[go: up one dir, main page]

CN108540482A - Account number analysis system, method and device - Google Patents

Account number analysis system, method and device Download PDF

Info

Publication number
CN108540482A
CN108540482A CN201810360938.2A CN201810360938A CN108540482A CN 108540482 A CN108540482 A CN 108540482A CN 201810360938 A CN201810360938 A CN 201810360938A CN 108540482 A CN108540482 A CN 108540482A
Authority
CN
China
Prior art keywords
account number
client
account
information
public
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
CN201810360938.2A
Other languages
Chinese (zh)
Inventor
刘欣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shanghai Silver Competition Computer Science And Technology Co Ltd
Original Assignee
Shanghai Silver Competition Computer Science And Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Silver Competition Computer Science And Technology Co Ltd filed Critical Shanghai Silver Competition Computer Science And Technology Co Ltd
Priority to CN201810360938.2A priority Critical patent/CN108540482A/en
Publication of CN108540482A publication Critical patent/CN108540482A/en
Withdrawn legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/04Real-time or near real-time messaging, e.g. instant messaging [IM]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/16Threshold monitoring

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The disclosure discloses a kind of account number analysis system, method and device, belongs to big data field.The method includes:The various dimensions user information for the second account number that the second client is sent by instant communication server is received, the first client is logged in the first account number, and the second client is logged in the second account number;Account number analysis is carried out to the various dimensions user information of the second account number;When it is target type account number that analysis result, which is second account number, the analysis result is sent to first client.By the various dimensions user information for obtaining the second account number including burying the webpage URL of information, and by analyzing the various dimensions user information, obtain analysis result, to judge whether second account number is dangerous account number, it goes together account number, since the information for being analyzed is the various dimensions user information by burying an acquisition of information, rather than the second account number information shown in the second client, so the accuracy higher of analysis result.

Description

Account number analysis system, method and device
Technical field
This disclosure relates to big data field, more particularly to a kind of methods of risk assessment, apparatus and system.
Background technology
In many career fields, staff is linked up with its client using instant message applications.In general, work people Member can set up an instant messaging discussion group, and will be added in the instant messaging discussion group as the good friend of its client, by this Discussion group promotes product information to client.And the competition between going together is increasingly fierce, this is resulted in using malicious manner to colleague The phenomenon that being suppressed is emerged one after another, for example, in investment consultant field, investment consultant usually sets up one with its client and is used for ditch Logical instant messaging discussion group, and other investment consultants can by create it is small size in the way of the client that disguise oneself as the Instant Messenger is added Interrogate discussion group, and the words and deeds such as malice comment, calumny carried out to the investment consultant for creating discussion group, or privately with the instant messaging Client in discussion group contacts.
In the related technology, whether it is the risk assessment gone together for the good friend in instant message applications, work can only be passed through Personnel check good friend current information shown in instant message applications to judge, such as by hand:Whether there is row in the pet name Whether in the industry include the advertisement of directive property in noun, head portrait, whether be sent in the information of common platform include slandering to colleague Slander.
Since the information for displaying in instant message applications is editable information, i.e., it can not ensure the letter that good friend is shown Breath is real information, and the dimension of the information for displaying is less, and the history that can not obtain the instant message applications of good friend uses Record, thus it is this judge good friend whether be colleague risk assessment mode, the information of acquisition it is few and judgement accuracy it is low.
Invention content
A kind of account number analysis system of embodiment of the present disclosure offer, method and device, can solve to judge whether good friend is same Capable risk assessment mode, the information of acquisition is few and the low problem of accuracy that judges.The technical solution is as follows:
In a first aspect, providing a kind of account number analysis system, account analysis system includes:It is logged in the of the first account number One client, the second client for being logged in the second account number public's account server corresponding with public's account number is logged in:
First client sends the corresponding webpage of public's account number for passing through first account number to second account number URL, webpage URL include burying information;
Second client receives webpage URL for passing through second account number;
Second client, for burying information according to this in webpage URL, by instant communication server to the public affairs Many account servers send the various dimensions user information of second account number;
Public's account server carries out account number analysis for the various dimensions user information to second account number;Dividing It is second account number when being target type account number to analyse result, and the analysis result is sent to first client.
In an alternative embodiment, which includes:Second account number is in the instant messaging service History usage record in device;
Second client sends net for burying information according to this in webpage URL to the instant communication server Access to web page is asked;
Second client, for receive the instant communication server transmission authorization requests, the authorization requests be this i.e. When communication server sent to second client according to the web access requests;
Second client authorizes instruction, the mandate for being sent to the instant communication server according to the authorization requests Instruction is used to indicate the history usage record that the instant communication server sends second account number to public's account server.
In an alternative embodiment, which further includes:Terminal sets where second client Standby information;
Second client is additionally operable to disappear to the communication that instant communication server transmission target account number is public's account number Breath, the communication information include the facility information of terminal where second client, which is used for the public Account server forwards the communication information.
In an alternative embodiment, public's account server is additionally operable to the webpage URL hairs of public's account number Give first client.
In an alternative embodiment, public's account server, for believing the various dimensions user of second account number Breath is matched at least two feature policies, and at least two value-at-risks are obtained according to matching result;
Public's account server obtains risk total value at least two value-at-risk to be added;
Public's account server obtains second account number for the risk total value to be compared with predetermined threshold value Analysis result.
In an alternative embodiment, which includes:Second account number is in the instant messaging service History usage record in device;
This feature strategy includes at least one of following strategy:
Second account number hits the account number blacklist preserved in public's account server;
Second account number removes the history usage record in preset time;
The quantity of second account number associated preset kind account number in preset time is more than predetermined threshold value;
The number that second account number modifies to the information being shown in second client in preset time is more than Predetermined threshold value;
The number that second account number clicks webpage URL in preset time is more than predetermined threshold value.
In an alternative embodiment, the quantity of second account number associated preset kind account number in preset time is big In at least one of predetermined threshold value, including following strategy:
The quantity of second account number associated preset kind account number in preset time is more than predetermined threshold value.
In an alternative embodiment, this is shown in the information in second client, including:The use of second account number The head image information of name in an account book, the urban information of second account number, second account number;
The number that the information that second account number is shown in second client is changed in preset time is more than default At least one of threshold value, including following strategy:
The number that the user name of second account number is changed in preset time is more than predetermined threshold value;
The number that the urban information of second account number is changed in preset time is more than predetermined threshold value;
The number that the head image information of second account number is changed in preset time is more than predetermined threshold value;
In an alternative embodiment, which clicks the number of webpage URL more than pre- in preset time If at least one of threshold value, including following strategy:
In preset time, in the click record of webpage URL, the number that is recorded of second account number is more than predetermined threshold value.
In an alternative embodiment, which further includes:Terminal sets where second client Standby information;
This feature strategy further includes at least one of following strategy:
The facility information of terminal hits the attack equipment stored in public's account server where second client Information bank;
The information that second account number is shown in second client and the facility information acquired are inconsistent;
Second account number is logged in using the mode of camouflage identity;
The facility information of terminal occurs abnormal in acquisition process where second client;
The quantity for the different account numbers that second client logs in preset time is more than predetermined threshold value;
The number that the account number logged in terminal where second client clicks webpage URL in preset time is more than in advance If threshold value.
In an alternative embodiment, which includes:The IP address of terminal where second client;
The facility information of terminal hits the attack facility information in public's account server where second client Library, including:
The IP address of terminal hits the attack IP address library in public's account server where second client.
In an alternative embodiment, which includes:The IP address ownership of terminal where second client City;
The facility information of the information that second account number is shown in second client and the information acquired differs It causes, including:
Second account number is shown in the urban information in second client with the IP of terminal where second client It is inconsistent that location belongs to city.
In an alternative embodiment, which further includes:The device identification of terminal where second client;
Second account number is logged in using the mode of camouflage identity, including at least one of following strategy:
The device identification of terminal can not obtain where second client, and the IP address of terminal where second client The IP address of country where terminal where being not belonging to second client;
The IP of country where terminal where the IP address of terminal is not belonging to second client where second client Address;
The device identification of terminal where second client can not obtain;
The quantity for second account that the IP address of terminal where second client connects in preset time is more than pre- If threshold value;
The IP of country where terminal where the IP address of terminal is not belonging to second client where second client Address, and the format of the IP address of terminal meets the format of preset IP address type where second client;
The device identification no record in the database of terminal where second client, and second account number is in the database In have record.
In an alternative embodiment, which further includes:The equipment state of terminal where second client Information;
There is exception, including at least one of following strategy in acquisition process in the facility information of second account number:
It does not include the equipment mark of terminal where second client in the facility information of second account number acquired Know;
The status information of equipment in the facility information acquired shows that the equipment is in abnormality.
In an alternative embodiment, the account number logged in terminal where second client is clicked in preset time The number of webpage URL is more than at least one of predetermined threshold value, including following strategy:
In preset time, in the click record of webpage URL, the terminal iidentification of terminal is remembered where second client It records number and is more than predetermined threshold value, and the adjacent time interval recorded twice of the terminal iidentification is less than predetermined threshold value;
In preset time, in the click record of webpage URL, the IP address of terminal is recorded where second client Number is more than predetermined threshold value, and the adjacent time interval recorded twice of the IP address of the terminal is less than predetermined threshold value;
In preset time, in the click record of webpage URL, the terminal iidentification of terminal is remembered where second client It records number and is more than predetermined threshold value;
In preset time, in the click record of webpage URL, the IP address of terminal is recorded where second client Number is more than predetermined threshold value.
Second aspect provides a kind of account number analysis method, applied to the public's account server for being logged in public's account number In, this method includes:
Receive the various dimensions user information for the second account number that the second client is sent by instant communication server, the multidimensional Degree user information is sent after second client receives the webpage URL that the first client is sent, and webpage URL includes burying Point information, first client are logged in the first account number, which is logged in second account number;
Account number analysis is carried out to the various dimensions user information of second account number;
When it is target type account number that analysis result, which is second account number, the analysis result is sent to first client.
In an alternative embodiment, which includes:Second account number is in the instant messaging service History usage record in device;
The various dimensions user information for the second account number that the reception second client is sent by instant communication server, packet It includes:
Receive the history usage record of second account number of instant communication server transmission.
In an alternative embodiment, which further includes:Terminal sets where second client Standby information;
The various dimensions user information for the second account number that the reception second client is sent by instant communication server, also Including:
The communication information of instant communication server forwarding is received, which includes that second client place is whole The facility information at end.
In an alternative embodiment, which carries out account number analysis, packet It includes:
The various dimensions user information of second account number is matched at least two feature policies, is obtained according to matching result To at least two value-at-risks;
At least two value-at-risk is added, risk total value is obtained;
The risk total value is compared with predetermined threshold value, obtains the analysis result of second account number.
In an alternative embodiment, which includes:Second account number is in the instant messaging service History usage record in device;
This feature strategy includes at least one of following strategy:
Second account number hits the account number blacklist preserved in public's account server;
Second account number removes the history usage record in preset time;
The quantity of second account number associated preset kind account number in preset time is more than predetermined threshold value;
The number that second account number modifies to the information being shown in second client in preset time is more than Predetermined threshold value;
The number that second account number clicks webpage URL in preset time is more than predetermined threshold value.
In an alternative embodiment, the quantity of second account number associated preset kind account number in preset time is big In at least one of predetermined threshold value, including following strategy:
The quantity of second account number associated preset kind account number in preset time is more than predetermined threshold value.
In an alternative embodiment, this is shown in the information in second client, including:The use of second account number The head image information of name in an account book, the urban information of second account number, second account number;
The number that the information that second account number is shown in second client is changed in preset time is more than default At least one of threshold value, including following strategy:
The number that the user name of second account number is changed in preset time is more than predetermined threshold value;
The number that the urban information of second account number is changed in preset time is more than predetermined threshold value;
The number that the head image information of second account number is changed in preset time is more than predetermined threshold value;
In an alternative embodiment, which clicks the number of webpage URL more than pre- in preset time If at least one of threshold value, including following strategy:
In preset time, in the click record of webpage URL, the number that is recorded of second account number is more than predetermined threshold value.
In an alternative embodiment, which further includes:Terminal sets where second client Standby information;
This feature strategy further includes at least one of following strategy:
The facility information of terminal hits the attack equipment stored in public's account server where second client Information bank;
The information that second account number is shown in second client and the facility information acquired are inconsistent;
Second account number is logged in using the mode of camouflage identity;
The facility information of terminal occurs abnormal in acquisition process where second client;
The quantity for the different account numbers that second client logs in preset time is more than predetermined threshold value;
The number that the account number logged in terminal where second client clicks webpage URL in preset time is more than in advance If threshold value.
In an alternative embodiment, which includes:The IP address of terminal where second client;
The facility information of terminal hits the attack facility information in public's account server where second client Library, including:
The IP address of terminal hits the attack IP address library in public's account server where second client.
In an alternative embodiment, which includes:The IP address ownership of terminal where second client City;
The facility information of the information that second account number is shown in second client and the information acquired differs It causes, including:
Second account number is shown in the urban information in second client with the IP of terminal where second client It is inconsistent that location belongs to city.
In an alternative embodiment, which further includes:The device identification of terminal where second client;
Second account number is logged in using the mode of camouflage identity, including at least one of following strategy:
The device identification of terminal can not obtain where second client, and the IP address of terminal where second client The IP address of country where terminal where being not belonging to second client;
The IP of country where terminal where the IP address of terminal is not belonging to second client where second client Address;
The device identification of terminal where second client can not obtain;
The quantity for second account that the IP address of terminal where second client connects in preset time is more than pre- If threshold value;
The IP of country where terminal where the IP address of terminal is not belonging to second client where second client Address, and the format of the IP address of terminal meets the format of preset IP address type where second client;
The device identification no record in the database of terminal where second client, and second account number is in the database In have record.
In an alternative embodiment, which further includes:The equipment state of terminal where second client Information;
There is exception, including at least one of following strategy in acquisition process in the facility information of second account number:
It does not include the equipment mark of terminal where second client in the facility information of second account number acquired Know;
The status information of equipment in the facility information acquired shows that the equipment is in abnormality.
In an alternative embodiment, the account number logged in terminal where second client is clicked in preset time The number of webpage URL is more than at least one of predetermined threshold value, including following strategy:
In preset time, in the click record of webpage URL, the terminal iidentification of terminal is remembered where second client It records number and is more than predetermined threshold value, and the adjacent time interval recorded twice of the terminal iidentification is less than predetermined threshold value;
In preset time, in the click record of webpage URL, the IP address of terminal is recorded where second client Number is more than predetermined threshold value, and the adjacent time interval recorded twice of the IP address of the terminal is less than predetermined threshold value;
In preset time, in the click record of webpage URL, the terminal iidentification of terminal is remembered where second client It records number and is more than predetermined threshold value;
In preset time, in the click record of webpage URL, the IP address of terminal is recorded where second client Number is more than predetermined threshold value.
In an alternative embodiment, this method further includes:
The webpage URL of public's account number is sent to first client.
The third aspect, provides a kind of account number analytical equipment, which includes:
Receiving module, the various dimensions for receiving the second account number that the second client is sent by instant communication server are used Family information, the various dimensions user information are sent after second client receives the webpage URL that the first client is sent, should Webpage URL includes burying information, which is logged in the first account number, which is logged in second account number;
Analysis module carries out account number analysis for the various dimensions user information to second account number;
Sending module, for when it is target type account number that analysis result, which is second account number, being sent out to first client Give the analysis result.
In an alternative embodiment, which includes:Second account number is in the instant messaging service History usage record in device;
The receiving module is additionally operable to receive the history usage record of second account number of instant communication server transmission.
In an alternative embodiment, which further includes:Terminal sets where second client Standby information;
The receiving module is additionally operable to receive the communication information of instant communication server forwarding, which includes The facility information of terminal where second client.
In an alternative embodiment, the analysis module, including:
Matching unit, for the various dimensions user information of second account number to be matched at least two feature policies, At least two value-at-risks are obtained according to matching result;
Computing unit obtains risk total value at least two value-at-risk to be added;
Comparing unit obtains the analysis result of second account number for the risk total value to be compared with predetermined threshold value.
In an alternative embodiment, the sending module is additionally operable to the webpage URL of public's account number being sent to this First client.
Fourth aspect provides a kind of terminal, which includes processor and memory, is stored at least in the memory One instruction, at least one section of program, code set or instruction set, at least one instruction, at least one section of program, the code set or Instruction set is loaded by the processor and is executed any in second aspect and its optional embodiment such as above-mentioned the application to realize This account number analysis method.
5th aspect, provide a kind of computer readable storage medium, be stored in the storage medium at least one instruction, At least one section of program, code set or instruction set, this at least one instruction, this at least one section of program, the code set or instruction set by The processor is loaded and is executed to realize any account number being somebody's turn to do in second aspect and its optional embodiment such as above-mentioned the application Analysis method.
The technical scheme provided by this disclosed embodiment can include the following benefits:
Public's account server by obtaining the various dimensions user information of the second account number including burying the webpage URL of information, And by analyzing the various dimensions user information, analysis result is obtained, to judge whether second account number is dangerous account Number, that is, account number of going together, since the information for being analyzed is the various dimensions user information by burying an acquisition of information, rather than Second account number information shown in the second client, so the accuracy higher of analysis result.
It should be understood that above general description and following detailed description is merely exemplary, this can not be limited It is open.
Description of the drawings
The drawings herein are incorporated into the specification and forms part of this specification, and shows the implementation for meeting the disclosure Example, and consistent with the instructions for explaining the principles of this disclosure.
Fig. 1 is a kind of block diagram of account number analysis system shown according to an exemplary embodiment;
Fig. 2 is a kind of flow chart of account number analysis method shown according to an exemplary embodiment;
Fig. 3 is a kind of flow chart of the account number analysis method exemplified according to the implementation of another exemplary;
Fig. 4 is a kind of flow chart of the account number analysis method exemplified according to the implementation of another exemplary;
Fig. 5 is the corresponding table of a kind of feature policy shown according to an exemplary embodiment and value-at-risk;
Fig. 6 is a kind of block diagram of account number analytical equipment shown according to an exemplary embodiment;
Fig. 7 is the block diagram according to the structure of the terminal shown in an exemplary embodiment.
Specific implementation mode
Example embodiments are described in detail here, and the example is illustrated in the accompanying drawings.Following description is related to When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment Described in embodiment do not represent all implementations consistent with this disclosure.On the contrary, they be only with it is such as appended The example of the consistent device and method of some aspects be described in detail in claims, the disclosure.
Fig. 1 is a kind of block diagram of account number analysis system shown according to an exemplary embodiment, as shown in Figure 1, account Analysis system includes:Terminal 13 and public's account where terminal 11, communication network 12, the second client where first client Number server 14 further includes optionally in account analysis system:Instant communication server 15.
The first account number is logged in first client, which is used for objective to second by instant communication server 15 It includes the webpage URL for burying information that the second account number logged on the end of family, which is sent,.Optionally, which is and instant messaging 15 corresponding instant communication client of server.
Terminal 11 where first client is connected by communication network 12 with instant communication server 15, and passes through Instant Messenger Inquiry server 15 is communicated with terminal 13 where the second client, such as:Sent to the second client includes the net for burying information Page URL, optionally, terminal 11 where first client is also connected by communication network 12 with public's account server 14.
The communication network 12 can be cable network or wireless network.
The second account number is logged in second client, second account number according to the information of burying in webpage URL for passing through Instant communication server sends various dimensions user information to public's account server 14.Optionally, which is and is When 15 corresponding instant communication client of communication server.
Terminal 13 where second client is connected by communication network 12 with instant communication server 15, and passes through Instant Messenger Inquiry server 15 is communicated with public's account server 14.
Public's account server 14 is used to carry out account number analysis to the various dimensions user information received, and passes through communication network Network 12 sends analysis result to the first client and optionally preserves feature policy in public's account server, pass through this feature The various dimensions user information that the second account number of strategy pair is sent carries out account number analysis.
Optionally, which includes common server and Analysis server, wherein the common server Include the corresponding webpage URL of above-mentioned public's account number, which is used to receive the various dimensions user information of the second account number, and The various dimensions user information is sent to Analysis server, the Analysis server be used for the various dimensions user information that receives into Row account number is analyzed.
Instant communication server 15 is used to forward the webpage URL that the first client sends to the second client and to public affairs The second client multi-dimensional degree user information that many account servers are sent.Optionally, is preserved in instant communication server 15 The history usage record of two clients.
Fig. 2 is a kind of flow chart of account number analysis method shown according to an exemplary embodiment.As shown in Fig. 2, should Account number analysis method includes:
Step 201, the first client sends the corresponding webpage of public's account number by the first account number to instant communication server URL。
Optionally, the first client sends the corresponding webpage URL of public's account number by the first account number to the second account number, wherein The webpage URL that first account number is sent is carried out transfer by instant communication server, and is sent to the second account number.Optionally, the webpage URL includes burying information, this buries various dimensions user information of the information for obtaining the second account number.
Step 202, instant communication server sends the corresponding webpage URL of public's account number to the second client.
Optionally, which plays the role of message transfer between the first account number and the second account number.
Step 203, the second client receives webpage URL by the second account number.
Step 204, the second client is in webpage URL by burying information, by instant communication server to public's account Number server sends the various dimensions user information of the second account number.
It refers to that increased code buries a little in the Code Edit of webpage in advance that this, which buries information, and it includes a little public which, which buries, Many account servers need the various dimensions user information of the second account number obtained.
Optionally, which includes end where the history usage record and the second client of the second account number At least one of the facility information at end.
Step 205, the various dimensions user information of the second account number of public's account server pair carries out account number analysis.
Optionally, at least two feature policies are stored in public's account server, by least two feature policy, Account number analysis is carried out to the various dimensions user information of the second account number.
Step 206, when it is target type account number that analysis result, which is the second account number, analysis knot is sent to the first client Fruit.
Optionally, which can be any one in dangerous account number, common account number and secure account number. Schematically, public's account server is analyzed to obtain second account number to be dangerous account number, and analysis result is sent to the first client For second account number:Dangerous account number.
In conclusion various dimensions of public's account server by webpage URL the second account numbers of acquisition including burying information User information, and by analyzing the various dimensions user information, analysis result is obtained, to whether judge second account number For dangerous account number, that is, account number of going together, since the information for being analyzed is to be believed by burying the various dimensions user of an acquisition of information Breath, rather than the second account number information shown in the second client, so the accuracy higher of analysis result.
In an alternative embodiment, above-mentioned various dimensions user information includes:The history usage record of second account number with And second terminal where account number facility information, and the second client passes through instant messaging by the information of burying in webpage URL Server sends the various dimensions user information to public's account server.
Fig. 3 is a kind of flow chart of the account number analysis method exemplified according to the implementation of another exemplary.As shown in figure 3, Account analysis method includes:
Step 301, the first client sends the corresponding webpage of public account number by the first account number to instant communication server URL。
Optionally, the first client sends the corresponding webpage URL of public's account number by the first account number to the second account number, wherein The webpage URL that first account number is sent is carried out transfer by instant communication server, and is sent to the second account number.Optionally, the webpage URL includes burying information, this buries various dimensions user information of the information for obtaining the second account number.
Step 302, instant communication server sends the corresponding webpage URL of public's account number to the second client.
Optionally, which plays the role of message transfer between the first account number and the second account number.
Step 303, the second client receives webpage URL by the second account number.
Step 304, the second client sends web access requests to instant communication server.
Second client buries information according in webpage URL, and web access requests are sent to instant communication server, should Web access requests are used to ask to access the webpage URL that the second account number receives.Optionally, which includes institute What the banner and webpage URL of the webpage URL of request included buries information.
Step 305, instant communication server sends authorization requests to the second client.
Instant communication server sends authorization requests according to the web access requests received to the second client.The mandate Request is for asking the second client authorization that the various dimensions user information of the second account number is sent to public's account server.It is optional Ground, the authorization requests include the various dimensions user information that instant communication server request is sent to public's account server.
Optionally, which includes history usage record and the second client institute of the second account number In the facility information of terminal.
Step 306, the second client sends to instant communication server and authorizes instruction.
Second client sends to instant communication server according to the authorization requests received and authorizes instruction, mandate instruction It is used to indicate the various dimensions user information that instant communication server sends the second account number to public's account server.
Step 307, instant communication server sends the history usage record of the second account number to public's account server.
Optionally, various dimensions user information includes:The history usage record of second account number, then above-mentioned mandate instruction are used for Indicate that instant communication server sends the history usage record of the second account number to public's account server.Instant communication server connects After receiving mandate instruction, the history usage record of the second account number is sent to public's account server according to instruction is authorized.
Optionally, the history usage record of second account number includes:Second account number is associated default in preset time The quantity of type account number, the second account number change the number of user name in preset time, the second account number is changed in preset time The number of urban information, the second account number change the number of head portrait in preset time, the second account number clicks net in preset time At least one of the number of page URL.
Step 308, the second client sends communication information to instant communication server.
Optionally, further include in the various dimensions user information:The facility information of terminal, the second client where second account number The facility information of terminal where sending the second account number to public's account server according to authorization requests, i.e. the second client is to instant Communication server send communication information include:The facility information of terminal where second account number.Instant communication server is used for The communication information that the second client received is sent is forwarded to public's account server.
Optionally, the facility information of terminal where second account number includes:The IP address of terminal where second client, the Where the IP address ownership city of terminal where two clients, the device identification of the second client place terminal, the second client At least one of status information of equipment of terminal.
It is worth noting that, the execution sequence of above-mentioned steps 307 and above-mentioned steps 308 can also be to first carry out step 308, Step 307 is executed again, and the embodiment of the present application is not limited this.
Step 309, instant communication server forwards the communication information that the second client is sent to public's account server.
Optionally, which plays message transfer between the second client and public's account server Effect.
Step 310, the various dimensions user information of the second account number of public's account server pair carries out account number analysis.
Optionally, at least two feature policies are stored in public's account server, by least two feature policy, The facility information of terminal carries out account number analysis where history usage record and the second account number to the second account number.
Optionally, it after being matched with the various dimensions user information of the second account number by least two feature policies, obtains At least two value-at-risk is added to obtain risk total value, and is always worth to analysis according to risk by least two value-at-risks As a result.
Schematically, which includes at least two in following strategy:
1, the account number blacklist preserved in the second account number hit public's account server;
Optionally, account number blacklist has been pre-saved in public's account server, the account number in account blacklist can be with It is to be recorded the account number for meeting preset kind, schematically, the account number stored in account number blacklist is to be identified as " danger The account number of account number ".
2, the second account number removes history usage record in preset time;
Schematically, which preserves usage record, but public's account server in public's account server The history usage record of the second account number acquired is sky, alternatively, the second account number that public's account server acquires The earliest moment of history usage record and the duration obtained between the moment are less than predetermined threshold value.It can due to removing history usage record Can be used so removing history for the reason of cover up in history usage record the content for the account number type for showing the second account number Record increases the value-at-risk of second account number.
3, the quantity of the second account number associated preset kind account number in preset time is more than predetermined threshold value;
Optionally, which is the stored account number for meeting the preset kind in public's account server, When the quantity of the second account number associated preset kind account number in preset time is more than predetermined threshold value, second account number tool Risky possibility accordingly improves.Optionally, which can be one day, seven days, the times such as one month, and the application is real Example is applied to be not limited this.Schematically, which is " investment consultant's account number ", and the second account number is in preset time It is interior to be associated with multiple investment consultant's account numbers, i.e. the second account number and multiple investment consultants in preset time in the second client at For good friend, it is the value-at-risk of " investment consultant's account number " to increase second account number also.
4, the second account number is more than the number that the information being shown in the second client is modified in preset time pre- If threshold value;
Optionally, the information which is shown in the second client may include:The user name of second account number, At least one of the head image information of the urban information of second account number, second account number, second account number is in preset time Second account number, which is deliberately covered up in the second client originally, to be indicated more than predetermined threshold value to the number that above- mentioned information is modified The possibility of information increases, i.e. the value-at-risk of second account also increases.
5, the number of the second account number webpage clicking URL in preset time is more than predetermined threshold value;
Optionally, history usage record includes the number of the second account number webpage clicking URL in preset time, the second account The number of webpage clicking URL indicates that second account number frequently accesses webpage URL more than predetermined threshold value number in preset time, increases The value-at-risk of second account number is added.
In an alternative embodiment, further include the equipment letter of terminal where the second account number in the various dimensions user information It ceases, in above-mentioned at least two feature policy, further includes:
6, the attack equipment letter stored in facility information hit public's account server of terminal where the second client Cease library;
Optionally, attack facility information library has been pre-saved in public's account server, the attack facility information library The facility information of middle storage can be recorded the facility information for meeting attack equipment, schematically, attack equipment The facility information for being registered as " attack equipment " is stored in information bank, the facility information life of terminal where the second client In " attack equipment " in the attack facility information library when, then increase the value-at-risk of second account number.
7, the facility information that the information that the second account number is shown in the second client is acquired with public's account server It is inconsistent;
Optionally, when the information that the second account number is shown in the second client is set with what public's account server acquired When standby information is inconsistent, indicate that the second account number has the possibility that the good friend into the second client covers up information, increase this The value-at-risk of two account numbers.Schematically, the location message which is shown in the second client takes with public's account number The equipment location message that business device acquires is inconsistent.
8, the second account number is logged in using the mode of camouflage identity;
Second account number, which using the mode of camouflage identity log in, indicates that true identity is covered up in second account number presence May, that is, increase the value-at-risk of second account number.
9, the facility information of terminal where the second client occurs abnormal in acquisition process;
Occurring abnormal situation in above-mentioned acquisition process may include:Obtain failure, get should be in the first field Presentation of information the second field, get should be first category presentation of information second category information, get Terminal exists at least one of abnormal where the second client of presentation of information.
10, the quantity for the different account numbers that the second client logs in preset time is more than predetermined threshold value;
Above-mentioned difference account number can be understood as the different account numbers in addition to the first account number.
11, the number of the account number webpage clicking URL in preset time logged in terminal where the second client is more than pre- If threshold value
Optionally, in the number of the account number logged in terminal where the second client webpage clicking URL in preset time More than predetermined threshold value, indicates that multiple account access webpage URL are used for multiple times using the user of the terminal where the second client, increase The value-at-risk of the terminal is added.
Step 311, when it is target type account number that analysis result, which is the second account number, analysis knot is sent to the first client Fruit.
Optionally, which can be any one in dangerous account number, common account number and secure account number. Schematically, public's account server is analyzed to obtain second account number to be dangerous account number, and analysis result is sent to the first client For second account number:Dangerous account number.
In conclusion various dimensions of public's account server by webpage URL the second account numbers of acquisition including burying information User information, and by analyzing the various dimensions user information, analysis result is obtained, to whether judge second account number For dangerous account number, that is, account number of going together, since the information for being analyzed is to be believed by burying the various dimensions user of an acquisition of information Breath, rather than the second account number information shown in the second client, so the accuracy higher of analysis result;
Since various dimensions user information includes terminal where the history usage record and the second account number of the second account number Facility information, since the dimension of user information is larger, including information that the second account number can not be shown in the second client, to upper It states information to be analyzed, further improves the accuracy of analysis result.
In an alternative embodiment, public's account server includes common server and Analysis server, wherein At least two feature policies are preserved in Analysis server, various dimensions user information at least two feature policy by carrying out Matching obtains analysis result.
Fig. 4 is a kind of flow chart of the account number analysis method exemplified according to the implementation of another exemplary.As shown in figure 4, Account analysis method includes:
Step 401, the corresponding webpage URL of public's account number is sent to the first client by common server.
Optionally, the corresponding webpage URL of public's account number is stored in the common server, webpage URL includes burying a little Information, this buries various dimensions user information of the information for obtaining the second account number.
Step 402, the first client receives the corresponding webpage URL of public's account number.
Step 403, the first client sends the corresponding webpage of public's account number by the first account number to instant communication server URL。
Optionally, the first client sends the corresponding webpage URL of public's account number by the first account number to the second account number, wherein The webpage URL that first account number is sent is carried out transfer by instant communication server, and is sent to the second account number.
Step 404, instant communication server sends the corresponding webpage URL of public's account number to the second client.
Optionally, which plays the role of message transfer between the first account number and the second account number.
Step 405, the second client receives webpage URL by the second account number.
Step 406, the second client sends web access requests to instant communication server.
Second client buries information according in webpage URL, and web access requests are sent to instant communication server, should Web access requests are used to ask to access the webpage URL that the second account number receives.Optionally, which includes institute What the banner and webpage URL of the webpage URL of request included buries information.
Step 407, instant communication server sends authorization requests to the second client.
Instant communication server sends authorization requests according to the web access requests received to the second client.The mandate Request is for asking the second client authorization that the various dimensions user information of the second account number is sent to public's account server.It is optional Ground, the authorization requests include the various dimensions user information that instant communication server request is sent to public's account server.
Optionally, which includes history usage record and the second client institute of the second account number In the facility information of terminal.
Step 408, the second client sends to instant communication server and authorizes instruction.
Second client sends to instant communication server according to the authorization requests received and authorizes instruction, mandate instruction It is used to indicate the various dimensions user information that instant communication server sends the second account number to public's account server.
Step 409, instant communication server sends the history usage record of the second account number to public's account server.
Optionally, which includes common server and Analysis server, instant communication server The history usage record of second account number is sent to common server.Optionally, various dimensions user information includes:Second account number History usage record, then above-mentioned mandate instruction is used to indicate instant communication server and sends the second account to public's account server Number history usage record.After instant communication server receives mandate instruction, indicated the history of the second account number according to authorizing Usage record is sent to common server.
Optionally, the history usage record of second account number includes:Second account number is associated default in preset time The quantity of type account number, the second account number change the number of user name in preset time, the second account number is changed in preset time The number of urban information, the second account number change the number of head portrait in preset time, the second account number clicks net in preset time At least one of the number of page URL.
Step 410, the second client sends communication information to instant communication server.
Optionally, further include in the various dimensions user information:The facility information of terminal, the second client where second account number The facility information of terminal where sending the second account number to public's account server according to authorization requests, i.e. the second client is to instant Communication server send communication information include:The facility information of terminal where second account number.Instant communication server is used for The communication information that the second client received is sent is forwarded to public's account server.
Optionally, the facility information of terminal where second account number includes:The IP address of terminal where second client, the Where the IP address ownership city of terminal where two clients, the device identification of the second client place terminal, the second client At least one of status information of equipment of terminal.
Step 411, instant communication server forwards the communication information that the second client is sent to public's account server.
Optionally, instant communication server forwards the communication information that second client is sent to common server.It is optional Ground, the instant communication server play the role of message transfer between the second client and common server.
Step 412, common server sends history usage record to Analysis server.
Optionally, public's account server includes common server and Analysis server, and common server will receive To the history usage record of the second account number be sent to Analysis server.
Step 413, common server sends communication information to Analysis server.
Optionally, the communication information received is sent to Analysis server by common server, which includes The facility information of terminal where second client.
Step 414, public's account server by the various dimensions user information of the second account number and at least two feature policies into Row matching, at least two value-at-risks are obtained according to matching result.
Optionally, Analysis server carries out the various dimensions user information of the second account number and at least two feature policies Match, and at least two value-at-risks are obtained according to matching result.Optionally, at least two feature plans are stored in Analysis server Slightly, by least two feature policy, the equipment of terminal where the history usage record and the second account number to the second account number Information carries out account number analysis.
Second account number includes:Second account number first identifier corresponding with public's account number and the second account number and public's account number Corresponding second identifier, optionally, above-mentioned public's account number are corresponding with the service provider where public's account number, which provides Quotient provides multiple and different public's account numbers, including first identifier public's account number corresponding with second identifier, wherein second Mark is corresponding with the service provider, i.e., the second identifier is corresponding with multiple and different public's account numbers.
Information in second client includes:The corresponding user name of first identifier of second account number, the second of the second account number Identify corresponding user name, the corresponding urban information of first identifier of the second account number, the second account number the corresponding city of second identifier The corresponding head image information of second identifier of city's information, the corresponding head image information of first identifier of the second account number and the second account number.
Schematically, which includes at least two in following strategy:
1, the quantity of the first identifier of the second account number associated preset kind account number in preset time is more than predetermined threshold value;
Optionally, which is the stored account number for meeting the preset kind in public's account server, When the quantity of the first identifier of the second account number associated preset kind account number in preset time is more than predetermined threshold value, indicating should It is higher that second account number has risky possibility.Optionally, which can be one day, seven days, the times such as one month, sheet Application embodiment is not limited this.Schematically, which is " investment consultant's account number ", the of the second account number One mark is associated in preset time with multiple investment consultant's account numbers, i.e. second account number and multiple investment consultants is in preset time Become good friend in inherent second client, it is the value-at-risk of " investment consultant's account number " to increase second account number also.
2, the quantity of the second identifier of the second account number associated preset kind account number in preset time is more than predetermined threshold value;
Optionally, which is the stored account number for meeting the preset kind in public's account server, When the quantity of the second identifier of the second account number associated preset kind account number in preset time is more than predetermined threshold value, indicating should It is higher that second account number has risky possibility.Optionally, which can be one day, seven days, the times such as one month, sheet Application embodiment is not limited this.Schematically, which is " investment consultant's account number ", the of the second account number Two marks are associated in preset time with multiple investment consultant's account numbers, i.e. second account number and multiple investment consultants is in preset time Become good friend in inherent second client, it is the value-at-risk of " investment consultant's account number " to increase second account number also.
3, the number that the corresponding user name of the first identifier of the second account number is changed in preset time is more than predetermined threshold value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding user name of first identifier of second account number is changed in preset time more than predetermined threshold value illustrate this second Account number exists in preset time using multiple user names to cover up the risk of identity, increases the value-at-risk of second account number.
4, the number that the corresponding user name of the second identifier of the second account number is changed in preset time is more than predetermined threshold value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding user name of second identifier of second account number is changed in preset time more than predetermined threshold value illustrate this second Account number exists in preset time using multiple user names to cover up the risk of identity, increases the value-at-risk of second account number.
5, the number that the corresponding urban information of the first identifier of the second account number is changed in preset time is more than default threshold Value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding urban information of first identifier of second account number is changed in preset time more than predetermined threshold value illustrate this Two account numbers exist in preset time using multiple urban informations to cover up the risk of identity, increase the risk of second account number Value.
6, the number that the corresponding urban information of the second identifier of the second account number is changed in preset time is more than default threshold Value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding urban information of second identifier of second account number is changed in preset time more than predetermined threshold value illustrate this Two account numbers exist in preset time using multiple urban informations to cover up the risk of identity, increase the risk of second account number Value.
7, the number that the corresponding head image information of the first identifier of the second account number is changed in preset time is more than default threshold Value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding head image information of first identifier of second account number is changed in preset time more than predetermined threshold value illustrate this Two account numbers exist in preset time using multiple head portraits to cover up the risk of identity, increase the value-at-risk of second account number.
8, the number that the corresponding head image information of the second identifier of the second account number is changed in preset time is more than default threshold Value;
Optionally, which can be one day, seven days, one month, and the embodiment of the present application is not limited this.It should The number that the corresponding head image information of second identifier of second account number is changed in preset time more than predetermined threshold value illustrate this Two account numbers exist in preset time using multiple head portraits to cover up the risk of identity, increase the value-at-risk of second account number.
9, in preset time, in the click record of webpage URL, the number that is recorded of the first identifier of the second account number is more than in advance If threshold value;
In preset time, the number that the first identifier of second account number is recorded indicates second account number more than predetermined threshold value Webpage URL is frequently accessed, the value-at-risk of second account number is increased.
10, in preset time, in the click record of webpage URL, the number that is recorded of the second identifier of the second account number is more than Predetermined threshold value;
In preset time, the number that the second identifier of second account number is recorded indicates second account number more than predetermined threshold value Webpage URL is frequently accessed, the value-at-risk of second account number is increased.
In an alternative embodiment, the facility information of terminal where the second client includes:Second client institute In the equipment mark of terminal where the IP address ownership city of terminal where the IP address, the second client of terminal, the second client Know, at least one of the status information of equipment of terminal where the second client.
At least two feature policy further includes:
11, IP address hit public's account number of terminal where the second client services attack IP address library therein;
Optionally, attack IP address library has been pre-saved in public's account server, in the aggressiveness IP address library The IP address of storage is to be recorded the IP address for meeting attack type, schematically, the IP of terminal where the second client When the address hit attack IP address library, the value-at-risk of second account number is increased.
12, the urban information that the second account number is shown in the second client and the IP address of terminal where the second client are returned It is inconsistent to belong to city;
Optionally, the urban information which is shown in the second client can be the first mark of second account number Know corresponding urban information, can also be the corresponding urban information of second identifier of second account number.Schematically, second account The urban information number being shown in the second client is " Nanjing ", and the IP address of terminal where second client belongs to city For " Beijing ", then it is assumed that the value-at-risk of second account number accordingly increases.
13, the device identification of terminal where the second client can not obtain, and the IP address of terminal where the second client The IP address of country where terminal where being not belonging to the second client;
Optionally, the IP of the IP address of terminal where the second client and the country where terminal where second client Mail returned on ground of incorrect address, schematically, terminal obtains nonterminal the country one belongs to using IP address agent software where second client IP address, schematically, the country where second client where terminal are x states, and terminal uses where second client VPN (Virtual Private Network, Virtual Private Network) obtains the IP address of m states, and uses the IP address of the m states The device identification of the terminal is not included in the facility information for the second client for being communicated, and being acquired, then it is assumed that this The value-at-risk of two account numbers accordingly increases.
The IP of terminal the country one belongs to where 14, the IP address of terminal where the second client is not belonging to the second client Location;
15, the device identification of terminal where the second client can not obtain;
16, the quantity of IP address associated first identifier in preset time of terminal where the second client is more than default Threshold value;
Optionally, which is the first identifier of other account numbers in addition to the first account number, and the IP address of the terminal is pre- If the quantity of associated first identifier is more than predetermined threshold value in the time, the account number logged in second client and multiple accounts are indicated Become good friend number in the second client, increases the value-at-risk of second account number.
17, the quantity of IP address associated second identifier in preset time of terminal where the second client is more than default Threshold value;
Optionally, which is the second identifier of other account numbers in addition to the first account number, and the IP address of the terminal is pre- If the quantity of associated second identifier is more than predetermined threshold value in the time, the account number logged in second client and multiple accounts are indicated Become good friend number in the second client, increases the value-at-risk of second account number.
18, the quantity of device identification associated first identifier in preset time of terminal where the second client is more than pre- If threshold value;
Optionally, which is the first identifier of other account numbers in addition to the first account number, and the device identification of the terminal exists In preset time the quantity of associated first identifier be more than predetermined threshold value, indicate the account number logged in second client with it is multiple Account number becomes good friend in the second client, increases the value-at-risk of second account number.
19, the quantity of device identification associated second identifier in preset time of terminal where the second client is more than pre- If threshold value;
Optionally, which is the second identifier of other account numbers in addition to the first account number, and the device identification of the terminal exists In preset time the quantity of associated second identifier be more than predetermined threshold value, indicate the account number logged in second client with it is multiple Account number becomes good friend in the second client, increases the value-at-risk of second account number.
The IP of country where terminal where 20, the IP address of terminal where the second client is not belonging to the second client Location, and the format of the IP address of terminal meets the format of preset IP address type where the second client;
Optionally, which is the address format for meeting " computer room IP address ", then recognizes Value-at-risk for second account number accordingly increases.
21, the device identification no record in the database of terminal where the second client, and the first identifier of the second account number There is record in the database;
Optionally, which can be the database in public's account server, be included at least in the database: Accessed the corresponding device identification of account number of public's account number, the first identifier for the account number for accessing public's account number or the second mark The information such as knowledge.No record indicates the second client in the terminal in the database for the device identification of terminal where second client The account number of upper login has not visited webpage URL, and the first identifier of the second account number has record to indicate second account in the database Number webpage URL was accessed using other-end, and increased the value-at-risk of second account number.
22, the facility information for the second account number that public's account server acquires includes terminal where the second client Device identification, but position of the device identification in facility information of terminal where second client is different from predeterminated position;
Optionally, the facility information for the second account number that public's account server acquires includes multiple fields, each The information related with terminal where second client of field references one, wherein further include the terminal in the facility information Device identification, schematically, predeterminated position of the device identification in facility information are 65-128 fields, and what is acquired sets Physical location of the standby mark in facility information is 1-64 fields, then it is assumed that the value-at-risk of second account number accordingly increases.
23, the status information of equipment in the facility information that public's account server acquires shows that equipment is in abnormal shape State;
Schematically, the status information of equipment in the facility information that public's account server acquires includes virus letter Breath, then it is assumed that the terminal where second client increases the value-at-risk of second account number by virus attack.
24, in preset time, in the click record of webpage URL, the terminal iidentification of terminal is recorded where the second client Number is more than predetermined threshold value, and the adjacent time interval recorded twice of terminal iidentification is less than predetermined threshold value;
In preset time, number that the terminal iidentification of the terminal is recorded is more than what predetermined threshold value indicated to log in the terminal Account number frequently accesses webpage URL, and the adjacent time interval accessed twice is shorter, increases the value-at-risk of second account number.
25, in preset time, in the click record of webpage URL, the IP address of terminal is recorded secondary where the second client Number is more than predetermined threshold value, and the adjacent time interval recorded twice of IP address is less than predetermined threshold value;
In preset time, the number that the IP address of the terminal is recorded indicates the account logged in the terminal more than predetermined threshold value Number webpage URL is frequently accessed, and the adjacent time interval accessed twice is shorter, increases the value-at-risk of second account number.
26, in preset time, in the click record of webpage URL, the terminal iidentification of terminal is remembered where the second client It records number and is more than predetermined threshold value;
27, in preset time, in the click record of webpage URL, the IP address of terminal is recorded where the second client Number is more than predetermined threshold value.
Optionally, Analysis server passes through the progress of the various dimensions user information of at least two feature policies and the second account number After matching, at least two value-at-risks are obtained.
It is worth noting that, the corresponding value-at-risk of different feature policies is to can be different, different characteristic strategy Value-at-risk determines by the corresponding risk of this feature strategy, schematically, corresponding diagram such as Fig. 5 of different characteristic strategy and value-at-risk It is shown.As shown in figure 5, for the higher feature policy of risk, corresponding value-at-risk is also higher, and corresponding table shown in fig. 5 is only For illustrating, in practical operation, different feature policies and the corresponding situation of value-at-risk are by designer according to actual conditions It is designed, the embodiment of the present application is not limited this.
Step 415, at least two value-at-risks are added by public's account server, obtain risk total value.
Optionally, which is added by the Analysis server in public's account server, and obtains wind Dangerous total value.Schematically, with reference to figure 5, the first identifier of the matched big second account number associated preset kind in preset time The quantity of account number is more than predetermined threshold value, and in preset time, in the click record of webpage URL, the first identifier of the second account number The number being recorded is more than predetermined threshold value, then is added the value-at-risk of this two feature policies, and it is 2+4 to obtain risk total value =6.
Step 416, risk total value is compared by public's account server with predetermined threshold value, obtains the analysis of the second account number As a result.
Optionally, risk total value is compared by the Analysis server in public's account server with predetermined threshold value, and Obtain the analysis result of second account.The analysis result includes:The account number type of second account number, schematically, second account Number analysis result can be:Second account number is dangerous account number.
Schematically, account number type can be any one in dangerous account number, common account number and secure account number.0-3 It is divided into secure account number, 4-6 points are common account number, and 7 points or more are dangerous account number.With reference to the risk total value obtained in step 415 6, then second account number is common account number.It is worth noting that, there are a kind of value-at-risk of feature policy is higher, directly reach Value-at-risk grade corresponding to dangerous account number, then the account number for meeting this feature strategy can directly be considered dangerous account number.
Step 417, Analysis server is to common server feedback analysis result.
Step 418, when it is target type account number that analysis result, which is the second account number, public's account server is to the first client End sends analysis result.
Optionally, which can be any one in dangerous account number, common account number and secure account number. Schematically, public's account server is analyzed to obtain second account number to be dangerous account number, and analysis result is sent to the first client For second account number:Dangerous account number.
In conclusion various dimensions of public's account server by webpage URL the second account numbers of acquisition including burying information User information, and by analyzing the various dimensions user information, analysis result is obtained, to whether judge second account number For dangerous account number, that is, account number of going together, since the information for being analyzed is to be believed by burying the various dimensions user of an acquisition of information Breath, rather than the second account number information shown in the second client, so the accuracy higher of analysis result;
Since various dimensions user information includes terminal where the history usage record and the second account number of the second account number Facility information, since the dimension of user information is larger, including information that the second account number can not be shown in the second client, to upper It states information to be analyzed, further improves the accuracy of analysis result;
It is matched at least two feature policies according to various dimensions user information, obtains at least two value-at-risks, and will At least two value-at-risks are added, and then are analyzed the second account number, due to the risk corresponding to different feature policies Degree is different, so the corresponding value-at-risk of different feature policies is also different, according to the different by different feature policies of risk Different value-at-risks is assigned, the accuracy of analysis result is further improved.
Fig. 6 is a kind of block diagram of account number analytical equipment shown according to an exemplary embodiment, as shown in fig. 6, account Analytical equipment includes receiving module 601, analysis module 602 and sending module 603, wherein receiving module 601, for connecing Receive the various dimensions user information for the second account number that the second client is sent by instant communication server, the various dimensions user letter Breath is sent after second client receives the webpage URL that the first client is sent, and the webpage URL includes burying a letter Breath, first client are logged in the first account number, and second client is logged in second account number;
Analysis module 602 carries out account number analysis for the various dimensions user information to second account number;
Sending module 603, for analysis result be second account number be target type account number when, to it is described first visitor Family end sends the analysis result.
In an alternative embodiment, the various dimensions user information includes:Second account number is in the Instant Messenger History usage record in inquiry server;
The receiving module 601 is additionally operable to receive the history for second account number that the instant communication server is sent Usage record.
In an alternative embodiment, the various dimensions user information further includes:Terminal where second client Facility information;
The receiving module 601 is additionally operable to receive the communication information of the instant communication server forwarding, the communication Message includes the facility information of terminal where second client.
In an alternative embodiment, the analysis module 602, including:
Matching unit is used for the various dimensions user information of second account number and at least two feature policies progress Match, at least two value-at-risks are obtained according to matching result;
Computing unit obtains risk total value at least two value-at-risk to be added;
Comparing unit obtains the analysis of second account number for the risk total value to be compared with predetermined threshold value As a result.
In an alternative embodiment, the sending module 603 is additionally operable to the webpage of public's account number URL is sent to first client.
The block diagram of the structure for the terminal that Fig. 7 is provided it illustrates the application one embodiment, the terminal may include radio frequency (RF, Radio Frequency) circuit 701, include one or more computer readable storage mediums memory 702, input unit 703, display unit 704, sensor 705, voicefrequency circuit 706, Wireless Fidelity (WiFi, Wireless Fidelity) module 707, include there are one or more than one processing core processor 708 and the components such as power supply 709. It will be understood by those skilled in the art that the restriction of the not structure paired terminal of terminal structure shown in Fig. 7, may include than diagram More or fewer components either combine certain components or different components arrangement.Wherein:
RF circuits 701 can be used for receiving and sending messages or communication process in, signal sends and receivees, particularly, by base station After downlink information receives, one or the processing of more than one processor 708 are transferred to;In addition, the data for being related to uplink are sent to Base station.In general, RF circuits 701 include but not limited to antenna, at least one amplifier, tuner, one or more oscillators, use Family identity module (SIM, Subscriber Identity Module) card, transceiver, coupler, low-noise amplifier (LNA, Low Noise Amplifier), duplexer etc..In addition, RF circuits 701 can also by radio communication with network and its He communicates equipment.The wireless communication can use any communication standard or agreement, including but not limited to global system for mobile telecommunications system Unite (GSM, Global System of Mobile communication), general packet radio service (GPRS, General Packet Radio Service), CDMA (CDMA, Code Division Multiple Access), wideband code division it is more Location (WCDMA, Wideband Code Division Multiple Access), long term evolution (LTE, Long Term Evolution), Email, short message service (SMS, Short Messaging Service) etc..
Memory 702 can be used for storing software program and module, and processor 708 is stored in memory 702 by operation Software program and module, to perform various functions application and data processing.Memory 702 can include mainly storage journey Sequence area and storage data field, wherein storing program area can storage program area, the application program (ratio needed at least one function Such as sound-playing function, image player function) etc.;Storage data field can be stored uses created data according to terminal (such as audio data, phone directory etc.) etc..In addition, memory 702 may include high-speed random access memory, can also include Nonvolatile memory, for example, at least a disk memory, flush memory device or other volatile solid-state parts.Phase Ying Di, memory 702 can also include Memory Controller, to provide processor 708 and input unit 703 to memory 702 Access.
Input unit 703 can be used for receiving the number or character information of input, and generate and user setting and function Control related keyboard, mouse, operating lever, optics or the input of trace ball signal.Specifically, in a specific embodiment In, input unit 703 may include touch sensitive surface and other input equipments.Touch sensitive surface, also referred to as touch display screen or tactile Control plate, collect user on it or neighbouring touch operation (such as user using any suitable object such as finger, stylus or Operation of the attachment on touch sensitive surface or near touch sensitive surface), and corresponding connection dress is driven according to preset formula It sets.Optionally, touch sensitive surface may include both touch detecting apparatus and touch controller.Wherein, touch detecting apparatus is examined The touch orientation of user is surveyed, and detects the signal that touch operation is brought, transmits a signal to touch controller;Touch controller from Touch information is received on touch detecting apparatus, and is converted into contact coordinate, then gives processor 708, and can reception processing Order that device 708 is sent simultaneously is executed.Furthermore, it is possible to a variety of using resistance-type, condenser type, infrared ray and surface acoustic wave etc. Type realizes touch sensitive surface.In addition to touch sensitive surface, input unit 703 can also include other input equipments.Specifically, other are defeated Enter equipment and can include but is not limited to physical keyboard, function key (such as volume control button, switch key etc.), trace ball, mouse It is one or more in mark, operating lever etc..
Display unit 704 can be used for showing information input by user or be supplied to user information and terminal it is various Graphical user interface, these graphical user interface can be made of figure, text, icon, video and its arbitrary combination.Display Unit 704 may include display panel, it is alternatively possible to using liquid crystal display (LCD, Liquid Crystal Display), The forms such as Organic Light Emitting Diode (OLED, Organic Light-Emitting Diode) configure display panel.Further , touch sensitive surface can cover display panel, when touch sensitive surface detects on it or after neighbouring touch operation, send processing to Device 708 is followed by subsequent processing device 708 and is provided on a display panel accordingly according to the type of touch event to determine the type of touch event Visual output.Although in the figure 7, touch sensitive surface and display panel are to realize input and input as two independent components Function, but in some embodiments it is possible to touch sensitive surface and display panel are integrated and realizes and outputs and inputs function.
Terminal may also include at least one sensor 705, such as optical sensor, motion sensor and other sensors. Specifically, optical sensor may include ambient light sensor and proximity sensor, wherein ambient light sensor can be according to ambient light Light and shade adjust the brightness of display panel, proximity sensor can close display panel and/or the back of the body when terminal is moved in one's ear Light.As a kind of motion sensor, gravity accelerometer can detect in all directions (generally three axis) acceleration Size can detect that size and the direction of gravity when static, can be used to identify mobile phone posture application (such as horizontal/vertical screen switching, Dependent game, magnetometer pose calibrating), Vibration identification correlation function (such as pedometer, tap) etc.;It can also configure as terminal The other sensors such as gyroscope, barometer, hygrometer, thermometer, infrared sensor, details are not described herein.
Voicefrequency circuit 706, loud speaker, microphone can provide the audio interface between user and terminal.Voicefrequency circuit 706 can By the transformed electric signal of the audio data received, it is transferred to loud speaker, voice signal output is converted to by loud speaker;It is another The voice signal of collection is converted to electric signal by aspect, microphone, and audio data is converted to after being received by voicefrequency circuit 706, then After the processing of audio data output processor 708, through RF circuits 701 to be sent to such as another terminal, or by audio data Output is further processed to memory 702.Voicefrequency circuit 706 is also possible that earphone jack, with provide peripheral hardware earphone with The communication of terminal.
WiFi belongs to short range wireless transmission technology, and terminal can help user's transceiver electronics postal by WiFi module 707 Part, browsing webpage and access streaming video etc., it has provided wireless broadband internet to the user and has accessed.Although Fig. 7 is shown WiFi module 707, but it is understood that, and it is not belonging to must be configured into for terminal, it can not change as needed completely Become in the range of the essence of invention and omits.
Processor 708 is the control centre of terminal, using the various pieces of various interfaces and connection whole mobile phone, is led to It crosses operation or executes the software program and/or module being stored in memory 702, and call and be stored in memory 702 Data execute the various functions and processing data of terminal, to carry out integral monitoring to mobile phone.Optionally, processor 708 can wrap Include one or more processing cores;Preferably, processor 708 can integrate application processor and modem processor, wherein answer With the main processing operation system of processor, user interface and application program etc., modem processor mainly handles wireless communication. It is understood that above-mentioned modem processor can not also be integrated into processor 708.
Terminal further includes the power supply 709 (such as battery) powered to all parts, it is preferred that power supply can pass through power supply pipe Reason system and processor 708 are logically contiguous, to realize management charging, electric discharge and power managed by power-supply management system Etc. functions.Power supply 709 can also include one or more direct current or AC power, recharging system, power failure inspection The random components such as slowdown monitoring circuit, power supply changeover device or inverter, power supply status indicator.
Although being not shown, terminal can also include camera, bluetooth module etc., and details are not described herein.Specifically in this implementation In example, the processor 708 in terminal can run the one or more program instruction being stored in memory 702, to Realize the account number analysis method provided in above-mentioned each embodiment of the method.
One of ordinary skill in the art will appreciate that all or part of step in the various methods of above-described embodiment is can It is completed with instructing relevant hardware by program, which can be stored in a computer readable storage medium, the meter Calculation machine readable storage medium storing program for executing can be computer readable storage medium included in memory in above-described embodiment;It can also It is individualism, without the computer readable storage medium in supplying terminal.Be stored in the computer readable storage medium to Few an instruction, at least one section of program, code set or instruction set, it is at least one instruction, at least one section of program, described Code set or instruction set are loaded by the processor and are executed to realize the account number analysis method as described in Fig. 1 to Fig. 5 is any.It can Selection of land, the computer readable storage medium may include:Read-only memory (ROM, Read Only Memory), arbitrary access note Recall body (RAM, Random Access Memory), solid state disk (SSD, Solid State Drives) or CD etc..Wherein, Random access memory may include resistive random access memory body (ReRAM, Resistance Random Access ) and dynamic random access memory (DRAM, Dynamic Random Access Memory) Memory.Above-mentioned the application is implemented Example serial number is for illustration only, can not represent the quality of embodiment.
One of ordinary skill in the art will appreciate that realizing that all or part of step of above-described embodiment can pass through hardware It completes, relevant hardware can also be instructed to complete by program, the program can be stored in a kind of computer-readable In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..
Those skilled in the art after considering the specification and implementing the invention disclosed here, will readily occur to its of the disclosure Its embodiment.This application is intended to cover any variations, uses, or adaptations of the disclosure, these modifications, purposes or Person's adaptive change follows the general principles of this disclosure and includes the undocumented common knowledge in the art of the disclosure Or conventional techniques.The description and examples are only to be considered as illustrative, and the true scope and spirit of the disclosure are by following Claim is pointed out.
It should be understood that the present disclosure is not limited to the precise structures that have been described above and shown in the drawings, and And various modifications and changes may be made without departing from the scope thereof.The scope of the present disclosure is only limited by the accompanying claims.

Claims (9)

1. a kind of account number analysis system, which is characterized in that the account number analysis system includes:It is logged in the first visitor of the first account number Family end, the second client for being logged in the second account number public's account server corresponding with public's account number is logged in:
First client, for sending the corresponding net of public's account number to second account number by first account number Page URL, the webpage URL includes burying information;
Second client, for receiving the webpage URL by second account number;
Second client, for according to burying information described in the webpage URL, by instant communication server to institute State the various dimensions user information that public's account server sends second account number;
Public's account server carries out account number analysis for the various dimensions user information to second account number; Analysis result is second account number when being target type account number, and the analysis result is sent to first client.
2. system according to claim 1, which is characterized in that the various dimensions user information includes:Second account number History usage record in the instant communication server;
Second client, for according to information is buried described in the webpage URL, being sent out to the instant communication server Send web access requests;
Second client, the authorization requests sent for receiving the instant communication server, the authorization requests are institutes State what instant communication server was sent according to the web access requests to second client;
Second client authorizes instruction for being sent to the instant communication server according to the authorization requests, described Instruction is authorized to be used to indicate the history that the instant communication server sends second account number to public's account server Usage record.
3. system according to claim 2, which is characterized in that the various dimensions user information further includes:Second visitor The facility information of terminal where the end of family;
Second client is additionally operable to send the communication that target account number is public's account number to the instant communication server Message, the communication information include the facility information of terminal where second client, and the instant communication server is used for The communication information is forwarded to public's account server.
4. system according to any one of claims 1 to 3, which is characterized in that
Public's account server is additionally operable to the webpage URL of public's account number being sent to first client.
5. system according to any one of claims 1 to 4, which is characterized in that
Public's account server, for by the various dimensions user information of second account number and at least two feature policies into Row matching, at least two value-at-risks are obtained according to matching result;
Public's account server obtains risk total value at least two value-at-risk to be added;
Public's account server obtains second account number for the risk total value to be compared with predetermined threshold value Analysis result.
6. a kind of account number analysis method, which is characterized in that described applied to being logged in public's account server of public's account number Method includes:
Receive the various dimensions user information for the second account number that the second client is sent by instant communication server, the various dimensions User information is sent after second client receives the webpage URL that the first client is sent, and the webpage URL includes Information is buried, first client is logged in the first account number, and second client is logged in second account number;
Account number analysis is carried out to the various dimensions user information of second account number;
When it is target type account number that analysis result, which is second account number, the analysis knot is sent to first client Fruit.
7. a kind of account number analytical equipment, which is characterized in that described device includes:
Receiving module, the various dimensions user for receiving the second account number that the second client is sent by instant communication server believe Breath, the various dimensions user information are sent after second client receives the webpage URL that the first client is sent, institute It includes burying information to state webpage URL, and first client is logged in the first account number, and second client is logged in described the Two account numbers;
Analysis module carries out account number analysis for the various dimensions user information to second account number;
Sending module, for when it is target type account number that analysis result, which is second account number, being sent out to first client Send the analysis result.
8. a kind of terminal, which is characterized in that the terminal includes processor and memory, and at least one is stored in the memory Item instruction, at least one section of program, code set or instruction set, at least one instruction, at least one section of program, the code Collection or instruction set are loaded by the processor and are executed to realize account number analysis method as claimed in claim 6.
9. a kind of computer readable storage medium, which is characterized in that be stored at least one instruction, at least in the storage medium One section of program, code set or instruction set, at least one instruction, at least one section of program, the code set or the instruction set It is loaded by the processor and is executed to realize account number analysis method as claimed in claim 6.
CN201810360938.2A 2018-04-20 2018-04-20 Account number analysis system, method and device Withdrawn CN108540482A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810360938.2A CN108540482A (en) 2018-04-20 2018-04-20 Account number analysis system, method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810360938.2A CN108540482A (en) 2018-04-20 2018-04-20 Account number analysis system, method and device

Publications (1)

Publication Number Publication Date
CN108540482A true CN108540482A (en) 2018-09-14

Family

ID=63478069

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810360938.2A Withdrawn CN108540482A (en) 2018-04-20 2018-04-20 Account number analysis system, method and device

Country Status (1)

Country Link
CN (1) CN108540482A (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109302340A (en) * 2018-10-25 2019-02-01 金瓜子科技发展(北京)有限公司 One kind burying point data report method, device and computer readable storage medium
CN110069923A (en) * 2019-03-13 2019-07-30 咪咕文化科技有限公司 Method and related device for identifying risk user
CN110708306A (en) * 2019-09-29 2020-01-17 贝壳技术有限公司 Data processing method, device and storage medium
CN111008377A (en) * 2019-10-12 2020-04-14 中国平安财产保险股份有限公司 Account monitoring method and device, computer equipment and storage medium
CN112015946A (en) * 2019-05-30 2020-12-01 中国移动通信集团重庆有限公司 Video detection method, device, computing device and computer storage medium
CN117332395A (en) * 2023-11-23 2024-01-02 江西财经大学 A data management method and system for data sharing

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1518688A (en) * 2000-12-29 2004-08-04 英特尔公司 System and method for providing authentication and verification services in enhanced media gateway
CN103069413A (en) * 2010-03-19 2013-04-24 标记公司 Customizing content displayed for a user based on user preferences of another user
CN103209398A (en) * 2012-01-17 2013-07-17 阿里巴巴集团控股有限公司 Grey list establishing method and system and short message sending method and system
US20140040786A1 (en) * 2012-08-01 2014-02-06 KeyMetric, Inc. Automatic tracking of user engagement with computing interfaces
CN103634308A (en) * 2013-11-19 2014-03-12 北京奇虎科技有限公司 Safety detection method and device for instant messaging tool
CN105323144A (en) * 2014-07-16 2016-02-10 腾讯科技(深圳)有限公司 Method and system for prompting message abnormity in instant messenger
CN105378790A (en) * 2013-03-15 2016-03-02 索库里公司 Risk assessment using social networking data
CN105550184A (en) * 2014-10-31 2016-05-04 阿里巴巴集团控股有限公司 Information obtaining method and device

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1518688A (en) * 2000-12-29 2004-08-04 英特尔公司 System and method for providing authentication and verification services in enhanced media gateway
CN103069413A (en) * 2010-03-19 2013-04-24 标记公司 Customizing content displayed for a user based on user preferences of another user
CN103209398A (en) * 2012-01-17 2013-07-17 阿里巴巴集团控股有限公司 Grey list establishing method and system and short message sending method and system
US20140040786A1 (en) * 2012-08-01 2014-02-06 KeyMetric, Inc. Automatic tracking of user engagement with computing interfaces
CN105378790A (en) * 2013-03-15 2016-03-02 索库里公司 Risk assessment using social networking data
CN103634308A (en) * 2013-11-19 2014-03-12 北京奇虎科技有限公司 Safety detection method and device for instant messaging tool
CN105323144A (en) * 2014-07-16 2016-02-10 腾讯科技(深圳)有限公司 Method and system for prompting message abnormity in instant messenger
CN105550184A (en) * 2014-10-31 2016-05-04 阿里巴巴集团控股有限公司 Information obtaining method and device

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109302340A (en) * 2018-10-25 2019-02-01 金瓜子科技发展(北京)有限公司 One kind burying point data report method, device and computer readable storage medium
CN109302340B (en) * 2018-10-25 2021-02-12 金瓜子科技发展(北京)有限公司 Buried point data reporting method and device and computer readable storage medium
CN110069923A (en) * 2019-03-13 2019-07-30 咪咕文化科技有限公司 Method and related device for identifying risk user
CN112015946A (en) * 2019-05-30 2020-12-01 中国移动通信集团重庆有限公司 Video detection method, device, computing device and computer storage medium
CN112015946B (en) * 2019-05-30 2023-11-10 中国移动通信集团重庆有限公司 Video detection method, device, computing equipment and computer storage medium
CN110708306A (en) * 2019-09-29 2020-01-17 贝壳技术有限公司 Data processing method, device and storage medium
CN110708306B (en) * 2019-09-29 2022-07-12 贝壳找房(北京)科技有限公司 Data processing method, device and storage medium
CN111008377A (en) * 2019-10-12 2020-04-14 中国平安财产保险股份有限公司 Account monitoring method and device, computer equipment and storage medium
CN117332395A (en) * 2023-11-23 2024-01-02 江西财经大学 A data management method and system for data sharing
CN117332395B (en) * 2023-11-23 2024-03-08 江西财经大学 A data management method and system for data sharing

Similar Documents

Publication Publication Date Title
CN108540482A (en) Account number analysis system, method and device
CN104462128B (en) The method, apparatus and terminal device of multimedia file processing
CN106657431B (en) A kind of method, server, terminal and the system of business platform address resolution
US7973655B2 (en) Mobile device tracking and location awareness
CN104035948B (en) Geographic position display packing and device
CN104992342B (en) Promotion message delivery effectiveness determines method, monitoring server and terminal
CN107357725B (en) Application testing method and device
CN104468463B (en) Verification method, device and system
US20160241589A1 (en) Method and apparatus for identifying malicious website
CN104427074B (en) A kind of methods, devices and systems for showing incoming information
CN108280692A (en) Reward distribution method, device, computer readable storage medium and terminal
CN108062390A (en) The method, apparatus and readable storage medium storing program for executing of recommended user
CN107273404A (en) Appraisal procedure, device and the computer-readable recording medium of search engine
US9246925B2 (en) Method and system for third-party service platform login
CN106330889B (en) Unseal the method and device of account
CN106059894A (en) Message processing method and message processing device
CN104580177B (en) Resource provider method, device and system
US20190223141A1 (en) Device positioning method and apparatus
CN105933209B (en) Position sharing method and device
CN107241261A (en) Information replying method, terminal and computer-readable recording medium
CN108897846A (en) Information search method, equipment and computer readable storage medium
CN104750722B (en) A kind of acquisition of information and methods of exhibiting and device
CN110445746A (en) Cookie acquisition methods, device and storage equipment
CN104104508B (en) Method of calibration, device and terminal device
CN108810833A (en) Phone number binding information management method, device and computer readable storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WW01 Invention patent application withdrawn after publication

Application publication date: 20180914

WW01 Invention patent application withdrawn after publication