WO2017080166A1 - 防盗链方法及系统 - Google Patents

防盗链方法及系统 Download PDF

Info

Publication number
WO2017080166A1
WO2017080166A1 PCT/CN2016/083015 CN2016083015W WO2017080166A1 WO 2017080166 A1 WO2017080166 A1 WO 2017080166A1 CN 2016083015 W CN2016083015 W CN 2016083015W WO 2017080166 A1 WO2017080166 A1 WO 2017080166A1
Authority
WO
WIPO (PCT)
Prior art keywords
address
digital watermark
feature information
play
page address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/083015
Other languages
English (en)
French (fr)
Inventor
李洪福
胡东旭
李茗
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Original Assignee
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Le Holdings Beijing Co Ltd, LeCloud Computing Co Ltd filed Critical Le Holdings Beijing Co Ltd
Priority to US15/252,363 priority Critical patent/US20170141994A1/en
Publication of WO2017080166A1 publication Critical patent/WO2017080166A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1483—Countermeasures against malicious traffic service impersonation, e.g. phishing, pharming or web spoofing

Definitions

  • the embodiments of the present invention relate to the field of Internet security technologies, and in particular, to an anti-theft chain method and system.
  • the pirate chain refers to the content that the service provider does not provide services by itself. It bypasses other useful end-user interfaces (such as advertisements) through technical means, and provides the service content of other service providers to the end users directly on their own websites. End user browsing and clickthrough rate.
  • some unscrupulous merchants can climb the URL address (Uniform Resource Locator) of the streaming media file provided by the multimedia service provider through related technologies (such as web crawling technology), and put some of the URL addresses. After the code is changed, put it in your own space. When the user wants to watch this video, he can directly play it by clicking this link, but the real service provider does not know that his resource has been stolen, giving the real Service providers have caused huge economic losses.
  • URL address Uniform Resource Locator
  • the beneficiary does not provide resources or provide very few resources, but the real service provider does not receive any benefits, and also suffers from a series of hazards caused by the stolen chain.
  • website piracy will consume a lot of bandwidth of stolen chain websites, resulting in slower access speed of stolen chain websites, real click-through rate will be small, and if there is a large number of such piracy in a server, the server The speed will drop, the network will be stuck, giving users a bad experience, but also seriously damage the interests of the stolen chain website. More serious, if the stolen chain website has pornographic and reactionary content, it will even be stolen. The reputation of the website has a serious impact. Therefore, the Internet, especially in the field of wireless Internet security, is imperative for the security of theft chain.
  • the traditional methods of anti-theft chain mainly include judging the reference address method and using the dynamic file name method. Judging the reference address method is to determine whether to steal the chain by determining the value of the Referer field of the HTTP header when the browser requests, but the reference address is easily forged, and the anti-theft chain is not complete.
  • the dynamic file name method is used when the user clicks on a download link, first calculates a Key on the terminal, then records the Key and its corresponding resource ID or file name in the database or Cache, and finally redirects the page to a new one. URL address, this new URL address needs to include this Key.
  • the program When the browser or the download tool issues a download request, the program first detects whether the key exists, and if it exists, returns the corresponding resource data, but when any user downloads successfully, your resource will be listed as a resource by some download tools. Candidate list. When other people download the same file elsewhere, as long as the Key is not invalid, it can still be downloaded, and the chain will continue.
  • Embodiments provide an anti-theft chain method, including:
  • Extracting feature information in the access request including at least an IP address and an access time;
  • the access service is blocked from the IP address.
  • Another embodiment of the present invention provides an anti-theft chain method, including:
  • Extracting feature information in the access request including at least an IP address and an access time;
  • the access service is blocked from the IP address.
  • an anti-theft chain system including:
  • a feature information extraction module configured to: extract feature information in an access request, the feature letter The information includes at least the IP address and access time;
  • a play page address generating module configured to: generate a digital watermark based on the feature information, and add the digital watermark to a URL of the play file to generate a play page address;
  • a statistics module configured to: count the number of accesses of the play page address with the digital watermark in a certain period of time;
  • a comparison module configured to: compare the number of accesses with a predetermined threshold, and filter out a play page address whose access times are greater than a predetermined threshold;
  • a parsing module configured to: parse the digital watermark in the play page address to determine an IP address of the hacker
  • the masking module is configured to: block the access service from the IP address.
  • Another embodiment of the present invention provides an anti-theft chain system, including:
  • the feature information extraction module is configured to: extract feature information in the access request, where the feature information includes at least an IP address and an access time;
  • a play page address generating module configured to: generate a digital watermark based on the feature information, and add the digital watermark to a URL of the play file to generate a play page address;
  • the phishing request module is configured to: send a phishing access request to the thief;
  • the play page address returning module is configured to: receive the play page address returned by the thief;
  • a parsing module configured to: parse the digital watermark in the play page address to determine an IP address of the hacker
  • the masking module is configured to: shield the IP address from the service.
  • the anti-theft chain method and system ensure that the normal user access also restricts the thief, and because the access to the user characteristic information, the digital watermark is generated based on the feature information, and is not easily forged. , in turn, to achieve a more thorough anti-theft chain.
  • the anti-theft chain method and system can receive the phishing access request from the thief, receive the play page address returned by the thief, and parse the digital watermark in the play page address.
  • the IP address of the hacker is determined, and the access service is shielded from the IP address to avoid accidental injury to the authorized party of the streaming media manufacturer in the anti-theft chain, thereby improving the accuracy of the anti-theft chain.
  • FIG. 1 is a flow chart of a method of anti-theft chain according to an embodiment of the present invention
  • FIG. 2 is a flowchart of a method of anti-theft chain according to another embodiment of the present invention.
  • FIG. 3 is a schematic diagram of an anti-theft chain system according to an embodiment of the present invention.
  • FIG. 4 is a schematic diagram of an anti-theft chain system according to another embodiment of the present invention.
  • FIG. 5 is a structural diagram of an anti-theft chain method and system for implementing an embodiment of the present invention.
  • FIG. 6 is a schematic structural diagram of a server for implementing the anti-theft chain method according to an embodiment of the present invention.
  • the invention can be applied to related download resources such as pictures, music, videos, software, zip files and the like. For example, pictures on websites such as Taobao, pat, and ah, member videos from media websites such as LeTV, Youku, PPTV, and iQiyi, and some internal resources such as New Oriental, Global IELTS, and Weibo. .
  • a related function module can be implemented by a hardware processor.
  • FIG. 1 is a schematic flow chart of an embodiment of an anti-theft chain method according to the present invention. As shown in FIG. 1, the anti-theft chain method of the present invention includes:
  • Step 101 The anti-theft chain center extracts feature information in the user access request, where the feature information includes at least an IP address and an access time.
  • Step 102 The anti-theft chain center generates a digital watermark based on the feature information, and adds the digital watermark to a URL of the play file to generate a play page address.
  • Step 103 The anti-theft chain center counts the number of accesses of the play page address with the digital watermark in a certain time period
  • Step 104 The anti-theft chain center compares the number of accesses with a predetermined threshold, and filters out a play page address whose access count is greater than a predetermined threshold.
  • Step 105 The anti-theft chain center parses the digital watermark in the playpage address to determine an IP address of the hacker
  • Step 106 The anti-theft chain center blocks the access service from the IP address.
  • the predetermined threshold in the above step 104 is determined according to the average number of times of stealing by the thief in the historical database and/or the working capacity of the visited server.
  • the above predetermined threshold can be updated periodically or according to requirements.
  • FIG. 2 is a schematic flow chart of still another embodiment of the anti-theft chain method of the present invention. As shown in FIG. 2, the method includes:
  • Step 201 The anti-theft chain center extracts feature information in the user access request, where the feature information includes at least an IP address and an access time.
  • Step 202 The anti-theft chain center generates a digital watermark based on the feature information, and adds the digital watermark to a URL of the play file to generate a play page address.
  • Step 203 The anti-theft chain center sends a phishing access request to the hacker
  • Step 204 The anti-theft chain center receives the play page address returned by the thief;
  • Step 205 The anti-theft chain center parses the digital watermark in the playpage address to determine an IP address of the hacker
  • Step 206 The anti-theft chain center blocks the access service from the IP address.
  • the feature information in the above access request includes, for example, a MAC address, a source physical port number, an Ethernet protocol type, and the like.
  • the above “generating a digital watermark based on the feature information, and adding the digital watermark to a URL of a play file to generate a play page address” includes:
  • the anti-theft chain center processes at least the IP address and the access time in the feature information to generate a digital watermark by using a random number generator;
  • the digital watermark is added to the URL of the play file to generate a play page address.
  • each independent access user can have independent digital watermark.
  • the user is accessed by simulating the user, accessing the service provided by the thief (for example, Vst), obtaining the play page address of the thief, and parsing the play page.
  • the digital watermark in the address determines the IP address of the thief, and then uploads the IP address to the server, and directly blocks the access service from the IP address.
  • the information generates a digital watermark, and adds the digital watermark to the URL of the access file to generate a play page address, and counts the number of accesses of the play page address with the digital watermark in a certain period of time, and compares the number of visits with The size of the predetermined threshold, screening out the number of times the number of visits is greater than a predetermined threshold
  • the page address parsing the digital watermark in the playpage address, determining an IP address of the thief, and shielding the access service from the IP address, so as to prevent the illegal operator from stealing the learning material.
  • New Oriental may authorize Weibo to use some internal information of New Oriental, but based on the method in the above embodiment, Weber's service may also be shielded, thus further
  • the anti-theft chain center first extracts feature information in the access request, the feature information includes at least an IP address and an access time, and generates a number based on the feature information.
  • Watermark adding the digital watermark to the URL of the play file to generate a play page address, then sending a phishing access request to the thief, receiving the play page address returned by the thief, and parsing the number in the play page address
  • the watermark determines the IP address of the thief and blocks the service from the IP address. This can effectively prevent accidental injury to the authorized party during the anti-theft chain.
  • the invention does not affect the link requested by the visitor, nor does it affect the business logic of the website, and ensures convenient and convenient use effect; the optionality of the feature information of the visitor used to generate the digital watermark is diversified and greatly reduced
  • the feasibility of the invention is high, and most websites can be implemented by simple technologies such as filters, and will not affect the original business of the website.
  • the invention adopts the anti-theft chain method to ensure that the normal user access also limits the chain thief, and because the access to the user characteristic information is different, the digital watermark is generated based on the feature information, and is not easily forged, and thus A more thorough anti-theft chain has been achieved.
  • the anti-theft chain center (the anti-theft chain center is a server or a server cluster) can receive the phishing access request from the thief to receive the broadcast page address returned by the thief, and analyze the Describe the digital watermark in the play page address, determine the IP address of the hacker, and then block the access service from the IP address to avoid accidental injury to the authorized party of the streaming media manufacturer in the anti-theft chain, thereby improving the accuracy of the anti-theft chain. .
  • FIG. 3 is a schematic diagram of an embodiment of an anti-theft chain system of the present invention. As shown in Figure 3, the anti-theft chain of the present invention The system includes:
  • a feature information extraction module configured to: extract feature information in a user access request, where the feature information includes at least an IP address and an access time;
  • a play page address generating module configured to: generate a digital watermark based on the feature information extracted by the feature information extraction module, and add the digital watermark to a URL of the play file to generate a play page address;
  • a statistics module configured to: count the number of accesses of the play page address with the digital watermark generated by the play page address generation module in a certain period of time;
  • a comparison module configured to: compare a number of accesses determined by the statistic module with a predetermined threshold, and filter out a play page address whose access times are greater than a predetermined threshold;
  • the parsing module is configured to: parse the digital watermark in the playpage address determined by the comparison module, and determine an IP address of the hacker;
  • the masking module is configured to: block the access service from the IP address determined by the parsing module.
  • the predetermined threshold in the comparison module is determined according to the average number of hackers of the thief in the historical database and/or the working capacity of the visited server.
  • the anti-theft chain center is a server or a server cluster, wherein each module may be a separate server or a server cluster.
  • the interaction between the modules is expressed as The interaction between the server or the server cluster corresponding to the module, the plurality of servers or server clusters together constitute the anti-theft chain system of the present invention.
  • the plurality of servers or server clusters together constitute the anti-theft chain system of the present invention includes:
  • a feature information extraction server or a server cluster configured to: extract feature information in a user access request, where the feature information includes at least an IP address and an access time;
  • a play page address generation server or a server cluster configured to: generate a digital watermark based on the feature information extracted by the feature information extraction server or the server cluster, and add the digital watermark to a URL of the play file to generate a play page address;
  • a statistics server or a server cluster configured to: count the number of accesses of the play page address with the digital watermark generated by the play page address generation server or the server cluster in a certain period of time;
  • Comparing the server or the server cluster configured to: compare the number of accesses determined by the statistics server or the server cluster with a predetermined threshold, and filter out a play page address whose access times are greater than a predetermined threshold;
  • Parsing a server or a server cluster configured to: resolve the digital watermark in the play page address determined by the comparison server or the server cluster, and determine an IP address of the thief;
  • the server or server cluster is shielded and configured to: block the access service from the IP address determined by the resolution server or the server cluster.
  • several of the plurality of modules described above may collectively form a server or cluster of servers.
  • the feature information extraction module and the play page address generation module together form a first server or a first server cluster
  • the statistics module and the comparison module together form a second
  • the parsing module and the muting module together form a third server or a third server cluster.
  • the interaction between the above modules is represented by an interaction between the first server to the sixth server or an interaction between the first server cluster and the third server cluster, the first server to the sixth server or the first server
  • the cluster to the third server cluster together constitute the anti-theft chain system of the present invention.
  • FIG. 4 is a schematic view of still another embodiment of the anti-theft chain system of the present invention. As shown in FIG. 4, the system includes:
  • a feature information extraction module configured to: extract feature information in a user access request, where the feature information includes at least an IP address and an access time;
  • a play page address generating module configured to: generate a digital watermark based on the feature information extracted by the feature information extraction module, and add the digital watermark to a URL of the play file to generate a play page address;
  • the phishing request module is configured to: send a phishing access request to the thief;
  • the play page address returning module is configured to: receive the play page address returned by the thief;
  • the parsing module is configured to: parse the digital watermark in the play page address determined by the play page address return module, and determine an IP address of the hacker;
  • the masking module is configured to: shield the service from the IP address determined by the parsing module.
  • the feature information in the foregoing access request includes, for example, a MAC address, a source physical port number, and Types of Ethernet protocols, etc.
  • the play address generating module is configured to: generate a digital watermark based on the feature information, and add the digital watermark to a URL of the play file to generate a play page address, including:
  • the digital watermark is added to the URL of the play file to generate a play page address.
  • the anti-theft chain center is a server or a server cluster, wherein each module may be a separate server or a server cluster.
  • the interaction between the modules is expressed as The interaction between the server or the server cluster corresponding to the module, the plurality of servers or server clusters together constitute the anti-theft chain system of the present invention.
  • a plurality of servers or server clusters are used to form a detailed implementation of the anti-theft chain system of the present invention. Reference may be made to the description of the foregoing anti-theft chain system embodiment, and details are not described herein again.
  • the anti-theft chain method and system ensure that the normal user access also restricts the thief, and because the access to the user characteristic information, the digital watermark is generated based on the feature information, and is not easily forged. , in turn, to achieve a more thorough anti-theft chain.
  • the anti-theft chain method and system can receive the phishing access request from the thief, receive the play page address returned by the thief, and parse the digital watermark in the play page address.
  • the IP address of the hacker is determined, and the access service is shielded from the IP address to avoid accidental injury to the authorized party of the streaming media manufacturer in the anti-theft chain, thereby improving the accuracy of the anti-theft chain.
  • an architecture diagram of an anti-theft chain method and system for implementing the present invention includes an anti-theft chain center 50, an area A1 to an area An, wherein the anti-theft chain center 50 includes a plurality of servers S1 to Si, and an area A1 to an area.
  • the An includes a plurality of edge CDN nodes N that provide streaming services such as streaming media to the user.
  • the server in the anti-theft chain center in the architecture diagram receives the access request sent by the user through the client (the client is at least the smart terminal), and executes the present
  • the anti-theft chain method shown in FIG. 1 of the invention ensures that the normal user access also limits the chain thief.
  • FIG. 6 it is a schematic structural diagram of an embodiment of a server 600 of the anti-theft chain center of the present invention.
  • the specific embodiment of the present application does not limit the specific implementation of the server 600.
  • the server 600 can include:
  • a processor 610 a communications interface 620, a memory 630, and a communication bus 640. among them:
  • the processor 610, the communication interface 620, and the memory 630 complete communication with each other via the communication bus 640.
  • the communication interface 620 is configured to communicate with a network element such as a client.
  • the processor 610 is configured to execute the program 632. Specifically, the related steps in the foregoing method embodiments may be performed.
  • program 632 can include program code, the program code including computer operating instructions.
  • Processor 610 may be a central processing unit CPU or a specific integrated circuit ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present application.
  • CPU central processing unit
  • ASIC Application Specific Integrated Circuit
  • a memory for storing computer operating instructions
  • a processor configured to execute the computer operating instructions of the memory storage to perform:
  • Extracting feature information in the access request including at least an IP address and an access time;
  • the access service is blocked from the IP address.
  • Extracting feature information in the access request including at least an IP address and an access time;
  • the access service is blocked from the IP address.
  • the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, ie may be located A place, or it can be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment. Those of ordinary skill in the art can understand and implement without deliberate labor.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Information Transfer Between Computers (AREA)
  • Editing Of Facsimile Originals (AREA)

Abstract

本发明提供一种防盗链方法，包括：提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；统计一定时间内带有所述数字水印的所述播放页地址的访问次数；比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；对所述IP地址屏蔽访问服务。本发明还提供了一种防盗链系统，从而能够实现更加彻底的防盗链，提高防盗链的精确度。

Description

防盗链方法及系统 技术领域
本发明实施例涉及互联网安全技术领域，尤其涉及一种防盗链方法及系统。
背景技术
随着互联网技术以及多媒体技术的快速发展，大量的安全问题应运而生，盗链就是其中的一方面。盗链是指服务提供商自己不提供服务的内容，通过技术手段绕过其它有利益的最终用户界面(如广告)，直接在自己的网站上向最终用户提供其它服务提供商的服务内容，骗取最终用户的浏览和点击率。
例如，实际应用中，一些不法商家可以通过相关技术(如网络爬虫技术)爬取多媒体服务提供商提供的流媒体文件的URL地址(Uniform Resource Locator，统一资源定位符)，将URL地址里面的一些代码更改后放到自己的空间中，待用户想观看这个视频时，就直接点击这个链接后就可以直接播放，而真正的服务提供商却不知道自己的资源已经被盗链了，给真正的服务提供商造成了巨大的经济损失。
在盗链的过程中，受益者不提供资源或提供很少的资源，而真正的服务提供商却得不到任何的收益，并且还要承受因为被盗链所带来的一系列危害， 如：网站盗链会大量消耗被盗链网站的带宽，导致被盗链网站的访问速度变慢，真正的点击率也会很小，而且如果一台服务器中存在大量这样的盗链情况，服务器的速度就会下降，网络卡顿，给用户带来不好的体验，还严重损害了被盗链网站的利益，更严重的如果盗链网站还有色情、反动内容，更会对被盗链网站的名誉造成严重影响。因此互联网尤其是无线互联网安全领域，盗链安全防护势在必行。
现在传统的防盗链的方法主要包括判断引用地址法和使用动态文件名法。判断引用地址法是通过判断浏览器请求时HTTP头的Referer字段的值来确定是否盗链，但引用地址容易被伪造，防盗链不彻底。使用动态文件名法是当用户点击一个下载链接时，先在程序端计算一个Key，然后在数据库或Cache里记录这个Key以及它所对应的资源ID或文件名，最后让网页重定向一个新的URL地址，这个新URL地址里需要包含这个Key。当浏览器或下载工具发出下载请求时，程序先检测这个Key是否存在，如果存在则返回对应的资源数据，但当任意一个用户下载成功之后，你的资源就会被一些下载工具列入“资源候选名单”，以后其他人在其他地方下载同样的文件时，只要Key没有失效仍然可以下载，盗链也就持续下去了。
发明内容
为了解决防盗链中引用地址容易被伪造和使用动态文件名时非法厂商的信息被列入“资源候选名单”而造成防盗链不彻底的情况，一方面，本发明 实施例提供一种防盗链方法，包括：
提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
对所述IP地址屏蔽访问服务。
本发明另一实施例提供一种防盗链方法，包括：
提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
向盗链者发送钓鱼访问请求；
接收盗链者返回的播放页地址；
解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
对所述IP地址屏蔽访问服务。
另一方面，本发明实施例提供了一种防盗链系统，包括：
特征信息提取模块，配置以：提取访问请求中的特征信息，所述特征信 息至少包括IP地址和访问时间；
播放页地址生成模块，配置以：基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
统计模块，配置以：统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
比较模块，配置以：比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
解析模块，配置以：解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
屏蔽模块，配置以：对所述IP地址屏蔽访问服务。
本发明另一实施例提供了一种防盗链系统，包括：
特征信息提取模块，配置以：提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
播放页地址生成模块，配置以：基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
钓鱼请求模块，配置以：向盗链者发送钓鱼访问请求；
播放页地址返回模块，配置以：接收盗链者返回的播放页地址；
解析模块，配置以：解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
屏蔽模块，配置以：对所述IP地址屏蔽服务。
本发明通过防盗链方法及系统，保证了正常用户访问的同时也对盗链者进行了限制，而且因为访问用户特征信息的不同，使得基于所述特征信息生成数字水印也不同，不容易被伪造，进而实现了更加彻底的防盗链。
进一步地，本发明又一实施例的防盗链方法及系统，能够通过向盗链者发送钓鱼访问请求，接收盗链者返回的播放页地址，解析所述播放页地址中的所述数字水印，确定盗链者的IP地址，进而对所述IP地址屏蔽访问服务来避免在防盗链中对流媒体厂商的授权方发生误伤，提高了防盗链的精确度。
附图说明
为了更清楚地说明本发明实施例中的技术方案，下面将对实施例描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1为本发明一实施例的防盗链方法的流程图；
图2为本发明另一实施例的防盗链方法的流程图；
图3为本发明一实施例的防盗链系统的示意图；
图4为本发明另一实施例的防盗链系统的示意图；
图5为实施本发明实施例的防盗链方法及系统的架构图；
图6为实施本发明实施例的防盗链方法的服务器的结构示意图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
需要说明的是，在不冲突的情况下，本申请中的实施方式及实施方式中所涉及到的技术特征彼此之间可以相互组合。
本发明可应用在图片、音乐、视频、软件、zip文件等相关的下载类资源上。例如，淘宝、拍拍、有啊等网站中的图片，乐视、优酷、PPTV、爱奇艺等媒体网站中的会员影片，新东方、环球雅思、韦博等培训机构的一些内部资料等相关资源上。
本发明实施例中可以通过硬件处理器(hardware processor)来实现相关功能模块。
图1为本发明防盗链方法实施例的流程示意图。如图1所示，本发明防盗链方法包括：
步骤101：防盗链中心提取用户访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
步骤102：防盗链中心基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
步骤103：防盗链中心统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
步骤104：防盗链中心比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
步骤105：防盗链中心解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
步骤106：防盗链中心对所述IP地址屏蔽访问服务。
上述步骤104中所述预定阈值是根据历史数据库中盗链者在所述一定时间内的平均盗链次数和/或受访服务器的工作能力来确定的。
为了提高判断盗链的精确度，上述预定阈值是可以定时或根据需求进行更新的。
图2为本发明防盗链方法的又一实施例的流程示意图。如图2所示，所述方法包括：
步骤201：防盗链中心提取用户访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
步骤202：防盗链中心基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
步骤203：防盗链中心向盗链者发送钓鱼访问请求；
步骤204：防盗链中心接收盗链者返回的播放页地址；
步骤205：防盗链中心解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
步骤206：防盗链中心对所述IP地址屏蔽访问服务。
上述访问请求中的特征信息例如还包括MAC地址、源物理端口号、以太网协议类型等。
上述“基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址”包括：
防盗链中心利用随机数发生器至少对所述特征信息中的IP地址和访问时间进行处理生成数字水印；
将所述数字水印添加至播放文件的URL中生成播放页地址。
根据不同访问请求中的特征信息的不同，例如访问用户IP地址、访问时间、MAC地址、源物理端口号、以太网协议类型的不同，能够做到每个独立的访问用户均拥有独立的数字水印信息，而且同一个用户的访问请求因为访问时间的不同，用户所拥有的数字水印信息也不同，进而生成的播放页地址也会不同，从而在判断时不会出现漏判、误判等情况发生。
上述在防盗链中心确定了盗链者的情况下，通过模拟用户，访问盗链者提供的服务(例如，Vst)，获取盗链者的播放页地址，并解析所述播放页地 址中的所述数字水印，确定盗链者的IP地址，然后将所述IP地址上传到服务器中，直接对该IP地址屏蔽访问服务。
实际生活中，例如现在考研已经成为一种趋势，越来越多的学生投入到考研大军中去，为了在激烈的竞争中脱颖而出，学生都会在网上下载各种学习资料，但因为有些资料是某些培训机构(例如文都、新东方、启航等)的内部资料，只能该机构的学员才能下载观看，为了得到这些学习资料，学生会浏览各种学习网站，以期待能够获得这些学习资料，这时非法的商家会盗取培训机构资料的下载地址提供给学生进行非法盈利，为了有效地打击非法商家，维护培训机构的利益，这时可以基于内部学员的访问IP地址、访问时间、学员姓名等信息生成数字水印，并将所述数字水印添加至访问文件的URL中生成播放页地址，统计一定时间内带有所述数字水印的所述播放页地址的访问次数，进而比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址，解析所述播放页地址中的所述数字水印，确定盗链者的IP地址，对所述IP地址屏蔽访问服务，达到防止非法的运营商盗取学习资料的目的。
为了防止在防盗链的过程中出现误伤的现象，例如新东方可能授权韦博能使用新东方的一些内部资料，但是基于上述实施例中的方法可能会将韦博的服务也给屏蔽了，因而进一步地，防盗链中心先提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间，基于所述特征信息生成数字 水印，将所述数字水印添加至播放文件的URL中生成播放页地址，然后向盗链者发送钓鱼访问请求，接收盗链者返回的播放页地址，解析所述播放页地址中的所述数字水印，确定盗链者的IP地址，对所述IP地址屏蔽服务。这样能有效防止在防盗链的过程中对授权方发生误伤。
本发明不会影响访问者所请求的链接，也不影响网站业务逻辑，保证了方便、便捷的使用效果；用于生成数字水印的访问者特征信息的可选性多样化，大幅度地减小了其被盗链的可能，并从原理上解决了多个访问者使用同一代理对网站进行访问，访问者IP相同而导致无法被区分的问题。本发明的可行性高，大多数网站可以通过过滤器等简单技术实现，不会对网站原有业务造成影响。
本发明通过防盗链方法，保证了正常用户访问的同时也对盗链者进行了限制，而且因为访问用户特征信息的不同，使得基于所述特征信息生成数字水印也不同，不容易被伪造，进而实现了更加彻底的防盗链。
进一步地，本发明又一实施例的防盗链方法，防盗链中心(防盗链中心为服务器或者服务器集群)能够通过向盗链者发送钓鱼访问请求，接收盗链者返回的播放页地址，解析所述播放页地址中的所述数字水印，确定盗链者的IP地址，进而对所述IP地址屏蔽访问服务来避免在防盗链中对流媒体厂商的授权方发生误伤，提高了防盗链的精确度。
图3为本发明防盗链系统实施例的示意图。如图3所示，本发明防盗链 系统包括：
特征信息提取模块，配置以：提取用户访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
播放页地址生成模块，配置以：基于所述特征信息提取模块提取的特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
统计模块，配置以：统计一定时间内带有所述播放页地址生成模块生成的数字水印的所述播放页地址的访问次数；
比较模块，配置以：比较所述统计模块确定的访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
解析模块，配置以：解析比较模块确定的所述播放页地址中的所述数字水印，确定盗链者的IP地址；
屏蔽模块，配置以：对所述解析模块确定的IP地址屏蔽访问服务。
上述比较模块中的所述预定阈值是根据历史数据库中盗链者的在所述一定时间内的平均盗链次数和/或受访服务器的工作能力来确定的。
本实施例中的防盗链系统中的防盗链中心，该防盗链中心为一个服务器或者服务器集群，其中每个模块可以是单独的服务器或者服务器集群，此时，上述模块之间的交互表现为各模块所对应的服务器或者服务器集群之间的交互，所述多个服务器或服务器集群共同构成本发明的防盗链系统。
具体地，所述多个服务器或服务器集群共同构成本发明的防盗链系统包括：
特征信息提取服务器或服务器集群，配置以：提取用户访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
播放页地址生成服务器或服务器集群，配置以：基于所述特征信息提取服务器或服务器集群提取的特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
统计服务器或服务器集群，配置以：统计一定时间内带有所述播放页地址生成服务器或服务器集群生成的数字水印的所述播放页地址的访问次数；
比较服务器或服务器集群，配置以：比较所述统计服务器或服务器集群确定的访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
解析服务器或服务器集群，配置以：解析比较服务器或服务器集群确定的所述播放页地址中的所述数字水印，确定盗链者的IP地址；
屏蔽服务器或服务器集群，配置以：对所述解析服务器或服务器集群确定的IP地址屏蔽访问服务。
在一种替代实施例中，可以是上述多个模块中的几个模块共同组成一个服务器或者服务器集群。例如：特征信息提取模块和播放页地址生成模块共同组成第一服务器或者第一服务器集群，统计模块和比较模块共同组成第二 服务器或者第二服务器集群，解析模块和屏蔽模块共同构成第三服务器或者第三服务器集群。
此时，上述模块之间的交互表现为第一服务器至第六服务器之间的交互或者第一服务器集群至第三服务器集群之间的交互，所述第一服务器至第六服务器或第一服务器集群至第三服务器集群共同构成本发明的防盗链系统。
图4为本发明防盗链系统的又一实施例的示意图。如图4所示，所述系统包括：
特征信息提取模块，配置以：提取用户访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
播放页地址生成模块，配置以：基于所述特征信息提取模块提取的特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
钓鱼请求模块，配置以：向盗链者发送钓鱼访问请求；
播放页地址返回模块，配置以：接收盗链者返回的播放页地址；
解析模块，配置以：解析所述播放页地址返回模块确定的播放页地址中的所述数字水印，确定盗链者的IP地址；
屏蔽模块，配置以：对所述解析模块确定的IP地址屏蔽服务。
上述访问请求中的特征信息例如还包括MAC地址、源物理端口号、以 太网协议类型等。
上述播放地址生成模块，配置以：基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址包括：
利用随机数发生器至少对所述特征信息中的IP地址和访问时间进行处理生成数字水印；
将所述数字水印添加至播放文件的URL中生成播放页地址。
本实施例中的防盗链系统中的防盗链中心，该防盗链中心为一个服务器或者服务器集群，其中每个模块可以是单独的服务器或者服务器集群，此时，上述模块之间的交互表现为各模块所对应的服务器或者服务器集群之间的交互，所述多个服务器或服务器集群共同构成本发明的防盗链系统。
本实施例中由多个服务器或服务器集群共同构成本发明的防盗链系统详细实现，可参照前文防盗链系统系统实施例的叙述，在此不再赘述。本发明通过防盗链方法及系统，保证了正常用户访问的同时也对盗链者进行了限制，而且因为访问用户特征信息的不同，使得基于所述特征信息生成数字水印也不同，不容易被伪造，进而实现了更加彻底的防盗链。
进一步地，本发明又一实施例的防盗链方法及系统，能够通过向盗链者发送钓鱼访问请求，接收盗链者返回的播放页地址，解析所述播放页地址中的所述数字水印，确定盗链者的IP地址，进而对所述IP地址屏蔽访问服务来避免在防盗链中对流媒体厂商的授权方发生误伤，提高了防盗链的精确度。
如图5所示，为本实施本发明的防盗链方法和系统的架构图，包括防盗链中心50、区域A1至区域An，其中防盗链中心50包括多个服务器S1～Si，区域A1至区域An中分别包括多个为用户提供流媒体等资源服务的边缘CDN节点N；本架构图中防盗链中心的服务器接收用户通过客户端(客户端至少为智能终端)发送的访问请求后，执行本发明的如图1所示的防盗链方法，保证了正常用户访问的同时也对盗链者进行了限制。
如图6所示，为本发明的防盗链中心的服务器600的一实施例的结构示意图，本申请具体实施例并不对服务器600的具体实现做限定。如图6所示，该服务器600可以包括：
处理器(processor)610、通信接口(Communications Interface)620、存储器(memory)630、以及通信总线640。其中：
处理器610、通信接口620、以及存储器630通过通信总线640完成相互间的通信。
通信接口620，用于与比如客户端等的网元通信。
处理器610，用于执行程序632，具体可以执行上述方法实施例中的相关步骤。
具体地，程序632可以包括程序代码，所述程序代码包括计算机操作指令。
处理器610可能是一个中央处理器CPU，或者是特定集成电路ASIC (Application Specific Integrated Circuit)，或者是被配置成实施本申请实施例的一个或多个集成电路。
上述实施中的服务器中：
存储器，用于存放计算机操作指令；
处理器，用于执行所述存储器存储的计算机操作指令，以执行：
提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
对所述IP地址屏蔽访问服务。
和/或执行：
提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
向盗链者发送钓鱼访问请求；
接收盗链者返回的播放页地址；
解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
对所述IP地址屏蔽访问服务。
以上所描述的装置实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性的劳动的情况下，即可以理解并实施。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到各实施方式可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件。基于这样的理解，上述技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品可以存储在计算机可读存储介质中，如ROM/RAM、磁碟、光盘等，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行各个实施例或者实施例的某些部分所述的方法。
最后应说明的是：以上实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技 术方案的本质脱离本发明各实施例技术方案的精神和范围。

Claims (10)

  1. 一种防盗链方法，包括：
    提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
    基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
    统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
    比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
    解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
    对所述IP地址屏蔽访问服务。
  2. 根据权利要求1所述的方法，其特征在于，所述预定阈值是根据历史数据库中盗链者在所述一定时间内的平均盗链次数和/或受访服务器的工作能力来确定的。
  3. 一种防盗链方法，包括：
    提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
    基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
    向盗链者发送钓鱼访问请求；
    接收盗链者返回的播放页地址；
    解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
    对所述IP地址屏蔽访问服务。
  4. 根据权利要求3所述的方法，其特征在于，所述基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址包括：
    利用随机数发生器至少对所述特征信息中的IP地址和访问时间进行处理生成数字水印；
    将所述数字水印添加至播放文件的URL中生成播放页地址。
  5. 根据权利要求4所述的方法，其特征在于，所述访问请求中的特征信息还包括MAC地址、源物理端口号、以太网协议类型。
  6. 一种防盗链系统，包括：
    特征信息提取模块，配置以：提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
    播放页地址生成模块，配置以：基于所述特征信息生成数字水印，将所 述数字水印添加至播放文件的URL中生成播放页地址；
    统计模块，配置以：统计一定时间内带有所述数字水印的所述播放页地址的访问次数；
    比较模块，配置以：比较所述访问次数与预定阈值的大小，筛选出访问次数大于预定阈值的播放页地址；
    解析模块，配置以：解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
    屏蔽模块，配置以：对所述IP地址屏蔽访问服务。
  7. 根据权利要求6所述的系统，其特征在于，所述预定阈值是根据历史数据库中盗链者的在所述一定时间内的平均盗链次数和/或受访服务器的工作能力来确定的。
  8. 一种防盗链系统，包括：
    特征信息提取模块，配置以：提取访问请求中的特征信息，所述特征信息至少包括IP地址和访问时间；
    播放页地址生成模块，配置以：基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址；
    钓鱼请求模块，配置以：向盗链者发送钓鱼访问请求；
    播放页地址返回模块，配置以：接收盗链者返回的播放页地址；
    解析模块，配置以：解析所述播放页地址中的所述数字水印，确定盗链者的IP地址；
    屏蔽模块，配置以：对所述IP地址屏蔽服务。
  9. 根据权利要求8所述的系统，其特征在于，所述播放地址生成模块，配置以：基于所述特征信息生成数字水印，将所述数字水印添加至播放文件的URL中生成播放页地址包括：
    利用随机数发生器至少对所述特征信息中的IP地址和访问时间进行处理生成数字水印；
    将所述数字水印添加至播放文件的URL中生成播放页地址。
  10. 根据权利要求9所述的系统，其特征在于，所述访问请求中的特征信息还包括MAC地址、源物理端口号、以太网协议类型。
PCT/CN2016/083015 2015-11-13 2016-05-23 防盗链方法及系统 Ceased WO2017080166A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/252,363 US20170141994A1 (en) 2015-11-13 2016-08-31 Anti-leech method and system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510781811.4 2015-11-13
CN201510781811.4A CN105897671A (zh) 2015-11-13 2015-11-13 防盗链方法及系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/252,363 Continuation US20170141994A1 (en) 2015-11-13 2016-08-31 Anti-leech method and system

Publications (1)

Publication Number Publication Date
WO2017080166A1 true WO2017080166A1 (zh) 2017-05-18

Family

ID=57002816

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/083015 Ceased WO2017080166A1 (zh) 2015-11-13 2016-05-23 防盗链方法及系统

Country Status (2)

Country Link
CN (1) CN105897671A (zh)
WO (1) WO2017080166A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110889445A (zh) * 2019-11-22 2020-03-17 咪咕文化科技有限公司 视频cdn盗链检测方法、装置、电子设备及存储介质
CN112115480A (zh) * 2020-09-09 2020-12-22 重庆广播电视大学重庆工商职业学院 用于云平台环境下的盗链风险提醒方法、装置及设备
CN113946767A (zh) * 2021-10-09 2022-01-18 北京百度网讯科技有限公司 盗链行为的识别方法、装置、设备以及存储介质

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106453305A (zh) * 2016-10-10 2017-02-22 传线网络科技（上海）有限公司 会员直播防盗链方法、装置及网络服务器
CN108322418A (zh) * 2017-01-16 2018-07-24 深圳兆日科技股份有限公司 非法访问的检测方法和装置
CN108055265A (zh) * 2017-12-13 2018-05-18 常州卡灵克软件有限公司 车载appStore下载鉴权机制及系统
CN111917787B (zh) * 2020-08-06 2023-07-21 北京奇艺世纪科技有限公司 请求检测方法、装置、电子设备和计算机可读存储介质
CN112235292A (zh) * 2020-10-13 2021-01-15 北京巨目智播科技有限公司 一种防止视频盗链的方法及服务端

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007076685A1 (en) * 2005-12-31 2007-07-12 Zte Corporation A method for extending the url applicable to the streaming media system
CN103701796A (zh) * 2013-12-23 2014-04-02 山东中创软件商用中间件股份有限公司 一种基于hash技术的防盗链系统和方法
CN103957436A (zh) * 2014-05-13 2014-07-30 北京清源新创科技有限公司 一种基于ott业务的视频防盗链方法
CN104079531A (zh) * 2013-03-26 2014-10-01 中国移动通信集团公司 一种盗链检测方法、系统及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007076685A1 (en) * 2005-12-31 2007-07-12 Zte Corporation A method for extending the url applicable to the streaming media system
CN104079531A (zh) * 2013-03-26 2014-10-01 中国移动通信集团公司 一种盗链检测方法、系统及装置
CN103701796A (zh) * 2013-12-23 2014-04-02 山东中创软件商用中间件股份有限公司 一种基于hash技术的防盗链系统和方法
CN103957436A (zh) * 2014-05-13 2014-07-30 北京清源新创科技有限公司 一种基于ott业务的视频防盗链方法

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110889445A (zh) * 2019-11-22 2020-03-17 咪咕文化科技有限公司 视频cdn盗链检测方法、装置、电子设备及存储介质
CN110889445B (zh) * 2019-11-22 2022-09-27 咪咕文化科技有限公司 视频cdn盗链检测方法、装置、电子设备及存储介质
CN112115480A (zh) * 2020-09-09 2020-12-22 重庆广播电视大学重庆工商职业学院 用于云平台环境下的盗链风险提醒方法、装置及设备
CN113946767A (zh) * 2021-10-09 2022-01-18 北京百度网讯科技有限公司 盗链行为的识别方法、装置、设备以及存储介质

Also Published As

Publication number Publication date
CN105897671A (zh) 2016-08-24

Similar Documents

Publication Publication Date Title
WO2017080166A1 (zh) 防盗链方法及系统
US12072946B2 (en) Optimizing scraping requests through browsing profiles
CN101674293B (zh) 一种分布式应用中处理非正常请求的方法及系统
CN102594934B (zh) 一种识别被劫持网址的方法及装置
US10530671B2 (en) Methods, systems, and computer readable media for generating and using a web page classification model
US10148700B2 (en) Classification of top-level domain (TLD) websites based on a known website classification
CN108259425A (zh) 攻击请求的确定方法、装置及服务器
CN107341395B (zh) 一种拦截爬虫的方法
WO2013097742A1 (zh) 识别被篡改网页以及识别被劫持网址的方法及装置
Lashkari et al. CIC-AB: Online ad blocker for browsers
US9021085B1 (en) Method and system for web filtering
CN107528812B (zh) 一种攻击检测方法及装置
CN105915494A (zh) 防盗链方法及系统
CN105871850A (zh) 爬虫检测方法和系统
US12170697B2 (en) Network policy service for dynamic media
US20170141994A1 (en) Anti-leech method and system
CN111988644A (zh) 网络视频的防盗链方法、装置、设备和存储介质
CN106411819B (zh) 一种识别代理互联网协议地址的方法及装置
CN106161436A (zh) 一种防止域名系统dns污染的方法和网关
CN105099993B (zh) 一种基于代理平台的数据交互方法、装置和系统
Guan et al. Design and implementation of network user behaviors analysis based on hadoop for big data
CN105930338A (zh) 防盗链方法及系统
CN107707469A (zh) 用于检测访问路径的方法和装置
CN105827609A (zh) 一种基于特征码查询优化的防盗链方法和系统
CN105933310A (zh) 防盗链方法、装置及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16863347

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16863347

Country of ref document: EP

Kind code of ref document: A1