Virtual link access method and device and electronic equipment

Abstract

The invention relates to a virtual link access method and device and electronic equipment, and is applied to a server side, and the method comprises the steps: responding to an access request of a user for a virtual link, and obtaining user behavior information and environment information; the user behavior information is corresponding information when a user interacts with a server, and the environment information is information corresponding to a network where the user equipment is located and the user equipment when the user equipment uses the token; generating a token according to the user behavior information and the environment information; the token has a corresponding period of validity and complexity; and sending the token to user equipment of the user, so that the user accesses the virtual link through the user equipment according to the token. According to the embodiment of the invention, the token is dynamically generated according to the user behavior information and the environment information, and the token has the corresponding period of validity and complexity, for example, the complexity of the token can be improved and the period of validity can be shortened in a high-risk scene, so that the security risk can be reduced when the virtual link is accessed based on the token.

Description

Technical Field

[0001] This application belongs to the field of computer networks, and specifically relates to a virtual link access method, device, and electronic device. Background Technology

[0002] In the modern internet environment, protecting data and privacy has become a crucial task. To address this challenge, various security technologies and mechanisms have been introduced, one of which is token technology. A token is a mechanism used for authentication and access control, verifying a user's identity and permissions by generating a unique, time-limited credential.

[0003] However, existing token technologies typically rely on fixed generation rules, which poses security risks when users access the site using tokens generated based on these fixed rules. Summary of the Invention

[0004] The purpose of this application is to provide a virtual link access method, apparatus, and electronic device to overcome or at least partially solve the above-mentioned problems.

[0005] To solve the above-mentioned technical problems, this application is implemented as follows: A virtual link access method, applied on a server side, the method comprising: In response to a user's request to access a virtual link, user behavior information and environment information are obtained; the user behavior information is the information corresponding to the user's interaction with the server, and the environment information is the network used by the user when using the token and the information corresponding to the user's device. A token is generated based on the user behavior information and the environment information; the token has a corresponding validity period and complexity. The token is sent to the user's user device so that the user can access the virtual link through the user device based on the token.

[0006] In the above embodiments, the token is dynamically generated based on user behavior information and environmental information, and the token has a corresponding validity period and complexity. For example, in high-risk scenarios, the complexity of the token can be increased and the validity period can be shortened. Therefore, accessing virtual links based on tokens can reduce security risks.

[0007] In one embodiment of this application, generating a token based on the user behavior information and the environment information includes: The user behavior information and the environmental information are input into a preset risk prediction model to obtain the risk level output by the risk prediction model; wherein, the risk prediction model is trained based on historical user behavior information and historical environmental information; Tokens with corresponding validity periods and complexity are generated based on the risk level.

[0008] In the above embodiments, the generation of tokens is intelligent, and the complexity and validity period of tokens can be dynamically adjusted according to user behavior information and environmental information, thereby improving system security and user experience.

[0009] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method further includes: Obtain relevant information about the token; the relevant information includes at least the token's generation time, user identifier, usage information, and status information; The token and its related information are recorded in the blockchain.

[0010] In the above embodiments, blockchain technology allows for the full recording and auditing of information such as the token's generation time and usage status, effectively preventing potential security vulnerabilities.

[0011] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method further includes: Obtain the relevant information of the token; The relevant information is input into a preset anomaly prediction model to obtain the usage mode output by the anomaly prediction model; When an anomaly is determined to exist in the token based on the usage model, an anomaly alarm is triggered.

[0012] In the above embodiments, by using an AI model (anomaly prediction model) to detect anomalies in tokens, abnormal token behavior can be identified in real time and an alarm can be triggered to prevent token abuse and ensure system security.

[0013] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method further includes: Obtain real-time environmental information about the user's use of the token; The token is adjusted based on the real-time environmental information.

[0014] In the above embodiments, an environment awareness mechanism is deployed on the server side, which can determine environmental variables based on the user's real-time environment information and prior environment information, and dynamically adjust the validity of the token based on the environment variables, thereby improving the security of the system.

[0015] In one embodiment of this application, the server includes a source node of the source link and an intermediate proxy node of the virtual link, wherein the virtual link is generated for the source link; the method further includes: The intermediate proxy node receives the access request for the virtual link sent by the user through the user device. The intermediate proxy node forwards the access request to the source node corresponding to the source link according to a preset load balancing strategy, so that the source node can process the access request.

[0016] In the above embodiments, the performance of virtual links is optimized by employing a multi-layer proxy mechanism, which reduces the pressure of direct access to the source link and enhances the security of data transmission.

[0017] In one embodiment of this application, the method further includes: Obtain the usage and status information of the token; A token usage report is generated based on the usage information and the status information, and the token usage report is provided to a designated processing object so that the designated processing object can identify potential security issues and optimization strategies based on the token usage report.

[0018] In the above embodiments, the real-time monitoring system can track the usage of each virtual link and token, providing instant feedback to the administrator, enabling the administrator to grasp the system's usage in real time and make optimizations, thereby enabling the system to provide users with better access services.

[0019] A virtual link access device, applied on a server side, the device comprising: The information acquisition module is used to acquire user behavior information and environment information in response to a user's access request for a virtual link; the user behavior information is the information corresponding to the interaction between the user and the server, and the environment information is the network used by the user when using the token and the information corresponding to the user device. A token generation module is used to generate a token based on the user behavior information and the environment information; the token has a corresponding validity period and complexity. A virtual link access module is used to send the token to the user's user device, so that the user can access the virtual link through the user device based on the token.

[0020] An electronic device includes: a processor; and a memory for storing processor-executable instructions. The processor is configured to execute the instructions to implement the virtual link access method described above.

[0021] A computer-readable storage medium, when the instructions in the storage medium are executed by the processor of a mobile terminal, enables the mobile terminal to perform the virtual link access method described above.

[0022] The embodiments of this application include at least the following advantages: In this embodiment, in response to a user's request to access a virtual link, user behavior information and environmental information are obtained. The user behavior information corresponds to the information when the user interacts with the server, and the environmental information corresponds to the network or device where the user device is located when using the token. A token with corresponding validity period and complexity is generated based on the user behavior information and environmental information. The token is sent to the user's device so that the user can access the virtual link through the user device using the token. In this embodiment, the token is dynamically generated based on user behavior information and environmental information, and the token has corresponding validity period and complexity. For example, in high-risk scenarios, the complexity of the token can be increased and the validity period shortened. Therefore, accessing the virtual link based on the token can reduce security risks. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments or related technologies of this application, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. It should be noted that the scale in the drawings is for illustration only and does not represent the actual scale.

[0024] Figure 1 This is a flowchart illustrating the steps of a virtual link access method provided in an embodiment of this application. Figure 2 This is a schematic diagram of a smart token generation and scheduling mechanism provided in the embodiments of this application; Figure 3 This is a schematic diagram illustrating a blockchain-based token recording and verification method provided in an embodiment of this application. Figure 4 This is a schematic diagram of an AI-driven abnormal behavior detection method provided in an embodiment of this application; Figure 5 This is a schematic diagram of a dynamic environment-aware failure mechanism provided in an embodiment of this application; Figure 6 This is a schematic diagram illustrating a virtual link optimization and multi-layer proxy provided in an embodiment of this application; Figure 7 This is a schematic diagram of a real-time monitoring and feedback system provided in the embodiments of this application; Figure 8This is a schematic diagram of a blockchain-based smart token generation and scheduling system provided in the embodiments of this application; Figure 9 This is a schematic diagram of the structure of a virtual link access device provided in the embodiments of this application; Figure 10 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0025] The embodiments of this application will be described below with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. This application can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be understood that the preferred embodiments are only for illustrating this application and are not intended to limit the scope of protection of this application.

[0026] It should be noted that the embodiments of this application may involve the use of user data. In practical applications, user-specific personal data may be used in the scheme described herein within the scope permitted by applicable laws and regulations, provided that it complies with the applicable laws and regulations of the country (e.g., with the user's explicit consent, with the user being properly notified, etc.).

[0027] To enable those skilled in the art to better understand the embodiments of this application, some terms or nouns involved in the embodiments of this application are explained below.

[0028] Blockchain: Blockchain is a distributed ledger technology used to record data. Data is stored in blocks, each block containing a set of transaction records, and linked to the previous block using cryptographic techniques to form an immutable chain. Currently, blockchain is widely used in applications such as smart contracts.

[0029] Artificial Intelligence (AI): Artificial intelligence refers to the ability of computer systems to simulate human intelligence, including learning (machine learning), reasoning, problem-solving, and language understanding. AI technology is widely used in various fields, such as speech recognition, image recognition, and natural language processing.

[0030] Machine Learning (ML): Machine learning is a subfield of artificial intelligence that focuses on enabling computers to learn and improve themselves through data without explicit programming. Common machine learning methods include supervised learning, unsupervised learning, and reinforcement learning.

[0031] Big Data: Big data refers to datasets that cannot be efficiently processed using traditional data processing tools. These datasets are characterized by their enormous size, rapid growth rate, and diverse types. Processing big data typically requires specialized technologies and tools, such as distributed computing and data mining.

[0032] Cloud computing is a model for providing computing resources (such as servers, storage, databases, etc.) and services via the Internet. It enables users to access and manage computing resources on demand without investing in and maintaining physical hardware.

[0033] Smart Contract: A smart contract is a computer program that automatically executes, manages, and verifies contract terms on a blockchain. Smart contracts use blockchain technology to ensure the transparency and immutability of contracts.

[0034] Reference Figure 1 The diagram illustrates a flowchart of a virtual link access method provided in an embodiment of this application, applied to a server, and specifically includes the following steps: Step 101: In response to the user's access request for the virtual link, obtain user behavior information and environment information; the user behavior information is the information corresponding to the interaction between the user and the server, and the environment information is the network used by the user when using the token and the information corresponding to the user device.

[0035] In a specific implementation, the embodiments of this application can be used in a token generation and scheduling system, which may include server-side (usually including multiple servers) and user devices, etc., and these devices work together to complete the task.

[0036] A virtual link is a one-time access address generated based on a source link (the actual address pointing to the resource). When a user accesses the virtual link via a mobile phone, tablet, or other device, if the server successfully verifies the token used by the user's device, the device can access the source link corresponding to the virtual link, thereby obtaining resources such as images, audio, and video linked to by the source link. It's important to note that "one-time" means that each generated token and its corresponding virtual link will be invalidated by the server after successfully completing the intended access and download operation, preventing it from being reused to ensure data security.

[0037] In this embodiment of the application, a user can send an access request to the server to access a virtual link through a user device. In response to the access request, the server can obtain user behavior information and environmental information (environmental factors). The user behavior information is the information corresponding to the interaction between the user and the server. For example, the user behavior information may include the frequency and history of the user's access to the virtual link. The environmental information is the information corresponding to the network and user device used by the user when using the token. For example, the environmental information may include the IP address and device information of the user device.

[0038] Step 102: Generate a token based on the user behavior information and the environment information; the token has a corresponding validity period and complexity.

[0039] In this embodiment, the server can generate tokens with corresponding validity periods and complexity based on user behavior information and environmental information to address different usage scenarios and potential risks. The validity period is a lifespan window set by the server for the token; after the validity period expires, the token will automatically become invalid, and the user will no longer be able to access the virtual link using the token. Complexity refers to the token's anti-counterfeiting and anti-cracking strength, which can be determined by the encryption algorithm level, key length, and character set size. For example, a complex, high-level encryption algorithm can be used to encrypt the token, making it difficult for malicious devices to easily crack it.

[0040] Step 103: Send the token to the user's user device so that the user can access the virtual link through the user device based on the token.

[0041] In this embodiment of the application, after generating the token, the server can send the token to the user's device. In this way, the user can use the token on the user device to securely access the virtual link and obtain the required resources.

[0042] In the above embodiments, the token is dynamically generated based on user behavior information and environmental information, and the token has a corresponding validity period and complexity. For example, in high-risk scenarios, the complexity of the token can be increased and the validity period can be shortened. Therefore, accessing virtual links based on tokens can reduce security risks.

[0043] In one embodiment of this application, generating a token based on the user behavior information and the environment information includes: The user behavior information and the environmental information are input into a preset risk prediction model to obtain the risk level output by the risk prediction model; wherein, the risk prediction model is trained based on historical user behavior information and historical environmental information; Tokens with corresponding validity periods and complexity are generated based on the risk level.

[0044] In this embodiment, the server may deploy a preset risk prediction model. The server dynamically adjusts the complexity and validity period of the token based on user behavior information (such as access frequency, history, etc.) and environmental factors (such as IP address, device information, etc.) to cope with different use cases and potential risks.

[0045] In practical applications, the server can first collect data, gathering historical user behavior information (such as the number of historical requests, historical time intervals, etc.) and historical environmental information (such as historical IP addresses, historical device IDs, etc.). Then, the server can use the user behavior information and environmental information to train machine learning algorithms (such as classifiers, regression models, etc.) to obtain a risk prediction model. Subsequently, the risk prediction model can be used to predict the risk level corresponding to different user behavior information and environmental information.

[0046] Specifically, user behavior information and environmental information can be obtained from the current user and input into the risk prediction model to obtain the risk level output by the model. Based on the risk level, tokens with different complexities (encryption levels) and validity periods can be generated. For example, if the risk level is high, a token with high complexity and a short validity period can be generated. Furthermore, in this embodiment, the server can continuously monitor user behavior information and environmental information, and adjust the model parameters of the risk prediction model in real time to adapt to new conditions for risk level prediction.

[0047] In the above embodiments, the generation of tokens is intelligent, and the complexity and validity period of tokens can be dynamically adjusted according to user behavior information and environmental information, thereby improving system security and user experience.

[0048] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method may further include: Obtain relevant information about the token; the relevant information includes at least the token's generation time, user identifier, usage information, and status information; The token and its related information are recorded in the blockchain.

[0049] In this embodiment of the application, blockchain technology is used to record relevant information for each token to ensure the security and traceability of the token records and prevent data tampering.

[0050] Specifically, after each token is generated, relevant information about the token can be obtained. This information can include at least the generation time of each token, user identifier (user ID), usage information (such as the time of access using the token, request frequency, operation type (such as read, write, etc.)), and status information (such as valid, expired, and invalid). This information is then recorded in the blockchain. In this way, the decentralized and tamper-proof characteristics of the blockchain can be used to ensure the security and transparency of the recorded tokens.

[0051] In the above embodiments, blockchain technology allows for the full recording and auditing of information such as the token's generation time and usage status, effectively preventing potential security vulnerabilities.

[0052] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method further includes: Obtain the relevant information of the token; The relevant information is input into a preset anomaly prediction model to obtain the usage mode output by the anomaly prediction model; When an anomaly is determined to exist in the token based on the usage model, an anomaly alarm is triggered.

[0053] In this embodiment, artificial intelligence (AI) technology is used to analyze token usage patterns, automatically identifying and alerting to abnormal behavior, such as token abuse or attacks. Specifically, an anomaly prediction model, i.e., an AI model (such as a model based on deep learning and anomaly detection algorithms), can be used to analyze token usage patterns (such as request frequency and source IP address) based on relevant token information to determine whether the token is abnormal. If anomalies are identified, such as a sudden surge in requests, the token can be marked as a potential security issue. Once an anomaly is detected, the server automatically triggers an anomaly alert, notifying administrators and other relevant personnel or system devices for further processing.

[0054] In the above embodiments, by using an AI model to detect anomalies in tokens, abnormal token behavior can be identified in real time and an alarm can be triggered to prevent token abuse and ensure system security.

[0055] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method may further include: Obtain real-time environmental information about the user's use of the token; The token is adjusted based on the real-time environmental information.

[0056] In this embodiment, the token can be adjusted in real time based on the user's real-time environment information (such as real-time IP address, device information, etc.). For example, the token's validity can be adjusted to ensure that the token automatically expires when the environment changes to prevent risks. Specifically, the real-time environment information of the user's token usage can be continuously monitored, and a threshold or rule for changes in environmental variables of the real-time environment information (IP address changes exceeding a preset number) can be predefined. If it is determined from the real-time environment information that the changes in environmental variables exceed the threshold or rule, it can be determined that there is an anomaly in the token's usage environment. At this time, the token can be adjusted, such as automatically expiring the token or regenerating the token. In this embodiment, the threshold or rule can be updated by continuously collecting system information, thereby effectively responding to complex attacks and new threats.

[0057] In the above embodiments, an environment awareness mechanism is deployed on the server side, which can determine environmental variables based on the user's real-time environment information and prior environment information, and dynamically adjust the validity of the token based on the environment variables, thereby improving the security of the system.

[0058] In one embodiment of this application, the server includes a source node of the source link and an intermediate proxy node of the virtual link, wherein the virtual link is generated for the source link; the method further includes: The intermediate proxy node receives the access request for the virtual link sent by the user through the user device. The intermediate proxy node forwards the access request to the source node corresponding to the source link according to a preset load balancing strategy, so that the source node can process the access request.

[0059] In this embodiment, a multi-layer proxy mechanism optimizes virtual link performance, reduces pressure on the source link, and enhances data transmission security. Specifically, the server may include the source node of the source link and intermediate proxy nodes for the virtual link. By setting multiple intermediate proxy nodes, the load of traffic (such as access requests) can be distributed. In some embodiments, intermediate proxy nodes can distribute the pressure on attackers. Specifically, intermediate proxy nodes can obtain user access requests for virtual links. At this time, intermediate proxy nodes can use load balancing technology, based on a preset load balancing strategy, to distribute access requests to different intermediate proxy nodes, optimizing data transmission efficiency. Intermediate proxy nodes can first verify the access request. After successful verification, if the intermediate proxy node has cached the data required for the access request, it can directly return it to the user device. If the intermediate proxy node does not have cached the data required for the access request, it can send the access request to the source node corresponding to the source link, allowing the source node to process the access request. In addition, intermediate proxy nodes can provide additional security checks and encryption layers to enhance data transmission security.

[0060] In the above embodiments, the performance of virtual links is optimized by employing a multi-layer proxy mechanism, which reduces the pressure of direct access to the source link and enhances the security of data transmission.

[0061] In one embodiment of this application, after generating a token based on the user behavior information and the environment information, the method may further include: Obtain the usage and status information of the token; A token usage report is generated based on the usage information and the status information, and the token usage report is provided to a designated processing object so that the designated processing object can identify potential security issues and optimization strategies based on the token usage report.

[0062] In this embodiment of the application, a real-time monitoring system is established to track the usage of each token, provide immediate feedback based on the usage, and generate detailed token usage reports to help administrators optimize strategies.

[0063] Specifically, the system collects token usage information in real time. This information includes token usage details (such as the time of access, request frequency, and operation type (such as read, write, etc.)) and status information (such as valid, expired, and invalid). The collected token usage and status information is analyzed to generate a detailed token usage report. This report can include token access logs and token trend reports. The token usage report can then be provided to a designated user (such as an administrator) so that the user can identify potential security issues and implement optimization strategies based on the report. This allows the system to provide users with a better access service.

[0064] In the above embodiments, the real-time monitoring system can track the usage of each virtual link and token, providing instant feedback to the administrator, enabling the administrator to grasp the system's usage in real time and make optimizations, thereby enabling the system to provide users with better access services.

[0065] To enable those skilled in the art to better understand the embodiments of this application, a specific example is provided below. The token-based virtual link access process of this application embodiment may specifically include the following parts: 1. Intelligent Token Generation and Scheduling Mechanism 1.1 Function Description: Reference Figure 2This is a schematic diagram of a smart token generation and scheduling mechanism provided in the embodiments of this application. The system dynamically adjusts the complexity and validity period of the token based on user behavior information (such as access frequency, historical records and other user behaviors) and environmental factors (IP address, device information) through advanced algorithms to cope with different use cases and potential risks.

[0066] 1.2 Implementation method: 1) Data collection: Collect user behavior information (such as the number of requests and time intervals) and environmental information (such as IP address and device ID).

[0067] 2) Model training: Use machine learning algorithms (classifiers, regression models) to analyze user behavior information to obtain a risk prediction model, which can be used to predict risk levels.

[0068] 3) Token generation: Based on the analysis results (risk level), generate tokens with different complexities and validity periods.

[0069] 4) Real-time adjustment: The system continuously monitors user behavior and environmental changes, and adjusts the Token parameters in real time to adapt to new conditions.

[0070] 2. Blockchain-based Token Recording and Verification 2.1 Function Description: Reference Figure 3 This is a schematic diagram of a blockchain-based token recording and verification provided in the embodiments of this application. It uses blockchain technology to record the generation and usage status of each token to ensure the security and traceability of token records and prevent data tampering.

[0071] 2.2 Implementation method: 1) Record generation: When each token is generated, its relevant information (generation time, user ID, token value) is recorded on the blockchain.

[0072] 2) Record updates: The use and status changes of tokens (such as expiration or invalidation) will be updated in the blockchain.

[0073] 3) Immutability: By leveraging the decentralized and immutable characteristics of blockchain, the security and transparency of records are ensured.

[0074] 3. AI-driven abnormal behavior detection 3.1 Function Description: Reference Figure 4This is a schematic diagram of an AI-driven abnormal behavior detection method provided in an embodiment of this application. It uses artificial intelligence technology to analyze the usage patterns of tokens, automatically identify and alert to abnormal behaviors, such as abuse or attacks.

[0075] 3.2 Implementation method: 1) Pattern recognition: Apply AI models / anomaly prediction models (deep learning, anomaly detection algorithms) to analyze token usage patterns (such as request frequency, source IP).

[0076] 2) Anomaly detection: Identify abnormal behavior (sudden surge in requests) and mark it as a potential security issue.

[0077] 3) Alarm Trigger: Once abnormal behavior is detected, the system will automatically trigger an alarm to notify the administrator for further processing.

[0078] 4. Dynamic environment-aware failure mechanism 4.1 Function Description: Reference Figure 5 This is a schematic diagram of a dynamic environment-aware failure mechanism provided in this application embodiment. The validity of the token is adjusted in real time according to the user's environmental variables (such as IP address and device information) to ensure that the token automatically expires when the environment changes to prevent risks.

[0079] 4.2 Implementation method: 1) Environment monitoring: Continuously monitor the user's environment variables (such as IP address and device information).

[0080] 2) Rule setting: Define the threshold or rule for changes in environment variables (such as IP address changes exceeding a preset number of times).

[0081] 3) Dynamic adjustment: When abnormal environmental changes are detected, the token is automatically invalidated or regenerated.

[0082] 5. Virtual link optimization and multi-level proxy 5.1 Function Description: Reference Figure 6 This is a schematic diagram of a virtual link optimization and multi-layer proxy provided in the embodiments of this application. The multi-layer proxy mechanism optimizes the performance of the virtual link, reduces the pressure on the source link, and enhances the security of data transmission.

[0083] 5.2 Implementation method: 1) Proxy node settings: Set up multiple intermediate proxy nodes (proxy nodes) to distribute traffic load.

[0084] 2) Traffic optimization: Utilize load balancing technology to distribute requests to different proxy nodes and optimize data transmission efficiency.

[0085] 3) Enhanced security: Proxy nodes can provide additional security checks and encryption layers to enhance the security of data transmission.

[0086] 6. Real-time monitoring and feedback system 6.1 Function Description: Reference Figure 7 This is a schematic diagram of a real-time monitoring and feedback system provided in the embodiments of this application. The system establishes a real-time monitoring system to track the usage of each token, provide immediate feedback, and generate detailed access reports to help administrators optimize strategies.

[0087] 6.2 Implementation method: 1) Data collection: Collect token usage data and system status (status information) in real time.

[0088] 2) Report generation: Analyze the collected data to generate detailed access logs and trend reports.

[0089] 3) Feedback mechanism: Provide reports to administrators and make system adjustments or policy optimizations based on the feedback.

[0090] Reference Figure 8 This diagram illustrates a blockchain-based smart token generation and scheduling system provided in this application embodiment. The system mainly includes the following modules: a smart token generation module, a blockchain recording module, an AI anomaly detection module, a dynamic environment perception module, a multi-layer agent optimization module, and a real-time monitoring module. Specifically: 1) User requests to generate virtual link: The user initiates a request for a virtual link.

[0091] 2) Smart Token Generation Module: The system generates tokens through intelligent algorithms, taking into account user behavior information and environmental information.

[0092] 3) Blockchain Recording Module: The generated tokens and their states are recorded in the blockchain to ensure immutability and traceability.

[0093] 4) User accesses virtual link: The user accesses the virtual link using the generated token.

[0094] 5) Distributed node verification of token: The system verifies the validity of the token through distributed nodes.

[0095] 6) AI Anomaly Detection Module: The AI ​​module can monitor the usage of tokens based on big data technology, detect abnormal behavior, and trigger alarms.

[0096] 7) Dynamic Environment Awareness Module: Dynamically adjusts the validity of the Token based on changes in the environment.

[0097] 8) Multi-layer proxy optimization module: Optimizes the performance of virtual links and the security of data transmission through a multi-layer proxy mechanism. Upon successful download, the token is updated to invalid.

[0098] 9) Real-time monitoring module: Establish a real-time monitoring system to track the usage of tokens and generate access reports.

[0099] 10) Generate access reports and feedback: The system generates detailed access reports and feedback, which are provided to administrators to optimize security policies.

[0100] A blockchain-based smart token generation and scheduling system may include the following specific steps for implementing smart token generation and scheduling: Step 1: The smart token generation module dynamically adjusts the complexity and validity period of the token based on user behavior information and environmental factors. Tokens of varying complexity can be generated based on user behavior information and environmental factors to improve security.

[0101] Step Two: The blockchain recording module uses blockchain technology to record the generation and usage status of each token. The immutability and transparency of the blockchain ensure the security and traceability of token records. Step 3: The AI ​​anomaly detection module uses artificial intelligence to analyze token usage patterns, automatically detects abnormal behavior, and triggers alerts. The AI ​​model can identify unusual access patterns, such as a large number of requests in a short period of time, to prevent token abuse.

[0102] Step 4: The dynamic environment awareness module implements a dynamic invalidation mechanism for environment awareness. The system dynamically adjusts the validity of the token based on environmental variables such as the user's IP address and device information. When abnormal environmental changes are detected, the token is automatically invalidated. Step 5: The multi-layer proxy optimization module employs a multi-layer proxy mechanism to optimize the performance of virtual links. By distributing traffic load through intermediate proxy nodes, it reduces the pressure on direct access to the source link while enhancing data transmission security.

[0103] Step Six: Real-time Monitoring Module. A real-time monitoring system is established to track the usage of each link (including source links and virtual links) and token, providing immediate feedback to administrators. The system automatically generates detailed access reports to help identify potential security issues and optimize strategies. During implementation, the system architecture is as follows: User requests to generate a virtual link → The system generates a token based on intelligent algorithms (such as risk prediction models) and records it on the blockchain → When a user accesses a virtual link, the system verifies the token's validity through distributed nodes → AI is used for anomaly detection and environmental awareness adjustments → Data flow is optimized through multi-layered proxies → The real-time monitoring system generates access reports and feedback.

[0104] In summary, this application's embodiments, by combining blockchain records, AI anomaly detection, and environmental awareness mechanisms, improve the system's ability to identify potential threats and enhance overall security. Overall, compared to existing technologies, this application's embodiments offer advantages such as higher security, a better user experience, greater intelligence, end-to-end monitoring and auditing, and a more flexible environmental awareness mechanism, making it a solution with high practical value.

[0105] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of this application are not limited to the described order of actions, because according to the embodiments of this application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily necessary for the embodiments of this application.

[0106] Reference Figure 9 This diagram illustrates a structural block diagram of a virtual link access device provided in an embodiment of this application, applied to a server. The device may include: The information acquisition module 901 is used to acquire user behavior information and environment information in response to a user's access request for a virtual link; the user behavior information is the information corresponding to the interaction between the user and the server, and the environment information is the network used by the user when using the token and the information corresponding to the user device. The token generation module 902 is used to generate a token based on the user behavior information and the environment information; the token has a corresponding validity period and complexity. The virtual link access module 903 is used to send the token to the user's user device so that the user can access the virtual link through the user device based on the token.

[0107] In one embodiment of this application, the token generation module 902 is used for: The user behavior information and the environmental information are input into a preset risk prediction model to obtain the risk level output by the risk prediction model; wherein, the risk prediction model is trained based on historical user behavior information and historical environmental information; Tokens with corresponding validity periods and complexity are generated based on the risk level.

[0108] In one embodiment of this application, the apparatus further includes: a recording module, used for: Obtain relevant information about the token; the relevant information includes at least the token's generation time, user identifier, usage information, and status information; The token and its related information are recorded in the blockchain.

[0109] In one embodiment of this application, the apparatus further includes: an abnormal behavior prediction module, used for: Obtain the relevant information of the token; The relevant information is input into a preset anomaly prediction model to obtain the usage mode output by the anomaly prediction model; When an anomaly is determined to exist in the token based on the usage model, an anomaly alarm is triggered.

[0110] In one embodiment of this application, the apparatus further includes: a token adjustment module, used for: Obtain real-time environmental information about the user's use of the token; The token is adjusted based on the real-time environmental information.

[0111] In one embodiment of this application, the server includes a source node of the source link and an intermediate proxy node of the virtual link, wherein the virtual link is generated for the source link; the apparatus further includes a load balancing module, used for: The intermediate proxy node receives the access request for the virtual link sent by the user through the user device. The intermediate proxy node forwards the access request to the source node corresponding to the source link according to a preset load balancing strategy, so that the source node can process the access request.

[0112] In one embodiment of this application, the apparatus further includes: a feedback reporting module, used for: Obtain the usage and status information of the token; A token usage report is generated based on the usage information and the status information, and the token usage report is provided to a designated processing object so that the designated processing object can identify potential security issues and optimization strategies based on the token usage report.

[0113] In this embodiment, in response to a user's request to access a virtual link, user behavior information and environmental information are obtained. The user behavior information corresponds to the information when the user interacts with the server, and the environmental information corresponds to the network or device where the user device is located when using the token. A token with corresponding validity period and complexity is generated based on the user behavior information and environmental information. The token is sent to the user's device so that the user can access the virtual link through the user device using the token. In this embodiment, the token is dynamically generated based on user behavior information and environmental information, and the token has corresponding validity period and complexity. For example, in high-risk scenarios, the complexity of the token can be increased and the validity period shortened. Therefore, accessing the virtual link based on the token can reduce security risks.

[0114] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment. This application also provides an electronic device, such as... Figure 10 As shown, it includes a processor 1001, a device interface 1002, a memory 1003, and a bus 1004; Memory 1003 is used to store computer programs; The processor 1001 executes the above steps when executing the program stored in the memory 1003.

[0115] The bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0116] The memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0117] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0118] This application also provides a storage medium that, when the instructions in the storage medium are executed by the processor of an electronic device, enables the electronic device to perform the virtual link access method of the foregoing embodiments.

[0119] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0120] The algorithms and displays provided herein are not inherently related to any particular computer, virtual device, or other equipment. The structure required to construct such a device is obvious from the above description. Furthermore, this application is not directed to any particular programming language. It should be understood that the content of this application described herein can be implemented using various programming languages, and the above description of specific languages ​​is for the purpose of disclosing the best mode of implementation of this application.

[0121] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of this application may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0122] Similarly, it should be understood that, in order to simplify this application and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of this application, various features of this application are sometimes grouped together into a single embodiment, figure, or description thereof. However, this method of disclosure should not be construed as reflecting an intention that the claimed application requires more features than are expressly recited in each claim. Rather, as reflected in the following claims, inventive aspects lie in fewer than all features of a single foregoing disclosed embodiment. Therefore, the claims following the detailed description are hereby expressly incorporated into that detailed description, wherein each claim itself is a separate embodiment of this application.

[0123] Those skilled in the art will understand that modules in the device of the embodiments can be adaptively changed and placed in one or more devices different from that embodiment. Modules, units, or components in the embodiments can be combined into a single module, unit, or component, and further, they can be divided into multiple sub-modules, sub-units, or sub-components. Except where at least some of such features and / or processes or units are mutually exclusive, any combination can be used to combine all features disclosed in this specification (including the accompanying claims, abstract, and drawings) and all processes or units of any method or device so disclosed. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstract, and drawings) may be replaced by an alternative feature that serves the same, equivalent, or similar purpose.

[0124] The various component embodiments of this application can be implemented in hardware, or as software modules running on one or more processors, or a combination thereof. Those skilled in the art will understand that microprocessors or digital signal processors (DSPs) can be used in practice to implement some or all of the functions of some or all of the components in the sequencing device according to this application. This application can also be implemented as a device or apparatus program for performing part or all of the methods described herein. Such an implementation of this application can be stored on a computer-readable medium, or can take the form of one or more signals. Such signals can be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

[0125] It should be noted that the above embodiments are illustrative of this application and not restrictive, and that those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. This application can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0126] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the devices, apparatuses, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0127] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the protection scope of this application.

[0128] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0129] It should be noted that the various data-related processes in the embodiments of this application are carried out in compliance with the relevant data protection laws and policies of the country where the location is located, and with the authorization granted by the owner of the corresponding device.

Claims

1. A method for accessing virtual links, characterized in that, Applied to the server side, the method includes: In response to a user's request to access a virtual link, user behavior information and environment information are obtained; the user behavior information is the information corresponding to the user's interaction with the server, and the environment information is the network used by the user when using the token and the information corresponding to the user's device. A token is generated based on the user behavior information and the environment information; the token has a corresponding validity period and complexity. The token is sent to the user's user device so that the user can access the virtual link through the user device based on the token.

2. The method according to claim 1, characterized in that, The step of generating a token based on the user behavior information and the environment information includes: The user behavior information and the environmental information are input into a preset risk prediction model to obtain the risk level output by the risk prediction model; wherein, the risk prediction model is trained based on historical user behavior information and historical environmental information; Tokens with corresponding validity periods and complexity are generated based on the risk level.

3. The method according to claim 1, characterized in that, After generating the token based on the user behavior information and the environment information, the method further includes: Obtain relevant information about the token; the relevant information includes at least the token's generation time, user identifier, usage information, and status information; The token and its related information are recorded in the blockchain.

4. The method according to claim 1, characterized in that, After generating the token based on the user behavior information and the environment information, the method further includes: Obtain the relevant information of the token; The relevant information is input into a preset anomaly prediction model to obtain the usage mode output by the anomaly prediction model; When an anomaly is determined to exist in the token based on the usage model, an anomaly alarm is triggered.

5. The method according to claim 1, characterized in that, After generating the token based on the user behavior information and the environment information, the method further includes: Obtain real-time environmental information about the user's use of the token; The token is adjusted based on the real-time environmental information.

6. The method according to claim 1, characterized in that, The server includes a source node for the source link and an intermediate proxy node for the virtual link, wherein the virtual link is generated for the source link; the method further includes: The intermediate proxy node receives the access request for the virtual link sent by the user through the user equipment. The intermediate proxy node forwards the access request to the source node corresponding to the source link according to a preset load balancing strategy, so that the source node can process the access request.

7. The method according to claim 1, characterized in that, The method further includes: Obtain the usage and status information of the token; A token usage report is generated based on the usage information and the status information, and the token usage report is provided to a designated processing object so that the designated processing object can identify potential security issues and optimization strategies based on the token usage report.

8. A virtual link access device, characterized in that, Applied to the server side, the device includes: The information acquisition module is used to acquire user behavior information and environment information in response to a user's access request for a virtual link; the user behavior information is the information corresponding to the interaction between the user and the server, and the environment information is the network used by the user when using the token and the information corresponding to the user device. A token generation module is used to generate a token based on the user behavior information and the environment information; the token has a corresponding validity period and complexity. A virtual link access module is used to send the token to the user's user device, so that the user can access the virtual link through the user device based on the token.

9. An electronic device, characterized in that, include: processor; Memory used to store processor-executable instructions; The processor is configured to execute the instructions to implement the virtual link access method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, When the instructions in the storage medium are executed by the processor of the mobile terminal, the mobile terminal is able to perform the virtual link access method as described in any one of claims 1 to 7.

Images