unit for extracting user identification information satisfying a predetermined negative user candidate extraction condition based on a user's game history among a plurality of user identification information;
A group generation unit configured to classify user identification information corresponding to a predetermined grouping condition based on the game access information of the user among the extracted user identification information, and generate a user group as an illegal user group; And
Communication unit for transmitting the user identification information belonging to each illegal user group to the administrator terminal
Server for monitoring the in-game fraudulent users. Claim 8 was abandoned when the registration fee was paid. 8. The method of claim 7,
Grouping condition management unit for setting and managing the game connection information of the terminal corresponding to each of the extracted user identification information as the grouping condition
The server for monitoring the illegal user in the game further comprising. Claim 9 has been abandoned due to the setting registration fee. 8. The method of claim 7,
A monitoring control unit for extracting game progress information linked with user identification information belonging to each illegal user group for each illegal user group and monitoring whether the game is progressed in an illegal manner;
Server for monitoring the in-game fraudulent users. Claim 10 has been abandoned due to the setting registration fee. 8. The method of claim 7,
Monitoring control unit for controlling the user identification information belonging to each illegal user group to be sent to the administrator terminal list
Server for monitoring the in-game fraudulent users. Based on the user's game history among the plurality of user identification information, the user identification information that satisfies the predetermined condition for extracting the user candidates is classified and negated by classifying the user identification information that matches the grouping condition preset based on the user's game access information. A server which generates a user group and transmits user identification information belonging to each illegal user group; And
Manager terminal for receiving and outputting the user identification information
A system for monitoring in-game fraudulent users. 12. The method of claim 11,
The administrative terminal,
Requesting and receiving game progress information associated with the received user identification information from the server, and generating an illegal user sanction command to limit server access or game execution of the user identification information according to the received game progress information; And transmit to the server.

Images