Security protection method and device for IOT device communication and storage medium

Abstract

The invention discloses a security protection method for IOT (Internet of Things) equipment communication, which is characterized in that a Wasm file is integrated through IOT equipment, packaged by using a WebAssembly technology and encrypted by using a cryptographic algorithm combination, so as to realize communication data protection between servers, and comprises the following steps of: authenticating the identity of the IOT equipment, integrating an asymmetric encryption algorithm certificate in a Wasm file generation process by using the WebAssembly technology, and encrypting the Wasm file by using the WebAssembly technology. The hardware identifier of the IOT equipment is read at the server side, and the certificate contains an asymmetric encryption algorithm public key; data transmission and IOT identity authentication are executed, data content of data transmission is subjected to omnibearing dynamic encryption, and an integrity verification mechanism is used to prevent an attacker from illegally tampering the transmission data under an unauthorized condition. According to the method, computing resources and storage space required by IOT equipment safety protection can be remarkably reduced, and meanwhile, the execution efficiency of the safety strategy is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data protection for Internet of Things communications, and in particular to a security protection method, device and storage medium for IOT device communications. Background Art

[0002] WebAssembly is a safe, portable, low-level code format designed for efficient execution and compact representation. As an emerging low-level compilation target, it can provide a portable target code, allowing programs written in different programming languages ​​to allow codes in multiple programming languages ​​to be compiled into a unified binary format and run on multiple platforms without modifying the source code, making it cross-platform and high-performance, providing new possibilities for the construction of modern Internet of Things (IoT) applications. At this time, the binary file compiled by WebAssembly technology is generally called Wasm file.

[0003] With the rapid development of Internet of Things (IoT) technology, IoT devices have been widely used in various fields, from smart homes to industrial automation. Their security and stability have become crucial considerations. However, IoT devices are often limited by computing power and storage space, and have the characteristics of distributed deployment and strong diversity, which makes it difficult for traditional network security protection methods to be directly applied to the field of IoT.

[0004] At the same time, the security protection methods for IOT devices in the existing technology mainly include software-based security policies, hardware-based security modules, and cloud-based security services. However, these methods often have problems such as large computational complexity, high resource consumption, and poor flexibility, and it is difficult to meet the needs of IOT devices for efficient and lightweight security protection.

[0005] To this end, this application specifically proposes an efficient, lightweight and suitable security protection method for IOT device communications to solve the above technical problems. Summary of the invention

[0006] The main purpose of the present invention is to provide a security protection method for IOT device communication based on WebAssembly, to provide an efficient, flexible and easy-to-popularize security protection solution for the field of Internet of Things, to solve the technical problems raised in the background technology, and to ensure the normal operation and data security of IOT devices.

[0007] The present invention adopts the following technical solutions to solve the above technical problems:

[0008] A security protection method for IOT device communication, which integrates wasm files of IOT devices, uses WebAssembly technology to encapsulate and encrypts them using cryptographic algorithms to achieve communication data protection between servers, including IOT device initialization, IOT device identity authentication, data transmission, and user access control, wherein:

[0009] IOT device identity authentication uses WebAssembly technology to integrate asymmetric encryption algorithm certificates in the wasm file generation process, and reads the IOT device hardware identification on the server side. The certificate contains the asymmetric encryption algorithm public key;

[0010] Data transmission is performed after IOT identity authentication. The data content of the data transmission is fully dynamically encrypted, and an integrity check mechanism is used to prevent attackers from illegally tampering with the transmitted data without authorization.

[0011] Preferably, the specific protection process of data transmission includes:

[0012] S1. Perform dual identity authentication on the IOT device on the server side, and execute the following steps after the server responds to the identity authentication result;

[0013] S2.IOT devices report plaintext data to the wasm file, and the wasm file returns ciphertext data after double encryption;

[0014] S3. After the IOT device obtains the encrypted data, it reports the encrypted data to the server;

[0015] S4. The server performs decryption verification based on the obtained ciphertext data to obtain the decrypted plaintext data, and reports the response result to the IOT device.

[0016] Preferably, the dual identity authentication in step S1 includes identity authentication through an asymmetric encryption algorithm certificate and an IOT device hardware identifier.

[0017] Preferably, the specific encryption method of double encryption in step S2 includes:

[0018] L1. The reported data is encrypted using a symmetric encryption algorithm to obtain ciphertext data a;

[0019] L2. When the wasm file obtains a request to report data, it randomly generates a key and an initial vector of the encryption algorithm, and uses an asymmetric encryption algorithm to encrypt data using a public key to obtain ciphertext data b;

[0020] L3. The transmission data, symmetric encryption key, initial vector and IOT device hardware identification are processed using a hash algorithm or a message authentication algorithm to obtain the ciphertext data c.

[0021] Preferably, the specific operation steps of decryption verification in step S4 include:

[0022] After the double identity authentication is completed, the ciphertext data b is decrypted using the private key of the asymmetric encryption algorithm to obtain the key and initial vector of the symmetric encryption algorithm. The ciphertext data a is then decrypted to obtain the final reported data of the IOT device. Finally, the ciphertext data c is decrypted for data integrity verification.

[0023] Preferably, the data sent by the server-side instruction is returned to the IOT device using the same encryption method as in step S2, and the IOT device decrypts the data through the wasm file to obtain the plaintext data sent by the instruction.

[0024] Preferably, after completing the dual identity authentication and data decryption, the server uses the same encryption method in the L3 step to calculate the ciphertext data d, and performs an identical comparison and verification on the ciphertext data c and the ciphertext data d to determine whether the transmitted data has been illegally tampered with during transmission.

[0025] Preferably, after the dual identity authentication is completed, the server instructs the data to be sent and uses the private key of the asymmetric encryption algorithm to decrypt the ciphertext data b, obtain the key and initial vector of the symmetric encryption algorithm, and then decrypt the ciphertext data a to obtain the final return data of the IOT device. Finally, the IOT device decrypts the ciphertext data d through the wasm file to perform data integrity verification.

[0026] On the other hand, the present invention further discloses a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the above method.

[0027] On the other hand, the present invention further discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above method.

[0028] It can be seen from the above technical solution that the present invention provides a security protection method for IOT device communication. Compared with the prior art, the present invention has the following advantages:

[0029] 1. By utilizing the efficient execution characteristics, cross-platform compatibility and low resource consumption of WebAssembly, the present invention can significantly reduce the computing resources and storage space required for the security protection of IOT devices, while improving the execution efficiency of security policies, compared with traditional data protection methods for IoT device communications.

[0030] 2. Based on the diversity of IOT devices and the wide range of application scenarios, the present invention utilizes the portability and modular design of WebAssembly to make the overall security protection method easy to customize and expand, and facilitate multi-terminal users to flexibly select and configure security policies according to their needs to adapt to different security threats and protection requirements.

[0031] 3. The present invention applies WebAssembly to data security protection of IOT devices, which helps to lower the technical threshold and cost of security protection of IOT devices and improve the security and stability of the entire Internet of Things ecosystem.

[0032] 4. In the process of data protection, the present invention uses WebAssembly technology to encapsulate and utilizes multiple cryptographic algorithms for combined encryption, which can achieve multi-faceted security protection effects and significantly improve the security and reliability of communication between IOT devices and the Internet of Things platform.

[0033] 5. The present invention ensures the integrity and security of transmitted data by allowing the encryption keys and initialization vectors that affect the encryption results to be generated in the form of random numbers, and all encryption keys and initialization vectors are used only once, thereby preventing attackers from illegally tampering with the transmitted data without authorization.

[0034] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become easy to understand through the following description. Of course, it is not necessary to achieve all of the advantages described above simultaneously for any product implementing the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The drawings constituting a part of the present application are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0036] Figure 1 It is a timing diagram of the safety protection process of the present invention;

[0037] Figure 2 It is a schematic diagram of the overall process of data transmission of the present invention. DETAILED DESCRIPTION

[0038] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. In the absence of conflict, the embodiments in this application and the features in the embodiments can be combined with each other. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0039] In the embodiment, see Figure 1 to Figure 2 .

[0040] Since WebAssembly technology can achieve high-performance and efficient compilation and running of code across platforms without modifying the source code, and significantly improve the execution efficiency of security modules while reducing resource consumption, reference Figure 1 and Figure 2 The embodiment of the present invention proposes a security protection method for IOT device communication based on WebAssembly, which realizes the security protection of IOT device communication from three levels by integrating wasm files (binary files compiled by WebAssembly technology) into IOT devices, and by applying WebAssembly to the data security protection of IOT devices, it helps to reduce the technical threshold and cost of IOT device security protection, and also improve the security and stability of the entire Internet of Things ecosystem, specifically including: IOT device identity authentication, transmission data encryption, and transmission data tamper-proof, among which:

[0041] (1) IOT device authentication

[0042] Use WebAssembly technology to integrate asymmetric encryption algorithm certificates (the certificate contains the asymmetric encryption algorithm public key) in the wasm file generation process, and read the IOT device hardware identification (IMEI or device serial code, etc.) on the server side;

[0043] When the server authenticates the IoT device, dual authentication is performed using an asymmetric encryption algorithm certificate and the IoT device hardware identifier.

[0044] (2) Transmission data encryption

[0045] Encrypt the content of the transmitted data using an encryption algorithm and encryption strength that meets the preset standards;

[0046] By integrating symmetric encryption algorithms and asymmetric encryption algorithms in wasm files through WebAssembly technology, IoT devices directly use symmetric encryption algorithms to encrypt and obtain ciphertext data a when transmitting data;

[0047] At the same time, in order to ensure the security of the key and initial vector of the symmetric encryption algorithm, each time the IoT device initiates a request, the key and initial vector of the symmetric encryption algorithm are randomly generated in the wasm file, and the asymmetric encryption algorithm is used to encrypt the public key to obtain the ciphertext data b;

[0048] Finally, the ciphertext data a encrypted by the symmetric encryption algorithm and the ciphertext data b encrypted by the asymmetric encryption algorithm are all sent to the server;

[0049] After completing the first step of double identity authentication, the server uses the asymmetric encryption algorithm private key to decrypt the ciphertext data b, obtains the key and initial vector of the symmetric encryption algorithm, and then decrypts the ciphertext data a to obtain the final reported data of the IoT device;

[0050] At the same time, the data sent by the server command is also returned to the IoT device in the same encryption method, and the IoT device decrypts the data through the wasm file to obtain the plaintext data sent by the command;

[0051] (3) Anti-tampering of transmitted data

[0052] Adopt integrity verification mechanisms based on cryptographic algorithms or other integrity verification mechanisms with corresponding security strength to ensure the integrity and security of transmitted data, so as to prevent attackers from illegally tampering with transmitted data without authorization;

[0053] The IoT device uses WebAssembly technology to implement a hash algorithm or a message authentication code algorithm as an integrity verification algorithm in the wasm file, and calculates the ciphertext data c after string concatenation of the transmission data, symmetric encryption algorithm key, initial vector, IoT device hardware identification (IMEI or device serial code, etc.) of the IoT device;

[0054] After completing the first two steps of dual identity authentication and data decryption, the server uses the same integrity verification mechanism to calculate the ciphertext data d, and then compares and verifies the ciphertext data c and ciphertext data d to determine whether the transmitted data has been illegally tampered with during transmission;

[0055] At the same time, the data sent by the server command is also returned to the IOT device using the same integrity verification mechanism, and the IOT device performs integrity verification through the wasm file.

[0056] In a specific implementation process, Figure 1 and Figure 2As shown, the security protection method integrates wasm files through IOT devices, uses WebAssembly technology to encapsulate and uses cryptographic algorithms for combined encryption to achieve communication data protection between servers, which can achieve multi-faceted security protection effects and significantly improve the security and reliability of communication between IOT devices and the Internet of Things platform, including but not limited to key links such as IOT device initialization, IOT device identity authentication, data transmission, and user access control. In these key links, WebAssembly technology is used to encapsulate and multiple cryptographic algorithms are used for combined encryption, thereby achieving multi-faceted security protection effects and significantly improving the security and reliability of communication between IOT devices and the Internet of Things platform.

[0057] The data transmission is executed after IOT identity authentication, the data content of the data transmission is dynamically encrypted in all directions, and the integrity verification mechanism is used to prevent attackers from illegally tampering with the transmitted data without authorization. The specific protection process of data transmission includes: performing double identity authentication on the IOT device on the server side, after the server side responds to the identity authentication result, the IOT device reports the plaintext data to the wasm file, the wasm file returns the ciphertext data after double encryption, and after the IOT device obtains the ciphertext data, it reports the ciphertext data to the server side, the server side performs decryption verification based on the obtained ciphertext data to obtain the decrypted plaintext data, and reports the response result to the IOT device.

[0058] Therefore, by utilizing the efficient execution characteristics, cross-platform compatibility and low resource consumption of WebAssembly, this method can significantly reduce the computing resources and storage space required for the security protection of IOT devices and improve the execution efficiency of security policies compared to traditional data protection methods for IoT device communications. At the same time, based on the diversity of IOT devices and the wide range of application scenarios, the portability and modular design of WebAssembly can also make the overall security protection method easy to customize and expand, making it convenient for multiple users such as IOT device manufacturers, system integrators and end users to flexibly select and configure security policies according to their needs to adapt to different security threats and protection requirements.

[0059] In summary, this method can be applied to IOT device communication scenarios, including but not limited to communication with the Internet of Things platform, edge gateway communication, communication between IOT devices, etc.

[0060] The specific encryption method of double encryption includes: the reported data is encrypted by a symmetric encryption algorithm to obtain ciphertext data a; when the wasm file obtains a request for reported data, the key and initial vector of the encryption algorithm are randomly generated, and the asymmetric encryption algorithm is used to encrypt the data through the public key to obtain the ciphertext data b; the transmission data, symmetric encryption key, initial vector and IOT device hardware identification are processed using a hash algorithm or a message authentication algorithm to obtain the ciphertext data c.

[0061] It can be supplemented that the random generation of encryption algorithm keys and initial vectors is generally achieved by integrating a reliable pseudo-random number generator in the Wasm module, where the key length is determined based on the preset requirements of the selected symmetric encryption algorithm, and the random number generator is used to fill a byte array of a specified length.

[0062] The specific operation steps of decryption verification include: after the double identity authentication is completed, use the asymmetric encryption algorithm private key to decrypt the ciphertext data b to obtain the key and initial vector of the symmetric encryption algorithm, then decrypt the ciphertext data a to obtain the final reported data of the IOT device, and finally decrypt the ciphertext data c for data integrity verification.

[0063] Since the encryption security of a symmetric encryption algorithm will no longer exist when the key is leaked, the above method adopts an all-round dynamic encryption system. By generating the encryption keys and initialization vectors that affect the encryption results in the form of random numbers, and all encryption keys and initialization vectors are only used once, it can ensure that the encryption algorithm keys and initialization vectors used for each client request and server response are different, and the ciphertext itself is not fixed, thereby ensuring the integrity and security of the transmitted data, and preventing attackers from illegally tampering with the transmitted data without authorization.

[0064] In addition, in the specific implementation process in this field, this method can provide a standardized process for IOT device security protection technology based on WebAssembly, and provide the industry with a unified and reliable security protection framework, which not only helps to reduce the technical threshold and cost of IOT device security protection, but also promotes the widespread popularization and application of security protection technology, improves the security and stability of the entire Internet of Things ecosystem, and brings significant economic and social benefits to device manufacturers, service providers and end users.

[0065] On the other hand, based on the above-mentioned WebAssembly-based IOT device communication security protection method, an operating system capable of executing the method can be further provided, and the system is provided with a control module for managing the encryption algorithm key and initial vector content and life cycle. At the same time, when necessary, an anomaly detection module can be further provided based on the system to automatically detect and respond to potential security threats, such as multiple authentication failures, data tampering, etc., and perform corresponding operations according to preset plans.

[0066] On the other hand, the present invention further discloses a computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the processor executes the steps of the above method.

[0067] On the other hand, the present invention further discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above method.

[0068] In another embodiment provided in the present application, a computer program product including instructions is also provided, which, when executed on a computer, enables the computer to execute any of the security protection methods for IOT device communications in the above embodiments.

[0069] It is understandable that the system provided by the embodiment of the present invention corresponds to the method provided by the embodiment of the present invention, and the explanation, examples and beneficial effects of the relevant contents can refer to the corresponding parts in the above method.

[0070] The embodiment of the present application also provides an electronic device, including a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus.

[0071] Memory, used to store computer programs;

[0072] The processor is used to implement the above-mentioned security protection method for IOT device communication when executing the program stored in the memory.

[0073] The communication bus mentioned in the above electronic device can be a peripheral component interconnect standard bus or an extended industrial standard architecture bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc.

[0074] The communication interface is used for communication between the above electronic device and other devices.

[0075] The memory may include a random access memory RAM, or may include a non-volatile memory NVM, such as at least one disk memory. Optionally, the memory may also be at least one storage device located far away from the aforementioned processor.

[0076] The above-mentioned processor can be a general-purpose processor, including a central processing unit, a network processor, etc.; it can also be a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component.

[0077] It should also be noted that electronic devices also include terminal devices, which can also be called terminals, user equipment, mobile platforms, mobile terminals, etc. Terminal devices can be mobile phones, smart TVs, wearable devices, tablet computers, computers with wireless transceiver functions, virtual reality terminal devices, augmented reality terminal devices, wireless terminals in industrial control, wireless terminals in unmanned driving, wireless terminals in remote surgery, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, etc. The embodiments of this application do not limit the specific technology and specific device form used by the terminal devices.

[0078] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or a data center that includes one or more available media integration. The available medium can be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium, or a semiconductor medium (e.g., a solid-state hard disk), etc.

[0079] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

[0080] In addition, it should be noted that if the embodiments of the present invention involve directional indications (such as up, down, left, right, front, back, etc.), the directional indications are only used to explain the relative position relationship, movement status, etc. between the components in a certain specific posture. If the specific posture changes, the directional indication will also change accordingly.

[0081] In addition, if there are descriptions involving "first", "second", etc. in the embodiments of the present invention, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the meaning of "and / or" appearing in the full text includes three parallel schemes. Taking "A and / or B" as an example, it includes scheme A, or scheme B, or schemes that A and B meet at the same time. In addition, in the embodiments of the present invention, "multiple" refers to more than two. In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on the ability of ordinary technicians in the field to implement. When the combination of technical solutions is contradictory or cannot be implemented, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

Claims

1. A security protection method for IOT device communication, characterized in that: The wasm file integrated by IOT devices is encapsulated using WebAssembly technology and encrypted using cryptographic algorithms to achieve communication data protection between servers, including IOT device initialization, IOT device identity authentication, data transmission, and user access control, among which: IOT device identity authentication uses WebAssembly technology to integrate asymmetric encryption algorithm certificates in the wasm file generation process, and reads the IOT device hardware identification on the server side. The certificate contains the asymmetric encryption algorithm public key; Data transmission is performed after IOT identity authentication. The data content of the data transmission is fully dynamically encrypted, and an integrity check mechanism is used to prevent attackers from illegally tampering with the transmitted data without authorization.

2. The security protection method for IOT device communication according to claim 1, characterized in that: The specific protection process of data transmission includes: S1. Perform dual identity authentication on the IOT device on the server side, and execute the following steps after the server responds to the identity authentication result; S2.IOT devices report plaintext data to the wasm file, and the wasm file returns ciphertext data after double encryption; S3. After the IOT device obtains the encrypted data, it reports the encrypted data to the server; S4. The server performs decryption verification based on the obtained ciphertext data to obtain the decrypted plaintext data, and reports the response result to the IOT device.

3. The security protection method for IOT device communication according to claim 2, characterized in that: The dual identity authentication in step S1 includes identity authentication through an asymmetric encryption algorithm certificate and an IOT device hardware identifier.

4. The security protection method for IOT device communication according to claim 2, characterized in that: The specific encryption method of double encryption in step S2 includes: L1. The reported data is encrypted using a symmetric encryption algorithm to obtain ciphertext data a; L2. When the wasm file obtains a request to report data, it randomly generates a key and an initial vector of the encryption algorithm, and uses an asymmetric encryption algorithm to encrypt data using a public key to obtain ciphertext data b; L3. The transmission data, symmetric encryption key, initial vector and IOT device hardware identification are processed using a hash algorithm or a message authentication algorithm to obtain the ciphertext data c.

5. The security protection method for IOT device communication according to claim 4, characterized in that: The specific operation steps of decryption verification in step S4 include: After the double identity authentication is completed, the ciphertext data b is decrypted using the private key of the asymmetric encryption algorithm to obtain the key and initial vector of the symmetric encryption algorithm. The ciphertext data a is then decrypted to obtain the final reported data of the IOT device. Finally, the ciphertext data c is decrypted for data integrity verification.

6. The security protection method for IOT device communication according to claim 4, characterized in that: The server-side instruction data is returned to the IOT device using the same encryption method as in step S2, and the IOT device decrypts the data through the wasm file to obtain the plaintext data issued by the instruction.

7. The security protection method for IOT device communication according to claim 6, characterized in that: After completing the dual identity authentication and data decryption, the server uses the same encryption method in the L3 step to calculate the ciphertext data d, and performs an identical comparison and verification on the ciphertext data c and the ciphertext data d to determine whether the transmitted data has been illegally tampered with during transmission.

8. The security protection method for IOT device communication according to claim 7, characterized in that: After the dual identity authentication is completed, the server instructs the data to be sent and uses the private key of the asymmetric encryption algorithm to decrypt the ciphertext data b, obtains the key and initial vector of the symmetric encryption algorithm, and then decrypts the ciphertext data a to obtain the final return data of the IOT device. Finally, the IOT device decrypts the ciphertext data d through the wasm file to perform data integrity verification.

9. A computer-readable storage medium, characterized in that: A computer program is stored, and when the computer program is executed by a processor, the processor is caused to perform the steps of the method according to any one of claims 1 to 8.

10. A computer device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method according to any one of claims 1 to 8.

Images