TWI856384B - Webpage access flow limiting method and device and computer readable storage medium - Google Patents

Abstract

The invention provides a webpage access flow limiting method, device and system and a computer readable storage medium, and the method comprises the steps: obtaining current access information sent by a host application when a user accesses a webpage service of the host application; generating a user access sequence according to the current access information, wherein the user access sequence arranges the current access information of the user and the previous access information of a preset number of times according to a time sequence; inputting the user access sequence into an access matrix pool to dynamically update a user access portrait matrix corresponding to each user, and generating the user access portrait matrix according to user historical access data, wherein the user access portrait matrix comprises access induction data of multiple dimensions; and obtaining a corresponding user access portrait matrix from the access matrix pool according to the user identifier, and judging whether the current access accords with the user access habit or not based on the user access sequence and the user portrait matrix. By means of the method, the flow limiting range can be dynamically adjusted for different users by analyzing the user access data, and webpage access flow limiting is achieved.

Description

Web page access current limiting method, device and computer readable storage medium

The present invention belongs to the field of current limiting, and specifically relates to a web page access current limiting method, device and computer readable storage medium.

This section is intended to provide a background or context for the implementation of the invention described in the claims. The description herein is not admitted to be prior art by inclusion in this section.

When developing a high-concurrency system, current limiting can generally be used to control the query rate per second of the system, thereby achieving the purpose of protecting the system. The purpose of the above current limiting is to limit the speed of concurrent access. Once a certain rate is reached, the service can be denied, queued, or downgraded.

There are two commonly used rate limiting algorithms: counter algorithm and token bucket algorithm. The former uses a sliding window combined with a counter to implement WEB access rate limiting, while the latter uses a token bucket of fixed size and generates tokens at a constant rate. If there is a token in the token bucket, the request is allowed to be sent; if there is no token in the token bucket, the request is not allowed to be sent.

Existing current limiting algorithms, whether it is the threshold of the counter algorithm or the bucket size and rate of the scepter bucket algorithm, require setting the threshold in advance based on experience, lack universality, and cannot be adjusted through dynamic learning of data.

In view of the problems existing in the above-mentioned prior art, a web page access current limiting method, device and computer-readable storage medium are proposed. The above-mentioned problems can be solved by using this method, device and computer-readable storage medium.

The present invention provides the following solutions.

In a first aspect, a web page access limiting method is provided, comprising: when a user accesses a web page service of a host application, obtaining current access information sent by the host application; generating a user access sequence according to the current access information, wherein the user access sequence arranges the user's current access information and a preset number of previous access information in chronological order; inputting the user access sequence into an access matrix A user access portrait matrix corresponding to each user is dynamically updated from the access matrix pool. The user access portrait matrix is generated based on the user's historical access data and includes access induction data of multiple dimensions. The corresponding user access portrait matrix is obtained from the access matrix pool according to the user's identification. Based on the user's access sequence and the user portrait matrix, it is determined whether the current access is consistent with the user's access habits.

In one implementation, the current access information includes: user identification, current service URL and timestamp.

In one implementation, whether the current access conforms to the user's access habits is judged based on the user access sequence and the user portrait matrix, including: determining the current limiting range of each dimension according to the user access portrait matrix; obtaining the value of each dimension corresponding to the user access portrait matrix according to the user access sequence; and determining whether the current access is a normal access based on whether the value of each dimension is within the current limiting range.

In one implementation, the user visit profile matrix includes a user identifier and contains any one or more of the following dimensions: the total number of requests for a specific URL per user per unit time, the total number of URL requests per user per unit time, the ratio of the total number of URL requests per user per unit time to the number of URL types, the total number of requests for a specific URL per unit time for all users, the total number of URL requests per unit time for all users, and the ratio of the total number of URL requests per unit time for all users to the number of URL types.

In one implementation, it also includes: setting a embedding point at the entrance of the web service in the host application, so that when any one or more users access the web service, the embedding point is triggered to generate a call request, and the call request includes current access information; the judgment result of the current access is responded to the embedding point of the host application, and when the embedding point receives a response to an abnormal access, a current limiting reminder is fed back to the host application.

In one implementation, the access matrix pool is generated by using the following method: the access matrix pool is obtained by summarizing the user's historical access data in terms of time dimension and space dimension respectively; wherein the time dimension refers to the data summarization of the access sequence of a single user, and the space dimension refers to the data summarization of the access information concurrently sent by different users at the same time.

In one implementation, multiple dimensions of the user portrait matrix are prioritized according to dimension weights; and a determination is made in order of priority whether the value of each dimension is within a corresponding current limiting range; wherein, once it is determined that the current access is an abnormal access, there is no need to determine subsequent priority dimensions.

In a second aspect, a web page access current limiting device is provided, comprising: an access collection module, used to obtain current access information sent by the host application when a user accesses the web page service of the host application; an access collection module, used to generate a user access sequence according to the current access information, the user access sequence arranges the user's current access information and the previous access information of a preset number of times in chronological order; an access matrix pool, which arranges the user access sequence A column input access matrix pool is used to dynamically update the user access portrait matrix corresponding to each user. The user access portrait matrix is generated according to the user's historical access data and includes access induction data of multiple dimensions; a current limiting calculation module is used to obtain the corresponding user access portrait matrix from the access matrix pool according to the user identification, and judge whether the current access is consistent with the user's access habit based on the user access sequence and the user portrait matrix.

In one implementation, the current access information includes: user identification, current service URL and timestamp.

In one implementation, the current limiting calculation module is also used to: determine the current limiting range of each dimension based on the user access portrait matrix; obtain the value of each dimension corresponding to the user access portrait matrix based on the user access sequence; and determine whether the current access is a normal access by judging whether the value of each dimension is within the current limiting range.

In one implementation, the user visit profile matrix includes a user identifier and contains any one or more of the following dimensions: the total number of requests for a specific URL per user per unit time, the total number of URL requests per user per unit time, the ratio of the total number of URL requests per user per unit time to the number of URL types, the total number of requests for a specific URL per unit time for all users, the total number of URL requests per unit time for all users, and the ratio of the total number of URL requests per unit time for all users to the number of URL types.

In one implementation, it also includes: an application embedding module, which is used to set a embedding point at the entrance of the web service in the host application, so that when any one or more users access the web service, the embedding point is triggered to generate a call request, and the call request includes the current access information; a result output module, which is used to respond the judgment result of the current access to the embedding point of the host application, and when the application embedding module receives a response to an abnormal access, it feeds back a current limiting reminder to the host application.

In one implementation, the access matrix pool is also used to obtain the access matrix pool by summarizing the user's historical access data in terms of time dimension and space dimension respectively; wherein the time dimension refers to the data summarization of the access sequence of a single user, and the space dimension refers to the data summarization of the access information concurrently sent by different users at the same time.

In one implementation, the current limiting calculation module is also used to: prioritize multiple dimensions of the user portrait matrix according to dimension weights; determine in order of priority whether the value of each dimension is within the corresponding current limiting range; wherein, once it is determined that the current access is an abnormal access, there is no need to determine the subsequent priority dimensions.

In a third aspect, a web page access current limiting device is provided, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute: as in the method of the first aspect.

In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a program, and when the program is executed by a multi-core processor, the multi-core processor executes the method of the first aspect.

At least one of the above technical solutions adopted in the embodiment of the present application can achieve the following beneficial effects: In this embodiment, there is no need to set a threshold in advance, and it is possible to determine whether it is necessary to limit the current access of the user to the web service based on the access matrix pool generated according to the user's historical access data and dynamically updated, such as the current user data.

It should be understood that the above description is only an overview of the technical solution of the present invention, so that the technical means of the present invention can be more clearly understood and implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the following examples are given to illustrate the specific implementation of the present invention.

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

In the description of the embodiments of the present application, it should be understood that terms such as "including" or "having" are intended to indicate the existence of features, numbers, steps, behaviors, components, parts or combinations thereof disclosed in this specification, and are not intended to exclude the possibility of the existence of one or more other features, numbers, steps, behaviors, components, parts or combinations thereof.

Unless otherwise specified, “/” means or. For example, A/B can mean A or B. The “and/or” in this article is only a description of the association relationship between related objects, indicating that three relationships can exist. For example, A and/or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

The terms "first", "second", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the embodiments of the present application, unless otherwise specified, the meaning of "plurality" is two or more.

All codes in this application are exemplary, and those skilled in the art may think of various modifications based on the programming language used, specific needs, personal habits, etc. without departing from the concept of this application.

It should also be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present invention can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

The present application proposes a web page access current limiting method, which specifically includes: when a user accesses a web page service of a host application, obtaining current access information sent by the host application; generating a user access sequence based on the current access information, wherein the user access sequence arranges the user's current access information and the previous access information of a preset number of times in chronological order; inputting the user access sequence into an access matrix The user access portrait matrix corresponding to each user is dynamically updated by the user access portrait matrix generated according to the user's historical access data and includes access summary data of multiple dimensions; the corresponding user access portrait matrix is obtained from the access matrix pool according to the user's identification, and whether the current access is consistent with the user's access habits is judged based on the user's access sequence and the user portrait matrix. Therefore, by analyzing the user's access data, the current limiting threshold can be dynamically adjusted for different users to achieve web page access current limiting.

Figure 1 is a flow chart of a web page access current limiting method according to an embodiment of the present application, which is used to limit abnormal access. In this process, from the device perspective, the execution subject can be one or more electronic devices; from the program perspective, the execution subject can correspondingly be the program installed on these electronic devices.

As shown in FIG1 , the method provided in this embodiment may include the following steps:

S101, when the user accesses the webpage service of the host application, the current access information sent by the host application is obtained;

In one implementation, the current access information includes: user identification, current service URL and timestamp. For example, it may be (user A, url1, timestamp 10).

In one implementation, in order to start the above-mentioned current limiting method more seamlessly, it also includes: setting a embedding point at the entrance of the web service in the host application, so that when any one or more users access the web service, the embedding point is triggered to generate a call request, and the call request includes current access information.

For example, a tracking point can be set in the host application where current limiting analysis and disposal need to be performed. Specifically, it can be located at the web service entrance of the host application. When the web service of the host application is called, the tracking point is triggered, and the web current limiting method is called in a synchronous manner and its feedback result is received at the first time.

Among them, HTTP service can be provided to the host application to receive the call request sent by the host application by triggering the application embedding point, and the call request can include the current access information of the user to the web service.

S102, generating a user access sequence according to the current access information, wherein the user access sequence arranges the user's current access information and the previous access information of a preset number of times in chronological order;

Among them, the current access information may include (user A, url1, timestamp 10), and the user access sequence generated by its conversion may include [(user A, url1, timestamp 1), (user A, url2, timestamp 2), ..., (user A, url1, timestamp 10)], wherein the number of information in the user access sequence can be set, such as 10, and then the current access information is used as the last sequence element, and the previous 9 previous access information of user A is extracted and combined into a user access sequence arranged in chronological order.

It can be understood that, if the user's previous visits before the current visit do not meet the preset number or no previous visit occurred, a user access sequence with fewer than the preset elements can also be generated.

For example, user A clicks the Get Verification Code button three times in one second. The URL for getting the verification code is /getAuthCode. The URL sequence data for the three requests is:

1. [(/getAuthCode, timestamp 1)],

2. [(/getAuthCode, timestamp 1), (/getAuthCode, timestamp 2)]

3. [(/getAuthCode, timestamp 1), (/getAuthCode, timestamp 2), (/getAuthCode, timestamp 3)]

S103, inputting the user access sequence into the access matrix pool to dynamically update the user access portrait matrix corresponding to each user;

Among them, the user access profile matrix is generated based on the user's historical access data and includes access summary data of multiple dimensions. For example, the access matrix pool is dynamically updated based on the real-time and continuously input user access sequence. Before the user access data corresponding to the current access is logged in, it has already processed and calculated the user access matrix and user access habits through the previously input user historical access data, thereby rolling to form a user flow-limiting profile to describe the user's access summary data in various dimensions.

In one implementation, in order to generate an access matrix pool, the method may further include: obtaining an access matrix pool by summarizing the user's historical access data in terms of time dimension and space dimension, wherein the time dimension refers to summarizing the access sequence of a single user, and the space dimension refers to summarizing the access information concurrently sent by different users at the same time. Finally, a user access profile matrix of each user in the access matrix pool is formed, and a flow limiting decision on user access is made based on this.

In one implementation, the user visit profile matrix includes a user identifier and contains any one or more of the following dimensions: the total number of requests for a specific URL per user per unit time, the total number of URL requests per user per unit time, the ratio of the total number of URL requests per user per unit time to the number of URL types, the total number of requests for a specific URL per unit time for all users, the total number of URL requests per unit time for all users, and the ratio of the total number of URL requests per unit time for all users to the number of URL types.

The unit time can be 1 second, and all users refer to all users who access the matrix pool.

It is understandable that the above dimensions can be designed according to the actual business scenario dimensions, and this application does not impose any specific restrictions on this.

S104: Obtain a corresponding user access portrait matrix from the access matrix pool according to the user identification, and determine whether the current access is consistent with the user's access habits based on the user access sequence and the user portrait matrix.

It can be understood that the user visit portrait matrix describes the user's visit habits from multiple dimensions. Therefore, the user's recent visit data contained in the user visit sequence can be analyzed based on the user visit portrait matrix to determine whether the visit is normal.

Furthermore, multiple user access sequences generated by multiple users concurrently at the current time can also be analyzed based on the user access portrait matrix to determine whether the access of multiple users is normal.

In one implementation, judging whether the current access is consistent with the user's access habits based on the user access sequence and the user portrait matrix in S104 may specifically include:

The current limiting range of each dimension is determined according to the user access portrait matrix; the value of each dimension corresponding to the user access portrait matrix is obtained according to the user access sequence; and whether the value of each dimension is within the current limiting range is determined to determine whether the current access is a normal access.

For example, if the total number of requests for a specific URL (click to get the verification code getAuthCode) by user A within 1 second is determined to be less than 2 times according to the user access profile matrix of user A, the total number of requests for all URLs by user A within 1 second is determined to be less than 5 times, the total number of requests for a specific URL (click to get the verification code getAuthCode) by all users within 1 second is determined to be less than 1000 times, etc. Then the current limit ranges for each dimension can be obtained as: less than 2; less than 5; less than 1000. Based on this, the values of each dimension corresponding to the user access profile matrix can be obtained according to the user access sequence, such as: 1; 3; 489. It can be seen that at this time, all indicators do not exceed the current limit range, which can be considered as normal access.

Optionally, the judgment rule can be set as follows: if the limit range is exceeded but not exceeding the preset threshold, it can also be considered as normal access. The judgment rule can also be set as follows: set weights for each dimension, and perform weighted calculation based on the weights and whether the limit range is exceeded (or the degree of exceeding the limit range). If the final result does not exceed the set value, it can be considered as normal access. This application does not impose specific restrictions on this.

In one implementation, in order to reduce unnecessary calculations, the application may also include: prioritizing multiple dimensions of the user portrait matrix according to dimension weights; determining in order of priority whether the value of each dimension is within the corresponding current limiting range; wherein, once it is determined that the current access is an abnormal access, there is no need to determine the subsequent priority dimensions.

After obtaining the judgment result of whether the current access is in line with the user's access habits, the judgment result of the current access is responded to the tracking point of the host application, and when the tracking point receives the response of abnormal access, it feeds back the host application with a flow limiting reminder. For example, the reminder needs to execute processing such as abandoning the request, disconnecting the connection, and issuing an alarm.

In the description of this specification, the descriptions with reference to the terms "some possible implementations", "some embodiments", "examples", "specific examples", or "some examples" etc. mean that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily need to be directed to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in an appropriate manner. In addition, a person skilled in the art may combine and combine different embodiments or examples described in this specification and features of different embodiments or examples, without contradiction.

In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing specific logical functions or process steps, and the scope of the preferred embodiments of the present invention includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in a reverse order according to the functions involved, which should be understood by a technician in the technical field to which the embodiments of the present invention belong.

Regarding the method flow chart of the embodiment of the present application, certain operations are described as different steps performed in a certain sequence. Such a flow chart is illustrative and not restrictive. Certain steps described in this article can be grouped together and performed in a single operation, certain steps can be divided into multiple sub-steps, and certain steps can be performed in a different order than shown in this article. The various steps shown in the flow chart can be implemented in any way by any circuit structure and/or tangible mechanism (for example, by software running on a computer device, hardware (for example, a logical function implemented by a processor or chip), etc., and/or any combination thereof).

Based on the same technical concept, the embodiment of the present invention also provides a web page access current limiting device, which is used to execute the web page access current limiting method provided by any of the above embodiments. FIG2 is a schematic diagram of the structure of a web page access current limiting device provided by the embodiment of the present invention.

As shown in FIG. 2 , the device 20 includes:

The access storage module 201 is used to obtain the current access information sent by the host application when the user accesses the web service of the host application;

The access collection module 202 is used to generate a user access sequence according to the current access information, and the user access sequence arranges the user's current access information and the previous access information of a preset number of times in chronological order;

The access matrix pool 203 inputs the user access sequence into the access matrix pool to dynamically update the user access portrait matrix corresponding to each user. The user access portrait matrix is generated according to the user's historical access data and includes access summary data of multiple dimensions;

The current limiting calculation module 204 is used to obtain the corresponding user access portrait matrix from the access matrix pool according to the user identification, and judge whether the current access is consistent with the user's access habits based on the user access sequence and the user portrait matrix.

In one implementation, the current access information includes: user identification, current service URL and timestamp.

In one implementation, the current limiting calculation module 204 is further used to: determine the current limiting range of each dimension based on the user access portrait matrix; obtain the value of each dimension corresponding to the user access portrait matrix based on the user access sequence; and determine whether the current access is a normal access by judging whether the value of each dimension is within the current limiting range.

In one implementation, the user visit profile matrix includes a user identifier and contains any one or more of the following dimensions: the total number of requests for a specific URL per user per unit time, the total number of URL requests per user per unit time, the ratio of the total number of URL requests per user per unit time to the number of URL types, the total number of requests for a specific URL per unit time for all users, the total number of URL requests per unit time for all users, and the ratio of the total number of URL requests per unit time for all users to the number of URL types.

In one implementation, it also includes: an application embedding module 200, which is used to set a embedding point at the entrance of the web service in the host application, so that when any one or more users access the web service, the embedding point is triggered to generate a call request, and the call request includes the current access information; a result output module, which is used to respond the judgment result of the current access to the embedding point of the host application, and when the application embedding module receives a response to an abnormal access, it feeds back a current limiting reminder to the host application.

In one implementation, the access matrix pool 203 is also used to obtain the access matrix pool by summarizing the user's historical access data in terms of time dimension and space dimension, respectively; wherein the time dimension refers to summarizing the access sequence of a single user, and the space dimension refers to summarizing the access information concurrently sent by different users at the same time.

In one implementation, the current limiting calculation module 204 is also used to: prioritize multiple dimensions of the user portrait matrix according to dimension weights; determine in order of priority whether the value of each dimension is within the corresponding current limiting range; wherein, once it is determined that the current access is an abnormal access, there is no need to determine the subsequent priority dimensions.

It should be noted that the device in the embodiment of the present application can implement each process of the embodiment of the aforementioned method and achieve the same effect and function, which will not be elaborated here.

Figure 3 is a web page access current limiting device according to an embodiment of the present application, which is used to execute the web page access current limiting method shown in Figure 1. The device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by at least one processor, and the instructions are executed by at least one processor so that at least one processor can execute the method described in the above embodiment.

According to some embodiments of the present application, a non-volatile computer storage medium for a web page access current limiting method is provided, on which computer executable instructions are stored. The computer executable instructions are configured to execute the method described in the above embodiments when executed by a processor.

Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and computer-readable storage medium embodiments, since they are basically similar to the method embodiments, their descriptions are simplified, and the relevant parts can be referred to the partial description of the method embodiment.

The apparatus, equipment and computer-readable storage medium provided in the embodiments of the present application correspond one-to-one to the method. Therefore, the apparatus, equipment and computer-readable storage medium also have similar beneficial technical effects as the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the apparatus, equipment and computer-readable storage medium will not be repeated here.

It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems or computer program products. Thus, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk memory, CD-ROM, optical memory, etc.) containing computer-usable program code.

The present invention is described with reference to the flowchart and/or block diagram of the method, apparatus (system), and computer program product according to the embodiment of the present invention. It should be understood that each process and/or box in the flowchart and/or block diagram, as well as the combination of the processes and/or boxes in the flowchart and/or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operation steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-permanent memory in a computer-readable medium, in the form of random access memory (RAM) and/or non-volatile memory such as read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

Computer-readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. In addition, although the operations of the method of the present invention are described in a specific order in the accompanying drawings, this does not require or imply that these operations must be performed in this specific order, or that all the operations shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and/or one step may be decomposed into multiple steps.

Although the spirit and principle of the present invention have been described with reference to several specific embodiments, it should be understood that the present invention is not limited to the disclosed specific embodiments, and the division of various aspects does not mean that the features in these aspects cannot be combined to benefit. Such division is only for the convenience of expression. The present invention is intended to cover various modifications and equivalent arrangements included in the spirit and scope of the attached patent application.

S101: When a user accesses the web service of the host application, the current access information sent by the host application is obtained S102: A user access sequence is generated based on the current access information. The user access sequence arranges the user's current access information and the preset number of previous access information in chronological order S103: The user access sequence is input into the access matrix pool to dynamically update the user access portrait matrix corresponding to each user S104: According to the user identification, the corresponding user access portrait matrix is obtained from the access matrix pool, and based on the user access sequence and the user portrait matrix, it is judged whether the current access is in line with the user's access habits 200: Application tracking module 201: Access the collection module 202: Access the collection module 203: Access the matrix pool 204: Current limiting calculation module

[Figure 1] is a schematic diagram of the process of a web page access current limiting method according to an embodiment of the present invention; [Figure 2] is a schematic diagram of the structure of a web page access current limiting device according to an embodiment of the present invention; [Figure 3] is a schematic diagram of the structure of a web page access current limiting device according to another embodiment of the present invention.

S101: When a user accesses the web service of the host application, the current access information sent by the host application is obtained.

S102: Generate a user access sequence based on the current access information. The user access sequence arranges the user's current access information and the preset number of previous access information in chronological order.

S103: Input the user access sequence into the access matrix pool to dynamically update the user access portrait matrix corresponding to each user

S104: Obtain the corresponding user access portrait matrix from the access matrix pool according to the user identification, and judge whether the current access is consistent with the user's access habits based on the user access sequence and the user portrait matrix.

Claims (14)

A web page access current limiting method, which is used in one or more electronic devices, comprises: when a user accesses a web page service of a host application, obtaining the user's current access information sent by the host application, wherein the current access information includes the user's user identification; generating a user access sequence according to the current access information, wherein the user access sequence combines the user's current access information and a preset access time into a sequence; The method comprises: obtaining a user access portrait matrix of the user from an access matrix pool according to the user identification, and judging whether the current access conforms to the user access habit of the user based on the user access sequence and the user access portrait matrix of the user, wherein the access matrix pool includes user access portrait matrices of multiple users, and the user access portrait matrix of each user includes a matrix based on the user identification in the access matrix pool. The multiple dimensions of access summary data updated based on the historical access data before the current access, the multiple dimensions include the total number of requests for a specific URL by the corresponding user within a unit time, the total number of URL requests by the corresponding user within a unit time, and the total number of requests for a specific URL by all users within a unit time, wherein the user access sequence and the user access profile matrix of the user are used to determine the user access sequence. Determining whether the current access is consistent with the user access habits of the user includes: determining the current limiting ranges for the multiple dimensions respectively according to the access summary data of the multiple dimensions of the user access profile matrix of the user; obtaining the values corresponding to the multiple dimensions respectively according to the user access sequence; and determining whether the current access is a normal access according to whether the value is within the current limiting range. As described in claim 1, the current access information also includes: current service URL and timestamp. As described in claim 1, the user access profile matrix of each user also includes the user identification of the corresponding user and the multiple dimensions also include any one or more of the following dimensions: the ratio of the total number of URL requests of the corresponding user in a unit time to the number of URL types, the total number of URL requests of all users in a unit time, and the ratio of the total number of URL requests of all users in a unit time to the number of URL types. The method as described in claim 1, further comprising: setting a tracking point at the web service entrance in the host application, so that when any one or more users access the web service, the tracking point is triggered to generate a call request, and the call request includes the current access information; the judgment result of the current access is responded to the tracking point of the host application, and when the tracking point receives a response to an abnormal access, a current limiting reminder is fed back to the host application. The method as claimed in claim 1, wherein the access matrix pool is generated by the following method: the access matrix pool is obtained by summarizing the user's historical access data in terms of time dimension and space dimension respectively; wherein the time dimension refers to summarizing the access sequence of a single user, and the space dimension refers to summarizing the access information concurrently sent by different users at the same time. As described in claim 1, the multiple dimensions of the user access portrait matrix are prioritized according to the dimension weights; and the values of each dimension are judged in order of priority whether they are within the corresponding current limiting range; Once it is judged that the current access is an abnormal access, there is no need to judge the subsequent priority dimensions. A web page access current limiting device, comprising: an access collection module, used for obtaining the current access information of the user sent by the host application when the user accesses the web page service of the host application, the current access information including the user identification of the user; an access collection module, used for generating a user access sequence according to the current access information, the user access sequence including the user identification of the user The current access information and the previous access information of the preset number of times are arranged in time sequence; the current limiting calculation module is used to obtain the user access portrait matrix of the user from the access matrix pool according to the user identification, and judge whether the current access is consistent with the user access habit of the user based on the user access sequence and the user access portrait matrix of the user, and the access matrix pool includes user access matrixes of multiple users. A visit profile matrix, wherein the user visit profile matrix of each user includes visit summary data of multiple dimensions updated based on historical visit data before the current visit, wherein the multiple dimensions include the total number of requests for a specific URL by the corresponding user within a unit time, the total number of URL requests by the corresponding user within a unit time, and the total number of requests for a specific URL by all users within a unit time. times, wherein the current limiting calculation module is also used to: determine the current limiting ranges for the multiple dimensions respectively according to the access summary data of the multiple dimensions of the user access profile matrix of the user; obtain the values corresponding to the multiple dimensions respectively according to the user access sequence; and determine whether the current access is a normal access according to whether the value is within the current limiting range. The device as described in claim 7, wherein the current access information further includes: current service URL and timestamp. The device as described in claim 7, wherein the user access profile matrix of each user further includes a user identification of the corresponding user and the multiple dimensions further include any one or more of the following dimensions: the ratio of the total number of URL requests of the corresponding user in a unit time to the number of URL types, the total number of URL requests of all users in a unit time, and the ratio of the total number of URL requests of all users in a unit time to the number of URL types. The device as described in claim 7, further comprising: an application embedding module, used to set an embedding at the web service entrance in the host application, so that when any one or more users access the web service, the embedding is triggered to generate a call request, and the call request includes the current access information; a result output module, used to respond to the judgment result of the current access to the embedding of the host application, and when the application embedding module receives a response to an abnormal access, it feeds back a current limiting reminder to the host application. The device as claimed in claim 7, wherein the access matrix pool is also used to obtain the access matrix pool by summarizing the user's historical access data in terms of time dimension and space dimension respectively; wherein the time dimension refers to summarizing the access sequence of a single user, and the space dimension refers to summarizing the access information concurrently sent by different users at the same time. The device as claimed in claim 7, wherein the current limiting calculation module is further used to: prioritize the multiple dimensions of the user access portrait matrix according to the dimension weights; Determine in order of priority whether the value of each dimension is within the corresponding current limiting range; wherein, once it is determined that the current access is an abnormal access, there is no need to determine the subsequent priority dimensions. A web page access current limiting device includes: at least one processor; and a memory connected to the at least one processor in communication; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute: the method described in any one of claim items 1-6. A computer-readable storage medium stores a program, and when the program is executed by a multi-core processor, the multi-core processor executes the method described in any one of claims 1-6.

Images