WO2017096840A1 - 一种盗链的检测方法及装置 - Google Patents

一种盗链的检测方法及装置 Download PDF

Info

Publication number
WO2017096840A1
WO2017096840A1 PCT/CN2016/088877 CN2016088877W WO2017096840A1 WO 2017096840 A1 WO2017096840 A1 WO 2017096840A1 CN 2016088877 W CN2016088877 W CN 2016088877W WO 2017096840 A1 WO2017096840 A1 WO 2017096840A1
Authority
WO
WIPO (PCT)
Prior art keywords
client
resource
identifier information
information
identification information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/088877
Other languages
English (en)
French (fr)
Inventor
魏帆
李茗
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Original Assignee
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Le Holdings Beijing Co Ltd, LeCloud Computing Co Ltd filed Critical Le Holdings Beijing Co Ltd
Priority to US15/246,479 priority Critical patent/US20170163490A1/en
Publication of WO2017096840A1 publication Critical patent/WO2017096840A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources

Definitions

  • the present invention relates to the field of information technology, and in particular, to a method and device for detecting a chain.
  • the invention provides a method and a device for detecting a stolen chain, which are used to solve the problem that the existing user does not perform identity verification on the access user, thereby failing to detect the chain stealing, thereby causing the illegal user to steal the chain and causing the website data.
  • the invention provides a method for detecting a stolen chain, the method comprising:
  • the resource corresponding to the resource acquisition request is sent to the client.
  • the method further includes:
  • the identifier information of the advertisement to be served is sent to the client, so that the client receives the advertisement to be delivered from the advertisement delivery system according to the identifier information of the advertisement to be placed, and then receives the advertisement.
  • the feature identification information sent by the advertisement delivery system is sent by the advertisement delivery system.
  • the method further includes:
  • the alarm information carrying the identification information of the client is output, and the identifier information of the client is saved in the preset blacklist.
  • the method further includes:
  • the detecting whether the feature identification information exists in the identifier information of the client includes:
  • the feature identification information is Token.
  • the invention provides a chain detecting device, which comprises:
  • a receiving unit configured to receive a resource acquisition request sent by the client, where the resource acquisition request carries the identifier information of the client;
  • a detecting unit configured to detect whether the feature identifier information exists in the identifier information of the client, where the feature identifier information is used to identify that the client sends the advertisement push information corresponding to the resource requested in the resource obtaining request;
  • a sending unit configured to send the resource corresponding to the resource obtaining request to the client if the feature identifier information exists.
  • the sending unit is further configured to: if the feature identification information does not exist, The client sends the identification information of the advertisement to be delivered, so that the client receives the advertisement to be delivered from the advertisement delivery system to perform advertisement delivery according to the identification information of the advertisement to be delivered, and receives the advertisement sent by the advertisement delivery system.
  • Feature identification information if the feature identification information does not exist, The client sends the identification information of the advertisement to be delivered, so that the client receives the advertisement to be delivered from the advertisement delivery system to perform advertisement delivery according to the identification information of the advertisement to be delivered, and receives the advertisement sent by the advertisement delivery system.
  • the device further includes: an output unit, a saving unit;
  • the detecting unit is further configured to: when the resource obtaining request sent by the client is received, detecting whether the feature identifier information exists in the identifier information of the client;
  • the output unit is configured to: if the feature identifier information does not exist, output alarm information that carries the identifier information of the client;
  • the saving unit is configured to save the identifier information of the client in a preset blacklist.
  • the detecting unit is further configured to detect whether the identifier information of the client exists in the preset blacklist
  • the detecting unit is configured to: if the identifier information of the client does not exist in the preset blacklist, detect whether the feature identifier information exists in the identifier information of the client.
  • the feature identification information is Token.
  • the present invention provides another detection device for chain hacking, the device comprising:
  • One or more processors are One or more processors.
  • the memory stores instructions that are configured to be executed by the one or more processors, and the one or more processors can perform the following operations by executing the instructions:
  • the resource corresponding to the resource acquisition request is sent to the client.
  • the method and device for detecting a stolen chain provided by the present invention firstly receive a resource acquisition request sent by a client, where the resource acquisition request carries the identification information of the client, and then detects whether the identifier information of the client exists.
  • Feature identifier information where the feature identifier information is used to identify that the client sends the advertisement corresponding to the resource requested in the resource acquisition request Sending information, if the feature identification information exists, sending the resource corresponding to the resource acquisition request to the client.
  • the information is identified and verified when the user requests the resource, so that the user who requests the resource is the user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and the waste of system resources.
  • FIG. 1 is a flow chart of a method for detecting a stolen chain according to the present invention
  • FIG. 2 is a flow chart of another method for detecting chain stealing provided by the present invention.
  • FIG. 3 is a block diagram showing the structure of a chain detecting device provided by the present invention.
  • FIG. 4 is a block diagram showing the structure of another chain detecting device provided by the present invention.
  • the embodiment of the invention provides a method for detecting a stolen chain. As shown in FIG. 1 , the method can be applied to a resource server. The specific steps include:
  • the resource acquisition request carries the identifier information of the client.
  • the identification information of the client is used to identify the client.
  • the resource acquisition request further carries the identifier information of the requested resource or the link address corresponding to the resource, so that the server can
  • the identification information acquires the resource and feeds back the corresponding resource to the client.
  • the identification information of the client may be a login account, a guest account, and the like, which are not limited in the embodiment of the present invention.
  • the feature identifier information is used to identify that the client delivers advertisement push information corresponding to the resource requested in the resource acquisition request.
  • the advertisement information corresponding to the resource may be a movie poster, a movie summary, a movie review information, etc., which is not limited in the embodiment of the present invention.
  • the feature identification information may specifically be the Token information allocated by the advertisement delivery system, which is not limited in the embodiment of the present invention.
  • the client delivers advertisement push information such as a movie poster, a movie summary, and a movie review information related to the movie, and the description is performed at this time.
  • advertisement push information such as a movie poster, a movie summary, and a movie review information related to the movie, and the description is performed at this time.
  • the user does pay great attention to the movie, and for an illegal user who only pays attention to the movie resource itself, the advertisement push information is not delivered. Therefore, if the feature identification information exists, the client is sent to the client.
  • the resource corresponding to the resource obtaining request can implement the verification of the user requesting the resource, thereby ensuring that the user requesting the resource is a user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and Waste of system resources.
  • the method for detecting a stolen chain firstly receives a resource acquisition request sent by a client, where the resource acquisition request carries the identification information of the client, and then detects whether a feature identifier exists in the identifier information of the client.
  • the information, the feature identifier information is used to identify that the client sends the advertisement push information corresponding to the resource requested in the resource acquisition request, and if the feature identifier information exists, send the resource acquisition to the client. Request the corresponding resource.
  • the information is identified and verified when the user requests the resource, so that the user who requests the resource is the user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and the waste of system resources.
  • the embodiment of the present invention further provides a method for detecting a stolen chain.
  • the method can be applied to a resource server.
  • the specific steps include:
  • the resource acquisition request carries the identifier information of the client.
  • the identification information of the client is used to identify the client.
  • the resource acquisition request further carries the identifier information of the requested resource or the link address corresponding to the resource, so that the server can obtain the resource according to the identifier information and feed back the corresponding resource to the client.
  • the identification information of the client may be a login account, a guest account, and the like, which are not limited in the embodiment of the present invention.
  • the feature identifier information is used to identify that the client delivers advertisement push information corresponding to the resource requested in the resource acquisition request.
  • the advertisement information corresponding to the resource may be a team introduction, a start time, a team jersey sale advertisement, and the like, which are not limited in the embodiment of the present invention.
  • the feature identification information may specifically be the Token information allocated by the advertisement delivery system, which is not limited in the embodiment of the present invention.
  • the method further includes: detecting whether the identifier information of the client exists in the preset blacklist.
  • the preset blacklist stores the identifier information that has been determined to be an illegal user, and may be obtained by analyzing the historical experience, or may be obtained by real-time detection, which is not limited by the embodiment of the present invention.
  • the step 202 may specifically include: if there is no, detecting whether the feature identification information exists in the identifier information of the client; if yes, terminating any operation and feedback on the identifier information of the client.
  • the client when the identification information of the client that sends the resource acquisition request is confirmed to exist in the preset blacklist, the client is an illegal client, and the subsequent identity verification operation is no longer performed, thereby further improving the detection of the hacking chain. effectiveness.
  • the client delivers an advertisement introduction, such as a team introduction, a start time, and a team jersey sale advertisement corresponding to the resource.
  • an advertisement introduction such as a team introduction, a start time, and a team jersey sale advertisement corresponding to the resource.
  • the user is really concerned about the game, and for the illegal user who only pays attention to the game itself, the advertisement push information will not be placed. Therefore, if the feature identification information exists, Sending, by the client, the resource corresponding to the resource obtaining request, the client can verify the user requesting the resource, thereby ensuring the request
  • the user seeking resources is a user who needs the resource, not a user who steals the chain, thereby avoiding the loss of the data resources of the website and the waste of system resources.
  • Step 203b which is parallel to step 203a, if not present, sends identification information of the advertisement to be placed to the client.
  • the feature identifier information sent by the advertisement delivery system is received after the client obtains the advertisement to be delivered from the advertisement delivery system according to the identifier information of the to-be-advertised advertisement.
  • the challenge message information may be sent to the client, and then the client sends the challenge information to the advertisement delivery system.
  • the advertisement delivery system carries the token information in the response message sent to the client, and sends the token information to the client.
  • the corresponding advertisement is delivered, thereby completing the advertisement delivery and assigning the feature identification information.
  • Step 204b after the step 203b, when receiving the resource acquisition request sent by the client, detecting whether the feature identification information exists in the identification information of the client.
  • the feature identifier information of the client is detected again to confirm whether the client is the first resource acquisition caused by the feature identifier information not previously assigned.
  • the feature identification information is not carried in the request, not the illegal user who is only concerned with the resource itself.
  • Step 205b after the step 204b, if not present, output alarm information carrying the identification information of the client and save the identification information of the client in the preset blacklist.
  • the alarm information may be text information, audio information, video information, and the like, which are not limited in the embodiment of the present invention.
  • the resource acquisition request sent by the client still does not carry the feature identification information, indicating that the client is an illegal client that is only interested in its own resource.
  • the illegal client can be processed in time by outputting the alarm information, and by saving the identification information of the client in the preset blacklist, the behavior of the chain stealing can be actively defended, thereby further improving system resources. safety.
  • the method for detecting a hacking chain provided by the present invention first receives a resource acquisition request sent by a client, where the resource acquisition request carries the identification information of the client, and then detects whether the identity information of the client exists.
  • the identifier information is used to identify that the client delivers advertisement push information corresponding to the resource requested in the resource acquisition request, and if the feature identifier information exists, send the resource to the client. Get request pair The resources that should be.
  • the information is identified and verified when the user requests the resource, so that the user who requests the resource is the user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and the waste of system resources.
  • the embodiment of the present invention provides a device for detecting a stolen chain.
  • the device may be disposed in a resource server.
  • the device includes: a receiving unit 31.
  • the receiving unit 31 is configured to receive a resource acquisition request sent by the client, where the resource acquisition request carries the identifier information of the client;
  • the detecting unit 32 is configured to detect whether the feature identification information exists in the identifier information of the client, where the feature identifier information is used to identify that the client sends the advertisement push information corresponding to the resource requested in the resource acquisition request;
  • the sending unit 33 is configured to: if the feature identifier information exists, send the resource corresponding to the resource acquisition request to the client.
  • the apparatus for detecting a stolen chain first receives a resource acquisition request sent by a client, where the resource acquisition request carries the identification information of the client, and then detects whether a feature identifier exists in the identifier information of the client.
  • the information, the feature identifier information is used to identify that the client sends the advertisement push information corresponding to the resource requested in the resource acquisition request, and if the feature identifier information exists, send the resource acquisition to the client. Request the corresponding resource.
  • the information is identified and verified when the user requests the resource, so that the user who requests the resource is the user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and the waste of system resources.
  • an embodiment of the present invention provides A device for detecting a stolen chain
  • the device may be disposed in a resource server.
  • the device includes: a receiving unit 41, a detecting unit 42, and a transmitting unit 43.
  • the receiving unit 41 is configured to receive a resource acquisition request sent by the client, where the resource acquisition request carries the identifier information of the client;
  • the detecting unit 42 is configured to detect whether the feature identification information exists in the identifier information of the client, where the feature identifier information is used to identify that the client sends the advertisement push information corresponding to the resource requested in the resource acquisition request;
  • the sending unit 43 is configured to: if the feature identifier information exists, send the resource corresponding to the resource acquisition request to the client.
  • the sending unit 43 is further configured to: if the feature identifier information does not exist, send the identifier information of the advertisement to be delivered to the client, so that the client is configured according to the identifier information of the advertisement to be placed After the advertisement delivery system obtains the advertisement to be delivered for advertisement delivery, the feature identification information sent by the advertisement delivery system is received.
  • the device further includes: an output unit 44 and a saving unit 45.
  • the detecting unit 42 is further configured to: when the resource obtaining request sent by the client is received, detecting whether the feature identifier information exists in the identifier information of the client;
  • the output unit 44 is configured to: if the feature identification information does not exist, output alarm information that carries the identifier information of the client;
  • the saving unit 45 is configured to save the identifier information of the client in a preset blacklist.
  • the detecting unit 42 is further configured to detect whether the identifier information of the client exists in the preset blacklist;
  • the detecting unit 42 is configured to: if the identifier information of the client does not exist in the preset blacklist, detect whether the feature identifier information exists in the identifier information of the client.
  • the feature identification information is Token.
  • Another apparatus for detecting a stolen chain provided by the present invention first receives a resource acquisition request sent by a client, where the resource acquisition request carries the identifier information of the client, and then detects whether there is a feature in the identifier information of the client. Identification information, the feature identification information is used for marking
  • the client is configured to deliver the advertisement push information corresponding to the resource requested in the resource acquisition request, and if the feature identifier information exists, send the resource corresponding to the resource acquisition request to the client.
  • the information is identified and verified when the user requests the resource, so that the user who requests the resource is the user who needs the resource, instead of the user who steals the chain, thereby avoiding the loss of the website data resource and the waste of system resources.
  • the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, ie may be located A place, or it can be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment. Those of ordinary skill in the art can understand and implement without deliberate labor.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

本发明提供一种盗链的检测方法及装置，涉及信息技术领域，可以实现对盗链的检测，从而可以保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。所述方法包括：首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。本发明适用于对盗链进行检测。

Description

一种盗链的检测方法及装置
本申请基于申请号为2015108902747、申请日为2015年12月7日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此引入本申请作为参考。
技术领域
本发明涉及信息技术领域，尤其涉及一种盗链的检测方法及装置。
背景技术
随着信息技术的不断发展，应用网络的用户也越来越多，用户可以通过网络获取各种所需的资源，随之而来的网络安全问题也越来越多。其中，盗链为比较常见的安全问题之一。盗链具体为当服务器接收到用户发送的资源请求时，这样的资源请求有可能被恶意的第三方或非法操作的用户进行复制，然后恶意的第三方或非法操作的用户将复制的资源请求同时分发给多个非法用户，这样使得非法用户也可访问网站中的资源，造成网站的资源浪费。
由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测，从而使得非法用户进行盗链，造成网站数据资源的流失以及系统资源的浪费。
发明内容
本发明提供一种盗链的检测方法及装置，用以解决现有由于并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测，从而使得非法用户进行盗链，造成网站数据资源的流失以及系统资源的浪费的问题。
本发明提供一种盗链的检测方法，该方法包括：
接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
若存在，则向所述客户端发送所述资源获取请求对应的资源。
进一步地，所述检测所述客户端的标识信息中是否存在特征标识信息的步骤之后，所述方法还包括：
若不存在，则向所述客户端发送待投放广告的标识信息，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。
进一步地，若不存在，则向所述客户端发送待投放广告的标识信息之后，所述方法还包括：
当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在特征标识信息；
若不存在，则输出携带有所述客户端的标识信息的告警信息并将所述客户端的标识信息保存在预置黑名单中。
进一步地，所述检测所述客户端的标识信息中是否存在特征标识信息之前，所述方法还包括：
检测预置黑名单中是否存在所述客户端的标识信息；
所述检测所述客户端的标识信息中是否存在特征标识信息包括：
若不存在，则检测所述客户端的标识信息中是否存在特征标识信息。
其中，所述特征标识信息为Token。
本发明提供一种盗链的检测装置，该装置包括：
接收单元，用于接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
检测单元，用于检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
发送单元，用于若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
进一步地，所述发送单元，还用于若不存在所述特征标识信息，则向 所述客户端发送待投放广告的标识信息，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。
进一步地，所述装置还包括：输出单元、保存单元；
所述检测单元，还用于当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在所述特征标识信息；
所述输出单元，用于若不存在所述特征标识信息，则输出携带有所述客户端的标识信息的告警信息；
所述保存单元，用于将所述客户端的标识信息保存在预置黑名单中。
进一步地，所述检测单元，还用于检测预置黑名单中是否存在所述客户端的标识信息；
所述检测单元，具体用于若所述预置黑名单中不存在所述客户端的标识信息，则检测所述客户端的标识信息中是否存在特征标识信息。
其中，所述特征标识信息为Token。
本发明提供另一种盗链的检测装置，该装置包括：
一个或多个处理器；和
存储器；
其中所述存储器中存储有指令，经配置所述指令由所述一个或多个处理器执行，所述一个或多个处理器通过执行所述指令能进行如下操作：
接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
本发明提供的一种盗链的检测方法及装置，首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推 送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。与目前由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测相比，本发明实施例通过预先为用户配置与访问的资源相关的特征标识信息并在用户请求资源时进行验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
附图说明
为了更清楚地说明本发明或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作以简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1为本发明提供的一种盗链的检测方法流程图；
图2为本发明提供的另一种盗链的检测方法流程图；
图3为本发明提供的一种盗链的检测装置的结构组成框图；
图4为本发明提供的另一种盗链的检测装置的结构组成框图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚，下面将结合本发明中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
本发明实施例提供了一种盗链的检测方法，如图1所示，该方法可以应用于资源服务器中，具体步骤包括：
101、接收客户端发送的资源获取请求。
其中，所述资源获取请求中携带有所述客户端的标识信息。所述客户端的标识信息用于对客户端进行身份标识。所述资源获取请求还携带有请求的资源的标识信息或者资源对应的链接地址，以使得服务器可以根据该 标识信息获取资源并向客户端反馈对应的资源。客户端的标识信息可以为登陆账号、游客账号等，本发明实施例不做限定。
102、检测所述客户端的标识信息中是否存在特征标识信息。
其中，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息。例如，请求的资源为某一部电影，则该资源对应的广告推送信息可以为电影海报、电影概要、电影评论信息等，本发明实施例不做限定。所述特征标识信息具体可以为广告投放系统分配的Token信息，本发明实施例不做限定。
103、若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
对于本发明实施例，若存在所述特征标识信息，例如，对于请求的资源为电影，该客户端投放有与该电影有关的电影海报、电影概要、电影评论信息等广告推送信息，此时说明该用户确实对该电影十分关注，而对于只对电影资源本身关注的非法用户来说，不会进行广告推送信息的投放，因此，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源，可以实现对请求资源的用户的验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
本发明提供的一种盗链的检测方法，首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。与目前由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测相比，本发明实施例通过预先为用户配置与访问的资源相关的特征标识信息并在用户请求资源时进行验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
与上述方法相对应地，本发明实施例还提供了一种盗链的检测方法， 如图2所示，该方法可以应用于资源服务器中，具体步骤包括：
201、接收客户端发送的资源获取请求。
其中，所述资源获取请求中携带有所述客户端的标识信息。所述客户端的标识信息用于对客户端进行身份标识。所述资源获取请求还携带有请求的资源的标识信息或者资源对应的链接地址，以使得服务器可以根据该标识信息获取资源并向客户端反馈对应的资源。客户端的标识信息可以为登陆账号、游客账号等，本发明实施例不做限定。
202、检测所述客户端的标识信息中是否存在特征标识信息。
其中，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息。例如，请求的资源为某一场球赛，则该资源对应的广告推送信息可以为球队介绍、开赛时间、球队球衣出售广告等，本发明实施例不做限定。所述特征标识信息具体可以为广告投放系统分配的Token信息，本发明实施例不做限定。
对于本发明实施例，步骤202之前还可以包括：检测预置黑名单中是否存在所述客户端的标识信息。其中，预置黑名单中保存有已经被确定为非法用户的标识信息，具体可以根据历史经验分析得出，也可以通过实时检测得出，本发明实施例不做限定。此时步骤202具体可以包括：若不存在，则检测所述客户端的标识信息中是否存在特征标识信息；若存在，则终止对所述客户端的标识信息任何操作和反馈。对于本发明实施例，当确认发送资源获取请求的客户端的标识信息存在于预置黑名单时，说明该客户端为非法客户端，不再进行后续身份验证操作，从而可以进一步提高盗链的检测效率。
203a、若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
对于本发明实施例，若存在所述特征标识信息，例如，对于请求的资源为一场球赛，该客户端投放有与该资源对应的球队介绍、开赛时间、球队球衣出售广告等广告推送信息，此时说明该用户确实对该场球赛十分关注，而对于只对球赛资源本身关注的非法用户来说，不会进行广告推送信息的投放，因此，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源，可以实现对请求资源的用户的验证，从而保证请 求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
与步骤203a并列的步骤203b、若不存在，则向所述客户端发送待投放广告的标识信息。
进一步地，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。具体地，可以向客户端发送挑战challenge信息，然后客户端将该challenge信息发送给广告投放系统，此时，广告投放系统会在给客户端发送的回答信息中携带有Token信息，并向该客户端投放对应的广告，从而完成广告投放以及分配特征标识信息。
步骤203b之后的步骤204b、当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在特征标识信息。
对于本发明实施例，当为客户端配置特征标识信息后，再次检测客户端的标识信息中是否存在特征标识信息，以确认该客户端是否为之前没分配过特征标识信息导致的第一次资源获取请求中未携带特征标识信息，而不是只对资源本身关注的非法用户。
步骤204b之后的步骤205b、若不存在，则输出携带有所述客户端的标识信息的告警信息并将所述客户端的标识信息保存在预置黑名单中。
其中，所述告警信息可以为文本信息、音频信息、视频信息等，本发明实施例不做限定。对于本发明实施例，当为客户端提供了特征标识信息的获取途径后，客户端发送的资源获取请求中依然没有携带特征标识信息，说明该客户端为只对本身资源感兴趣的非法客户端，此时，通过输出告警信息可以及时对该非法客户端进行处理，并且通过将所述客户端的标识信息保存在预置黑名单中，可以对盗链的行为进行主动防御，进一步提高系统资源的安全性。
本发明提供的另一种盗链的检测方法，首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对 应的资源。与目前由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测相比，本发明实施例通过预先为用户配置与访问的资源相关的特征标识信息并在用户请求资源时进行验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
进一步的，作为对图1所示方法的具体实现，本发明实施例提供了一种盗链的检测装置，该装置可以设置在资源服务器内，如图3所示，该装置包括：接收单元31、检测单元32、发送单元33。
接收单元31，用于接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
检测单元32，用于检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
发送单元33，用于若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
需要说明的是，本发明实施例提供的盗链的检测装置所涉及各功能单元的其他相应描述可以参照图1中的对应描述，在此不再赘述。
本发明提供的一种盗链的检测装置，首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。与目前由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测相比，本发明实施例通过预先为用户配置与访问的资源相关的特征标识信息并在用户请求资源时进行验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
再进一步的，作为对图2所示方法的具体实现，本发明实施例提供了 一种盗链的检测装置，该装置可以设置在资源服务器内，如图4所示，该装置包括：接收单元41、检测单元42、发送单元43。
接收单元41，用于接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
检测单元42，用于检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
发送单元43，用于若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
进一步地，所述发送单元43，还用于若不存在所述特征标识信息，则向所述客户端发送待投放广告的标识信息，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。
进一步地，所述装置还包括：输出单元44、保存单元45。
所述检测单元42，还用于当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在所述特征标识信息；
所述输出单元44，用于若不存在所述特征标识信息，则输出携带有所述客户端的标识信息的告警信息；
所述保存单元45，用于将所述客户端的标识信息保存在预置黑名单中。
所述检测单元42，还用于检测预置黑名单中是否存在所述客户端的标识信息；
所述检测单元42，具体用于若所述预置黑名单中不存在所述客户端的标识信息，则检测所述客户端的标识信息中是否存在特征标识信息。
对于本发明实施例，所述特征标识信息为Token。
需要说明的是，本发明实施例提供的盗链的检测装置所涉及各功能单元的其他相应描述可以参照图2中的对应描述，在此不再赘述。
本发明提供的另一种盗链的检测装置，首先接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息，然后检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标 识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息，若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。与目前由于使用资源的用户数量众多，因此目前并没有对访问用户进行身份验证的方法，进而无法实现对盗链进行检测相比，本发明实施例通过预先为用户配置与访问的资源相关的特征标识信息并在用户请求资源时进行验证，从而保证请求资源的用户为对该资源有需求的用户，而不是进行盗链的用户，进而可以避免网站数据资源的流失以及系统资源的浪费。
以上所描述的装置实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性的劳动的情况下，即可以理解并实施。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到各实施方式可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件。基于这样的理解，上述技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品可以存储在计算机可读存储介质中，如ROM/RAM、磁碟、光盘等，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行各个实施例或者实施例的某些部分所述的方法。
最后应说明的是：以上实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。

Claims (11)

  1. 一种盗链的检测方法，其特征在于，包括：
    接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
    检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
    若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
  2. 根据权利要求1所述的方法，其特征在于，所述检测所述客户端的标识信息中是否存在特征标识信息的步骤之后，所述方法还包括：
    若不存在，则向所述客户端发送待投放广告的标识信息，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。
  3. 根据权利要求2所述的方法，其特征在于，若不存在，则向所述客户端发送待投放广告的标识信息之后，所述方法还包括：
    当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在特征标识信息；
    若不存在，则输出携带有所述客户端的标识信息的告警信息并将所述客户端的标识信息保存在预置黑名单中。
  4. 根据权利要求3所述的方法，其特征在于，所述检测所述客户端的标识信息中是否存在特征标识信息之前，所述方法还包括：
    检测预置黑名单中是否存在所述客户端的标识信息；
    所述检测所述客户端的标识信息中是否存在特征标识信息包括：
    若不存在，则检测所述客户端的标识信息中是否存在特征标识信息。
  5. 根据权利要求1-4任一项所述的方法，其特征在于，所述特征标识信息为Token。
  6. 一种盗链的检测装置，其特征在于，包括：
    接收单元，用于接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户端的标识信息；
    检测单元，用于检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
    发送单元，用于若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
  7. 根据权利要求6所述的盗链的检测装置，其特征在于，
    所述发送单元，还用于若不存在所述特征标识信息，则向所述客户端发送待投放广告的标识信息，以使得所述客户端根据所述待投放广告的标识信息从广告投放系统获取待投放的广告进行广告投放后，接收所述广告投放系统发送的所述特征标识信息。
  8. 根据权利要求6所述的盗链的检测装置，其特征在于，所述装置还包括：输出单元、保存单元；
    所述检测单元，还用于当接收到所述客户端发送的资源获取请求时，检测所述客户端的标识信息中是否存在所述特征标识信息；
    所述输出单元，用于若不存在所述特征标识信息，则输出携带有所述客户端的标识信息的告警信息；
    所述保存单元，用于将所述客户端的标识信息保存在预置黑名单中。
  9. 根据权利要求8所述的盗链的检测装置，其特征在于：
    所述检测单元，还用于检测预置黑名单中是否存在所述客户端的标识信息；
    所述检测单元，具体用于若所述预置黑名单中不存在所述客户端的标识信息，则检测所述客户端的标识信息中是否存在特征标识信息。
  10. 根据权利要求6-9任一项所述的盗链的检测装置，其特征在于，所述特征标识信息为Token。
  11. 一种盗链的检测装置，其特征在于，包括：
    一个或多个处理器；和
    存储器；
    其中所述存储器中存储有指令，经配置所述指令由所述一个或多个处理器执行，所述一个或多个处理器通过执行所述指令能进行如下操作：
    接收客户端发送的资源获取请求，所述资源获取请求中携带有所述客户 端的标识信息；
    检测所述客户端的标识信息中是否存在特征标识信息，所述特征标识信息用于标识所述客户端投放有所述资源获取请求中请求的资源对应的广告推送信息；
    若存在所述特征标识信息，则向所述客户端发送所述资源获取请求对应的资源。
PCT/CN2016/088877 2015-12-07 2016-07-06 一种盗链的检测方法及装置 Ceased WO2017096840A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/246,479 US20170163490A1 (en) 2015-12-07 2016-08-24 Method and device for detecting hotlinking

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510890274.7A CN105871801A (zh) 2015-12-07 2015-12-07 一种盗链的检测方法及装置
CN201510890274.7 2015-12-07

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/246,479 Continuation US20170163490A1 (en) 2015-12-07 2016-08-24 Method and device for detecting hotlinking

Publications (1)

Publication Number Publication Date
WO2017096840A1 true WO2017096840A1 (zh) 2017-06-15

Family

ID=56624280

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/088877 Ceased WO2017096840A1 (zh) 2015-12-07 2016-07-06 一种盗链的检测方法及装置

Country Status (2)

Country Link
CN (1) CN105871801A (zh)
WO (1) WO2017096840A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109327506A (zh) * 2018-09-06 2019-02-12 网宿科技股份有限公司 一种资源分配方法、装置和可读存储介质

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108388593A (zh) * 2018-01-31 2018-08-10 北京奇艺世纪科技有限公司 一种防盗链方法、装置和内容服务器
CN109922350B (zh) * 2019-03-21 2022-04-26 湖南快乐阳光互动娱乐传媒有限公司 一种基于业务协同的媒体服务控制方法、系统及介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102055752A (zh) * 2009-10-29 2011-05-11 腾讯科技（深圳）有限公司 一种防盗链的方法及终端
US8332897B1 (en) * 2011-11-08 2012-12-11 Google Inc. Remote rendering of webpages on television
CN102868533A (zh) * 2012-09-13 2013-01-09 中科华核电技术研究院有限公司 资源访问授权验证方法及系统
CN104284213A (zh) * 2014-09-26 2015-01-14 深圳市同洲电子股份有限公司 一种防盗链方法、客户端以及系统
CN104410716A (zh) * 2014-12-17 2015-03-11 百度在线网络技术（北京）有限公司 从论坛网页下载附件的方法、设备及系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101282330B (zh) * 2007-04-04 2013-08-28 华为技术有限公司 网络存储访问权限管理方法及装置、网络存储访问控制方法
CN103297484B (zh) * 2012-03-05 2017-07-11 腾讯科技（深圳）有限公司 资源分享方法和装置
CN103546768B (zh) * 2012-07-16 2016-08-17 航天信息股份有限公司 定向广告的投放方法和装置
CN105100032B (zh) * 2014-05-23 2019-07-05 腾讯科技（北京）有限公司 一种防止资源盗取的方法及装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102055752A (zh) * 2009-10-29 2011-05-11 腾讯科技（深圳）有限公司 一种防盗链的方法及终端
US8332897B1 (en) * 2011-11-08 2012-12-11 Google Inc. Remote rendering of webpages on television
CN102868533A (zh) * 2012-09-13 2013-01-09 中科华核电技术研究院有限公司 资源访问授权验证方法及系统
CN104284213A (zh) * 2014-09-26 2015-01-14 深圳市同洲电子股份有限公司 一种防盗链方法、客户端以及系统
CN104410716A (zh) * 2014-12-17 2015-03-11 百度在线网络技术（北京）有限公司 从论坛网页下载附件的方法、设备及系统

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109327506A (zh) * 2018-09-06 2019-02-12 网宿科技股份有限公司 一种资源分配方法、装置和可读存储介质

Also Published As

Publication number Publication date
CN105871801A (zh) 2016-08-17

Similar Documents

Publication Publication Date Title
CN107135073B (zh) 接口调用方法和装置
CN106779716B (zh) 基于区块链账户地址的认证方法、装置及系统
US10331865B2 (en) Increased security using dynamic watermarking
US11710195B2 (en) Detection and prevention of fraudulent activity on social media accounts
CN104869102B (zh) 基于xAuth协议的授权方法、装置和系统
WO2015103992A1 (en) Data processing method, apparatus, client, server and system
US20160309000A1 (en) Method and system for loading application-specific interfaces in a social networking application
TWI516972B (zh) 應用安全驗證方法、應用伺服器、應用用戶端及系統
CN104125215B (zh) 网站域名劫持检测方法和系统
US9838401B2 (en) Method, client terminal device and system for verifying page information
WO2018059033A1 (zh) 一种验证方法、服务器和系统
CN107770161A (zh) 一种直播平台中防止刷礼物的方法及装置
US10404460B2 (en) Data management method, computer readable recording medium thereof, user client for executing data management method, and security policy server
CN105792167B (zh) 一种初始化可信执行环境的方法及装置、设备
CN106815734B (zh) 一种信息传输方法及装置
WO2017190436A1 (zh) 一种数据处理方法及装置
WO2017096840A1 (zh) 一种盗链的检测方法及装置
US10826901B2 (en) Systems and method for cross-channel device binding
CN107038540B (zh) 基于智能条形码的物流派件方法及装置
KR20130072907A (ko) 단축 ｕｒｌ 생성 방법 및 이를 지원하는 시스템
CN106878233A (zh) 安全数据的读取方法、安全服务器、终端及系统
CN115499180B (zh) 一种令牌跨区域交换与鉴权方法和系统
RU2606314C1 (ru) Способ и система распространения медиа контента в пиринговой сети передачи данных
WO2019041865A1 (zh) 验证请求的方法、系统以及计算机可读存储介质
CN108804713B (zh) 图像输出方法、电子设备和计算机可读介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16872042

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16872042

Country of ref document: EP

Kind code of ref document: A1