Electronic seal public service management system

Abstract

The invention discloses an electronic seal public service management system, and relates to the technical field of electronic seal data processing. The electronic seal public service management system comprises an electronic seal user terminal, a central service manager, a first electronic seal user authorization behavior information evaluation and analysis module, a second electronic seal user authorization behavior information evaluation and analysis module and an electronic seal user authorization adjustment module. The electronic seal user terminal sends a request, the central service manager authenticates and feeds back the request, the electronic seal user authorization behavior information evaluates and analyzes authorization behavior abnormity, and the electronic seal user authorization adjustment module processes abnormal authorization, so that the remote authorization judgment accuracy of electronic seal public service management is improved; the problem that in the prior art, remote authorization judgment accuracy of electronic seal public service management is insufficient is solved.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic seal data processing, and in particular to an electronic seal public service management system. Background Art

[0002] With the development of information technology, the demand for digital transformation in various fields of society is growing. Traditional paper documents and physical seals have limitations in processing speed, storage convenience and security. Therefore, promoting e-government and digital management has become an inevitable trend. Electronic seals are based on cryptographic technology, which effectively bind digital certificates, signature keys and physical seal images to achieve the integrity, authenticity and non-repudiation of electronic documents. Graphical electronic signatures. With the increase in cyber attacks and information leaks, the public's attention to information security continues to increase. The encryption and security characteristics of electronic seals meet this social demand.

[0003] The existing electronic seal public service management system is implemented through the following technologies, including: digital signature technology, digital certificate technology, encryption technology, time stamp service, image processing technology and database management technology; through the above technologies, the electronic seal conducts electronic authorization review for the enterprises that need authorization and then authorizes them.

[0004] For example, the electronic seal authorization method, system, electronic device and storage medium announced by the invention patent with the announcement number CN113591155B include: collecting the original handwriting data of the electronic signature related to the seal authorization and extracting the features; obtaining the electronic signature data of the authorization and extracting the features; calculating the similarity between the features of the original handwriting data and the features of the electronic signature data of the authorization; judging according to the similarity; if the similarity is greater than the preset threshold, it is judged as the signature of the person himself, and the seal authorization information is sent; according to the seal authorization information, authorization is performed according to the preset authorization process. The system includes: original handwriting data module, original handwriting feature module, current signature module, current signature feature module, calculation and judgment module, and seal authorization module.

[0005] For example, the invention patent announcement with announcement number: CN117056913B discloses an intelligent management method for electronic seal authorization, including: collecting original data, obtaining several usage frequency sequences, and recording any one usage frequency sequence as a target sequence, and then dividing the data in the target sequence into several data classes, and obtaining the category differences of the target sequence based on the central data of all data classes, and dividing all data classes in the target sequence into several new classes, and obtaining the first density of the target sequence based on the data values, the number of data, and the number of data classes in all new classes, thereby obtaining the initial abnormality recognition degree of the target sequence, thereby obtaining several first scale sequences and second scale sequences, and then combining the data relationship between all first scale sequences and all second scale sequences to determine whether the original data has abnormalities.

[0006] However, in the process of implementing the technical solution of the invention in the embodiments of the present application, the present application found that the above technology has at least the following technical problems:

[0007] In the existing technology, since the evaluation of electronic seal authorization mainly focuses on identity verification and authority identification, or through the analysis and evaluation of data from historical seal usage, it takes a long time and a large number of abnormal behaviors to be detected. In addition, in the process of remote authorization of electronic seals, misjudgment is prone to occur due to various factors, and there is a problem of insufficient accuracy in remote authorization judgment of electronic seal public service management. Summary of the invention

[0008] The embodiment of the present application solves the problem of insufficient accuracy of remote authorization judgment of electronic seal public service management in the prior art by providing an electronic seal public service management system, thereby achieving further improvement of the accuracy of remote authorization judgment of electronic seal public service management.

[0009] The embodiment of the present application provides an electronic seal public service management system, including: an electronic seal user terminal, a central service manager, a first evaluation and analysis module for electronic seal user authorization behavior information, a second evaluation and analysis module for electronic seal user authorization behavior information, and an electronic seal user authorization adjustment module; wherein the electronic seal user terminal is used to send an electronic seal user's electronic seal remote authorization request; the central service manager is used to receive the electronic seal user's electronic seal remote authorization request, perform electronic seal identity authority authentication, and send the electronic seal identity authority authentication result to the electronic seal user terminal; the first evaluation and analysis module for electronic seal user authorization behavior information is used to obtain The historical electronic seal user authorization behavior information data is used to perform an abnormal analysis of the electronic seal user authorization behavior to obtain an abnormal indication value of the electronic seal user authorization behavior; the second evaluation and analysis module of the electronic seal user authorization behavior information is used to judge whether to accept the electronic seal user's electronic seal remote authorization request according to the abnormal indication value of the electronic seal user authorization behavior, and send the judgment result to the central service manager. If accepted, the relevant personnel are notified through the central service manager; if not accepted, an abnormal analysis of the electronic seal user to be evaluated is performed; the electronic seal user authorization adjustment module is used to judge and adjust the authorization of the electronic seal user to be evaluated according to the abnormal analysis result of the electronic seal user to be evaluated.

[0010] Furthermore, the specific process of performing electronic seal identity authority authentication is as follows: the central service manager includes a central service manager receiving unit, a central service manager matching verification unit and a central service manager matching sending unit; the central service manager receiving unit is used to receive an electronic seal remote authorization request from an electronic seal user; the central service manager matching verification unit is used to review the electronic seal user's historical electronic seal authorization associated data according to the electronic seal user's historical electronic seal authorization associated data through predefined electronic seal user authorization review rules and determine whether the electronic seal user identity is successfully verified based on the review result; the central service manager matching sending unit is used to determine whether to extract historical electronic seal user authorization behavior information data based on the electronic seal user identity verification result; if the electronic seal user identity verification is successful, the historical electronic seal user authorization behavior information data is extracted, and information on successful electronic seal user identity verification is sent to the electronic seal user terminal; if the electronic seal user identity verification is unsuccessful, the historical electronic seal user authorization behavior information data is not extracted, and information on failed electronic seal user identity verification is sent to the electronic seal user terminal.

[0011] Furthermore, the specific process of performing abnormal analysis on electronic seal user authorization behavior is as follows: the first evaluation and analysis module of electronic seal user authorization behavior information includes an electronic seal user authorization behavior information acquisition unit and a historical electronic seal user authorization behavior information processing unit; the electronic seal user authorization behavior information acquisition unit is used to extract the historical electronic seal user authorization behavior information data of the electronic seal user in the central service manager; the historical electronic seal user authorization behavior information processing unit is used to divide the historical electronic seal user authorization behavior information data according to the predefined electronic seal authorization time period, and obtain the historical electronic seal user authorization behavior information data under different predefined electronic seal authorization time periods. For information data, the data set of the machine IP address of the electronic seal user terminal received by the central service manager within the predefined electronic seal authorization time period and the total historical data set of the machine IP address of the electronic seal user terminal are extracted; if the data set of the machine IP address of the electronic seal user terminal received by the central service manager within the predefined electronic seal authorization time period belongs to the total historical data set of the machine IP address of the electronic seal user terminal, then the number of historical authorization requests within the predefined electronic seal authorization time period is analyzed to obtain the electronic seal remote authorization request indication value, and combined with the dynamic IP change abnormal indication correction factor, the electronic seal user authorization behavior abnormal indication value is analyzed to obtain.

[0012] Furthermore, the dynamic IP change abnormality indication correction factor is specifically obtained as follows: different dynamic IP addresses used by the electronic seal user to send an electronic seal remote authorization request through the electronic seal user terminal are combined and recorded as a dynamic IP address set for the electronic seal remote authorization request; different dynamic IP addresses used by the electronic seal user to send the latest electronic seal remote authorization request through the electronic seal user terminal are recorded as the current dynamic IP address of the electronic seal user terminal; the current dynamic IP address of the electronic seal user terminal is compared and analyzed with the dynamic IP address set of the electronic seal remote authorization request to obtain the dynamic IP change abnormality indication correction value within a predefined electronic seal authorization time period; the total number of types of dynamic IP addresses of the electronic seal user terminal within the predefined electronic seal authorization time period is extracted; and the dynamic IP change abnormality indication correction factor is obtained through this analysis.

[0013] Furthermore, judging whether to accept the electronic seal user's electronic seal remote authorization request based on the electronic seal user's authorization behavior abnormality indication value specifically includes: recording the maximum value of the electronic seal user's authorization behavior abnormality indication value in different predefined electronic seal authorization time periods as the electronic seal user authorization behavior abnormality indication maximum value; comparing and analyzing the electronic seal user authorization behavior abnormality indication maximum value with the preset electronic seal user authorization behavior abnormality first threshold value, and recording the difference between the two as the electronic seal user authorization behavior abnormality indication value; if the electronic seal user authorization behavior abnormality indication value is greater than or equal to the electronic seal user authorization behavior abnormality indication first threshold value, then the electronic seal user's electronic seal remote authorization request is not accepted and sent to the central Service manager, and notify relevant personnel to contact the electronic seal user; if the electronic seal user's authorization behavior abnormality indication value is less than the electronic seal user's authorization behavior abnormality indication first threshold and is greater than or equal to the electronic seal user's authorization behavior abnormality indication second threshold, the electronic seal user's electronic seal remote authorization request will not be accepted, and the electronic seal user will be listed as an electronic seal user to be evaluated and sent to the central service manager, and the central service manager will notify relevant personnel to send a message to the electronic seal user, and the message is used to notify the electronic seal user to issue an electronic seal remote authorization request again; if the electronic seal user's authorization behavior abnormality indication value is less than the electronic seal user's authorization behavior abnormality indication second threshold, the electronic seal user's electronic seal remote authorization request will be accepted.

[0014] Furthermore, the abnormal analysis of the electronic seal user to be evaluated is carried out, specifically including: performing route tracing analysis on the electronic seal user terminal of the electronic seal user to be evaluated through a computer network diagnostic tool to obtain the endpoint IP of the network node to be evaluated, and comparing and analyzing the endpoint IP of the network node to be evaluated with the machine IP of the electronic seal user terminal; if they are the same, notifying relevant personnel to receive and handle the electronic seal remote authorization request re-issued by the electronic seal user online; if they are not the same, performing network fluctuation analysis on the electronic seal user to be evaluated.

[0015] Furthermore, the network fluctuation analysis is performed on the electronic seal user to be evaluated, specifically including: obtaining the maximum value of the abnormal indication of the electronic seal user authorization behavior of the electronic seal user to be evaluated; obtaining the number of network connection interruptions of the electronic seal remote authorization request by checking the access log on the server side; setting a filter according to the specific port number of the electronic seal user terminal, capturing the data packets of the electronic seal user terminal through the network monitoring tool and the filter, and obtaining the loss rate parameter of the data packet of the electronic seal remote authorization request; directly obtaining the number of hops of the network path for the transmission of the data packet of the electronic seal remote authorization request through the network diagnostic tool; and comprehensively analyzing the above parameters to obtain the network fluctuation analysis abnormality factor of the electronic seal user to be evaluated.

[0016] Furthermore, the authorization of the electronic seal user to be evaluated is judged and adjusted, specifically including: if the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is greater than or equal to the network fluctuation analysis anomaly threshold, the electronic seal user to be evaluated is recorded as a first-level electronic seal user to be evaluated.

[0017] Furthermore, the judgment and adjustment of the electronic seal user authorization to be evaluated also includes: if the network fluctuation analysis anomaly factor is less than the network fluctuation analysis anomaly threshold, the electronic seal remote authorization request re-issued by the electronic seal user is rejected, and relevant personnel are notified to manually review the electronic seal user's historical electronic seal user authorization behavior information data online.

[0018] Furthermore, the judgment and adjustment of the authorization of the electronic seal user to be evaluated also includes: after a predefined repeated evaluation time, re-evaluating the network fluctuation analysis anomaly factor of the first-level electronic seal user to be evaluated, recorded as the network fluctuation analysis anomaly factor repetition value, if the network fluctuation analysis anomaly factor repetition value is greater than or equal to the network fluctuation analysis anomaly threshold; then notifying relevant personnel to manually check online through the network monitoring tool whether the network path of the data packet transmission of the electronic seal user's electronic seal remote authorization request is subject to a network attack; if so, notifying relevant personnel to initiate a network attack emergency plan through the central service manager; if not, notifying the electronic seal user to adjust the network environment where the electronic seal user terminal is located and re-issue the electronic seal remote authorization request business, and notifying relevant personnel to receive and handle the electronic seal remote authorization request re-issued by the electronic seal user online.

[0019] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0020] 1. A request is sent through the electronic seal user terminal, and the central service manager authenticates and feedbacks. The electronic seal user authorization behavior information is evaluated and analyzed to find abnormal authorization behavior. The electronic seal user authorization adjustment module handles abnormal authorization, thereby improving the accuracy of remote authorization judgment of electronic seal public service management, and solving the problem of insufficient accuracy of remote authorization judgment of electronic seal public service management in the existing technology.

[0021] 2. Determine whether to accept the electronic seal user's electronic seal remote authorization request based on the abnormal indication value of the electronic seal user's authorization behavior. By analyzing the abnormal indication value of the user's authorization behavior, potential authorization risks can be identified more accurately, thereby improving the security of the system. At the same time, by setting different thresholds, authorization requests can be managed in a hierarchical manner, and different response measures can be taken for abnormal behaviors, thereby achieving the effectiveness of risk control.

[0022] 3. Based on the abnormal analysis results of the electronic seal users to be evaluated, the authorization of the electronic seal users to be evaluated is judged and adjusted. By comprehensively analyzing the abnormal factors of network fluctuations, it is possible to more accurately identify the network problems that the electronic seal users to be evaluated may face, such as network fluctuations or attacks. By rejecting the authorization requests of users with abnormal network behavior and conducting manual review, the system reduces security risks and prevents possible network attacks or abuses, thereby improving the adaptability of remote authorization judgments in public service management. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A schematic diagram of the structure of the electronic seal public service management system provided in the embodiment of the present application;

[0024] Figure 2 A schematic diagram of the structure of the central service manager in the electronic seal public service management system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0025] The embodiment of the present application solves the problem of insufficient accuracy in remote authorization judgment of electronic seal public service management in the prior art by providing an electronic seal public service management system. By analyzing and evaluating the authorization behavior of electronic seal users, the network environment is analyzed and analyzed, and finally specific authorization adjustments are made, thereby achieving the effect of improving the accuracy of remote authorization judgment of electronic seal public service management.

[0026] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0027] like Figure 1As shown, it is a structural schematic diagram of the electronic seal public service management system provided by the embodiment of the present application. The electronic seal public service management system provided by the embodiment of the present application includes: an electronic seal user terminal, a central service manager, a first evaluation and analysis module for electronic seal user authorization behavior information, a second evaluation and analysis module for electronic seal user authorization behavior information, and an electronic seal user authorization adjustment module; wherein the electronic seal user terminal is used to send an electronic seal user's electronic seal remote authorization request; the central service manager is used to receive the electronic seal user's electronic seal remote authorization request, perform electronic seal identity authority authentication, and send the electronic seal identity authority authentication result to the electronic seal user terminal; the electronic seal user authorization behavior information first evaluation and analysis module, the electronic seal user authorization behavior information second evaluation and analysis module and the electronic seal user authorization adjustment module; wherein, the electronic seal user terminal is used to send an electronic seal user's electronic seal remote authorization request; the central service manager is used to receive the electronic seal user's electronic seal remote authorization request, perform electronic seal identity authority authentication, and send the electronic seal identity authority authentication result to the electronic seal user terminal; the electronic seal user authorization behavior information second evaluation and analysis module The first evaluation and analysis module for information is used to obtain historical electronic seal user authorization behavior information data, perform electronic seal user authorization behavior anomaly analysis, and obtain the electronic seal user authorization behavior anomaly indication value; the second evaluation and analysis module for electronic seal user authorization behavior information is used to judge whether to accept the electronic seal user's electronic seal remote authorization request based on the electronic seal user authorization behavior anomaly indication value, and send the judgment result to the central service manager. If accepted, the relevant personnel will be notified through the central service manager. If not accepted, an anomaly analysis of the electronic seal user to be evaluated will be performed; the electronic seal user authorization adjustment module is used to judge and adjust the electronic seal user authorization based on the anomaly analysis result of the electronic seal user to be evaluated.

[0028] In this embodiment, for the electronic seal user's electronic seal remote authorization request, some electronic seal users often travel, or the authorized application departments are scattered in different regions. If this is used as the only evaluation criterion, the normal electronic seal authorization request of the electronic seal user may be easily misjudged as abnormal. Moreover, due to the electronic seal remote authorization, it is impossible to directly communicate face-to-face with the electronic seal user through relevant personnel, and the analysis of the specific situation is not timely and accurate, which further reduces the efficiency and accuracy of the electronic seal remote authorization.

[0029] Furthermore, the specific process of electronic seal identity authority authentication is as follows: the central service manager includes a central service manager receiving unit, a central service manager matching verification unit and a central service manager matching sending unit; the central service manager receiving unit is used to receive the electronic seal remote authorization request of the electronic seal user; the central service manager matching verification unit is used to review the historical electronic seal authorization associated data of the electronic seal user according to the historical electronic seal authorization associated data of the electronic seal user through predefined electronic seal user authorization review rules and judge whether the electronic seal user identity is successfully verified according to the review result; the central service manager matching sending unit is used to judge whether to extract the historical electronic seal user authorization behavior information data according to the electronic seal user identity verification result; if the electronic seal user identity verification is successful, the historical electronic seal user authorization behavior information data is extracted and the information of successful electronic seal user identity verification is sent to the electronic seal user terminal; if the electronic seal user identity verification is unsuccessful, the historical electronic seal user authorization behavior information data is not extracted and the information of failed electronic seal user identity verification is sent to the electronic seal user terminal.

[0030] In this embodiment, if Figure 2 As shown, it is a structural diagram of the central service manager in the electronic seal public service management system provided in the embodiment of the present application. The review result only includes that the electronic seal user identity authentication is successful or the electronic seal user identity authentication is unsuccessful.

[0031] When a remote authorization request for an electronic seal is received from an electronic seal user via an electronic seal user terminal, the historical electronic seal authorization associated data of the electronic seal user is extracted through the electronic seal user-based index rule, and the historical electronic seal authorization associated data of the electronic seal user is reviewed through the predefined electronic seal user authorization review rule to determine whether the electronic seal user should be authorized.

[0032] The historical electronic seal authorization-related data is used to describe all data used to obtain electronic seal authorization in the history of the electronic seal user. The historical electronic seal authorization-related data mainly includes but is not limited to the electronic seal user's face recognition data, company registration data, company legal person data, iris verification data, and login account password data.

[0033] The predefined electronic seal user authorization review rules can be reviewed by verifying the electronic seal user's facial data and login account password data, or by verifying iris verification data and company registration data, according to manual settings by the electronic seal authorizer.

[0034] Furthermore, the specific process of conducting abnormal analysis of electronic seal user authorization behavior is as follows: the first evaluation and analysis module of electronic seal user authorization behavior information includes an electronic seal user authorization behavior information acquisition unit and a historical electronic seal user authorization behavior information processing unit; the electronic seal user authorization behavior information acquisition unit: used to extract the historical electronic seal user authorization behavior information data of the electronic seal user in the central service manager; the historical electronic seal user authorization behavior information processing unit: used to divide the historical electronic seal user authorization behavior information data according to the predefined electronic seal authorization time period, and obtain the historical electronic seal user authorization behavior information under different predefined electronic seal authorization time periods. Data is extracted to obtain the data set of the machine IP address of the electronic seal user terminal received by the central service manager within the predefined electronic seal authorization time period and the total historical data set of the machine IP address of the electronic seal user terminal; if the data set of the machine IP address of the electronic seal user terminal received by the central service manager within the predefined electronic seal authorization time period belongs to the total historical data set of the machine IP address of the electronic seal user terminal, then the number of historical authorization requests within the predefined electronic seal authorization time period is analyzed to obtain the electronic seal remote authorization request indication value, and combined with the dynamic IP change abnormal indication correction factor analysis, the electronic seal user authorization behavior abnormal indication value is obtained.

[0035] In this embodiment, the electronic seal user authorization behavior abnormality indication value is used to describe the relative abnormality indication level of the electronic seal user's authorization behavior in a predefined electronic seal authorization time period.

[0036] The specific method of obtaining the abnormal indication value of electronic seal user authorization behavior is as follows:

[0037]

[0038] If E∈F, then

[0039] like The electronic seal user is judged as an electronic seal user to be evaluated, and abnormal analysis of the electronic seal user to be evaluated is performed;

[0040] If the identity authentication of the electronic seal user is passed, it means that the identity of the electronic seal user is correct, but whether the electronic seal authorization can be carried out requires further evaluation and analysis.

[0041] The historical electronic seal user authorization behavior information data is segmented by pre-defined electronic seal authorization time periods, so that the historical electronic seal user authorization behavior information data is segmented into historical electronic seal user authorization behavior information data under different pre-defined electronic seal authorization time periods.

[0042] The predefined electronic seal authorization time periods are numbered one by one, Y0 represents the number of the predefined electronic seal authorization time period, and Y represents the total number of the predefined electronic seal authorization time periods.

[0043] Indicates the abnormal indication value of the electronic seal user authorization behavior in the Y0th predefined electronic seal authorization time period.

[0044] Represents the electronic seal remote authorization request indication value in the Y0th predefined electronic seal authorization time period.

[0045] It represents the authorization success rate of electronic seal remote authorization requests in the Y0th predefined electronic seal authorization time period.

[0046] SG AVG Indicates the average authorization success rate of electronic seal remote authorization requests.

[0047] Monitor the success rate of authorization requests; frequent authorization failures may indicate an anomaly.

[0048] E represents the data set of the machine IP addresses of the electronic seal user terminals received by the central service manager in the Y0th predefined electronic seal authorization time period.

[0049] F represents the total set of historical data of the machine IP address of the electronic seal user terminal.

[0050] An electronic seal user may have multiple electronic seal user terminals, and each electronic seal user terminal generally corresponds to a machine IP address. In general, the data set of the machine IP addresses of the electronic seal user terminals received by the central service manager should belong to the data set of the machine IP addresses of the electronic seal user terminals. If the data set of the machine IP addresses of the electronic seal user terminals received by the central service manager does not belong to the data set of the machine IP addresses of the electronic seal user terminals, it may be an abnormal situation, and relevant personnel should be notified to check and confirm.

[0051] The total number of electronic seal remote authorization requests issued by electronic seal users through the electronic seal user terminal is classified under different predefined electronic seal authorization time periods to obtain the number of electronic seal remote authorization requests under the predefined electronic seal authorization time period; the number of electronic seal remote authorization requests under the predefined electronic seal authorization time period is divided by the length of the predefined electronic seal authorization time period to obtain the frequency of electronic seal remote authorization requests under the predefined electronic seal authorization time period.

[0052] Indicates the frequency of electronic seal remote authorization requests in the Y0th predefined electronic seal authorization time period.

[0053] λ AVG Indicates the average frequency of electronic seal remote authorization requests.

[0054] The timestamps corresponding to all previous electronic seal remote authorization requests of the electronic seal user, including this one, are merged into a data group, recorded as the electronic seal user's historical authorization request timestamp data group, and the electronic seal user's historical authorization request timestamp data group is arranged and classified according to a predefined time distribution arrangement rule to obtain weight factors corresponding to different time periods in the electronic seal user's historical authorization request timestamp data group. For example, the number of historical authorization requests of the electronic seal user in the hour period from 18:00 to 19:00 in 24 hours accounts for 20% of the total number, then the weight of the hour period from 18:00 to 19:00 is set to 0.2.

[0055] The number of historical authorization requests of the electronic seal user in the predefined electronic seal authorization time period is numbered, C0 represents the number of historical authorization requests, and C represents the total number of historical authorization requests.

[0056] Represents the weight factor corresponding to the C0th number of historical authorization requests in the Y0th predefined electronic seal authorization time period in the electronic seal user's historical authorization request timestamp data group.

[0057] Indicates the dynamic IP change abnormal indication correction factor for the Y0th predefined electronic seal authorization time period.

[0058] Furthermore, the dynamic IP change abnormality indication correction factor is specifically obtained as follows: the different dynamic IP addresses used by the electronic seal user to send an electronic seal remote authorization request through the electronic seal user terminal are combined and recorded as the dynamic IP address set of the electronic seal remote authorization request; the different dynamic IP addresses used by the electronic seal user to send the latest electronic seal remote authorization request through the electronic seal user terminal are recorded as the current dynamic IP address of the electronic seal user terminal; the current dynamic IP address of the electronic seal user terminal is compared and analyzed with the dynamic IP address set of the electronic seal remote authorization request to obtain the dynamic IP change abnormality indication correction value within the predefined electronic seal authorization time period; the total number of types of dynamic IP addresses of the electronic seal user terminal within the predefined electronic seal authorization time period is extracted; and the dynamic IP change abnormality indication correction factor is obtained through this analysis.

[0059] In this embodiment, the dynamic IP change abnormality indication correction factor is used to describe the relative indication level of the dynamic IP change abnormality of the electronic seal user terminal of the electronic seal user within the predefined electronic seal authorization time period.

[0060] The specific method for obtaining the dynamic IP change abnormal indication correction factor is as follows:

[0061]

[0062] If B∈G, then

[0063] like but

[0064] The dynamic IP address of the electronic seal user terminal of the electronic seal user can be allocated by the Internet service provider. For example, the Internet service provider usually has an IP address pool. When the electronic seal user terminal is connected to the network, the Internet service provider allocates an IP address to the device from the IP address pool; or, when the electronic seal user terminal accesses the network through a network access server, the network access server will allocate a dynamic IP address to the user from the IP address pool of the Internet service provider.

[0065] However, if the dynamic IP address of the electronic seal user's terminal changes in a short period of time, it may be subject to a network attack. For example, an attacker may try to hijack the network connection through a man-in-the-middle attack, which may cause frequent changes in the dynamic IP address; the attacker may use IP spoofing technology to make the victim's network traffic appear to be sent from different dynamic IP addresses, which will also cause frequent changes in the dynamic IP address; if the attacker obtains the account credentials of the electronic seal user, he may log in to the account on different devices, resulting in changes in the dynamic IP address.

[0066] The different dynamic IP addresses of the electronic seal user sending the electronic seal remote authorization request through the electronic seal user terminal are combined and recorded as the dynamic IP address set of the electronic seal remote authorization request, and G represents the dynamic IP address set of the electronic seal remote authorization request.

[0067] The different dynamic IP addresses of the latest electronic seal user sending the electronic seal remote authorization request through the electronic seal user terminal are recorded as the current dynamic IP addresses of the electronic seal user terminal, and B represents the current dynamic IP address of the electronic seal user terminal.

[0068] It represents the total number of types of dynamic IP addresses of the electronic seal user terminal in the Y0th predefined electronic seal authorization time period. For example, if the total number of types of dynamic IP addresses of the electronic seal user terminal in the predefined electronic seal authorization time period is 1, it means that the dynamic IP address of the electronic seal user terminal in the predefined electronic seal authorization time period has no change and is very stable. On the contrary, the more types there are, the greater the change.

[0069] It indicates the correction value of the dynamic IP change abnormal indication in the Y0th predefined electronic seal authorization time period.

[0070] Indicates the frequency of electronic seal remote authorization requests in the Y0th predefined electronic seal authorization time period.

[0071] Get geographic location information:

[0072] Use IP geolocation services (such as MaxMind GeoIP, IP2Location, etc.) to obtain the geographic location information corresponding to the dynamic IP.

[0073] The geographical location information of the electronic seal user terminal, such as GPS data.

[0074] Distance calculation: Calculate the straight-line distance or road network distance between the IP geographic location and the user's reported geographic location, recorded as the geographic location difference distance value in meters.

[0075] Indicates the geographical location difference distance value in the Y0th predefined electronic seal authorization time period.

[0076] DL AVG Represents the average of the historical geographic location difference distances, extracted from the central service manager.

[0077] Furthermore, judging whether to accept the electronic seal user's electronic seal remote authorization request based on the electronic seal user's authorization behavior abnormality indication value specifically includes: recording the maximum value of the electronic seal user's authorization behavior abnormality indication value in different predefined electronic seal authorization time periods as the electronic seal user authorization behavior abnormality indication maximum value; comparing and analyzing the electronic seal user authorization behavior abnormality indication maximum value with the preset electronic seal user authorization behavior abnormality first threshold value, and recording the difference between the two as the electronic seal user authorization behavior abnormality indication value; if the electronic seal user authorization behavior abnormality indication value is greater than or equal to the electronic seal user authorization behavior abnormality indication first threshold value, then the electronic seal user's electronic seal remote authorization request is not accepted and sent to the central service center. The central service manager notifies relevant personnel to contact the electronic seal user; if the electronic seal user's authorization behavior abnormality indication value is less than the electronic seal user's authorization behavior abnormality indication first threshold and is greater than or equal to the electronic seal user's authorization behavior abnormality indication second threshold, the electronic seal user's electronic seal remote authorization request is not accepted, and the electronic seal user is listed as an electronic seal user to be evaluated and sent to the central service manager, and the central service manager notifies relevant personnel to send a message to the electronic seal user, and the message is used to notify the electronic seal user to issue an electronic seal remote authorization request again; if the electronic seal user's authorization behavior abnormality indication value is less than the electronic seal user's authorization behavior abnormality indication second threshold, the electronic seal user's electronic seal remote authorization request is accepted.

[0078] In this embodiment, if the electronic seal user authorization behavior abnormality indication value is greater than or equal to the electronic seal user authorization behavior abnormality indication first threshold value, it means that the electronic seal user's previous abnormal behavior degree is high, which may involve the abnormal behavior degree caused by network attack, and it is necessary to notify the relevant personnel to contact the electronic seal user for manual service confirmation and the relevant personnel can manually modify the electronic seal user's historical electronic seal user authorization behavior information data after the manual service. At the same time, considering that the electronic seal user may have multiple electronic seal user terminals in actual situations or one electronic seal user terminal has multiple electronic seal users with the same authority or the electronic seal user travels a lot, the location of the electronic seal user terminal that issues the electronic seal remote authorization request changes more prominently. These actual situations will make the electronic seal user send the electronic seal remote authorization request normally, but it is easy to be misjudged and lead to the situation that the authorization cannot be done normally, which seriously slows down the efficiency of the existing software automation processing, so the electronic seal user authorization behavior abnormality indication second threshold value is set, and if the electronic seal user is judged as the electronic seal user to be evaluated, further judgment is made.

[0079] Furthermore, an abnormal analysis of the electronic seal user to be evaluated is conducted, specifically including: performing route tracing analysis on the electronic seal user terminal of the electronic seal user to be evaluated through a computer network diagnostic tool to obtain the endpoint IP of the network node to be evaluated, and comparing and analyzing the endpoint IP of the network node to be evaluated with the machine IP of the electronic seal user terminal. If they are the same, relevant personnel are notified to receive and handle the electronic seal remote authorization request re-issued by the electronic seal user online. If they are not the same, a network fluctuation analysis is conducted on the electronic seal user to be evaluated.

[0080] In this embodiment, the computer network diagnostic tool can be specifically traceroute. When the source host A (electronic seal user terminal) sends a message to the target host B (central service manager), it is found that the message cannot be delivered. At this time, there may be a problem with a certain intermediate node, such as the router causing packet loss due to excessive load. At this time, traceroute can be used for preliminary detection to locate the node where the network packet is lost; if the source host A (electronic seal user terminal) sends a message to the target host B (central service manager), the message can be delivered normally, then the central service manager can obtain the IP address of the source host A (electronic seal user terminal) through traceroute. If the IP address of the source host A (electronic seal user terminal) obtained is the same as the IP address of the actual source host A (electronic seal user terminal), it means that the network path is normal, otherwise, it means that the network path is abnormal, and there may be excessive volatility or network congestion.

[0081] Furthermore, a network fluctuation analysis is performed on the electronic seal user to be evaluated, specifically including: obtaining the maximum value of the abnormal indication of the electronic seal user authorization behavior of the electronic seal user to be evaluated; obtaining the number of network connection interruptions of the electronic seal remote authorization request by checking the access log on the server side; setting a filter according to the specific port number of the electronic seal user terminal, capturing the data packets of the electronic seal user terminal through the network monitoring tool and the filter, and obtaining the data packet loss rate parameter of the electronic seal remote authorization request; directly obtaining the number of hops of the network path for the transmission of the data packet of the electronic seal remote authorization request through the network diagnostic tool; and comprehensively analyzing the above parameters to obtain the network fluctuation analysis abnormality factor.

[0082] In this embodiment, a network fluctuation analysis is performed on the electronic seal user to be evaluated, and a specific method for obtaining the abnormal factor of the network fluctuation analysis is as follows: MAX Indicates the maximum value of abnormal authorization behavior of electronic seal users.

[0083]

[0084] ω represents the anomaly factor of network fluctuation analysis.

[0085] The current network fluctuation analysis time period for network fluctuation analysis is divided and numbered according to the predefined network fluctuation analysis time period to obtain a number of network fluctuation analysis time periods, where D0 represents the number of the network fluctuation analysis time period and D represents the total number of the network fluctuation analysis time periods.

[0086] Indicates the maximum loss rate of the data packets of the electronic seal remote authorization request in the D0th network fluctuation analysis time period;

[0087] Indicates the minimum loss rate of the data packet of the electronic seal remote authorization request in the D0th network fluctuation analysis time period;

[0088] represents the average loss rate of data packets of electronic seal remote authorization request in the D0th network fluctuation analysis time period;

[0089] Indicates the number of network connection interruptions for electronic seal remote authorization requests in the D0th network fluctuation analysis time period;

[0090] By checking the access log on the server side, the detailed information of each request is recorded, including success, failure, and network errors. By analyzing the error codes in the log, such as TCP / IP connection errors and timeouts, the number of network connection interruptions can be counted;

[0091] TS represents the number of hops of the network path for the data packet transmission of the electronic seal remote authorization request. The number of hops refers to the number of network devices that the data packet must pass through before reaching the destination. Each hop usually represents the process of data packet transmission from one network device to another; the more hops there are, the longer it usually takes for the data packet to reach the destination, which may result in higher latency.

[0092] Use the network diagnostic tool (Traceroute, Tracert in Windows system, to trace the path of the data packet from the source host to the destination host, which can be used to obtain the number of hops of the network path for data packet transmission.

[0093] μ1 represents the preset weight factor of the packet loss rate for the anomaly factor of network fluctuation analysis;

[0094] μ2 represents the preset weight factor of the number of hops in the network path for data packet transmission for the anomaly factor of network fluctuation analysis;

[0095] The preset weight factors of the packet loss rate for the network fluctuation analysis anomaly factor and the preset weight factors of the network path hops of the packet transmission for the network fluctuation analysis anomaly factor respectively represent the numerical values ​​of the influence of the total packet transmission time on the packet loss rate and the number of hops of the network path of the packet transmission on the network fluctuation analysis anomaly factor.

[0096] The preset weight factor of the network fluctuation analysis anomaly factor and the number of hops of the network path for data packet transmission can be directly obtained from the central service manager through a preset mapping relationship. For example, a mapping set of the real-time total data packet transmission time and its corresponding data packet loss rate for the preset weight factor of the network fluctuation analysis anomaly factor and the real-time total data packet transmission time and its corresponding number of hops of the network path for data packet transmission for the preset weight factor of the network fluctuation analysis anomaly factor is constructed, and the real-time total data packet transmission time is input into the mapping set to obtain the preset weight factor of the data packet loss rate for the network fluctuation analysis anomaly factor and the preset weight factor of the network path for data packet transmission for the network fluctuation analysis anomaly factor, wherein the mapping relationship can be one-to-one or many-to-one.

[0097] Furthermore, if the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is greater than or equal to the network fluctuation analysis anomaly threshold, relevant personnel are notified to receive and process the electronic seal remote authorization request again issued by the electronic seal user online.

[0098] In this embodiment, if the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is greater than or equal to the network fluctuation analysis anomaly threshold, it means that the current network environment of the electronic seal user is unstable or the network is congested, causing the electronic seal user authorization evaluation of the electronic seal user to be abnormal, but further evaluation and analysis is needed.

[0099] Furthermore, the judgment and adjustment of the electronic seal user authorization to be evaluated also includes: if the network fluctuation analysis anomaly factor is less than the network fluctuation analysis anomaly threshold, the electronic seal remote authorization request re-issued by the electronic seal user is rejected, and relevant personnel are notified to manually review the electronic seal user's historical electronic seal user authorization behavior information data online.

[0100] In this embodiment, if the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is less than or equal to the network fluctuation analysis anomaly threshold, it means that the current network environment of the electronic seal user is stable, or the network is unobstructed, so that the electronic seal user authorization evaluation of the electronic seal user is normal. However, due to the high degree of abnormal behavior of the electronic seal user to be evaluated in the past, authorization is not allowed, and relevant personnel need to manually review the historical data of the electronic seal user.

[0101] Furthermore, the judgment and adjustment of the authorization of the electronic seal user to be evaluated also includes: after a predefined repeated evaluation time, re-evaluating the network fluctuation analysis anomaly factor of the first-level electronic seal user to be evaluated, recorded as the network fluctuation analysis anomaly factor repetition value, if the network fluctuation analysis anomaly factor repetition value is greater than or equal to the network fluctuation analysis anomaly threshold; then notifying relevant personnel to manually check online through the network monitoring tool whether the network path of the data packet transmission of the electronic seal user's electronic seal remote authorization request is subject to a network attack; if so, notifying relevant personnel to initiate a network attack emergency plan through the central service manager; if not, notifying the electronic seal user to adjust the network environment where the electronic seal user terminal is located and re-issue the electronic seal remote authorization request business, and notifying relevant personnel to receive and handle the electronic seal remote authorization request re-issued by the electronic seal user online.

[0102] In this embodiment, if the network fluctuation is still abnormal after the predefined repeated evaluation time, it means that a network attack may have occurred and it is necessary to call a network monitoring tool, such as Wireshark: capture and analyze data packets to check whether there are abnormal traffic patterns or destinations; if it is a network attack, call the network attack emergency plan; if not, notify the electronic seal user to adjust the network environment where the electronic seal user terminal is located.

[0103] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0104] The present invention is described with reference to flowcharts and / or block diagrams of systems, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0105] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0106] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0107] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0108] Obviously, those skilled in the art may make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. An electronic seal public service management system, characterized in that: It includes an electronic seal user terminal, a central service manager, a first evaluation and analysis module for electronic seal user authorization behavior information, a second evaluation and analysis module for electronic seal user authorization behavior information, and an electronic seal user authorization adjustment module; Wherein, the electronic seal user terminal is used to send the electronic seal user's electronic seal remote authorization request; The central service manager is used to receive the electronic seal remote authorization request of the electronic seal user, perform the electronic seal identity authority authentication, and send the electronic seal identity authority authentication result to the electronic seal user terminal; The electronic seal user authorization behavior information first evaluation and analysis module is used to obtain historical electronic seal user authorization behavior information data, perform electronic seal user authorization behavior abnormality analysis, and obtain an electronic seal user authorization behavior abnormality indication value; The second evaluation and analysis module of the electronic seal user authorization behavior information is used to judge whether to accept the electronic seal user's electronic seal remote authorization request according to the electronic seal user authorization behavior abnormality indication value, and send the judgment result to the central service manager. If accepted, the relevant personnel are notified through the central service manager. If not accepted, the abnormal analysis of the electronic seal user to be evaluated is performed; The electronic seal user authorization adjustment module is used to judge and adjust the authorization of the electronic seal user to be evaluated according to the abnormal analysis result of the electronic seal user to be evaluated.

2. The electronic seal public service management system as claimed in claim 1, characterized in that: The specific process of electronic seal identity authentication is as follows: The central service manager includes a central service manager receiving unit, a central service manager matching verification unit and a central service manager matching sending unit; The central service manager receiving unit is used to receive an electronic seal remote authorization request from an electronic seal user; The matching verification unit of the central service manager is used to review the historical electronic seal authorization associated data of the electronic seal user according to the historical electronic seal authorization associated data of the electronic seal user through the predefined electronic seal user authorization review rules and determine whether the electronic seal user identity is successfully verified according to the review result; The central service manager matching and sending unit is used to determine whether to extract historical electronic seal user authorization behavior information data based on the electronic seal user identity authentication result. If the electronic seal user identity authentication is successful, the historical electronic seal user authorization behavior information data is extracted and the information of successful electronic seal user identity authentication is sent to the electronic seal user terminal. If the electronic seal user identity authentication is unsuccessful, the historical electronic seal user authorization behavior information data is not extracted and the information of failed electronic seal user identity authentication is sent to the electronic seal user terminal.

3. The electronic seal public service management system as claimed in claim 1, characterized in that: The specific process of analyzing the abnormal authorization behavior of electronic seal users is as follows: The electronic seal user authorization behavior information first evaluation and analysis module includes an electronic seal user authorization behavior information acquisition unit and a historical electronic seal user authorization behavior information processing unit; The electronic seal user authorization behavior information acquisition unit is used to extract the historical electronic seal user authorization behavior information data of the electronic seal user in the central service manager; The historical electronic seal user authorization behavior information processing unit is used to divide the historical electronic seal user authorization behavior information data according to the predefined electronic seal authorization time period, obtain the historical electronic seal user authorization behavior information data under different predefined electronic seal authorization time periods, and extract the data set of the machine IP address of the electronic seal user terminal received by the central service manager under the predefined electronic seal authorization time period and the total historical data set of the machine IP address of the electronic seal user terminal; If the data set of the machine IP address of the electronic seal user terminal received by the central service manager within the predefined electronic seal authorization time period belongs to the total historical data set of the machine IP address of the electronic seal user terminal, then the number of historical authorization requests within the predefined electronic seal authorization time period is analyzed to obtain the electronic seal remote authorization request indication value, and combined with the dynamic IP change abnormal indication correction factor, the electronic seal user authorization behavior abnormal indication value is analyzed to obtain.

4. The electronic seal public service management system as claimed in claim 3, characterized in that: The dynamic IP change abnormal indication correction factor is specifically obtained as follows: The different dynamic IP addresses of the electronic seal user sending the electronic seal remote authorization request through the electronic seal user terminal are combined and recorded as the electronic seal remote authorization request dynamic IP address set; Record the latest different dynamic IP address of the electronic seal user sending the electronic seal remote authorization request through the electronic seal user terminal as the current dynamic IP address of the electronic seal user terminal; Compare and analyze the current dynamic IP address of the electronic seal user terminal with the dynamic IP address set of the electronic seal remote authorization request to obtain the dynamic IP change abnormal indication correction value in the predefined electronic seal authorization time period; Extracting the total number of types of dynamic IP addresses of electronic seal user terminals within a predefined electronic seal authorization time period; The dynamic IP change abnormal indication correction factor is obtained through this analysis.

5. The electronic seal public service management system as claimed in claim 1, characterized in that: The step of judging whether to accept the electronic seal remote authorization request of the electronic seal user according to the abnormal authorization behavior indication value of the electronic seal user specifically includes: The maximum value of the electronic seal user authorization behavior abnormality mark value in different predefined electronic seal authorization time periods is recorded as the maximum value of the electronic seal user authorization behavior abnormality mark value; Compare and analyze the maximum value of the abnormal indication of the electronic seal user's authorization behavior with the preset first threshold value of the abnormal electronic seal user's authorization behavior, and record the difference between the two as the abnormal indication value of the electronic seal user's authorization behavior; If the electronic seal user authorization behavior abnormality indication value is greater than or equal to the electronic seal user authorization behavior abnormality indication first threshold value, the electronic seal user's electronic seal remote authorization request is not accepted and sent to the central service manager, and the relevant personnel are notified to contact the electronic seal user; If the electronic seal user authorization behavior abnormality indication value is less than the electronic seal user authorization behavior abnormality indication first threshold value and is greater than or equal to the electronic seal user authorization behavior abnormality indication second threshold value, the electronic seal user's electronic seal remote authorization request is not accepted, and the electronic seal user is listed as an electronic seal user to be evaluated and sent to the central service manager, and the central service manager notifies relevant personnel to send a message to the electronic seal user, and the message is used to notify the electronic seal user to send an electronic seal remote authorization request again; If the electronic seal user's authorization behavior abnormality indication value is less than the electronic seal user's authorization behavior abnormality indication second threshold value, the electronic seal user's electronic seal remote authorization request is accepted.

6. The electronic seal public service management system as claimed in claim 1, characterized in that: The above mentioned method is to conduct abnormal analysis of the electronic seal users to be evaluated, specifically including: Through computer network diagnostic tools, the electronic seal user terminal of the electronic seal user to be evaluated is subjected to route tracing analysis to obtain the endpoint IP of the network node to be evaluated, and the endpoint IP of the network node to be evaluated is compared and analyzed with the machine IP of the electronic seal user terminal. If they are the same, the relevant personnel are notified to receive and handle the electronic seal remote authorization request issued again by the electronic seal user online. If they are not the same, a network fluctuation analysis is performed on the electronic seal user to be evaluated.

7. The electronic seal public service management system as claimed in claim 6, characterized in that: The network fluctuation analysis of the electronic seal users to be evaluated is carried out, including: Obtain the maximum value of the abnormal mark of the electronic seal user authorization behavior of the electronic seal user to be evaluated; By checking the access log on the server side, obtain the number of network connection interruptions for electronic seal remote authorization requests; A filter is set according to the specific port number of the electronic seal user terminal, and the data packet of the electronic seal user terminal is captured through the network monitoring tool and the filter to obtain the loss rate parameter of the data packet of the electronic seal remote authorization request; Directly obtain the number of hops of the network path for data packet transmission of the electronic seal remote authorization request through the network diagnostic tool; By comprehensively analyzing the above parameters, the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is obtained.

8. The electronic seal public service management system as claimed in claim 1, characterized in that: The judgment and adjustment of the authorization of the electronic seal user to be evaluated specifically includes: If the network fluctuation analysis anomaly factor of the electronic seal user to be evaluated is greater than or equal to the network fluctuation analysis anomaly threshold, the electronic seal user to be evaluated is recorded as a first-level electronic seal user to be evaluated.

9. The electronic seal public service management system as claimed in claim 1, characterized in that: The judgment and adjustment of the authorization of the electronic seal user to be evaluated also includes: If the network fluctuation analysis anomaly factor is less than the network fluctuation analysis anomaly threshold, the electronic seal user's re-issued electronic seal remote authorization request will be rejected, and relevant personnel will be notified to manually review the electronic seal user's historical electronic seal user authorization behavior information data online.

10. The electronic seal public service management system as claimed in claim 1, characterized in that: The judgment and adjustment of the authorization of the electronic seal user to be evaluated also includes: After the predefined repeated evaluation time, the network fluctuation analysis anomaly factor of the first-level electronic seal user to be evaluated is evaluated again, recorded as the network fluctuation analysis anomaly factor repeated value. If the network fluctuation analysis anomaly factor repeated value is greater than or equal to the network fluctuation analysis anomaly threshold; Then notify relevant personnel to manually check online through network monitoring tools whether the network path of the data packet transmission of the electronic seal user's electronic seal remote authorization request has been attacked by the network; If so, notify relevant personnel to initiate the network attack emergency plan through the central service manager; If not, the electronic seal user is notified to adjust the network environment where the electronic seal user terminal is located and re-issue the electronic seal remote authorization request, and the relevant personnel are notified to receive and handle the electronic seal remote authorization request re-issued by the electronic seal user online.

Images