WO2021026937A1

WO2021026937A1 - Method and apparatus for checking login behavior, and system, storage medium and electronic apparatus

Info

Publication number: WO2021026937A1
Application number: PCT/CN2019/100898
Authority: WO
Inventors: 徐贵斌
Original assignee: 奇安信安全技术(珠海)有限公司; 奇安信科技集团股份有限公司
Priority date: 2019-08-15
Filing date: 2019-08-15
Publication date: 2021-02-18
Also published as: CN113812125A; CN113812125B

Abstract

A method and apparatus for checking a login behavior, and a system, a storage medium and an electronic apparatus. The method comprises: acquiring a first login behavior of a first device, and acquiring a second login behavior of a second device, wherein the first device is a device that initiates remote login, and the second device is a device that is logged into (S202); determining whether the first login behavior matches the second login behavior (S204); and when the first login behavior matches the second login behavior, determining that the first device is a legitimate login device (S206). The method solves the technical problem in related technology of a remote login behavior only being able to be checked by means of an account password, and can prevent an illegitimate login created by using a weak password, a password leak or a password being cracked.

Description

Check-in behavior verification method and device, system, storage medium and electronic device

Technical field

The embodiments of the present application relate to the field of network security, and specifically, to a method and device, system, storage medium, and electronic device for verifying login behavior.

Background technique

In related technologies, when managing a server or a remote device, a business system manager usually adopts a remote login management mode, and uses different remote management methods according to different businesses. For example, for the management of the server Windows operating system, the C/S mode is usually adopted, and the terminal is connected to the Telnet server program of the managed server through the Telnet (remote terminal protocol) client program for management. When managing web service systems such as websites, emails, forums, and OA (Office Automation) systems, the B/S mode is usually adopted, and the terminal uses a browser to log in and manage through the management page provided by the corresponding web service.

Regardless of the remote management mode, in terms of security protection, almost always use the authentication method of "user name + password" to perform security verification to solve the problem of illegal login. However, in terms of actual security effects, the current security protection methods cannot achieve the expected results. Cases of illegal logins with legitimate user names and passwords through weak password guessing, blasting, etc., account for 30% of the overall successful attacks. Above, the login method in the related technology has serious security defects.

For the above-mentioned problems existing in related technologies, no effective solution has been found yet.

Summary of the invention

The embodiments of the present application provide a method and device, system, storage medium, and electronic device for verifying login behavior.

According to an embodiment of the present application, a method for verifying a login behavior is provided, including: acquiring a first login behavior of a first device, and acquiring a second login behavior of a second device, where the first device is The device that initiates remote login, the second device is the device that is logged in; it is determined whether the first login behavior matches the second login behavior; when the first login behavior matches the second login behavior , It is determined that the first device is a legally logged-in device.

Optionally, determining whether the first login behavior matches the second login behavior includes: obtaining the initiation time of the first login behavior, and obtaining the response time of the second login behavior; determining the initiation time Whether the interval between the response time and the response time is less than a predetermined threshold; when the interval between the initiation time and the response time is less than the predetermined threshold, it is determined that the first login behavior matches the second login behavior; at the initiation time When the interval from the response time is greater than or equal to a predetermined threshold, it is determined that the first login behavior does not match the second login behavior.

Optionally, judging whether the first login behavior matches the second login behavior includes: acquiring first information of the first login behavior, and acquiring second information of the second login behavior, where: The first information includes: a first network address, the second information includes: a second network address; judging whether the first information and the second information match; in the first information and the second information When matching, it is determined that the first login behavior matches the second login behavior; when the first information and the second information do not match, it is determined that the first login behavior does not match the second login behavior. match.

Optionally, determining whether the first login behavior matches the second login behavior includes: reading the operation process of the first login behavior, and reading the response process of the second login behavior; determining the Whether the operation process and the response process match; when the operation process and the response process match, it is determined that the first login behavior matches the second login behavior; the operation process and the response process do not match When matching, it is determined that the first login behavior does not match the second login behavior.

Optionally, acquiring the first login behavior of the first device and acquiring the second login behavior of the second device includes: acquiring first behavior information of the Telnet client program of the first device, and acquiring the The second behavior information of the Telnet server program of the second device.

Optionally, acquiring the first login behavior of the first device and acquiring the second login behavior of the second device includes: acquiring a remote service management page provided by a web service of a browser of the first device, and acquiring the first device 2. The remote service management page of the device.

Optionally, before determining that the first device is a legal login device, the method further includes: obtaining a login account and a login password entered on the first device; determining that the login account has login authority, and The login password is correct.

According to another embodiment of the present application, there is provided an apparatus for verifying login behavior, including: a first obtaining module, configured to obtain a first login behavior of a first device, and a second login behavior of a second device, Wherein, the first device is the device that initiates remote login, and the second device is the device that is logged in; the judgment module is used to judge whether the first login behavior matches the second login behavior; the first determination The module is configured to determine that the first device is a legal login device when the first login behavior matches the second login behavior.

Optionally, the judging module includes: a first acquiring unit, configured to acquire the initiation time of the first login behavior, and acquiring the response time of the second login behavior; the first determining unit, configured to determine the Whether the interval between the initiation time and the response time is less than a predetermined threshold; the first determining unit is configured to determine the first login behavior and the second login behavior when the interval between the initiation time and the response time is less than the predetermined threshold The login behavior matches; when the interval between the initiation time and the response time is greater than or equal to a predetermined threshold, it is determined that the first login behavior does not match the second login behavior.

Optionally, the judgment module includes: a second obtaining unit, configured to obtain first information of the first login behavior, and obtain second information of the second login behavior, wherein the first information includes : A first network address, the second information includes: a second network address; a second determination unit, used to determine whether the first information and the second information match; a second determination unit, used in the When the first information matches the second information, it is determined that the first login behavior matches the second login behavior; when the first information does not match the second information, the first login behavior is determined The behavior does not match the second login behavior.

Optionally, the judgment module includes: a reading unit configured to read the operation process of the first login behavior and read the response process of the second login behavior; and a third judgment unit configured to determine Whether the operation process and the response process match; a third determining unit, configured to determine that the first login behavior matches the second login behavior when the operation process matches the response process; When the operation process and the response process do not match, it is determined that the first login behavior does not match the second login behavior.

Optionally, the first obtaining module includes: a first obtaining unit configured to obtain first behavior information of the Telnet client program of the first device, and obtain the Telnet server of the second device The second behavior information of the program.

Optionally, the first obtaining module includes: a second obtaining unit configured to obtain a remote service management page provided by a web service of a browser of the first device, and obtain a remote service management page of the second device .

Optionally, the apparatus further includes: a second obtaining module, configured to obtain the login account and login input on the first device before the first determining module determines that the first device is a legal login device Password; the second determination module is used to determine that the login account has login authority and the login password is correct.

According to another embodiment of the present application, a system for verifying login behavior is provided, including: a first device, a second device, and a central control server connected to the first device and the second device, wherein: The first device is used to initiate remote login to the second device; the second device is used to respond to the remote login initiated by the first device; the central control server includes as described in the above embodiment installation.

According to another embodiment of the present application, another system for verifying login behavior is provided, including: a first device and a second device, wherein the first device is used to initiate remote login to the second device The second device is used to respond to the remote login initiated by the first device, and includes the device described in the foregoing embodiment.

According to another embodiment of the present application, there is also provided a storage medium in which a computer program is stored, wherein the computer program is configured to execute the steps in any one of the foregoing method embodiments when running.

According to another embodiment of the present application, there is also provided an electronic device, including a memory and a processor, the memory is stored with a computer program, and the processor is configured to run the computer program to execute any of the above Steps in the method embodiment.

Through the embodiment of this application, the first login behavior of the first device that initiated the login and the second login behavior of the logged-in second device are obtained, and then it is determined whether the first login behavior matches the second login behavior. When the login behavior matches the second login behavior, the first device is determined to be a legitimate login device, and the judgment is made through two-way correlation verification, which solves the technical problem that the remote login behavior can only be verified by account passwords in related technologies. It can avoid illegal logins created by weak passwords, leaked passwords, or blasted passwords, and improves the security of remote logins.

Description of the drawings

The drawings described here are used to provide a further understanding of the embodiments of the present application and constitute a part of the present application. The exemplary embodiments of the present application and their descriptions are used to explain the present application, and do not constitute an improper limitation of the present application. In the attached picture:

FIG. 1 is a hardware structural block diagram of a verification server for a login behavior according to an embodiment of the present application;

Fig. 2 is a flowchart of a method for verifying a login behavior according to an embodiment of the present application;

FIG. 3 is a schematic diagram of a remote login process in C/S mode and B/S mode according to an embodiment of the present application;

Fig. 4 is a structural block diagram of an apparatus for verifying a login behavior according to an embodiment of the present application;

Figure 5 is a structural block diagram of a system for verifying login behaviors according to an embodiment of the present application;

Fig. 6 is a structural block diagram of another system for verifying login behaviors according to an embodiment of the present application.

detailed description

In order to enable those skilled in the art to better understand the solution of the application, the technical solutions in the embodiments of the application will be clearly and completely described below in conjunction with the drawings in the embodiments of the application. Obviously, the described embodiments are only It is a part of the embodiments of this application, not all the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work should fall within the protection scope of this application. It should be noted that the embodiments in this application and the features in the embodiments can be combined with each other if there is no conflict.

It should be noted that the terms "first" and "second" in the description and claims of the application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments of the present application described herein can be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations of them are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to the clearly listed Those steps or units may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

Example 1

The method embodiment provided in Embodiment 1 of the present application may be executed in a server, a computer, a terminal, or a similar computing device. Taking running on a server as an example, FIG. 1 is a hardware structural block diagram of a verification server for a login behavior in an embodiment of the present application. As shown in FIG. 1, the server 10 may include one or more (only one is shown in FIG. 1) processor 102 (the processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA) And the memory 104 for storing data. Optionally, the aforementioned server may also include a transmission device 106 and an input/output device 108 for communication functions. A person of ordinary skill in the art can understand that the structure shown in FIG. 1 is only for illustration, and does not limit the structure of the foregoing server. For example, the server 10 may also include more or fewer components than shown in FIG. 1, or have a different configuration from that shown in FIG.

The memory 104 may be used to store computer programs, for example, software programs and modules of application software, such as a computer program corresponding to a method for verifying login behavior in the embodiment of the present application. The processor 102 runs the computer stored in the memory 104 Programs to execute various functional applications and data processing, that is, to achieve the above-mentioned methods. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the storage 104 may further include storage remotely provided with respect to the processor 102, and these remote storages may be connected to the server 10 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission device 106 is used to receive or send data via a network. The foregoing specific examples of the network may include a wireless network provided by the communication provider of the server 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be connected to other network devices through a base station to communicate with the Internet. In an example, the transmission device 106 may be a radio frequency (Radio Frequency, referred to as RF) module, which is used to communicate with the Internet in a wireless manner.

In this embodiment, a method for verifying login behavior is provided. FIG. 2 is a flowchart of a method for verifying login behavior according to an embodiment of the present application. As shown in FIG. 2, the process includes the following steps:

Step S202, acquiring the first login behavior of the first device, and acquiring the second login behavior of the second device, where the first device is the device that initiates remote login, and the second device is the device that is logged in;

This embodiment is applied in various remote login scenarios. During remote login, the management device (first device) initiates a remote login request to request to log in to the managed device (second device). After the login is successful, the management The device can control the managed device locally within the scope of authority. The behavior generated on the first device is the first login behavior, and the behavior generated on the second device is the second login behavior.

Step S204: Determine whether the first login behavior matches the second login behavior;

In this embodiment, before judging whether the first login behavior matches the second login behavior, it can also determine whether the first login behavior and the second login behavior are legal. When the first login behavior and the second login behavior are legal, the first login behavior is further determined. Whether the login behavior matches the second login behavior;

Optionally, determining whether the first login behavior is legal includes: determining whether the login process or the startup process of the login process is legal, whether a visible login window is displayed on the first device, etc. The first device (the login terminal) can use the window to determine whether there is a user displaying the login. The judgment through the process + visible window can prevent the attacker from starting a login process after controlling the login terminal, but hiding the window, thus Bypass the associated check that only judges the process without judging whether there is a visible login window.

Step S206: When the first login behavior matches the second login behavior, it is determined that the first device is a legal login device.

When the first device is a legal login device, the second device accepts the login of the first device; otherwise, it rejects the login of the first device and provides alarm information.

Through the above steps, the first login behavior of the first device that initiated the login and the second login behavior of the logged-in second device are obtained, and then it is determined whether the first login behavior matches the second login behavior. When matching with the second login behavior, the first device is determined to be a legitimate login device, and the judgment is made through bidirectional correlation verification, which solves the technical problem that the remote login behavior can only be verified by account passwords in related technologies. It can avoid illegal logins created by weak passwords, leaked passwords, or blasted passwords, and improves the security of remote logins.

The first login behavior and the second login behavior of this embodiment may include dynamic behavior information and static information, where the dynamic behavior information may include behavior chain information, process chain information, etc., and the static information includes the IP address of the device and the unified resource Network addresses such as Uniform Resource Locator (URL) addresses, MAC addresses, device identifications, etc.

The solution of this embodiment can be applied to various login modes, such as C/S mode, B/S mode, etc. The communication mode between the first device and the second device can also be a relay or direct connection. It is an arbitrary information transmission and data exchange method such as C directly connected to S or S directly connected to C (B/S similar). FIG. 3 is a schematic diagram of the remote login process of the C/S mode and the B/S mode of the embodiment of the present application. An example is given below:

In the login scenario of the C/S mode, when managing the Windows operating system of the server, the C/S mode can be used. The terminal is connected to the Telnet server program of the managed server through the Telnet (remote login protocol) client program. management. Obtaining the first login behavior of the first device and the second login behavior of the second device include: acquiring the first behavior information of the Telnet client program of the first device, and acquiring the second behavior information of the Telnet server program of the second device Behavioral information.

In the B/S mode login scenario, when web service systems such as websites, emails, forums, OA, etc. are managed, the B/S mode is usually adopted, and the terminal uses a browser to perform login management through the management page provided by the corresponding web service. Obtaining the first login behavior of the first device and the second login behavior of the second device include: acquiring the remote service management page provided by the web service of the browser of the first device, and acquiring the remote service management of the second device page.

There are multiple ways to determine whether the first login behavior of the first device matches the second login behavior of the second device. Corresponding judgments can be performed based on the acquired two-way login behaviors. When multiple sets of login behaviors are acquired, Combine it to judge.

The login behavior of the first login behavior administrator (remote login personnel) in the terminal of this embodiment. For example: Open Telnet and connect to the IP address of the remote server, or open a browser and access the URL of the remote service management page. The second login behavior is that the managed server (or other devices) receives a connection request from the remote terminal, and the requested content is the connection management service or the management page. When a remote login behavior occurs at both ends, these two behaviors should occur in a short period of time, or even at the same time.

The difference between normal login management and illegal login management after the attacker obtains the password through technical means is that the first behavior in normal login management occurs on the administrator’s terminal, while the first in illegal login management This behavior occurred on the attacker’s terminal. Even if the attacker uses port mapping, address resolution protocol (Address Resolution Protocol, ARP) attacks and other technologies, imitating a trusted terminal. However, the first login behavior, such as opening the Telnet client program or browser, and entering the managed IP or URL, is still the behavior of the attacker and only occurs on the attacker's terminal (which can be considered as the third device) , Not the first device that initiated the login.

In this embodiment, it is judged whether the first login behavior occurs normally on the administrator's terminal (first device), and at the same time, whether the second login behavior occurs normally on the managed server (second device), there are only two behaviors Both occur together, and only when the login behavior matches, it is considered a legitimate login. An example is given below:

In an implementation of this embodiment, determining whether the first login behavior matches the second login behavior includes:

S11, acquiring the initiation time of the first login behavior, and acquiring the response time of the second login behavior;

The initiation time in this embodiment may be the time when the login process on the first device (Telnet client program, remote management service provided by the browser, etc.) initiates the login to the second device, and the response time is the corresponding login process on the second device Response time.

S12: Determine whether the interval between the initiation time and the response time is less than a predetermined threshold; the predetermined threshold is a small time range, which can be set within 1s in a better network environment.

S13. When the interval between the initiation time and the response time is less than a predetermined threshold, determine that the first login behavior matches the second login behavior; when the interval between the initiation time and the response time is greater than or equal to the predetermined threshold, determine the first login behavior and the second login behavior. The login behavior does not match.

In another implementation manner of this embodiment, determining whether the first login behavior matches the second login behavior includes:

S21. Acquire first information about a first login behavior and acquire second information about a second login behavior, where the first information includes: a first network address, and the second information includes: a second network address; wherein, the network address includes IP address, MAC address, URL address, etc.

S22: Determine whether the first information and the second information match;

Network address matching includes multiple matching strategies. Taking IP address as an example, when the target IP address entered by the first device is the same as the actual IP address of the second device, it can be considered as a match, otherwise it does not match; the first device If the IP address of is the same as the source IP address of the second device response (the IP address of the device that initiated the login), it can be considered a match, otherwise it does not match; the source IP address carried in the dot information sent by the first device to the server , When it matches the preset legal IP address list configured by the second device, it can be considered a match, otherwise it does not match. URL address and other network addresses are similar.

S23: When the first information and the second information match, determine that the first login behavior matches the second login behavior; when the first information and the second information do not match, determine that the first login behavior does not match the second login behavior.

In addition to matching the network address, the device identification can also be matched. For example, when the device identification of the first device matches the list of legal devices configured by the second device, it is determined that the first login behavior matches the second login behavior; otherwise, It is determined that the first login behavior does not match the second login behavior. The device identification (such as MID) may be carried in the request message of the first login behavior, or it may be uploaded by the first device to the server of the third party, and the second device may obtain it from the server after receiving the request message.

S31: Read the operation process of the first login behavior, and read the response process of the second login behavior;

S32: Determine whether the operation process and the response process match;

Taking the Telnet process as an example, the process of the Telnet client program and the process of the Telnet server program are matched processes.

S33: When the operation process and the response process match, determine that the first login behavior matches the second login behavior; when the operation process and the response process do not match, determine that the first login behavior does not match the second login behavior.

Optionally, this embodiment can also be combined with a login account and a login password for dual judgment. Before determining that the first device is a legal login device, it further includes: obtaining the login account and login password entered on the first device; determining the login account Have the login authority and the login password is correct. Only when the first login behavior matches the second login behavior, and the user name and password are correct, it is considered a legal login. Only when any one behavior occurs, even if the user name and password are correct, it is considered an attack. The illegal login status of the person.

Optionally, the executive body of this embodiment may be a cloud server or a local server connecting two or more clients or servers, or it may be a client or server that initiates a login or responds to a login. The client may be Mobile terminal, PC, etc., but not limited to this.

In an implementation scenario of this embodiment, it includes: the C program installed on the management terminal, the S program installed on the managed terminal, and the M program installed on the central control server.

C program: used to check and judge the occurrence and legitimacy of the management initiated behavior, including but not limited to: whether the Telnet program or browser is started, whether it is started normally or abnormally, whether it is a hidden operation in the background or a normal operation with a visible window, Whether there is input the correct IP of the managed terminal or the URL of the management page, etc.

And send the behavior fingerprint, terminal ID, IP, login time, login personnel and other information to the M program.

M program: used to obtain the management behavior and managed behavior performed by each terminal, and provide query services.

S program: used to check and judge the occurrence of the management behavior of the managed terminal. When a specific device, IP, or account initiates a specific remote management request, the M program retrieves whether the corresponding device, IP, or account is initiated on the management terminal Corresponding management behaviors are comprehensively judged through two-way correlation verification, accept normal logins, reject illegal logins and provide alarm information.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is Better implementation. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, The optical disc) includes several instructions to enable a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the method described in each embodiment of the present application.

Example 2

In this embodiment, a device and system for verifying a login behavior are also provided, which is used to implement the above-mentioned embodiments and preferred implementations, and those that have been explained will not be repeated. As used below, the term "module" can implement a combination of software and/or hardware with predetermined functions. Although the devices described in the following embodiments are preferably implemented by software, hardware or a combination of software and hardware is also possible and conceived.

Fig. 4 is a structural block diagram of an apparatus for verifying a login behavior according to an embodiment of the present application. As shown in Fig. 4, the apparatus includes: a first acquisition module 40, a judgment module 42, and a first determination module 44, where:

The first acquisition module 40 is configured to acquire the first login behavior of the first device and the second login behavior of the second device, where the first device is the device that initiates remote login, and the second device is the remote login device. Logged in device;

The judgment module 42 is configured to judge whether the first login behavior matches the second login behavior;

The first determining module 44 is configured to determine that the first device is a legal login device when the first login behavior matches the second login behavior.

Optionally, the first obtaining module includes: a first obtaining unit configured to obtain first behavior information of the Telnet client program of the first device, and obtain the Telnet server of the second device The second act information of the program.

Figure 5 is a structural block diagram of a system for verifying login behaviors according to an embodiment of the present application. As shown in Figure 5, the system includes: a first device 50, a second device 52, and the first device and the The central control server 54 connected to the second device, wherein the first device 50 is used to initiate remote login to the second device; the second device 52 is used to respond to the remote login initiated by the first device ; The central control server includes the device described in the foregoing embodiment.

6 is a structural block diagram of another system for verifying login behaviors according to an embodiment of the present application. As shown in FIG. 6, the system includes: a first device 60 and a second device 62, wherein the first device 60 , Is used to initiate remote login to the second device; the second device 62 is used to respond to the remote login initiated by the first device, and includes the apparatus described in the foregoing embodiment.

It should be noted that each of the above modules can be implemented by software or hardware. For the latter, it can be implemented in the following manner, but not limited to this: the above modules are all located in the same processor; or, the above modules are combined in any combination The forms are located in different processors.

Example 3

The embodiment of the present application also provides a storage medium in which a computer program is stored, wherein the computer program is configured to execute the steps in any of the foregoing method embodiments when running.

Optionally, in this embodiment, the foregoing storage medium may be configured to store a computer program for executing the following steps:

S1. Acquire a first login behavior of a first device and acquire a second login behavior of a second device, where the first device is a device that initiates remote login, and the second device is a device that is logged in;

S2: Determine whether the first login behavior matches the second login behavior;

S3: When the first login behavior matches the second login behavior, determine that the first device is a legal login device.

Optionally, in this embodiment, the above-mentioned storage medium may include, but is not limited to: U disk, read-only memory (Read-Only Memory, ROM for short), Random Access Memory (RAM for short), Various media that can store computer programs, such as mobile hard disks, magnetic disks, or optical disks.

The embodiment of the present application also provides an electronic device, including a memory and a processor, the memory is stored with a computer program, and the processor is configured to run the computer program to execute the steps in any of the foregoing method embodiments.

Optionally, the foregoing electronic device may further include a transmission device and an input-output device, wherein the transmission device is connected to the foregoing processor, and the input-output device is connected to the foregoing processor.

Optionally, in this embodiment, the foregoing processor may be configured to execute the following steps through a computer program:

Optionally, for specific examples in this embodiment, reference may be made to the examples described in the above-mentioned embodiments and optional implementation manners, and details are not described herein again in this embodiment.

The serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.

In the above-mentioned embodiments of the present application, the description of each embodiment has its own focus. For a part that is not described in detail in an embodiment, reference may be made to related descriptions of other embodiments.

In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or may be Integrate into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, units or modules, and may be in electrical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in each embodiment of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage media include: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program code .

The above are only the preferred embodiments of this application. It should be pointed out that for those of ordinary skill in the art, without departing from the principle of this application, several improvements and modifications can be made, and these improvements and modifications are also Should be regarded as the scope of protection of this application.