A data access method, device, storage medium and electronic equipment

Abstract

The application provides a data access method and device, a storage medium and an electronic device. The data access method comprises the following steps: obtaining a target Internet protocol address corresponding to an access request, wherein the access request is sent by a client terminal; generating first ciphertext in the case that the target Internet protocol address is a restricted Internet protocol address; sending the first ciphertext and first encryption information corresponding to the first ciphertext to the client terminal, so that the client terminal returns second ciphertext based on the first ciphertext; and generating error response data to respond to the access request in the case that it is determined that the second ciphertext meets a preset condition. When it is determined that the target Internet protocol address is a restricted Internet protocol address, the first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset condition. If yes, error response data is generated to respond to the access request, so that the data security is effectively ensured.

Description

Technical Field

[0001] This application relates to the field of data security technology, and in particular to a data access method, apparatus, storage medium and electronic device. Background Technology

[0002] To ensure data security, the server verifies the user's identity when the user requests access to important data.

[0003] Currently, common verification methods include: First, the server records the Internet Protocol (IP) address corresponding to each access request. If too many access requests are received from a particular IP address on a given day, that IP address is blocked to prevent data theft. However, thieves can continue stealing data by changing their IP address. Second, an IP blacklist is created based on public IP data compiled by third parties. However, the accuracy of public IP data compiled by third parties is poor, resulting in inaccurate IP blacklists, which still cannot effectively guarantee data security. Summary of the Invention

[0004] In view of this, the purpose of this application is to provide a data access method, apparatus, storage medium and electronic device to solve the problem that the prior art cannot effectively guarantee data security.

[0005] In a first aspect, embodiments of this application provide a data access method, including:

[0006] Obtain the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal;

[0007] If the target Internet Protocol address is a restricted Internet Protocol address, generate the first ciphertext;

[0008] The first ciphertext and the first encrypted information corresponding to the first ciphertext are sent to the client terminal, so that the client terminal returns the second ciphertext based on the first ciphertext.

[0009] If the second ciphertext meets the preset conditions, erroneous response data is generated to respond to the access request.

[0010] In one possible implementation, generating the first ciphertext includes:

[0011] The first detection parameter is determined based on the access request;

[0012] Based on the first encryption rule and the first key included in the first encryption information, the first detection parameter is encrypted to obtain the first ciphertext.

[0013] In one possible implementation, it also includes:

[0014] Receive the second ciphertext and the second encrypted information corresponding to the second ciphertext returned by the client terminal;

[0015] The second ciphertext is decrypted based on the second encrypted information to obtain the second detection parameter, wherein the second detection parameter is obtained by the client terminal decrypting the first ciphertext;

[0016] The first detection parameters and the second detection parameters included in the first ciphertext are compared to determine whether the second ciphertext meets the preset conditions.

[0017] In one possible implementation, comparing the first detection parameter and the second detection parameter included in the first ciphertext to determine whether the second ciphertext meets preset conditions includes:

[0018] Extract the first detection item from the first detection parameter, and extract the second detection item from the second detection parameter;

[0019] If the first detection item and the second detection item are inconsistent, the second ciphertext is determined to meet the preset conditions.

[0020] In one possible implementation, it also includes:

[0021] Determine whether the target Internet Protocol address exists in a preset address database, wherein the preset address database includes at least one restricted Internet Protocol address;

[0022] If the target Internet Protocol address exists in the preset address database, then the target Internet Protocol address is determined to be a restricted Internet Protocol address.

[0023] In one possible implementation, it also includes:

[0024] Filter Internet Protocol addresses whose access frequency exceeds a first threshold within a first preset time period and / or whose access frequency exceeds a second threshold within a second preset time period;

[0025] The Internet Protocol address is stored in the preset address database.

[0026] Secondly, embodiments of this application also provide a data access device, comprising:

[0027] The acquisition module is configured to acquire the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal;

[0028] The first generation module is configured to generate the first ciphertext when the target Internet Protocol address is a restricted Internet Protocol address;

[0029] The sending module is configured to send the first ciphertext and the first encrypted information corresponding to the first ciphertext to the client terminal, so that the client terminal returns the second ciphertext based on the first ciphertext.

[0030] The second generation module is configured to generate erroneous response data in response to the access request if it is determined that the second ciphertext meets preset conditions.

[0031] In one possible implementation, the first generation module is specifically configured as follows:

[0032] The first detection parameter is determined based on the access request;

[0033] Based on the first encryption rule and the first key included in the first encryption information, the first detection parameter is encrypted to obtain the first ciphertext.

[0034] Thirdly, embodiments of this application also provide a storage medium in which the computer program is executed by a processor to perform the steps of the data access method as described in any of the above.

[0035] Fourthly, embodiments of this application also provide an electronic device, comprising: a processor and a memory, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor communicates with the memory via a bus, and when the machine-readable instructions are executed by the processor, the steps of the data access method as described in any of the preceding claims are performed.

[0036] In this embodiment of the application, when the target Internet Protocol address is determined to be a restricted Internet Protocol address, a first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset conditions. If it does, it indicates that the access request is abnormal. At this time, erroneous response data is generated to respond to the access request, which prevents attackers from maliciously stealing data and effectively ensures data security.

[0037] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0038] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0039] Figure 1 A flowchart of a data access method provided in this application is shown;

[0040] Figure 2 This invention illustrates a flowchart of the generation of a first ciphertext in a data access method provided in this application;

[0041] Figure 3 This invention provides a flowchart illustrating a data access method for determining whether a second ciphertext meets preset conditions.

[0042] Figure 4 A schematic diagram of the structure of a data access device provided in this application is shown;

[0043] Figure 5 A schematic diagram of the structure of an electronic device provided in this application is shown. Detailed Implementation

[0044] Various embodiments and features of this application are described herein with reference to the accompanying drawings.

[0045] It should be understood that various modifications can be made to the embodiments described herein. Therefore, the above description should not be considered as limiting, but merely as an example of embodiments. Other modifications within the scope and spirit of this application will be apparent to those skilled in the art.

[0046] The accompanying drawings, which are included in and form part of this specification, illustrate embodiments of the present application and, together with the general description of the present application given above and the detailed description of the embodiments given below, serve to explain the principles of the present application.

[0047] These and other features of this application will become apparent from the following description of preferred forms of embodiments given as non-limiting examples, with reference to the accompanying drawings.

[0048] It should also be understood that although this application has been described with reference to some specific examples, those skilled in the art can certainly implement many other equivalent forms of this application, which have the features described in the claims and are therefore all within the scope of protection defined herein.

[0049] The above and other aspects, features and advantages of this application will become more apparent when taken in conjunction with the accompanying drawings and in view of the following detailed description.

[0050] Specific embodiments of this application are described thereafter with reference to the accompanying drawings; however, it should be understood that the claimed embodiments are merely examples of this application, which can be implemented in various ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that could obscure the application. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but merely serve as the basis and representative basis for the claims to teach those skilled in the art to use this application in a variety of substantially any suitable detailed structures.

[0051] This specification may use the phrases “in one embodiment,” “in another embodiment,” “in yet another embodiment,” or “in other embodiments,” all of which may refer to one or more of the same or different embodiments according to this application.

[0052] Firstly, to facilitate understanding of this application, a data access method provided in this application will be described in detail.

[0053] like Figure 1 As shown, this is a data access method provided in an embodiment of this application. This processing method is applied to the server side, and the server side follows... Figure 1 The method steps shown address the problem that existing technologies cannot effectively guarantee data security. Specific steps include S101-S104.

[0054] S101, Obtain the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal.

[0055] In practice, when a client terminal wants to access data, such as accessing a web page, it needs to verify its identity information. This is especially true when accessing data within a specific intranet, where verification of the client terminal's identity information is even more necessary to ensure data security.

[0056] Here, when a client terminal accesses data, it first generates an access request. This access request includes at least the client terminal's Internet Protocol address, identity identifier, access time, and the data address to be accessed. Then, the generated access request is sent to the server.

[0057] The server receives access requests sent by client terminals in real time and extracts the target Internet Protocol address from the access requests.

[0058] S102, if the target Internet Protocol address is a restricted Internet Protocol address, generate the first ciphertext.

[0059] Optionally, an address database can be pre-configured, which includes at least one restricted Internet Protocol (IP) address. This address database can be stored on a server or on other terminals, as long as it can be viewed by the server. Furthermore, the address database can be configured to be adjusted by the server to achieve automatic updates.

[0060] Optionally, when constructing the address database, Internet Protocol (IP) addresses whose access frequency exceeds a first threshold within a first preset time period and / or whose access frequency exceeds a second threshold within a second preset time period are selected, and these IP addresses are stored in a preset address database. For example, the maximum number of accesses for each IP address within 24 hours is set to 10, and IP addresses with an access frequency greater than or equal to 10 within 24 hours are identified as restricted IP addresses and stored in the address database; the maximum access frequency for each IP address is set to 5 times per minute, and IP addresses with an access frequency greater than or equal to 5 times per minute are identified as restricted IP addresses and stored in the address database, etc. This application does not specifically limit this aspect.

[0061] After obtaining the target Internet Protocol address, it is determined whether the target Internet Protocol address falls into the address database. If the target Internet Protocol address falls into the address database, it indicates that the target Internet Protocol address is a restricted Internet Protocol address.

[0062] If the target Internet Protocol address is a restricted Internet Protocol address, generate the first ciphertext.

[0063] S103, the first ciphertext and the first encrypted information corresponding to the first ciphertext are sent to the client terminal so that the client terminal can return the second ciphertext based on the first ciphertext.

[0064] Here, the first encrypted information corresponding to the first ciphertext includes the first key and the first encryption rule.

[0065] At the same time as sending the first ciphertext to the client terminal, the first encrypted information corresponding to the first ciphertext is also sent to the client terminal, so that after receiving the first ciphertext, the client terminal can use the received first encrypted information to decrypt the first ciphertext and obtain the data in the first ciphertext.

[0066] After decrypting the data in the first ciphertext, the client terminal generates a second ciphertext based on the decryption information and returns it to the server. This decryption information includes the decryption time, decryption duration, and the data obtained.

[0067] S104, if it is determined that the second ciphertext meets the preset conditions, generate error response data to respond to the access request.

[0068] After receiving the second ciphertext, the server further determines whether it meets preset conditions. If the second ciphertext meets the preset conditions, it indicates that the client terminal is an attacker maliciously stealing data, and an incorrect response is generated to respond to the access request. If the second ciphertext does not meet the preset conditions, it indicates that the client terminal is a legitimate user with access rights, and an correct response is generated to respond to the access request.

[0069] Optionally, Figure 2 A flowchart of a method for generating a first ciphertext is shown, wherein specific steps include S201 and S202.

[0070] S201, determine the first detection parameter based on the access request.

[0071] S202, based on the first encryption rule and the first key included in the first encryption information, the first detection parameter is encrypted to obtain the first ciphertext.

[0072] In practice, after determining that the target Internet Protocol address is a restricted Internet Protocol address, the server determines the first detection parameter based on the access request. The first detection parameter may include multiple data, such as the data that the client terminal wants to access, the address corresponding to the data, and the attribute information of the data.

[0073] After determining the first detection parameter, the first detection parameter is encrypted using the first encryption rule and the first key included in the first encryption information to obtain the first ciphertext.

[0074] Optionally, Figure 3 A flowchart of a method for determining whether a second ciphertext meets preset conditions is shown, wherein the specific steps include S301-S303.

[0075] S301, receive the second ciphertext and the second encrypted information corresponding to the second ciphertext returned by the client terminal.

[0076] S302, decrypt the second ciphertext based on the second encrypted information to obtain the second detection parameter, wherein the second detection parameter is obtained by the client terminal decrypting the first ciphertext.

[0077] S303, compare the first detection parameters and the second detection parameters included in the first ciphertext to determine whether the second ciphertext meets the preset conditions.

[0078] Upon receiving the second ciphertext, the server also receives the corresponding second encrypted information. This second encrypted information includes a second key and a second encryption rule. It's worth noting that the second key and the second encryption rule can be the same as or different from the first encryption rule. Having a different second key and a different encryption rule, compared to having the same second key and the same encryption rule, can improve data security to some extent.

[0079] Next, the second ciphertext is decrypted based on the second encrypted information to obtain the second detection parameters. At this point, the first detection parameters and the second detection parameters included in the first ciphertext are compared to determine whether the second ciphertext meets the preset conditions.

[0080] Optionally, when comparing the first detection parameter and the second detection parameter to determine whether the second ciphertext meets the preset conditions, a first detection item in the first detection parameter and a second detection item in the second detection parameter are extracted. The first detection item in the first detection parameter corresponds to the second detection item in the second detection parameter; for example, the first detection item is the second data item in the first detection parameter, and the second detection item is the second data item in the second detection parameter, etc.

[0081] After extracting the first and second detection items respectively, the first and second detection items are compared to see if they are consistent. If the first and second detection items are inconsistent, it is determined that the second ciphertext meets the preset conditions, that is, the second ciphertext has been maliciously tampered with and the client terminal is an attacker who maliciously steals data.

[0082] In this embodiment of the application, when the target Internet Protocol address is determined to be a restricted Internet Protocol address, a first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset conditions. If it does, it indicates that the access request is abnormal. At this time, erroneous response data is generated to respond to the access request, which prevents attackers from maliciously stealing data and effectively ensures data security.

[0083] Based on the same inventive concept, the second aspect of this application also provides a data access device corresponding to the data access method. Since the principle of solving the problem by the data access device in this application is similar to that of the data access method described above, the implementation of the data access device can refer to the implementation of the method, and the repeated parts will not be described again.

[0084] Figure 4 A schematic diagram of a data access device provided in an embodiment of this application is shown, specifically including:

[0085] The acquisition module 401 is configured to acquire the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal;

[0086] The first generation module 402 is configured to generate the first ciphertext when the target Internet Protocol address is a restricted Internet Protocol address;

[0087] The sending module 403 is configured to send the first ciphertext and the first encrypted information corresponding to the first ciphertext to the client terminal, so that the client terminal returns the second ciphertext based on the first ciphertext.

[0088] The second generation module 404 is configured to generate error response data in response to the access request if it is determined that the second ciphertext meets preset conditions.

[0089] In yet another embodiment, the first generation module 402 is specifically configured as follows:

[0090] The first detection parameter is determined based on the access request;

[0091] Based on the first encryption rule and the first key included in the first encryption information, the first detection parameter is encrypted to obtain the first ciphertext.

[0092] In another embodiment, the data access device further includes a first determining module 405, which is configured as follows:

[0093] Receive the second ciphertext and the second encrypted information corresponding to the second ciphertext returned by the client terminal;

[0094] The second ciphertext is decrypted based on the second encrypted information to obtain the second detection parameter, wherein the second detection parameter is obtained by the client terminal decrypting the first ciphertext;

[0095] The first detection parameters and the second detection parameters included in the first ciphertext are compared to determine whether the second ciphertext meets the preset conditions.

[0096] In yet another embodiment, the first determining module 405 is specifically configured as follows:

[0097] Extract the first detection item from the first detection parameter, and extract the second detection item from the second detection parameter;

[0098] If the first detection item and the second detection item are inconsistent, the second ciphertext is determined to meet the preset conditions.

[0099] In yet another embodiment, the data access device further includes a second determining module 406, configured as follows:

[0100] Determine whether the target Internet Protocol address exists in a preset address database, wherein the preset address database includes at least one restricted Internet Protocol address;

[0101] If the target Internet Protocol address exists in the preset address database, then the target Internet Protocol address is determined to be a restricted Internet Protocol address.

[0102] In yet another embodiment, the storage module 407 is configured as follows:

[0103] Filter Internet Protocol addresses whose access frequency exceeds a first threshold within a first preset time period and / or whose access frequency exceeds a second threshold within a second preset time period;

[0104] The Internet Protocol address is stored in the preset address database.

[0105] In this embodiment of the application, when the target Internet Protocol address is determined to be a restricted Internet Protocol address, a first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset conditions. If it does, it indicates that the access request is abnormal. At this time, erroneous response data is generated to respond to the access request, which prevents attackers from maliciously stealing data and effectively ensures data security.

[0106] This application provides a storage medium, which is a computer-readable medium, storing a computer program. When executed by a processor, the computer program implements the method provided in any embodiment of this application, including the following steps S11 to S14:

[0107] S11, Obtain the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal;

[0108] S12, if the target Internet Protocol address is a restricted Internet Protocol address, generate the first ciphertext;

[0109] S13, the first ciphertext and the first encrypted information corresponding to the first ciphertext are sent to the client terminal so that the client terminal returns the second ciphertext based on the first ciphertext;

[0110] S14, if it is determined that the second ciphertext meets the preset conditions, generate error response data to respond to the access request.

[0111] In this embodiment of the application, when the target Internet Protocol address is determined to be a restricted Internet Protocol address, a first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset conditions. If it does, it indicates that the access request is abnormal. At this time, erroneous response data is generated to respond to the access request, which prevents attackers from maliciously stealing data and effectively ensures data security.

[0112] This application also provides an electronic device, the structural schematic diagram of which is shown below. Figure 5 As shown, it includes at least a memory 501 and a processor 502. The memory 501 stores a computer program, and the processor 502 implements the method provided in any embodiment of this application when executing the computer program in the memory 501. Exemplarily, the steps of the electronic device computer program are as follows: S21 to S24:

[0113] S21, Obtain the target Internet Protocol address corresponding to the access request, wherein the access request is sent by the client terminal;

[0114] S22, if the target Internet Protocol address is a restricted Internet Protocol address, generate the first ciphertext;

[0115] S23, the first ciphertext and the first encrypted information corresponding to the first ciphertext are sent to the client terminal so that the client terminal returns the second ciphertext based on the first ciphertext;

[0116] S24, if it is determined that the second ciphertext meets the preset conditions, generate error response data to respond to the access request.

[0117] In this embodiment of the application, when the target Internet Protocol address is determined to be a restricted Internet Protocol address, a first ciphertext is generated and sent to the client terminal. Then, it is determined whether the second ciphertext returned by the client terminal based on the first ciphertext meets the preset conditions. If it does, it indicates that the access request is abnormal. At this time, erroneous response data is generated to respond to the access request, which prevents attackers from maliciously stealing data and effectively ensures data security.

[0118] Optionally, in this embodiment, the storage medium may include, but is not limited to, various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk. Optionally, in this embodiment, the processor executes the method steps described in the above embodiments according to the program code stored in the storage medium. Optionally, specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementations, which will not be repeated here. Obviously, those skilled in the art should understand that the modules or steps of this application described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed on a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device. In some cases, the steps shown or described can be executed in a different order than those described here, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, this application is not limited to any specific hardware and software combination.

[0119] Furthermore, although exemplary embodiments have been described herein, their scope includes any and all embodiments based on this application that have equivalent elements, modifications, omissions, combinations (e.g., schemes involving intersections of various embodiments), adaptations, or alterations. Elements in the claims will be interpreted broadly based on the language used in the claims and are not limited to the examples described in this specification or during the implementation of this application, which will be interpreted as non-exclusive. Therefore, this specification and examples are intended to be considered illustrative only, and the true scope and spirit are indicated by the following claims and the full scope of their equivalents.

[0120] The above description is intended to be illustrative and not restrictive. For example, the above examples (or one or more of them) can be used in combination with each other. Other embodiments may be used by those skilled in the art upon reading the above description. Furthermore, in the above detailed description, various features may be grouped together to simplify the application. This should not be construed as an intention that a disclosed feature not claimed is necessary for any claim. Rather, the subject matter of this application may be less than all the features of a particular disclosed embodiment. Thus, the following claims are incorporated herein by reference as examples or embodiments, wherein each claim is an independent, separate embodiment, and these embodiments are contemplated as being possible in various combinations or arrangements. The scope of this application should be determined by reference to the appended claims and the full scope of their equivalents.

[0121] The foregoing has described in detail several embodiments of this application, but this application is not limited to these specific embodiments. Those skilled in the art can make various variations and modifications based on the concept of this application, and all such variations and modifications should fall within the scope of protection claimed in this application.

Claims

1. A data access method, characterized by, The method comprises: obtaining a target Internet protocol address corresponding to an access request, wherein the access request is sent by a client terminal; generating first ciphertext in a case where the target Internet protocol address is a restricted Internet protocol address; sending the first ciphertext and first encryption information corresponding to the first ciphertext to the client terminal, so that the client terminal returns second ciphertext based on the first ciphertext; generating error response data to respond to the access request in a case where it is determined that the second ciphertext meets a preset condition.

2. The data access method of claim 1, wherein, The method further comprises: receiving the second ciphertext returned by the client terminal and second encryption information corresponding to the second ciphertext; decrypting the second ciphertext based on the second encryption information to obtain second detection parameters, wherein the second detection parameters are obtained by decrypting the first ciphertext by the client terminal; 3. The data access method of claim 1, wherein, comparing the first detection parameters included in the first ciphertext with the second detection parameters to determine whether the second ciphertext meets the preset condition. The method further comprises: extracting first detection items in the first detection parameters and second detection items in the second detection parameters; determining that the second ciphertext meets the preset condition in a case where the first detection items and the second detection items are inconsistent.

4. The data access method of claim 3, wherein, The method further comprises: determining whether the target Internet protocol address exists in a preset address library, wherein the preset address library includes at least one restricted Internet protocol address; determining that the target Internet protocol address is a restricted Internet protocol address if the target Internet protocol address exists in the preset address library.

5. The data access method of claim 1, wherein, The method further comprises: screening Internet protocol addresses with access frequencies greater than a first threshold value in a first preset time period and / or access frequencies greater than a second threshold value in a second preset time period; storing the Internet protocol addresses to the preset address library.

6. The data access method of claim 5, wherein, The method comprises: an obtaining module configured to obtain a target Internet protocol address corresponding to an access request, wherein the access request is sent by a client terminal; a first generating module configured to generate first ciphertext in a case where the target Internet protocol address is a restricted Internet protocol address; 7. A data access device, characterized by a sending module configured to send the first ciphertext and first encryption information corresponding to the first ciphertext to the client terminal, so that the client terminal returns second ciphertext based on the first ciphertext; a second generating module configured to generate error response data to respond to the access request in a case where it is determined that the second ciphertext meets a preset condition. The first generating module is specifically configured to: determine first detection parameters based on the access request; encrypt the first detection parameters based on first encryption rules included in the first encryption information and a first key to obtain the first ciphertext.

8. The data access device of claim 7, wherein, The method further comprises: receive the second ciphertext returned by the client terminal and second encryption information corresponding to the second ciphertext; decrypt the second ciphertext based on the second encryption information to obtain second detection parameters, wherein the second detection parameters are obtained by decrypting the first ciphertext by the client terminal; compare the first detection parameters included in the first ciphertext with the second detection parameters to determine whether the second ciphertext meets the preset condition. The method further comprises: extract first detection items in the first detection parameters and second detection items in the second detection parameters; determine that the second ciphertext meets the preset condition in a case where the first detection items and the second detection items are inconsistent. The method further comprises: determine whether the target Internet protocol address exists in a preset address library, wherein the preset address library includes at least one restricted Internet protocol address; determine that the target Internet protocol address is a restricted Internet protocol address if the target Internet protocol address exists in the preset address library. The method further comprises: screen Internet protocol addresses with access frequencies greater than a first threshold value in a first preset time period and / or access frequencies greater than a second threshold value in a second preset time period; store the Internet protocol addresses to the preset address library.

9. A storage medium, characterized by The computer readable storage medium stores a computer program, and the computer program performs the steps of the data access method as claimed in any one of claims 1 to 6 when executed by a processor.

10. An electronic device, comprising: Comprise: A processor and a memory, the memory stores machine readable instructions executable by the processor, when the electronic device is running, the processor and the memory communicate through a bus, and the machine readable instructions are executed by the processor to perform the steps of the data access method as claimed in any one of claims 1 to 6.

Images