A method and system for detecting application program unauthorized vulnerability based on multi-module combination

Abstract

The present invention relates to the field of data security technology, and in particular to a method and system for detecting unauthorized application vulnerabilities based on a multi-module combination, including setting a security identity information library and mounting it to a transmitting end; setting a transmitting frequency of a transmitting end according to a historical matching receiving frequency; initiating and broadcasting a terminal matching signal; receiving identity authentication information sent in response to the terminal matching signal, and verifying it according to the security identity information library; responding to the verification result of the security identity information library, and sending electronic information data corresponding to a matching receiving frequency or a detuned frequency to a corresponding receiving end. The present invention realizes permission detection, avoids unauthorized vulnerabilities, can efficiently and securely transmit electronic information data, ensures the confidentiality and accuracy of data during transmission, and at the same time improves the flexibility and adaptability of data transmission, is suitable for a variety of application scenarios, and effectively prevents the risk of information leakage.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a method and system for detecting unauthorized vulnerability of an application program based on a multi-module combination. Background Art

[0002] In the interaction of applications, data is usually involved in the interactive transmission. Therefore, the security and integrity of the data transmission process are crucial. In the existing technology, encryption algorithms such as symmetric encryption and asymmetric encryption and secure transmission protocols are usually used to prevent data from being intercepted, tampered or forged during transmission. Authentication mechanisms such as digital certificates and multi-factor authentication can also be set to verify the identities of both parties in communication and avoid unauthorized vulnerabilities. In addition, data integrity is guaranteed by hash functions and message authentication codes (MACs) to ensure that data is not modified without authorization during transmission.

[0003] Chinese patent announcement number CN118101340B discloses a data security transmission method, device and electronic device, which belongs to the field of data processing technology. The method includes: dispersing the first original key in the session key package by part of the data of the preset dynamic key dispersion factor to obtain the first encryption key; encrypting the instruction plaintext of the first instruction to be sent by the first encryption key to obtain the first ciphertext to be sent; calculating the summary value of the first ciphertext to be sent, and using the summary value of the first ciphertext to be sent as the preset dynamic key dispersion factor used for the next encryption; sending the first ciphertext to be sent to the power equipment. In this invention, each summary value overwrites the previous summary value as the preset dynamic key dispersion factor, thereby realizing the dynamic update of the preset dynamic key dispersion factor each time the data is encrypted, and then realizing the dynamic key, thereby reducing the probability of transmission data being tampered with after the session key package is illegally obtained by the outside and reducing the risk of malicious attacks on the power equipment. It can be seen that the following problems exist:

[0004] This invention only performs passive verification, does not consider active identity authentication in the one-to-many transmission process, and has a single transmission method during the data transmission process. Summary of the invention

[0005] To this end, the present invention provides an application unauthorized vulnerability detection method based on a multi-module combination to overcome the problem that the prior art does not consider active identity authentication in a one-to-many transmission process and has a single transmission means in the data transmission process.

[0006] To achieve the above object, the present invention provides an application program unauthorized vulnerability detection method based on a multi-module combination, comprising:

[0007] Set up a secure identity information database and mount it to the sending end;

[0008] Set the transmitting end transmission frequency according to the historical matching receiving frequency;

[0009] Initiate and broadcast terminal matching signals;

[0010] receiving identity authentication information sent in response to the terminal matching signal, and verifying it according to the security identity information database;

[0011] In response to the verification result of the security identity information database, sending electronic information data corresponding to the matching receiving frequency or the detuned frequency to the corresponding receiving end;

[0012] Wherein, the identity verification information includes verification key information and identity identification information, and the transmission frequency includes a matching receiving frequency and a detuning frequency;

[0013] The verification result is to determine the identity authentication status of the receiving end by the identity authentication information and the security identity information database, and determine the number of detuned frequencies according to the ratio of the number of identity authentication passes to the number of identity authentication exceptions, and send a matching receiving frequency or a detuned frequency to the receiving end according to whether to send electronic information data to the receiving end and the determination result of the identity authentication status;

[0014] The frequencies included in the receiving frequency are the same as the frequencies included in the transmitting frequency.

[0015] Furthermore, in response to the verification result, it is determined whether to send the electronic information data to the corresponding receiving end according to the correctness of the verification key information input by the receiving end.

[0016] Furthermore, when generating the verification result, the identity authentication status of the receiving end is determined according to the comparison result between the identity identification information and the security identity information library.

[0017] The identity authentication status includes identity authentication passed and identity authentication abnormal.

[0018] Further, when sending the electronic information data, a matching receiving frequency is sent to the receiving end or a detuned frequency is sent to the receiving end according to the normal determination result, so that the matching receiving frequency is the receiving frequency of the receiving end;

[0019] Among them, the normal determination result is that electronic information data is sent to the receiving end and the identity authentication status is that the identity authentication is passed.

[0020] Further, when sending the electronic information data, a matching receiving frequency or a detuned frequency is sent to the receiving end according to the abnormality determination result, so that the detuned frequency is the receiving frequency of the receiving end;

[0021] Among them, the abnormal determination result is that electronic information data is sent to the receiving end and the identity authentication status is an identity authentication abnormality.

[0022] Furthermore, when generating the verification result, a frequency selection exclusion range is determined according to the historical matching reception frequency within a preset time, and a reception frequency selection range is determined according to the transmission frequency range and the frequency selection exclusion range.

[0023] Further, when setting the matching receiving frequency and the detuning frequency, the detuning frequency and the matching receiving frequency are randomly determined according to the receiving frequency selection range.

[0024] Further, when setting the number of detuned frequencies, the number of detuned frequencies is determined according to the ratio of the number of identity authentication passes to the number of identity authentication anomalies;

[0025] The number of detuned frequencies is positively correlated with the ratio of the number of identity authentication passes to the number of identity authentication anomalies.

[0026] Furthermore, the method of sending the corresponding electronic information data content via the transmission frequency includes:

[0027] The data content of the electronic information sent by matching the receiving frequency is the correct transmission content.

[0028] The data content of the electronic message sent via the detuned frequency is the relevant transmission content;

[0029] The number of words in the relevant transmission content is equal to the number of words in the correct transmission content.

[0030] The system set up using the above method includes:

[0031] A transmitting end, used to initiate a terminal matching signal, receive identity authentication information and send different electronic information data through a plurality of transmission frequencies, wherein the identity authentication information includes verification key information and identity identification information, and the transmission frequency includes a matching receiving frequency and a detuning frequency;

[0032] A receiving end, used to receive a terminal matching signal and enter the verification key information to match and connect with the sending end, and receive electronic information data;

[0033] a cloud operation module, which is connected to the transmitting end and the receiving end respectively, and is used to update and store a security identity information library and send the security identity information library to the transmitting end, determine a current matching receiving frequency and a detuning frequency according to a historical matching receiving frequency, send the matching receiving frequency and the detuning frequency to the transmitting end, and send the matching receiving frequency or the detuning frequency to the corresponding receiving end;

[0034] an authority detection module, which is connected to the sending end and the cloud operation module respectively, and is used to determine whether to send electronic information data to the receiving end according to the identity authentication information, determine the identity authentication status of the receiving end according to the identity authentication information and the security identity information library, and determine the number of detuned frequencies according to the ratio of the number of identity authentication passes to the number of identity authentication anomalies, and control the cloud operation module to send a matching receiving frequency or a detuned frequency to the receiving end according to the determination result of whether to send electronic information data to the receiving end and the identity authentication status;

[0035] An information transmission module, which is connected to the transmitting end and the authority detection module respectively, and is used to send the corresponding electronic information data content through the transmitting frequency;

[0036] The frequencies included in the receiving frequency are the same as the frequencies included in the transmitting frequency.

[0037] Compared with the prior art, the beneficial effect of the present invention is that the present invention sets a security identity information database, matches the receiving frequency and the detuning frequency, verifies according to the security identity information database, and sends the electronic information data corresponding to the matching receiving frequency or the detuning frequency to the corresponding receiving end, thereby avoiding unauthorized loopholes, realizing efficient and secure electronic information data transmission, ensuring the confidentiality and accuracy of data during transmission, and improving the flexibility and adaptability of data transmission, being suitable for a variety of application scenarios, and effectively preventing the risk of information leakage;

[0038] Furthermore, the system effectively prevents unauthorized access and data theft through the identity authentication mechanism at the receiving end, including authentication of key information and identity identification information, avoids unauthorized vulnerabilities, and ensures the confidentiality and integrity of data transmission. The cloud operation module updates the security identity information database according to actual conditions, further enhancing the system's security defense capabilities.

[0039] Furthermore, the authority detection module intelligently decides whether to send electronic information data to the receiving end based on the verification result of the identity authentication information, and dynamically adjusts the number of detuned frequencies to optimize the security of data transmission. The information transmission module also ensures accurate and fast data transmission through precise transmission frequency control;

[0040] Furthermore, the cloud operation module serves as the core of the system. Centrally managing and storing the security identity information database simplifies the complexity of system management and maintenance. Administrators can easily update the security identity information database, adjust matching receiving frequency and detuning frequency and other parameters through the cloud, thereby improving the maintainability and scalability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1A flowchart of the method for detecting unauthorized application program vulnerabilities based on a multi-module combination according to the present invention;

[0042] Figure 2 A connection diagram of an application program unauthorized vulnerability detection method based on a multi-module combination according to an embodiment of the present invention;

[0043] Figure 3 The flowchart of the method for detecting an unauthorized vulnerability of an application program based on a combination of multiple modules according to an embodiment of the present invention;

[0044] Figure 4 The following is a flowchart of the permission detection module according to an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0046] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0047] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0048] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0049] See also Figure 1 As shown, it is a flow chart of the application program unauthorized vulnerability detection method based on multi-module combination of the present invention, including:

[0050] Step S1, set up a security identity information database and mount it to the sending end;

[0051] Step S2, setting the transmitting end transmission frequency according to the historical matching receiving frequency;

[0052] Step S3, initiating and broadcasting a terminal matching signal;

[0053] Step S4, receiving the identity authentication information sent by the response terminal matching signal, and verifying it according to the security identity information database;

[0054] Step S5, in response to the verification result of the security identity information database, electronic information data corresponding to the matching receiving frequency or the detuned frequency is sent to the corresponding receiving end.

[0055] Please refer to Figure 2 and Figure 3 As shown, it is a connection diagram of the application program unauthorized vulnerability detection system based on multi-module combination according to an embodiment of the present invention and a workflow diagram of the application program unauthorized vulnerability detection method based on multi-module combination according to an embodiment of the present invention. An embodiment of the present invention provides an application program unauthorized vulnerability detection method based on multi-module combination, including:

[0056] The transmitting end is used to initiate the terminal matching signal, receive the identity authentication information and send different electronic information data through several transmission frequencies. The identity authentication information includes the verification key information and the identity identification information. The transmission frequency includes the matching receiving frequency and the detuning frequency. In the implementation, it is usually a broadband wireless repeater / wireless transmitter. The broadband wireless repeater transmits the audio signal with micro-power wireless transmission to cover its corresponding spatial range. In the implementation, there is only one matching receiving frequency, and there can be more than or equal to one detuning frequency.

[0057] The receiving end is used to receive the terminal matching signal and enter the verification key information to match and connect with the sending end, and receive electronic information data;

[0058] a cloud operation module, which is connected to the transmitting end and the receiving end respectively, and is used to update and store the security identity information library and send the security identity information library to the transmitting end, determine the current matching receiving frequency and the detuning frequency according to the historical matching receiving frequency, send the matching receiving frequency and the detuning frequency to the transmitting end, and send the matching receiving frequency or the detuning frequency to the corresponding receiving end (that is, send the matching receiving frequency to the receiving end whose identity authentication is passed and the key information is verified to be correct, and send the detuning frequency to the receiving end whose identity authentication is abnormal but the key information is verified to be correct);

[0059] An authority detection module, which is connected to the sending end and the cloud operation module respectively, is used to determine whether to send electronic information data to the receiving end according to the identity authentication information, determine the identity authentication status of the receiving end according to the identity authentication information and the security identity information library, and determine the number of detuned frequencies according to the ratio of the number of identity authentication passes to the number of identity authentication anomalies, and control the cloud operation module to send a matching receiving frequency or a detuned frequency to the receiving end according to the determination result of whether to send electronic information data to the receiving end and the identity authentication status;

[0060] An information transmission module, which is connected to the sending end and the authority detection module respectively, and is used to send the corresponding electronic information data content from the sending end to the receiving end through the transmission frequency;

[0061] The frequencies included in the receiving frequency are the same as the frequencies included in the transmitting frequency.

[0062] In implementation, the security identity information database will be updated before the electronic information data is transmitted to determine several receiving ends for the electronic information data transmission; in one implementation, a tour group has determined the number of tourists before the tour starts, and the number of wireless receiving headphones (receiving ends) is determined according to the number of tourists, and the identity recognition information of each receiving headphone is updated to the security identity information database, and then the security identity information database is sent to the tour guide's wireless microphone (transmitting end) through the cloud operation module, and each member of the group will be notified to verify the key information when the tour starts; in one implementation, in a secret operation, the commander issues instructions through the wireless microphone (transmitting end), and each member of the operation team receives the commander's instructions through the wireless receiving headphones (receiving ends). Before the secret operation, the identity recognition information of each wireless receiving headphone will be updated to the security identity information database, and the verification key information will be sent to each member of the operation team.

[0063] It can be understood that the application unauthorized vulnerability detection method based on multi-module combination provided by the present invention realizes efficient and secure electronic information data transmission by integrating cloud operation, transmission control, information transmission and other modules, ensures the confidentiality and accuracy of data during transmission, and at the same time improves the flexibility and adaptability of data transmission, is suitable for a variety of application scenarios, and effectively prevents the risk of information leakage: the system uses the identity authentication mechanism of the receiving end, including the authentication of key information and identity identification information, to effectively prevent unauthorized access and data theft, avoid unauthorized vulnerabilities, and ensure the confidentiality and integrity of data transmission. The cloud operation module updates the security identity information database according to actual conditions, further improving the security defense capabilities of the system; the authority detection module intelligently decides whether to verify the identity authentication information based on the verification results. It sends electronic information data to the receiving end and dynamically adjusts the number of detuned frequencies to optimize the security of data transmission. The information transmission module also ensures accurate and fast data transmission through precise transmission frequency control. The cloud operation module, as the center of the system, centrally manages and stores the security identity information library, which simplifies the complexity of system management and maintenance. Administrators can easily update the security identity information library, adjust matching parameters such as receiving frequency and detuned frequency through the cloud, thereby improving the maintainability and scalability of the system. The system is not only suitable for scenarios such as tour guide explanations and secret action command transmission, but can also be widely used in conference speeches, education and training, outdoor adventures and other fields. Its efficient and secure data transmission capabilities, as well as flexible configuration and management functions, enable the system to meet the diverse needs of different users and in different scenarios.

[0064] See also Figure 3 Specifically, the authority detection module determines whether to send electronic information data to the corresponding receiving end according to the correctness of the verification key information input by the receiving end, including:

[0065] If the verification key information is correct, the electronic information data is sent to the corresponding receiving end;

[0066] If the verification key information is wrong, the electronic information data will not be sent to the corresponding receiving end.

[0067] It can be understood that the verification key information can be numbers, text and a combination thereof. The receiving ends that input the verification key information all want to obtain the electronic information data sent by the sending end; this may include the number of receiving ends with correct verification key information being greater than the expected number of receiving ends due to the leakage of the verification key information. At the same time, if this situation occurs, it means that the current electronic information data is at risk of leakage.

[0068] Specifically, the authority detection module determines the identity authentication status of the receiving end according to the comparison result between the identity identification information and the security identity information library, including:

[0069] If the identity authentication information and the security identity information base meet the inclusion condition, the identity authentication status of the receiving end is determined to be identity authentication passed;

[0070] If the identity authentication information and the security identity information base do not satisfy the inclusion condition, the identity authentication state of the receiving end is determined to be an identity authentication exception;

[0071] The identity authentication status includes identity authentication passed and identity authentication abnormal, and the inclusion condition is that the identity authentication information exists in the security identity information library.

[0072] It is understandable that the identity verification information is a unique identification code for each receiving end, and the identification code may be different depending on the receiving end.

[0073] Specifically, the authority detection module controls the cloud operation module to send a matching receiving frequency to the receiving end according to the normal determination result, so that the matching receiving frequency is the receiving frequency of the receiving end;

[0074] Among them, the normal judgment result is that the electronic information data is sent to the receiving end and the identity authentication status is that the identity authentication is passed.

[0075] Specifically, the authority detection module controls the cloud operation module to send a detuned frequency to the receiving end according to the abnormality determination result, so that the detuned frequency is the receiving frequency of the receiving end;

[0076] Among them, the abnormal judgment result is that the electronic information data is sent to the receiving end and the identity authentication status is an abnormal identity authentication.

[0077] It is understandable that in reality, the possibility of verification key information leakage is much greater than the possibility of the cloud being hacked and causing the security identity information database to be modified; in practice, the security of the cloud operation module is very high.

[0078] In implementation, the verification key information is first used to initially determine whether to send electronic information data to the receiving end, and then the identity authentication status of the receiving end is determined through the identity authentication information to perform a secondary determination on what kind of electronic information data to send to the receiving end. It is understandable that the verification key information may be leaked, resulting in the number of receiving ends being greater than expected; at this time, in order to avoid leakage of electronic information data, the identity authentication status can be used to determine whether to send the correct receiving frequency to the receiving end so that the receiving end can obtain the correct electronic information data: for the receiving end whose identity authentication status passes, the cloud operation module sends the correct matching receiving frequency to the receiving end, so that the receiving end adjusts to this matching receiving frequency and receives the correct electronic information data (the content of the electronic information data is the correct transmission content); for the receiving end whose identity authentication status is abnormal, the cloud operation module sends an incorrect detuned frequency to the receiving end, so that the receiving end adjusts to the corresponding detuned frequency and receives the wrong electronic information data (the content of the electronic information data is the transmission content related to the correct transmission content).

[0079] It can be understood that the permission detection module not only significantly improves the security of data transmission and effectively prevents information leakage by implementing a double verification mechanism (verifying key information and identity authentication information) and dynamically adjusting the sending frequency (matching the receiving frequency and the detuning frequency) according to the verification results, but also ensures that only the legally verified receiving end can obtain the correct electronic information data. At the same time, it accurately identifies and prevents potential security threats, further enhancing the stability and reliability of the system: the permission detection module adopts a double verification mechanism of verifying key information and identity authentication information to ensure the legitimacy and accuracy of the receiving end's identity. Even if the verification key information is leaked, the system can effectively identify and exclude illegal receiving ends through secondary verification of the identity authentication information, thereby greatly reducing the risk of information leakage; the permission detection module dynamically adjusts the sending frequency according to the verification results (sending a matching receiving frequency to the receiving end that has passed the identity authentication so that it can receive the correct electronic information data; for For the receiving end with abnormal identity authentication, a detuned frequency is sent to make it receive erroneous electronic information data). This design not only enhances the flexibility of the system, but also can identify and prevent potential security threats without exposing the correct data; the authority detection module fully considers the possibility of verification key information leakage and takes corresponding countermeasures. Through the secondary verification of identity authentication information, it can identify the receiving end that illegally accesses due to the leakage of verification key information, and effectively isolate and prevent it, thereby ensuring that only legitimate receiving ends can obtain correct electronic information data; the double verification mechanism and dynamic adjustment of the sending frequency of the authority detection module are relatively simple and clear, easy to implement and maintain, and the administrator can easily manage and update the security identity information library, verification key information and other parameters through the cloud operation module, which improves the maintainability and scalability of the system. At the same time, the stability and reliability of the system have also been effectively improved, making it suitable for various complex application scenarios.

[0080] Specifically, the cloud operation module determines a frequency selection exclusion range according to a historical matching reception frequency within a preset time, and determines a reception frequency selection range according to a transmission frequency range and a frequency selection exclusion range.

[0081] It is understandable that the matching receiving frequencies within the preset time are all different, so if the preset time is too long, the selection range of the receiving frequency this time will be too small, resulting in a small selectivity of the matching receiving frequency, that is, the risk of being attempted to crack will be higher, so the preset time cannot be too long; however, if the preset time is too short, it may cause the repetition of the matching receiving frequency to be too high; therefore, the duration of the preset time should be appropriately selected: in implementation, the preset time range is 1 month to 6 months, preferably, the preset time is 3 months; that is, the set of historical matching receiving frequencies within the past three months is the frequency selection exclusion range, and the receiving frequency selection range is the transmitting frequency range minus the remaining part of the frequency selection exclusion range.

[0082] It can be understood that the transmission frequency range is determined by the frequency transmission range of the transmitting end and the frequency receiving range of the receiving end: if the frequency transmission range is greater than the frequency receiving range, the transmission frequency range is the frequency receiving range; if the frequency transmission range is less than the frequency receiving range, the transmission frequency range is the frequency transmission range; in implementation, the frequency transmission range of the transmitting end and the frequency receiving range of the receiving end are respectively determined during the production design and preparation process of the transmitting end and the receiving end, and can be determined through the corresponding instructions.

[0083] Specifically, the cloud operation module randomly determines the detuning frequency and the matching receiving frequency within the receiving frequency selection range.

[0084] In implementation, both the detuned frequency and the matched receiving frequency are randomly generated from a receiving frequency selection range.

[0085] In implementation, the cloud operation module randomly generates a matching receiving frequency and a detuned frequency within a receiving frequency selection range and a frequency selection exclusion range respectively through a pseudo-random number generator (PRNG) or a hardware random number generator (HRNG); the generation of random numbers is a prior art and will not be described in detail.

[0086] It can be understood that the cloud operation module intelligently determines the frequency selection exclusion range based on the historical matching receiving frequency, and then determines the receiving frequency selection range and randomly selects the receiving frequency (including matching receiving frequency and detuning frequency) within the receiving frequency selection range, thereby improving the security and anti-cracking capability of data transmission.

[0087] Specifically, the authority detection module determines the number of detuned frequencies based on the ratio of the number of identity authentication passes to the number of identity authentication anomalies;

[0088] Among them, the number of detuned frequencies is positively correlated with the ratio of the number of identity authentication passes to the number of identity authentication anomalies.

[0089] It can be understood that the ratio of the number of identity authentication passes to the number of identity authentication anomalies represents the proportion of abnormal receiving ends after verifying the key information. The greater the proportion of abnormal receiving ends, the greater the number of detuned frequencies should be, in order to paralyze information thieves.

[0090] In implementation, the detuning frequency = the number of identity authentication passes ÷ the number of identity authentication exceptions, and the value of the detuning frequency is determined according to the principle of rounding up.

[0091] Specifically, the information transmission module sends the corresponding electronic information data content through the transmission frequency, including:

[0092] The data content of the electronic information sent by matching the receiving frequency is the correct transmission content.

[0093] Specifically, the information transmission module sends the corresponding electronic information data content through the transmission frequency, including:

[0094] The data content of the electronic message sent via the detuned frequency is the relevant transmission content;

[0095] The number of words in the relevant transmission content is equal to the number of words in the correct transmission content.

[0096] It is understandable that the transmitter can send different electronic information data through several different frequencies at the same time; wherein the correct transmission content is sent through the matching receiving frequency, and the related transmission content is sent through the detuned frequency.

[0097] In implementation, the relevant transmitted content is similar to but different from the correct transmitted content. For example, the correct transmitted content is an introduction to the Tang Dynasty, while the relevant transmitted content is an introduction to the Song Dynasty; for example, the correct transmitted content is a summary of knowledge points of the paid version, while the relevant transmitted content is a summary of knowledge points of the free version.

[0098] It can be understood that the system not only effectively enhances the security of data transmission by dynamically adjusting the number of detuned frequencies and associating them with the identity authentication results, but also further confuses potential information thieves by sending relevant transmission content, thereby reducing the risk of information leakage. At the same time, the system can simultaneously process electronic information data transmission at multiple frequencies, thereby improving transmission efficiency and flexibility.

[0099] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0100] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for detecting application unauthorized vulnerabilities based on multi-module combination, characterized in that: include, Set up a secure identity information database and mount it to the sending end; Set the transmitting end transmission frequency according to the historical matching receiving frequency; Initiate and broadcast terminal matching signals; receiving identity authentication information sent in response to the terminal matching signal, and verifying it according to the security identity information database; In response to the verification result of the security identity information database, sending electronic information data corresponding to the matching receiving frequency or the detuned frequency to the corresponding receiving end; Wherein, the identity verification information includes verification key information and identity identification information, and the transmission frequency includes a matching receiving frequency and a detuning frequency; The verification result is to determine the identity authentication status of the receiving end by the identity authentication information and the security identity information database, and determine the number of detuned frequencies according to the ratio of the number of identity authentication passes to the number of identity authentication exceptions, and send a matching receiving frequency or a detuned frequency to the receiving end according to whether to send electronic information data to the receiving end and the determination result of the identity authentication status; The frequencies included in the receiving frequency are the same as the frequencies included in the transmitting frequency.

2. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: In response to the verification result, it is also determined whether to send the electronic information data to the corresponding receiving end according to the correctness of the verification key information input by the receiving end.

3. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: When generating the verification result, the identity authentication status of the receiving end is determined according to the comparison result between the identity identification information and the security identity information library. The identity authentication status includes identity authentication passed and identity authentication abnormal.

4. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: When sending the electronic information data, sending a matching receiving frequency or a detuned frequency to the receiving end according to a normal determination result, so that the matching receiving frequency is the receiving frequency of the receiving end; Among them, the normal determination result is that electronic information data is sent to the receiving end and the identity authentication status is that the identity authentication is passed.

5. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: When sending the electronic information data, sending a matching receiving frequency or a detuned frequency to the receiving end according to the abnormality determination result, so that the detuned frequency is the receiving frequency of the receiving end; Among them, the abnormal determination result is that electronic information data is sent to the receiving end and the identity authentication status is an identity authentication abnormality.

6. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: When generating the verification result, a frequency selection exclusion range is determined according to the historical matching reception frequency within a preset time, and a reception frequency selection range is determined according to the transmission frequency range and the frequency selection exclusion range.

7. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 6 is characterized in that: When setting the matching receiving frequency and the detuning frequency, the detuning frequency and the matching receiving frequency are randomly determined according to the receiving frequency selection range.

8. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: When setting the number of detuned frequencies, the number of detuned frequencies is determined based on the ratio of the number of identity authentication passes to the number of identity authentication anomalies; The number of detuned frequencies is positively correlated with the ratio of the number of identity authentication passes to the number of identity authentication anomalies.

9. The method for detecting application unauthorized vulnerabilities based on multi-module combination according to claim 1 is characterized in that: The method of sending the corresponding electronic information data content via the transmission frequency includes: The data content of the electronic information sent by matching the receiving frequency is the correct transmission content; The data content of the electronic message sent via the detuned frequency is the relevant transmission content; The number of words in the relevant transmission content is equal to the number of words in the correct transmission content.

10. A system using the method for detecting application program unauthorized vulnerability based on multi-module combination as described in any one of claims 1 to 9, characterized in that: include: A transmitting end, used to initiate a terminal matching signal, receive identity authentication information and send different electronic information data through a plurality of transmission frequencies, wherein the identity authentication information includes verification key information and identity identification information, and the transmission frequency includes a matching receiving frequency and a detuning frequency; A receiving end, used to receive a terminal matching signal and enter the verification key information to match and connect with the sending end, and receive electronic information data; a cloud operation module, which is connected to the transmitting end and the receiving end respectively, and is used to update and store a security identity information library and send the security identity information library to the transmitting end, determine a current matching receiving frequency and a detuning frequency according to a historical matching receiving frequency, send the matching receiving frequency and the detuning frequency to the transmitting end, and send the matching receiving frequency or the detuning frequency to the corresponding receiving end; an authority detection module, which is connected to the sending end and the cloud operation module respectively, and is used to determine whether to send electronic information data to the receiving end according to the identity authentication information, determine the identity authentication status of the receiving end according to the identity authentication information and the security identity information library, and determine the number of detuned frequencies according to the ratio of the number of identity authentication passes to the number of identity authentication anomalies, and control the cloud operation module to send a matching receiving frequency or a detuned frequency to the receiving end according to the determination result of whether to send electronic information data to the receiving end and the identity authentication status; An information transmission module, which is connected to the transmitting end and the authority detection module respectively, and is used to send the corresponding electronic information data content through the transmitting frequency; The frequencies included in the receiving frequency are the same as the frequencies included in the transmitting frequency.

Images