Session establishment method and device, electronic device and readable storage medium

Abstract

The present invention provides a session establishment method and apparatus, an electronic device, and a readable storage medium, relating to the field of communications technology. The method includes: performing security authentication on a UDP message sent by a user terminal; if the UDP message passes security authentication, establishing a return route based on the UDP message; and conducting a session with the user terminal based on the return route. Therefore, the present invention can address the related art issue of open server ports being susceptible to intrusion and penetration, resulting in risks of data leakage and program corruption.

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and in particular to a session establishment method and device, an electronic device, and a readable storage medium. Background Art

[0002] In existing technologies, servers that provide relevant business services to network users are subject to massive port scanning from the internet. Once the server's open ports are scanned, they are at risk of intrusion and penetration. If the application program of the server's open port has a vulnerability, it is extremely vulnerable to intrusion, resulting in security incidents such as data leakage and program damage, causing huge losses. Summary of the Invention

[0003] The embodiments of the present invention provide a session establishment method and apparatus, an electronic device, and a readable storage medium to solve the problem in related technologies that an open port of a server is easily invaded and infiltrated, resulting in risks of data leakage and program destruction.

[0004] In order to solve the above-mentioned technical problems, the present invention is achieved as follows:

[0005] In the first aspect, an embodiment of the present invention provides a session establishment method, which is applied to a server, and the method includes: performing security authentication on a UDP message sent by a user terminal; if the security authentication of the UDP message passes, establishing a return route based on the UDP message; and conducting a session with the user terminal based on the return route.

[0006] Furthermore, before performing security authentication on the UDP message sent by the user terminal, the method further includes: installing a preset application service and a UDP authentication service in the server; opening a designated port, and deleting the default gateway of the server.

[0007] Furthermore, the performing security authentication on the UDP message sent by the user terminal includes: authenticating an authentication feature code of the user terminal carried in the UDP message.

[0008] Furthermore, if the UDP message security authentication passes, establishing a return route according to the UDP message includes: establishing the return route according to the IP address of the user terminal in the UDP message.

[0009] Furthermore, conducting a conversation with the user terminal according to the return route includes: receiving a connection request sent by the user terminal; if the return route exists, sending session data to the user terminal, or receiving session data sent by the user terminal; if the return route does not exist, not responding to the connection request.

[0010] Furthermore, after conducting a session with the user terminal according to the backhaul route, the method further includes: deleting the backhaul route after ending the session with the user terminal.

[0011] In the second aspect, an embodiment of the present invention further provides a session establishment device, which is applied to a server, and the device includes: an authentication module, which is used to perform security authentication on a UDP message sent by a first terminal; a processing module, which is used to establish a return route based on the UDP message if the security authentication of the UDP message passes; and a session module, which is used to conduct a session with the first terminal based on the return route.

[0012] Furthermore, it also includes: the processing module is also used to install a preset application service and a UDP authentication service in the server before performing security authentication on the UDP message sent to the first terminal; the processing module is also used to open a specified port and delete the default gateway of the server.

[0013] Furthermore, the authentication module includes: an authentication unit, configured to authenticate the authentication feature code of the first terminal carried in the UDP message.

[0014] Furthermore, the method further includes: the processing module is further configured to delete the backhaul route after the session with the first terminal is conducted according to the backhaul route and after the session with the first terminal is ended.

[0015] In a third aspect, an embodiment of the present invention further provides an electronic device comprising: a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein when the computer program is executed by the processor, the steps of the session establishment method as described in the first aspect are implemented.

[0016] In a fourth aspect, an embodiment of the present invention further provides a readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of the session establishment method as described in the first aspect are implemented.

[0017] In an embodiment of the present invention, security authentication is performed on the UDP message sent by the user terminal; if the UDP message security authentication passes, a return route is established based on the UDP message; and a conversation is conducted with the user terminal based on the return route. By performing security authentication on the UDP message sent by the user terminal, security authentication of the user terminal is achieved, ensuring the security of service access. Then, a conversation is conducted with the user terminal based on the return route established based on the UDP message, reducing the time and cost of establishing the session and improving the speed and security of establishing the session between the server and the user terminal. The present invention solves the problem in the related art that the open port of the server is easily invaded and infiltrated, resulting in the risk of data leakage and program destruction.

[0018] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are specifically listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0020] Figure 1 This is a schematic diagram of an application scenario of a session establishment method according to an embodiment of the present invention;

[0021] Figure 2 is a flow chart of a session establishment method according to an embodiment of the present invention;

[0022] Figure 3 1 is a flow chart of another session establishment method in an embodiment of the present invention;

[0023] Figure 4 It is a structural diagram of a session establishment device in an embodiment of the present invention. DETAILED DESCRIPTION

[0024] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0025] Example 1

[0026] Before introducing the session establishment method in the embodiment of the present invention, the application scenario of the embodiment is first introduced. Figure 1 The figure shows a schematic diagram of an application scenario of this embodiment. Figure 1 The server 10 and the user terminal 20 are included in the network, and the network where the server 10 and the user terminal 20 are located includes but is not limited to a local area network and a wide area network.

[0027] The server 10 only opens a preset port. The user terminal 20 sends a UDP message to the preset port. The server 10 performs security authentication on the UDP (User Datagram Protocol) message sent by the user terminal. If the UDP message security authentication passes, a return route is established based on the UDP message. After a preset time, the user terminal 20 sends a session connection request to the server 10. If a return route exists, the server 10 establishes a session with the user terminal 20 based on the return route.

[0028] Through this embodiment, the UDP message sent by the user terminal 20 is securely authenticated to achieve security authentication of the user terminal 20, ensuring the security of service access, and then a conversation is conducted with the user terminal 20 based on the return route established based on the UDP message, reducing the time and cost of establishing the session, and improving the speed and security of establishing the session between the server 10 and the user terminal 20.

[0029] According to an embodiment of the present invention, a session establishment method is provided, such as Figure 2 As shown, the method may specifically include the following steps:

[0030] S202, performing security authentication on the UDP message sent by the user terminal;

[0031] S204, if the UDP message security authentication passes, then establish a return route based on the UDP message;

[0032] S206: Conduct a session with the user terminal according to the backhaul route.

[0033] In the application scenario of this embodiment, user terminals include, but are not limited to, PCs, mobile terminals, and microcomputers. A server supports a specific pre-defined service. A user terminal accesses the server to establish a corresponding session connection and access the pre-defined service. The client corresponding to the pre-defined service in the user terminal sends a UDP packet to the application corresponding to the pre-defined service on the server.

[0034] In this embodiment, a one-way monitoring service is provided in the server, such as a syslog log collection server, which performs security authentication on UDP packets received by the server to screen out malicious network attacks and avoid intrusion and penetration.

[0035] Security authentication of received UDP messages includes but is not limited to: authenticating the MAC address of the user terminal corresponding to the UDP message; authenticating the user ID of the target user corresponding to the UDP message; authenticating the source IP address of the UDP message and authenticating the data carried by the UDP message.

[0036] If the UDP message security authentication passes, a return route is established based on the UDP message. For example, the routes between two devices generally need to route each other, that is, they appear in pairs, in order to achieve mutual communication. One is the route (A→B) and the other is called the return route (B←A). Therefore, after the UDP message security authentication passes, a static return route is established based on the source IP address of the UDP message, so that a session connection can be established with the user terminal based on the static return route through TCP (Transmission Control Protocol) / UDP messages.

[0037] On the other hand, if the UDP message security authentication fails, the UDP message will not be responded to and will be discarded.

[0038] In this embodiment, after the client corresponding to the preset service in the user terminal sends a UDP message to the server, after a preset time, the client corresponding to the preset service in the user terminal sends a connection request to the server to establish a session between the user terminal and the server.

[0039] After receiving the connection request sent by the client, the server determines whether there is a return route corresponding to the user terminal in its own routing list. If there is a return route, it allows the establishment of a session with the user terminal based on the return route and can receive / send session data to the user terminal.

[0040] On the other hand, if there is no return route, the server cannot return the corresponding session response request to the user terminal, and the session establishment fails.

[0041] Through this embodiment, since UDP does not have the three-way handshake mechanism of TCP, the server can receive UDP messages from any user. By performing security authentication on the UDP messages through the one-way UDP monitoring service installed in the server, it can be determined that the UDP access request messages in the received UDP messages are from legitimate users. After authentication, a return route for the legitimate user is added to meet the user's needs for accessing application services.

[0042] It should be noted that in this embodiment, security authentication is performed on the UDP message sent by the user terminal; if the UDP message security authentication passes, a return route is established based on the UDP message; and a conversation is conducted with the user terminal based on the return route. By performing security authentication on the UDP message sent by the user terminal, security authentication of the user terminal is achieved, ensuring the security of service access. Then, a conversation is conducted with the user terminal based on the return route established based on the UDP message, reducing the time and cost of establishing the session, and improving the speed and security of establishing the session between the server and the user terminal. The present invention solves the problem in the related art that the open port of the server is easily invaded and infiltrated, resulting in the risk of data leakage and program destruction.

[0043] Optionally, in this embodiment, before performing security authentication on the UDP message sent by the user terminal, it also includes but is not limited to: installing a preset application service and a UDP authentication service in the server; opening a designated port, and deleting the default gateway of the server.

[0044] Specifically, after the server installs the service program of the preset business, it installs a one-way UDP monitoring service, such as a syslog log collection server, opens UDP514 port by default, and then deletes the default gateway.

[0045] Then, add a UDP authentication service on the server to perform security authentication on the UDP message and the data carried in the message. After the authentication is passed, a return route is added for the source IP address.

[0046] Through the above example, the preset application service and UDP authentication service are installed on the server; the specified port is opened, and the server's default gateway is deleted. The server has no default gateway, and the one-way UDP monitoring service does not need to respond to the client. Therefore, the server's open port will not be scanned by illegal users, which is equivalent to eliminating the risk of Internet exposure.

[0047] Optionally, in this embodiment, security authentication is performed on the UDP message sent by the user terminal, including but not limited to: authenticating the authentication feature code of the user terminal carried in the UDP message.

[0048] Specifically, in this embodiment, the server can pre-agree on an authentication feature code with the client in the user terminal, and then carry the authentication feature code in the UDP message sent by the client to the server, so that the server can authenticate the authentication feature code of the user terminal carried in the UDP message.

[0049] In addition, security authentication of received UDP messages includes but is not limited to: authenticating the MAC address of the user terminal corresponding to the UDP message; authenticating the user ID of the target user corresponding to the UDP message; authenticating the source IP address of the UDP message and authenticating the data carried by the UDP message.

[0050] Through the above example, the authentication feature code of the user terminal carried in the UDP message is authenticated, malicious access by illegal users is eliminated, and secure authentication of legitimate users is achieved.

[0051] Optionally, in this embodiment, if the UDP message security authentication passes, a return route is established according to the UDP message, including but not limited to: establishing a return route according to the IP address of the user terminal in the UDP message.

[0052] In this embodiment, UDP messages do not have the three-way handshake mechanism of TCP. Therefore, even if there is no return route, the server can receive the UDP access request message sent by the access client. If the authentication is successful, a return route for the source IP address is temporarily added to meet the client's need to access the application.

[0053] Optionally, in this embodiment, a conversation is conducted with the user terminal based on the return route, including but not limited to: receiving a connection request sent by the user terminal; if there is a return route, sending session data to the user terminal, or receiving session data sent by the user terminal; if there is no return route, not responding to the connection request.

[0054] Specifically, receiving a connection request sent by a client of a preset service in a user terminal, establishing a session with the user terminal if a backhaul route exists, sending session data to the user terminal, or receiving session data sent by the user terminal;

[0055] On the other hand, if there is no return route, the server cannot return the corresponding session response request to the user terminal, and the session establishment fails.

[0056] Optionally, in this embodiment, after conducting a session with the user terminal according to the backhaul route, the method further includes, but is not limited to, deleting the backhaul route after ending the session with the user terminal.

[0057] After successful authentication, a return route for the source IP address is temporarily added to the server to meet the client's needs for accessing the application. After the session with the user terminal is completed and ended, the return route is deleted to ensure server security.

[0058] In a specific example, Figure 3 As shown, the session establishment method in this embodiment may specifically include the following steps:

[0059] Client:

[0060] S351: Send the authentication feature code to the server.

[0061] Server side

[0062] S301, install the APP service and UDP authentication service, and delete the default gateway;

[0063] S302, monitor UDP authentication services and APP services, monitor and deal with illegal routes;

[0064] S303, the UDP authentication service receives and extracts the source IP and authentication signature;

[0065] Specifically, the UDP message sent by the client is received, and the source IP and authentication feature code of the UDP message are extracted.

[0066] S304, determining whether the authentication feature code is successfully authenticated;

[0067] Specifically, if successful, jump to S306; otherwise, jump to S305.

[0068] S305, no processing;

[0069] S306: Add a static return route based on the source IP address.

[0070] Client:

[0071] S352, wait for 3 seconds;

[0072] S353, send a connection request.

[0073] Server side:

[0074] S307, determining whether a return route exists;

[0075] Specifically, if it exists, jump to S309; ​​if not, jump to S308.

[0076] S308, session establishment failed;

[0077] Specifically, the APP response message cannot reach the client, and the session establishment fails.

[0078] S309, receiving / sending session data;

[0079] S310, end the session;

[0080] S311, the monitoring program deletes the return route.

[0081] Client:

[0082] S354, receiving / sending session data;

[0083] S355, end the session.

[0084] Through the embodiment of the present invention, the UDP message sent by the user terminal is securely authenticated; if the UDP message security authentication is passed, a return route is established based on the UDP message; and a conversation is conducted with the user terminal based on the return route. By performing security authentication on the UDP message sent by the user terminal, security authentication of the user terminal is achieved, ensuring the security of service access. Then, a conversation is conducted with the user terminal based on the return route established based on the UDP message, reducing the time and cost of establishing the session, and improving the speed and security of establishing the session between the server and the user terminal. The present invention solves the problem in the related art that the open port of the server is easily invaded and infiltrated, resulting in the risk of data leakage and program destruction.

[0085] Example 2

[0086] A session establishment device provided by an embodiment of the present invention is introduced in detail.

[0087] Reference Figure 4 , shows a structural diagram of a session establishment device in an embodiment of the present invention.

[0088] The session establishing device according to the embodiment of the present invention includes an authentication module 40 , a processing module 42 and a session module 44 .

[0089] The functions of each module and the interactions between them are introduced in detail below.

[0090] Authentication module 40, used to perform security authentication on the UDP message sent by the first terminal;

[0091] The processing module 42 is configured to establish a return route according to the UDP message if the UDP message security authentication passes;

[0092] The conversation module 44 is configured to conduct a conversation with the first terminal according to the backhaul route.

[0093] Optionally, in this embodiment, the method further includes:

[0094] The processing module 42 is further configured to install a preset application service and a UDP authentication service in the server before performing security authentication on the UDP message sent by the first terminal;

[0095] The processing module 42 is further configured to open a designated port and delete the default gateway of the server.

[0096] Optionally, in this embodiment, the authentication module 40 includes:

[0097] An authentication unit is configured to authenticate the authentication feature code of the first terminal carried in the UDP message.

[0098] Optionally, in this embodiment, the method further includes:

[0099] The processing module 42 is further configured to delete the backhaul route after the session with the first terminal is performed according to the backhaul route and after the session with the first terminal is terminated.

[0100] Moreover, in an embodiment of the present invention, security authentication is performed on the UDP message sent by the user terminal; if the UDP message security authentication passes, a return route is established based on the UDP message; and a conversation is conducted with the user terminal based on the return route. By performing security authentication on the UDP message sent by the user terminal, security authentication of the user terminal is achieved, ensuring the security of service access. Then, a conversation is conducted with the user terminal based on the return route established based on the UDP message, reducing the time and cost of establishing the session, and improving the speed and security of establishing the session between the server and the user terminal. The present invention solves the problem in the related art that the open port of the server is easily invaded and infiltrated, resulting in the risk of data leakage and program destruction.

[0101] Example 3

[0102] Preferably, an embodiment of the present invention further provides an electronic device comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the steps of the session establishment method described above when executed by the processor.

[0103] Optionally, in this embodiment, the memory is configured to store program codes for executing the following steps:

[0104] S1, performs security authentication on UDP packets sent by user terminals;

[0105] S2, if the UDP message security authentication passes, establishing a return route according to the UDP message;

[0106] S3: Conduct a session with the user terminal according to the backhaul route.

[0107] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiment 1, and this embodiment will not be described in detail here.

[0108] Example 4

[0109] The embodiment of the present invention further provides a readable storage medium. Optionally, in this embodiment, the readable storage medium stores a program or instruction, which, when executed by a processor, implements the steps of the session establishment method described in embodiment 1.

[0110] Optionally, in this embodiment, the readable storage medium is configured to store program codes for executing the following steps:

[0111] S1, performs security authentication on UDP packets sent by user terminals;

[0112] S2, if the UDP message security authentication passes, establishing a return route according to the UDP message;

[0113] S3: Conduct a session with the user terminal according to the backhaul route.

[0114] Optionally, the readable storage medium is further configured to store program codes for executing the steps included in the method in the above-mentioned embodiment 1, which will not be described in detail in this embodiment.

[0115] Optionally, in this embodiment, the above-mentioned readable storage medium may include but is not limited to: a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and other media that can store program codes.

[0116] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiment 1, and this embodiment will not be described in detail here.

[0117] It should be noted that, in this document, the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or apparatus comprising the element.

[0118] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0119] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are protected by the present invention.

[0120] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in the embodiments of the present invention can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0121] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0122] In the embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0123] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0124] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0125] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes various media that can store program code, such as a USB flash drive, a mobile hard drive, ROM, RAM, a magnetic disk, or an optical disk.

[0126] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any modifications or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the claims.

Claims

1. A session establishment method, characterized in that: Applied to a server, the method includes: Perform security authentication on UDP packets sent by user terminals through one-way UDP monitoring service; If the UDP message security authentication passes, a return route is established according to the UDP message; If the UDP message security authentication fails, the UDP message is discarded; Conducting a session with the user terminal according to the backhaul route; Before performing security authentication on the UDP message sent by the user terminal, the method further includes: Installing a preset application service and a UDP authentication service in the server; Open the specified port and delete the default gateway of the server.

2. The method according to claim 1, characterized in that The security authentication of the UDP message sent by the user terminal includes: Authenticate the authentication feature code of the user terminal carried in the UDP message.

3. The method according to claim 1, characterized in that If the UDP message security authentication passes, establishing a return route according to the UDP message includes: The return route is established according to the IP address of the user terminal in the UDP message.

4. The method according to claim 1, wherein The conducting a session with the user terminal according to the backhaul route includes: receiving a connection request sent by the user terminal; If the backhaul route exists, sending the session data to the user terminal, or receiving the session data sent by the user terminal; If the backhaul route does not exist, the connection request is not responded to.

5. The method according to claim 1, wherein After conducting a session with the user terminal according to the backhaul route, the method further includes: After the session with the user terminal is terminated, the backhaul route is deleted.

6. A session establishing device, characterized in that: Applied to a server, the device includes: An authentication module, configured to perform security authentication on the UDP message sent by the first terminal by the one-way UDP monitoring service; A processing module, configured to establish a return route according to the UDP message if the UDP message security authentication passes; and discard the UDP message if the UDP message security authentication fails; A conversation module, configured to conduct a conversation with the first terminal according to the backhaul route; The processing module is further configured to install a preset application service and a UDP authentication service in the server before performing security authentication on the UDP message sent by the first terminal; The processing module is further configured to open a designated port and delete the default gateway of the server.

7. The device according to claim 6, characterized in that The authentication module includes: An authentication unit is configured to authenticate the authentication feature code of the first terminal carried in the UDP message.

8. The device according to claim 6, characterized in that Also includes: The processing module is further configured to delete the backhaul route after the session with the first terminal is performed according to the backhaul route and after the session with the first terminal is terminated.

9. An electronic device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the session establishment method according to any one of claims 1 to 5.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the session establishment method according to any one of claims 1 to 5.

Images