CN110427785A

CN110427785A - Acquisition methods and device, the storage medium and electronic device of device-fingerprint

Info

Publication number: CN110427785A
Application number: CN201910667673.5A
Authority: CN
Inventors: 李伟; 张军; 陈春荣; 韩景维
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2019-07-23
Filing date: 2019-07-23
Publication date: 2019-11-08
Anticipated expiration: 2039-07-23
Also published as: CN110427785B

Abstract

The invention discloses a kind of acquisition methods of device-fingerprint and device, storage medium and electronic device.Wherein, this method comprises: obtaining the hardware information of the multiple dimensions of first terminal equipment, wherein, the hardware information of multiple dimensions is obtained by the inner nuclear layer that first method accesses first terminal equipment, first method is different from the mode of the first application programming interface is called, and the first application programming interface is that the operating system of first terminal equipment is application programming interface provided by application program；The intermediate data of the hardware information for identifying corresponding dimension is respectively converted into the hardware information of each dimension；According to the intermediate data that the hardware information of each dimension is converted to, the first device-fingerprint for identifying first terminal equipment is generated.The present invention solves device-fingerprint and is easy the technical issues of being forged.

Description

Acquisition methods and device, the storage medium and electronic device of device-fingerprint

Technical field

The present invention relates to computer fields, and the acquisition methods and device, storage in particular to a kind of device-fingerprint are situated between Matter and electronic device.

Background technique

Currently for device-fingerprint, that is, equipment unique ID calculation method, rely primarily on the IMEI of equipment (International Mobile Equipment Identity, international mobile equipment identification number) carries out calculating acquisition.

But the black production of network often passes through brush machine, upgrading ROM (Read- to fight existing device-fingerprint algorithm Only Memory, read-only memory), format mobile phone, the installation modes such as brush machine software change cell phone system information, to forge Device-fingerprint, so that calculating device-fingerprint by existing method effectively can not carry out unique identification to equipment.

For above-mentioned problem, currently no effective solution has been proposed.

Summary of the invention

The embodiment of the invention provides a kind of acquisition methods of device-fingerprint and device, storage medium and electronic device, with It at least solves device-fingerprint and is easy the technical issues of being forged.

According to an aspect of an embodiment of the present invention, a kind of acquisition methods of device-fingerprint are provided, comprising: obtain first The hardware information of the multiple dimensions of terminal device, wherein the hardware information of multiple dimensions accesses first terminal by first method and sets Standby inner nuclear layer obtains, and first method is different from the mode of the first application programming interface is called, the first application programming Interface is that the operating system of first terminal equipment is application programming interface provided by application program；To each dimension Hardware information is respectively converted into the intermediate data of the hardware information for identifying corresponding dimension；Believed according to the hardware of each dimension The intermediate data being converted to is ceased, the first device-fingerprint for identifying first terminal equipment is generated.

According to another aspect of an embodiment of the present invention, a kind of acquisition device of device-fingerprint is additionally provided, comprising: first obtains Modulus block, for obtaining the hardware information of the multiple dimensions of first terminal equipment, wherein the hardware information of multiple dimensions passes through first The inner nuclear layer that mode accesses first terminal equipment obtains, and the mode of the first application programming interface of first method and calling is not Together, it is application programming provided by application program that the first application programming interface, which is the operating system of first terminal equipment, Interface；First conversion module is respectively converted into the hardware for identifying corresponding dimension for the hardware information to each dimension The intermediate data of information；Generation module is generated and is used for the intermediate data that the hardware information according to each dimension is converted to In the first device-fingerprint of mark first terminal equipment.

Another aspect according to an embodiment of the present invention, additionally provides a kind of storage medium, and meter is stored in the storage medium Calculation machine program, wherein the computer program is arranged to execute the acquisition methods of above equipment fingerprint when operation.

Another aspect according to an embodiment of the present invention, additionally provides a kind of electronic device, including memory, processor and deposits Store up the computer program that can be run on a memory and on a processor, wherein above-mentioned processor passes through computer program and executes The acquisition methods of above-mentioned device-fingerprint.

In embodiments of the present invention, the hardware information that inner nuclear layer obtains multiple dimensions is accessed using by first method, from And the true hardware information of the multiple dimensions of first terminal equipment is obtained, the centre obtained according to the conversion of the hardware information of multiple dimensions Data generate the first device-fingerprint, allow the first device-fingerprint to indicate the hardware information of multiple dimensions, due to first terminal The hardware information of equipment is not easy to be tampered, so that the first device-fingerprint can carry out the mark of uniqueness to first terminal equipment Know.Achieve the purpose that device-fingerprint obtained is not easy to be forged, to realize the device-fingerprint for generating and being not easy to be forged Technical effect, and then solve device-fingerprint and be easy the technical issues of being forged.

Detailed description of the invention

The drawings described herein are used to provide a further understanding of the present invention, constitutes part of this application, this hair Bright illustrative embodiments and their description are used to explain the present invention, and are not constituted improper limitations of the present invention.In the accompanying drawings:

Fig. 1 is a kind of signal of the application environment of the acquisition methods of optional device-fingerprint according to an embodiment of the present invention Figure；

Fig. 2 is a kind of flow diagram of the acquisition methods of optional device-fingerprint according to an embodiment of the present invention；

Fig. 3 is the interaction schematic diagram of terminal device and server according to an embodiment of the present invention；

Fig. 4 is the flow diagram of the acquisition methods of another optional device-fingerprint according to an embodiment of the present invention；

Fig. 5 is the structural schematic diagram of device-fingerprint according to an embodiment of the present invention；

Fig. 6 is the flow diagram of generating device fingerprint according to an embodiment of the present invention；

Fig. 7 is the flow diagram of the acquisition methods of another optional device-fingerprint according to an embodiment of the present invention；

Fig. 8 is a kind of structural schematic diagram of the acquisition device of optional device-fingerprint according to an embodiment of the present invention；

Fig. 9 is a kind of structural schematic diagram of optional electronic device according to an embodiment of the present invention.

Specific embodiment

In order to enable those skilled in the art to better understand the solution of the present invention, below in conjunction in the embodiment of the present invention Attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is only The embodiment of a part of the invention, instead of all the embodiments.Based on the embodiments of the present invention, ordinary skill people The model that the present invention protects all should belong in member's every other embodiment obtained without making creative work It encloses.

It should be noted that description and claims of this specification and term " first " in above-mentioned attached drawing, " Two " etc. be to be used to distinguish similar objects, without being used to describe a particular order or precedence order.It should be understood that using in this way Data be interchangeable under appropriate circumstances, so as to the embodiment of the present invention described herein can in addition to illustrating herein or Sequence other than those of description is implemented.In addition, term " includes " and " having " and their any deformation, it is intended that cover Cover it is non-exclusive include, for example, the process, method, system, product or equipment for containing a series of steps or units are not necessarily limited to Step or unit those of is clearly listed, but may include be not clearly listed or for these process, methods, product Or other step or units that equipment is intrinsic.

According to an aspect of an embodiment of the present invention, a kind of acquisition methods of device-fingerprint are provided, optionally, as one The optional embodiment of kind, the acquisition methods of above equipment fingerprint can be, but not limited to be applied in environment as shown in Figure 1.

In embodiments of the present invention, server 110 can pass through to obtain the device-fingerprint of user equipment 102 It handles engine 114 and executes step S116-118, send acquisition instruction to user equipment 102, user equipment 102 is receiving service In the case that the user that device 110 is sent obtains the acquisition instruction of the device directive of user equipment, it can be executed by processor 106 Step S120 obtains the hardware information of the multiple dimensions of first terminal equipment, wherein the hardware information of multiple dimensions passes through first party The inner nuclear layer that formula accesses first terminal equipment obtains, and first method is different from the mode of the first application programming interface is called, First application programming interface is that the operating system of first terminal equipment is that application programming provided by application program connects Mouthful；Step S122 is respectively converted into the centre of the hardware information for identifying corresponding dimension to the hardware information of each dimension Data；And step S124 is generated according to the intermediate data that the hardware information of each dimension is converted to for identifying first First device-fingerprint of terminal device.Inner nuclear layer is accessed by first method and obtains the hardware information of multiple dimensions, to obtain The true hardware information of first terminal equipment generates first according to the intermediate data that the conversion of the hardware information of multiple dimensions obtains and sets Standby fingerprint, allows the first device-fingerprint to indicate the hardware information of multiple dimensions, due to the hardware information of first terminal equipment It is not easy to be tampered, so that first terminal equipment can be carried out the first device-fingerprint the mark of uniqueness.User equipment 102 is also Step S126-S128 can be executed, to 110 sending device fingerprint of server.Here, user equipment 102 can pass through memory 104 storage device-fingerprints can show device-fingerprint by display 108.Server 110 can be stored by database 112 The device-fingerprint that user equipment 102 is sent.

Optionally, in the present embodiment, the acquisition methods of above equipment fingerprint can be, but not limited to be applied to user equipment In 102, server 110 can be also used for.Wherein, applications client can be installed in above-mentioned user equipment 102, for passing through The applications client and server 110 carry out information exchange, the user equipment 102 can be, but not limited to for mobile phone, tablet computer, The terminal device of the supports such as laptop, PC machine operation applications client.Above-mentioned server 110 and user equipment 102 can be with But it is not limited by network 130 and realizes data interaction, above-mentioned network 130 can include but is not limited to wireless network or wired network Network.Wherein, which includes: the network of bluetooth, WIFI and other realization wireless communications.Above-mentioned cable network may include But it is not limited to: wide area network, Metropolitan Area Network (MAN), local area network.Above-mentioned is only a kind of example, is not limited in any way in the present embodiment to this.

Optionally, as an alternative embodiment, as shown in Fig. 2, the acquisition methods of above equipment fingerprint include:

Step S202 obtains the hardware information of the multiple dimensions of first terminal equipment, wherein the hardware information of multiple dimensions is logical The inner nuclear layer for crossing first method access first terminal equipment obtains, first method and the side for calling the first application programming interface Formula is different, and the first application programming interface is that the operating system of first terminal equipment is application program provided by application program Programming interface；

Step S204 is respectively converted into the hardware information for identifying corresponding dimension to the hardware information of each dimension Intermediate data；

Step S206 is generated according to the intermediate data that the hardware information of each dimension is converted to for identifying first First device-fingerprint of terminal device.

The embodiment of the present invention accesses the hardware information that inner nuclear layer obtains multiple dimensions by first method, to obtain first The true hardware information of the multiple dimensions of terminal device generates the according to the intermediate data that the conversion of the hardware information of multiple dimensions obtains One device-fingerprint allows the first device-fingerprint to indicate the hardware information of multiple dimensions, due to the hardware of first terminal equipment Information is not easy to be tampered, so that the first device-fingerprint can carry out the mark of uniqueness to first terminal equipment.

It here, include inner nuclear layer in first terminal equipment, inner nuclear layer provides management of process, file net for first terminal equipment Network management, the management of system security permission, system and hardware device communication infrastructure etc..Inner nuclear layer can be each of first terminal equipment Kind hardware provides the driving, such as display, audio, bluetooth, power management etc. of bottom.First terminal equipment is for the ease of using journey Sequence accesses inner nuclear layer, and avoids application program from directly accessing inner nuclear layer and cause damages, and the operating system of first terminal equipment is Application program provides the first application programming interface.In embodiments of the present invention, inventor has found that black production can be by changing machine Software etc. carries out HOOK to system function, so that being that the first application program that application program provides is compiled by operating system Journey interface hardware information accessed when obtaining hardware information is not the true hardware information of inner nuclear layer feedback, but passes through Cross hook HOOK treated data.So in embodiments of the present invention, by with call first application programming interface The different first method of mode accesses inner nuclear layer, to obtain the hardware information of first terminal equipment, to get first terminal The true hardware information of equipment.Since the hardware information of first terminal equipment is associated with the hardware of first terminal equipment, carry out The operations such as brush machine will not change the hardware of terminal device, so as to according in the first device-fingerprint for indicating hardware information First object field determines terminal device.The hardware information obtained in the embodiment of the present invention according to access inner nuclear layer and acquisition The device-fingerprint that system information generates, so that device-fingerprint is not easy to be forged.

In alternative embodiment of the present invention, the first mesh can be carried according in the first device-fingerprint of intermediate data generation Marking-up section is used to indicate the hardware information of the first equipment.Optionally, the system of the multiple dimensions of first terminal equipment can also be obtained Information, so that system information is converted to change data, according to intermediate data and change data, the equipment for generating the first equipment refers to Line.At this point, carrying first object field in device-fingerprint, the second target word for indicating system information can also be carried Section, so that being changed according to the system environments that the first device-fingerprint can also observe first terminal equipment, than such as whether there is brush Machine behavior etc..

It in embodiments of the present invention, may include: central processing unit (Central Processing for hardware information Unit, abbreviation CPU), memory, real-time clock RCT, wireless network card MAC Address Wlan0mac, NIC address P2p0mac, mobile phone sheet Machine IP (Internet Protocol Address, Internet protocol address), gateway mac (Media Access Control, Medium access control) address.It may include: list of application information, terminal attributive information, terminal environments letter for system information Breath, terminal document information, sensor information etc..Here, list of application information may include: the application installed on terminal device Program-package name, version, set-up time etc..Terminal environments information may include: the resolution ratio of terminal display screen, ROM size, CPU Frequency, ROOT etc..Terminal document information may include: CPU file, memory file, font file number, APP file etc..Sensing Device information may include: sensor name, version, supplier, error etc..

Optionally, the hardware information of the multiple dimensions of first terminal equipment is obtained, comprising: call the target of first terminal equipment System application programming interface in layer accesses the inner nuclear layer of first terminal equipment, to obtain the hardware letter of multiple dimensions Breath, wherein the system application programming interface in destination layer is used to access the hardware information in inner nuclear layer, and first method includes The mode of system application programming interface in invocation target layer.Here it is possible to the operation by calling first terminal equipment System application programming interface in the destination layer of system accesses inner nuclear layer, to obtain hardware information.It is understood that It is, here the accessible inner nuclear layer of system application programming interface in destination layer, to obtain hardware information, and the system is answered It is different from the first application programming interface with Program Interfaces.So as to avoid opposite first application program such as black production from compiling The request that journey interface is sent carries out HOOK.

Optionally, the system application programming interface in the destination layer of first terminal equipment is called to access first terminal The inner nuclear layer of equipment, to obtain the hardware information of multiple dimensions, comprising: the target virtual machine layer of first terminal equipment is called in reflection The first system application programming interface access the inner nuclear layer of first terminal equipment, to obtain the hardware letter of multiple dimensions Breath；Or the second system application programming interface of the local ccf layer of first terminal equipment is called to access first terminal equipment Inner nuclear layer, to obtain the hardware information of multiple dimensions.In embodiments of the present invention, it can be called in such a way that reflection is called Dalvik layers of target virtual machine of the first system application programming interface, to obtain hardware information.Alternatively, passing through local frame Native layers of frame of second system application programming interface directly acquires hardware information.In embodiments of the present invention, by more The technological means of bottom can be to avoid the skill of conventional brush machine, modification cell phone system API to obtain the hardware of first terminal equipment Art means, to get correct hardware information.

Optionally, the hardware information for obtaining the multiple dimensions of first terminal equipment includes: the kernel for reading first terminal equipment Record has the file destination of the hardware information of multiple dimensions in layer, obtains the hardware information of the multiple dimensions of first terminal equipment, the One mode includes reading the mode of file destination.In embodiments of the present invention, hard due to often having in the presence of record in terminal device The file of part information, so, there can be the file destination of hardware information to obtain hardware information by reading record in inner nuclear layer, from And false hardware information can be reported by HOOK means to avoid black produce.Here it is possible to understand, the hardware of multiple dimensions Information may be recorded in a file destination, it is also possible to it is separately recorded in multiple file destinations, so can be by every One file destination is read out, and obtains the hardware information of multiple dimensions.

Optionally, reading record in the inner nuclear layer of first terminal equipment has the file destination of hardware information of multiple dimensions, The hardware information for obtaining the multiple dimensions of first terminal equipment includes: the model information for obtaining first terminal equipment, is believed by type Breath-hardware information storage location mapping relations determines that record has the storage of first object file of the hardware information of multiple dimensions Position；The first object file at storage location is read, the hardware information of multiple dimensions is obtained；Or the institute in first terminal equipment Determine that record has the second file destination of the hardware information of multiple dimensions in the file of storage；The second file destination is read, is obtained The hardware information of multiple dimensions.For the terminal device of different model, the position for being stored with the file of the information of hardware may be mutually It is not identical, it in embodiments of the present invention, can be according to the model information and model information-hardware information of first terminal equipment Storage location mapping relations determine the first object file for being stored with hardware information, remember to get in first object file The hardware information of load.It is understood that can be stored in for model information-hardware information storage location mapping relations In one terminal device, it is also possible to after getting model information, the request for carrying model information, service is sent to server Device is according to carrying in request transmitted by model information-hardware information storage location mapping relations and first terminal equipment Model information, determines the storage location for being stored with the file of hardware information, which is sent to first terminal by server Equipment, so that first terminal equipment can get first object file according to storage location.It is understood that at this In inventive embodiments, according to determining be stored with hardware information first of model information-hardware information storage location mapping relations The storage location of file destination can have it is multiple, can be to each storage location there are multiple storage locations The file at place is read out, to get hardware information.It is understood that on the books due to being stored in first terminal equipment The file of hardware information can also be by being stored in traversal first terminal equipment so in alternative embodiment of the present invention The mode of file gets the hardware information recorded in the second file destination.

Optionally, the hardware information for obtaining the multiple dimensions of first terminal equipment includes: that operation is set for obtaining first terminal The inner nuclear layer of the state viewing command access first terminal equipment of standby hardware state, wherein hardware state includes multiple dimensions Hardware information, first method includes the mode of operating status viewing command；From first terminal equipment responsive state viewing command The status information fed back, obtains the hardware information of multiple dimensions, wherein the hardware letter of multiple dimensions is carried in status information Breath.Here, the state viewing command to match with the operational order of first terminal equipment can also be run, to be according to operation System responds in the status information that the state viewing command is fed back and obtains hardware information.By taking Android system as an example, tune can be passed through Hardware information is directly acquired with linux order line.It is understood that the embodiment of the present invention passes through calling linux order The hardware information for obtaining multiple dimensions can be applied to the system based on linux.

Optionally, the hardware information for obtaining the multiple dimensions of first terminal equipment includes: the loophole for detecting first terminal equipment Information；The mesh of the application providing system permission in first terminal equipment is existed in vulnerability information instruction first terminal equipment In the case of marking loophole, system permission is obtained by target loophole；The access first terminal equipment configured by system permission The permission of system accesses the inner nuclear layer of first terminal equipment, to obtain the hardware information of multiple dimensions, wherein first method packet It includes in such a way that target loophole obtains system permission.Here, in the operating system of first terminal equipment, there are system vulnerabilities In the case of, the permission of access inner nuclear layer can be got by the system vulnerability, to be directly obtained hardware information.

It is understood that the alternative embodiment of hardware information is obtained provided by above-mentioned to be used in conjunction with each other, from And in the case where a kind of mode of alternative embodiment can not get hardware information, it can be using disclosed in other embodiments Method obtains hardware information.It is, first method includes: the system in invocation target layer in alternative embodiment of the present invention The mode of application programming interface, the mode of operating status viewing command, passes through target loophole at the mode for reading file destination The mode for obtaining system permission can use one of aforesaid way or a variety of when obtaining the hardware information of multiple dimensions Mode.It is understood that above-mentioned optional first method is only optional way of the invention, rising limit is not made to this present invention It is fixed.

Optionally, the hardware information of each dimension is respectively converted into the hardware information for identifying corresponding dimension Between data, comprising: to the hardware information of each dimension pass through respectively cyclic redundancy check (CRC) algorithm coding obtain it is corresponding in Between data.In embodiments of the present invention, cyclic redundancy check (CRC) (Cyclic Redundancy Check) algorithm can be passed through Hardware information is encoded, to obtain intermediate data.It is understood that passing through cyclic redundancy check (CRC) algorithm coding The intermediate data of acquisition can not inversely decode the data before being encoded, and so as to realize that data desensitize, both protect use The data at family, and can be converted according to true hardware information and obtain the intermediate data for being used for generating device fingerprint.In the present invention It, can also be by MD5 Message Digest 5 (MD5Message-Digest Algorithm) to hardware information in alternative embodiment It is encoded, to obtain intermediate data.

Optionally, the intermediate data being converted to according to the hardware information of each dimension is generated for identifying first eventually First device-fingerprint of end equipment, comprising: intermediate data according to target order combination is obtained into the first device-fingerprint, wherein first It is carried in device-fingerprint identical with the quantity of intermediate data for identifying the first mesh of the hardware information of each dimension Marking-up section, target order are used to indicate the dimension of hardware information corresponding to each first object field.Implement in the present invention In example, intermediate data according to target order combination is obtained into the first device-fingerprint, so that every in the first device-fingerprint obtained Order of the corresponding intermediate data of the hardware information of a dimension in device-fingerprint be it is identical, so as to different equipment Fingerprint in first object field compare, to judge whether the hardware information of corresponding dimension identical.It is understood that , since hardware information is not easy to be tampered, so the corresponding first object field of hardware information in each dimension is all the same In the case where, it can determine that equipment represented by two device-fingerprints is identical equipment.For combined mode, can be by Target data is added in target data structure according to target order.

Optionally, in embodiments of the present invention, identification field and intermediate data according to target order combination can also be obtained First device-fingerprint.Here, identification field can be located at first in the first device-fingerprint, consequently facilitating according to the identification word Section determines data type, that is, determines that the data are device-fingerprint.For example, the embodiment of the present invention can also include: by first Device-fingerprint is sent to server.Server, can be according to the first device-fingerprint in the case where receiving the first device-fingerprint In identification field determine that the data that receive are device-fingerprint.Optionally, server, can also when needing to carry out device authentication With active to terminal device sending device fingerprint acquisition instruction, thus to premises equipment requests device-fingerprint.

Optionally, the above method further include: obtain the system information of the multiple dimensions of first terminal equipment；To each dimension System information be respectively converted into the change data of the system information for identifying corresponding dimension；

According to the intermediate data that the hardware information of each dimension is converted to, generate for identifying first terminal equipment First device-fingerprint includes: that the intermediate data being converted to according to the hardware information of each dimension and each dimension are The change data that system information is converted to, generates the first device-fingerprint for identifying first terminal equipment, wherein the first equipment It is carried in fingerprint identical with the quantity of intermediate data for identifying the first object word of the hardware information of each dimension Section, and it is identical with the quantity of change data for indicating the second aiming field of the system information of each dimension.

In embodiments of the present invention, the system information of the multiple dimensions of first terminal equipment can also be obtained, thus in Between data and system information conversion obtain change data, generating device fingerprint, so that device-fingerprint may be used to indicate that end The system information of end equipment, the device-fingerprint so as to be obtained according to different time judge that the system information of terminal device is signified The variation for the system environments shown.

Optionally, the system information for obtaining the multiple dimensions of first terminal equipment includes: that the first application programming is called to connect Mouthful, to obtain the system information of multiple dimensions.It can be by calling the first application for the acquisition of the system information of multiple dimensions The mode of Program Interfaces obtains.Of course, it should be understood that the multiple dimensions of above-mentioned acquisition can also be passed through for system information The first method of the hardware information of degree obtains.It is, in alternative embodiment of the present invention system can be obtained by first method System information.

, in alternative embodiment of the present invention, use identical with the quantity of intermediate data is carried in the first device-fingerprint In the first object field for the hardware information for identifying each dimension, and it is identical with the quantity of change data for indicating every Second aiming field of the system information of one dimension, the device-fingerprint so as to be obtained according to different time compare, According to first object field determine two equipment corresponding to terminal device hardware information it is whether identical, thus judge whether be Identical terminal device.Determining that two device-fingerprints are the device-fingerprint of the same terminal device according to first object field In the case of, can also determine system information according to the second aiming field indicated by system environments variation.For example, for first Terminal device, the first device-fingerprint got for the first time are A1A2A3B1B2B3, wherein A1, A2, A3 are respectively one first Aiming field indicates that the intermediate data of the converted acquisition of the hardware information of a dimension, B1, B2, B3 are respectively second mesh Marking-up section respectively indicates the change data of the converted acquisition of system information of a dimension, gets an equipment again later and refers to Line is A1A2A3B6B2B3, it is to be understood that since the equipment of the embodiment of the present invention fingerprint is formed according to target order, So the A1A2A3 in A1A2A3B6B2B3 is respectively a first object field, according to first object field A1, A2, A3 and First object field in one device-fingerprint A1A2A3B1B2B3 is all the same, then can indicate the complete phase of hardware information of the two Together, indicate that the two is identical terminal device.Here, second aiming field is changed, and B1 has become B6, this can be with The system information of a dimension according to represented by the field determines variation transmitted by the system environments of the current terminal device. Here it is possible to understand, for the hardware of identical model, unique encodings, state etc. be would also vary from, and accordingly should The hardware information of hardware is also different.So, can be true in the case where the first object field of expression hardware information is identical Both fixed is identical hardware device.

Optionally, according to intermediate data, after generating the first device-fingerprint for identifying first terminal equipment, method Further include: obtain the second device-fingerprint that second terminal equipment reports；First object field in the first device-fingerprint and the In the case that first object field in two device-fingerprints is all the same, determine that second terminal equipment is first terminal equipment.

In embodiments of the present invention, in the case where getting the second device-fingerprint, can be referred to by comparing the second equipment The first object field in first object field and the first device-fingerprint in line, in the first object field of two device-fingerprints In the case where all the same, it can determine that second terminal equipment and first terminal equipment are identical terminal device, thus according to setting The hardware information distinguishing terminal equipment that first object field in standby fingerprint is identified.It is understood that the step can be by First terminal equipment executes, and can also be executed by server.

Optionally, after obtaining the second device-fingerprint that second terminal equipment reports, method further include: comparison second is set The second aiming field in the second aiming field and the first device-fingerprint in standby fingerprint；The first mesh in the first device-fingerprint In the case that first object field in marking-up section and the second device-fingerprint is all the same, according to the second device-fingerprint and the first equipment The second different aiming field between fingerprint, determines system ring indicated by the system information of the correspondence dimension of first terminal equipment Border variation.

In embodiments of the present invention, in the case where first object field is all the same, it can determine that second terminal equipment is First terminal equipment further can also be according in the second aiming field and the first device-fingerprint in the second device-fingerprint The second aiming field difference, whether the system for determining first terminal equipment change, so as to judge current to be Environment unite with the presence or absence of behaviors such as brush machines.It is understood that the step can be executed by first terminal equipment, it can also be by taking Business device executes.It is understood that in the first object field in the first device-fingerprint and first in the second device-fingerprint Aiming field is all the same, and the second aiming field of the second device-fingerprint and the second aiming field of the first device-fingerprint are all the same In the case where, it can determine that system environments indicated by the system information of first terminal equipment does not change.It is understood that It is that the second aiming field can only indicate whether the corresponding system information of the second aiming field changes.

It is illustrated below with reference to method of the Fig. 3 to the embodiment of the present invention.

S302, server 31 is to 32 sending device fingerprint acquisition instruction of terminal device, wherein the device-fingerprint acquisition instruction It is used to indicate 32 generating device fingerprint of terminal device；

S304, terminal device 32 obtains the hardware information of multiple dimensions by first method, and obtains multiple dimensions System information, according to the system information generating device fingerprint of the hardware information of multiple dimensions and multiple dimensions.

Device-fingerprint is sent to server 31 by S306, terminal device 32.Here, server 31 is available refers to equipment Line, to be verified according to device-fingerprint to current equipment.Such as it when terminal device carries out delivery operation, will acquire Device-fingerprint compared into the third device-fingerprint for verification for crossing verifying with pre-stored, so that judgement is current Whether terminal device is the terminal device to match with third device-fingerprint, so as to verify to payment environment.

For the generating device fingerprint of above-mentioned S304 only, specifically, as shown in Figure 4, in embodiments of the present invention, terminal Equipment 32 can execute following steps generating device fingerprint:

S402 obtains the hardware information and system information of multiple dimensions；

S404, the hardware information and system information of each dimension calculate separately CRC；

S406 integrates the CRC of multiple dimensions；

S408, generating device fingerprint, device-fingerprint here are that the CRC of multiple dimensions integrates data obtained；

As shown above, in alternative embodiment of the present invention, the hardware letter of terminal device can be obtained from 11 dimensions Breath and system information.Dimension 1-7 is hardware information, and dimension 8-11 is system information.In each dimension, any one is got Data content can all add up and carry out CRC check calculating.To generate a crc value of current dimension.11 dimensions are total to be generated 11 crc values, some of them dimension are key message, these information are the unique informations of device-fingerprint, and other information is to refer to Line is constant to ask under money, observes the environmental turbulence point of terminal device, than such as whether there is brush machine behavior, if has brush ROM behavior, is It is no to have installation software action etc..Here, by data head, tissue and assembly is carried out to 11 CRC, generates and finally reports server Device-fingerprint.To which by way of calculating CRC, realization reports the data of server to desensitize completely.Device-fingerprint reports clothes It is engaged in after device, server can be parsed according to data head, due to obtaining device-fingerprint, server by the way of calculating CRC Reverse-direction derivation initial data cannot be carried out according to the crc value reported, it is ensured that the data safety of terminal device.

As shown in Figure 5, device-fingerprint obtained and the device-fingerprint for being used to compare can be compared, thus root Judge whether it is identical equipment according to the data in hardware information 51, according in system information 52 terminal device IP and routing MAC judges whether network environment changes, and can also judge that terminal is set according to sensor, the hardware environment etc. in system information Whether standby system is modified.

It is illustrated below with reference to Fig. 6 to obtaining device-fingerprint by way of calculating CRC.

In the case where including multiple items of information in the system information of the hardware information of dimension or a dimension, with one In the case that the hardware information of a dimension includes CPU and memory information, in the hardware information for getting the dimension, execute S602, gets current information item, such as CPU information, judges whether CPU information was performed CRC calculating at this time, if being not carried out CRC calculating then executes S604, the CRC and current information that will be generated according to an item of information in the hardware information of a dimension , it is encoded into new CRC.It is understood that first item of information in the hardware information that current information item is the dimension In the case where, that is, there is no in the case where history entries CRC, then CRC is encoded into according to currentitem.S606 is executed, judgement is It is no to meet termination condition, it is, with the presence or absence of the item of information for not carrying out CRC coding in the hardware information of the dimension.For example, There are also memory informations, then repeat S602-S604, to obtain CRC corresponding to the hardware information of the dimension.To multiple dimensions After the hardware information of each of hardware information of degree dimension carries out above-mentioned coding, the hardware information coding of corresponding dimension is obtained Intermediate data afterwards executes S608, and each intermediate data corresponding to multiple dimensions merges, and the CRC after merging is determined For the device-fingerprint of present terminal equipment.As shown in FIG. 6, device-fingerprint A1A2A3A4 ... F1F2F3F4 includes each dimension Coded data after the hardware information of degree and the system information CRC coding of each dimension, is obtained with CPU and memory information coding 0 × A1A2A3A4 of coded data for, can whether identical according to the coded data when carrying out device-fingerprint comparison, sentence Whether the CPU and memory of disconnected two equipment are identical.

In embodiments of the present invention, it due to obtaining hardware information by first method, is enable to acquisition terminal and sets Standby true hardware information, allows device-fingerprint to resist brush machine, the behaviors such as factory reset.Such as there are SIM card and nothing When SIM card, for indicating that the data of hardware information can remain unchanged in device-fingerprint；There is wlan network and without wlan network When, for indicating that the data of hardware information can remain unchanged in device-fingerprint；There is GPRS network and when without GPRS network, equipment For indicating that the data of hardware information can remain unchanged in fingerprint；Before ROOT terminal device and after ROOT terminal device, equipment For indicating that the data of hardware information can remain unchanged in fingerprint；Before terminal device factory reset, terminal device restores After factory is set, for indicating that the data of hardware information can remain unchanged in device-fingerprint；Format the SD card of terminal device Before, after the SD card for formatting terminal device, for indicating that the data of hardware information can remain unchanged in device-fingerprint；Terminal is set Before standby brush ROM, after terminal device brush ROM (different editions ROM), for indicating that the data of hardware information can protect in device-fingerprint It holds constant；Terminal device is changed by key software of changing planes before terminal device and after changing, for indicating hardware in device-fingerprint The data of information can remain unchanged；Restart before terminal device and after restarting, for indicating the number of hardware information in device-fingerprint According to can remain unchanged；System address randomization can also be kept in device-fingerprint for indicating that the data of hardware information can not Become, such as the randomization of 9 address mac Android, the randomization of the address Q mac Android, hardware information can't occur at this time Variation, so that for indicating that the data of hardware information can remain unchanged in device-fingerprint.It is understood that in this hair In bright embodiment, judge whether terminal device is identical set by the data for indicating hardware information in device-fingerprint It is standby, so above-mentioned change system or the mode of software can't make the uniqueness hair of the device-fingerprint instruction terminal equipment generated Changing.

Below with reference to Fig. 7, the embodiment of the present invention is further detailed by way of example.

S702 obtains the hardware information of the multiple dimensions of first terminal equipment and the system information of multiple dimensions；Here, for The hardware information of multiple dimensions is obtained by first method, to be got very by the first method of the inner nuclear layer of access system Real hardware information, can obtain system information by first method, can also be what application program provided by system Api interface obtains.It is understood that in embodiments of the present invention, needing to indicate hardware letter in the device-fingerprint by generation The field of breath determines the uniqueness of equipment, so hardware information is needed to obtain by first method.It is for system information For judging whether the system environments of terminal device changes, so even if being hacked the system information for producing attack and obtaining falseness It will not influence the identification for judging to carry out terminal device uniqueness according to the device-fingerprint of generation.

It is corresponding to pass through the acquisition of cyclic redundancy check (CRC) algorithm coding to the hardware information of each dimension respectively by S704 Intermediate data；

It is corresponding to pass through the acquisition of cyclic redundancy check (CRC) algorithm coding to the system information of each dimension respectively by S706 Change data；

Intermediate data and change data according to target order combination are obtained the first device-fingerprint by S708；Here it is possible to according to Preconfigured order is ranked up combination to intermediate data and change data, to obtain the first device-fingerprint.Here in advance The order of configuration is used to indicate the system information of intermediate data corresponding to the hardware information of each dimension He each dimension Order of the corresponding change data in device-fingerprint.

S710 obtains the second device-fingerprint that second terminal equipment reports；In embodiments of the present invention, available to Two device-fingerprints, to whether judge terminal device indicated by two fingerprints by the first device-fingerprint and the second device-fingerprint For identical terminal device.

S712, it is homogeneous in the first object field in the first device-fingerprint and the first object field in the second device-fingerprint With in the case where, determine that second terminal equipment is first terminal equipment；Here, since hardware information is difficult to be tampered, so In the identical situation of first object field instruction hardware information in device-fingerprint, it can determine indicated by two device-fingerprints Terminal device is identical terminal device.

S714, it is homogeneous in the first object field in the first device-fingerprint and the first object field in the second device-fingerprint With in the case where, according to the second aiming field different between the second device-fingerprint and the first device-fingerprint, first terminal is determined The variation of system environments indicated by the system information of the correspondence dimension of equipment.In the embodiment of the present invention, device-fingerprint includes the One aiming field and the second aiming field, first object field are used to indicate hardware information, and the second aiming field, which is used to indicate, is System information, so as to judge whether the terminal of two device-fingerprints instruction is identical equipment, root according to first object field Determine the variation of system environments indicated by corresponding system information, according to the second aiming field so as to be to terminal device No brush machine etc. is inferred.

It should be noted that for the various method embodiments described above, for simple description, therefore, it is stated as a series of Combination of actions, but those skilled in the art should understand that, the present invention is not limited by the sequence of acts described because According to the present invention, some steps may be performed in other sequences or simultaneously.Secondly, those skilled in the art should also know It knows, the embodiments described in the specification are all preferred embodiments, and related actions and modules is not necessarily of the invention It is necessary.

Other side according to an embodiment of the present invention additionally provides a kind of for implementing the acquisition side of above equipment fingerprint The acquisition device of the device-fingerprint of method.As shown in figure 8, the device includes: the first acquisition module 802, first terminal equipment is obtained The hardware information of multiple dimensions, wherein the hardware information of multiple dimensions accesses the kernel of first terminal equipment by first method Layer obtains, and first method is different with the mode of the first application programming interface is called, and the first application programming interface is the The operating system of one terminal device is application programming interface provided by application program；First conversion module 804, for pair The hardware information of each dimension is respectively converted into the intermediate data of the hardware information for identifying corresponding dimension；Generation module 806, for the intermediate data that the hardware information according to each dimension is converted to, generate for identifying first terminal equipment First device-fingerprint.

Optionally, the first acquisition module includes: call unit, the system in destination layer for calling first terminal equipment Application programming interface accesses the inner nuclear layer of first terminal equipment, to obtain the hardware information of multiple dimensions, wherein target System application programming interface in layer is used to access the hardware information in inner nuclear layer, and first method includes in invocation target layer System application programming interface mode.Here it is possible to the destination layer of the operating system by calling first terminal equipment In system application programming interface access inner nuclear layer, to obtain hardware information.It is understood that destination layer here In the accessible inner nuclear layer of system application programming interface, to obtain hardware information, and system application programming connects Mouth is different from the first application programming interface.So as to avoid opposite first application programming interface such as black production from sending Request carries out HOOK.

Optionally, call unit is specifically used for: the first system of the target virtual machine layer of first terminal equipment is called in reflection Application programming interface accesses the inner nuclear layer of first terminal equipment, to obtain the hardware information of multiple dimensions；Or call the The second system application programming interface of the local ccf layer of one terminal device accesses the inner nuclear layer of first terminal equipment, with Obtain the hardware information of multiple dimensions.In embodiments of the present invention, can reflection call by way of invocation target virtual machine Dalvik layers of the first system application programming interface, to obtain hardware information.Alternatively, passing through local native layers of frame Second system application programming interface directly acquire hardware information.In embodiments of the present invention, pass through the technology of more bottom Means, to obtain the hardware of first terminal equipment, can to avoid conventional brush machine, modify cell phone system API technological means, thus Get correct hardware information.

Optionally, the first acquisition module includes: reading unit, and recording in the inner nuclear layer for reading first terminal equipment has The file destination of the hardware information of multiple dimensions, obtains the hardware information of the multiple dimensions of first terminal equipment, and first method includes Read the mode of file destination.In embodiments of the present invention, due to often there is the text of hardware information in terminal device in the presence of record Part, so, there can be the file destination of hardware information to obtain hardware information by reading record in inner nuclear layer, so as to avoid Black produce reports false hardware information by HOOK means.Here it is possible to understand, the hardware information of multiple dimensions may be remembered Record is in a file destination, it is also possible to it is separately recorded in multiple file destinations, so can be by each target text Part is read out, and obtains the hardware information of multiple dimensions.

Optionally, reading unit is specifically used for: obtaining the model information of first terminal equipment, passes through model information-hardware Storage position information mapping relations determine that record has the storage location of first object file of the hardware information of multiple dimensions；It reads The first object file at storage location is taken, the hardware information of multiple dimensions is obtained；Or stored in first terminal equipment Determine that record has the second file destination of the hardware information of multiple dimensions in file；The second file destination is read, multiple dimensions are obtained The hardware information of degree.For the terminal device of different model, the position for being stored with the file of the information of hardware may be different, It in embodiments of the present invention, can be according to model information and model information-hardware information storage location of first terminal equipment Mapping relations determine the first object file for being stored with hardware information, to get the hardware recorded in first object file Information.It is understood that model information-hardware information storage location mapping relations can be stored in first terminal and be set In standby, it is also possible to after getting model information, the request for carrying model information is sent to server, server is according to machine The model information carried in request transmitted by type information-hardware information storage location mapping relations and first terminal equipment, Determine the storage location for being stored with the file of hardware information, which is sent to first terminal equipment by server, thus First terminal equipment is allowed to get first object file according to storage location.It is understood that implementing in the present invention In example, according to the determining first object file for being stored with hardware information of model information-hardware information storage location mapping relations Storage location can have it is multiple, can be to the file at each storage location there are multiple storage locations It is read out, to get hardware information.It is understood that due to storing hardware information on the books in first terminal equipment File can also pass through the side of the file stored in traversal first terminal equipment so in alternative embodiment of the present invention Formula gets the hardware information recorded in the second file destination.

Optionally, the first acquisition module includes: running unit, for running the hardware shape for obtaining first terminal equipment The inner nuclear layer of the state viewing command access first terminal equipment of state, wherein hardware state includes the hardware information of multiple dimensions, First method includes the mode of operating status viewing command；First acquisition unit, for being looked into from first terminal equipment responsive state It sees the status information that order is fed back, obtains the hardware information of multiple dimensions, wherein carry multiple dimensions in status information Hardware information.Here, the state viewing command to match with the operational order of first terminal equipment can also be run, thus according to Operating system responds in the status information that the state viewing command is fed back and obtains hardware information.It, can be with by taking Android system as an example Hardware information is directly acquired by calling linux order line.

Optionally, the first acquisition module includes: detection unit, for detecting the vulnerability information of first terminal equipment；Second Acquiring unit, for existing for the application providing system in first terminal equipment in vulnerability information instruction first terminal equipment In the case of the target loophole of permission, system permission is obtained by target loophole；Third acquiring unit, for passing through system permission institute The permission of the system of the access first terminal equipment of configuration, accesses the inner nuclear layer of first terminal equipment, to obtain multiple dimensions Hardware information, wherein first method includes in such a way that target loophole obtains system permission.Here, in first terminal equipment Operating system there are in the case where system vulnerability, can be got by the system vulnerability access inner nuclear layer permission, thus It is directly obtained hardware information.

Optionally, the first conversion module includes: converting unit, passes through respectively for the hardware information to each dimension and follows Ring redundancy check CRC algorithm coding obtains corresponding intermediate data.In embodiments of the present invention, cyclic redundancy check can be passed through Algorithm encodes hardware information to CRC (Cyclic Redundancy Check), to obtain intermediate data.It is understood that , the intermediate data obtained by cyclic redundancy check (CRC) algorithm coding can not inversely decode the data before being encoded, So as to realize that data desensitize, the data of user were not only protected, but also can convert and be used for according to true hardware information The intermediate data of generating device fingerprint.In alternative embodiment of the present invention, MD5 Message Digest 5 can also be passed through (MD5Message-Digest Algorithm) encodes hardware information, to obtain intermediate data.

Optionally, generation module includes: the 4th acquiring unit, for intermediate data according to target order combination to be obtained first Device-fingerprint, wherein carried in the first device-fingerprint identical with the quantity of intermediate data for identifying each dimension Hardware information first object field, target order is used to indicate hardware information corresponding to each first object field Dimension.In embodiments of the present invention, intermediate data according to target order combination is obtained into the first device-fingerprint, so that obtained the Order of the corresponding intermediate data of hardware information of each dimension in one device-fingerprint in device-fingerprint is identical, thus Can the first object field in the fingerprint to different equipment compare, so that judging the hardware information of corresponding dimension is It is no identical.It is understood that since hardware information is not easy to be tampered, so in the hardware information of each dimension corresponding first In the case that aiming field is all the same, it can determine that equipment represented by two device-fingerprints is identical equipment.For combination Mode, can be and be added to target data in target data structure according to target order.

Optionally, above-mentioned apparatus further include: second obtains module, the system for obtaining the multiple dimensions of first terminal equipment Information；To the second conversion module, the system information for each dimension is respectively converted into the system for identifying corresponding dimension The change data of information；

Above-mentioned generation module includes: generation unit, the centre being converted to for the hardware information according to each dimension The change data that the system information of data and each dimension is converted to generates first for identifying first terminal equipment Device-fingerprint, wherein carried in the first device-fingerprint identical with the quantity of intermediate data for identifying each dimension Hardware information first object field, and it is identical with the quantity of change data for indicate each dimension system letter Second aiming field of breath.

Optionally, above-mentioned apparatus further include: third obtains module, the second equipment reported for obtaining second terminal equipment Fingerprint；First determining module, in the first object field in the first device-fingerprint and the first mesh in the second device-fingerprint In the case that marking-up section is all the same, determine that second terminal equipment is first terminal equipment.In embodiments of the present invention, it is getting It, can be by the first object field and the first device-fingerprint in the second device-fingerprint of comparison in the case where second device-fingerprint First object field can determine that second terminal is set in the case where the first object field of two device-fingerprints is all the same Standby with first terminal equipment is identical terminal device, thus the hardware identified according to the first object field in device-fingerprint Data separation terminal device.

Optionally, above-mentioned apparatus further include: contrast module, for compare the second aiming field in the second device-fingerprint and The second aiming field in first device-fingerprint；Second determining module, for the first object field in the first device-fingerprint With the first object field in the second device-fingerprint it is all the same in the case where, according to the second device-fingerprint and the first device-fingerprint it Between different the second aiming field, determine that system environments indicated by the system information of the correspondence dimension of first terminal equipment becomes Change.In embodiments of the present invention, in the case where first object field is all the same, it can determine that second terminal equipment is first whole End equipment further can also be according to the second aiming field in the second device-fingerprint and second in the first device-fingerprint Whether the difference of aiming field, the system for determining first terminal equipment change, so as to judge current system environments With the presence or absence of behaviors such as brush machines.It is understood that the step can be executed by first terminal equipment, can also be held by server Row.It is understood that in the first object field in the first device-fingerprint and the first object word in the second device-fingerprint Section is all the same, and the situation that the second aiming field of the second device-fingerprint is all the same with the second aiming field of the first device-fingerprint Under, it can determine that system environments indicated by the system information of first terminal equipment does not change.It is understood that second Aiming field can only indicate whether the corresponding system information of the second aiming field changes.

Another aspect according to an embodiment of the present invention additionally provides a kind of for implementing the acquisition side of above equipment fingerprint The electronic device of method is stored in the memory 902 as shown in figure 9, the electronic device includes memory 902 and processor 904 Computer program, the processor 904 are arranged to execute the step in any of the above-described embodiment of the method by computer program.

Optionally, in the present embodiment, above-mentioned electronic device can be located in multiple network equipments of computer network At least one network equipment.

Optionally, in the present embodiment, above-mentioned processor can be set to execute following steps by computer program:

S1 obtains the hardware information of the multiple dimensions of first terminal equipment, wherein the hardware information of multiple dimensions passes through first The inner nuclear layer that mode accesses first terminal equipment obtains, and the mode of the first application programming interface of first method and calling is not Together, it is application programming provided by application program that the first application programming interface, which is the operating system of first terminal equipment, Interface；

S2 is respectively converted into the mediant of the hardware information for identifying corresponding dimension to the hardware information of each dimension According to；

S3, according to the intermediate data that the hardware information of each dimension is converted to, generation is set for identifying first terminal The first standby device-fingerprint.

Optionally, it will appreciated by the skilled person that structure shown in Fig. 9 is only to illustrate, electronic device can also To be smart phone (such as Android phone, iOS mobile phone), tablet computer, palm PC and mobile internet device The terminal devices such as (Mobile Internet Devices, MID), PAD.Fig. 9 it does not cause to the structure of above-mentioned electronic device It limits.For example, electronic device may also include more perhaps less component (such as network interface) or tool than shown in Fig. 9 There is the configuration different from shown in Fig. 9.

Wherein, memory 902 can be used for storing software program and module, such as the device-fingerprint in the embodiment of the present invention Acquisition methods and the corresponding program instruction/module of device, the software journey that processor 904 is stored in memory 902 by operation Sequence and module realize the acquisition methods of above-mentioned device-fingerprint thereby executing various function application and data processing.It deposits Reservoir 902 may include high speed random access memory, can also include nonvolatile memory, as one or more magnetic storage fills It sets, flash memory or other non-volatile solid state memories.In some instances, memory 902 can further comprise relative to place The remotely located memory of device 904 is managed, these remote memories can pass through network connection to terminal.The example packet of above-mentioned network Include but be not limited to internet, intranet, local area network, mobile radio communication and combinations thereof.Wherein, memory 902 specifically can be with But it is not limited to use in the information such as the first device-fingerprint of storage.It as an example, as shown in figure 9, can be in above-mentioned memory 902 But it is not limited to include the first acquisition module 802, the first conversion module 804 and the generation mould in the acquisition device of above equipment fingerprint Block 806.In addition, it can include but other modular units for being not limited in the acquisition device of above equipment fingerprint, in this example It repeats no more.

Optionally, above-mentioned transmitting device 906 is used to that data to be received or sent via a network.Above-mentioned network tool Body example may include cable network and wireless network.In an example, transmitting device 906 includes a network adapter (Network Interface Controller, NIC), can be connected by cable with other network equipments with router to It can be communicated with internet or local area network.In an example, transmitting device 906 is radio frequency (Radio Frequency, RF) Module is used to wirelessly be communicated with internet.

In addition, above-mentioned electronic device further include: display 908, for showing above-mentioned first device-fingerprint；With connection bus 910, for connecting the modules component in above-mentioned electronic device.

The another aspect of embodiment according to the present invention, additionally provides a kind of storage medium, is stored in the storage medium Computer program, wherein the computer program is arranged to execute the step in any of the above-described embodiment of the method when operation.

Optionally, in the present embodiment, above-mentioned storage medium can be set to store by executing based on following steps Calculation machine program:

Optionally, in the present embodiment, those of ordinary skill in the art will appreciate that in the various methods of above-described embodiment All or part of the steps be that the relevant hardware of terminal device can be instructed to complete by program, the program can store in In one computer readable storage medium, storage medium may include: flash disk, read-only memory (Read-Only Memory, ROM), random access device (Random Access Memory, RAM), disk or CD etc..

The serial number of the above embodiments of the invention is only for description, does not represent the advantages or disadvantages of the embodiments.

If the integrated unit in above-described embodiment is realized in the form of SFU software functional unit and as independent product When selling or using, it can store in above-mentioned computer-readable storage medium.Based on this understanding, skill of the invention Substantially all or part of the part that contributes to existing technology or the technical solution can be with soft in other words for art scheme The form of part product embodies, which is stored in a storage medium, including some instructions are used so that one Platform or multiple stage computers equipment (can be personal computer, server or network equipment etc.) execute each embodiment institute of the present invention State all or part of the steps of method.

In the above embodiment of the invention, it all emphasizes particularly on different fields to the description of each embodiment, does not have in some embodiment The part of detailed description, reference can be made to the related descriptions of other embodiments.

In several embodiments provided herein, it should be understood that disclosed client, it can be by others side Formula is realized.Wherein, the apparatus embodiments described above are merely exemplary, such as the division of the unit, and only one Kind of logical function partition, there may be another division manner in actual implementation, for example, multiple units or components can combine or It is desirably integrated into another system, or some features can be ignored or not executed.Another point, it is shown or discussed it is mutual it Between coupling, direct-coupling or communication connection can be through some interfaces, the INDIRECT COUPLING or communication link of unit or module It connects, can be electrical or other forms.

The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple In network unit.It can select some or all of unit therein according to the actual needs to realize the mesh of this embodiment scheme 's.

It, can also be in addition, the functional units in various embodiments of the present invention may be integrated into one processing unit It is that each unit physically exists alone, can also be integrated in one unit with two or more units.Above-mentioned integrated list Member both can take the form of hardware realization, can also realize in the form of software functional units.

The above is only a preferred embodiment of the present invention, it is noted that for the ordinary skill people of the art For member, various improvements and modifications may be made without departing from the principle of the present invention, these improvements and modifications are also answered It is considered as protection scope of the present invention.

Claims

1. a kind of acquisition methods of device-fingerprint characterized by comprising

Obtain the hardware information of the multiple dimensions of first terminal equipment, wherein the hardware information of the multiple dimension passes through first party The inner nuclear layer that formula accesses the first terminal equipment obtains, the first method and the side for calling the first application programming interface Formula is different, and first application programming interface is that the operating system of the first terminal equipment is provided by application program Application programming interface；

The centre of the hardware information for identifying corresponding dimension is respectively converted into the hardware information of each dimension Data；

According to the intermediate data that the hardware information of each dimension is converted to, generate for identifying described first eventually First device-fingerprint of end equipment.

2. the method according to claim 1, wherein the hardware letter for obtaining the multiple dimensions of first terminal equipment Breath, comprising:

The system application programming interface in the destination layer of the first terminal equipment is called to set to access the first terminal Standby inner nuclear layer, to obtain the hardware information of the multiple dimension, wherein the system application programming in the destination layer connects For mouth for accessing the hardware information in the inner nuclear layer, the first method includes that the system in the destination layer is called to answer With the mode of Program Interfaces.

3. according to the method described in claim 2, it is characterized in that, in the destination layer for calling the first terminal equipment System application programming interface accesses the inner nuclear layer of the first terminal equipment, to obtain the hardware letter of the multiple dimension Breath, comprising:

Reflection calls the first system application programming interface of the target virtual machine layer of the first terminal equipment to access The inner nuclear layer of first terminal equipment is stated, to obtain the hardware information of the multiple dimension；Or

The second system application programming interface of the local ccf layer of the first terminal equipment is called to access described first The inner nuclear layer of terminal device, to obtain the hardware information of the multiple dimension.

4. the method according to claim 1, wherein the hardware letter for obtaining the multiple dimensions of first terminal equipment Breath, comprising:

Reading record in the inner nuclear layer of the first terminal equipment has the file destination of the hardware information of multiple dimensions, obtains The hardware information of the multiple dimensions of first terminal equipment, the first method include reading the side of the file destination Formula.

5. according to the method described in claim 4, it is characterized in that, remembering in the inner nuclear layer for reading the first terminal equipment Record has the file destination of the hardware information of multiple dimensions, obtains the hardware letter of the multiple dimensions of first terminal equipment Breath, comprising:

The model information for obtaining the first terminal equipment is determined by model information-hardware information storage location mapping relations Record has the storage location of the first object file of the hardware information of the multiple dimension；It reads described at the storage location First object file obtains the hardware information of the multiple dimension；Or

Determine that record has the second of the hardware information of the multiple dimension in the file stored in the first terminal equipment File destination；Second file destination is read, the hardware information of the multiple dimension is obtained.

6. the method according to claim 1, wherein the hardware letter for obtaining the multiple dimensions of first terminal equipment Breath, comprising:

The state viewing command for running the hardware state for obtaining the first terminal equipment accesses the first terminal equipment Inner nuclear layer, wherein the hardware state includes the hardware information of the multiple dimension, and the first method includes described in operation The mode of state viewing command；

The status information that the state viewing command is fed back is responded from the first terminal equipment, obtains the multiple dimension Hardware information, wherein the hardware information of the multiple dimension is carried in the status information.

7. the method according to claim 1, wherein the hardware letter for obtaining the multiple dimensions of first terminal equipment Breath, comprising:

Detect the vulnerability information of the first terminal equipment；

Indicate that the first terminal equipment exists for the application program in the first terminal equipment and provides in the vulnerability information In the case of the target loophole of system permission, the system permission is obtained by the target loophole；

By the permission for the system for accessing the first terminal equipment that the system permission is configured, the first terminal is accessed The inner nuclear layer of equipment, to obtain the hardware information of multiple dimensions, wherein the first method includes being leaked by the target Hole obtains the mode of the system permission.

8. method according to any one of claims 1 to 7, which is characterized in that the hardware to each dimension Information is respectively converted into the intermediate data of the hardware information for identifying corresponding dimension, comprising:

To the hardware information of each dimension pass through respectively cyclic redundancy check (CRC) algorithm coding obtain it is corresponding it is described in Between data.

9. according to the method described in claim 8, it is characterized in that, described convert according to the hardware information of each dimension The obtained intermediate data generates the first device-fingerprint for identifying the first terminal equipment, comprising:

The intermediate data according to target order combination is obtained into first device-fingerprint, wherein first device-fingerprint In carry it is identical with the quantity of the intermediate data for identify each dimension the hardware information first object Field, the target order are used to indicate the dimension of the hardware information corresponding to each described first object field.

10. method according to any one of claims 1 to 7, which is characterized in that the method also includes:

Obtain the system information of the multiple dimensions of first terminal equipment；The system information of each dimension is converted respectively For the change data of the system information for identifying corresponding dimension；

According to the intermediate data that the hardware information of each dimension is converted to, generate for identifying described first eventually First device-fingerprint of end equipment include: the intermediate data that is converted to according to the hardware information of each dimension with And the change data that the system information of each dimension is converted to, it generates for identifying the first terminal equipment The first device-fingerprint, wherein be used for identical with the quantity of the intermediate data is carried in first device-fingerprint The first object field of the hardware information of each dimension is identified, and identical with the quantity of the change data is used for Indicate the second aiming field of the system information of each dimension.

11. according to the method described in claim 10, it is characterized in that, generating according to the intermediate data for identifying After the first device-fingerprint for stating first terminal equipment, the method also includes:

Obtain the second device-fingerprint that second terminal equipment reports；

It is homogeneous in the first object field in first device-fingerprint and the first object field in second device-fingerprint With in the case where, determine that the second terminal equipment is the first terminal equipment.

12. according to the method for claim 11, which is characterized in that refer to obtaining the second equipment that second terminal equipment reports After line, the method also includes:

Compare the second aiming field in the second aiming field and first device-fingerprint in second device-fingerprint；

It is homogeneous in the first object field in first device-fingerprint and the first object field in second device-fingerprint With in the case where, according to the second aiming field different between second device-fingerprint and first device-fingerprint, determine The variation of system environments indicated by the system information of the correspondence dimension of the first terminal equipment.

13. a kind of acquisition device of device-fingerprint characterized by comprising

First obtain module, for obtaining the hardware information of the multiple dimensions of first terminal equipment, wherein the multiple dimension it is hard Part information is obtained by the inner nuclear layer that first method accesses the first terminal equipment, the first application of the first method and calling The mode of Program Interfaces is different, and first application programming interface is that the operating system of the first terminal equipment is Application programming interface provided by application program；

First conversion module is respectively converted into the institute for identifying corresponding dimension for the hardware information to each dimension State the intermediate data of hardware information；

Generation module, for the intermediate data that the hardware information according to each dimension is converted to, generation is used for Identify the first device-fingerprint of the first terminal equipment.

14. a kind of storage medium, which is characterized in that the storage medium includes the program of storage, wherein when described program is run Execute method described in 1 to 12 any one of the claims.

15. a kind of electronic device, including memory and processor, which is characterized in that be stored with computer journey in the memory Sequence, the processor are arranged to execute side described in any one of claim 1 to 12 by the computer program Method.