CN103825895B - A kind of information processing method and electronic equipment - Google Patents
A kind of information processing method and electronic equipment Download PDFInfo
- Publication number
- CN103825895B CN103825895B CN201410062739.5A CN201410062739A CN103825895B CN 103825895 B CN103825895 B CN 103825895B CN 201410062739 A CN201410062739 A CN 201410062739A CN 103825895 B CN103825895 B CN 103825895B
- Authority
- CN
- China
- Prior art keywords
- address
- information
- dns server
- domain name
- electronic equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a kind of information processing methods, the poor technical problem of the internet security for solving electronic equipment in the prior art.This method is applied to an electronic equipment, comprising: obtains the first information, the first information is the information containing domain name to be resolved；It controls the electronic equipment and sends the domain name mapping request for being directed to the first information to domain name system DNS server, obtain the first Internet protocol IP address corresponding with the first information that the dns server returns；First IP address is matched with the second IP address obtained, obtains a matching result；Wherein, second IP address is preset IP address corresponding with the first information；According to the matching result, determine whether the dns server is held as a hostage.Electronic equipment corresponding with the information processing method is also disclosed in the embodiment of the present invention.
Description
Technical field
The present invention relates to the communications field, in particular to a kind of information processing method and electronic equipment.
Background technique
With the continuous development of science and technology, electronic technology has also obtained development at full speed, and the type of electronic product is also got over
Come more, people have also enjoyed the various conveniences of development in science and technology bring.Present people can be set by various types of electronics
It is standby, it enjoys as development in science and technology bring is comfortably lived.For example, the electronic equipments such as smart phone have become one in people's life
A indispensable part, people directly can carry out shopping online with electronic equipments such as smart phones, watch movie, become
The portable Information Mobile Service station of people.
Each computer on the internet is owned by a unique address, referred to as IP(Internet
Protocol, Internet protocol) address.Since IP address is inconvenient to remember, DNS(Domain Name System, domain name system)
User is allowed to replace using a string of common letters (i.e. " domain name ").When user is when using website domain name, by DNS by net
Domain name mapping of standing is specified IP address, so that it may find path on the internet.But during DNS progress domain name mapping easily
It meets with DNS to kidnap, wherein mainly distort from malice of the network hacker to household radio router DNS and to affiliated net
The DNS advertisement of network operator is kidnapped, to distort the legitimate reading of domain name mapping, returns to false IP address, and attacked
Netizen not only will receive the harassing and wrecking of pop-up advertisement, or even will appear the case where correct network address of input but enters fishing website,
For example enter fishing website when logging in Internetbank, it reveals bank account and therefore password suffers great economic loss.
Therefore, the lower technical problem of the safety of network exists in the prior art, the network risks that user undertakes are larger.
Summary of the invention
The embodiment of the present invention provides a kind of information processing method and electronic equipment, solves internet security in the prior art
Lower technical problem.
A kind of information processing method is applied to an electronic equipment, which comprises
The first information is obtained, the first information is the information containing domain name to be resolved；
It controls the electronic equipment and is asked to the transmission of domain name system DNS server for the domain name mapping of the first information
It asks, obtains the first Internet protocol IP address corresponding with the first information that the dns server returns；Wherein, described
One IP address is that the dns server is parsed according to the domain name for including in the first information；
First IP address is matched with the second IP address obtained, obtains a matching result；Wherein, described
Two IP address are preset IP address corresponding with the first information；
According to the matching result, determine whether the dns server is held as a hostage.
Preferably, the electronic equipment has a preset IP address table, by first IP address and the 2nd IP obtained
Address is matched, comprising:
Second IP address corresponding with the first information is inquired in the preset IP address table；
First IP address is matched with second IP address.
Preferably, second IP address corresponding with the first information is inquired in the preset IP address table, packet
It includes:
Judge in the preset IP address table with the presence or absence of second IP address corresponding with the first information；
When second IP address corresponding with the first information is not present in the preset IP address table, institute is controlled
It states electronic equipment and updates the preset IP address table, so as to have in the preset IP address table corresponding with the first information
Second IP address.
Preferably, determining whether the dns server is held as a hostage according to the matching result, comprising:
When the matching result shows that first IP address matches unsuccessful with second IP address, by the domain
Name analysis request by the first default network is sent to the dns server, receive the dns server return with described the
The corresponding third IP address of one information；
Judge whether the third IP address is identical as second IP address, obtains a judging result；
Determine whether the dns server is held as a hostage according to the judging result.
Preferably, described determine whether the dns server is held as a hostage according to the judging result, comprising:
When the judging result shows that the third IP address is identical as second IP address, the DNS clothes are determined
Business device is held as a hostage；
When the judging result shows that the third IP address and second IP address be not identical, according to preset rules
Determine whether the dns server is held as a hostage.
Preferably, when the judging result shows that the third IP address and second IP address be not identical, according to
Preset rules determine whether the dns server is held as a hostage, specifically:
Judge whether the third IP address and first IP address are consistent；
If the third IP address and first IP address are inconsistent, determine that the dns server is held as a hostage, otherwise,
Determine that the dns server is not held as a hostage.
Preferably, when the judging result shows that the third IP address and second IP address be not identical, it is described
Method further include:
It controls the electronic equipment and second IP address in the preset IP address table is updated to the 3rd IP
Address.
Preferably, first IP address is matched with the second IP address obtained, a matching result is obtained, specifically
Are as follows:
It controls the electronic equipment and domain name analysis request is sent to the dns server by the second default network；
Obtain second IP address corresponding with the first information that the dns server returns；
First IP address is matched with second IP address, obtains the matching result.
A kind of electronic equipment, the electronic equipment include:
Module is obtained, for obtaining the first information, the first information is the information containing domain name to be resolved；
Operation module is sent to domain name system DNS server for the first information for controlling the electronic equipment
Domain name mapping request, obtain the first Internet protocol IP address corresponding with the first information that the dns server returns；
Wherein, first IP address is that the dns server is parsed to obtain according to the domain name for including in the first information
's；
Matching module obtains a matching knot for matching first IP address with the second IP address obtained
Fruit；Wherein, second IP address is preset IP address corresponding with the first information；
Determining module, for determining whether the dns server is held as a hostage according to the matching result.
Preferably, the matching module is specifically used for: inquiry and the first information pair in the preset IP address table
Second IP address answered；First IP address is matched with second IP address.
Preferably, the matching module is corresponding with the first information specifically for inquiring in the preset IP address table
Second IP address, comprising: judge in the preset IP address table with the presence or absence of corresponding with the first information described
Second IP address；When second IP address corresponding with the first information is not present in the preset IP address table, control
It makes the electronic equipment and updates the preset IP address table, so as to have and the first information pair in the preset IP address table
Second IP address answered.
Preferably, the determining module is specifically used for: when the matching result shows first IP address and described the
When the matching of two IP address is unsuccessful, domain name analysis request is sent to the dns server by the first default network, is connect
Receive the third IP address corresponding with the first information that the dns server returns；Judge the third IP address whether with
Second IP address is identical, obtains a judging result；For according to the judging result determine the dns server whether by
It kidnaps.
Preferably, the determining module is specifically used for determining whether the dns server is robbed according to the judging result
It holds, specifically: when the judging result shows that the third IP address is identical as second IP address, determine the DNS
Server is held as a hostage；When the judging result shows that the third IP address and second IP address be not identical, according to pre-
If rule determines whether the dns server is held as a hostage.
Preferably, the determining module is specifically used for showing the third IP address and described second when the judging result
When IP address is not identical, determine whether the dns server is held as a hostage according to preset rules, specifically: judge the 3rd IP
Whether address and first IP address are consistent；If the third IP address and first IP address are inconsistent, described in determination
Dns server is held as a hostage, otherwise, it determines the dns server is not held as a hostage.
Preferably, the electronic equipment further includes update module, for working as the judging result with showing the 3rd IP
When location and second IP address be not identical, the electronic equipment is controlled by the 2nd IP in the preset IP address table
Location is updated to the third IP address.
Preferably, the matching module is specifically used for: controlling the electronic equipment and pass through the second default network to the DNS
Server sends domain name analysis request；Obtain that the dns server returns corresponding with the first information described the
Two IP address；First IP address is matched with second IP address, obtains the matching result.
In the embodiment of the present invention, since the first information is corresponding with preset second IP address, work as institute
When stating the electronic equipment acquisition first information, by sending domain name solution corresponding with the first information to dns server
Analysis request, can obtain first IP address corresponding with the domain name, for example, when website visiting to be carried out, in general,
User can be connected by household radio router with the dns server, to obtain the institute returned by the dns server
The first IP address is stated, if first IP address is identical as preset second IP address, i.e. successful match, it is determined that institute
Stating the first IP address is domain name mapping address corresponding with the first information, safe, i.e., the described dns server is not robbed
It holds, so as to normally be accessed the website, if first IP address can not match with second IP address
Function then illustrates that wireless router DNS is possible to kidnapped, i.e., according to the matching result, the electronic equipment can be true
Whether the fixed dns server is kidnapped, so as to take corresponding prompt or measure, such as pop-up warning window, or
Person carries out killing etc. using special anti-virus tool, prevents hacker from distorting to the malice of wireless router DNS, thus the peace of Logistics networks
Quan Xing.
Detailed description of the invention
Fig. 1 is the broad flow diagram of information processing method in the embodiment of the present invention；
Fig. 2 is the primary structure schematic diagram of electronic equipment in the embodiment of the present invention；
Fig. 3 is the structural schematic diagram of electronic equipment in the embodiment of the present invention.
Specific embodiment
A kind of information processing method is provided in the embodiment of the present invention, is applied to an electronic equipment, and the method can wrap
The acquisition first information is included, the first information is the information containing domain name to be resolved；The electronic equipment is controlled to domain name system
Dns server of uniting sends the domain name mapping for the first information and requests, obtain that the dns server returns with described the
The corresponding first Internet protocol IP address of one information；Wherein, first IP address is the dns server according to described the
The domain name for including in one information is parsed；First IP address is matched with the second IP address obtained,
Obtain a matching result；Wherein, second IP address is preset IP address corresponding with the first information；According to described
Matching result, determines whether the dns server is held as a hostage.
In the embodiment of the present invention, since the first information is corresponding with preset second IP address, work as institute
When stating the electronic equipment acquisition first information, by sending domain name solution corresponding with the first information to dns server
Analysis request, can obtain first IP address corresponding with the domain name, for example, when website visiting to be carried out, in general,
User can be connected by household radio router with the dns server, to obtain the institute returned by the dns server
The first IP address is stated, if first IP address is identical as preset second IP address, i.e. successful match, it is determined that institute
Stating the first IP address is domain name mapping address corresponding with the first information, safe, i.e., the described dns server is not robbed
It holds, so as to normally be accessed the website, if first IP address can not match with second IP address
Function then illustrates that wireless router DNS is possible to kidnapped, i.e., according to the matching result, the electronic equipment can be true
Whether the fixed dns server is kidnapped, so as to take corresponding prompt or measure, such as pop-up warning window, or
Person carries out killing etc. using special anti-virus tool, prevents hacker from distorting to the malice of wireless router DNS, thus the peace of Logistics networks
Quan Xing.
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art
Every other embodiment obtained without making creative work, shall fall within the protection scope of the present invention.
In the embodiment of the present invention, the electronic equipment can be PC(personal computer), notebook, PAD(tablet computer),
The different electronic equipment of mobile phone etc., the invention is not limited in this regard.
In addition, the terms "and/or", only a kind of incidence relation for describing affiliated partner, indicates may exist
Three kinds of relationships, for example, A and/or B, can indicate: individualism A exists simultaneously A and B, these three situations of individualism B.Separately
Outside, character "/" herein typicallys represent the relationship that forward-backward correlation object is a kind of "or".
Referring to Figure 1, the information processing method in the embodiment of the present invention can be applied to electronic equipment, the master of the method
Want process as follows:
Step 101: obtaining the first information, the first information is the information containing domain name to be resolved.
Currently, network has been all made of a kind of unique, general address when distinguishing all networks and host being attached thereto
A unique IP address is assigned in format, i.e. each computer being connected with network and server, in order to
Guarantee the uniqueness of the IP address of every computer on network, user must apply for the registration of to particular organization, which is
Corresponding computer distributes IP address.
Address scheme in network is probably divided into two sets: IP address system and domain name addresses system.This two sets of address systems
It is one-to-one relationship in fact.IP address indicates that each IP address grows 32 bits, by 4 less than 256 with binary number
Number forms, with point interval, such as 100.10.0.1 one IP address of expression between number.Since IP address is digital mark,
It is difficult to remember and write when use, therefore develops a kind of address scheme of symbolism again on the basis of IP address, to replace
The IP address of numeric type, i.e. domain name (Domain Name) refer to a certain on a string of internets with the name composition of point separation
Platform computer or the title for calculating unit, since the address of each symbolism is corresponding with specific IP address, such network
On resource access get up to be easy for much, this character type address corresponding with the numeric type IP address on network, just
Referred to as domain name.Such as a kind of our immediate communication tools of QQ(for being frequently seen) domain name of website is www.qq.com, or
For www.qzone.qq.com, etc..
And domain name mapping refers to domain name (i.e. network address) is corresponded to the network address that true computer can identify,
That is IP address, such as form as 216.239.53.99 transmit network address and content so that computer can be communicated further
Deng.
In the embodiment of the present invention, the mode for obtaining the first information, which can be, operates acquisition by the input of user,
Such as the chained address being used for into related web site in user's webpage clicking, then the electronic equipment can obtain described first
Information.
Wherein, the domain name to be resolved that the first information is included can refer to the net that user will access
Stand corresponding website domain name, such as www.taobao.com.Need to know the website domain if accessing to the website
The corresponding IP address of name, that is, need to parse the website domain name.
Step 102: controlling the electronic equipment and send the domain name for being directed to the first information to domain name system DNS server
Analysis request obtains the first IP address corresponding with the first information that the dns server returns；Wherein, described first
IP address is that the dns server is parsed according to the domain name for including in the first information.
It, can will be with the first information after electronic equipment obtains the first information in the embodiment of the present invention
Corresponding domain name mapping request is sent to the dns server.Usually, the electronic equipment can pass through WLAN first
(Wireless Local Area Networks, WLAN) by domain name analysis request be sent to connection without route
Domain name analysis request is sent to the dns server by device, and by the wireless router, in the DNS service
After device parses corresponding first IP address according to domain name analysis request, which is sent to wireless routing
Device, then first IP address is returned into the electronic equipment by the wireless router, so that the electronic equipment can be with
Website is accessed according to first IP address.
Preferably, first IP address can refer to the solution obtained by wireless router DNS in the embodiment of the present invention
IP address after analysis.In general, domain name analysis request can be sent to the DNS service quickly by wireless router DNS
Device carries out domain name mapping.And some network insertion quotient, such as Beijing Telecom, Shanghai Telecom etc., in order to which user to be accelerated opens net
The speed of page has usually cached the DNS record of many domain names, in this way as a certain network insertion quotient in their dns server
User when opening some webpage, the dns server of network insertion quotient do not need nslookup database, and can be
DNS record in oneself caching directly uses, to accelerate resolution speed, also accordingly accelerates the speed that user accesses website
Degree.
Step 103: first IP address being matched with the second IP address obtained, obtains a matching result；Its
In, second IP address is preset IP address corresponding with the first information.
In the embodiment of the present invention, after obtaining first IP address, can first IP address whether with institute
It is identical to state the second IP address, i.e., matches first IP address with second IP address, it is hereby achieved that described
Matching result.
In the embodiment of the present invention, first IP address is matched with the second IP address obtained, there are two types of can for tool
The mode of energy, wherein first way may is that the electronic equipment has a preset IP address table, in the preset IP address
Second IP address corresponding with the first information is inquired in table；By first IP address and second IP address into
Row matching.
Preferably, the preset IP address table can refer to that one includes common website domain name in the embodiment of the present invention
And its list of corresponding IP address, such as can be white list.The white list can be by special domain name registration service
What mechanism was collected and provided, the electronic equipment can be obtained by network, with what can be inquired as itself
Preset IP address table.And the electronic equipment can also the preset IP address table that has of update periodically or non-periodically, with
The accuracy and integrality for ensuring the preset IP address table prevent the modification due to certain website domain names or corresponding IP address
And lead to not access most satisfied website.For example, the replacement of domain name/IP address.
Usually, IP address corresponding with website domain name present in the preset IP address table is relatively stable, changes
Frequency it is lower, it is therefore contemplated that second IP address inquired in the preset IP address table be exactly and wait solve
The domain name of analysis is corresponding, accurate IP address.It therefore, can be straight after obtaining first IP address and second IP address
It connects and matches first IP address with second IP address, that is, may know that whether the two is identical.Further, since described
Preset IP address table is present in the electronic equipment, then the process inquired according to domain name is relatively simple, quick, is had
Stronger real-time.
Preferably, inquiring institute corresponding with the first information in the preset IP address table in the embodiment of the present invention
The second IP address is stated, can specifically include: being judged in the preset IP address table with the presence or absence of corresponding with the first information
Second IP address；When there is no second IP address corresponding with the first information in the preset IP address table
When, it controls the electronic equipment and updates the preset IP address table, so as to have and described first in the preset IP address table
Corresponding second IP address of information.
I.e. during obtaining second IP address, by the judgement to the preset IP address table, it can determine
Whether need to be updated the preset IP address, so that the preset IP address table is capable of providing IP address more abundant
It is inquired.For example, there is no described in corresponding with domain name to be resolved in the first information in the preset IP address table
When the second IP address, then need to update it is described set IP address table, so as to avoid again it needs to be determined that with the first information
When corresponding IP address, the case where still lookup in the preset IP address table less than corresponding IP address.
In the embodiment of the present invention, the preset IP address table can refer to that record has pair of the IP address of several website domain names
Answer list.For example, wherein may include: one of website domain name for s.taobao.com, corresponding IP address is
42.156.210.6 another one website domain name is www.icbc.com.cn, corresponding IP address is
220.181.64.180, etc..And the electronic equipment can carry out the preset IP address table by background update system
It updates.
Preferably, the preset IP address table of update can be the electronic equipment and pass through domain in the embodiment of the present invention
Newest domain name and the corresponding table of IP address that name registration service mechanism obtains, so that the updated preset IP address table energy
Enough IP address query function is provided for the domain name of new registration.
In the embodiment of the present invention, in the first way, the existing preset IP address table in the electronic equipment, therefore
When it needs to be determined that can rapidly carry out searching corresponding IP in the preset IP address table when IP address corresponding with domain name
Address, and it is matched with first IP address, it is relatively simple quick with matching process due to searching, and required time
It is shorter, there is stronger real-time, have little influence on the web experience of user.
Meanwhile usually, the frequency for changing the corresponding IP address of website domain name is lower, therefore in the preset IP address table
The website domain name of record and the corresponding relationship of IP address are relatively stable.Therefore, by by first IP address with from described pre-
If second IP address inquired in IP address table is matched, can determine described in being returned as the dns server
Whether the first IP address is personation address, to avoid the safety for improving network access using the IP address being maliciously tampered
Property.
Preferably, in the embodiment of the present invention, first IP address and the second IP address obtained are carried out matched the
Two kinds of modes may is that the control electronic equipment sends domain name solution to the dns server by the second default network
Analysis request；Obtain second IP address corresponding with the first information that the dns server returns；By the first IP
Address is matched with second IP address, obtains the matching result.
Domain name analysis request is sent to the dns server in the electronic equipment, with obtaining the first IP
Prior to, concurrently with, or after location, the electronic equipment is also sent domain name analysis request by the described second default network
To the dns server, and obtain parse according to domain name analysis request corresponding with the first information described the
Two IP address, wherein the second default network can be the network that the electronic equipment is connected with the dns server, example
Such as 3rd generation mobile communication technology (3rd-Generation, 3G) network, forth generation mechanics of communication (the4Generation
Mobile communication technology, 4G) network.When the electronic equipment will by the described second default network
When domain name analysis request is sent to the dns server, the dns server can be according to domain name analysis request solution
Second IP address corresponding with the first information is precipitated.At this point it is possible to think to obtain by the described second default network
Second IP address be corresponding with domain name to be resolved, unique accurate IP address.
Step 104: according to the matching result, determining whether the dns server is held as a hostage.
In the embodiment of the present invention, Domain Hijacking is a kind of mode of internet attack, by attacking dns server, or puppet
The method for making dns server, targeted website domain name mapping to the address of mistake is achieved the purpose that can not access target website.
For example, some particular web sites can not be opened when the networks encounter dns server of user being held as a hostage the case where, or even access A
The address of website, opening be the website B the page.If hacker is held as a hostage using dns server implements fishing, even if access
Be correct Internetbank or shopping website address, can also enter the fishing website of hacker's personation.
In the embodiment of the present invention, if first IP address and second IP address carried out by first way
Matching, according to the matching result, determines whether the DNS is held as a hostage, and may include: when the matching result shows described the
When one IP address matches unsuccessful with second IP address, domain name analysis request is sent to by the first default network
The dns server receives the third IP address corresponding with the first information that the dns server returns；Described in judgement
Whether third IP address is identical as second IP address, obtains a judging result；The DNS is determined according to the judging result
Whether it is held as a hostage.
That is, in embodiments of the present invention, if first IP address is determined with by inquiring the preset IP address table
Second IP address when mismatching, domain name analysis request can be sent to by the described first default network described
Dns server to obtain IP address more accurate, corresponding with the first information, i.e., the described third IP address, and passes through
Second IP address is made comparisons with the third IP address, it can be determined that in the preset IP address table with domain name to be resolved
Whether corresponding second IP address is newest IP address, to guarantee that first IP address can be with the first information pair
Correctly IP address answer, unique is matched, and the accuracy of matching process is improved.
Preferably, the first default network can be identical with the described second default network in the embodiment of the present invention
Network, such as be all 3G/4G network.
Since the electronic equipment can be attached by the described first default network with dns server, thus, it can be said that
It is currently corresponding with the first information, unique accurate by the third IP address that the described first default network obtains
IP address.
In the embodiment of the present invention, determines whether the dns server is held as a hostage according to the judging result, may include:
When the judging result shows that the third IP address is identical as second IP address, determine that the dns server is robbed
It holds；When the judging result shows that the third IP address and second IP address be not identical, determined according to preset rules
Whether the DNS is held as a hostage.
That is, in the present invention is implemented, when first IP address matches unsuccessful with second IP address, can incite somebody to action
Second IP address is compared with the third IP address obtained by the described first default network, if it is determined that described
Second IP address is identical as the third IP address, then shows that the preset IP address table can provide accurately for domain-name information
IP address.
For example, the first information includes when website of the user using the mobile phone browser access Industrial and Commercial Bank of China
Domain name to be resolved is www.icbc.com.cn, and the electronic equipment is obtained corresponding with the domain name by wireless router DNS
First IP address is 192.168.1.2, and is by second IP address that the preset IP address table inquires
220.181.64.180 therefore first IP address matched with second IP address it is unsuccessful.At this point, controllable mobile phone passes through
3G network sends identical domain name analysis request to dns server, and the IP address after parsing obtained is
220.181.64.180 that is, described third IP address.By judging it is found that second IP address and the third IP address phase
Together, therefore it can determine that second IP address provided by the preset IP address table is the accurate IP address parsed after the domain name.
Preferably, in the embodiment of the present invention, if the judging result shows the third IP address and the 2nd IP
Address is not identical, then determines whether the dns server is held as a hostage according to preset rules, be specifically as follows: judging the third
Whether IP address and first IP address are consistent；If the third IP address and first IP address are inconsistent, institute is determined
It states dns server to be held as a hostage, otherwise, it determines the dns server is not held as a hostage.
In the embodiment of the present invention, when the third IP address and second IP address be not identical, it is known that, the electronics
In equipment, there may be the feelings of inaccuracy for IP address corresponding with the first information provided by current preset IP address table
Condition.For example, the electronic equipment is not also updated the preset IP address table.At this point, can continue to judge the first IP
Whether address is identical as the third IP address, to further determine that whether the dns server is held as a hostage.
Preferably, in the embodiment of the present invention, if it is determined that the dns server is held as a hostage, then can control the electronics
Equipment executes killing order or the corresponding warning message of output, prompts user's current accessed website dangerous.
In the embodiment of the present invention, when the judging result shows that the third IP address and second IP address be not identical
When, the method can also include: the control electronic equipment by second IP address in the preset IP address table more
It is newly the third IP address.
Usually, the electronic equipment is connectable to normal dns server by network, and obtains and domain name pair
The parsing address answered.Therefore, when the electronic equipment sends domain name analysis request to dns server by default network
When, the parsing address of acquisition returned by the dns server, i.e., the described third IP address be currently with the first information pair
The IP address answered.Therefore, after obtaining the third IP address, can by presently described preset IP address table with described first
Corresponding second IP address of information is updated to the third IP address, to obtain the updated preset IP address
Table, to provide corresponding IP address according to the first information for domain name to be resolved.
Fig. 2 is referred to, based on the same inventive concept, the present invention also provides a kind of electronic equipment, the electronic equipment can be with
Including obtaining module 201, operation module 202, matching module 203 and determining module 204.
The acquisition module 201 can be used for obtaining the first information, and the first information is to contain domain name to be resolved
Information.
The operation module 202 can be used for controlling the electronic equipment and send to domain name system DNS server for institute
The domain name mapping request for stating the first information, it is internet to obtain the dns server returns corresponding with the first information first
Protocol IP address；Wherein, first IP address be the dns server according to the domain name for including in the first information into
Row parsing obtains.
The matching module 203 can be used for matching first IP address with the second IP address obtained, obtain
Obtain a matching result；Wherein, second IP address is preset IP address corresponding with the first information.
The determining module 204 can be used for determining whether the dns server is held as a hostage according to the matching result.
In the embodiment of the present invention, the matching module 203 specifically can be used for: in the preset IP address table inquiry with
Corresponding second IP address of the first information；First IP address is matched with second IP address.
In the embodiment of the present invention, the matching module 203 be specifically used in the preset IP address table inquiry with it is described
Corresponding second IP address of the first information may include: to judge in the preset IP address table with the presence or absence of with described the
Corresponding second IP address of one information；When there is no corresponding with the first information described in the preset IP address table
When the second IP address, controls the electronic equipment and update the preset IP address table, so as to have in the preset IP address table
Second IP address corresponding with the first information.
In the embodiment of the present invention, the determining module 204 specifically can be used for: when the matching result shows described first
When IP address matches unsuccessful with second IP address, domain name analysis request is sent to institute by the first default network
Dns server is stated, the third IP address corresponding with the first information that the dns server returns is received；Judge described
Whether three IP address are identical as second IP address, obtain a judging result；The DNS clothes are determined according to the judging result
Whether business device is held as a hostage.
Preferably, the determining module 204 is specifically used for according to judging result determination in the embodiment of the present invention
Whether dns server is held as a hostage, specifically: when the judging result shows the third IP address and the second IP address phase
Meanwhile determining that the dns server is held as a hostage；When the judging result shows the third IP address and second IP address
When not identical, determine whether the dns server is held as a hostage according to preset rules.
Preferably, the determining module 204 specifically can be used for showing institute when the judging result in the embodiment of the present invention
When stating third IP address and not identical second IP address, determine whether the dns server is held as a hostage according to preset rules,
Specifically: judge whether the third IP address and first IP address are consistent；If the third IP address and described first
IP address is inconsistent, determines that the dns server is held as a hostage, otherwise, it determines the dns server is not held as a hostage.
Preferably, the electronic equipment further includes update module 301 in the embodiment of the present invention.Refer to Fig. 3.
The update module 301 can be used for showing the third IP address with the 2nd IP when the judging result
When location is not identical, the electronic equipment is controlled by second IP address in the preset IP address table and is updated to the third
IP address.
Preferably, the matching module 203 specifically can be used in the embodiment of the present invention: it is logical to control the electronic equipment
It crosses the second default network and sends domain name analysis request to the dns server；Obtain that the dns server returns with institute
State corresponding second IP address of the first information；First IP address is matched with second IP address, is obtained
The matching result.
A kind of information processing method is provided in the embodiment of the present invention, is applied to an electronic equipment, and the method can wrap
The acquisition first information is included, the first information is the information containing domain name to be resolved；The electronic equipment is controlled to domain name system
Dns server of uniting sends the domain name mapping for the first information and requests, obtain that the dns server returns with described the
The corresponding first Internet protocol IP address of one information；Wherein, first IP address is the dns server according to described the
The domain name for including in one information is parsed；First IP address is matched with the second IP address obtained,
Obtain a matching result；Wherein, second IP address is preset IP address corresponding with the first information；According to described
Matching result, determines whether the dns server is held as a hostage.
In the embodiment of the present invention, since the first information is corresponding with preset second IP address, work as institute
When stating the electronic equipment acquisition first information, by sending domain name solution corresponding with the first information to dns server
Analysis request, can obtain first IP address corresponding with the domain name, for example, when website visiting to be carried out, in general,
User can be connected by household radio router with the dns server, to obtain the institute returned by the dns server
The first IP address is stated, if first IP address is identical as preset second IP address, i.e. successful match, it is determined that institute
Stating the first IP address is domain name mapping address corresponding with the first information, safe, i.e., the described dns server is not robbed
It holds, so as to normally be accessed the website, if first IP address can not match with second IP address
Function then illustrates that wireless router DNS is possible to kidnapped, i.e., according to the matching result, the electronic equipment can be true
Whether the fixed dns server is kidnapped, so as to take corresponding prompt or measure, such as pop-up warning window, or
Person carries out killing etc. using special anti-virus tool, prevents hacker from distorting to the malice of wireless router DNS, thus the peace of Logistics networks
Quan Xing.
Specifically, the corresponding computer program instructions of information processing method in the embodiment of the present application can be stored in
CD, hard disk, on the storage mediums such as USB flash disk, when the computer program instructions quilt corresponding with information processing method in storage medium
One electronic equipment reads or is performed, and includes the following steps:
The first information is obtained, the first information is the information containing domain name to be resolved；
It controls the electronic equipment and is asked to the transmission of domain name system DNS server for the domain name mapping of the first information
It asks, obtains the first Internet protocol IP address corresponding with the first information that the dns server returns；Wherein, described
One IP address is that the dns server is parsed according to the domain name for including in the first information；
First IP address is matched with the second IP address obtained, obtains a matching result；Wherein, described
Two IP address are preset IP address corresponding with the first information；
According to the matching result, determine whether the dns server is held as a hostage.
Optionally, when the electronic equipment has a preset IP address table, stored in the storage medium and step
First IP address is matched with the second IP address obtained, corresponding computer instruction is specifically being performed process
In, include the following steps:
Second IP address corresponding with the first information is inquired in the preset IP address table；
First IP address is matched with second IP address
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
Suddenly second IP address corresponding with the first information, corresponding computer instruction are inquired in the preset IP address table
During being specifically performed, include the following steps:
Judge in the preset IP address table with the presence or absence of second IP address corresponding with the first information；
When second IP address corresponding with the first information is not present in the preset IP address table, institute is controlled
It states electronic equipment and updates the preset IP address table, so as to have in the preset IP address table corresponding with the first information
Second IP address
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
It is rapid: according to the matching result, to determine whether the dns server is held as a hostage, corresponding computer instruction is specifically being performed
In the process, include the following steps:
When the matching result shows that first IP address matches unsuccessful with second IP address, by the domain
Name analysis request by the first default network is sent to the dns server, receive the dns server return with described the
The corresponding third IP address of one information；
Judge whether the third IP address is identical as second IP address, obtains a judging result；
Determine whether the dns server is held as a hostage according to the judging result.
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
Rapid: described to determine whether the dns server is held as a hostage according to the judging result, corresponding computer instruction is held specifically
During row, include the following steps:
When the judging result shows that the third IP address is identical as second IP address, the DNS clothes are determined
Business device is held as a hostage；
When the judging result shows that the third IP address and second IP address be not identical, according to preset rules
Determine whether the dns server is held as a hostage.
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
It is rapid: when the judging result shows that the third IP address and second IP address be not identical, to be determined according to preset rules
Whether the dns server is held as a hostage, and corresponding computer instruction includes the following steps: during being specifically performed
Judge whether the third IP address and first IP address are consistent；
If the third IP address and first IP address are inconsistent, determine that the dns server is held as a hostage, otherwise,
Determine that the dns server is not held as a hostage.
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
It is rapid: when the judging result shows that the third IP address and second IP address be not identical, corresponding computer instruction
Further include following steps during being specifically performed:
It controls the electronic equipment and second IP address in the preset IP address table is updated to the 3rd IP
Address.
Optionally, be also stored with other computer instruction in the storage medium, these computer instructions with step
It is rapid: first IP address being matched with the second IP address obtained, obtains a matching result, corresponding computer instruction
During being specifically performed, specifically comprise the following steps:
It controls the electronic equipment and domain name analysis request is sent to the dns server by the second default network；
Obtain second IP address corresponding with the first information that the dns server returns；
First IP address is matched with second IP address, obtains the matching result.
Obviously, various changes and modifications can be made to the invention without departing from essence of the invention by those skilled in the art
Mind and range.In this way, if these modifications and changes of the present invention belongs to the range of the claims in the present invention and its equivalent technologies
Within, then the present invention is also intended to include these modifications and variations.
Claims (12)
1. a kind of information processing method is applied to an electronic equipment, which comprises
The first information is obtained, the first information is the information containing domain name to be resolved；
It controls the electronic equipment and sends the domain for being directed to the first information to domain name system DNS server by wireless router
Name analysis request obtains the first Internet protocol IP address corresponding with the first information that the dns server returns；Its
In, first IP address is that the dns server is parsed according to the domain name for including in the first information；
First IP address is matched with the second IP address obtained, obtains a matching result；Wherein, the 2nd IP
Address is that the electronic equipment passes through the second default network to dns server transmission domain name analysis request, by described
The IP address corresponding with the first information that dns server returns；Wherein, the described second default network includes that the third generation is mobile
Communication technology network or fourth generation mobile communication technology network；
According to the matching result, determine whether the dns server is held as a hostage；
Wherein, first IP address is matched with the second IP address obtained, obtains a matching result, specifically:
It controls the electronic equipment and domain name analysis request is sent to the dns server by the second default network；
Obtain second IP address corresponding with the first information that the dns server returns；
First IP address is matched with second IP address, obtains the matching result.
2. a kind of information processing method is applied to an electronic equipment, which comprises
The first information is obtained, the first information is the information containing domain name to be resolved；
It controls the electronic equipment and sends the domain for being directed to the first information to domain name system DNS server by wireless router
Name analysis request obtains the first Internet protocol IP address corresponding with the first information that the dns server returns；Its
In, first IP address is that the dns server is parsed according to the domain name for including in the first information；
First IP address is matched with the second IP address obtained, obtains a matching result；Wherein, the 2nd IP
Address is preset IP address corresponding with the first information；
According to the matching result, determine whether the dns server is held as a hostage；
Wherein, the electronic equipment have a preset IP address table, by first IP address and obtain the second IP address into
Row matching, obtains a matching result, comprising:
Second IP address corresponding with the first information is inquired in the preset IP address table；
First IP address is matched with second IP address, obtains a matching result；
It is described according to the matching result, determine whether the dns server is held as a hostage, comprising:
When the matching result shows that first IP address matches unsuccessful with second IP address, by domain name solution
Analysis request is sent to the dns server by the first default network, receives believing with described first for the dns server return
Cease corresponding third IP address；Wherein, the described first default network includes that 3rd generation mobile communication technology network or forth generation move
Dynamic communication technology network；
Judge whether the third IP address is identical as second IP address, obtains a judging result；
Determine whether the dns server is held as a hostage according to the judging result.
3. method according to claim 2, which is characterized in that inquiry and the first information in the preset IP address table
Corresponding second IP address, comprising:
Judge in the preset IP address table with the presence or absence of second IP address corresponding with the first information；
When second IP address corresponding with the first information is not present in the preset IP address table, the electricity is controlled
Sub- equipment updates the preset IP address table, so as to have in the preset IP address table corresponding with the first information described
Second IP address.
4. method according to claim 2, which is characterized in that described to determine the dns server according to the judging result
Whether it is held as a hostage, comprising:
When the judging result shows that the third IP address is identical as second IP address, the dns server is determined
It is held as a hostage；
When the judging result shows that the third IP address and second IP address be not identical, determined according to preset rules
Whether the dns server is held as a hostage.
5. method as claimed in claim 4, which is characterized in that when the judging result show the third IP address with it is described
When second IP address is not identical, determine whether the dns server is held as a hostage according to preset rules, specifically:
Judge whether the third IP address and first IP address are consistent；
If the third IP address and first IP address are inconsistent, determine that the dns server is held as a hostage, otherwise, it determines
The dns server is not held as a hostage.
6. method as described in claim 4 or 5, which is characterized in that when the judging result show the third IP address with
When second IP address is not identical, the method also includes:
It controls the electronic equipment and second IP address in the preset IP address table is updated to the third IP address.
7. a kind of electronic equipment, comprising:
Module is obtained, for obtaining the first information, the first information is the information containing domain name to be resolved；
Operation module is sent to domain name system DNS server for institute for controlling the electronic equipment by wireless router
The domain name mapping request for stating the first information, it is internet to obtain the dns server returns corresponding with the first information first
Protocol IP address；Wherein, first IP address be the dns server according to the domain name for including in the first information into
Row parsing obtains；
Matching module obtains a matching result for matching first IP address with the second IP address obtained；Its
In, second IP address is that the electronic equipment passes through the second default network to dns server transmission domain name solution
Analysis request, the IP address corresponding with the first information returned by the dns server；Wherein, the described second default network
Including 3rd generation mobile communication technology network or fourth generation mobile communication technology network；
Determining module, for determining whether the dns server is held as a hostage according to the matching result；
Wherein, the matching module is specifically used for: controlling the electronic equipment and passes through the second default network to the dns server
Send domain name analysis request；With obtaining twoth IP corresponding with the first information that the dns server returns
Location；First IP address is matched with second IP address, obtains the matching result.
8. a kind of electronic equipment, comprising:
Module is obtained, for obtaining the first information, the first information is the information containing domain name to be resolved；
Operation module is sent to domain name system DNS server for institute for controlling the electronic equipment by wireless router
The domain name mapping request for stating the first information, it is internet to obtain the dns server returns corresponding with the first information first
Protocol IP address；Wherein, first IP address be the dns server according to the domain name for including in the first information into
Row parsing obtains；
Matching module obtains a matching result for matching first IP address with the second IP address obtained；Its
In, second IP address is preset IP address corresponding with the first information；
Determining module, for determining whether the dns server is held as a hostage according to the matching result；
Wherein, the matching module is specifically used for: corresponding with the first information described the is inquired in preset IP address table
Two IP address；First IP address is matched with second IP address；
The determining module is specifically used for: when the matching result shows that first IP address is matched with second IP address
When unsuccessful, domain name analysis request is sent to the dns server by the first default network, receives the DNS clothes
The third IP address corresponding with the first information that business device returns；Judge the third IP address whether with the 2nd IP
Location is identical, obtains a judging result；Determine whether the dns server is held as a hostage according to the judging result；Wherein, described
One default network includes 3rd generation mobile communication technology network or fourth generation mobile communication technology network.
9. electronic equipment as claimed in claim 8, which is characterized in that the matching module is specifically used in the default IP
Corresponding with the first information second IP address is inquired in the table of location, comprising: judge in the preset IP address table whether
In the presence of second IP address corresponding with the first information；When there is no believe with described first in the preset IP address table
When ceasing corresponding second IP address, controls the electronic equipment and update the preset IP address table, so that the default IP
There is second IP address corresponding with the first information in address table.
10. electronic equipment as claimed in claim 8, which is characterized in that the determining module is specifically used for according to the judgement
As a result determine whether the dns server is held as a hostage, specifically: when the judging result show the third IP address with it is described
When second IP address is identical, determine that the dns server is held as a hostage；When the judging result shows the third IP address and institute
State the second IP address it is not identical when, determine whether the dns server is held as a hostage according to preset rules.
11. electronic equipment as claimed in claim 10, which is characterized in that the determining module is specifically used for tying when the judgement
When fruit shows that the third IP address and second IP address be not identical, determine that the dns server is according to preset rules
It is no to be held as a hostage, specifically: judge whether the third IP address and first IP address are consistent；If the third IP address with
First IP address is inconsistent, determines that the dns server is held as a hostage, otherwise, it determines the dns server is not held as a hostage.
12. electronic equipment as described in claim 10 or 11, which is characterized in that the electronic equipment further includes update module,
For controlling the electronic equipment when the judging result shows that the third IP address and second IP address be not identical
Second IP address in the preset IP address table is updated to the third IP address.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410062739.5A CN103825895B (en) | 2014-02-24 | 2014-02-24 | A kind of information processing method and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410062739.5A CN103825895B (en) | 2014-02-24 | 2014-02-24 | A kind of information processing method and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103825895A CN103825895A (en) | 2014-05-28 |
| CN103825895B true CN103825895B (en) | 2019-06-25 |
Family
ID=50760723
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410062739.5A Active CN103825895B (en) | 2014-02-24 | 2014-02-24 | A kind of information processing method and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103825895B (en) |
Families Citing this family (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104168339A (en) * | 2014-06-30 | 2014-11-26 | 汉柏科技有限公司 | Method and device for preventing domain name from being intercepted |
| CN104113447B (en) * | 2014-07-10 | 2017-11-10 | 北京蓝汛通信技术有限责任公司 | Monitor the method, apparatus and system of domain name mapping pollution |
| CN105592173B (en) * | 2014-10-23 | 2019-01-01 | 中国移动通信集团公司 | A kind of method for preventing DNS cache from being contaminated, system and local dns server |
| CN105991604A (en) * | 2015-02-27 | 2016-10-05 | 中兴通讯股份有限公司 | Method and device for preventing form domain name hijacking |
| CN105338187A (en) * | 2015-11-16 | 2016-02-17 | 联想(北京)有限公司 | Information processing method and electronic equipment |
| CN106911652B (en) * | 2015-12-23 | 2021-06-04 | 北京奇虎科技有限公司 | Method and device for preventing wireless router configuration information from being tampered with |
| CN105610812B (en) * | 2015-12-24 | 2019-12-06 | 北京奇虎科技有限公司 | Method and device for preventing webpage from being hijacked |
| CN105681358A (en) * | 2016-03-31 | 2016-06-15 | 北京奇虎科技有限公司 | Domain name hijacking detection method, device and system |
| CN105763564A (en) * | 2016-04-19 | 2016-07-13 | 成都知道创宇信息技术有限公司 | DNS hijacking detection method |
| CN105871912A (en) * | 2016-06-03 | 2016-08-17 | 腾讯科技（深圳）有限公司 | Detection method for domain name hijacking, server and mobile terminal |
| CN107528817B (en) * | 2016-06-22 | 2021-05-18 | 阿里巴巴（中国）有限公司 | Domain name hijacking detection method and device |
| CN106302384A (en) * | 2016-07-25 | 2017-01-04 | 中国联合网络通信集团有限公司 | DNS message processing method and device |
| CN106230864A (en) * | 2016-09-22 | 2016-12-14 | 安徽云图信息技术有限公司 | Website security detection system |
| CN106453436B (en) * | 2016-12-21 | 2019-05-31 | 北京奇虎科技有限公司 | A kind of detection method and device of network security |
| CN106790083B (en) * | 2016-12-22 | 2018-05-18 | 掌阅科技股份有限公司 | Detection method, device and the mobile terminal that DNS is kidnapped |
| CN107172006B (en) * | 2017-03-22 | 2020-06-26 | 深信服科技股份有限公司 | Method and device for detecting wireless network malice |
| CN107277025A (en) * | 2017-06-28 | 2017-10-20 | 维沃移动通信有限公司 | A kind of Secure Network Assecc method, mobile terminal and computer-readable recording medium |
| CN109246256A (en) * | 2017-07-10 | 2019-01-18 | 中国电信股份有限公司 | Domain name analytic method and system, credit domain name system server |
| CN107623693B (en) * | 2017-09-30 | 2021-03-19 | 北京奇虎科技有限公司 | Domain name resolution protection method and device, system, computing device, and storage medium |
| CN110912925A (en) * | 2019-12-04 | 2020-03-24 | 北京小米移动软件有限公司 | Method and device for detecting Domain Name System (DNS) hijacking and storage medium |
| CN111372205A (en) * | 2020-02-28 | 2020-07-03 | 维沃移动通信有限公司 | Information prompting method and electronic equipment |
| CN112367229B (en) * | 2020-11-11 | 2022-05-03 | 深圳市欧瑞博科技股份有限公司 | Control method and device of intelligent household equipment, electronic equipment and storage medium |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101827136A (en) * | 2010-03-30 | 2010-09-08 | 联想网御科技(北京)有限公司 | Defense method for domain name system server buffer infection and network outlet equipment |
| CN101834911A (en) * | 2010-03-31 | 2010-09-15 | 联想网御科技(北京)有限公司 | Defense method of domain name hijacking and network outlet equipment |
-
2014
- 2014-02-24 CN CN201410062739.5A patent/CN103825895B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101827136A (en) * | 2010-03-30 | 2010-09-08 | 联想网御科技(北京)有限公司 | Defense method for domain name system server buffer infection and network outlet equipment |
| CN101834911A (en) * | 2010-03-31 | 2010-09-15 | 联想网御科技(北京)有限公司 | Defense method of domain name hijacking and network outlet equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103825895A (en) | 2014-05-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103825895B (en) | A kind of information processing method and electronic equipment | |
| CN108270882B (en) | Domain name resolution method and device, storage medium and electronic device | |
| CN104202360B (en) | The method of accessed web page, device and router | |
| CN103067385B (en) | The method of defence Hijack Attack and fire compartment wall | |
| CN107360184B (en) | Terminal equipment authentication method and device | |
| CN102737119B (en) | The lookup method of URL(uniform resource locator), filter method and relevant device and system | |
| CN106453216A (en) | Malicious website interception method, malicious website interception device and client | |
| CN106657035B (en) | A kind of network message transmission method and device | |
| CN105430711B (en) | Transmission method, device and the equipment of information | |
| JP2003046533A (en) | Network system, authentication method therefor and program thereof | |
| CN113316926B (en) | Domain name processing method, device, electronic equipment and storage medium | |
| CN103581351B (en) | The method and apparatus of network access | |
| CN104994077A (en) | Wireless local area network access equipment identity marking method and device | |
| CN104219339A (en) | Method and device for detecting address resolution protocol attack in local area network | |
| CN108418780A (en) | Filter method and device, system, the dns server of IP address | |
| CN109660552A (en) | A kind of Web defence method combining address jump and WAF technology | |
| CN103916492A (en) | Network device access control method and device | |
| US20070183367A1 (en) | Method and apparatus of searching for and acquiring handover information using dynamic host configuration protocol | |
| CN104253798A (en) | Network security monitoring method and system | |
| CN106161436A (en) | A kind of method preventing domain name system DNS from polluting and gateway | |
| CN108282455A (en) | Web-page requests method, apparatus and domain-name information analysis result processing method, device | |
| CN106411819A (en) | Method and apparatus for recognizing proxy Internet protocol address | |
| CN114466054B (en) | Data processing method, device, equipment and computer readable storage medium | |
| CN108093390A (en) | A kind of smart machine of feature based information finds method | |
| CN106412144A (en) | Network access method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |