An encrypted transmission method, system, device and storage medium integrating identity authentication

Abstract

The present invention provides a method, system, device and storage medium for integrated identity authentication, which uses the IP and MAC addresses of the server where the software service is located as identity authentication factors for identity authentication, and establishes an encrypted transmission channel through the PKAE protocol using the session key generated by the protocol. In this process, the session key only appears locally on the servers of both parties of the data transmission and is not exposed to the outside. When generating the session key, only the intermediate value is transmitted instead of the real session key, so as to achieve the effect of completing the identity authentication between institutions and generating the session key at the same time.

Description

Technical Field

[0001] The present invention relates to the field of encryption technology, and in particular to an encryption transmission method, system, device and storage medium integrating identity authentication, which can be used for data exchange between different data nodes in a network environment. Background Art

[0002] The identity authentication of two data nodes that need to exchange data in a network environment is a crucial link. While protecting the security of the data usage process and preventing data leakage, a secure and trusted environment is also required, which verifies the identities of both parties in the data exchange and sharing.

[0003] Public Key Infrastructure (PKI) is a typical cryptographic application technology. In the PKI system, a digital certificate is issued by a certification authority (CA) and bound to the identity information and public key of a PKI user. The PKI relying party stores a self-signed certificate of the root CA that it trusts in advance, which is used to verify the certificate chain of the PKI user with which it communicates, so as to reliably obtain the public key of the user for various security services. PKI uses public key technology and digital certificates to establish a security domain. In this environment, PKI is mainly responsible for managing encryption keys, including key updates and recovery; responsible for issuing digital certificates, including certificate generation, updates and revocation. If the PKI system needs to establish an interconnected trust relationship with other security domains, it can establish a connection through cross-certification and other forms. PKI combines hardware systems, software systems and security policies to form a complete security mechanism. No matter where the sender is or what his identity is, the certificate is the most fundamental basis of trust, and on this basis, both parties conduct various communication activities.

[0004] The PKI system consists of a certification authority (CA), a registration authority (RA), a digital certificate library, a key backup and recovery system, a certificate revocation system, a key update mechanism, etc. However, the management cost of PKI is very high, and policy drafting, allocation, and training of management users require a lot of time and labor costs. Summary of the invention

[0005] The present invention aims to solve the defect of high management cost of the prior art PKI system, and proposes a new encryption transmission method, system, device and storage medium integrating identity authentication. The encryption transmission method includes user registration and key generation; wherein user registration includes:

[0006] Obtain the IP address and MAC address of the first data node device network card, generate a random salt s, and use a hash function to generate the IP parameter I of the IP address, the MAC parameter P of the MAC address, and the parameters x and v. The generation formula is as follows, where g is a fixed parameter within the range of a fixed large prime number N:

[0007] I=Hash(IP address)

[0008] P = Hash (MAC address)

[0009] x = Hash(random salt s, P)

[0010] v=g^x

[0011] The first data node stores the parameter I and the parameter P in the first database, and sends the parameter I, the parameter v, and the parameter s to the second data node;

[0012] Furthermore, the second data node stores the received parameter I, parameter v and parameter s in the second database, and sends the user registration completion information to the first data node.

[0013] Key generation includes:

[0014] Step 1: The user sends a key generation request to the first data node, and the first data node calculates the parameter I according to the IP address;

[0015] Step 2: The first data node obtains parameter P from the first database;

[0016] Step 3: Calculate parameter A=g^a, where a is a random number and g is a fixed parameter in the system, and send parameter I and parameter A to the second data node;

[0017] Step 4: The second data node finds the parameter v and the parameter s in the second database according to the parameter I, and calculates the parameter B=kv+g^b, where the parameter k=Hash(N, g), N is a fixed large prime number and g is a fixed number within N;

[0018] Step 5: The second data node sends the parameter s and the parameter B to the first data node;

[0019] Step 6: The first data node and the second data node simultaneously calculate parameter u=Hash(A, B), the first data node calculates parameter x=Hash(s, p), parameter S1=(B-kg^x)^(a+ux), parameter K1=Hash(S1), and the second data node calculates parameter S2=(Av^u)^b, K2=Hash(S2);

[0020] Step 7: The first data node calculates parameter M1 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K1) and sends it to the second data node;

[0021] Step 8: The second data node also calculates parameter M2 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K2) and verifies it with the received parameter M1. After the verification passes, the parameter K1 is stored in the first database as the session key;

[0022] Step 9: The second data node calculates Hash(A,M2,K2) and returns the hash value to the first data node;

[0023] Step 10: The first data node receives Hash(A,M2,K2) and similarly calculates Hash(A,M1,K1) for verification. After the verification passes, the parameter K2 is stored as the session key in the second database.

[0024] Furthermore, the encrypted transmission method also includes, after the verification of step ten is passed, using parameter K1 and parameter K2 as key K for data transmission, selecting a symmetric encryption algorithm to encrypt the transmitted data, and forming an encrypted channel.

[0025] The present invention also proposes an encrypted transmission system integrating identity authentication, comprising an active data node and a passive data node;

[0026] Among them, the active data node includes a node information acquisition module, which can obtain the IP address and MAC address of the active data node;

[0027] The first parameter calculation module receives the IP address and MAC address obtained by the node information acquisition module, generates a random salt, and uses a hash function to generate an IP parameter I of the IP address, a MAC parameter P of the MAC address, and parameters x and v;

[0028] Active node database, storing parameters I and P;

[0029] The sending module sends the parameter I, parameter v and parameter s to the passive data node;

[0030] The passive data node includes a passive node database, which can store parameter I, parameter v and parameter s;

[0031] The return module returns the user registration completion information to the active data node.

[0032] Furthermore, the encryption transmission system proposed by the present invention further includes: when a user sends a key generation request to an active data node; a first parameter calculation module obtains parameter I and parameter P from an active node database, and simultaneously calculates parameter A=g^a, where a is a random number and g is a fixed parameter in the system; and a sending module sends parameter I and parameter A to a passive data node;

[0033] The passive data node finds parameter v and parameter s in the passive node database according to parameter I; the passive data node also includes a second parameter calculation module, which calculates parameter B=kv+g^b, where parameter k=Hash(N, g), N is a fixed large prime number and g is fixed to a number within N; the return module returns parameter s and parameter B to the active data node.

[0034] The first parameter calculation module and the second parameter calculation module simultaneously calculate the parameter u=Hash(A, B), the first parameter calculation module also calculates the parameter x=Hash(s, p), the parameter S1=(B-kg^x)^(a+ux), the parameter K1=Hash(S1), and the second parameter calculation module also calculates the parameter S2=(Av^u)^b, K2=Hash(S2);

[0035] The first parameter calculation module calculates parameter M1 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K1), and the second parameter calculation module calculates parameter M2 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K2); the sending module sends the calculated parameter M1 to the passive data node;

[0036] The passive data node also includes a second verification module, which performs verification based on the parameter M2 calculated by the second parameter calculation module and the received parameter M1, and stores the parameter K1 as a session key in the passive node database after the verification passes;

[0037] The second parameter calculation module calculates Hash(A,M2,K2); the return module returns the calculation result to the active data node;

[0038] The active data node also includes a first verification module, which calculates Hash (A, M1, K1) by a first parameter calculation module. The first verification module verifies the calculated Hash (A, M1, K1) with the received Hash (A, M2, K2). After the verification passes, the parameter K2 is stored as a session key in the active node database.

[0039] Furthermore, the parameters K1 and K2 are used as the key K for data transmission, and a symmetric encryption algorithm is selected to encrypt the transmitted data to form an encrypted channel.

[0040] The present invention further provides a computer device, comprising a memory and a processor, wherein executable codes are stored in the memory, and when the processor executes the executable codes, any one of the above methods is implemented.

[0041] The present invention also proposes a computer-readable storage medium, characterized in that the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are called and executed by a processor, the computer-executable instructions prompt the processor to implement any of the above methods.

[0042] Compared with the prior art, the present invention solves the identity authentication problem between two nodes in the absence of a CA center:

[0043] First, the offline identity registration method avoids the risk of information leakage, tampering or counterfeiting when registering identity information on the network. The IP and MAC addresses of the server where the software service is located are used as identity authentication factors for identity authentication. Once the network environment changes, the identity authentication will fail and subsequent operations will be terminated.

[0044] Secondly, through the PKAE protocol, an encrypted transmission channel is established using the session key generated by the protocol. In this process, the session key only appears locally on the servers of both parties to the data transmission and is not exposed to the outside. Therefore, when generating the session key, only the intermediate value is transmitted instead of the actual session key, achieving the effect of completing inter-institutional identity authentication and generating the session key at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 A schematic diagram of a user registration process in an embodiment of the present invention;

[0046] Figure 2 This is a schematic diagram of a key generation process in an embodiment of the present invention;

[0047] Figure 3 A system architecture diagram of an encrypted transmission system provided by an embodiment of the present invention;

[0048] Figure 4 A diagram of a computer device architecture provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0049] The present invention is described in detail below with reference to the accompanying drawings, taking text recognition as an example.

[0050] This embodiment is implemented based on the technical solution of the present invention, and provides a detailed implementation method and a specific operation process, but the protection scope of the present invention is not limited to the following embodiments.

[0051] The embodiment of the present invention provides an encrypted transmission method integrating identity authentication. This embodiment takes data node A and data node B as examples to explain in detail the specific steps of the encrypted transmission method provided by the embodiment of the present invention. Data node A and data node B are in a peer relationship and can register and authenticate each other, distinguishing between active and passive parties. In the embodiment of the present invention, data node A is the active party. Encrypted transmission includes two stages, namely the user registration stage and the key generation stage. Figure 1 , the steps of user registration phase are as follows:

[0052] Step 1: Get the IP address and MAC address of the network card of the data node A device, where the IP address is a logical address provided by the IP protocol, and the MAC is a local area network or physical address. After obtaining the IP address and MAC address, the data node A will also generate a random salt s, and use the hash function to generate the IP parameter I corresponding to the IP address, the MAC parameter P corresponding to the MAC address, and the parameters x and v. The generation formula is as follows, where g is a fixed parameter within the range of a fixed large prime number N:

[0053] I=Hash(IP address)

[0054] P = Hash (MAC address)

[0055] x = Hash(random salt s, P)

[0056] v=g^x

[0057] After calculating the above parameters, data node A will store parameters I and P in the local database of data node A, and will also encrypt and store parameter P in the local database;

[0058] Step 2: Data node A sends the calculated parameters I, v and s to the registration interface of the passive data node B;

[0059] Step 3: Data node B stores the received parameter I, parameter v and parameter s in the local database of data node B;

[0060] Step 4: After the information is stored successfully, data node B sends the user registration completion information to data node A to complete the user registration response.

[0061] In the encryption transmission method provided by the embodiment of the present invention, the user registration stage avoids the risk of information leakage, information tampering or counterfeiting when registering identity information on the network by registering identity information offline. In the subsequent key generation and encryption transmission process, the IP and MAC addresses of the server where the software service is located can also be used as identity authentication factors for identity authentication. Once the network environment changes, the identity authentication cannot be passed and the subsequent operations will be terminated.

[0062] Furthermore, an encryption transmission method provided by an embodiment of the present invention further includes a key generation stage, referring to Figure 2 , the key generation phase steps include:

[0063] Step 1: The user sends a key generation request to data node A, and data node A calculates parameter I based on the IP address of the device;

[0064] Step 2: Data node A obtains the parameter P stored during the user registration phase from the local database;

[0065] Step 3: Calculate parameter A = g^a, where a is a random number and g is a fixed parameter in the system, and send parameter I and parameter A to data node B;

[0066] Step 4: Data node B finds the parameter v and parameter s stored in the user registration phase in the local database of data node B according to parameter I, and calculates parameter B = kv + g^b, where parameter k = Hash (N, g), N is a fixed large prime number, and g is a fixed number within N;

[0067] Step 5: Data node B sends parameter s and parameter B to data node A;

[0068] Step 6: Data node A and data node B simultaneously calculate parameter u=Hash(A, B), and data node A also calculates parameter x=Hash(s, p), parameter S1=(B-kg^x)^(a+ux), parameter K1=Hash(S1), and data node B also calculates parameter S2=(Av^u)^b, K2=Hash(S2);

[0069] Step 7: Data node A calculates parameter M1 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K1) based on the above parameters and sends it to data node B;

[0070] Step 8: Data node B also calculates parameter M2 = Hash (Hash (N) xor Hash (g), Hash (I), s, A, B, K2) and verifies it with the received parameter M1. The verification generally means that M1 = M2. If the verification passes, data node B stores parameter K1 as the session key in the local database;

[0071] Step 9: Data node B calculates Hash(A,M2,K2) and returns the hash value to data node A;

[0072] Step 10: Data node A receives Hash(A,M2,K2) and also calculates Hash(A,M1,K1) for verification. After the verification passes, the parameter K2 is stored as the session key in the local database.

[0073] When the verification of the above step 10 is passed, it can be considered that the parameters K1 and K2 are consistent in verification, so they are used together as the key K for this encrypted transmission for data transmission. It is only necessary to select a symmetric encryption algorithm to encrypt the transmitted data and finally form an encrypted channel.

[0074] In the embodiment of the present invention, the data node A and the data node B may be data circuit termination devices such as hubs and switches and / or data terminal devices such as hosts and servers.

[0075] The embodiment of the present invention also provides an encrypted transmission system integrating identity authentication, referring to Figure 3 , including active data nodes and passive data nodes.

[0076] The active data node includes a node information acquisition module, which can obtain the IP address and MAC address of the active data node; a first parameter calculation module, which receives the IP address and MAC address obtained by the node information acquisition module, generates a random salt, and uses a hash function to generate an IP parameter I of the IP address, a MAC parameter P of the MAC address, and a parameter X and a parameter v; an active node database, which stores the parameter I and the parameter P; and a sending module, which sends the parameter I, the parameter v and the parameter s to the passive data node;

[0077] The passive data node includes a passive node database, which can store parameter I, parameter v and parameter s; and a return module, which returns the user registration completed information to the active data node.

[0078] Further, the user sends a key generation request to the active data node; the first parameter calculation module obtains the parameter I and the parameter P from the active node database, and calculates the parameter A=g^a, where a is a random number and g is a fixed parameter in the system; the sending module sends the parameter I and the parameter A to the passive data node;

[0079] The passive data node finds parameter v and parameter s in the passive node database according to parameter I; the passive data node also includes a second parameter calculation module, which calculates parameter B=kv+g^b, where parameter k=Hash(N, g), N is a fixed large prime number and g is fixed to a number within N; the return module sends parameter s and parameter B to the active data node.

[0080] The first parameter calculation module and the second parameter calculation module simultaneously calculate parameter u=Hash(A, B), the first parameter calculation module also calculates parameter x=Hash(s, p), parameter S1=(B-kg^x)^(a+ux), parameter K1=Hash(S1), and the second parameter calculation module also calculates parameter S2=(Av^u)^b, K2=Hash(S2); the first parameter calculation module calculates parameter M1=Hash(Hash(N)xor Hash(g), Hash(I), s, A, B, K1), and the second parameter calculation module calculates parameter M2=Hash(Hash(N)xor Hash(g), Hash(I), s, A, B, K2); the sending module sends parameter M1 to the passive data node.

[0081] The passive data node also includes a second verification module, which performs verification based on the parameter M2 calculated by the second parameter calculation module and the received parameter M1, and stores the parameter K1 as a session key in the passive node database after the verification; the second parameter calculation module calculates Hash (A, M2, K2); and the return module returns the calculation result to the active data node.

[0082] The active data node also includes a first verification module, which calculates Hash (A, M1, K1) by a first parameter calculation module. The first verification module verifies the calculated Hash (A, M1, K1) with the received Hash (A, M2, K2). After the verification passes, the parameter K2 is stored as a session key in the active node database.

[0083] After both the first verification module and the second verification module are passed, the parameters K1 and K2 can be used as the key K for this encrypted transmission for data transmission, and a symmetric encryption algorithm is selected to encrypt the transmitted data to form an encrypted channel.

[0084] The embodiment of the present invention also provides a computer device, referring to Figure 4 The computer device includes a processor and a memory, wherein the processor is used to execute an executable module stored in the memory, such as a computer program.

[0085] The memory may include a high-speed random access memory (RAM) and may also include a non-volatile memory, such as at least one disk memory. The memory is used to store programs. After receiving the execution instruction, the processor executes the above program. The method disclosed in any embodiment of the above-mentioned embodiment of the present invention can be applied to the processor or implemented by the processor.

[0086] The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or an instruction in the form of software. The above processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied as being executed by a hardware decoding processor, or may be executed by a combination of hardware and software modules in a decoding processor. The software module may be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0087] The computer program product of the encrypted transmission method, system, device and computer-readable storage medium provided in the embodiments of the present invention includes a computer-readable storage medium storing program code. The instructions included in the program code can be used to execute the methods described in the previous method embodiments. The specific implementation can be found in the method embodiments, which will not be repeated here.

[0088] Compared with the prior art, the present invention solves the identity authentication problem between two nodes in the absence of a CA center:

[0089] First, the offline identity registration method avoids the risk of information leakage, tampering or counterfeiting when registering identity information on the network. The IP and MAC addresses of the server where the software service is located are used as identity authentication factors for identity authentication. Once the network environment changes, the identity authentication will fail and subsequent operations will be terminated.

[0090] Secondly, through the PKAE protocol, an encrypted transmission channel is established using the session key generated by the protocol. In this process, the session key only appears locally on the servers of both parties to the data transmission and is not exposed to the outside. Therefore, when generating the session key, only the intermediate value is transmitted instead of the actual session key, achieving the effect of completing inter-institutional identity authentication and generating the session key at the same time.

[0091] The scope of protection of the present invention is defined by the appended claims. The technology, method, and the use of the technology and method can be used for text recognition, speech recognition, image recognition, and video signal processing. Any activation function constructed by the present invention as a component of a neural network used for text recognition, speech recognition, image recognition, and video signal processing should be deemed as a part of the rights protection required by the description of claims and should be protected by relevant laws.

Claims

1. An encrypted transmission method integrating identity authentication, characterized in that: Including user registration and key generation; the user registration includes: The IP address and MAC address of the network card of the first data node device are obtained to generate parameter s, and a hash function is used to generate IP parameter I of the IP address, MAC parameter P of the MAC address, and parameter x and parameter v. The generation formula is as follows, where g is a fixed parameter within the range of a fixed large prime number N: I=Hash(IP address) P = Hash (MAC address) x = Hash(s, P) v=g^x The first data node stores the parameter I and the parameter P in a first database, and sends the parameter I, the parameter v, and the parameter s to the second data node; The second data node stores the received parameter I, parameter v and parameter s in a second database, and sends user registration completion information to the first data node. The key generation includes: Step 1: The user sends a key generation request to the first data node, and the first data node calculates the parameter I according to the IP address; Step 2: The first data node obtains the parameter P from the first database; Step 3: Calculate parameter A=g^a, where a is a random number and g is a fixed parameter in the system, and send the parameter I and the parameter A to the second data node; Step 4: The second data node finds the parameter v and the parameter s in the second database according to the parameter I, and calculates the parameter B=kv+g^b, where the parameter k=Hash(N, g), N is a fixed large prime number, and g is a fixed number within N; Step 5: The second data node sends the parameter s and the parameter B to the first data node; Step 6: The first data node and the second data node simultaneously calculate the parameter u=Hash(A, B), the first data node calculates the parameter x=Hash(s, p), parameter S1=(B-kg^x)^(a+ux), parameter K1=Hash(S1), and the second data node calculates parameter S2=(Av^u)^b, K2=Hash(S2); Step 7: The first data node calculates parameter M1=Hash(Hash(N)xor Hash(g), Hash(I), s, A, B, K1) and sends it to the second data node; Step 8: The second data node also calculates the parameter M2 and verifies it with the received parameter M1. After the verification is successful, the parameter K1 is stored in the memory as the session key. Step 9: The second data node calculates Hash(A, M2, K2) and returns the hash value to the first data node; Step 10: The first data node receives Hash(A, M2, K2), and also calculates Hash(A, M1, K1) for verification. After the verification passes, the parameter K2 is stored in the memory as the session key.

2. According to the encryption transmission method of claim 1, it is characterized in that: Also includes: When the verification of step 10 is passed, the parameter K1 and the parameter K2 are used as the key K for data transmission, and a symmetric encryption algorithm is selected to encrypt the transmitted data to form an encrypted channel.

3. The encrypted transmission method integrating identity authentication according to claim 1, characterized in that: The first database is a local storage system of the first data node, and the second database is a local storage system of the second data node; the first data node and the second data node are data circuit termination devices and / or data terminal devices.

4. An encrypted transmission system integrating identity authentication, characterized in that: It includes active data nodes and passive data nodes; the active data node includes a node information acquisition module, which can obtain the IP address and MAC address of the active data node; A first parameter calculation module receives the IP address and the MAC address obtained by the node information acquisition module, generates a parameter s, and uses a hash function to generate an IP parameter I of the IP address, a MAC parameter P of the MAC address, and a parameter x and a parameter v; An active node database storing the parameter I and the parameter P; A sending module, sending the parameter I, the parameter v and the parameter s to the passive data node; The passive data node includes a passive node database, which can store the parameter I, the parameter v and the parameter s; The return module returns the user registration completion information to the active data node. The user sends a key generation request to the active data node; the first parameter calculation module obtains the parameter I and the parameter P from the active node database, and calculates the parameter A=g^a, where a is a random number and g is a fixed parameter in the system; the sending module sends the parameter I and the parameter A to the passive data node; The passive data node finds the parameter v and the parameter s in the passive node database according to the parameter I; the passive data node also includes a second parameter calculation module, which calculates parameter B=kv+g^b, wherein parameter k=Hash(N, g), N is a fixed large prime number and g is a fixed number within N; the return module sends the parameter s and the parameter B to the active data node; The first parameter calculation module and the second parameter calculation module simultaneously calculate the parameter u=Hash(A, B), the first parameter calculation module also calculates the parameter x=Hash(s, p), the parameter S1=(B-kg^x)^(a+ux), the parameter K1=Hash(S1), and the second parameter calculation module also calculates the parameter S2=(Av^u)^b, K2=Hash(S2); The first parameter calculation module calculates parameter M1=Hash(Hash(N)xor Hash(g), Hash(I), s, A, B, K1), and the second parameter calculation module calculates parameter M2=Hash(Hash(N)xor Hash(g), Hash(I), s, A, B, K2); the sending module sends parameter M1 to the passive data node; The passive data node further includes a second verification module, which performs verification according to the parameter M2 calculated by the second parameter calculation module and the received parameter M1, and stores the parameter K1 as a session key in the passive node database after the verification passes; The second parameter calculation module calculates Hash(A, M2, K2); the return module returns the calculation result to the active data node; The active data node also includes a first verification module, which calculates Hash (A, M1, K1) by the first parameter calculation module. The first verification module verifies the calculated Hash (A, M1, K1) with the received Hash (A, M2, K2). After the verification passes, the parameter K2 is stored in the active node database as a session key.

5. The encrypted transmission system integrating identity authentication according to claim 4 is characterized in that: Also includes: The parameters K1 and K2 are used as the key K for data transmission, and a symmetric encryption algorithm is selected to encrypt the transmitted data to form an encrypted channel.

6. A computer device comprising a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, the method according to any one of claims 1 to 3 is implemented.

7. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions. When the computer-executable instructions are called and executed by a processor, the computer-executable instructions prompt the processor to implement the method according to any one of claims 1 to 3.

Images