Safety management method and system based on communication networking

Abstract

The embodiment of the invention discloses a security management method and system based on communication networking. According to the technical scheme provided by the embodiment of the invention, networking verification is carried out in combination with various biological characteristics of the user, and special information recheck and manual recheck are carried out according to the networking terminal and the login state of the user account, so that accurate security verification can be comprehensively carried out by utilizing various unique biological characteristic information of the user; the networking key is prevented from being stolen easily, and the security and reliability of communication networking are improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, and in particular, to a security management method and system based on communication networking. Background Art

[0002] At present, communication networking is an important part of modern communication technology, which realizes the rapid transmission of information and the interconnection of equipment. Communication networking refers to connecting multiple communication devices or systems through a certain network topology and communication protocol to form a network system that can communicate with each other and share resources. This process aims to achieve effective transmission of information, interconnection of equipment and shared utilization of resources. With the continuous development of communication technology, communication networking technology is becoming more and more secure. By setting the corresponding networking key, when the user terminal accesses the network, the corresponding networking key is entered for network authentication to verify the security of the user terminal.

[0003] However, the existing method of using a simple character combination as a networking key for network authentication has relatively low security. Once the networking key is leaked, it will affect network security, leading to data leakage and unnecessary losses. Summary of the invention

[0004] The embodiments of the present application provide a security management method and system based on communication networking, which can perform network authentication through multiple unique characteristics of users, improve the security of communication networking, and solve security problems in the communication networking process.

[0005] In a first aspect, an embodiment of the present application provides a security management method based on communication networking, including:

[0006] In response to a network access request of a current networking terminal, a target user account, user voice information, and user face information carried in the network access request are parsed, voiceprint features and semantic features are collected based on the user voice information, face features are collected based on the user face information, the voiceprint features, the semantic features, and the face features are spliced ​​into a multi-mode feature vector, a networking key database is traversed based on the multi-mode feature vector and the target user account, and networking verification is performed on the current user terminal based on the traversal result, wherein the networking key database is pre-configured with a multi-mode feature key corresponding to different account information;

[0007] After the networking verification is passed, if the current networking terminal has logged into the current networking system multiple times, the uplink and downlink data of the current networking terminal are encrypted and transmitted directly based on the multi-mode feature vector; if the current network terminal logs into the current networking system for the first time, the special expression password or special voice password uploaded by the current networking terminal is collected, and a pre-built repeated verification database is queried based on the special expression password or the special voice password, and when matching facial expression information or semantic tone information is queried, the uplink and downlink data of the current networking terminal are encrypted and transmitted based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, the network access request is rejected;

[0008] When it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, the user dynamic video information reported by the current networking terminal is obtained, and the networking terminal of the specified user account is randomly selected in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the specified user account is higher than that of the target user account.

[0009] Further, traversing a networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result, includes:

[0010] Traversing the networking key database based on the target user account, determining account information matching the target user account, and extracting the multi-mode feature key configured by the matching account information;

[0011] Calculate the feature similarity between the extracted multi-mode feature key and the multi-mode feature vector. When the feature similarity reaches a set similarity threshold, determine that the network verification is passed. The similarity threshold is set according to the network access priority of the target user account, and the similarity threshold is positively correlated with the network access priority.

[0012] Further, the encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes:

[0013] Constructing a first key feature sequence based on the multi-mode feature vector, and generating an encryption key sequence according to the first key feature sequence and a set networking key sequence;

[0014] The uplink and downlink data of the current networking terminal are encrypted, transmitted and decrypted based on the encryption key sequence.

[0015] Further, the encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes:

[0016] Constructing a second key feature sequence based on the multi-mode feature vector, and splitting the second key feature sequence into a plurality of sub-feature sequences according to a set splitting rule;

[0017] Based on the multiple sub-feature sequences, encryption transmission and decryption operations are performed on different types of uplink and downlink data of the current networking terminal.

[0018] Furthermore, after the networking verification is passed, the method further includes:

[0019] The real-time video call information is parsed from the uplink data of the current networking terminal, and the dynamic video verification of the current networking terminal is performed based on the real-time video call information and the user face information.

[0020] Furthermore, before responding to the network access request of the current networking terminal, the method further includes:

[0021] The semantic prompt information associated with the designated semantic vocabulary is issued to collect the voice information containing the designated semantic vocabulary based on the semantic prompt information.

[0022] Further, when it is detected that the frequency of switching the networking terminal of the target user account reaches a set threshold, the method further includes:

[0023] Disable the specified function permission of the current networking terminal, wherein the specified function permission includes at least one of voice call permission, video call permission and file sharing permission;

[0024] Correspondingly, after manually rechecking the current networking terminal based on the user dynamic video information, the method further includes:

[0025] After detecting that the manual re-inspection has passed, the specified function permissions of the current networking terminal are enabled.

[0026] In a second aspect, an embodiment of the present application provides a security management system based on communication networking, including:

[0027] A network verification module, for responding to a network access request of a current network terminal, parsing a target user account, user voice information and user face information carried in the network access request, collecting voiceprint features and semantic features based on the user voice information, collecting face features based on the user face information, splicing the voiceprint features, the semantic features and the face features into a multi-mode feature vector, traversing a network key database based on the multi-mode feature vector and the target user account, and performing network verification on the current user terminal based on the traversal result, wherein the network key database pre-configures multi-mode feature keys corresponding to different account information;

[0028] A networking recheck module is used to, after the networking verification is passed, directly encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector if the current networking terminal has logged into the current networking system multiple times; if the current network terminal logs into the current networking system for the first time, collect the special expression password or special voice password uploaded by the current networking terminal, query a pre-built repeated verification database based on the special expression password or the special voice password, and when matching facial expression information or semantic tone information is queried, encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, reject the network access request;

[0029] The manual re-inspection module is used to obtain the user dynamic video information reported by the current networking terminal when it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, and randomly select a networking terminal of a designated user account in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the designated user account is higher than that of the target user account.

[0030] In a third aspect, an embodiment of the present application provides an electronic device, including:

[0031] memory and one or more processors;

[0032] The memory is used to store one or more programs;

[0033] When the one or more programs are executed by the one or more processors, the one or more processors implement the security management method based on communication networking as described in the first aspect.

[0034] In a fourth aspect, an embodiment of the present application provides a storage medium comprising computer executable instructions, which, when executed by a computer processor, are used to execute the security management method based on communication networking as described in the first aspect.

[0035] The embodiment of the present application responds to the network access request of the current networking terminal, parses the target user account, user voice information and user face information carried in the network access request, collects voiceprint features and semantic features based on the user voice information, collects face features based on the user face information, splices the voiceprint features, semantic features and face features into a multi-mode feature vector, traverses the networking key database based on the multi-mode feature vector and the target user account, and performs networking verification on the current user terminal based on the traversal result. The networking key database pre-configures multi-mode feature keys corresponding to different account information; after the network verification passes, if the current networking terminal has logged in to the current networking system multiple times, directly encrypts the uplink and downlink data of the current networking terminal based on the multi-mode feature vector; if the current network terminal logs in to the current networking system for the first time, collects the special expression password or special Voice password, based on special expression password or special voice password, query the pre-built repeated verification database, and when matching facial expression information or semantic tone information is queried, encrypt the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and reject the network access request when matching facial expression information or audio tone information is not queried; when it is detected that the frequency of switching networking terminals of the target user account reaches the set threshold, obtain the user dynamic video information reported by the current networking terminal, and randomly select the networking terminal of the specified user account in the current networking system to send the user dynamic video information, so as to perform manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result, and the network access priority of the specified user account is higher than that of the target user account. By adopting the above technical means, by combining the user's multiple biometrics for networking verification, and performing special information re-inspection and manual re-inspection according to the login status of the networking terminal and the user account, the user's multiple unique biometric information can be used to comprehensively perform accurate security verification, avoid the easy theft of the networking key, and improve the security and reliability of the communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 This is a flow chart of a security management method based on communication networking provided in Example 1 of the present application;

[0037] Figure 2 is a schematic diagram of interaction between a networking terminal and a networking server in Embodiment 1 of the present application;

[0038] Figure 3 Schematic diagram of identification of multi-mode feature vectors in Example 1 of the present application;

[0039] Figure 4 This is the network verification flow chart in Example 1 of the present application;

[0040] Figure 5It is a multiple network verification flow chart in the first embodiment of the present application;

[0041] Figure 6 This is a schematic diagram of the structure of a security management system based on communication networking provided in Example 2 of the present application;

[0042] Figure 7 It is a structural schematic diagram of an electronic device provided in Example 2 of the present application. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical scheme and advantages of the present application clearer, the specific embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. It is understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for the convenience of description, only the part related to the present application but not all the contents are shown in the accompanying drawings. Before discussing the exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow chart describes each operation (or step) as a sequential process, many of the operations therein can be implemented in parallel, concurrently or simultaneously. In addition, the order of each operation can be rearranged. The process can be terminated when its operation is completed, but it can also have additional steps not included in the accompanying drawings. The process can correspond to a method, a function, a procedure, a subroutine, a subprogram, etc.

[0044] Embodiment 1:

[0045] Figure 1 A flowchart of a security management method based on communication networking provided in the first embodiment of the present application is given. The security management method based on communication networking provided in this embodiment can be executed by a security management device based on communication networking, which can be implemented by software and / or hardware. The security management device based on communication networking can be composed of two or more physical entities, or one physical entity. Generally speaking, the security management device based on communication networking can be a communication device such as a networking server, a gateway, or a base station.

[0046] This application provides a highly secure and multi-level communication networking security management method, which aims to enhance the security and reliability of the networking system by combining multi-modal biometric recognition, special password verification, and dynamic monitoring and manual review mechanisms.

[0047] Among them, when the networking terminal (such as smart phones, computers, etc.) initiates a network access request, the system (i.e., the security management device based on the communication network) first receives the request and parses the target user account, user voice information, and user face information carried therein. Then, voiceprint features (such as voice frequency, amplitude, etc.) and semantic features (converted to text and analyzed through voice recognition technology) are extracted from the user's voice information; facial features are extracted from the user's face information through face recognition technology, including the position and shape of key points such as facial contours, eyes, nose, and mouth. Then, the extracted voiceprint features, semantic features, and face features are spliced ​​into a multi-modal feature vector, which will serve as the main basis for the subsequent verification process.

[0048] Use the multi-mode feature vector and the target user account as query conditions to traverse the networking key database. The database pre-stores the multi-mode feature keys corresponding to different account information for user identity verification. If a matching multi-mode feature key is found in the database, the verification is successful and the networking terminal is allowed to access the system; otherwise, the access request is rejected.

[0049] For networking terminals that have passed the networking verification, the login status is further verified. Among them, for networking terminals that have logged into the system multiple times, the uplink and downlink data are directly encrypted and transmitted based on the multi-mode feature vector to ensure the security of data transmission. If it is the first login, the system will require the user to upload a special expression password or a special voice password. These passwords are verified by querying the pre-built repeated verification database: if there is matching facial expression information or semantic tone information in the database, the data encryption transmission continues based on the multi-mode feature vector. If no match is found, the network access request is rejected to prevent potential security risks.

[0050] In addition, the system will continuously monitor the frequency of the target user account switching networking terminals. If the set threshold is reached, it means that the target user account may have abnormal behavior or security risks. When an abnormality is detected, the system obtains the user dynamic video information reported by the current networking terminal. Then, a designated networking terminal (such as an administrator terminal, etc.) with a higher network access priority than the target user account is randomly selected in the current networking system, and the user dynamic video information is sent down. The operator of the designated networking terminal conducts a manual re-inspection based on the user dynamic video information to evaluate the legitimacy of the current networking terminal or handle abnormal situations. Based on the re-inspection results, the system decides whether to disconnect the networking link of the current networking terminal to ensure the security and stability of the network.

[0051] Through the above implementation process, not only the security of the communication network is improved, but also the risk of unauthorized access and data leakage is effectively prevented through a multi-level verification and monitoring mechanism.

[0052] The following description is made by taking the communication networking-based security management device as an example of the subject for executing the communication networking-based security management method. Figure 1 The communication network-based security management method specifically includes:

[0053] S110. In response to the network access request of the current networking terminal, parse the target user account, user voice information and user face information carried in the network access request, collect voiceprint features and semantic features based on the user voice information, collect face features based on the user face information, splice the voiceprint features, semantic features and face features into a multi-mode feature vector, traverse the networking key database based on the multi-mode feature vector and the target user account, perform networking verification on the current user terminal based on the traversal result, and pre-configure the multi-mode feature key in the networking key database corresponding to different account information.

[0054] like Figure 2 As shown, the server 11 communicates with each networking terminal 12. When a networking terminal 12 (such as a computer, smart phone, etc.) initiates a network access request, the server 11 first receives the network access request and parses the target user account, user voice information and user face information carried therein, and then extracts multiple modal biometric features from the user voice information and user face information to comprehensively perform network access verification.

[0055] Specifically, refer to Figure 3 This application uses a semantic feature acquisition model based on a neural network to collect semantic features in user voice information, uses a voiceprint feature acquisition model to collect voiceprint features in user voice information, and uses a facial feature acquisition model to collect facial features in user facial information.

[0056] In order to combine semantic features, voiceprint features and face features for network access verification, this application integrates multiple different machine learning or deep learning models to collect various modal features by calling existing models or training new models.

[0057] Among them, for the semantic feature collection, existing models of the BERT or GPT series can be used, which are widely used in natural language processing tasks, especially understanding and generating text. You can also use pre-trained models to extract semantic features after speech-to-text conversion, by using speech recognition services (such as Google Speech-to-Text, IBM Watson Speech to Text, etc.) to convert speech into text, and then use the NLP model to process the text to obtain semantic features. It is understandable that if the semantic features of a specific field are critical to identity authentication, it may be necessary to train a specific NLP model for that field.

[0058] For voiceprint feature collection, you can use existing voiceprint recognition libraries such as VoxCeleb, Speaker Recognition Tool kit (SRTK), etc. Voiceprint recognition libraries provide pre-trained models to extract voiceprint features. You can also use models in deep learning frameworks such as TensorFlow and pre-trained models in PyTorch. These models are based on convolutional neural networks (CNN) or recurrent neural networks (RNN) to process user voice information and obtain semantic features. Similarly, in order to more accurately identify the voiceprints of specific groups of people, you can collect voiceprint data of specific groups of people and train exclusive voiceprint recognition models.

[0059] For facial feature collection, you can use face recognition libraries such as OpenCV, dlib, FaceNet, etc. These recognition libraries provide pre-trained models to detect faces and extract features. If you need to optimize face recognition for a specific group of people or environment, you can collect a large amount of labeled face data and train a dedicated model.

[0060] Finally, the three biometric features collected by the three models are effectively fused using the feature fusion model (semantics, voiceprint, and face). The feature fusion model can perform feature fusion by simple splicing or using more complex fusion techniques (such as weighted sum, deep learning fusion layer). This application does not impose fixed restrictions on the specific feature fusion method, so it will not be elaborated here.

[0061] The multi-mode feature vector and the target user account are further used as query conditions to traverse the networking key database. The database pre-stores the multi-mode feature keys corresponding to different account information for user identity verification. The multi-mode feature key is collected when the user registers the user account. The multi-mode feature key is constructed based on the user's original facial features, voiceprint features and corresponding semantic features. The collection and splicing method is the same as the above-mentioned multi-mode feature vector, which will not be described in detail here. If a matching multi-mode feature key is found in the database, the verification is passed and the networking terminal is allowed to access the system; otherwise, the network access request is rejected.

[0062] Optionally, refer to Figure 4 , based on the multi-mode feature vector and the target user account, the network key database is traversed, and the network verification of the current user terminal is performed based on the traversal result, including:

[0063] S1101, traversing the networking key database based on the target user account, determining the account information matching the target user account, and extracting the multi-mode feature key configured by the matching account information;

[0064] S1102. Calculate the feature similarity between the extracted multi-mode feature key and the multi-mode feature vector. When the feature similarity reaches a set similarity threshold, determine that the network verification is passed. The similarity threshold is set according to the network access priority of the target user account, and the similarity threshold is positively correlated with the network access priority.

[0065] In the process of traversing the networking key database based on the multi-mode feature vector and the target user account for network verification, it is first necessary to find the account information that matches the target user account in the networking key database. The system first uses the target user account as a query condition to traverse the networking key database, which stores multiple account information and its corresponding multi-mode feature key. During the traversal process, the system will compare whether the account information in the database is consistent with the target user account or whether there is a certain mapping relationship (such as account alias, associated ID, etc.). Once the matching account information is found, the system will extract the multi-mode feature key configured for the account information and prepare for the next step of feature similarity calculation. Then, by comparing the similarity between the extracted multi-mode feature key and the multi-mode feature vector in the current network access request, it is determined whether the network verification has passed.

[0066] Use feature similarity calculation methods (such as cosine similarity, Euclidean distance, Manhattan distance, etc.) to calculate the similarity between the extracted multi-modal feature key and the multi-modal feature vector in the current network access request. The result of the similarity calculation will be compared with a set similarity threshold. This similarity threshold is set according to the network access priority of the target user account. The higher the priority account, the higher the similarity threshold needs to be set to ensure the high accuracy of the network access verification for the high-priority account. Different users or user groups have different network access priorities. By setting different similarity thresholds according to the network access priority, the system can respond to different security needs and scenarios more flexibly.

[0067] If the calculated feature similarity reaches or exceeds the set similarity threshold, the system determines that the network verification is passed and enters the next step of verification. If the feature similarity is lower than the set similarity threshold, the system determines that the network verification has failed, rejects the network access request of the current user terminal, and returns a corresponding error message or prompt information.

[0068] It should be noted that the similarity threshold is adaptively set according to the actual network access verification accuracy requirements to ensure that unauthorized access can be effectively prevented while avoiding false rejection of legitimate users. The threshold can be adjusted and optimized based on a large amount of experimental data and actual scenarios.

[0069] Optionally, before responding to the network access request of the current networking terminal, the method further includes:

[0070] The semantic prompt information associated with the specified semantic vocabulary is issued to collect the voice information containing the specified semantic vocabulary based on the semantic prompt information.

[0071] The system can enhance security, verification accuracy, and verification efficiency by instructing users to input information containing specific semantic words through voice. The system constructs a set of question-answer information, in which the semantic prompt information is the question part and the specified semantic words are the answer part. The semantic features of the user's voice information are valid only when it contains the specified semantic words. The system only needs to collect the user's correct semantic features based on the specified semantic words to construct a multi-mode feature key to achieve more accurate network access verification.

[0072] When the system performs network access verification, it sends semantic prompt information to the user to guide the user to include the correct answer to the semantic prompt information when speaking the voice message, that is, the specified semantic vocabulary. After receiving the semantic prompt information, the user follows the prompt requirements and speaks a voice message containing the specified semantic vocabulary in the network access request. The current networking terminal collects this voice information and sends it to the system as part of the network access request. After receiving the network access request containing voice information, the system will perform parsing, feature extraction, multi-mode feature vector splicing and other operations according to the above process to achieve efficient and accurate network access verification.

[0073] S120. After the network verification is passed, if the current networking terminal has logged in to the current networking system multiple times, the uplink and downlink data of the current networking terminal are directly encrypted and transmitted based on the multi-mode feature vector; if the current network terminal logs in to the current networking system for the first time, the special expression password or special voice password uploaded by the current networking terminal is collected, and a pre-built repeated verification database is queried based on the special expression password or special voice password. When matching facial expression information or semantic tone information is queried, the uplink and downlink data of the current networking terminal are encrypted and transmitted based on the multi-mode feature vector. When no matching facial expression information or audio tone information is queried, the network access request is rejected.

[0074] After the network verification is passed, the system will conduct a network recheck based on the current target user account and the login history of the current network terminal to determine whether to allow access to the network and decide on the subsequent data encryption transmission strategy to ensure the security of data transmission and improve the flexibility and convenience of user verification.

[0075] The system checks the login history of the current target user account and the current networking terminal.

[0076] If the current target user account has logged into the current networking system through the current networking terminal for multiple times, the recheck is passed and access to the network is permitted. If the current target user account logs into the current networking system through the current networking terminal for the first time, the special password collection and verification process is executed.

[0077] Specifically, the system prompts the user to upload a special expression password or a special voice password. According to the prompt, the user uploads data containing special expressions or special voices through the current networking terminal. The system collects this data and extracts facial expression information or semantic tone information. Based on the extracted information, the pre-built repeated verification database is queried. If matching facial expression information or semantic tone information is found in the database, the re-inspection is passed and network access is permitted. If no matching information is found, the network access request is rejected and the corresponding error message or prompt information is returned. It is understandable that in order to avoid the situation where unauthorized identity access is caused by information forgery, repeated verification is required for the situation where an unfamiliar networking terminal is used to access the network. Considering that the user's special expression information or special voice information containing semantic tone has high uniqueness and is extremely difficult to forge information, this part of the user's information is pre-stored and saved in the repeated verification database to perform repeated verification when needed.

[0078] When the target user account is allowed to access the network, the system can encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector. During the data transmission process, the system will use the multi-mode feature vector to construct part of the encryption key to encrypt and decrypt the transmitted data to ensure the security of the data. By using highly unique multi-mode feature vectors to transmit uplink and downlink data, data can be prevented from being easily stolen. Even other terminals in the networking system do not have the corresponding key information, and a high degree of data transmission security is achieved through high uniqueness.

[0079] Optionally, encrypting and transmitting uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes:

[0080] Constructing a first key feature sequence based on the multi-mode feature vector, and generating an encryption key sequence according to the first key feature sequence and a set networking key sequence;

[0081] The uplink and downlink data of the current networking terminal are encrypted, transmitted and decrypted based on the encryption key sequence.

[0082] In the process of encrypting and transmitting the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, the multi-mode feature vector is converted into a key feature sequence of a fixed length, namely, the first key feature sequence, by using a hash function, an encryption algorithm or a related mathematical transformation method, so as to retain the key information of the multi-mode feature vector and convert it into a form suitable for encryption.

[0083] The set networking key sequence is further extracted, which is predefined, fixed, and shared in the entire networking system. The system combines the first key feature sequence with the networking key sequence and generates an encryption key sequence through a corresponding algorithm (such as XOR operation, hash function combination, or related key generation algorithm). In this way, a unique encryption key sequence between the current networking terminal and the system server can be obtained, and it is only valid for the current session of the current networking terminal.

[0084] Later, during the data transmission process, the system uses the generated encryption key sequence to encrypt the uplink and downlink data of the current networking terminal. All sent data will be encrypted to prevent it from being intercepted and stolen during the transmission process. After receiving the encrypted data, the current networking terminal will use the same encryption key sequence (after the current networking terminal completes the network access, the key sequence is also generated based on the above method) to decrypt the data to restore the original data. In this way, the system can realize the encrypted transmission of the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, ensuring the security and confidentiality of the data transmission process.

[0085] Optionally, encrypted transmission of uplink and downlink data of the current networking terminal is performed based on the multi-mode feature vector, including:

[0086] Constructing a second key feature sequence based on the multi-mode feature vector, and splitting the second key feature sequence into multiple sub-feature sequences according to a set splitting rule;

[0087] Based on multiple sub-feature sequences, different types of uplink and downlink data of the current networking terminals are encrypted, transmitted and decrypted.

[0088] In the process of encrypting and transmitting uplink and downlink data of the current networking terminal based on the multi-mode feature vector,

[0089] The multi-mode feature vector can also be converted into multiple sub-feature sequences and used for encryption of different types of data respectively, so as to provide a flexible and efficient data encryption transmission method.

[0090] Similarly, the system constructs a second key feature sequence based on the multi-mode feature vector of the current networking terminal through a hash function, an encryption algorithm or a related mathematical transformation method.

[0091] Then, according to the set splitting rules, the second key feature sequence is split into multiple sub-feature sequences. The splitting rules can be set according to factors such as data type, data importance, encryption requirements, etc. For example, the key sequence can be split according to the sequence fixed length, specific mode or data type.

[0092] Then, according to the uplink and downlink data types of the current networking terminal (such as control instructions, user data, sensitive information, audio and video, etc.), the corresponding sub-feature sequence is selected for encryption. Each sub-feature sequence can be used to encrypt one or more types of data, and is adaptively set according to the actual splitting rules and data encryption strategy.

[0093] During the encryption process, the system uses the selected sub-feature sequence as the encryption key to encrypt the target data. The encrypted data will remain encrypted during transmission to prevent unauthorized access. After receiving the encrypted data, the receiver will decrypt the data according to the type of data and the sub-feature sequence used for encryption (the sub-feature sequence is also generated based on the above method after the current networking terminal completes the network access). The decryption process is the opposite of the encryption process and aims to restore the original data.

[0094] Through the above process, the system can realize refined encrypted transmission of different types of uplink and downlink data of the current networking terminals based on multi-mode feature vectors, thereby improving the security and flexibility of data transmission.

[0095] Optionally, after the network verification is passed, the following is also included:

[0096] The real-time video call information is parsed from the uplink data of the current networking terminal, and the dynamic video verification of the current networking terminal is performed based on the real-time video call information and the user's face information.

[0097] After the network verification is passed, in order to further enhance the security of the system, especially when processing sensitive operations such as real-time video calls, the system performs additional dynamic video verification steps to further improve network security.

[0098] For example, in a video conference scenario with high confidentiality requirements, after the network verification is passed, the system starts to monitor and parse the uplink data uploaded by the current network terminal. Among these uplink data, the system pays special attention to real-time video call information, which may be transmitted in a specific data packet format or protocol. The system extracts the video stream, audio stream, and possible metadata (such as timestamp, session ID, etc.) from the data packet. Then, using the frame data in the video stream, the user's facial information is extracted through the face recognition algorithm, including detailed information such as key feature points of the face, face contour, and expression. Then, the extracted user face information is compared with the user face information stored in the previous verification process. Optionally, the system can also analyze dynamic features in the video stream, such as the user's head movement, expression changes, etc., to verify the authenticity of the video call. If the system detects any anomalies or inconsistencies (such as mismatched user face information, tampered or forged video, etc.), it may trigger an alarm or reject the video call request. During the video call, the system continuously monitors and verifies the face information to ensure the continuity and security of the call.

[0099] S130. When it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, obtain the user dynamic video information reported by the current networking terminal, and randomly select a networking terminal of the specified user account in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the specified user account is higher than that of the target user account.

[0100] Further, refer to Figure 5 After completing the networking verification and repeated verification between the current networking terminal 121 and the server 11, in the networking system, the present application also monitors the frequency of the user account switching networking terminals and triggers the security response mechanism accordingly. When it is detected that the frequency of the target user account switching networking terminals is abnormal (i.e. reaches or exceeds the set threshold), the legitimacy of the current network access is verified by selecting the networking terminal 122 of the specified user account, and decides whether to disconnect its networking link accordingly.

[0101] Among them, when it is detected that the switching frequency of the target user account reaches or exceeds the set threshold, the system triggers the exception handling mechanism. At this time, the system instructs the current networking terminal to report the user's dynamic video information, such as through a real-time video call function or a dedicated video verification interface. The dynamic video information should include the user's real-time video stream, audio stream, and possible identity verification information (such as facial features, voice features, etc.).

[0102] The system then randomly selects one or more networking terminals of the specified user accounts in the current networking system as verification nodes. The network access priority of these specified user accounts should be higher than that of the target user accounts, and their terminals should be trusted or strictly verified. For example, in a video conference scenario with high confidentiality requirements, select an account with a high conference level or the initiator of the conference as the specified user account. Then send the dynamic video information to the networking terminal of the specified user account for manual re-inspection.

[0103] The user on the networking terminal of the specified user account reviews the received dynamic video information. For example, confirm whether the user identity, facial expression, voice characteristics, etc. in the video are consistent with expectations to determine the legitimacy of the current networking terminal, and then report the manual re-inspection results to the server. Based on the received manual re-inspection results, the system server makes a decision. If the re-inspection results show that the current networking terminal is legal and the user identity is correct, the system continues to maintain its networking link. If the re-inspection results show that the current networking terminal is abnormal or the user identity is suspicious, the system immediately disconnects its networking link and takes further security measures (such as banning the account, recording logs, etc.).

[0104] Optionally, when it is detected that the frequency of switching the networking terminal of the target user account reaches a set threshold, the method further includes:

[0105] Disable the specified function permissions of the current networking terminal, where the specified function permissions include at least one of voice call permission, video call permission, and file sharing permission;

[0106] Correspondingly, after manually rechecking the current networking terminal based on the user dynamic video information, the method further includes:

[0107] After detecting that the manual re-inspection has passed, the specified function permissions of the current networking terminal are enabled.

[0108] When the system detects that the target user account switches networking terminals at an abnormal frequency, in addition to possibly disconnecting the networking link, it can also take more detailed security measures, such as temporarily shutting down key functional permissions of the current networking terminal and restoring these permissions after manual review.

[0109] Among them, when the system detects that the frequency of the target user account switching networking terminals reaches or exceeds the set threshold, in addition to triggering the exception handling mechanism, this application will immediately close the specified functional permissions of the current networking terminal. Taking the video conferencing scenario with high confidentiality requirements as an example, these specified functional permissions may include voice call permissions, video call permissions, file sharing permissions, etc., depending on the system's security policies and user needs. Closing these permissions can limit potential risky behaviors and prevent unauthorized communications and data transmission.

[0110] After that, after the manual re-inspection of the current networking terminal based on the user's dynamic video information, if the re-inspection result shows that the current networking terminal is legal and the user identity is correct, the system records this result. Then check the list of specified function permissions that were previously closed due to frequency abnormalities. According to the results of the re-inspection, the system opens the specified function permissions that were previously closed one by one. Through the above process supplement, the system can take more detailed and flexible security measures when it detects that the target user account switches the networking terminal frequency abnormally, to ensure the security and stability of the network environment.

[0111] In the above, by responding to the network access request of the current networking terminal, parsing the target user account, user voice information and user face information carried in the network access request, collecting voiceprint features and semantic features based on the user voice information, collecting face features based on the user face information, splicing the voiceprint features, semantic features and face features into a multi-mode feature vector, traversing the networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result. The networking key database pre-configures multi-mode feature keys corresponding to different account information; after the network verification passes, if the current networking terminal has logged in to the current networking system multiple times, directly encrypting the uplink and downlink data of the current networking terminal based on the multi-mode feature vector; if the current network terminal logs in to the current networking system for the first time, collecting the special expression password or special voice uploaded by the current networking terminal Password, query the pre-built repeated verification database based on the special expression password or special voice password, and when the matching facial expression information or semantic tone information is queried, encrypt the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and reject the network access request when the matching facial expression information or audio tone information is not queried; when it is detected that the frequency of the target user account switching networking terminals reaches the set threshold, obtain the user dynamic video information reported by the current networking terminal, and randomly select the networking terminal of the specified user account in the current networking system to send the user dynamic video information, so as to perform manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result, and the network access priority of the specified user account is higher than that of the target user account. By adopting the above technical means, by combining the user's multiple biometrics for networking verification, and performing special information re-inspection and manual re-inspection according to the login status of the networking terminal and the user account, the user's multiple unique biometric information can be used to comprehensively perform accurate security verification, avoid the easy theft of the networking key, and improve the security and reliability of the communication network.

[0112] Embodiment 2:

[0113] Based on the above embodiments, Figure 6This is a schematic diagram of a security management system based on communication networking provided in Example 2 of the present application. Figure 6 The communication network-based security management system provided in this embodiment specifically includes:

[0114] The network verification module 21 is used to respond to the network access request of the current network terminal, parse the target user account, user voice information and user face information carried in the network access request, collect voiceprint features and semantic features based on the user voice information, collect face features based on the user face information, splice the voiceprint features, the semantic features and the face features into a multi-mode feature vector, traverse the network key database based on the multi-mode feature vector and the target user account, and perform network verification on the current user terminal based on the traversal result, wherein the network key database pre-configures multi-mode feature keys corresponding to different account information;

[0115] The networking re-inspection module 22 is used to encrypt and transmit the uplink and downlink data of the current networking terminal directly based on the multi-mode feature vector after the networking verification is passed, if the current networking terminal has logged into the current networking system multiple times; if the current network terminal logs into the current networking system for the first time, collect the special expression password or special voice password uploaded by the current networking terminal, query the pre-built repeated verification database based on the special expression password or the special voice password, and when matching facial expression information or semantic tone information is queried, encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, reject the network access request;

[0116] The manual re-inspection module 23 is used to obtain the user dynamic video information reported by the current networking terminal when it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, and randomly select a networking terminal of a specified user account in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the specified user account is higher than that of the target user account.

[0117] Further, traversing a networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result, includes:

[0118] Traversing the networking key database based on the target user account, determining account information matching the target user account, and extracting the multi-mode feature key configured by the matching account information;

[0119] Calculate the feature similarity between the extracted multi-mode feature key and the multi-mode feature vector. When the feature similarity reaches a set similarity threshold, determine that the network verification is passed. The similarity threshold is set according to the network access priority of the target user account, and the similarity threshold is positively correlated with the network access priority.

[0120] Further, the encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes:

[0121] Constructing a first key feature sequence based on the multi-mode feature vector, and generating an encryption key sequence according to the first key feature sequence and a set networking key sequence;

[0122] The uplink and downlink data of the current networking terminal are encrypted, transmitted and decrypted based on the encryption key sequence.

[0123] Further, the encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes:

[0124] Constructing a second key feature sequence based on the multi-mode feature vector, and splitting the second key feature sequence into a plurality of sub-feature sequences according to a set splitting rule;

[0125] Based on the multiple sub-feature sequences, encryption transmission and decryption operations are performed on different types of uplink and downlink data of the current networking terminal.

[0126] Furthermore, after the networking verification is passed, the method further includes:

[0127] The real-time video call information is parsed from the uplink data of the current networking terminal, and the dynamic video verification of the current networking terminal is performed based on the real-time video call information and the user face information.

[0128] Furthermore, before responding to the network access request of the current networking terminal, the method further includes:

[0129] The semantic prompt information associated with the designated semantic vocabulary is issued to collect the voice information containing the designated semantic vocabulary based on the semantic prompt information.

[0130] Further, when it is detected that the frequency of switching the networking terminal of the target user account reaches a set threshold, the method further includes:

[0131] Disable the specified function permission of the current networking terminal, wherein the specified function permission includes at least one of voice call permission, video call permission and file sharing permission;

[0132] Correspondingly, after manually rechecking the current networking terminal based on the user dynamic video information, the method further includes:

[0133] After detecting that the manual re-inspection has passed, the specified function permissions of the current networking terminal are enabled.

[0134] In the above, by responding to the network access request of the current networking terminal, parsing the target user account, user voice information and user face information carried in the network access request, collecting voiceprint features and semantic features based on the user voice information, collecting face features based on the user face information, splicing the voiceprint features, semantic features and face features into a multi-mode feature vector, traversing the networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result. The networking key database pre-configures multi-mode feature keys corresponding to different account information; after the network verification passes, if the current networking terminal has logged in to the current networking system multiple times, directly encrypting the uplink and downlink data of the current networking terminal based on the multi-mode feature vector; if the current network terminal logs in to the current networking system for the first time, collecting the special expression password or special voice uploaded by the current networking terminal Password, query the pre-built repeated verification database based on the special expression password or special voice password, and when the matching facial expression information or semantic tone information is queried, encrypt the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and reject the network access request when the matching facial expression information or audio tone information is not queried; when it is detected that the frequency of the target user account switching networking terminals reaches the set threshold, obtain the user dynamic video information reported by the current networking terminal, and randomly select the networking terminal of the specified user account in the current networking system to send the user dynamic video information, so as to perform manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result, and the network access priority of the specified user account is higher than that of the target user account. By adopting the above technical means, by combining the user's multiple biometrics for networking verification, and performing special information re-inspection and manual re-inspection according to the login status of the networking terminal and the user account, the user's multiple unique biometric information can be used to comprehensively perform accurate security verification, avoid the easy theft of the networking key, and improve the security and reliability of the communication network.

[0135] The communication networking-based security management system provided in the second embodiment of the present application can be used to execute the communication networking-based security management method provided in the above-mentioned first embodiment, and has corresponding functions and beneficial effects.

[0136] Embodiment three:

[0137] Embodiment 3 of the present application provides an electronic device, referring to Figure 7The electronic device includes: a processor 31, a memory 32, a communication module 33, an input device 34 and an output device 35. The number of processors in the electronic device can be one or more, and the number of memories in the electronic device can be one or more. The processor, memory, communication module, input device and output device of the electronic device can be connected via a bus or other means.

[0138] As a computer-readable storage medium, the memory can be used to store software programs, computer executable programs and modules, such as the program instructions / modules corresponding to the security management method based on communication networking described in any embodiment of the present application. The memory may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the device, etc. In addition, the memory may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0139] The communication module is used for data transmission.

[0140] The processor executes various functional applications and data processing of the device by running software programs, instructions and modules stored in the memory, thereby realizing the above-mentioned security management method based on communication networking.

[0141] The input device can be used to receive input digital or character information and generate key signal input related to user settings and function control of the device. The output device can include display devices such as display screens.

[0142] The electronic device provided above can be used to execute the communication networking-based security management method provided in the above-mentioned embodiment 1, and has corresponding functions and beneficial effects.

[0143] Embodiment 4:

[0144] The embodiment of the present application also provides a storage medium containing computer executable instructions, which are used to execute a security management method based on communication networking when executed by a computer processor. The security management method based on communication networking includes: responding to a network access request of a current networking terminal, parsing a target user account, user voice information, and user face information carried in the network access request, collecting voiceprint features and semantic features based on the user voice information, collecting face features based on the user face information, splicing the voiceprint features, semantic features, and face features into a multi-mode feature vector, traversing a networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result. The networking key The database pre-configures a multi-mode feature key corresponding to different account information; after the network verification is passed, if the current network terminal has logged into the current network system multiple times, the uplink and downlink data of the current network terminal are directly encrypted and transmitted based on the multi-mode feature vector; if the current network terminal logs into the current network system for the first time, the special expression password or special voice password uploaded by the current network terminal is collected, and the pre-built repeated verification database is queried based on the special expression password or special voice password, and when matching facial expression information or semantic tone information is queried, the uplink and downlink data of the current network terminal are encrypted and transmitted based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, the network access request is rejected;

[0145] When it is detected that the frequency of switching networking terminals of the target user account reaches the set threshold, the user dynamic video information reported by the current networking terminal is obtained, and the networking terminal of the specified user account is randomly selected in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the specified user account is higher than that of the target user account.

[0146] Storage medium - any of various types of memory devices or storage devices. The term "storage medium" is intended to include: installation media, such as CD-ROM, floppy disk or tape device; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; non-volatile memory, such as flash memory, magnetic media (such as hard disk or optical storage); registers or other similar types of memory elements, etc. Storage media may also include other types of memory or combinations thereof. In addition, the storage medium may be located in the first computer system in which the program is executed, or may be located in a different second computer system, which is connected to the first computer system via a network (such as the Internet). The second computer system can provide program instructions to the first computer for execution. The term "storage medium" may include two or more storage media residing in different locations (for example, in different computer systems connected by a network). The storage medium may store program instructions (for example, embodied as a computer program) that can be executed by one or more processors.

[0147] Of course, the storage medium containing computer executable instructions provided in the embodiment of the present application, whose computer executable instructions are not limited to the security management method based on communication networking as described above, can also execute related operations in the security management method based on communication networking provided in any embodiment of the present application.

[0148] The security management system, storage medium and electronic device based on communication networking provided in the above embodiments can execute the security management method based on communication networking provided in any embodiment of the present application. For technical details not described in detail in the above embodiments, please refer to the security management method based on communication networking provided in any embodiment of the present application.

[0149] The above are only preferred embodiments of the present application and the technical principles used. The present application is not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions that can be made by those skilled in the art will not deviate from the scope of protection of the present application. Therefore, although the present application is described in more detail through the above embodiments, the present application is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the claims.

Claims

1. A security management method based on communication networking, characterized in that: include: In response to a network access request of a current networking terminal, a target user account, user voice information, and user face information carried in the network access request are parsed, voiceprint features and semantic features are collected based on the user voice information, face features are collected based on the user face information, the voiceprint features, the semantic features, and the face features are spliced ​​into a multi-mode feature vector, a networking key database is traversed based on the multi-mode feature vector and the target user account, and networking verification is performed on the current user terminal based on the traversal result, wherein the networking key database is pre-configured with a multi-mode feature key corresponding to different account information; After the networking verification is passed, if the current networking terminal has logged into the current networking system multiple times, the uplink and downlink data of the current networking terminal are encrypted and transmitted directly based on the multi-mode feature vector; if the current network terminal logs into the current networking system for the first time, the special expression password or special voice password uploaded by the current networking terminal is collected, and a pre-built repeated verification database is queried based on the special expression password or the special voice password, and when matching facial expression information or semantic tone information is queried, the uplink and downlink data of the current networking terminal are encrypted and transmitted based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, the network access request is rejected; When it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, the user dynamic video information reported by the current networking terminal is obtained, and the networking terminal of the specified user account is randomly selected in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the specified user account is higher than that of the target user account.

2. The communication networking-based security management method according to claim 1, characterized in that: The traversing the networking key database based on the multi-mode feature vector and the target user account, and performing networking verification on the current user terminal based on the traversal result, includes: Traversing the networking key database based on the target user account, determining account information matching the target user account, and extracting the multi-mode feature key configured by the matching account information; Calculate the feature similarity between the extracted multi-mode feature key and the multi-mode feature vector. When the feature similarity reaches a set similarity threshold, determine that the network verification is passed. The similarity threshold is set according to the network access priority of the target user account, and the similarity threshold is positively correlated with the network access priority.

3. The communication networking-based security management method according to claim 1, characterized in that: The encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes: Constructing a first key feature sequence based on the multi-mode feature vector, and generating an encryption key sequence according to the first key feature sequence and a set networking key sequence; The uplink and downlink data of the current networking terminal are encrypted, transmitted and decrypted based on the encryption key sequence.

4. The security management method based on communication networking according to claim 1 is characterized in that: The encrypted transmission of uplink and downlink data of the current networking terminal based on the multi-mode feature vector includes: Constructing a second key feature sequence based on the multi-mode feature vector, and splitting the second key feature sequence into a plurality of sub-feature sequences according to a set splitting rule; Based on the multiple sub-feature sequences, encryption transmission and decryption operations are performed on different types of uplink and downlink data of the current networking terminal.

5. The communication networking-based security management method according to claim 1, characterized in that: After the networking verification is passed, the method further includes: The real-time video call information is parsed from the uplink data of the current networking terminal, and the dynamic video verification of the current networking terminal is performed based on the real-time video call information and the user face information.

6. The communication networking-based security management method according to claim 1, characterized in that: Before responding to the network access request of the current networking terminal, the method further includes: The semantic prompt information associated with the designated semantic vocabulary is issued to collect the voice information containing the designated semantic vocabulary based on the semantic prompt information.

7. The communication networking-based security management method according to claim 1, characterized in that: When it is detected that the frequency of switching the network terminal of the target user account reaches a set threshold, the method further includes: Disable the specified function permission of the current networking terminal, wherein the specified function permission includes at least one of voice call permission, video call permission and file sharing permission; Correspondingly, after manually rechecking the current networking terminal based on the user dynamic video information, the method further includes: After detecting that the manual re-inspection has passed, the specified function permissions of the current networking terminal are enabled.

8. A security management system based on communication networking, characterized in that: include: A network verification module, for responding to a network access request of a current network terminal, parsing a target user account, user voice information and user face information carried in the network access request, collecting voiceprint features and semantic features based on the user voice information, collecting face features based on the user face information, splicing the voiceprint features, the semantic features and the face features into a multi-mode feature vector, traversing a network key database based on the multi-mode feature vector and the target user account, and performing network verification on the current user terminal based on the traversal result, wherein the network key database pre-configures multi-mode feature keys corresponding to different account information; A networking recheck module is used to, after the networking verification is passed, directly encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector if the current networking terminal has logged into the current networking system multiple times; if the current network terminal logs into the current networking system for the first time, collect the special expression password or special voice password uploaded by the current networking terminal, query a pre-built repeated verification database based on the special expression password or the special voice password, and when matching facial expression information or semantic tone information is queried, encrypt and transmit the uplink and downlink data of the current networking terminal based on the multi-mode feature vector, and when matching facial expression information or semantic tone information is not queried, reject the network access request; The manual re-inspection module is used to obtain the user dynamic video information reported by the current networking terminal when it is detected that the frequency of switching networking terminals of the target user account reaches a set threshold, and randomly select a networking terminal of a designated user account in the current networking system to send the user dynamic video information, so as to perform a manual re-inspection of the current networking terminal based on the user dynamic video information, and decide whether to disconnect the networking link of the current networking terminal according to the received manual re-inspection result. The network access priority of the designated user account is higher than that of the target user account.

9. An electronic device, characterized in that: include: memory and one or more processors; The memory is used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the communication networking-based security management method as described in any one of claims 1-7.

10. A storage medium containing computer executable instructions, characterized in that: The computer executable instructions, when executed by a computer processor, are used to execute the communication networking-based security management method as described in any one of claims 1 to 7.

Images