阅读说明：本技术 外接操作设备的识别方法、设备及存储介质 (Method and device for identifying external operation device and storage medium ) 是由 卫驰 刘永奎 于 2020-12-22 设计创作，主要内容包括：本公开实施例提供一种外接操作设备的识别方法、设备及存储介质,该外接操作设备的识别方法包括：通过采集用户在终端界面目标区域的操作事件的属性数据；从属性数据中获取执行操作事件的操作设备类型和操作设备名；若操作设备类型属于目标区域的预设操作设备类型集合、和/或操作设备名属于目标区域对应的预设关键词集合,则确定操作事件由异常外接操作设备执行。本公开实施例通过获取用户在终端界面目标区域的操作事件的操作设备类型和操作设备名,结合预设操作设备类型集合和预设关键词集合,可准确的判断操作事件是否由异常外接操作设备执行,进而在由异常外接操作设备执行的情况下采取策略以保证服务公平性。(The embodiment of the disclosure provides an identification method, equipment and a storage medium of an external operation device, wherein the identification method of the external operation device comprises the following steps: collecting attribute data of an operation event of a user in a terminal interface target area; acquiring the type and name of the operating equipment for executing the operating event from the attribute data; and if the type of the operating equipment belongs to a preset operating equipment type set of the target area and/or the name of the operating equipment belongs to a preset keyword set corresponding to the target area, determining that the operating event is executed by the abnormal external operating equipment. The method and the device for judging the service fairness can accurately judge whether the operation event is executed by the abnormal external operation device or not by acquiring the operation device type and the operation device name of the operation event of the user in the terminal interface target area and combining the preset operation device type set and the preset keyword set, and then adopt a strategy to ensure the service fairness under the condition of being executed by the abnormal external operation device.)

1. An identification method of an external operation device is characterized by comprising the following steps:

collecting attribute data of an operation event of a user in a terminal interface target area;

acquiring the type and name of the operating equipment for executing the operating event from the attribute data;

and if the operating equipment type belongs to a preset operating equipment type set of the target area and/or the operating equipment name comprises a preset keyword in a preset keyword set corresponding to the target area, determining that the operating event is executed by abnormal external operating equipment.

2. The method according to claim 1, wherein the collecting attribute data of the operation event of the user in the terminal interface target area comprises:

and acquiring attribute data of the operation event of the user in the terminal interface target area through the buried point preset in the target area.

3. The method of claim 1, further comprising:

if the type of the operating equipment is an unknown type and the name of the operating equipment does not belong to a preset keyword set corresponding to the target area, acquiring position information of a plurality of unknown types of operating events from attribute data of the plurality of operating events of the user in the terminal interface target area within a first preset time length;

judging whether the operation events of the unknown types are abnormal or not according to the position information of the operation events of the unknown types;

if the plurality of unknown types of operation events are not abnormal, determining that the plurality of unknown types of operation events are not executed by the abnormal external operation equipment.

4. The method according to claim 3, wherein the determining whether the plurality of unknown types of operation events are abnormal according to the position information of the plurality of unknown types of operation events comprises:

screening out the position information of repeated operation events with completely repeated and/or partially repeated position information from the position information of the plurality of unknown types of operation events, and acquiring the number of repeated position information of each repeated operation event;

acquiring repeated operation evaluation parameters according to the number of repeated position information of each repeated operation event and the total number of position information of the plurality of unknown types of operation events;

and determining whether the operation events of the unknown types are abnormal or not according to the repeated operation evaluation parameters and a preset threshold value.

5. The method according to any one of claims 1-4, further comprising:

acquiring the type and name of operation equipment corresponding to at least one operation event of an abnormal user in the target area;

if any one of the operating equipment types belongs to the preset operating equipment type set, identifying a keyword in a corresponding operating equipment name, and adding the identified keyword into the preset keyword set; and/or

And performing keyword identification on each operating equipment name, and adding the identified keywords into the preset keyword set.

6. The method according to claim 5, wherein the obtaining of the operation device type and the operation device name corresponding to the at least one operation event of the abnormal user in the target area further comprises:

and acquiring a user with the number of times of successful operation of the service corresponding to the operation event within the second preset time length exceeding the first preset number of times or a user with the number of times of operation within the second preset time length exceeding the second preset number of times, and determining the user as the abnormal user.

7. The method of claim 1, wherein after determining that the operation event is executed by an abnormal external operation device, further comprising:

refusing to respond to the operation event; and/or

And determining a penalty strategy for the user, and sending penalty information to the terminal according to the penalty strategy.

8. The utility model provides an identification equipment of external operating equipment which characterized in that includes:

the acquisition module is used for acquiring attribute data of an operation event of a user in a terminal interface target area;

the acquisition module is used for acquiring the type and name of the operating equipment for executing the operating event from the attribute data;

and the identification module is used for determining that the operation event is executed by abnormal external operation equipment if the operation equipment type belongs to a preset operation equipment type set of the target area and/or the operation equipment name comprises a preset keyword in a preset keyword set corresponding to the target area.

9. The device of claim 8, wherein the collection module, when collecting attribute data of an operation event of a user in a target area of the terminal interface, is configured to:

and acquiring attribute data of the operation event of the user in the terminal interface target area through the buried point preset in the target area.

10. The device of claim 8, wherein the identification module is further configured to:

if the type of the operating equipment is an unknown type and the name of the operating equipment does not belong to a preset keyword set corresponding to the target area, acquiring position information of a plurality of unknown types of operating events from attribute data of the plurality of operating events of the user in the terminal interface target area within a first preset time length;

judging whether the operation events of the unknown types are abnormal or not according to the position information of the operation events of the unknown types;

if the plurality of unknown types of operation events are not abnormal, determining that the plurality of unknown types of operation events are not executed by the abnormal external operation equipment.

11. The apparatus according to claim 10, wherein the identification module, when determining whether the plurality of unknown types of operation events are abnormal according to the position information of the plurality of unknown types of operation events, is configured to:

screening out the position information of repeated operation events with completely repeated and/or partially repeated position information from the position information of the plurality of unknown types of operation events, and acquiring the number of repeated position information of each repeated operation event;

acquiring repeated operation evaluation parameters according to the number of repeated position information of each repeated operation event and the total number of position information of the plurality of unknown types of operation events;

and determining whether the operation events of the unknown types are abnormal or not according to the repeated operation evaluation parameters and a preset threshold value.

12. The apparatus according to any one of claims 8-11, further comprising an analysis module for:

acquiring the type and name of operation equipment corresponding to at least one operation event of an abnormal user in the target area;

if any one of the operating equipment types belongs to the preset operating equipment type set, identifying a keyword in a corresponding operating equipment name, and adding the identified keyword into the preset keyword set; and/or

And performing keyword identification on each operating equipment name, and adding the identified keywords into the preset keyword set.

13. The device according to claim 12, wherein the analysis module, before obtaining the operating device type and the operating device name corresponding to at least one operating event of the abnormal user in the target area, is further configured to:

and acquiring a user with the number of times of successful operation of the service corresponding to the operation event within the second preset time length exceeding the first preset number of times or a user with the number of times of operation within the second preset time length exceeding the second preset number of times, and determining the user as the abnormal user.

14. The apparatus of claim 8, further comprising a response module to:

refusing to respond to the operation event after determining that the operation event is executed by the abnormal external operation equipment; and/or

And determining a penalty strategy for the user, and sending penalty information to the terminal according to the penalty strategy.

15. A computer device, comprising: a memory and a processor;

the memory is to store program instructions;

the processor is configured to invoke program instructions in the memory to perform the method of any of claims 1-7.

16. A computer-readable storage medium, characterized in that the computer-readable storage medium has stored thereon a computer program; the computer program, when executed, implementing the method of any one of claims 1-7.

17. A computer program product comprising a computer program, characterized in that the computer program, when being executed by a processor, carries out the method of any one of claims 1-7.

Technical Field

The embodiment of the disclosure relates to the technical field of communication, and in particular relates to an identification method and device for an external operating device, and a storage medium.

Background

In daily life, there are often scenes that require quick clicking of a device screen, such as order taking, shopping, games, etc. In order to improve the success rate of click events such as order grabbing, shopping, games and the like, the click cheater is generated at will, and the click cheater is special software or external operation equipment and can realize an automatic click function on a certain area set by an equipment screen.

In the click cheater, the external operating equipment is applied to a plurality of scenes such as external game suspension, false flow (swiping a list), marketing action of wool, net appointment and order grabbing due to the attributes of convenience, quick click, difficulty in recognition and the like, and the fairness is greatly damaged.

Disclosure of Invention

The embodiment of the disclosure provides an identification method and equipment of an external operation device and a storage medium, so as to improve the identification accuracy of the external operation device and ensure the fairness of corresponding services of operation events.

In a first aspect, an embodiment of the present disclosure provides an identification method for an external operating device, including:

collecting attribute data of an operation event of a user in a terminal interface target area;

acquiring the type and name of the operating equipment for executing the operating event from the attribute data;

and if the operating equipment type belongs to a preset operating equipment type set of the target area and/or the operating equipment name comprises a preset keyword in a preset keyword set corresponding to the target area, determining that the operating event is executed by abnormal external operating equipment.

In a second aspect, an embodiment of the present disclosure provides an identification device for an external operating device, including:

the acquisition module is used for acquiring attribute data of an operation event of a user in a terminal interface target area;

the acquisition module is used for acquiring the type and name of the operating equipment for executing the operating event from the attribute data;

and the identification module is used for determining that the operation event is executed by abnormal external operation equipment if the operation equipment type belongs to a preset operation equipment type set of the target area and/or the operation equipment name comprises a preset keyword in a preset keyword set corresponding to the target area.

In a third aspect, an embodiment of the present disclosure provides a computer device, including: the method comprises the following steps: a memory and a processor;

the memory is to store program instructions;

the processor is configured to invoke program instructions in the memory to perform the method of the first aspect.

In a fourth aspect, embodiments of the present disclosure provide a computer-readable storage medium having a computer program stored thereon; which when executed performs the method of the first aspect.

In a fifth aspect, embodiments of the present disclosure provide a computer program product comprising a computer program that, when executed by a processor, implements the method according to the first aspect.

According to the method, the device and the storage medium for identifying the external operating device, provided by the embodiment of the disclosure, the attribute data of the operating event of a user in a terminal interface target area is collected; acquiring the type and name of the operating equipment for executing the operating event from the attribute data; and if the type of the operating equipment belongs to a preset operating equipment type set of the target area and/or the name of the operating equipment belongs to a preset keyword set corresponding to the target area, determining that the operating event is executed by the abnormal external operating equipment. The method and the device for judging the service fairness can accurately judge whether the operation event is executed by the abnormal external operation device or not by acquiring the operation device type and the operation device name of the operation event of the user in the terminal interface target area and combining the preset operation device type set and the preset keyword set, and then adopt a strategy to ensure the service fairness under the condition of being executed by the abnormal external operation device.

Various possible embodiments of the present disclosure and technical advantages thereof will be described in detail below.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.

Fig. 1 is a schematic view of an application scenario of an identification method of an external operating device according to an embodiment of the present disclosure;

fig. 2 is a flowchart of an identification method of an external operating device according to an embodiment of the present disclosure;

fig. 3 is a flowchart of an identification method of an external operating device according to another embodiment of the present disclosure;

fig. 4 is a flowchart of an identification method of an external operating device according to another embodiment of the present disclosure;

fig. 5 is a block diagram of an identification device of an external operating device according to an embodiment of the present disclosure;

fig. 6 is a block diagram of a computer device for executing an identification method of an external operating device according to an embodiment of the present disclosure.

With the foregoing drawings in mind, certain embodiments of the disclosure have been shown and described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the disclosure to those skilled in the art by reference to specific embodiments.

Detailed Description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.

The click cheater is special software or external operation equipment and can realize an automatic click function on a certain area set by an equipment screen. For example, a plug-in the game industry can bring about an increase in game experience, for software plug-ins, since the APP needs to be installed in the device, the identification is relatively easy, and for external operation devices, since the APP does not need to be installed in the device, the identification is relatively difficult. Taking a shooting game as an example, the gun opening speed is determined by the speed of clicking a gun opening button, the peak value of the gun opening speed of a normal person is 10-15 times in 1 second, and the gun can be clicked and opened hundreds of times in a single second by using an external type click cheater.

For the external operation device, the prior art usually relies on the click position to identify, for example, if the click position is found to be aggregated, the external operation device is determined. In the prior art, there is a certain limitation in identifying the external operating device based on the click position, and particularly, some external operating devices may perform pure randomization on the click coordinate, for example, fine random fluctuation is performed on the abscissa and/or the ordinate, which can effectively avoid the identification of the identification method in the prior art, so that erroneous judgment or missing judgment is easily caused, and it may not be possible to judge whether the external operating device is the external operating device or the software cheater, and the accuracy of identification of the external operating device is not high.

In order to solve the technical problem, the present disclosure provides an identification method for an external operating device, considering that the external operating device generally needs to be connected to the device through bluetooth or a data line, and therefore, a target area of a terminal interface can be used for embedding points, such as a gun firing button in a shooting game, a like button in a live broadcast room, an order grabbing button in a travel industry, and the like, so as to further collect attribute data of a click event of a user in the target area of the terminal interface, for example, for an Android system, based on an own interface thereof, a plurality of attribute characteristics of a current click event, such as a click coordinate, a force, a press area, a click device name, a click device type, and the like, can be queried.

Through comparison of the attribute data, for various external operation devices, two attributes of the name of the clicking device and the type of the clicking device have obvious value-taking characteristics, so that the external operation devices are identified according to the two characteristics. The set of allowed preset operating device types of the target area and the set of preset keywords included in the device names of some known external operating devices can be predetermined.

Therefore, in the disclosure, the type of the pointing device and the name of the pointing device for executing the pointing event may be obtained from the collected attribute data of the pointing event in the target area, and then it is determined whether the type of the pointing device belongs to a preset target pointing device type and/or whether the name of the pointing device belongs to a preset keyword set of the name of the pointing device, and if the type of the pointing device does not belong to the preset target pointing device type in the target area and/or the name of the pointing device belongs to the preset keyword set corresponding to the target area, it is determined that the pointing event is executed by the abnormal external operation device.

The method for identifying the external operation equipment is suitable for the application scene shown in figure 1. The application scene comprises a terminal 101 and a server 102, wherein a user clicks, slides and other operation events in an interface target area on the terminal 101, a point can be buried in the interface target area of the terminal 101 in advance, attribute data of the operation events in the target area of the user are collected, then the attribute data of the operation events are sent to the server 102, the server 102 can obtain operation equipment types and operation equipment names for executing the operation events from the attribute data, and then whether the operation events are executed by abnormal external operation equipment or not is judged, specifically, if the operation equipment types belong to a preset operation equipment type set of the target area and/or the operation equipment names belong to a preset keyword set corresponding to the target area, the operation events are determined to be executed by the abnormal external operation equipment.

Further, after the server 102 determines that the operation event is executed by the abnormal external operation device, it may refuse to respond to the operation event, for example refuse to request an order or a purchase request of the user; and/or determining a penalty policy for the user, for example, reducing a credit score, deducting points, blocking account numbers, and sending penalty information to the terminal 101 according to the penalty policy.

The terminal may include, but is not limited to, a mobile phone, a tablet computer, a personal computer, and the like, and the server may be one server, a server cluster composed of a plurality of servers, or a cloud computing service center.

The following describes technical solutions of the embodiments of the present disclosure and how to solve the above technical problems with specific embodiments. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments. Embodiments of the present disclosure will be described below with reference to the accompanying drawings.

Fig. 2 is a flowchart of an identification method of an external operating device according to an embodiment of the present invention. As shown in fig. 2, the embodiment provides a method for identifying an external operating device, where an execution subject may be a computer device such as a server, and the method includes the following specific steps:

s201, collecting attribute data of an operation event of a user in a terminal interface target area.

In this embodiment, the user may perform some operation events, such as clicking, or some other operation events, such as sliding, dragging, etc., in the target area of the terminal interface, where the target area may be a button, an icon, etc., in the interface. In this embodiment, attribute data of an operation event of a user in a terminal interface target area, such as a click coordinate, a force, a pressing area, an operation device name, an operation device type, and the like, may be acquired.

Specifically, the embedding can be performed in a terminal interface target area in advance, for example, the embedding can be performed in a shooting button area in a shooting game, a praise button area in a live broadcast room, an order grabbing button area in a trip industry and the like; and further acquiring attribute data of the operation event of the user in the terminal interface target area through the buried point preset in the target area.

When collecting attribute data of an operation event through a buried point, some code for attribute data collection may be adopted, for example, the example code of the Android system is as follows:

Private StringBuilder genResult(StringBuilder sb,MotionEvent event){

sb.append(event.getAction())；

sb.append(“,”).append(event.getToolType())；

sb.append(“,”).append(event.getRawX()).append(“,”).append(event.get

RawY())；

sb.append(“,”).append(event.getSize())；

sb.append(“,”).append(event.getPressure())；

sb.append(“,”).append(event.getDevice.getName())；

reture sb；

}

the MotionEvent is a click event of the Android system, and corresponding attribute data may be obtained through a system service (function) provided by the MotionEvent, for example, getToolType may obtain a "click device type" of the click action, getName may obtain a "click device name" of the click action, and other attribute data are not described herein any more.

S202, obtaining the type and name of the operating equipment for executing the operating event from the attribute data.

In this embodiment, the operation device type and the operation device name of the operation event may be extracted from the attribute data acquired in the above process. Specifically, the operating device types may be assigned, and different values represent different operating device types, for example, 0 represents unknown, 1 represents finger, 2 represents style, and 3 represents mouse, although some other operating device types may also be included, and the operating device types may be enumerated (limited), which is not illustrated here. The names of the operating devices are not enumerated (take a lot of values), for example, some device names carry special character strings, such as "USB", "mouse", "journal", and the like, or some writing operating devices name by using random character strings, and especially, if the device names are finger-operated, the device names are random character strings.

S203, if the operating equipment type belongs to a preset operating equipment type set of the target area and/or the operating equipment name comprises a preset keyword in a preset keyword set corresponding to the target area, determining that the operating event is executed by an abnormal external operating equipment.

In this embodiment, through comparison of the types of the operation devices of the multiple external operation devices, it is found that the types of the operation devices of the external operation devices are usually a stylus pen type, a mouse type, and the like, and are not finger types, but a terminal interface target area may be pre-configured with a preset target operation device type that is allowed, for example, only a finger type is allowed in the terminal interface target area, or only a finger type and a stylus pen type are allowed, and then the remaining operation device types may be added to a preset operation device type set, and if the currently acquired operation device type does not belong to the preset target operation device type in the target area, that is, the currently acquired operation device type belongs to the preset operation device type set, it may be determined that the current operation event is executed by an abnormal external operation device, that is, by an external operation device that is not allowed.

In addition, by comparing the names of the operating devices of the multiple external operating devices, it is found that the names of the operating devices of the external operating devices are usually regular, for example, the names include some special character strings, such as "USB", "mouse", "joy", and the like, and the names of the operating devices corresponding to the finger operation are random character strings, so that keywords frequently appearing in the names of the operating devices of the external operating devices can be summarized and counted to form a preset keyword set, and if the currently acquired name of the operating device includes preset keywords in the preset keyword set, it can be determined that the operating event is executed by the abnormal external operating device.

Of course, if the operation device type belongs to the preset operation device type set of the target area and includes the preset keyword in the preset keyword set, it may also be determined that the operation event is executed by the abnormal external operation device.

Optionally, in this embodiment, the preset keyword set may be updated, for example, as shown in fig. 3, the preset keyword set may be updated through the following processes:

s301, acquiring an operation equipment type and an operation equipment name corresponding to at least one operation event of an abnormal user in the target area;

s302, if any one of the operation equipment types belongs to the preset operation equipment type set, identifying a keyword in a corresponding operation equipment name, and adding the identified keyword into the preset keyword set; and/or performing keyword identification on each operating equipment name, and adding the identified keywords into the preset keyword set.

In this embodiment, for some abnormal users, for example, users with an abnormally high number of successful order grabbing times within a period of time, or users with an abnormally frequent vote in a live broadcast room, through analyzing the abnormal users, a possible keyword is mined, and particularly, an operating device type of at least one operating event of the abnormal user in a target area belongs to the preset operating device type set (not a preset target operating device type), whether the keyword exists in an operating device name of the operating event can be identified, if the keyword exists, the identified keyword is added to the preset keyword set, wherein when the keyword is added to the preset keyword set, whether the keyword already exists in the preset keyword set can be determined, if the keyword does not exist, the keyword is added to the preset keyword set, otherwise, the keyword set may not be added; or, the keyword recognition may be performed on the operation device name corresponding to each operation event of the abnormal user, and the recognized keyword is added to the preset keyword set.

Before obtaining the operating device type and the operating device name corresponding to at least one operating event of the abnormal user in the target area, the method may further perform judgment of the abnormal user, and specifically may include:

and acquiring a user with the number of times of successful operation of the service corresponding to the operation event within the second preset time length exceeding the first preset number of times or a user with the number of times of operation within the second preset time length exceeding the second preset number of times, and determining the user as the abnormal user.

In this embodiment, the determination condition may be whether the number of times that the service corresponding to the operation event is operated successfully within the second preset duration exceeds a first preset number of times, for example, the number of times that the order grabbing success within one day exceeds 20 times, and then the user may be determined as an abnormal user; or the judgment condition may be whether the number of operations exceeds a second preset number within a second preset time period, for example, if the number of clicks on the order grabbing button exceeds 100 times within 1 minute, the abnormal user may be determined.

On the basis of any embodiment, after determining that the operation event is executed by the abnormal external operation device, refusing to respond to the operation event, for example, refusing the order or purchase request of the user; and/or determining a penalty strategy for the user, for example, reducing the penalty of credit score, deducting points, blocking account numbers and the like of the user, and sending penalty information to the terminal according to the penalty strategy.

In the method for identifying the external operating device provided by the embodiment, attribute data of an operating event of a user in a terminal interface target area is collected; acquiring the type and name of the operating equipment for executing the operating event from the attribute data; and if the type of the operating equipment belongs to a preset operating equipment type set of the target area and/or the name of the operating equipment belongs to a preset keyword set corresponding to the target area, determining that the operating event is executed by the abnormal external operating equipment. According to the method and the device, the type and the name of the operation equipment of the operation event of the user in the target area of the terminal interface are obtained, the preset operation equipment type set and the preset keyword set are combined, whether the operation event is executed by the abnormal external operation equipment can be accurately judged, and then a strategy is adopted under the condition of being executed by the abnormal external operation equipment to ensure service fairness.

On the basis of any of the above embodiments, as shown in fig. 4, the method for identifying the external operating device may further include:

s401, if the type of the operating equipment is an unknown type and the name of the operating equipment does not belong to a preset keyword set corresponding to the target area, acquiring position information of a plurality of unknown types of operating events from attribute data of the plurality of operating events of the user in the target area of the terminal interface within a first preset time length;

s402, judging whether the operation events of the unknown types are abnormal or not according to the position information of the operation events of the unknown types;

s403, if the plurality of unknown types of operation events are not abnormal, determining that the plurality of unknown types of operation events are not executed by the abnormal external operation equipment.

In this embodiment, an unidentifiable operation type may exist in an operation device type corresponding to an operation event obtained through a system service (function), at this time, the operation device type is an unknown type (unknown), it cannot be determined whether the operation device type belongs to a preset operation device type set, at this time, if the operation device name belongs to a preset keyword set, it may be determined that the operation event is executed by an abnormal external operation device, but, if the operation device name does not belong to the preset keyword set, it may not be directly determined whether the operation event is executed by the abnormal external operation device, at this time, a plurality of operation events of the user within a first preset duration are obtained, further attribute data of the operation events are obtained, it is determined whether other unknown types of operation events exist, if a plurality of unknown types of operation events exist, location information of the plurality of unknown types of operation events is obtained, for example, acquiring location information from attribute data; further, according to the position information of the plurality of unknown types of operation events, judging whether the plurality of unknown types of operation events are abnormal, such as whether the positions are aggregated, and if the plurality of unknown types of operation events are not abnormal, determining that the plurality of unknown types of operation events are not executed by the abnormal external operation equipment; if the plurality of unknown types of operation events are abnormal, such as location aggregation, it is not possible to determine whether the plurality of unknown types of operation events are executed by the abnormal external operation device or the software cheater, at this time, a determination may be made by means of other means, such as determining whether the software cheater is installed on the terminal, and if the software cheater is not installed, it may be determined that the operation events are executed by the abnormal external operation device or determined by means of other means, which is not illustrated herein.

In the above embodiment, determining whether the plurality of unknown types of operation events are abnormal according to the position information of the plurality of unknown types of operation events may specifically include:

screening out the position information of repeated operation events with completely repeated and/or partially repeated position information from the position information of the plurality of unknown types of operation events, and acquiring the number of repeated position information of each repeated operation event;

acquiring repeated operation evaluation parameters according to the number of repeated position information of each repeated operation event and the total number of position information of the plurality of unknown types of operation events;

and determining whether the operation events of the unknown types are abnormal or not according to the repeated operation evaluation parameters and a preset threshold value.

In this embodiment, after the position information of a plurality of unknown types of operation events is acquired, the position information of repeated operation events with completely repeated and/or partially repeated position information can be screened out, and the number of repeated position information of each repeated operation event can be acquired. The position information of the completely repeated and/or partially repeated operation events can comprise the condition that the coordinates of the position information are completely the same, and can also comprise the condition that the abscissa of the position information is the same or the ordinate of the position information is the same, so that the situation that some external operation equipment carries out randomization processing on the operation position is avoided, for example, the abscissa is kept unchanged, and the ordinate carries out slight random fluctuation, or the ordinate is kept unchanged and the abscissa carries slight random fluctuation.

In this embodiment, the position information may include an X coordinate and a Y coordinate, and when acquiring the number of position information repetitions of each repetitive operation event, the number of position information repetitions identical in the X coordinate and the Y coordinate, the number of position information repetitions identical in the X coordinate, and the number of position information repetitions identical in the Y coordinate may be acquired, and then, according to the number of position information repetitions of each repetitive operation event and the total number of position information of the plurality of unknown types of operation events, the repetitive operation evaluation parameter may be acquired. Specifically, the number of repeated position information items with the identical X coordinate and Y coordinate may be accumulated, and then a ratio of the sum to the total number of position information items of a plurality of unknown types of operation events may be obtained as a first repeated operation evaluation parameter; accumulating the number of repeated position information with the same X coordinate, and acquiring the ratio of the sum to the total number of the position information of a plurality of unknown types of operation events as a second repeated operation evaluation parameter; accumulating the number of repeated position information with the same Y coordinate, and acquiring the ratio of the sum to the total number of the position information of a plurality of unknown types of operation events as a third repeated operation evaluation parameter;

and after the repeated operation evaluation parameters are obtained, comparing the repeated operation evaluation parameters with a preset threshold, if the repeated operation evaluation parameters exceed the preset threshold, determining that the operation events of the unknown types are abnormal, otherwise, not abnormal. Specifically, the three repeated operation evaluation parameters may be respectively compared with corresponding preset thresholds, and if at least one repeated operation evaluation parameter exceeds a preset threshold, it is determined that the operation events of the unknown types are abnormal.

Of course, other manners may also be adopted to determine whether the operation events of unknown types are abnormal, which is not described herein again.

Through the embodiment, whether the operation event is executed by the abnormal external operation equipment or not can be accurately judged, and then a strategy is adopted under the condition of being executed by the abnormal external operation equipment so as to ensure the service fairness.

Fig. 5 is a structural diagram of an identification device of an external operating device according to an embodiment of the present invention. The identification device of the external operating device provided in this embodiment may execute the processing flow provided in the identification method of the external operating device, as shown in fig. 5, the identification device 500 of the external operating device includes an acquisition module 501, an acquisition module 502, and an identification module 503.

The acquisition module 501 is configured to acquire attribute data of an operation event of a user in a terminal interface target area;

an obtaining module 502, configured to obtain, from the attribute data, an operating device type and an operating device name for executing the operating event;

the identifying module 503 is configured to determine that the operation event is executed by an abnormal external operation device if the operation device type belongs to a preset operation device type set of the target area and/or the operation device name includes a preset keyword in a preset keyword set corresponding to the target area.

On the basis of any of the above embodiments, when the collecting module 501 collects attribute data of an operation event of a user in a terminal interface target area, the collecting module is configured to:

and acquiring attribute data of the operation event of the user in the terminal interface target area through the buried point preset in the target area.

On the basis of any of the above embodiments, the identifying module 503 is further configured to:

if the type of the operating equipment is an unknown type and the name of the operating equipment does not belong to a preset keyword set corresponding to the target area, acquiring position information of a plurality of unknown types of operating events from attribute data of the plurality of operating events of the user in the terminal interface target area within a first preset time length;

judging whether the operation events of the unknown types are abnormal or not according to the position information of the operation events of the unknown types;

if the plurality of unknown types of operation events are not abnormal, determining that the plurality of unknown types of operation events are not executed by the abnormal external operation equipment.

On the basis of any of the above embodiments, when determining whether the plurality of unknown types of operation events are abnormal according to the position information of the plurality of unknown types of operation events, the identifying module 503 is configured to:

screening out the position information of repeated operation events with completely repeated and/or partially repeated position information from the position information of the plurality of unknown types of operation events, and acquiring the number of repeated position information of each repeated operation event;

acquiring repeated operation evaluation parameters according to the number of repeated position information of each repeated operation event and the total number of position information of the plurality of unknown types of operation events;

and determining whether the operation events of the unknown types are abnormal or not according to the repeated operation evaluation parameters and a preset threshold value.

On the basis of any of the above embodiments, the apparatus further comprises an analysis module configured to:

acquiring the type and name of operation equipment corresponding to at least one operation event of an abnormal user in the target area;

if any one of the operating equipment types belongs to the preset operating equipment type set, identifying a keyword in a corresponding operating equipment name, and adding the identified keyword into the preset keyword set; and/or

And performing keyword identification on each operating equipment name, and adding the identified keywords into the preset keyword set.

On the basis of any of the above embodiments, before obtaining the operating device type and the operating device name corresponding to at least one operating event of the abnormal user in the target area, the analysis module is further configured to:

and acquiring a user with the number of times of successful operation of the service corresponding to the operation event within the second preset time length exceeding the first preset number of times or a user with the number of times of operation within the second preset time length exceeding the second preset number of times, and determining the user as the abnormal user.

On the basis of any of the above embodiments, the apparatus further includes a response module configured to:

refusing to respond to the operation event after determining that the operation event is executed by the abnormal external operation equipment; and/or

And determining a penalty strategy for the user, and sending penalty information to the terminal according to the penalty strategy.

The identification device of the external operating device provided in the embodiment of the present invention may be specifically configured to execute the method embodiments provided in fig. 2 to 4, and specific functions are not described herein again.

The identification equipment of the external operation equipment provided by the embodiment of the invention collects the attribute data of the operation event of the user in the terminal interface target area; acquiring the type and name of the operating equipment for executing the operating event from the attribute data; and if the type of the operating equipment belongs to a preset operating equipment type set of the target area and/or the name of the operating equipment belongs to a preset keyword set corresponding to the target area, determining that the operating event is executed by the abnormal external operating equipment. According to the method and the device, the type and the name of the operation equipment of the operation event of the user in the target area of the terminal interface are obtained, the preset operation equipment type set and the preset keyword set are combined, whether the operation event is executed by the abnormal external operation equipment can be accurately judged, and then a strategy is adopted under the condition of being executed by the abnormal external operation equipment to ensure service fairness.

Fig. 6 is a schematic structural diagram of a computer device according to an embodiment of the present invention. The computer device provided in the embodiment of the present invention may execute the processing flow provided in the embodiment of the method for identifying an external operating device, as shown in fig. 6, the computer device 60 includes a memory 61, a processor 62, and a computer program; wherein the computer program is stored in the memory 61 and is configured to be executed by the processor 62 to execute the method of identifying an external operating device as described in the above embodiments. Furthermore, the computer device 60 may also have a communication interface 63 for receiving and transmitting control instructions or data.

The computer device of the embodiment shown in fig. 6 may be used to implement the technical solution of the above method embodiment, and the implementation principle and technical effect are similar, which are not described herein again.

In addition, the present embodiment also provides a computer-readable storage medium, which may be a non-transitory computer-readable storage medium, and a computer program is stored on the computer-readable storage medium, where the computer program is executed by a processor to implement the method for identifying an external operating device according to the foregoing embodiment.

In addition, the present embodiment further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the method for identifying an external operating device according to the foregoing embodiment is implemented.

In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.

The integrated unit implemented in the form of a software functional unit may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device) or a processor (processor) to execute some steps of the methods according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.

It is obvious to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional modules is merely used as an example, and in practical applications, the above function distribution may be performed by different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to perform all or part of the above described functions. For the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiment, which is not described herein again.

The above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. The embodiments of the disclosure are intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It will be understood that the present disclosure is not limited to the precise arrangements described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.