A data processing system for obtaining user abnormal login information

Abstract

The application provides a data processing system for obtaining user abnormal login information, which packs login request information and a key user login request information set, and sends the same to servers corresponding to actual IP addresses corresponding to virtual IP addresses requested to access in the login request, so as to avoid the problem that the failure of one of the servers corresponding to the actual IP addresses corresponding to the virtual IP addresses requested to access results in the failure to store data and the failure to call data, thus, when it is necessary to store or call user request information, the key user login request information set can be used to store or call all related data corresponding to the login request information, and when one of the servers corresponding to the actual IP addresses corresponding to the virtual IP addresses requested to access in the login request fails or is regularly maintained, the rest of the servers also store or call all request information data, thus meeting the user demand.

Description

Technical Field

[0001] This invention relates to the field of abnormal login information verification technology, and in particular to a data processing system for obtaining abnormal user login information. Background Technology

[0002] Currently, most methods for detecting abnormal user logins rely on matching usernames with passwords, without specifying time intervals for users to change their usernames and passwords. This results in low system security and makes it easy for unauthorized users to steal passwords and gain access to the system. Furthermore, when a user's login server includes two or more servers, only one server can connect the user to when a login request is made, and only that server stores the user's login record information. This leads to a lack of synchronization between the user information stored on the corresponding servers, resulting in incomplete retrieval of user information when processing is required. Therefore, there is an urgent need for a user information verification system that can improve system security and solve the problem of storing and retrieving information from two or more servers for a single user. Summary of the Invention

[0003] To address the aforementioned technical problems, the technical solution adopted by this invention is as follows:

[0004] A data processing system for obtaining abnormal user login information includes: an initial user information list A = {A1, A2, ..., A...} i A m}, processor and memory storing computer programs, wherein the i-th initial user information A i =(ZA i PA i0 PA i1 PA i2 , ..., PA ic , ..., PA iv（i） XA i ), ZA i Let PA be the i-th initial username. i0 PA is the virtual IP address accessed by the i-th initial user. ic For the i-th initial user accessing PA i0 The corresponding c-th actual IP address, XA i The protocol ID used to access the virtual IP address and the actual IP address is defined, where i ranges from 1 to m, m is the number of initial user information entries, and c ranges from 1 to v(i), where v(i) is the number of actual IP addresses corresponding to the virtual IP address accessed by the i-th initial user. When the computer program is executed by the processor, the following steps are implemented:

[0005] S10. Based on A, obtain the target user information list P = {P1, P2, ..., P...} i , ..., P m}, the information of the i-th target user P i =(ZP i EP i FP i1 FP i2 , ...,FP ic , ...,FP iv（i） ), the i-th target user identifier ZP i For the i-th initial username, EP i ZP i The corresponding first target information string, FP ic ZP i The corresponding c-th second target information string, the first target information EP i To pass ZA i PA i0 and XA i The string generated after encryption, the second target information FP ic To pass ZA i PA ic and XA i The string generated after encryption.

[0006] S20. When a login request is detected from any target user, obtain the key user login request information set R = (ZR, ER, FR1, FR2, ..., FR...). c , ..., FR v（i） The key user identifier ZR is the target user identifier for sending the login request, ER is the first key information string corresponding to ZR, and FR is... c This is the c-th second key information string corresponding to ZR. The first key information string ER is a string generated by encrypting the key user identifier ZR, the virtual IP address requested in the login request, and the protocol ID used when accessing the virtual IP address in the login request. The second key information string FR c This is a string generated by encrypting the key user identifier ZR, the c-th actual IP address corresponding to the virtual IP address requested in the login request, and the protocol ID used when accessing the c-th actual IP address in the login request; wherein, the encryption process in this step is the same as the encryption process in step S10.

[0007] S30. Traverse P according to R to obtain the final user information P0. The final user information P0 is the target user information corresponding to the target user identifier that is the same as the key user identifier that sent the login request.

[0008] S40. Calculate the similarity between P0 and R to obtain the similarity Z. When Z≥Z0, respond to the login request issued by the key user and send a login success message to the server of the key user. Z0 is the preset key information string similarity threshold.

[0009] The present invention has at least the following beneficial effects:

[0010] (1) By obtaining the first information string set, when any first user sends a login request, the second user information set is obtained, thereby obtaining the third user information set corresponding to the third user identifier that is the same as the second user identifier. Then, the similarity between the second user information set and the third user information set is obtained. When the similarity between the second user information set and the third user information set is greater than or equal to the preset second information string similarity threshold, the login request sent by the target user is responded to and a login success prompt message is sent to the server of the target user. Therefore, it not only determines whether a user can log in to the system by the username and username password, but also determines whether a user can log in to the system by the IP address accessed by the user and the client IP address used by the access IP address, thereby improving the security of the system.

[0011] (2) By dividing the user's IP into blacklists and whitelists, the possibility of others logging into the user's account with the username and password is avoided, thus improving the security of the user's account.

[0012] (3) By packaging the login request information and the key user login request information set together and sending them to the server corresponding to the actual IP address of the virtual IP address requested in the login request, the problem of data storage failure and data retrieval failure is avoided when one of the servers corresponding to the actual IP address of the virtual IP address requested in the login request fails. Therefore, when it is necessary to store or retrieve user request information, all relevant data corresponding to the login request information can be stored or retrieved through the key user login request information set. Furthermore, when one of the servers corresponding to the actual IP address of the virtual IP address requested in the login request fails or is under regular maintenance, the other servers also store or retrieve all request information data to meet user needs. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0014] Figure 1 This is a schematic diagram of a data processing system for obtaining abnormal user login information provided in an embodiment of the present invention;

[0015] Figure 2 This is a schematic diagram of a data processing system for obtaining abnormal user login information, provided as another embodiment of the present invention. Detailed Implementation

[0016] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0017] Example 1

[0018] This invention provides a data processing system for obtaining abnormal user login information. When an initial user accesses the system directly via their actual IP address instead of a virtual IP address, such as... Figure 1 As shown, perform the following steps:

[0019] S100. Based on A, obtain the initial user information after permutation: CA={CA 11 CA 12 CA 1v(1) CA i1 CA i2 CA iw CA iv(i) CA m1 CA m2 CA mv(m)}, where the initial user information CA after permutation of the i-th initial user. iw =(ZA iw PA iw XA iw ), ZA iw PA is the username corresponding to the i-th initial user. iw Let XA be the w-th actual IP address accessed by the i-th initial user. iw To access PA iw The protocol ID used, 1≤x≤v(i):

[0020] S200, based on CA, retrieves the first user information list CB={CB 11 CB 12 , ..., CB 1v(1) , ..., CB i1 CB i2 , ..., CB iw, ..., CB iv(i) CB m1 CB m2 , ..., CB mv(m)}, the first user information CB of the i-th initial user iw =(ZB iw FB iw First user identifier ZB iw The username corresponding to the i-th initial user is ZB. iw Facebook iw For CA iw The first information string generated after encryption.

[0021] Specifically, the MD5 message-digest algorithm (MD5 for short) is used to process A. i Encryption processing is performed.

[0022] Furthermore, those skilled in the art will know that any algorithm employing the MD5 message digest algorithm to digest CA iw All methods of encryption fall within the protection scope of this invention and will not be elaborated further here.

[0023] Furthermore, in this embodiment of the invention, the first information string is obtained in the following manner:

[0024] S110. Based on CA, obtain the fourth user information list K={K 11 K 12 , ..., K 1v(1) , ..., K i1 K i2 , ..., K iw , ..., K iv(i) K m1 K m2 , ..., K mv(m)}, where the fourth user information K iw =(ZK iw FK iw PK iw ), fourth user identifier ZK iw FK is the username corresponding to the i-th initial user. iw To use the first encryption algorithm to secure the CA iw The fourth information string obtained after processing, PK iw For ZK iw Access the w-th actual IP address of the server, and PA iw same.

[0025] Specifically, in this embodiment of the invention, all IP addresses are expressed in dotted decimal notation, which can be understood as the IP address being expressed in the form of (abcd), where a, b, c, and d are all decimal integers between 0 and 255.

[0026] S120. Based on K, obtain a list of random values ​​E={E 11 E 12 , ..., E 1v(1) , ..., E i1 E i2 , ..., E iw , ..., E iv(i) E m1 E m2 , ..., E mv(m)}, E iw For FK iw Random string value, based on PK iw get.

[0027] Specifically, in this embodiment of the invention, the following steps are also included to obtain E. iw ;

[0028] S121, Based on PK iw Get IP address data list F iw ={F iw1 F iw2 F iwj F iwn}, where F iwj For PK iw The j-th data in the array, where j ranges from 1 to n, and n is the pk value. iw The total number of data in the data;

[0029] S123, based on F iwj , obtain E iw , of which E iw Meets the following conditions:

[0030] n 0 To preset a random value threshold, This indicates rounding down to the nearest integer.

[0031] Specifically, in the embodiments of the present invention, those skilled in the art can set a preset random value threshold according to actual needs, which will not be elaborated here.

[0032] Furthermore, in this embodiment of the invention, E i It can also be obtained in the following ways: .

[0033] S130, based on K and E, obtain FBiw Among them, FB iw By FK iw and E iw It consists of two parts.

[0034] Specifically, FB iw This can be understood as including not only the target information string through the target username, the IP address that the server corresponding to the target user needs to access, and the protocol used by the server corresponding to the target user to access the processor, but also the random value of the target information string obtained based on the IP address that the server corresponding to the target user needs to access. Therefore, it not only combines the target string with the IP address that the server corresponding to the target user needs to access, but also improves the confidentiality of the target information string.

[0035] S300. When a login request is detected from any first user, the second user information set C = (ZC, FC) is obtained. The second user identifier ZC is the identifier of the first user who sent the login request, and FC is the second information string corresponding to ZC. The second information string is a string generated by encrypting the second user identifier, the IP address accessed in the login request, and the protocol ID used when accessing the IP address in the login request. The encryption process in this step is the same as the encryption process in step S100.

[0036] Specifically, in this embodiment, the encryption method for obtaining the second information string is the same as the encryption method for obtaining the first information string.

[0037] Furthermore, in this embodiment of the invention, upon receiving a user login request, the processor obtains basic information during the user login process through protocol detection and identification, deep parsing, and protocol reverse engineering. This information may include: user IP address, user MAC address, user port number, server IP address, server MAC address, server port number, transport layer protocol, application layer protocol, username, user password, access time, and other information.

[0038] S400. According to ZC, traverse CB to obtain the third user information B0, wherein the third user information B0 is the first user information corresponding to the first user identifier that is the same as the second user identifier that sent the login request.

[0039] S500. Calculate the similarity between B0 and C to obtain the similarity EZ. When EZ≥D0, respond to the login request issued by the target user and send a login success message to the target user's server. D0 is the preset second information string similarity threshold.

[0040] Specifically, in the embodiments of the present invention, any method for calculating the similarity between the third user information set and the second user information set falls within the protection scope of the present invention, and will not be described in detail here.

[0041] Preferably, D0=1, which can be understood as the second user information set and the third user information set need to be completely identical.

[0042] Furthermore, in this embodiment, when EZ < D0, no login request is received from the target user, and a login failure message is sent to the target user's server.

[0043] As described above, S100-S400 obtains a first set of information strings. When a login request is detected from any first user, a second set of user information is obtained, thereby obtaining a third set of user information corresponding to a third user identifier that is the same as the second user identifier. Then, the similarity between the second set of user information and the third set of user information is obtained. When the similarity between the second set of user information and the third set of user information is greater than or equal to a preset second set of information string similarity threshold, a login success message is sent to the target user's server in response to the login request. Therefore, the system not only determines whether a user can log in to the system based on the username and password, but also based on the IP address accessed by the user and the client IP address used to access the IP address, thus improving the security of the system.

[0044] In another embodiment of the present invention, A i The information also includes the following: the i-th initial user's login to PA each time... i The system also includes the following steps, which specify the client IP address used and the corresponding access time:

[0045] S1. Obtain the first client information set L={L1, L2, ..., Li, ..., Lm} based on CA, where the first client information of the i-th initial user is Li={Li1, Li2, ..., Lim}. g , ..., Li z（i）}, Li g =(PLi g CLi g ), PLi g Log in to PA for the i-th initial user i The g-th client IP address, CLI g For PLi g The corresponding number of logins, where g ranges from 1 to z(i), and z(i) is the number of logins for the i-th initial user PA. i The number of client IP addresses.

[0046] S2. Obtain the whitelist set G = {G1, G2, ..., G...} based on L. i , ..., G m}, where G is the whitelist list of the i-th initial user. i ={G i1 G i2 , ..., G ix , ..., G iq（i）}, G ix For G i The x-th client IP address in the list has exceeded the preset login count threshold, where x ranges from 1 to q(i), and q(i) is a variable in G. i The number of client IP addresses, where q(i) < z(i).

[0047] Specifically, in this embodiment of the invention, the client IP address is the client server address. Each user can set a default client IP address and add it to the corresponding whitelist. Therefore, it can avoid the situation where users frequently receive prompt messages when they first use this system.

[0048] Furthermore, in this embodiment of the invention, the whitelist can be understood as a list of client IP addresses trusted by the system.

[0049] S3. When the login request of the i-th first user is detected and the client IP address corresponding to the login request is ∉G i Based on L i Obtain the second client information set Z i =(PZ i CZ i SZ i1 SZ i2 SZ ip SZ ib ), PZ i CZ is the client IP address corresponding to the login request. i For PZ i The corresponding number of historical logins, SZ ip For PZ i The corresponding historical login time is p, where p ranges from 1 to b, and b is PZ. i The corresponding number of historical logins.

[0050] Specifically, b=CZ i .

[0051] S4, based on L and Z i Priority for obtaining the second client's IP address: YH i Among them, YH i Meets the following conditions:

[0052] ;

[0053] Specifically, in the embodiments of the present invention, YH i The larger the target user, the higher the priority.

[0054] S5, when YH i When ≥YH, PZ i Add it to the i-th whitelist, where YH is the preset user priority threshold.

[0055] Specifically, in the embodiments of the present invention, those skilled in the art can determine the preset user priority threshold according to actual needs, which will not be elaborated here.

[0056] Furthermore, in this embodiment of the invention, when YH i When <YH, PZ i Add it to the i-th blacklist.

[0057] Furthermore, in this embodiment of the invention, the blacklist is a list of client IP addresses that are not trusted by the system.

[0058] Furthermore, in this embodiment of the invention, while sending a prompt to the user's server to change the username and password, an abnormal login prompt is also sent to the server corresponding to the default client IP address.

[0059] As described above, S1-S6 uses blacklists and whitelists to classify user IP addresses, thus preventing unauthorized logins to user accounts even with access to the username and password, thereby improving user account security.

[0060] Example 2

[0061] This invention provides a data processing system for obtaining abnormal user login information, characterized in that the system includes: an initial user information list A = {A1, A2, ..., A...} i A m}, processor and memory storing computer programs, wherein the i-th initial user information A i =(ZA i PA i0 PA i1 PA i2 , ..., PA ic , ..., PA iv（i） XA i ), ZA i Let PA be the i-th initial username. i0 PA is the virtual IP address accessed by the i-th initial user. ic For the i-th initial user accessing PAi0 The corresponding c-th actual IP address, XA i The protocol IDs used to access virtual IP addresses and physical IP addresses are defined, where i ranges from 1 to m, m is the number of initial user information entries, and c ranges from 1 to v(i), where v(i) is the number of physical IP addresses corresponding to the virtual IP address accessed by the i-th initial user. When the computer program is executed by the processor, such as... Figure 2 As shown, the following steps are performed:

[0062] S10. Based on A, obtain the target user information list P = {P1, P2, ..., P...} i , ..., P m}, the information of the i-th target user P i =(ZP i EP i FP i1 FP i2 , ...,FP ic , ...,FP iv（i） ), the i-th target user identifier ZP i For the i-th initial username, EP i ZP i The corresponding first target information string, FP ic ZP i The corresponding c-th second target information string, the first target information EP i To pass ZA i PA i0 and XA i The string generated after encryption, the second target information FP ic To pass ZA i PA ic and XA i The string generated after encryption.

[0063] Specifically, in this embodiment of the invention, the actual IP address is the real IP address corresponding to the server that the initial user can access; the virtual IP address is generated based on the actual IP address and does not correspond to any server.

[0064] S20. When a login request is detected from any target user, obtain the key user login request information set R = (ZR, ER, FR1, FR2, ..., FR...). c , ..., FR v（i） The key user identifier ZR is the target user identifier for sending the login request, ER is the first key information string corresponding to ZR, and FR is... cThe c-th second key information string corresponding to ZR is the first key information string ER, which is a string generated by encrypting the key user identifier ZR, the virtual IP address requested in the login request, and the protocol ID used when accessing the virtual IP address in the login request. The second key information string FR is... c This is a string generated by encrypting the key user identifier ZR, the c-th actual IP address corresponding to the virtual IP address requested in the login request, and the protocol ID used when accessing the c-th actual IP address in the login request; wherein, the encryption process in this step is the same as the encryption process in step S10.

[0065] S30. Traverse P according to R to obtain the final user information P0, wherein the final user information P0 is the target user information corresponding to the target user identifier that is the same as the key user identifier that sent the login request.

[0066] S40. Calculate the similarity between P0 and R to obtain the similarity Z. When Z≥Z0, respond to the login request issued by the key user and send a login success message to the server of the key user. Z0 is the preset key information string similarity threshold.

[0067] Specifically, in this embodiment of the invention, the similarity between P0 and R is calculated using Euclidean distance.

[0068] Furthermore, in this embodiment of the invention, Z0=1.

[0069] Furthermore, in this embodiment of the invention, when Z < Z0, no login request is received from the key user and a login failure message is sent to the key user's server.

[0070] Furthermore, in this embodiment of the invention, the following steps are also included: sending the login request of the target user and the key user login request information set to the server corresponding to the actual IP address of the virtual IP address requested in the login request, and storing the login request of the target user to the server corresponding to the actual IP address of the virtual IP address requested in the login request.

[0071] As described above, by packaging the login request information and the key user login request information set together and sending them to the server corresponding to the actual IP address of the virtual IP address requested in the login request, the problem of data storage and retrieval failure caused by the failure of one of the servers corresponding to the actual IP address of the requested virtual IP address is avoided. Therefore, when it is necessary to store or retrieve user request information, all relevant data corresponding to the login request information can be stored or retrieved through the key user login request information set. Furthermore, when one of the servers corresponding to the actual IP address of the requested virtual IP address in the login request fails or is undergoing scheduled maintenance, the remaining servers also store or retrieve all request information data, thus meeting user needs.

[0072] While specific embodiments of the invention have been described in detail by way of example, those skilled in the art should understand that the above examples are for illustrative purposes only and are not intended to limit the scope of the invention. Those skilled in the art should also understand that various modifications can be made to the embodiments without departing from the scope and spirit of the invention. The scope of the invention is defined by the appended claims.

Claims

1. A data processing system for acquiring abnormal user login information, characterized in that, The system includes: an initial user information list A = {A1, A2, ..., A...} i A m }, processor and memory storing computer programs, wherein the i-th initial user information A i =(ZA i PA i0 PA i1 PA i2 , ..., PA ic , ..., PA iv（i） XA i ), ZA i Let PA be the i-th initial username. i0 PA is the virtual IP address accessed by the i-th initial user. ic For the i-th initial user accessing PA i0 The corresponding c-th actual IP address, XA i The protocol ID used to access the virtual IP address and the actual IP address is defined, where i ranges from 1 to m, m is the number of initial user information entries, and c ranges from 1 to v(i), where v(i) is the number of actual IP addresses corresponding to the virtual IP address accessed by the i-th initial user. When the computer program is executed by the processor, the following steps are implemented: S10. Based on A, obtain the target user information list P = {P1, P2, ..., P...} i , ..., P m }, the information of the i-th target user P i =(ZP i EP i FP i1 FP i2 , ...,FP ic , ...,FP iv（i） ), the i-th target user identifier ZP i For the i-th initial username, EP i ZP i The corresponding first target information string, FP ic ZP i The corresponding c-th second target information string, the first target information EP i To pass ZA i PA i0 and XA i The string generated after encryption, the second target information FP ic To pass ZA i PA ic and XA i The string generated after encryption; S20. When a login request is detected from any target user, obtain the key user login request information set R = (ZR, ER, FR1, FR2, ..., FR...). c , ..., FR v（i） The key user identifier ZR is the target user identifier for sending the login request, ER is the first key information string corresponding to ZR, and FR is... c The c-th second key information string corresponding to ZR is the first key information string ER, which is a string generated by encrypting the key user identifier ZR, the virtual IP address requested in the login request, and the protocol ID used when accessing the virtual IP address in the login request. The second key information string FR is... c The string is generated by encrypting the key user identifier ZR, the c-th actual IP address corresponding to the virtual IP address requested in the login request, and the protocol ID used when accessing the c-th actual IP address in the login request; wherein, the encryption process in step S20 is the same as the encryption process in step S10. S30. Traverse P according to R to obtain the final user information P0, wherein the final user information P0 is the target user information corresponding to the target user identifier that is the same as the key user identifier that sent the login request. S40. Calculate the similarity between P0 and R to obtain the similarity Z. When Z≥Z0, respond to the login request issued by the key user and send a login success message to the server of the key user. Z0 is the preset key information string similarity threshold.

2. The system according to claim 1, characterized in that, In S40, Z0=1.

3. The system according to claim 1, characterized in that, Following S40, the following steps are also included: S50. When Z < Z0, do not accept login requests from key users and send login failure messages to the server of the key user. S60. Send the login request issued by the key user and R to the server corresponding to the actual IP address of the virtual IP address in the login request issued by the key user, and store the request information corresponding to the login request issued by the key user to the server corresponding to the actual IP address of the virtual IP address in the login request issued by the key user.

4. The system according to claim 1, characterized in that, When the initial user does not need to go through a virtual IP address but directly through a physical IP address, the following steps are performed: S100. Based on A, obtain the initial user information after permutation: CA={CA 11 CA 12 CA 1v(1) CA i1 CA i2 CA iw CA iv(i) CA m1 CA m2 CA mv(m) }, where the initial user information CA after permutation of the i-th initial user. iw =(ZA iw PA iw XA iw ), ZA iw PA is the username corresponding to the i-th initial user. iw Let XA be the w-th actual IP address accessed by the i-th initial user. iw To access PA iw The protocol ID used is 1 ≤ x ≤ v(i); S200, based on CA, retrieves the first user information list CB={CB 11 CB 12 , ..., CB 1v(1) , ..., CB i1 CB i2 , ..., CB iw , ..., CB iv(i) CB m1 CB m2 , ..., CB mv(m) }, the first user information CB of the i-th initial user iw =(ZB iw FB iw First user identifier ZB iw The username corresponding to the i-th initial user is ZB. iw Facebook iw For CA iw The first information string generated after encryption; S300. When a login request is detected from any first user, the second user information set C = (ZC, FC) is obtained. The second user identifier ZC is the identifier of the first user who sent the login request, and FC is the second information string corresponding to ZC. The second information string is a string generated by encrypting the second user identifier, the IP address accessed in the login request, and the protocol ID used when accessing the IP address in the login request. The encryption process in this step is the same as the encryption process in step S100. S400. Traverse CB according to ZC to obtain third user information B0, wherein the third user information B0 is the first user information corresponding to the first user identifier that is the same as the second user identifier that sent the login request; S500. Calculate the similarity between B0 and C to obtain the similarity EZ. When EZ≥D0, respond to the login request issued by the target user and send a login success message to the target user's server. D0 is the preset second information string similarity threshold.

5. The system according to claim 4, characterized in that, The first information string is obtained in the following way: S110. Based on CA, obtain the fourth user information list K={K 11 K 12 , ..., K 1v(1) , ..., K i1 K i2 , ..., K iw , ..., K iv(i) K m1 K m2 , ..., K mv(m) }, where the fourth user information K iw =(ZK iw FK iw PK iw ), fourth user identifier ZK iw FK is the username corresponding to the i-th initial user. iw To use the first encryption algorithm to secure the CA iw The fourth information string obtained after processing, PK iw For ZK iw Access the w-th actual IP address of the server, and PA iw same; S120. Based on K, obtain a list of random values ​​E={E 11 E 12 , ..., E 1v(1) , ..., E i1 E i2 , ..., E iw , ..., E iv(i) E m1 E m2 , ..., E mv(m) }, E iw For FK iw Random string value, based on PK iw get; S130, based on K and E, obtain FB iw , among which FB iw By FK iw and E iw It consists of two parts.

6. The system according to claim 5, characterized in that, E iw Obtain it through the following methods: S121, Based on PK iw Get IP address data list F iw ={F iw1 F iw2 F iwj F iwn }, where F iwj For PK iw The j-th data in the array, where j ranges from 1 to n, and n is the pk value. iw The total number of data in the data; S123, based on F iwj , obtain E iw , of which E iw Meets the following conditions: n 0 To preset a random value threshold, This indicates rounding down to the nearest integer.

7. The system according to claim 4, characterized in that, In S500, D0=1.

Images