WO2018201965A1 - 设备指纹生成方法、装置及计算设备 - Google Patents
设备指纹生成方法、装置及计算设备 Download PDFInfo
- Publication number
- WO2018201965A1 WO2018201965A1 PCT/CN2018/084640 CN2018084640W WO2018201965A1 WO 2018201965 A1 WO2018201965 A1 WO 2018201965A1 CN 2018084640 W CN2018084640 W CN 2018084640W WO 2018201965 A1 WO2018201965 A1 WO 2018201965A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- electronic device
- fingerprint
- service
- behavior
- electronic
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/44—Program or device authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/40—Network security protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
Definitions
- the present invention relates to the field of data processing technologies, and in particular, to device fingerprint generation.
- the device fingerprint is a unique device identifier of the electronic device generated based on the characteristic attribute of the electronic device; the device fingerprint of the electronic device is similar to the case where the government uses the identity card to identify the citizen in the real world, and the Internet and the mobile Internet domain distinguish different electronic devices. a technology.
- the software and hardware configuration information of the electronic device is usually used for the calculation of the device fingerprint.
- the inventors of the present invention have found that the device personnel prefer the device fingerprint as the device fingerprint is applied in scenes such as personalized information recommendation and user portrait generation. It can not only represent the features of software and hardware configuration of electronic devices, but also represent other richer electronic device information. Therefore, how to optimize the device fingerprint generation method to realize fingerprint generation of devices with richer information is always Problems considered by those skilled in the field.
- an embodiment of the present invention provides a device fingerprint generation method, device, and computing device to enrich information that can be represented by a device fingerprint.
- the embodiment of the present invention provides the following technical solutions:
- an embodiment of the present invention provides a method for generating a device fingerprint, which is applied to a computing device, and includes:
- the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service;
- each electronic device For each electronic device, obtaining a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device;
- one piece of service data of a service includes at least: a service account for accessing the service;
- the initial device fingerprint of the electronic device is integrated with the service data associated with the electronic device to obtain a device fingerprint of each electronic device; wherein the device fingerprint of the electronic device is the preliminary device fingerprint of the electronic device and the The business data associated with the electronic device is synthesized.
- the embodiment of the present invention further provides a device fingerprint generating apparatus, which is applied to a computing device, and includes:
- a device data acquiring module configured to acquire device data of each electronic device;
- the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service;
- the initial device fingerprint obtaining module is configured to acquire, for each electronic device, a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device;
- a service data obtaining module configured to acquire at least one piece of service data for each service; wherein, one piece of service data of a service includes at least: a service account for accessing the service;
- the association module is configured to associate, according to the service account, device data of the electronic device corresponding to the same service account and service data of the electronic device corresponding to the same service account;
- the device fingerprint generating module is configured to synthesize the initial device fingerprint of the electronic device with the service data associated with the electronic device for each electronic device to obtain a device fingerprint of each electronic device; wherein, the device fingerprint of the electronic device is the electronic device The initial device fingerprint of the device is obtained by combining the business data associated with the electronic device.
- an embodiment of the present invention further provides a computing device, where the computing device includes a processor and a memory:
- the memory is configured to store program code and transmit the program code to the processor
- the processor is configured to perform the device fingerprint generation method described in the first aspect according to an instruction in the program code.
- the embodiment of the present invention further provides a storage medium, where the storage medium is used to store program code, and the program code is used to execute the device fingerprint generation method in the first aspect.
- an embodiment of the present invention further provides a computer program product comprising instructions, when executed on a computer, causing the computer to perform the device fingerprint generation method described in the first aspect.
- the computing device may obtain the device data of each electronic device, and acquire, for each electronic device, the preliminary device fingerprint of each electronic device according to the configuration information of the electronic device; At the same time, for each service, at least one service data is obtained, so that the device data of the electronic device corresponding to the same service account and the service data of the device data of the electronic device corresponding to the same service account are associated according to the service account;
- the electronic device can combine the initial device fingerprint of the electronic device with the service data associated with the electronic device to obtain the device fingerprint of each electronic device.
- the device fingerprint of the electronic device generated by the embodiment of the present invention can represent the user.
- the access of the electronic device to the service enhances the richness of the information that the device fingerprint can represent, and provides the possibility for subsequent accurate personalized information recommendation and accurate user image generation.
- FIG. 1 is a schematic diagram of a framework of a device fingerprint generation system according to an embodiment of the present invention
- FIG. 2 is a block diagram showing the hardware structure of a computing device according to an embodiment of the present invention.
- FIG. 3 is a flowchart of a method for generating a device fingerprint according to an embodiment of the present invention
- FIG. 5 is a schematic diagram of generating device fingerprints by association of device data and service data
- FIG. 6 is another flowchart of a method for generating a device fingerprint according to an embodiment of the present invention.
- FIG. 7 is a schematic diagram of device data in an operating system classification
- FIG. 8 is a flowchart of a method for portraying a device image of an electronic device according to an embodiment of the present invention.
- Figure 9 is a schematic diagram of determining the severity level
- FIG. 10 is a flowchart of a method for portraying a user image according to an embodiment of the present invention.
- FIG. 11 is a structural block diagram of a device fingerprint generating apparatus according to an embodiment of the present invention.
- FIG. 12 is a block diagram of another structure of a device fingerprint generating apparatus according to an embodiment of the present invention.
- FIG. 13 is a block diagram of still another structure of a device fingerprint generating apparatus according to an embodiment of the present invention.
- FIG. 14 is still another structural block diagram of a device fingerprint generating apparatus according to an embodiment of the present invention.
- FIG. 1 is a schematic diagram of a framework of a device fingerprint generation system according to an embodiment of the present invention.
- the system mainly includes: a computing device 10, a database 20, and at least one service platform 30.
- the system shown in FIG. 1 is mainly composed of a computing device 10.
- Implementing device fingerprint generation of each electronic device; the database 20 and the at least one service platform 30 provide a data source for the computing device, and the data source may include device data of each electronic device, so that the computing device implements each data source through the database.
- the computing device 10 may be implemented by a server set by the network side, or may be implemented by a terminal device such as a PC (personal computer) on the terminal side;
- Each service platform 30 can share an account system.
- the same user can use the same account to log in on different service platforms.
- each service platform 30 can be a service platform of different services of the same company, and each service platform can be shared.
- the company provides a common account system for users.
- each service platform can share the instant communication account provided by the company for the user, and the same user can use the same instant communication account to log in on different service platforms;
- the embodiment of the present invention may have multiple service types (such as an instant communication service type, a game service type, a video service type, a music service type, etc.), and one service type may correspond to one or more service platforms (as shown in the figure).
- the at least one service platform 30 may have multiple types of services, and one type of service may correspond to one or more service platforms of at least one service platform 30.
- the service platform may upload the device data of each electronic device accessing the service to the database, as shown in FIG. 1 , the service 1 platform may access the electronic devices of the service 1
- the device data is uploaded to the database
- the service 2 platform can upload the device data of each electronic device accessing the service 2 to the database, so that the device data of each electronic device can be recorded in the database, and the service corresponding to each electronic device is marked (can be Marked in the device data);
- the device data of an electronic device may include configuration information (such as software and hardware configuration information) of the electronic device, the service account used by the electronic device to access the service, and the like;
- the device data of an electronic device in the service 1 may include: configuration information of the electronic device, the service account used by the electronic device to access the service 1, and the like.
- the device data of an electronic device under the service 2 may include: Configuration information of the electronic device, the service account used by the electronic device to access the service 2, and the like;
- the same electronic device may access different services. Therefore, after obtaining the device data of the electronic device uploaded by each service platform, the database may use the service identifier of the different service accessed by the same electronic device in the electronic device.
- the device data is marked so that the different device data recorded in the database belong to different electronic devices, reducing the storage capacity of the database; obviously, the processing here is only optional.
- the computing device can obtain the device data of each electronic device recorded in the database, thereby using the device fingerprint generation method provided by the embodiment of the present invention as a data source to implement each electronic device.
- the device fingerprint generation method is optional.
- the function of the device fingerprint generation method provided by the embodiment of the present invention may be loaded into the computing device by using a program, and the computing device may implement the device fingerprint generation method provided by the embodiment of the present invention by calling the program. ;
- FIG. 2 is a block diagram showing a hardware structure of a computing device according to an embodiment of the present invention.
- the computing device may include: at least one processor 1, at least one communication interface 2, at least one memory 3, and at least a communication bus 4;
- the number of the processor 1, the communication interface 2, the memory 3, and the communication bus 4 is at least one, and the processor 1, the communication interface 2, and the memory 3 complete communication with each other through the communication bus 4;
- the communication connection of the processor 1, the communication interface 2, the memory 3 and the communication bus 4 shown in FIG. 2 is only optional;
- the communication interface 2 can be an interface of the communication module, such as an interface of a Global System for Mobile communication (GSM) module;
- GSM Global System for Mobile communication
- the processor 1 may be a Central Processing Unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention.
- CPU Central Processing Unit
- ASIC Application Specific Integrated Circuit
- the memory 3 may include a high speed random access memory (RAM) memory, and may also include a non-volatile memory such as at least one disk memory.
- RAM random access memory
- non-volatile memory such as at least one disk memory.
- the memory 3 stores a program
- the processor 1 calls the program stored in the memory 3 to implement the device fingerprint generation method provided by the embodiment of the present invention.
- the device fingerprint generation method provided by the embodiment of the present invention is introduced from the perspective of the computing device.
- the content of the device fingerprint generation method described below may be implemented by a processor stored in the memory of the computing device.
- FIG. 3 is a flowchart of a method for generating a device fingerprint according to an embodiment of the present disclosure. The method may be applied to a computing device. Referring to FIG. 3, the method may include:
- Step S100 The computing device acquires device data of each electronic device.
- the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service.
- the computing device may obtain device data of each electronic device from a database
- the device data of an electronic device is generally at least one, and the device data of the electronic device may include at least: configuration information of the electronic device and a service account of the electronic device accessing the service;
- the information may be information such as software and hardware configuration information of the electronic device, such as International Mobile Equipment Identity (IMEI), Media Access Control (MAC) address, CPU model, acceleration sensor model, device name, and the like. It can be set according to the actual situation.
- IMEI International Mobile Equipment Identity
- MAC Media Access Control
- the service identifier of the electronic device access service may be added to the device data, and the specific device data information may be set according to actual conditions.
- the electronic device referred to above may include a mobile device and a PC device.
- Step S110 For each electronic device, the computing device acquires a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device.
- the initial device fingerprint may be represented by the device code of the electronic device (such as the androidid, adid, idfa, etc. provided by the operating system, or may be the IMEI, MAC address, etc. of the electronic device); if the device uses IMEI, MAC address, etc.
- the device code may be carried in the configuration information of the electronic device.
- the embodiment of the present invention may also generate a traditional device fingerprint as the preliminary device fingerprint by using the configuration information of the electronic device.
- Step S120 For each service, the computing device acquires at least one piece of service data; wherein, one piece of service data of a service includes at least: a service account that accesses the service.
- the embodiment of the present invention may obtain at least one service data for each service from each service platform; for each service, the obtained one piece of service data may include at least: a service account used to access the service;
- the service data may also carry other information such as the service behavior information and the service identifier, which may be set according to actual needs.
- a service data of a service may include but is not limited to the following content: a service account for accessing the service , the user's mobile phone number, the user's mailbox, and the business behavior information generated by the user's access to the business.
- Step S130 The computing device associates the device data of the electronic device corresponding to the same service account with the service data of the electronic device corresponding to the same service account according to the service account.
- the content of the service account and the configuration information carried by the device data of each electronic device can be clarified, and at least one service data is acquired for each service.
- the service account corresponding to each service can be clarified; in this case, the service account can be used to associate the device data of the electronic device corresponding to the same service account with the service data of the electronic device corresponding to the same service account; Which type of service is accessed by a user through a business account on which electronic devices, and the corresponding business behavior can be determined through the service data; in FIG. 4, the service data 1 and the service data 3 may belong to different services, and may also be It is the same business.
- the device data of the electronic device associated with one service account may be at least one (if the same service account is used on different electronic devices), and the associated service data may also be at least one (if the same service account is accessed) Different services, or the same service account, generate different service data through different service behaviors in different time periods; correspondingly, the service data associated with one electronic device may be at least one, and the at least one service data
- the corresponding business account number may be one or more (for example, an electronic device accesses the service using a different business account).
- Step S140 For each electronic device, the computing device integrates the preliminary device fingerprint of the electronic device with the service data associated with the electronic device to obtain a device fingerprint of each electronic device.
- the device fingerprint of an electronic device may be obtained by combining the initial device fingerprint of the electronic device with the service data associated with the electronic device. It can be understood that each electronic device can have a device fingerprint corresponding thereto.
- the device data and service associated with the electronic device may be obtained through the preliminary device fingerprint of the electronic device.
- the service data associated with the electronic device having the initial device fingerprint is obtained, so that the preliminary device fingerprint of the electronic device is integrated with the service data associated with the electronic device to obtain the device fingerprint of the electronic device.
- the initial device fingerprint of the electronic device may be integrated with the service account (at least one) of the service data associated with the electronic device to obtain a device fingerprint of the electronic device, such as Obtaining the device fingerprint of the electronic device by comparing the initial device fingerprint of the calculated electronic device with the service account of the service data associated with the electronic device;
- the embodiment of the present invention can further integrate the service behavior and other information in the associated service data to obtain the device fingerprint of the electronic device, so that the device The generated device fingerprint indicates more information; obviously, the method of obtaining the fingerprint of the device of the electronic device can be set according to actual needs.
- the computing device can obtain the device data of each electronic device, and obtain, for each electronic device, the preliminary device fingerprint of each electronic device according to the configuration information of the electronic device; Obtaining at least one piece of service data, so that the device data of the electronic device corresponding to the same service account and the service data of the device data of the electronic device corresponding to the same service account are associated according to the service account; and for each electronic device, The device fingerprint of the electronic device is integrated with the service data associated with the electronic device to obtain the device fingerprint of the electronic device.
- the device fingerprint of the electronic device generated by the embodiment of the present invention can indicate that the user accesses the service by using the electronic device. In this case, the richness of information that can be represented by the fingerprint of the device is improved, and it is possible to carry out accurate personalized information recommendation and accurate user image generation.
- the initial device fingerprint of the electronic device may be a device code of the electronic device, where the device code may be provided by an operating system manufacturer of the electronic device and configured in the configuration information of the electronic device;
- FIG. 6 illustrates the present Another flowchart of the device fingerprint generation method provided by the embodiment of the invention is applicable to the computing device. Referring to FIG. 6, the method may include:
- Step S200 The computing device acquires device data of each electronic device.
- the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service.
- Step S210 The computing device classifies the device data of each electronic device according to different operating systems, and obtains device data of the corresponding electronic device of each operating system.
- the embodiment of the present invention can classify the device data of each electronic device according to different operating systems, so that the operating system is classified into dimensions, and the corresponding electronic devices of each operating system are obtained.
- Device data of the device optionally, the device data of the corresponding electronic device of an operating system may have one or more pieces, for example, the number of electronic devices in an operating system may be one or more;
- the operating system referred to herein may cover the operating system of the mobile device (such as ios, Android, windowsphone, etc.), the operating system of the PC device (such as Llinux, MacOS, windows, etc.); optional, Figure 7 shows A schematic diagram of the device data of the corresponding electronic device of each operating system obtained after being classified by different operating systems.
- the mobile device such as ios, Android, windowsphone, etc.
- the operating system of the PC device such as Llinux, MacOS, windows, etc.
- Figure 7 shows A schematic diagram of the device data of the corresponding electronic device of each operating system obtained after being classified by different operating systems.
- Step S220 For each electronic device, the computing device acquires the device code of each electronic device under the corresponding operating system according to the configuration information of the electronic device.
- the device code of each electronic device in each operating system may be obtained to obtain the device code of each electronic device under the corresponding operating system;
- the device code of an electronic device in the corresponding operating system may be in the form of: android id, adid, idfa, etc. of the electronic device under the corresponding operating system;
- the device code of an electronic device may have different representations under different operating systems, for example, an Android android generated an android id uniquely for each Android device; and an add belongs to an advertising Identifier, which is an operating system.
- an advertising Identifier which is an operating system.
- the step S210 and the step S220 are the only manners for obtaining the initial device fingerprints of the electronic devices according to the configuration information of the electronic device, and the method may not be obtained for each of the obtained embodiments.
- the device data of the electronic device is classified by the operating system, and the initial device fingerprint of the electronic device is directly generated according to the configuration information carried in the device data of the electronic device, such as the IMEI and the MAC address carried in the configuration information of the electronic device.
- the initial device fingerprint is generated as the initial device fingerprint of the electronic device, or according to the configuration information of the electronic device.
- Step S230 For each service, the computing device acquires at least one piece of service data, where a piece of service data of a service includes at least: a service account that accesses the service.
- Step S240 The computing device associates, according to the service account, the device data of the electronic device in the at least one operating system corresponding to the same service account, and the service data of the electronic device in the at least one operating system corresponding to the same service account. .
- Step S250 For each electronic device, the computing device integrates the device code of the electronic device under the corresponding operating system with the service data associated with the electronic device to obtain a device fingerprint of each electronic device.
- the device fingerprint of an electronic device may be obtained by combining the device code of the electronic device under the corresponding operating system with the service data associated with the electronic device.
- the embodiment of the present invention may be used for each electronic device.
- the initial device fingerprint of the electronic device (such as the device code under the corresponding operating system) is integrated with each service account in the service data associated with the electronic device to obtain the device fingerprint of each electronic device.
- the device code shown above is provided by an operating system manufacturer of the electronic device and configured in the configuration information of the electronic device.
- the device code may also be provided by the manufacturer of the electronic device and set in the electronic device. In the configuration information of the device.
- the device fingerprint of the electronic device generated by the embodiment of the present invention can indicate what service account is used by the user, and what type of service is accessed on the electronic device; for example, the device fingerprint of an electronic device can be expressed as : The user uses the account Z1 to log in on the electronic device whose initial device fingerprint (such as device code) is A.
- the device fingerprint of the electronic device may further integrate the service behavior of the service data associated with the electronic device, and the service behavior that the service data can include may be various, and may indicate, besides indicating the business behavior of the login, The service behaviors such as payment, status, and chat; therefore, the information that can be represented by the device fingerprint generated by the embodiment of the present invention can be expanded and enriched according to the information represented by the service data.
- the service behavior represented by the service data includes the login behavior as an example, and the streamlined service platform is 1 and 2, and the scheme of the embodiment of the present invention is illustrated; the service platforms 1 and 2 can access each electronic device of the service.
- the device data is uploaded to the database, and the database can remove the device data of the same electronic device uploaded by the service platforms 1 and 2, and mark the service identifier of the service accessed by the electronic device in the device data of the retained electronic device. 1 and 2; at the same time, the service platforms 1 and 2 can upload the service data of each electronic device including the login behavior to the database;
- the computing device can obtain device data of each electronic device from the database, and classify the data by using different operating systems to obtain device data of each electronic device under each operating system; at the same time, the service account and the device data in the service data can be used. a business account in which the device data of the electronic device using the same service account is associated with the service data;
- the computing device can obtain the service data corresponding to the same service account associated with the electronic device according to the device code of the electronic device in the corresponding operating system; for example, the electronic device with the device code A can Associated with the service data Y1 and Y2 using the same service account Z1, the service data Y1 belongs to the service 1, and the service data Y2 belongs to the service 2; by integrating the device code A of the electronic device and the service data Y1 and Y2, the device can be obtained.
- the device fingerprint of the electronic device of the code A can indicate that the user who uses the service account Z1 logs in the service 1 and the service 2 on the electronic device whose device code is A, thereby enriching the electronic device whose device code is A Information that can be represented by the device fingerprint.
- the embodiment of the present invention may perform device classification on each electronic device according to the service behavior in the service data integrated by the device fingerprint of the electronic device. To depict a portrait of the device of the electronic device;
- FIG. 8 is a flowchart of a device portrait characterization method of an electronic device according to an embodiment of the present invention. The method is also applicable to a computing device. Referring to FIG. 8, the method may include:
- Step S300 The computing device acquires, for each electronic device, a service behavior of the service data integrated by the device fingerprint of the electronic device, and obtains a corresponding service behavior of each electronic device.
- the embodiment of the present invention can obtain the service behavior corresponding to the service data integrated by the fingerprint of the device, and obtain the corresponding service behavior of each electronic device;
- the business behavior may carry the business behaviors such as payment, chat, and the like that the user involves when the electronic device accesses the service.
- Step S310 For each electronic device, the computing device analyzes the corresponding service behavior, determines the behavior attribute classification of the service behavior, and classifies the behavior attributes of the business behavior of each electronic device to determine the equipment of each electronic device. portrait.
- the purpose of the device portrait description in the embodiment of the present invention is to classify the electronic device and mark the electronic device with bad behavior (such as an electronic device that distributes false information, fraud information, etc.), the basis of which is Determining the behavioral attribute classification of the corresponding business behavior of the electronic device according to the severity of the corresponding business behavior of the electronic device;
- the types of behavior attribute classification may have multiple types.
- the behavior attribute of the corresponding business behavior of the electronic device may be classified according to the preset severity level. Specifically, the severity of the corresponding business behavior of each electronic device may be identified first, and then the corresponding electronic device may be determined. The severity level of the business behavior, and then the corresponding business behavior of each electronic device can be classified into the behavior attribute classification of the corresponding severity level, so that the behavior attribute classification of the business behavior of each electronic device can be determined, thereby Each electronic device performs a portrayal of the device image.
- the embodiment of the present invention may preset a range of the number of bad behaviors corresponding to each severity level, so that for each electronic device, the number of bad behaviors in the corresponding business behavior of the electronic device may be analyzed first; The number of bad behaviors in the corresponding business behavior of the device, determining the range of the number of bad behaviors in the quantity; and then determining the severity level corresponding to the number of the bad behavior, and using the severity level as the electronic device The severity of the corresponding business behavior is classified.
- the embodiment of the present invention can set the number of scam information distribution numbers corresponding to different severity levels, as shown in FIG. 9 , as an example, the severity level 1 corresponding to the severity level can be set.
- the number of fraudulent information is published in the range of 0, and the number of fraudulent information published in the severity level 2 ranges from 1 to 10.
- the number of fraudulent information published in the severity level 3 ranges from 10 to 100, and the severity level is 4.
- the corresponding number of fraudulent information is published in the range of 100 to 500, and the number of levels of the severity level and the corresponding number of fraudulent information releases can be expanded accordingly, and is not expanded here; if the device fingerprint is passed through an electronic device
- the business behavior of the integrated business data if it is found that the electronic device has 50 pieces of fraudulent information, the severity level of the electronic device may be determined to be level 3, and the device of the electronic device is marked with a severity level of 3 portrait.
- the service data associated with the device fingerprint of each electronic device determines the severity level of each electronic device to characterize the device image of each electronic device, thereby outputting the device image of the electronic device, which can be used for financial risk prevention, device security, In-depth application in areas such as information security;
- the embodiments of the present invention can describe the severity of the electronic equipment in the fields of financial risk prevention, equipment security, information security, and the like, and characterize the device portraits, such as financial fraud and hacking behavior in the business behavior associated with the electronic device;
- the process of portraying specific equipment images in a certain field can be referred to the above description, and the principle is the same.
- the embodiment of the present invention may further describe a user image corresponding to the service account of the service account of the service account integrated by the device fingerprint of the electronic device;
- the embodiment of the present invention can determine an electronic device associated with a target service account (which may be any service account that needs to portray a user portrait), and obtain a service corresponding to the target service account in the service data integrated by the associated electronic device.
- Behavior depicting the device portrait by the business behavior, and further depicting the corresponding user portrait of the target business account through the device portrait of the electronic device;
- FIG. 10 is a flowchart of a method for characterizing a user image provided by an embodiment of the present invention. The method is also applicable to a computing device. Referring to FIG. 10, the method may include:
- Step S400 The computing device determines a target service account.
- Step S410 The computing device acquires a service behavior corresponding to the target service account in the service data integrated by the device fingerprint of the at least one electronic device associated with the target service account.
- Step S420 The computing device determines a behavior attribute classification of the service behavior, and uses the determined behavior attribute classification to determine a device portrait of the at least one electronic device associated with the target service account.
- Step S430 The computing device depicts the corresponding user portrait of the target business account with the determined device image.
- the electronic service associated with the target business account may be set correspondingly.
- the severity level is 4, indicating that the user of the target business account has a behavior of a severity level of 4 on different electronic devices used, so that the device portrait of all electronic devices associated with the target business account can be imaged.
- the user portrait corresponding to the target business account is depicted (the corresponding severity level is 4), so that the behavioral risk capability of each user portrait determined by the embodiment of the present invention can be output.
- the determined device image corresponds to a higher level of severity, the degree of user behavior and the number of times indicated by the user portrait of the target business account are both high.
- the embodiment of the present invention may further integrate with the data of the external service, and output the device image of the determined electronic device to perform interworking between the device image of the electronic device and the external service.
- the device of the present invention can obtain the device data submitted by the external service, and calculate the initial device fingerprint (such as the device code in the device or the traditional device fingerprint calculated by the software and hardware configuration information) through the device data. And matching the preliminary device fingerprint with the preliminary device fingerprint (device code or traditional device fingerprint) of the electronic device that has portrayed the device portrait, and outputting the device image of the matched electronic device to the external service to enable the external service
- a device portrait of the electronic device determined by the embodiment of the present invention may be shared.
- the device fingerprint generation method provided by the embodiment of the present invention can enrich the information of the device fingerprint representation, and can output the security capability of the determined device image to the external service, so that the internal and external services can share the device determined by the embodiment of the present invention.
- Portraits enhance the security risk prevention and control capabilities of electronic devices.
- the device fingerprint generating apparatus provided by the embodiment of the present invention is described below.
- the device fingerprint generating apparatus described below may be considered as a program module that is required to be implemented by the computing device to implement the device fingerprint generating method provided by the embodiment of the present invention.
- the functions can be implemented by programs stored in the memory of the computing device.
- FIG. 11 is a structural block diagram of a device fingerprint generating apparatus according to an embodiment of the present invention.
- the device fingerprint generating apparatus may be applied to a computing device.
- the device fingerprint generating apparatus may include:
- the device data obtaining module 100 is configured to acquire device data of each electronic device; the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service;
- the preliminary device fingerprint obtaining module 200 is configured to acquire, for each electronic device, a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device;
- the service data obtaining module 300 is configured to acquire at least one piece of service data for each service, where a service data of a service includes at least: a service account for accessing the service;
- the association module 400 is configured to associate, according to the service account, device data of the electronic device corresponding to the same service account and service data of the electronic device corresponding to the same service account;
- the device fingerprint generating module 500 is configured to synthesize the initial device fingerprint of the electronic device with the service data associated with the electronic device for each electronic device to obtain a device fingerprint of each electronic device; wherein, the device fingerprint of the electronic device is The preliminary device fingerprint of the electronic device is obtained by synthesizing the business data associated with the electronic device.
- the initial device fingerprint obtaining module 200 is configured to acquire, for each electronic device, a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device, specifically:
- device data of each electronic device is classified, and device data of corresponding electronic devices of each operating system is obtained;
- the device code of each electronic device under the corresponding operating system is obtained according to the configuration information of the electronic device.
- the device fingerprint generating module 500 is configured to, for each electronic device, combine the initial device fingerprint of the electronic device with the service data associated with the electronic device, and obtain the device fingerprint of each electronic device, specifically:
- the device code under the corresponding operating system of the electronic device is integrated with the service data associated with the electronic device to obtain the device fingerprint of each electronic device.
- the initial device fingerprint obtaining module 200 is configured to acquire, for each electronic device, a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device, specifically:
- each electronic device For each electronic device, obtaining a preliminary device fingerprint of each electronic device according to the device code carried by the configuration information of the electronic device;
- a conventional device fingerprint is generated according to the configuration information of the electronic device.
- the device fingerprint generating module 500 is configured to, for each electronic device, combine the initial device fingerprint of the electronic device with the service data associated with the electronic device, and obtain the device fingerprint of each electronic device, specifically:
- the initial device fingerprint of the electronic device is integrated with the service account of the service data associated with the electronic device to obtain a device fingerprint of the electronic device;
- the initial device fingerprint of the electronic device is integrated with the service account and the business behavior information of the service data associated with the electronic device to obtain the device fingerprint of the electronic device.
- FIG. 12 is another structural block diagram of a device fingerprint generating apparatus according to an embodiment of the present invention. As shown in FIG. 11 and FIG. 12, the apparatus may further include:
- the device image generation module 600 is configured to acquire, for each electronic device, a service behavior of the service data integrated by the device fingerprint of the electronic device, and obtain a corresponding service behavior of each electronic device; for each electronic device, analyze the corresponding service behavior, Determining the behavior attribute classification of the business activity, classifying the behavior attribute of the business behavior of each electronic device determined, and determining the device portrait of each electronic device.
- the device image generating module 600 is configured to analyze, for each electronic device, a corresponding service behavior, and determine a behavior attribute classification of the service behavior, specifically:
- identifying the severity of the corresponding business behavior of each electronic device For each electronic device, identifying the severity of the corresponding business behavior of each electronic device, determining the severity level of the corresponding business behavior of each electronic device, and classifying the corresponding business behavior of each electronic device to the behavior attribute of the corresponding severity level classification.
- the device image generation module 600 is configured to identify the severity of the corresponding service behavior of each electronic device, and determine the severity level of the corresponding business behavior of each electronic device, specifically including:
- the severity level corresponding to the range of the bad behaviors of the analyzed quantity is regarded as the severity level classified by the corresponding business behavior of the electronic device.
- FIG. 13 is a block diagram of a device fingerprint generating apparatus according to an embodiment of the present invention. As shown in FIG. 11 and FIG. 13, the apparatus may further include:
- the user image generating module 700 is configured to determine a target service account, obtain a service behavior corresponding to the target service account in the service data integrated by the device fingerprint of the at least one electronic device associated with the target service account, and determine the service behavior.
- the behavior attribute classification is to classify the determined behavior attribute, determine a device portrait of the at least one electronic device associated with the target business account, and characterize the corresponding user portrait of the target business account with the determined device image.
- FIG. 14 is a block diagram showing another structure of the device fingerprint generating apparatus according to the embodiment of the present invention. As shown in FIG. 12 and FIG. 14, the apparatus may further include:
- the device image output module 800 is configured to obtain device data submitted by an external service, determine a preliminary device fingerprint of the device data, and match the preliminary device fingerprint with a preliminary device fingerprint of the electronic device that has portrayed the device image; The device portrait of the electronic device is output to the external business.
- the function module of the device fingerprint generating apparatus may be loaded into the computing device in a program form.
- the hardware structure of the computing device may be as shown in FIG. 2, and the computing device may include: at least one processor and At least one memory;
- the memory stores a program, the processor calls a program stored in the memory; the program is used to:
- the device data includes at least: configuration information of the electronic device and a service account of the electronic device accessing the service;
- each electronic device For each electronic device, obtaining a preliminary device fingerprint of each electronic device according to the configuration information of the electronic device;
- one piece of service data of a service includes at least: a service account for accessing the service;
- the initial device fingerprint of the electronic device is integrated with the service data associated with the electronic device to obtain a device fingerprint of each electronic device; wherein the device fingerprint of the electronic device is the preliminary device fingerprint of the electronic device and the The business data associated with the electronic device is synthesized.
- the obtaining, for each electronic device, the preliminary device fingerprint of each electronic device according to the configuration information of the electronic device includes:
- device data of each electronic device is classified, and device data of corresponding electronic devices of each operating system is obtained;
- the device code of each electronic device under the corresponding operating system is obtained according to the configuration information of the electronic device.
- the initial device fingerprint of the electronic device is integrated with the service data associated with the electronic device, and the device fingerprint of each electronic device is obtained, including:
- the device code under the corresponding operating system of the electronic device is integrated with the service data associated with the electronic device to obtain the device fingerprint of each electronic device.
- the obtaining, for each electronic device, the preliminary device fingerprint of each electronic device according to the configuration information of the electronic device including:
- each electronic device For each electronic device, obtaining a preliminary device fingerprint of each electronic device according to the device code carried by the configuration information of the electronic device;
- a conventional device fingerprint is generated according to the configuration information of the electronic device.
- the initial device fingerprint of the electronic device is integrated with the service data associated with the electronic device, and the device fingerprint of each electronic device is obtained by:
- the initial device fingerprint of the electronic device is integrated with the service account of the service data associated with the electronic device to obtain a device fingerprint of the electronic device;
- the initial device fingerprint of the electronic device is integrated with the service account and the business behavior information of the service data associated with the electronic device to obtain the device fingerprint of the electronic device.
- it also includes:
- each electronic device For each electronic device, acquiring the business behavior of the service data integrated by the device fingerprint of the electronic device, and obtaining the corresponding business behavior of each electronic device;
- analyzing the corresponding business behavior determining the behavior attribute classification of the business behavior, and classifying the behavior attributes of the business behavior of each electronic device to determine the device portrait of each electronic device.
- analyzing the corresponding business behavior, and determining the behavior attribute classification of the business behavior includes:
- identifying the severity of the corresponding business behavior of each electronic device For each electronic device, identifying the severity of the corresponding business behavior of each electronic device, determining the severity level of the corresponding business behavior of each electronic device, and classifying the corresponding business behavior of each electronic device to the behavior attribute of the corresponding severity level classification.
- the determining the severity of the corresponding service behavior of each electronic device, and determining the severity level of the corresponding service behavior of each electronic device includes:
- the severity level corresponding to the range of the bad behaviors of the analyzed quantity is regarded as the severity level classified by the corresponding business behavior of the electronic device.
- it also includes:
- Determining a behavior attribute classification of the business activity classifying the determined behavior attribute, and determining a device portrait of the at least one electronic device associated with the target business account;
- it also includes:
- the device portrait of the matched electronic device is output to the external service.
- the embodiment of the present invention further provides a storage medium for storing program code, and the program code is used to execute any one of the device fingerprint generation methods described in the foregoing embodiments.
- the embodiment of the present invention further provides a computer program product comprising instructions, which when executed on a computer, cause the computer to perform any one of the device fingerprint generation methods described in the foregoing embodiments.
- the steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented directly in hardware, a software module executed by a processor, or a combination of both.
- the software module can be placed in random access memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field. Any other form of storage medium known.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computer Networks & Wireless Communication (AREA)
- Theoretical Computer Science (AREA)
- Computing Systems (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Power Engineering (AREA)
- Collating Specific Patterns (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
本发明实施例提供一种设备指纹生成方法、装置及计算设备,该方法应用于计算设备,包括:获取各电子设备的设备数据,设备数据包括:电子设备的配置信息以及电子设备访问业务的业务账号;对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;对于各业务,获取至少一条业务数据;根据业务账号,将相同业务账号对应的电子设备的设备数据,及所述相同业务账号对应的电子设备的业务数据相关联;对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。本发明实施例提升了设备指纹所表示的信息的丰富度,为后续进行精准的信息个性化推荐、精准的用户画像生成等提供可能。
Description
本发明要求于2017年05月04日提交中国专利局、申请号为201710309136.4、申请名称为“一种设备指纹生成方法、装置及计算设备”的中国专利申请的优先权,其全部内容通过引用结合在本申请中。
本发明涉及数据处理技术领域,具体涉及设备指纹生成。
设备指纹是基于电子设备的特征属性所生成的电子设备唯一的设备标识;电子设备的设备指纹与现实世界里政府用身份证来标识公民的情况类似,是互联网和移动互联网领域区分不同电子设备的一项技术。
目前通常使用电子设备的软、硬件配置信息进行设备指纹的计算,然而本发明的发明人发现:随着设备指纹在信息个性化推荐、用户画像生成等场景的应用,技术人员更为希望设备指纹不仅能够表示电子设备的软、硬件配置等特征属性,还能够表示其他更为丰富的电子设备信息;因此如何优化设备指纹的生成方式,以实现表示信息更为丰富的设备指纹生成,一直是本领域技术人员考虑的问题。
发明内容
有鉴于此,本发明实施例提供一种设备指纹生成方法、装置及计算设备,以丰富设备指纹所能表示的信息。
为实现上述目的,本发明实施例提供如下技术方案:
第一方面,本发明实施例提供了一种设备指纹生成方法,应用于计算设备,包括:
获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;
对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;
对于各业务,获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号;
根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;
对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
第二方面,本发明实施例还提供一种设备指纹生成装置,应用于计算设备,包括:
设备数据获取模块,用于获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;
初步设备指纹获取模块,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;
业务数据获取模块,用于对于各业务,获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号;
关联模块,用于根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;
设备指纹生成模块,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
第三方面,本发明实施例还提供一种计算设备,所述计算设备包括处理器以及存储器:
所述存储器用于存储程序代码,并将所述程序代码传输给所述处理器;
所述处理器用于根据所述程序代码中的指令执行第一方面中所述的设备指纹生成方法。
第四方面,本发明实施例还提供一种存储介质,所述存储介质用于存储程序代码,所述程序代码用于执行第一方面中所述的设备指纹生成方法。
第五方面,本发明实施例还提供一种包括指令的计算机程序产品,当其在计算机上运行时,使得所述计算机执行执行第一方面中所述的设备指纹生成方法。
基于上述技术方案,本发明实施例提供的设备指纹生成方法中,计算设备可获取各电子设备的设备数据,并对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;同时,对于各业务,获取至少一条业务数据,从而可根据业务账号,将相同业务账号对应的电子设备的设备数据以及所述相同业务账号对应的电子设备的设备数据的业务数据相关联;进而对于各电子设备,可将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;使得本发明实施例所生成的电子设备的设备指纹,能够表示用户使用电子设备访问业务的情况,提升设备指纹所能表示的信息的丰富度,为后续进行精准的信息个性化推荐、精准的用户画像生成等提供可能。
为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据提供的附图获得其他的附图。
图1为本发明实施例提供的设备指纹生成系统的框架示意图;
图2为本发明实施例提供的计算设备的硬件结构框图;
图3为本发明实施例提供的设备指纹生成方法的流程图;
图4为设备数据和业务数据的关联示意图;
图5为设备数据和业务数据关联生成设备指纹的示意图;
图6为本发明实施例提供的设备指纹生成方法的另一流程图;
图7为操作系统分类下的设备数据示意图;
图8为本发明实施例提供的电子设备的设备画像刻画方法流程图;
图9为恶劣程度等级的确定示意图;
图10为本发明实施例提供的用户画像刻画的方法流程图;
图11为本发明实施例提供的设备指纹生成装置的结构框图;
图12为本发明实施例提供的设备指纹生成装置的另一结构框图;
图13为本发明实施例提供的设备指纹生成装置的再一结构框图;
图14为本发明实施例提供的设备指纹生成装置的又一结构框图。
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。
图1为本发明实施例提供的设备指纹生成系统的框架示意图,参照图1,该系统主要包括:计算设备10,数据库20和至少一个业务平台30;图1所示系统中主要由计算设备10实现各个电子设备的设备指纹生成;数据库20和至少一个业务平台30为计算设备提供数据源,该数据源可以包括各个电子设备的设备数据,以使得计算设备通过数据库中记录的数据源,实现各个电子设备的设备指纹生成;
在本发明实施例中,计算设备10可以是由网络侧设置的服务器实现,也可以是终端侧的PC(个人计算机)等终端设备实现;
各个业务平台30可以共用一账号体系,如同一用户可使用同一账号在不同的业务平台实现登录;可选的,各个业务平台30可以是同一公司旗下的不同业务的业务平台,各个业务平台可共用该公司为用户提供的通行的账号体系,如各个业务平台可以共用该公司为用户提供的即时通信账号,同一用户可使用同一即时通信账号在不同的业务平台实现登录;
可选的,本发明实施例可以具有多种业务类型(如即时通信业务类型,游戏业务类型,视频业务类型,音乐业务类型等),一种业务类型可以对应一个或多个业务平台(如图1所示至少一个业务平台30的业务类型可以有多种,一种业务类型可以对应上至少一个业务平台30中的一个或多个业务平台)。
在本发明实施例中,对于每一业务平台,业务平台可将访问自身业务的各电子设备的设备数据上传至数据库,如图1所示,业务1平台可将访问业务1的各电子设备的设备数据上传至数据库,业务2平台可将访问业务2的各电子设备的设备数据上传至数据库,以 使得数据库中可以记录各电子设备的设备数据,并标记各电子设备对应访问的业务(可在设备数据中进行标记);
可选的,对于每一业务,一电子设备的设备数据可以包括该电子设备的配置信息(如软、硬件配置信息),该电子设备访问该业务所使用的业务账号等;如对于业务1,业务1下的一电子设备的设备数据可以包括:该电子设备的配置信息,该电子设备访问业务1所使用的业务账号等;对于业务2,业务2下的一电子设备的设备数据可以包括:该电子设备的配置信息,该电子设备访问业务2所使用的业务账号等;
需要注意的是,同一电子设备可能会访问不同的业务,因此数据库在获取到各业务平台上传的电子设备的设备数据后,可将同一电子设备所访问的不同业务的业务标识,在该电子设备的设备数据中进行标记,以使得数据库中记录的不同设备数据分属不同的电子设备,减小数据库的存储量;显然,此处的处理仅是可选的。
当数据库记录有各电子设备的设备数据的情况下,计算设备可以获取数据库所记录的各电子设备的设备数据,从而作为数据源,以本发明实施例提供的设备指纹生成方法,实现各电子设备的设备指纹的生成;可选的,本发明实施例提供的设备指纹生成方法的功能可通过程序形式装载于计算设备中,计算设备可以通过调用该程序实现本发明实施例提供的设备指纹生成方法;
可选的,图2示出了本发明实施例提供的计算设备的硬件结构框图,参照图2,该计算设备可以包括:至少一个处理器1,至少一个通信接口2,至少一个存储器3和至少一个通信总线4;
在本发明实施例中,处理器1、通信接口2、存储器3、通信总线4的数量为至少一个,且处理器1、通信接口2、存储器3通过通信总线4完成相互间的通信;显然,图2所示的处理器1、通信接口2、存储器3和通信总线4的通信连接示意仅是可选的;
可选的,通信接口2可以为通信模块的接口,如全球移动通信系统(Global System for Mobile communication,GSM)模块的接口;
处理器1可能是一个中央处理器(Central Processing Unit,CPU),或者是特定集成电路(Application Specific Integrated Circuit,ASIC),或者是被配置成实施本发明实施例的一个或多个集成电路。
存储器3可能包含高速随机存取存储器(Random access memory,RAM)存储器,也可能还包括非易失性存储器(non-volatile memory),例如至少一个磁盘存储器。
其中,存储器3存储有程序,处理器1调用存储器3所存储的程序实现本发明实施例提供的设备指纹生成方法。
下面站在计算设备的角度,对本发明实施例提供的设备指纹生成方法进行介绍,下文描述的设备指纹生成方法内容,可以是由计算设备的处理器调用存储器所存储的程序实现。
图3为本发明实施例提供的设备指纹生成方法的流程图,该方法可应用于计算设备,参照图3,该方法可以包括:
步骤S100、计算设备获取各电子设备的设备数据;所述设备数据至少包括:电子设备 的配置信息以及电子设备访问业务的业务账号。
可选的,如图1所示,计算设备可以从数据库中获取各电子设备的设备数据;
可选的,在本发明实施例中,一电子设备的设备数据一般为至少一条,且一电子设备的设备数据至少可以包括:该电子设备的配置信息以及该电子设备访问业务的业务账号;配置信息可以如电子设备的软、硬件配置信息,诸如国际移动设备身份码(International Mobile Equipment Identity,IMEI)、媒体访问控制(Media Access Control,MAC)地址、CPU型号、加速度传感器型号、设备名称等,具体可视实际情况设定。
显然,根据实际需要,还可以在设备数据中增设电子设备访问业务的业务标识等,具体增设的设备数据信息可以根据实际情况设定。
可选的,上文所指的电子设备可以包含移动设备和PC设备。
步骤S110、对于各电子设备,所述计算设备根据电子设备的配置信息,获取各电子设备的初步设备指纹。
可选的,初步设备指纹可以由电子设备的设备码(如操作系统所提供的androidid、adid、idfa等,也可能是电子设备的IMEI、MAC地址等)表示;如采用IMEI、MAC地址等设备码,则设备码可以携带在电子设备的配置信息中;可选的,本发明实施例也可通过电子设备的配置信息生成传统的设备指纹,作为初步设备指纹。
步骤S120、对于各业务,所述计算设备获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号。
可选的,本发明实施例可以从各业务平台,对于每一业务均获取到至少一条业务数据;对于每一业务,所获取的一条业务数据可以至少包括:访问该业务所使用的业务账号;
显然,业务数据中还可以携带业务行为信息,业务标识等其他信息,具体可视实际需要设定;如示例性的,一业务的一条业务数据可以包括但不限于如下内容:访问业务的业务帐号,用户手机号码,用户邮箱,以及用户访问业务产生的业务行为信息等。
步骤S130、所述计算设备根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联。
如图4所示,在前文获取到各电子设备的设备数据后,可以明确各电子设备的设备数据所携带的业务账号、配置信息等内容,同时对于各业务均获取到至少一条业务数据后,可以明确各业务相应的业务账号;在此情况下,可以使用业务账号,将相同业务账号对应的电子设备的设备数据,和该相同业务账号对应的电子设备的业务数据进行关联;如此则可确定出一个用户通过一业务账号在哪些电子设备上访问了什么类型的业务,同时通过业务数据可以确定相应的业务行为;图4中,业务数据1和业务数据3可能分属不同的业务,也可能是同一业务。
可选的,一个业务账号所关联的电子设备的设备数据可以为至少一条(如同一业务账号在不同的电子设备上使用),所关联的业务数据也可能为至少一条(如同一业务账号访问了不同的业务,或者同一业务账号在不同的时段,通过不同的业务行为产生了不同的业务数据);相应的,一个电子设备所关联到的业务数据可能是至少一条的,且该至少一条业务数据中对应的业务账号可能是一个或多个(如一电子设备使用不同的业务账号访问了业 务)。
步骤S140、对于各电子设备,所述计算设备将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
在本实施例中,一电子设备的设备指纹可以是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。可以理解的是,各电子设备均可以具有与其对应的设备指纹。
如图5所示,对于任一电子设备而言,本发明实施例在获取到该电子设备的初步设备指纹后,可通过该电子设备的初步设备指纹,从该电子设备关联的设备数据和业务数据中,获取到具有该初步设备指纹的电子设备所关联的业务数据,从而将该电子设备的初步设备指纹,与该电子设备所关联的业务数据相综合,得到该电子设备的设备指纹。
可选的,本发明实施例对于各电子设备,可将电子设备的初步设备指纹,与该电子设备所关联的业务数据的业务账号(至少一个)相综合,得到该电子设备的设备指纹,如可将计算得到的电子设备的初步设备指纹,与该电子设备所关联的业务数据的业务账号的相似度,获取到该电子设备的设备指纹;
显然,除将电子设备的初步设备指纹与所关联的业务数据的业务账号相综合外,本发明实施例还可综合所关联业务数据中的业务行为等信息,得到电子设备的设备指纹,使得所生成的设备指纹表示的信息更为丰富;显然,使用何种得到电子设备的设备指纹的方式可根据实际需要进行设定。
本发明实施例提供的设备指纹生成方法中,计算设备可获取各电子设备的设备数据,并对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;同时,对于各业务,获取至少一条业务数据,从而可根据业务账号,将相同业务账号对应的电子设备的设备数据以及所述相同业务账号对应的电子设备的设备数据的业务数据相关联;进而对于各电子设备,可将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;使得本发明实施例所生成的电子设备的设备指纹,能够表示用户使用电子设备访问业务的情况,提升设备指纹所能表示的信息的丰富度,为后续进行精准的信息个性化推荐、精准的用户画像生成等提供可能。
可选的,电子设备的初步设备指纹可以是电子设备的设备码,该设备码可以是电子设备的操作系统厂商提供并设置在电子设备的配置信息中;可选的,图6示出了本发明实施例提供的设备指纹生成方法的另一流程图,该方法可应用于计算设备,参照图6,该方法可以包括:
步骤S200、计算设备获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号。
步骤S210、所述计算设备根据不同的操作系统,将各电子设备的设备数据进行分类,得到各操作系统相应的电子设备的设备数据。
在将各电子设备的设备数据进行汇总后,本发明实施例可按照不同的操作系统对所汇总的各电子设备的设备数据进行分类,从而以操作系统为分类维度,得到各操作系统相应 的电子设备的设备数据;可选的,一操作系统相应的电子设备的设备数据可以有一条或多条,如一操作系统下的电子设备数量可能为一个或多个;
可选的,此处所指的操作系统可以涵盖移动设备的操作系统(如ios、Android、windowsphone等),PC设备的操作系统(如Llinux、MacOS、windows等);可选的,图7示出了以不同操作系统进行分类后,所得到的各操作系统相应的电子设备的设备数据的示意图。
步骤S220、对于各电子设备,所述计算设备根据电子设备的配置信息,获取各电子设备在相应操作系统下的设备码。
在将各电子设备的设备数据按照操作系统进行分类后,本发明实施例可以获取各个操作系统下,各电子设备的设备码,以得到各电子设备在相应操作系统下的设备码;
一电子设备在相应操作系统下的设备码的形式可以如:该电子设备在相应操作系统下的android id、adid、idfa等;
可选的,一个电子设备的设备码在不同操作系统下可能有不同的表示,如安卓(android)系统为每一台安卓设备生成的android id为唯一标识;而adid属于advertising Identifier,是操作系统为开发者提供广告追踪的id,此处特指苹果设备的广告id,可以用adid表示;idfa是苹果设备用于标识设备唯一标识,并提供给开发者的设备唯一标识,同上述adid。
可选的,图6所示步骤S210和步骤S220仅是对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹的可选方式;本发明实施例也可不对获取的各电子设备的设备数据以操作系统进行分类,而是可直接根据电子设备的设备数据中携带的配置信息,生成电子设备的初步设备指纹,如直接将电子设备的配置信息中携带的IMEI、MAC地址等作为电子设备的初步设备指纹,或者,根据电子设备的配置信息,生成传统设备指纹。
步骤S230、对于各业务,所述计算设备获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号。
步骤S240、根据业务账号,所述计算设备将相同业务账号对应的至少一个操作系统下的电子设备的设备数据,以及所述相同业务账号对应的至少一个操作系统下的电子设备的业务数据相关联。
步骤S250、对于各电子设备,所述计算设备将电子设备在相应操作系统下的设备码,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
其中,一电子设备的设备指纹可以是该电子设备在相应操作系统下的设备码与该电子设备所关联的业务数据相综合得到的。
可选的,对于每一电子设备,在将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到电子设备的设备指纹的过程中,本发明实施例可对于每一电子设备,将电子设备的初步设备指纹(如在相应操作系统下的设备码),与电子设备所关联的业务数据中的各业务账号相综合,得到各电子设备的设备指纹。
可选的,上文所示设备码是电子设备的操作系统厂商提供并设置在电子设备的配置信息中的,作为另一种可能,设备码还可以是电子设备的生产厂商提供并设置在电子设备的 配置信息中的。
可选的,本发明实施例所生成的电子设备的设备指纹,能够表示用户使用什么业务账号,在该电子设备上访问了什么类型的业务;示例性的,一电子设备的设备指纹可以表示为:用户使用账号Z1在初步设备指纹(如设备码)为A的电子设备上进行了登录。
可选的,电子设备的设备指纹还可综合电子设备所关联的业务数据的业务行为,而业务数据能够包含的业务行为可以是多种多样的,除指示登录的业务行为外,还可以指示如支付、状态发布、聊天等业务行为;因此本发明实施例所生成的设备指纹所能表示的信息可以随着业务数据表示的信息情况进行扩展和丰富。
为便于说明,以业务数据表示的业务行为包括登录行为为例,同时精简业务平台为1和2,对本发明实施例的方案进行示例说明;业务平台1和2可将访问自身业务的各电子设备的设备数据上传至数据库,数据库可去重业务平台1和2所上传的相同的电子设备的设备数据,并在所保留的电子设备的设备数据中,标记电子设备所访问的业务的业务标识为1和2;同时,业务平台1和2可将各电子设备的包含登录行为的业务数据上传至数据库;
计算设备可从数据库获取各电子设备的设备数据,并以不同的操作系统进行归类,得到各操作系统下的各电子设备的设备数据;同时,可以以业务数据中的业务账号,和设备数据中的业务账号,将使用相同业务账号的电子设备的设备数据和业务数据进行关联;
然后,对于每一电子设备,计算设备可根据该电子设备在相应操作系统下的设备码,获取到该电子设备所关联的使用相同业务账号相应的业务数据;如设备码为A的电子设备可关联到使用相同业务账号Z1的业务数据Y1和Y2,而业务数据Y1属于业务1,业务数据Y2属于业务2;通过将电子设备的设备码A,业务数据Y1和Y2相综合,可得到出设备码为A的电子设备的设备指纹;该设备指纹能够表示出,使用业务账号Z1的用户在设备码为A的电子设备上登录了业务1和业务2,从而丰富设备码为A的电子设备的设备指纹所能表示的信息。
可选的,在获取到各电子设备的设备指纹后,对于每一电子设备,本发明实施例可根据电子设备的设备指纹所综合的业务数据中的业务行为,对各电子设备进行设备分类,以刻画出电子设备的设备画像;
可选的,图8示出了本发明实施例提供的电子设备的设备画像刻画方法流程图,该方法也可应用于计算设备,参照图8,该方法可以包括:
步骤S300、计算设备对于每一电子设备,获取电子设备的设备指纹所综合的业务数据的业务行为,得到各电子设备相应的业务行为。
对于每一电子设备,在得到该电子设备的设备指纹后,本发明实施例可获取到该设备指纹所综合的业务数据所对应的业务行为,得到各电子设备相应的业务行为;一电子设备相应的业务行为可以携带有用户在该电子设备访问业务时涉及的支付、聊天等业务行为。
步骤S310、对于每一电子设备,所述计算设备分析相应的业务行为,确定所述业务行为的行为属性分类,以所确定的各电子设备的业务行为的行为属性分类,确定各电子设备 的设备画像。
可选的,本发明实施例进行设备画像刻画的目的是,对电子设备进行分类,并标记具有恶劣行为的电子设备(如散布虚假信息、诈骗信息等恶劣行为的电子设备),其依据是通过电子设备相应的业务行为的恶劣程度,确定电子设备相应的业务行为的行为属性分类;
其中,行为属性分类的类型可能具有多种。比如,可以根据预置的恶劣程度等级对电子设备相应的业务行为进行行为属性分类,具体地,可以先通过识别各电子设备相应的业务行为的恶劣程度,然后,可以确定出各电子设备相应的业务行为的恶劣程度等级,接着,可以将各电子设备相应的业务行为归类到相应恶劣程度等级的行为属性分类,这样,便可确定出各电子设备的业务行为的行为属性分类,以此对各电子设备进行设备画像刻画。
可选的,本发明实施例可预置各恶劣程度等级对应的恶劣行为数量范围,从而对于每一电子设备,可以先分析电子设备相应的业务行为中恶劣行为的数量;然后,可以根据该电子设备相应的业务行为中恶劣行为的数量,确定该数量所处的恶劣行为数量范围;接着,可以根据该恶劣行为数量范围确定与其相应的恶劣程度等级,并可以将该恶劣程度等级作为该电子设备相应的业务行为归类到的恶劣程度等级。
如以发布诈骗信息的数量衡量恶劣程度等级,本发明实施例可设置不同的恶劣程度等级所对应的诈骗信息发布数量范围,如图9所示,作为示例,可设置恶劣程度等级1所对应的诈骗信息发布数量范围0条,恶劣程度等级2所对应的诈骗信息发布数量范围为1条~10条,恶劣程度等级3所对应的诈骗信息发布数量范围为10条~100条,恶劣程度等级4所对应的诈骗信息发布数量范围为100条~500条,相应还可扩展恶劣程度等级的级数与相应的诈骗信息发布数量范围,此处不再展开;若在通过一电子设备的设备指纹所综合的业务数据的业务行为,识别出该电子设备存在发布诈骗信息50条的情况,则可将该电子设备的恶劣程度等级确定为等级3,并以恶劣程度等级3刻画出该电子设备的设备画像。
可见,通过各电子设备的设备指纹所关联的业务数据,确定各电子设备的恶劣程度等级,来刻画各电子设备的设备画像,从而输出电子设备的设备画像,可以在金融风险防范、设备安全、信息安全等领域进行深入应用;
如本发明实施例可以电子设备所关联的业务行为中的金融诈骗、盗号行为等恶劣行为,刻画出电子设备在金融风险防范、设备安全、信息安全等领域的恶劣程度等级,并刻画设备画像;在某一领域进行具体的设备画像刻画的过程,可以参照上文描述,原理相同。
可选的,本发明实施例还可通过电子设备的设备指纹所综合的某一业务账号的业务数据的业务行为,刻画该业务账号相应的用户画像;
相应的,本发明实施例可确定目标业务账号(可以是需要刻画用户画像的任一业务账号)所关联的电子设备,获取所关联的电子设备所综合的业务数据中,目标业务账号相应的业务行为,以该业务行为进行设备画像刻画,通过电子设备的设备画像进一步刻画出该目标业务账号相应的用户画像;
可选的,图10示出了本发明实施例提供的用户画像刻画的方法流程图,该方法也可应用于计算设备,参照图10,该方法可以包括:
步骤S400、计算设备确定目标业务账号。
步骤S410、所述计算设备获取目标业务账号所关联的至少一个电子设备的设备指纹所综合的业务数据中,与所述目标业务账号相应的业务行为。
步骤S420、所述计算设备确定该业务行为的行为属性分类,以所确定的行为属性分类,确定目标业务账号所关联的至少一个电子设备的设备画像。
步骤S430、所述计算设备以所确定的设备画像刻画所述目标业务账号相应的用户画像。
如目标业务账号所关联的各电子设备综合的业务数据中,与该目标业务账号相应的业务行为,总共存在发布诈骗信息150条的情况,则可设置该目标业务账号所关联的所有电子设备相应的恶劣程度等级为4,说明该目标业务账号的用户在使用的不同电子设备上存在恶劣程度等级为4的行为,以此刻画目标业务账号所关联的所有电子设备的设备画像后,可以设备画像刻画出目标业务账号相应的用户画像(相应恶劣程度等级为4),从而可输出本发明实施例所确定的各用户画像的行为风险能力。
显然,如果所确定的设备画像对应恶劣程度等级较高,则该目标业务账号的用户画像所表示的用户恶劣行为程度和次数均较高。
可选的,在确定出电子设备的设备画像后,本发明实施例还可与外部业务的数据整合,输出所确定的电子设备的设备画像,以与外部业务进行电子设备的设备画像的互通,提升对于电子设备的风险防控能力;本发明实施例可以获取外部业务提交的设备数据,通过设备数据计算初步设备指纹(如设备中的设备码,或者软、硬件配置信息计算的传统设备指纹),从而将该初步设备指纹,与已刻画设备画像的电子设备的初步设备指纹(设备码或者传统设备指纹)进行匹配,将所匹配到的电子设备的设备画像输出到外部业务,以使外部业务可以共享本发明实施例所确定的电子设备的设备画像。
本发明实施例提供的设备指纹生成方法能够丰富设备指纹表示的信息,同时可将所确定的设备画像的安全能力输出到外部业务,以使得内、外部业务可以共享本发明实施例所确定的设备画像,提升对于电子设备的安全风险防控能力。
下面对本发明实施例提供的设备指纹生成装置进行介绍,下文描述的设备指纹生成装置可以认为是,计算设备为实现本发明实施例提供的设备指纹生成方法所需设置的程序模块,这些程序模块的功能可以由计算设备的存储器中存储的程序实现。
图11为本发明实施例提供的设备指纹生成装置的结构框图,该设备指纹生成装置可以应用于计算设备,参照图11,该设备指纹生成装置可以包括:
设备数据获取模块100,用于获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;
初步设备指纹获取模块200,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;
业务数据获取模块300,用于对于各业务,获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号;
关联模块400,用于根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;
设备指纹生成模块500,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
可选的,初步设备指纹获取模块200,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,具体包括:
根据不同的操作系统,将各电子设备的设备数据进行分类,得到各操作系统相应的电子设备的设备数据;
对于各电子设备,根据电子设备的配置信息,获取各电子设备在相应操作系统下的设备码。
可选的,设备指纹生成模块500,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,具体包括:
对于各电子设备,将电子设备相应操作系统下的设备码,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
可选的,初步设备指纹获取模块200,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,具体包括:
对于各电子设备,根据电子设备的配置信息携带的设备码,获取各电子设备的初步设备指纹;
或,对于各电子设备,根据电子设备的配置信息生成传统的设备指纹。
可选的,设备指纹生成模块500,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,具体包括:
对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号相综合,得到电子设备的设备指纹;
或,对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号和业务行为信息相综合,得到电子设备的设备指纹。
可选的,图12示出了本发明实施例提供的设备指纹生成装置的另一结构框图,结合图11和图12所示,该装置还可以包括:
设备画像生成模块600,用于对于每一电子设备,获取电子设备的设备指纹所综合的业务数据的业务行为,得到各电子设备相应的业务行为;对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,以所确定的各电子设备的业务行为的行为属性分类,确定各电子设备的设备画像。
可选的,设备画像生成模块600,用于对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,具体包括:
对于每一电子设备,识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,将各电子设备相应的业务行为归类到相应恶劣程度等级的行为属性分类。
可选的,设备画像生成模块600,用于识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,具体包括:
对于每一电子设备,分析电子设备相应的业务行为中恶劣行为的数量;
根据预置的各恶劣程度等级对应的恶劣行为数量范围,将所分析得到的数量所处的恶劣行为数量范围相应的恶劣程度等级,作为电子设备相应的业务行为归类到的恶劣程度等级。
可选的,图13示出了本发明实施例提供的设备指纹生成装置的再一结构框图,结合图11和图13所示,该装置还可以包括:
用户画像生成模块700,用于确定目标业务账号;获取目标业务账号所关联的至少一个电子设备的设备指纹所综合的业务数据中,与所述目标业务账号相应的业务行为;确定该业务行为的行为属性分类,以所确定的行为属性分类,确定目标业务账号所关联的至少一个电子设备的设备画像;以所确定的设备画像刻画所述目标业务账号相应的用户画像。
可选的,图14示出了本发明实施例提供的设备指纹生成装置的又一结构框图,结合图12和图14所示,该装置还可以包括:
设备画像输出模块800,用于获取外部业务提交的设备数据;确定该设备数据的初步设备指纹;将该初步设备指纹,与已刻画设备画像的电子设备的初步设备指纹进行匹配;将所匹配到的电子设备的设备画像输出到所述外部业务。
可选的,上述所述的设备指纹生成装置的功能模块可以程序形式加载在计算设备中,相应的,计算设备的硬件结构可以如图2所示,该计算设备可以包括:至少一个处理器和至少一个存储器;
所述存储器存储有程序,所述处理器调用所述存储器存储的程序;所述程序用于:
获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;
对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;
对于各业务,获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号;
根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;
对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
可选的,所述对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹包括:
根据不同的操作系统,将各电子设备的设备数据进行分类,得到各操作系统相应的电子设备的设备数据;
对于各电子设备,根据电子设备的配置信息,获取各电子设备在相应操作系统下的设备码。
可选的,所述对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,包括:
对于各电子设备,将电子设备相应操作系统下的设备码,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
可选的,所述对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,包括:
对于各电子设备,根据电子设备的配置信息携带的设备码,获取各电子设备的初步设备指纹;
或,对于各电子设备,根据电子设备的配置信息生成传统的设备指纹。
可选的,所述对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹包括:
对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号相综合,得到电子设备的设备指纹;
或,对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号和业务行为信息相综合,得到电子设备的设备指纹。
可选的,还包括:
对于每一电子设备,获取电子设备的设备指纹所综合的业务数据的业务行为,得到各电子设备相应的业务行为;
对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,以所确定的各电子设备的业务行为的行为属性分类,确定各电子设备的设备画像。
可选的,所述对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类包括:
对于每一电子设备,识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,将各电子设备相应的业务行为归类到相应恶劣程度等级的行为属性分类。
可选的,所述识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级包括:
对于每一电子设备,分析电子设备相应的业务行为中恶劣行为的数量;
根据预置的各恶劣程度等级对应的恶劣行为数量范围,将所分析得到的数量所处的恶劣行为数量范围相应的恶劣程度等级,作为电子设备相应的业务行为归类到的恶劣程度等级。
可选的,还包括:
确定目标业务账号;
获取所述目标业务账号所关联的至少一个电子设备的设备指纹所综合的业务数据中, 与所述目标业务账号相应的业务行为;
确定该业务行为的行为属性分类,以所确定的行为属性分类,确定所述目标业务账号所关联的至少一个电子设备的设备画像;
以所确定的设备画像刻画所述目标业务账号相应的用户画像。
可选的,还包括:
获取外部业务提交的设备数据;
确定该设备数据的初步设备指纹;
将该初步设备指纹,与已刻画设备画像的电子设备的初步设备指纹进行匹配;
将所匹配到的电子设备的设备画像输出到所述外部业务。
本发明实施例还提供了一种存储介质,所述存储介质用于存储程序代码,所述程序代码用于执行前述各个实施例所述的设备指纹生成方法中的任意一种实施方式。
本发明实施例还提供了一种包括指令的计算机程序产品,当其在计算机上运行时,使得所述计算机执行前述各个实施例所述的设备指纹生成方法中的任意一种实施方式。
本说明书中各个实施例采用递进的方式描述,每个实施例重点说明的都是与其他实施例的不同之处,各个实施例之间相同相似部分互相参见即可。对于实施例公开的装置而言,由于其与实施例公开的方法相对应,所以描述的比较简单,相关之处参见方法部分说明即可。
专业人员还可以进一步意识到,结合本文中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、计算机软件或者二者的结合来实现,为了清楚地说明硬件和软件的可互换性,在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行,取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能,但是这种实现不应认为超出本发明的范围。
结合本文中所公开的实施例描述的方法或算法的步骤可以直接用硬件、处理器执行的软件模块,或者二者的结合来实施。软件模块可以置于随机存储器(RAM)、内存、只读存储器(ROM)、电可编程ROM、电可擦除可编程ROM、寄存器、硬盘、可移动磁盘、CD-ROM、或技术领域内所公知的任意其它形式的存储介质中。
对所公开的实施例的上述说明,使本领域专业技术人员能够实现或使用本发明。对这些实施例的多种修改对本领域的专业技术人员来说将是显而易见的,本文中所定义的一般原理可以在不脱离本发明的核心思想或范围的情况下,在其它实施例中实现。因此,本发明将不会被限制于本文所示的这些实施例,而是要符合与本文所公开的原理和新颖特点相一致的最宽的范围。
Claims (23)
- 一种设备指纹生成方法,应用于计算设备,包括:获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;对于各业务,获取至少一条业务数据;其中,一业务的一条业务数据至少包括:访问该业务的业务账号;根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
- 根据权利要求1所述的设备指纹生成方法,所述对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹包括:根据不同的操作系统,将各电子设备的设备数据进行分类,得到各操作系统相应的电子设备的设备数据;对于各电子设备,根据电子设备的配置信息,获取各电子设备在相应操作系统下的设备码。
- 根据权利要求2所述的设备指纹生成方法,所述对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,包括:对于各电子设备,将电子设备相应操作系统下的设备码,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
- 根据权利要求1所述的设备指纹生成方法,所述对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,包括:对于各电子设备,根据电子设备的配置信息携带的设备码,获取各电子设备的初步设备指纹;或,对于各电子设备,根据电子设备的配置信息生成传统的设备指纹。
- 根据权利要求1所述的设备指纹生成方法,所述对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹包括:对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号相综合,得到电子设备的设备指纹;或,对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号和业务行为信息相综合,得到电子设备的设备指纹。
- 根据权利要求1-5任一项所述的设备指纹生成方法,还包括:对于每一电子设备,获取电子设备的设备指纹所综合的业务数据的业务行为,得到各电子设备相应的业务行为;对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,以所确定的各电子设备的业务行为的行为属性分类,确定各电子设备的设备画像。
- 根据权利要求6所述的设备指纹生成方法,所述对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类包括:对于每一电子设备,识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,将各电子设备相应的业务行为归类到相应恶劣程度等级的行为属性分类。
- 根据权利要求7所述的设备指纹生成方法,所述识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级包括:对于每一电子设备,分析电子设备相应的业务行为中恶劣行为的数量;根据预置的各恶劣程度等级对应的恶劣行为数量范围,将所分析得到的数量所处的恶劣行为数量范围相应的恶劣程度等级,作为电子设备相应的业务行为归类到的恶劣程度等级。
- 根据权利要求1-5任一项所述的设备指纹生成方法,还包括:确定目标业务账号;获取所述目标业务账号所关联的至少一个电子设备的设备指纹所综合的业务数据中,与所述目标业务账号相应的业务行为;确定该业务行为的行为属性分类,以所确定的行为属性分类,确定所述目标业务账号所关联的至少一个电子设备的设备画像;以所确定的设备画像刻画所述目标业务账号相应的用户画像。
- 根据权利要求6所述的设备指纹生成方法,还包括:获取外部业务提交的设备数据;确定该设备数据的初步设备指纹;将该初步设备指纹,与已刻画设备画像的电子设备的初步设备指纹进行匹配;将所匹配到的电子设备的设备画像输出到所述外部业务。
- 一种设备指纹生成装置,应用于计算设备,包括:设备数据获取模块,用于获取各电子设备的设备数据;所述设备数据至少包括:电子设备的配置信息以及电子设备访问业务的业务账号;初步设备指纹获取模块,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹;业务数据获取模块,用于对于各业务,获取至少一条业务数据;其中,一业务的一条 业务数据至少包括:访问该业务的业务账号;关联模块,用于根据业务账号,将相同业务账号对应的电子设备的设备数据,以及所述相同业务账号对应的电子设备的业务数据相关联;设备指纹生成模块,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹;其中,一电子设备的设备指纹是该电子设备的初步设备指纹与该电子设备所关联的业务数据相综合得到的。
- 根据权利要求11所述的设备指纹生成装置,所述初步设备指纹获取模块,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,具体包括:根据不同的操作系统,将各电子设备的设备数据进行分类,得到各操作系统相应的电子设备的设备数据;对于各电子设备,根据电子设备的配置信息,获取各电子设备在相应操作系统下的设备码。
- 根据权利要求12所述的设备指纹生成装置,所述设备指纹生成模块,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,具体包括:对于各电子设备,将电子设备相应操作系统下的设备码,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹。
- 根据权利要求11所述的设备指纹生成装置,所述初步设备指纹获取模块,用于对于各电子设备,根据电子设备的配置信息,获取各电子设备的初步设备指纹,具体包括:对于各电子设备,根据电子设备的配置信息携带的设备码,获取各电子设备的初步设备指纹;或,对于各电子设备,根据电子设备的配置信息生成传统的设备指纹。
- 根据权利要求11所述的设备指纹生成装置,所述设备指纹生成模块,用于对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据相综合,得到各电子设备的设备指纹,具体包括:对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号相综合,得到电子设备的设备指纹;或,对于各电子设备,将电子设备的初步设备指纹,与电子设备所关联的业务数据的业务账号和业务行为信息相综合,得到电子设备的设备指纹。
- 根据权利要求11-15任一项所述的设备指纹生成装置,还包括:设备画像生成模块,用于对于每一电子设备,获取电子设备的设备指纹所综合的业务数据的业务行为,得到各电子设备相应的业务行为;对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,以所确定的各电子设备的业务行为的行为属性分类,确定各电子设备的设备画像。
- 根据权利要求16所述的设备指纹生成装置,所述设备画像生成模块,用于对于每一电子设备,分析相应的业务行为,确定业务行为的行为属性分类,具体包括:对于每一电子设备,识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,将各电子设备相应的业务行为归类到相应恶劣程度等级的行为属性分类。
- 根据权利要求17所述的设备指纹生成装置,所述设备画像生成模块,用于识别各电子设备相应的业务行为的恶劣程度,确定出各电子设备相应的业务行为的恶劣程度等级,具体包括:对于每一电子设备,分析电子设备相应的业务行为中恶劣行为的数量;根据预置的各恶劣程度等级对应的恶劣行为数量范围,将所分析得到的数量所处的恶劣行为数量范围相应的恶劣程度等级,作为电子设备相应的业务行为归类到的恶劣程度等级。
- 根据权利要求11-15任一项所述的设备指纹生成装置,还包括:用户画像生成模块,用于确定目标业务账号;获取所述目标业务账号所关联的至少一个电子设备的设备指纹所综合的业务数据中,与所述目标业务账号相应的业务行为;确定该业务行为的行为属性分类,以所确定的行为属性分类,确定目标业务账号所关联的至少一个电子设备的设备画像;以所确定的设备画像刻画所述目标业务账号相应的用户画像。
- 根据权利要求16所述的设备指纹生成装置,还包括:设备画像输出模块,用于获取外部业务提交的设备数据;确定该设备数据的初步设备指纹;将该初步设备指纹,与已刻画设备画像的电子设备的初步设备指纹进行匹配;将所匹配到的电子设备的设备画像输出到所述外部业务。
- 一种计算设备,所述计算设备包括处理器以及存储器:所述存储器用于存储程序代码,并将所述程序代码传输给所述处理器;所述处理器用于根据所述程序代码中的指令执行权利要求1-10任一项所述的设备指纹生成方法。
- 一种存储介质,所述存储介质用于存储程序代码,所述程序代码用于执行权利要求1-10任一项所述的设备指纹生成方法。
- 一种包括指令的计算机程序产品,当其在计算机上运行时,使得所述计算机执行权利要求1-10任一项所述的设备指纹生成方法。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710309136.4A CN108804908B (zh) | 2017-05-04 | 2017-05-04 | 一种设备指纹生成方法、装置及计算设备 |
| CN201710309136.4 | 2017-05-04 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2018201965A1 true WO2018201965A1 (zh) | 2018-11-08 |
Family
ID=64015847
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2018/084640 Ceased WO2018201965A1 (zh) | 2017-05-04 | 2018-04-26 | 设备指纹生成方法、装置及计算设备 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN108804908B (zh) |
| WO (1) | WO2018201965A1 (zh) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112883363A (zh) * | 2021-02-05 | 2021-06-01 | 上海识装信息科技有限公司 | 一种识别设备指纹碰撞的方法 |
| CN112954666A (zh) * | 2019-11-26 | 2021-06-11 | 中兴通讯股份有限公司 | 一种用户画像方法、装置、设备和存储介质 |
| CN114640531A (zh) * | 2022-03-25 | 2022-06-17 | 北京奇艺世纪科技有限公司 | 设备指纹生成方法、装置、电子设备及存储介质 |
| CN117675755A (zh) * | 2024-01-31 | 2024-03-08 | 浙江省电子信息产品检验研究院(浙江省信息化和工业化融合促进中心) | 智能网联设备管理方法与装置 |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109657447B (zh) * | 2018-11-28 | 2023-03-14 | 腾讯科技(深圳)有限公司 | 一种设备指纹生成方法及装置 |
| CN110210858A (zh) * | 2019-05-31 | 2019-09-06 | 上海观安信息技术股份有限公司 | 一种基于智能终端识别的风控防护系统设计方法 |
| CN110427785B (zh) * | 2019-07-23 | 2023-07-14 | 腾讯科技(深圳)有限公司 | 设备指纹的获取方法和装置、存储介质及电子装置 |
| CN110941863A (zh) * | 2019-11-13 | 2020-03-31 | 中信百信银行股份有限公司 | 设备指纹生成方法、装置及终端 |
| CN112686767A (zh) * | 2020-12-31 | 2021-04-20 | 上海掌门科技有限公司 | 用户管理方法、设备以及存储介质 |
| CN114760270B (zh) * | 2021-05-12 | 2023-09-22 | 北京三江信达信息科技有限责任公司 | 一种生成用户设备指纹的方法及装置 |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140123255A1 (en) * | 2012-10-25 | 2014-05-01 | Uniloc Luxembourg, S.A. | System and method for device authentication with built-in tolerance |
| CN106104605A (zh) * | 2014-04-14 | 2016-11-09 | 万事达卡国际股份有限公司 | 用于在不带有安全元件的移动设备中生成高级存储密钥的方法及系统 |
| CN106254370A (zh) * | 2016-08-30 | 2016-12-21 | 成都源知信息技术有限公司 | 一种网络设备指纹生成方法及探测设备 |
Family Cites Families (19)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102377756B (zh) * | 2010-08-23 | 2014-11-05 | 中国移动通信有限公司 | 业务访问、鉴权方法及对应的系统、客户端、鉴权服务器 |
| CN102710770A (zh) * | 2012-06-01 | 2012-10-03 | 汪德嘉 | 一种上网设备识别方法及其实现系统 |
| US9106693B2 (en) * | 2013-03-15 | 2015-08-11 | Juniper Networks, Inc. | Attack detection and prevention using global device fingerprinting |
| CN104066203A (zh) * | 2014-06-20 | 2014-09-24 | 可牛网络技术(北京)有限公司 | 生成移动设备标识符的方法、系统以及远程控制移动设备的方法及通信终端 |
| CN104113435B (zh) * | 2014-07-04 | 2017-11-07 | 广州华多网络科技有限公司 | 生成标识的方法及装置 |
| CN105763521B (zh) * | 2014-12-18 | 2019-09-20 | 阿里巴巴集团控股有限公司 | 一种设备验证方法及装置 |
| CN105827676B (zh) * | 2015-01-04 | 2019-06-14 | 中国移动通信集团上海有限公司 | 一种用户画像信息获取系统、方法及装置 |
| CN105989079B (zh) * | 2015-02-11 | 2019-10-08 | 阿里巴巴集团控股有限公司 | 获取设备指纹的方法及装置 |
| CN104899518A (zh) * | 2015-03-12 | 2015-09-09 | 深圳市腾讯计算机系统有限公司 | 一种业务处理方法及装置 |
| CN104834674B (zh) * | 2015-03-31 | 2018-11-02 | 北京奇艺世纪科技有限公司 | 收集用户行为数据、信息推荐方法及装置 |
| CN107079026B (zh) * | 2015-04-28 | 2020-09-18 | 惠普发展公司,有限责任合伙企业 | 配对客户端应用实例与用户账户的方法、系统和存储介质 |
| CN104850662B (zh) * | 2015-06-08 | 2018-05-29 | 浙江每日互动网络科技股份有限公司 | 一种基于用户画像的移动终端智能消息推送方法、服务器和系统 |
| CN105228140B (zh) * | 2015-08-31 | 2018-10-30 | 华为技术有限公司 | 一种数据访问方法及装置 |
| CN106503015A (zh) * | 2015-09-07 | 2017-03-15 | 国家计算机网络与信息安全管理中心 | 一种构建用户画像的方法 |
| CN106612338A (zh) * | 2015-10-22 | 2017-05-03 | 阿里巴巴集团控股有限公司 | 设备标识信息的处理方法和装置 |
| CN105763565B (zh) * | 2016-04-18 | 2019-10-15 | 网易(杭州)网络有限公司 | 账户登录方法、装置及游戏系统 |
| CN106130993A (zh) * | 2016-06-30 | 2016-11-16 | 联想(北京)有限公司 | 一种信息处理的方法及电子设备 |
| CN106331891B (zh) * | 2016-08-17 | 2018-12-11 | 腾讯科技(深圳)有限公司 | 一种信息交互方法及电子设备 |
| CN106327363A (zh) * | 2016-08-18 | 2017-01-11 | 徐峰 | 一种标识处理服务器、业务服务器及服务系统 |
-
2017
- 2017-05-04 CN CN201710309136.4A patent/CN108804908B/zh active Active
-
2018
- 2018-04-26 WO PCT/CN2018/084640 patent/WO2018201965A1/zh not_active Ceased
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140123255A1 (en) * | 2012-10-25 | 2014-05-01 | Uniloc Luxembourg, S.A. | System and method for device authentication with built-in tolerance |
| CN106104605A (zh) * | 2014-04-14 | 2016-11-09 | 万事达卡国际股份有限公司 | 用于在不带有安全元件的移动设备中生成高级存储密钥的方法及系统 |
| CN106254370A (zh) * | 2016-08-30 | 2016-12-21 | 成都源知信息技术有限公司 | 一种网络设备指纹生成方法及探测设备 |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112954666A (zh) * | 2019-11-26 | 2021-06-11 | 中兴通讯股份有限公司 | 一种用户画像方法、装置、设备和存储介质 |
| CN112883363A (zh) * | 2021-02-05 | 2021-06-01 | 上海识装信息科技有限公司 | 一种识别设备指纹碰撞的方法 |
| CN114640531A (zh) * | 2022-03-25 | 2022-06-17 | 北京奇艺世纪科技有限公司 | 设备指纹生成方法、装置、电子设备及存储介质 |
| CN114640531B (zh) * | 2022-03-25 | 2024-03-15 | 北京奇艺世纪科技有限公司 | 设备指纹生成方法、装置、电子设备及存储介质 |
| CN117675755A (zh) * | 2024-01-31 | 2024-03-08 | 浙江省电子信息产品检验研究院(浙江省信息化和工业化融合促进中心) | 智能网联设备管理方法与装置 |
| CN117675755B (zh) * | 2024-01-31 | 2024-04-19 | 浙江省电子信息产品检验研究院(浙江省信息化和工业化融合促进中心) | 智能网联设备管理方法与装置 |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108804908A (zh) | 2018-11-13 |
| CN108804908B (zh) | 2023-05-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2018201965A1 (zh) | 设备指纹生成方法、装置及计算设备 | |
| CN109067541B (zh) | 基于区块链的数据验证方法及装置、电子设备 | |
| US9385983B1 (en) | Gallery of messages from individuals with a shared interest | |
| US20200105304A1 (en) | Routing messages by message parameter | |
| CN107798514A (zh) | 基于信用实现理赔的方法和装置 | |
| US20120311032A1 (en) | Emotion-based user identification for online experiences | |
| CN105389488B (zh) | 身份认证方法及装置 | |
| TWI842890B (zh) | 訊息交互方法、系統、裝置、電子設備及電腦可讀儲存媒體 | |
| CN110033170A (zh) | 识别风险商家的方法及装置 | |
| CN111090615A (zh) | 混合资产的分析处理方法、装置、电子设备及存储介质 | |
| US11232182B2 (en) | Open data biometric identity validation | |
| US20230410222A1 (en) | Information processing apparatus, control method, and program | |
| CN112150252A (zh) | 基于信用的业务处理方法以及装置 | |
| CN108932646B (zh) | 基于运营商的用户标签验证方法、装置和电子设备 | |
| CN111611572B (zh) | 一种基于人脸认证的实名认证方法及装置 | |
| CN110008664A (zh) | 认证信息采集、开户方法、装置及电子设备 | |
| CN107346310B (zh) | 一种账号申诉处理方法及服务器 | |
| CN111126623A (zh) | 一种模型更新方法、装置及设备 | |
| CN109583910A (zh) | 一种商品授权鉴定方法、装置及设备 | |
| CN111047146A (zh) | 一种企业用户的风险识别方法、装置及设备 | |
| WO2020108152A1 (zh) | 身份数据的防误用方法及装置、电子设备 | |
| CN113496243B (zh) | 背景音乐获取方法及相关产品 | |
| CN113497807A (zh) | 检测用户登录风险的方法、装置及计算机可读存储介质 | |
| CN115906028A (zh) | 用户身份验证方法、装置和自助服务终端 | |
| TWI717832B (zh) | 基於區塊鏈的視訊協議簽訂方法及裝置、電子設備 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 18794727 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 18794727 Country of ref document: EP Kind code of ref document: A1 |