Secure access method and system of server

Abstract

The invention relates to a secure access method and system for a server, and the method comprises the steps: classifying accessed data in the server, and carrying out the encryption storage of extremely important data; the main controller obtains IP addresses of all the controlled servers and establishes connection, and performs data exchange and identity verification on the servers; identifying the type of the to-be-accessed data, if the to-be-accessed data is not important data, directly performing identity verification and then performing direct access, and if the to-be-accessed data is important data or extremely important data, evaluating the behavior credibility of a visitor; the accessed data is important data, and when the behavior credibility of the visitor is greater than a first preset threshold value, the visitor directly accesses the accessed data; and if the accessed data is the extremely important data, judging whether the behavior credibility of the visitor is greater than a second preset threshold, if so, decrypting the encrypted extremely important data by the main controller, and accessing the decrypted extremely important data by the visitor. Through the access process, the access security is greatly improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security, and in particular relates to a method and system for secure access to a server. Background Art

[0002] With the popularization of the Internet and the improvement of the degree of informatization, servers play a vital role in the modern information society. However, servers are facing more and more network security threats and risks. According to reports, malicious attacks, data leakage and unauthorized access have become one of the main challenges facing enterprises. Server network access security is a technology that uses multiple authentication methods to detect accessed devices. Once abnormal access is found, the access will be immediately interrupted and an alarm will be issued to protect the security of server data.

[0003] Traditional server network security methods often rely on single security measures, such as authentication, firewalls, intrusion detection systems, and access control, but these methods often fail to provide adequate protection and are easily bypassed or circumvented. For example, hackers can exploit zero-day vulnerabilities to bypass firewalls, use social engineering to obtain user credentials, or directly access servers through physical intrusions. Authentication and access control: Ensure that only authenticated users can access server resources, including login authentication using usernames and passwords, and setting access control policies based on user roles and permissions to limit the resources and operations that users can access. Use firewall technology to filter and control network traffic to prevent unauthorized access and malicious traffic from entering the server. In addition, implement network isolation according to network security policies to separate networks with different security levels and reduce the attack surface.

[0004] Use encryption technology to protect communication data between servers and clients to prevent data from being stolen or tampered with during transmission. Common encryption protocols include SSL / TLS. Regularly perform vulnerability scans and security assessments on servers, and promptly patch discovered security vulnerabilities and weaknesses. At the same time, ensure that security patches for operating systems and applications are installed in a timely manner to reduce the risk of being attacked by known vulnerabilities. Record various system events and activities on the server, including login attempts, file access, system configuration changes, etc. Regularly review and analyze these log data to promptly detect abnormal activities or potential security risks. Deploy intrusion detection and prevention systems to monitor server network traffic and system activities to detect and block potential attacks. These systems can identify and respond based on known attack patterns or abnormal behaviors. Protect server hardware equipment from physical attacks and unauthorized access, such as using physical measures such as secure cabinets, video surveillance, and access control systems.

[0005] Therefore, there is an urgent need to improve the existing server network security methods and provide a more comprehensive and efficient server security access method that can effectively prevent various types of network attacks and unauthorized access, so as to be able to identify and block known and unknown attacks, while reducing the risks of data leakage, service interruption and system crash. Summary of the invention

[0006] The purpose of the present invention is to provide a secure access method and system for a server, so as to solve the technical problems existing in the access method in the prior art, namely, single security measure, low security and high risk of data leakage.

[0007] In order to solve the above technical problems, the technical solution adopted by the present invention is as follows: In a first aspect, a method for secure access to a server is provided, which monitors in real time whether the server is connected to a network, and if so, executes a method for secure access to an online intrusion, the method for secure access to an online intrusion comprising the following steps: S11: Classifying the accessed data in the server into non-important data, important data and extremely important data, and encrypting and storing the extremely important data; S12: The main controller obtains the IP addresses of all controlled servers and establishes connections, and exchanges data with the servers at a specified period, performs identity authentication during the communication process, sends an identity authentication code to each controlled server, and the controlled server receives the authentication code and replies with an identity identification code. The main controller processes the reply identity identification code to verify the device identity. If the identity authentication passes, step S12 is executed. If the identity authentication fails, an abnormal warning is issued; S13: Identify the type of data to be accessed by the visitor. If the data is not important, directly authenticate the user and allow access. If the data is important or extremely important, evaluate the credibility of the visitor's behavior. S14: if the accessed data is important data, determine whether the visitor's behavior credibility is greater than a first preset threshold. If so, the visitor directly accesses the accessed data. If not, the access is denied. If the accessed data is extremely important data, execute step S15. S15: Determine whether the credibility of the visitor's behavior is greater than a second preset threshold. If so, the main controller decrypts the encrypted extremely important data, and the visitor accesses the decrypted extremely important data.

[0008] Preferably, whether the server is connected to the network is monitored in real time. If not, a secure access method for offline intrusion is executed. The specific process is as follows: S21: The main controller scans all connected servers and exchanges data with each server, and monitors whether there is an illegally disconnected server based on the data exchange. If so, an alarm is activated and step S22 is executed; S22: When the illegally disconnected server loses connection with the main controller, it automatically encrypts all internal data and starts a data self-protection program to monitor whether there is any illegal data acquisition behavior and whether the acquisition is successful. If so, it starts a data destruction program to automatically destroy the illegally acquired data.

[0009] Preferably, the specific process of encrypting and storing the extremely important data is: S111: converting the encrypted data into a string according to a specified rule, and cutting the string into substrings of specified length; S112: Encode the substrings, and encode all substrings into a number of binary numbers; S113: converting a number of binary numbers into characters according to a specified rule, concatenating all the characters into a character string, and storing the concatenated character string.

[0010] Preferably, the specific process of evaluating the credibility of the visitor's behavior in step S13 is as follows: S131: Collect all normal behaviors of historical visitors to the server within a specified time period and construct a sample of normal behaviors of the visitors; S132: Acquire all visit behaviors of the current visitor, set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; S133: calculating the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior; S134: Calculate the behavior credibility of the current visitor's third visit behavior based on the calculation result of the behavior credibility of the current visitor's second visit behavior, and so on and so forth, calculate the behavior credibility of the current visitor's current behavior.

[0011] Preferably, the calculation formula for the behavior credibility of the first visit behavior of the current visitor in step S132 is as follows: R1=α*R0+(1-α)*(R0-θ); In step S133, the calculation formula for the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior is as follows: R2=α*R1+(1-α)*(R1-θ); In step S134, the calculation formula for the behavior credibility of the current visitor is as follows: R n =α*R n-1 +(1-α)*(R n-1 -θ); Among them, R0 is the initial value of the current visitor's behavioral credibility, α is the credibility correction factor in the range of (0, 1), and θ is the preset behavioral risk threshold.

[0012] Preferably, the first preset threshold of the behavior credibility in step S14 and step S15 is less than the second preset threshold.

[0013] Preferably, in step S15, the specific process of the main controller decrypting the encrypted extremely important data is as follows: S151: split the concatenated character string into a number of characters according to a specified rule; S152: Decode the plurality of characters into a plurality of binary numbers, and convert the plurality of binary numbers into a plurality of substrings accordingly; S153: Restore the substring to obtain a string, and convert the string according to a specified rule to obtain decrypted data.

[0014] Preferably, in step S12, the identity verification during the communication process is cross-verification, and during the cross-verification process, the verification code and the identification code are specified by the user, updated according to a preset specified period or updated through a verification code dictionary, or automatically generated through the current time and IP information; At the same time, a time limit is set when receiving and replying to the verification code. Responses that exceed the preset time will be marked, the system will issue a pre-alarm, and users can receive and track the information.

[0015] In a second aspect, a server security access system is provided, which is used to implement any one of the server security access methods described above, including a main control system, a plurality of servers, and an identity authentication module, wherein the main control system includes a behavior credibility calculation module, an encryption module, and a decryption module, and the main control system is connected to the plurality of servers; The main control system is used to control a number of servers; The plurality of servers are used to store the accessed data; The identity verification module is used to cross-verify the identity of the visitor during the visit process; The behavior credibility calculation module is used to set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; calculate the behavior credibility of the second visit behavior of the current visitor based on the calculation result of the behavior credibility of the first visit behavior of the current visitor; calculate the behavior credibility of the third visit behavior of the current visitor based on the calculation result of the behavior credibility of the second visit behavior of the current visitor, and so on to calculate the behavior credibility of the current behavior of the current visitor; The encryption module is used to encrypt extremely important data, convert the encrypted data into a string according to a specified rule, and cut the string into substrings of a specified length; encode the substrings, and encode all substrings into a number of binary numbers; convert the binary numbers into characters according to a specified rule, and splice all characters into a string, and store the spliced ​​string; The decryption module is used to decrypt extremely important data, split the spliced ​​character string into a number of characters according to specified rules; decode the several characters into a number of binary numbers, and convert the several binary numbers into a number of substrings; restore the substrings to obtain a character string, and convert the character string according to specified rules to obtain decrypted data.

[0016] The beneficial effects of the present invention include: The server security access method and system provided by the present invention classify the accessed data in the server and encrypt and store the extremely important data; the main controller obtains the IP addresses of all controlled servers and establishes connections, and performs data exchange and identity authentication on the servers; the type of the data to be accessed is identified, and if it is non-important data, it is directly accessed after identity authentication; if it is important data or extremely important, the visitor's behavior credibility is evaluated; if the accessed data is important data, when the visitor's behavior credibility is greater than a first preset threshold, the visitor directly accesses the accessed data; if the accessed data is extremely important data, it is judged whether the visitor's behavior credibility is greater than a second preset threshold, and if so, the main controller decrypts the encrypted extremely important data, and the visitor accesses the decrypted extremely important data.

[0017] First, by setting the server's security access method to secure access in different situations of online intrusion and offline intrusion, different access methods are set for different situations and different access rules are set, so that the access process has more comprehensive security access rules to effectively improve the access security of all controlled servers.

[0018] Secondly, the accessed data in the server is classified into non-important data, important data and extremely important data. The extremely important data is encrypted and stored, and different access rules are set for accessed data of different importance, which further improves the security of access.

[0019] Thirdly, during the access process, based on identity authentication, the calculation of the credibility of the visitor's access behavior is combined to further improve the security and reliability of the entire access.

[0020] Finally, a detailed behavior credibility calculation formula is set to quantify the credibility of the visitor's access behavior, so that each access behavior can be accurately identified to ensure the safe identification of all access behaviors. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 The figure is a flow chart of the method for securely accessing a server according to the present invention.

[0022] Figure 2 It is a flow chart of evaluating the credibility of visitor's behavior according to the present invention.

[0023] Figure 3 It is a schematic diagram of a hacker invading online according to the present invention. DETAILED DESCRIPTION

[0024] The following is combined with Figure 1~Figure 3 The present invention is further described in detail: Example 1 See attached Figure 1 and Figure 3 As shown, a method for secure access to a server is provided, which monitors in real time whether the server is connected to a network. If so, a method for secure access to an online intrusion is executed. The method for secure access to an online intrusion comprises the following steps: S11: Classify the accessed data in the server into non-important data, important data and extremely important data, and encrypt and store the extremely important data; the reason why the accessed data in the server is classified into non-important data, important data and extremely important data is that different access rules need to be executed for data of different importance. For example, data that is not important in itself can be accessed directly without setting up a complicated access process, so that the access process is efficient. For data with high importance, a strict access process must be set up so that important data will not be obtained by illegal visitors, ensuring the security of the data. Combined with the encrypted storage of extremely important data, and the corresponding setting of different access rules for accessed data of different importance, the security of access is further improved.

[0025] S12: The main controller obtains the IP addresses of all controlled servers and establishes connections, and exchanges data with the servers at a specified period, performs identity authentication during the communication process, and sends an identity authentication code to each controlled server. The controlled server receives the verification code and replies with an identity identification code. The main controller processes the reply identity identification code to verify the device identity. If the identity authentication passes, execute step S12. If the identity authentication fails, an abnormal warning is issued. Identity identification is only the basis of the data access process. Only after the identity is legal is it necessary to perform subsequent behavior credibility calculations. If the identities are not legal, there is no need to perform subsequent access behavior credibility calculations. Access can be directly denied to ensure data security.

[0026] S13: Identify the type of data to be accessed by the visitor. If it is non-important data, directly perform identity authentication and then directly access it. If it is important data or extremely important data, evaluate the visitor's behavior credibility. During the access process, on the basis of identity authentication, combine the calculation of the visitor's access behavior credibility to further improve the security and reliability of the entire access. Set a detailed behavior credibility calculation formula to quantify the credibility of the visitor's access behavior, so that each access behavior can be accurately identified to ensure the safe identification of all access behaviors.

[0027] S14: if the accessed data is important data, determine whether the visitor's behavior credibility is greater than a first preset threshold. If so, the visitor directly accesses the accessed data. If not, the access is denied. If the accessed data is extremely important data, execute step S15. S15: Determine whether the visitor's behavior credibility is greater than a second preset threshold value. If so, the main controller decrypts the encrypted extremely important data, and the visitor accesses the decrypted extremely important data. Different behavior credibility thresholds are set for important data and extremely important data, that is, different access behavior credibility requirements are set for important data and extremely important data, and different data access requirements are further provided, thereby improving data access security.

[0028] In this embodiment, when it is detected that the server is not connected to the network, a secure access method for offline intrusion is executed, and the specific process is as follows: S21: The main controller scans all connected servers and exchanges data with each server, and monitors whether there is an illegally disconnected server based on the data exchange. If so, an alarm is activated and step S22 is executed; S22: When the illegally disconnected server loses connection with the main controller, it automatically encrypts all internal data and starts a data self-protection program to monitor whether there is any illegal data acquisition behavior and whether the acquisition is successful. If so, it starts a data destruction program to automatically destroy the illegally acquired data.

[0029] By setting the server's security access method to secure access in different situations of online intrusion and offline intrusion, and setting different access methods and different access rules for different situations, the access process has more comprehensive security access rules to effectively improve the access security of all controlled servers.

[0030] Example 2 Based on Example 1, the specific process of encrypting and storing the extremely important data is as follows: S111: converting the encrypted data into a string according to a specified rule, and cutting the string into substrings of specified length; S112: Encode the substrings, and encode all substrings into a number of binary numbers; S113: converting a number of binary numbers into characters according to a specified rule, concatenating all the characters into a character string, and storing the concatenated character string. A highly secure encryption process is achieved through a simple encryption process.

[0031] In this embodiment, see the attached Figure 2 The specific process of evaluating the visitor's behavior credibility in step S13 is as follows: S131: Collect all normal behaviors of historical visitors to the server within a specified time period and construct a sample of normal behaviors of the visitors; S132: Acquire all visit behaviors of the current visitor, set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; S133: calculating the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior; S134: Calculate the behavior credibility of the current visitor's third visit behavior based on the calculation result of the behavior credibility of the current visitor's second visit behavior, and so on and so forth, calculate the behavior credibility of the current visitor's current behavior.

[0032] During the access process, based on identity authentication, the calculation of the credibility of the visitor's access behavior is combined to further improve the security and reliability of the entire access.

[0033] Example 3 Based on Example 1 or Example 2, the calculation formula for the behavior credibility of the first visit behavior of the current visitor in step S132 is as follows: R1=α*R0+(1-α)*(R0-θ); In step S133, the calculation formula for the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior is as follows: R2=α*R1+(1-α)*(R1-θ); In step S134, the calculation formula for the behavior credibility of the current visitor is as follows: R n =α*R n-1 +(1-α)*(R n-1 -θ); Among them, R0 is the initial value of the current visitor's behavioral credibility, α is the credibility correction factor in the range of (0, 1), and θ is the preset behavioral risk threshold.

[0034] A detailed behavior credibility calculation formula is set to quantify the credibility of the visitor's access behavior, so that each access behavior can be accurately identified, ensuring the safe identification of all access behaviors, and more comprehensively measuring the credibility of all visitors' access behaviors, so that the security of data access can be more accurately ensured during the data access process.

[0035] In this embodiment, the first preset threshold of the behavior credibility in step S14 and step S15 is less than the second preset threshold, different behavior credibility thresholds are set for important data and extremely important data, and the behavior credibility threshold of extremely important data is greater than the behavior credibility threshold of important data, so that the access rules for extremely important data are more stringent, further ensuring the security of extremely important data.

[0036] The specific process of the main controller decrypting the encrypted extremely important data in step S15 is as follows: S151: split the concatenated character string into a number of characters according to a specified rule; S152: Decode the plurality of characters into a plurality of binary numbers, and convert the plurality of binary numbers into a plurality of substrings accordingly; S153: Restore the substring to obtain a string, and convert the string according to a specified rule to obtain decrypted data.

[0037] In step S12, identity verification is performed during the communication process as cross-verification. During the cross-verification process, the verification code and identification code are specified by the user, updated according to a preset specified period or updated through a verification code dictionary, or automatically generated through the current time and IP information. At the same time, a time limit is set when receiving and replying to the verification code. Responses that exceed the preset time will be marked, and the system will issue a pre-alarm, and the user can receive the information and track it.

[0038] A server security access system, used to implement any one of the server security access methods, comprising a main control system, a plurality of servers, and an identity authentication module, wherein the main control system comprises a behavior credibility calculation module, an encryption module, and a decryption module, and the main control system is connected to the plurality of servers; The main control system is used to control a number of servers; The plurality of servers are used to store the accessed data; The identity verification module is used to cross-verify the identity of the visitor during the visit process; The behavior credibility calculation module is used to set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; calculate the behavior credibility of the second visit behavior of the current visitor based on the calculation result of the behavior credibility of the first visit behavior of the current visitor; calculate the behavior credibility of the third visit behavior of the current visitor based on the calculation result of the behavior credibility of the second visit behavior of the current visitor, and so on to calculate the behavior credibility of the current behavior of the current visitor; The encryption module is used to encrypt extremely important data, convert the encrypted data into a string according to a specified rule, and cut the string into substrings of a specified length; encode the substrings, and encode all substrings into a number of binary numbers; convert the binary numbers into characters according to a specified rule, and splice all characters into a string, and store the spliced ​​string; The decryption module is used to decrypt extremely important data, split the spliced ​​character string into a number of characters according to specified rules; decode the several characters into a number of binary numbers, and convert the several binary numbers into a number of substrings; restore the substrings to obtain a character string, and convert the character string according to specified rules to obtain decrypted data.

[0039] In summary, the secure access method and system for a server provided by the present invention classifies the accessed data in the server and encrypts and stores extremely important data; the main controller obtains the IP addresses of all controlled servers and establishes connections, and performs data exchange and identity authentication on the servers; the type of data to be accessed is identified, and if it is non-important data, it is directly accessed after identity authentication; if it is important data or extremely important, the credibility of the visitor's behavior is evaluated; if the accessed data is important data, when the credibility of the visitor's behavior is greater than a first preset threshold, the visitor directly accesses the accessed data; if the accessed data is extremely important data, it is determined whether the credibility of the visitor's behavior is greater than a second preset threshold, and if so, the main controller decrypts the encrypted extremely important data, and the visitor accesses the decrypted extremely important data.

[0040] The server's security access method is set to secure access in different situations of online intrusion and offline intrusion. Different access methods and different access rules are set for different situations, so that the access process has more comprehensive security access rules to effectively improve the access security of all controlled servers. The accessed data in the server is classified into non-important data, important data and extremely important data, and encrypted storage is combined with extremely important data. Different access rules are set for accessed data of different importance, which further improves the security of access. In the process of access, on the basis of identity authentication, the calculation of the behavioral credibility of the visitor's access behavior is combined to further improve the security and reliability of the entire access. A detailed behavioral credibility calculation formula is set to quantify the credibility of the visitor's access behavior, so that each access behavior can be accurately identified to ensure the secure identification of all access behaviors.

Claims

1. A method for secure access to a server, characterized in that: Real-time monitoring of whether the server is in network connection, if so, executing a secure access method for online intrusion, the secure access method for online intrusion comprising the following steps: S11: Classifying the accessed data in the server into non-important data, important data and extremely important data, and encrypting and storing the extremely important data; S12: The main controller obtains the IP addresses of all controlled servers and establishes connections, and exchanges data with the servers at a specified period, performs identity authentication during the communication process, sends an identity authentication code to each controlled server, and the controlled server receives the authentication code and replies with an identity identification code. The main controller processes the reply identity identification code to verify the device identity. If the identity authentication passes, step S12 is executed. If the identity authentication fails, an abnormal warning is issued. S13: Identify the type of data to be accessed by the visitor. If the data is not important, directly authenticate the user and allow access. If the data is important or extremely important, evaluate the credibility of the visitor's behavior. S14: if the accessed data is important data, determine whether the visitor's behavior credibility is greater than a first preset threshold. If so, the visitor directly accesses the accessed data. If not, the access is denied. If the accessed data is extremely important data, execute step S15. S15: Determine whether the credibility of the visitor's behavior is greater than a second preset threshold. If so, the main controller decrypts the encrypted extremely important data, and the visitor accesses the decrypted extremely important data.

2. A method for secure access to a server according to claim 1, characterized in that: Real-time monitoring of whether the server is connected to the network. If not, execute the security access method for offline intrusion. The specific process is as follows: S21: The main controller scans all connected servers and exchanges data with each server, and monitors whether there is an illegal disconnected server based on the data exchange. If so, an alarm is activated and step S22 is executed; S22: When the illegally disconnected server loses connection with the main controller, it automatically encrypts all internal data and starts a data self-protection program to monitor whether there is any illegal data acquisition behavior and whether the acquisition is successful. If so, it starts a data destruction program to automatically destroy the illegally acquired data.

3. A method for secure access to a server according to claim 1, characterized in that: The specific process of encrypting and storing the extremely important data is as follows: S111: converting the encrypted data into a string according to a specified rule, and cutting the string into substrings of specified length; S112: Encode the substrings, and encode all substrings into a number of binary numbers; S113: converting a number of binary numbers into characters according to a specified rule, concatenating all the characters into a character string, and storing the concatenated character string.

4. A method for secure access to a server according to claim 1, characterized in that: The specific process of evaluating the credibility of the visitor's behavior in step S13 is as follows: S131: Collect all normal behaviors of historical visitors to the server within a specified time period and construct a sample of normal behaviors of the visitors; S132: Acquire all visit behaviors of the current visitor, set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; S133: calculating the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior; S134: Calculate the behavior credibility of the current visitor's third visit behavior based on the calculation result of the behavior credibility of the current visitor's second visit behavior, and so on and so forth, calculate the behavior credibility of the current visitor's current behavior.

5. A method for secure access to a server according to claim 4, characterized in that: The calculation formula for the behavior credibility of the first visit behavior of the current visitor in step S132 is as follows: R1=α*R0+(1-α)*(R0-θ); In step S133, the calculation formula for the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior is as follows: R2=α*R1+(1-α)*(R1-θ); In step S134, the calculation formula for the behavior credibility of the current visitor is as follows: R n =a*R n-1 +(1-a)*(R n-1 -i); Among them, R0 is the initial value of the current visitor's behavioral credibility, α is the credibility correction factor in the range of (0, 1), and θ is the preset behavioral risk threshold.

6. A method for secure access to a server according to claim 1, characterized in that: The first preset threshold of the behavior credibility in step S14 and step S15 is less than the second preset threshold.

7. A method for securely accessing a server according to claim 3, characterized in that: The specific process of the main controller decrypting the encrypted extremely important data in step S15 is as follows: S151: split the concatenated character string into a number of characters according to a specified rule; S152: Decode the plurality of characters into a plurality of binary numbers, and convert the plurality of binary numbers into a plurality of substrings accordingly; S153: Restore the substring to obtain a string, and convert the string according to a specified rule to obtain decrypted data.

8. A method for secure access to a server according to claim 1, characterized in that: In step S12, the identity verification is performed during the communication process as cross-verification. During the cross-verification process, the verification code and the identification code are specified by the user, updated according to a preset specified period or updated through a verification code dictionary, or automatically generated through the current time and IP information; At the same time, a time limit is set when receiving and replying to the verification code. Responses that exceed the preset time will be marked, the system will issue a pre-alarm, and users can receive and track the information.

9. A server security access system, used to implement a server security access method according to any one of claims 1 to 8, characterized in that: It includes a main control system, several servers, and an identity authentication module. The main control system includes a behavior credibility calculation module, an encryption module, and a decryption module. The main control system is connected to several servers. The main control system is used to control a number of servers; The plurality of servers are used to store the accessed data; The identity verification module is used to cross-verify the identity of the visitor during the visit process; The behavior credibility calculation module is used to set an initial value of the behavior credibility based on the normal behavior sample of the visitor, and calculate the behavior credibility of the first visit behavior based on the initial value of the behavior credibility; Calculating the behavior credibility of the current visitor's second visit behavior based on the calculation result of the behavior credibility of the current visitor's first visit behavior; Based on the calculation result of the behavior credibility of the current visitor's second visit behavior, the behavior credibility of the current visitor's third visit behavior is calculated, and the behavior credibility of the current visitor's current behavior is calculated by analogy; The encryption module is used to encrypt extremely important data, convert the encrypted data into a string according to a specified rule, and cut the string into substrings of a specified length; encode the substrings, and encode all substrings into a number of binary numbers; convert the binary numbers into characters according to a specified rule, and splice all characters into a string, and store the spliced ​​string; The decryption module is used to decrypt extremely important data, split the spliced ​​character string into a number of characters according to specified rules; decode the several characters into a number of binary numbers, and convert the several binary numbers into a number of substrings; restore the substrings to obtain a character string, and convert the character string according to specified rules to obtain decrypted data.

Images