Business session control method for multi-dimensional identification system

Abstract

The invention provides a service session control method for a multi-dimensional identification system, which comprises the following steps of: dynamically generating unique multi-dimensional identification information including an equipment identification EID, a service identification SID and a network identification NID when a user terminal accesses for the first time or accesses a network again; encrypting the multi-dimensional identification information by adopting a Hash algorithm, performing digital signature on the encrypted multi-dimensional identification information, sending the encrypted multi-dimensional identification information to a multi-dimensional identification server to complete registration, and performing associative storage on the multi-dimensional identification information and the equipment capability information by the multi-dimensional identification server; establishing an end-to-end communication link; the dynamic management mechanism continuously maintains the session state, and tracks and updates the multi-dimensional identification information of the user terminal in real time; when the equipment signal intensity is lower than the safety threshold or the electric quantity is lower than the threshold, the user can complete equipment migration without perception; terminating the session and releasing resources; according to the method, the safety, the efficiency, the consistency, the flexibility and the expansibility are remarkably improved, and the complex and changeable communication requirements can be better met.

Description

Technical Field

[0001] The invention relates to a service session control method oriented to a multi-dimensional identification system, belonging to the technical field of communications. Background Art

[0002] Business session control refers to how to effectively manage the session status of users or devices in a multi-user, multi-device, and multi-platform environment. It includes session creation, management, verification, and expiration. Session control is an important mechanism to ensure system security and provide an efficient user experience, especially in scenarios that require dynamic adjustment of permissions, device verification, and access control.

[0003] Existing session control mechanisms generally rely on single identifiers such as account numbers and device IDs for identity recognition and session management. However, as the complexity of cross-platform and multi-device interactions increases, traditional session management based on single identifiers has gradually exposed its limitations. Most existing technologies do not fully consider the integration of multi-dimensional identification information, resulting in incomplete session verification and consistency and security issues in cross-platform session management.

[0004] Session control based on a single identifier is vulnerable to attacks such as forgery and hijacking, and has poor security. Insufficient consistency management across platforms and devices may lead to session failure, data leakage and other problems. In some areas with high security requirements such as finance and medical care, the existing session control mechanism cannot provide sufficient multi-dimensional verification and real-time monitoring. Summary of the invention

[0005] The purpose of the present invention is to provide a service session control method for a multi-dimensional identification system to solve the problem in the prior art that the security and consistency of session control across platforms and devices need to be improved.

[0006] The technical solution of the present invention is: A service session control method for a multi-dimensional identification system comprises the following steps: S1. When a user terminal accesses the network for the first time or re-accesses the network, it dynamically generates unique multi-dimensional identification information including the device identification EID, service identification SID, and network identification NID. The multi-dimensional identification information is encrypted using a hash algorithm and digitally signed before being sent to a multi-dimensional identification server to complete registration. The multi-dimensional identification server associates the multi-dimensional identification information with the device capability information and stores it; S2. The user terminal triggers cross-domain session negotiation through a cascaded multi-dimensional identification connection establishment request M_Inv, via the local multi-dimensional identification server, the destination multi-dimensional identification server, and the target device. After the traceability symbol is confirmed step by step, the user terminal and the target device complete the parameter negotiation through the confirmation response ACK and establish an end-to-end communication link; S3. The dynamic management mechanism continuously maintains the session state, adjusts the media parameters of the session in real time, performs load balancing and resource scheduling, and tracks and updates the multi-dimensional identification information of the user terminal in real time; S4. When the device signal strength is lower than the security threshold or the battery power is lower than the threshold, automatically scan the surrounding devices, screen the candidate terminals that meet the hardware standards, establish a dual-channel transmission between the old and new devices, and achieve seamless switching of the media stream through redundant packet retransmission and double buffering mechanisms, so that the user can complete the device migration without awareness; S5. When the user terminal or the target terminal sends an END message with security verification, terminate the session and release the resources.

[0007] Further, step S2 is specifically as follows: S21. The user terminal sends a multi-dimensional identification connection establishment request M_Inv to the local multi-dimensional identification server. The multi-dimensional identification connection establishment request M_Inv includes the session ID, and the local multi-dimensional identification server returns a temporary response i00; S22. The local multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the destination multi-dimensional identification server, and the destination multi-dimensional identification server returns a temporary response i00; S23. The destination multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the target device, and the target device returns a temporary response i00; S24. The target device sequentially returns an agreed session response success to the user terminal according to the traceability symbol; S25. The user terminal sends an acknowledgment response ACK to the target device.

[0008] Further, in step S2, the message headers of the multi-dimensional identification connection establishment request M_Inv and the acknowledgment response ACK both include the session unique ID, the spatio-temporal reference, the request initiator, the request recipient, the traceability symbol, the resource name, the service type, and the number of message body bytes.

[0009] Further, step S3 is specifically as follows: S31. During the session, the protocol stack monitors the network bandwidth and latency in real time, and automatically adjusts the media parameters of the session, including video resolution, frame rate, and audio quality; S32. According to the network load and system resource conditions, schedule the session traffic and perform load balancing; S33. When the multi-dimensional identification information of the user terminal changes, track and update the multi-dimensional identification information of the user terminal in real time.

[0010] Further, step S4 is specifically as follows: S41. Migration Trigger and Device Discovery: When the signal strength of the user terminal continuously drops below the security threshold or the battery level is lower than the threshold, initiate the migration preparation process. Scan for surrounding devices via Near Field Communication (NFC) or local area network broadcast, and filter out candidate devices that meet the set hardware capability requirements as target devices. S42. Context Synchronization and Seamless Switching: After selecting the target device, use incremental synchronization technology to transmit session state information: only send the data difference part since the last synchronization. During the switching process, establish a dual-channel transmission between the original device and the new device for a set period of time to ensure seamless transition of the media stream.

[0011] Further, step S5 is specifically as follows: S51. When the user terminal or the target terminal sends an END message with security verification to notify the other party that the session ends, after receiving the session termination signal, gradually clean up all resources in the session, including data caches, session parameters, and network connections. S52. After the session ends, recycle all resources used for this session and reset the relevant status information to prepare for the establishment of the next session.

[0012] The beneficial effects of the present invention are as follows: Compared with existing methods, this service session control method for a multi-dimensional identification system can significantly improve in terms of security, efficiency, consistency, flexibility, and scalability by introducing a multi-dimensional identification system and a more flexible and precise session control mechanism, and can better meet complex and ever-changing communication requirements. Brief Description of the Drawings

[0013] Figure 1 is a flowchart of the service session control method for a multi-dimensional identification system according to an embodiment of the present invention; Figure 2 is a schematic diagram of the protocol system architecture in the embodiment; Figure 3 is a flowchart of session establishment, communication, and disconnection in the embodiment; Figure 4 is an explanatory schematic diagram of the multi-dimensional identification connection establishment request M_Inv in the embodiment; Figure 5 is an explanatory schematic diagram of the acknowledgment response ACK in the embodiment. Detailed Embodiments

[0014] The preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0015] The embodiment provides a service session control method for a multi-dimensional identification system, as shown in Figure 1 and Figure 3 , including the following steps: S1. When a user terminal accesses the network for the first time or re-accesses the network, a unique multi-dimensional identification information including the device identification EID, service identification SID, and network identification NID is dynamically generated. The multi-dimensional identification information is encrypted using a hash algorithm and digitally signed before being sent to a multi-dimensional identification server to complete registration. The multi-dimensional identification server associates the multi-dimensional identification information with the device capability information and stores it.

[0016] In step S1, when the user terminal accesses for the first time, or re-enters the network after moving out of the coverage area, the attachment process will be triggered. The core goal of this process is to dynamically generate unique multi-dimensional identification information (including device identification EID, service identification SID, and network identification NID) for the device as the basis for its communication in the network. After the multi-dimensional identification server receives the Reg request from the user terminal, it checks the authority of the requester. If the authority verification is passed, it returns a registration response success. This message contains the unique ID assigned to this session and other parameters of this session and the data header used to maintain the establishment process (which must also be maintained during the session). Device capability information such as supported codec formats, maximum bandwidth, etc.

[0017] S2. The user terminal establishes a request M_Inv through a cascaded multi-dimensional identification connection, triggers cross-domain session negotiation via the local multi-dimensional identification server, the destination multi-dimensional identification server, and the target device. After the traceability symbols are confirmed step by step, the user terminal and the target device complete the parameter negotiation through the confirmation response ACK and establish an end-to-end communication link.

[0018] S21, the user terminal sends a multi-dimensional identification connection establishment request M_Inv to the local multi-dimensional identification server, the multi-dimensional identification connection establishment request M_Inv includes a session ID, and the local multi-dimensional identification server returns a temporary response i00; S22, the local multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the destination multi-dimensional identification server, and the destination multi-dimensional identification server returns a temporary response i00; S23, the destination multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the target device, and the target device returns a temporary response i00; S24, the target device returns a session consent response success to the user terminal in sequence according to the traceability symbol; S25. The user terminal sends an acknowledgment response ACK to the target device.

[0019] In step S2, Figure 4 and Figure 5 The message header of the multi-dimensional identification connection establishment request M_Inv and the message header of the confirmation response ACK both include the session unique ID, time and space reference, request initiator, request recipient, traceability symbol, resource name, business type and number of message body bytes.

[0020] In step S2, the cross-domain session negotiation is triggered by establishing a cascaded multi-dimensional identification connection request M_Inv (local multi-dimensional identification server → destination multi-dimensional identification server → target device). After the traceability symbols are confirmed step by step, the two parties complete the parameter negotiation (such as codec format, initial bandwidth) through ACK and establish an end-to-end communication link.

[0021] S3. The dynamic management mechanism continuously maintains the session status, adjusts the media parameters of the session in real time, performs load balancing and resource scheduling, and tracks and updates the multi-dimensional identification information of the user terminal in real time.

[0022] S31. During the session, the protocol stack monitors the network bandwidth and latency in real time and automatically adjusts the media parameters of the session including video resolution, frame rate, and audio quality; S32, scheduling session traffic and performing load balancing according to network load and system resources; In step S32, by monitoring the real-time network status, it is determined whether the current device is facing an overload situation, and if necessary, the session traffic is distributed to other relatively idle devices or nodes, thereby avoiding delays or data loss caused by overload of a single device.

[0023] S33. When the multi-dimensional identification information of the user terminal changes, the multi-dimensional identification information of the user terminal is tracked and updated in real time.

[0024] In step S3, during the session, the network environment, device status or user needs may change. Therefore, the protocol stack monitors the network bandwidth, delay and device load in real time, and dynamically adjusts the media parameters (such as video resolution, frame rate, audio quality) and data transmission strategy. For example, when the network bandwidth fluctuates by more than 15%, the video encoding specification is automatically downgraded (such as 1080p→720p) and the audio bit rate is optimized to ensure that the media stream can still maintain a high quality under different network conditions; if the device load continues to be too high, the non-critical traffic is migrated to the backup node through the QoS strategy to ensure the stability of the core media stream. At the same time, the multi-dimensional identification server continuously updates information such as device location and network status to support seamless connection across networks. Adjustments are not limited to media parameters, but can also involve session priority, data transmission mode, etc. For example, when the network condition deteriorates, the protocol stack can automatically select a lower data transmission rate to avoid packet loss and connection interruption. During the session, the multi-dimensional identification of the user terminal may change, such as changes in device location, network interface or user identity. In order to ensure the continued effectiveness of session management, multi-dimensional identification information is tracked and updated in real time. By timely updating the multi-dimensional identification of the target end, the session parameters and target device can be automatically adjusted when the user switches networks or the device changes, ensuring the smoothness of the session.

[0025] S4. When the signal strength of the device is lower than the safety threshold or the battery level is lower than the threshold, automatically scan the surrounding devices, screen the candidate terminals that meet the hardware standards, establish a dual-channel transmission between the old and new devices, and achieve seamless switching of the media stream through redundant packet retransmission and the double-buffer mechanism, so as to enable the user to complete device migration without awareness.

[0026] S41. Migration trigger and device discovery: When the signal strength of the user terminal continuously drops below the safety threshold or the battery level is lower than the threshold, start the migration preparation process, scan the surrounding devices through Near Field Communication (NFC) or local area network broadcast, and screen the candidate devices that meet the set hardware capability requirements as the target devices. S42. Context synchronization and seamless switching: After selecting the target device, use the incremental synchronization technology to transmit the session status information: only send the data difference part since the last synchronization; during the switching process, establish a dual-channel transmission between the original device and the new device for a continuous set time to ensure seamless transition of the media stream.

[0027] In step S4, when the signal strength of the user terminal continuously drops below the safety threshold (such as Wi-Fi RSSI < -80 dBm) or the battery power is insufficient, session transfer or switching is required during the communication process. Especially in a mobile network environment, the user may switch between multiple devices or network environments. Automatically scan the surrounding devices through NFC or local area network broadcast, BLE 5.0, and screen the candidate devices that meet the hardware capability requirements (such as at least a 4-core CPU, 8GB of memory, and support for H.265 decoding). Use differential compression technology to synchronize the session context (compression ratio 7:1), establish a 5-second dual-channel transmission between the old and new devices, and achieve seamless switching of the media stream through redundant packet retransmission (20%) and the double-buffer mechanism, ensuring that the freezing time ≤ 33 ms. Use the incremental synchronization technology to transmit the session status information, significantly reducing the amount of transmitted data (reducing by more than 60% in typical scenarios).

[0028] S5. When the user terminal or the target terminal sends an END message with security verification, terminate the session and release the resources.

[0029] S51. When the user terminal or the target terminal sends an END message with security verification to notify the other party that the session ends, after receiving the session termination signal, gradually clean up all resources in the session, including data caches, session parameters, and network connections. S52. After the session ends, recycle all resources used for this session and reset the relevant status information to prepare for the establishment of the next session.

[0030] In step S5, when the session is completed or the user actively terminates, the terminal sends an END message with security verification, and both parties release resources in stages according to the protocol: media channel → buffer → codec instance, ensuring the timely release of resources and preventing resource waste and leakage. 98% of memory resources are immediately recovered, the network buffer is released later to prevent residual data packets, and call records CDR are stored persistently. The server synchronously clears the session binding relationship and NAT mapping, and finally completes the full process closed loop through FIN-ACK confirmation, ensuring zero resource leakage and system reusability.

[0031] Compared with the existing methods, this service session control method for a multi-dimensional identification system can significantly improve security, efficiency, consistency, flexibility and scalability by introducing a multi-dimensional identification system and a more flexible and accurate session control mechanism, and can better meet complex and changing communication needs.

[0032] This service session control method for a multi-dimensional identification system is an application layer protocol with high flexibility. It supports both real-time communications (such as voice and video calls) and static resource requests (such as web page access and file downloads) and other service types. This protocol can be widely used in the establishment, management and termination of real-time sessions, covering the transmission of various static or dynamic resources, and can dynamically adapt to different business needs. Based on the multi-dimensional identification system, the service session control protocol can determine the communication target end, determine the communication willingness and related capabilities of the target end, and establish and manage sessions, including session transfer, termination, modification of session parameters, and calling services.

[0033] The service session control protocol of the present invention relies on a multi-dimensional identification system to handle the addressing, positioning and session management of the communication target end. Compared with the traditional mechanism based on a single identifier, it can provide more accurate target positioning and more flexible session management capabilities, ensuring session consistency and security in a cross-platform and cross-device environment. Figure 2 , the protocol system includes: User terminal: A user agent terminal refers to a user terminal that supports service / session control protocols.

[0034] Multi-dimensional identification server: completes the addressing and positioning work, and returns the NID of the service server that can handle the service at this time, or the NID of the target EID that needs to establish a connection to the user agent terminal that initiates the request according to the request message of the user agent terminal that initiates the session. It is also responsible for receiving and processing REGISTER requests and the server for service authentication and authorization.

[0035] When parsing a terminal registration request, the service identifier SID is used to precisely locate resources (such as files, service instances) and the communication peer. In authentication and authorization, business permissions are associated through the SID, for example, to check whether a user has the right to access resources corresponding to a certain SID. By adding the SID as the core of the multi-dimensional identifier system on the basis of traditional identifiers such as IP addresses, it supports resource-level addressing rather than just device or user-level. For example, the resource SID business / video conference / SID123 can be directly mapped to the video conference service instance. The instance SID userA@conference SID123 identifies the session of user A in a specific conference. In this way, precise routing is achieved: avoiding redundant parsing in the traditional IP + port mode, improving the resource location efficiency, and reducing the latency by 20% - 30%. And dynamic binding is achieved: business instances are dynamically bound through the SID, supporting on-demand scaling, such as automatically allocating new SIDs during burst traffic.

[0036] When the user terminal generates a multi-dimensional identifier connection establishment request M_Inv, protocol parameters (such as service type, transmission parameters, lifetime) are filled. In policy synchronization and routing: the routing policy is dynamically adjusted based on protocol parameters, for example, selecting a low-latency channel according to the transmission parameters. The following multi-dimensional parameters are defined in the protocol header: service / session type (distinguishing real-time communication and non-real-time services, driving differential processing), lifetime (setting the message validity period, automatically discarding invalid requests when timed out, reducing network congestion), transmission parameters (declaring transmission requirements (such as QoS = high bandwidth), guiding the network layer to select the optimal channel), so as to achieve service-aware routing: dynamically allocating resources according to the service type, such as reserving bandwidth for video conferences. Implementing and improving resource conservation: avoiding the accumulation of invalid messages through the lifetime, reducing 15% of redundant traffic.

[0037] During session establishment and maintenance, the entire life cycle is managed through messages such as the multi-dimensional identifier connection establishment request M_Inv, confirmation response ACK, and session termination END. Response codes such as 2xx success, 4xx client error, etc. run through the error handling of each stage. By extending the session control semantics on the traditional HTTP model and adding the multi-dimensional identifier connection establishment request M_Inv, it supports real-time service negotiation such as video codec parameters. The session is explicitly terminated through the session termination END instead of relying on timeouts, releasing resources more promptly. This brings an improvement in real-time performance: the M_INv + ACK fast handshake reduces 1 RTT compared to the three-way interaction of HTTP. And the resource recovery efficiency is improved: the explicit END message reduces the session release latency by 50%.

[0038] such as Figure 4 and Figure 5 , the protocol message contains a request line, necessary headers (such as spatio-temporal reference, requester information, resource information, etc.) and body data (such as session parameters, media information, etc.). such as Figure 4 and Figure 5In the protocol messages of the example method, the multi-dimensional identifier connection establishment request M_Inv and the confirmation response ACK. Compared with the traditional service session control protocol, the improved message header fields include the spatio-temporal reference TS, service type, traceability symbol tra, and resource name Res.

[0039] When the user terminal generates a request, it attaches the spatio-temporal reference (timestamp + geographical location). Through the spatio-temporal reference, the timeliness of spatio-temporal binding and geographical fence control are realized, ensuring that requests and responses can be made at the correct time and location. In policy synchronization and routing, the network layer selects nearby nodes or dynamically adjusts the routing path according to the spatio-temporal reference. By adding a new spatio-temporal reference field, the time validity (e.g., validity period = 10s) and geographical location (e.g., geographical fence = area A) are bound to the message header, enabling timeliness control: timeout messages are automatically discarded to avoid expired requests occupying resources, and geographical sensitive routing is realized: services are allocated nearby according to the user's location, such as a local data center. This brings an improvement in resource utilization: cross-regional transmission is reduced, and the delay is reduced by 30%. It also enhances service reliability: spatio-temporally invalid requests are directly intercepted, reducing 15% of invalid sessions.

[0040] The user terminal declares the service type (such as video conferencing, file transfer). The application server checks the subscription permissions according to the service type, such as whether the user has subscribed to the video conferencing service. The service type is explicitly defined in the message header (the original method relied on implicit parsing), driving differential processing: for real-time services such as video conferencing, high-bandwidth and low-latency channels are preferentially allocated. For non-real-time services such as file transfer, asynchronous queues and elastic bandwidth are enabled. This realizes service QoS guarantee: the video conferencing jitter rate is reduced by 25%. It also realizes dynamic resource adaptation: the bandwidth utilization rate of non-real-time services is increased by 20%.

[0041] Traceability symbol tra: In policy synchronization and routing, network nodes optimize the response routing according to the traceability symbol such as the path identifier. In session maintenance, the session controller tracks the end-to-end path status through the traceability symbol. A lightweight traceability symbol (e.g., tra = path ID123) is embedded in the message header, supporting path backtracking: quickly locating the faulty node, such as troubleshooting the link break point when the response is lost. It also supports symmetric routing: ensuring that the request and response paths are the same, avoiding path asymmetry caused by NAT or load balancing. This realizes the efficiency of fault recovery: the path problem location time is reduced by 40%. It also realizes session integrity: the packet loss rate is reduced by 10%.

[0042] Resource name Res is associated with service identifier SID: In request reception and identifier resolution: The edge node resolves the resource name Res and maps it to the service identifier SID. In authentication and authorization, the application server verifies the resource access permission through the service identifier SID. The resource name Res, as a user-readable alias, is decoupled from the service identifier SID, supporting flexible resource mapping: The same resource name can be dynamically bound to different SIDs, such as A / B test traffic distribution. Support for multi-tenant isolation: Different tenants' resources with the same name are isolated through SIDs. For example, Res=file123 corresponds to independent SIDs for tenant A and tenant B. Thus, the granularity of resource management is achieved: Support for dynamic binding of millions of resources. Compatibility is improved: Users do not need to be aware of changes in the underlying SID.

[0043] This business session control method for a multi-dimensional identifier system enhances the accuracy and flexibility of session management by adopting a multi-dimensional identifier system. Currently, most session control and authentication rely on a single identifier (such as user ID or device ID). However, with the diversification of devices and the increase in platforms, the limitations of session management with a single identifier have gradually emerged. This invention uses a multi-dimensional identifier system, which can combine multiple user identifiers such as device ID, IP address, location, time, etc., to provide more accurate session target positioning and authentication. This multi-dimensional identifier mechanism improves the flexibility and accuracy of session management, especially in cross-platform and cross-device environments, avoiding potential security risks caused by inconsistent identifiers.

[0044] This invention has higher security and anti-attack capabilities. Currently, in terms of security, it usually relies on a single identifier (such as user ID or device ID), which is vulnerable to attacks such as forgery and hijacking, and lacks effective protection for complex scenarios. Especially when multiple devices participate in a session simultaneously, it is difficult to ensure the continuity and consistency of the session. In response to this, this invention combines multi-dimensional identifiers with spatio-temporal reference information (such as device location, network status, etc.) to achieve stronger authentication and risk monitoring, and can effectively deal with security threats such as session hijacking, replay attacks, and identity forgery, ensuring data security and privacy protection during the session. This invention achieves stronger authentication and session control through multi-dimensional identifiers and spatio-temporal reference information (such as geographical location, time, etc.), effectively enhancing the anti-attack capabilities. For example, by dynamically adjusting the permissions and status of the session, security threats such as session hijacking and replay attacks can be prevented, ensuring data security and privacy protection during the session.

[0045] This service session control method for a multi-dimensional identification system features more flexible session adjustment and management. In view of the fact that in the prior art, session parameters such as media type and coding method usually cannot be flexibly adjusted after session establishment, the present invention enables more flexible session management by supporting dynamic adjustment of session parameters (such as media quality, transmission method, etc.). According to network conditions, user requirements or device capabilities, the session content can be modified at any time, avoiding the fixity and immutability during the session in the traditional solution and enhancing adaptability.

[0046] This service session control method for a multi-dimensional identification system can achieve more efficient resource and capability determination. The present invention dynamically determines the capabilities and resources of user devices through the multi-dimensional identification system, ensuring that only devices with corresponding capabilities can participate in the session during the session process. For example, before establishing a session, the system will first make judgments based on the hardware capabilities of the device, network status and device availability of the user to ensure that resources are not wasted due to a device's inability to support a certain media type. This capability determination mechanism improves the effective utilization of resources and reduces unnecessary communication overhead.

[0047] The above are only the embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, various changes and modifications can be made to the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included within the scope of the claims of the present invention.

Claims

1. A service session control method for a multi-dimensional identification system, characterized in that: The following steps are included: S1. When a user terminal accesses the network for the first time or re-accesses the network, it dynamically generates unique multi-dimensional identification information including the device identification EID, service identification SID, and network identification NID. The multi-dimensional identification information is encrypted using a hash algorithm and digitally signed before being sent to a multi-dimensional identification server to complete registration. The multi-dimensional identification server associates the multi-dimensional identification information with the device capability information and stores it; S2. The user terminal triggers cross-domain session negotiation through a cascaded multi-dimensional identification connection establishment request M_Inv, via the local multi-dimensional identification server, the destination multi-dimensional identification server, and the target device. After the traceability symbol is confirmed step by step, the user terminal and the target device complete the parameter negotiation through the confirmation response ACK and establish an end-to-end communication link; S3, the dynamic management mechanism continuously maintains the session status, adjusts the media parameters of the session in real time, performs load balancing and resource scheduling, and tracks and updates the multi-dimensional identification information of the user terminal in real time; S4: When the device signal strength is lower than the safety threshold or the battery power is lower than the threshold, it automatically scans the surrounding devices, selects candidate terminals that meet the hardware standards, establishes dual-channel transmission between the new and old devices, and achieves seamless switching of media streams through redundant packet retransmission and double buffering mechanism, so that users can complete device migration without being aware of it. S5. When the user terminal or the target terminal sends an END message with security verification, the session is terminated and resources are released.

2. The service session control method for a multi-dimensional identification system according to claim 1, characterized in that: Step S2 is specifically, S21, the user terminal sends a multi-dimensional identification connection establishment request M_Inv to the local multi-dimensional identification server, the multi-dimensional identification connection establishment request M_Inv includes a session ID, and the local multi-dimensional identification server returns a temporary response i00; S22, the local multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the destination multi-dimensional identification server, and the destination multi-dimensional identification server returns a temporary response i00; S23, the destination multi-dimensional identification server sends a multi-dimensional identification connection establishment request M_Inv to the target device, and the target device returns a temporary response i00; S24, the target device returns a session consent response success to the user terminal in sequence according to the traceability symbol; S25. The user terminal sends an acknowledgment response ACK to the target device.

3. The service session control method for a multi-dimensional identification system according to claim 1, characterized in that: In step S2, the message header of the multi-dimensional identification connection establishment request M_Inv and the message header of the confirmation response ACK both include the session unique ID, time and space reference, request initiator, request recipient, traceability symbol, resource name, service type and number of message body bytes.

4. The service session control method for a multi-dimensional identification system according to any one of claims 1-3, characterized in that: Step S3, specifically, S31. During the session, the protocol stack monitors the network bandwidth and latency in real time and automatically adjusts the media parameters of the session including video resolution, frame rate, and audio quality; S32, scheduling session traffic and performing load balancing according to network load and system resources; S33. When the multi-dimensional identification information of the user terminal changes, the multi-dimensional identification information of the user terminal is tracked and updated in real time through a multi-dimensional identification synchronization protocol.

5. The service session control method for a multi-dimensional identification system according to any one of claims 1-3, characterized in that: Step S4 is specifically, S41. Migration Trigger and Device Discovery: When the signal strength of the user terminal continuously drops below the security threshold or the battery level is lower than the threshold, start the migration preparation process. Scan for surrounding devices via Near Field Communication (NFC) or local area network broadcast, and filter out candidate devices that meet the set hardware capability requirements as target devices. S42. Context Synchronization and Seamless Switching: After selecting the target device, use incremental synchronization technology to transmit session state information: only send the data difference part since the last synchronization. During the switching process, establish a dual-channel transmission between the original device and the new device for a set period of time to ensure seamless transition of the media stream.

6. The service session control method for a multi-dimensional identification system according to any one of claims 1-3, characterized in that: Step S5 is specifically as follows. S51. When the user terminal or the target terminal sends an END message with security verification to notify the other party that the session has ended, after receiving the session termination signal, gradually clean up all resources in the session, including data caches, session parameters, and network connections. S52. After the session ends, recycle all resources used for this session and reset the relevant status information to prepare for the establishment of the next session.

Images