System for information security management of software development data

Abstract

The invention relates to the technical field of software development. The invention provides an information security management system for software development data. The system comprises a user operation end used for submitting a login request, applying for accessing and reading a specified file, receiving permission coding and decoding information and executing a reading or operation request of a corresponding file; the mobile management terminal is used for generating and forwarding authority information of a user and authority information of files which are applied to access and read, generating decoding information of each corresponding file according to the authority information and sending the decoding information to the user operation terminal; the remote terminal is used for receiving and processing the information forwarded by the mobile management terminal and receiving the access reading information sent by the user operation terminal; in this way, leakage of software development data when a manager goes out is effectively avoided, and the safety of the data is guaranteed.

Description

Technical Field

[0001] The embodiments of the present invention generally relate to the field of software development technology, and more particularly to an information security management system and apparatus for software development data. Background Technology

[0002] In a mature software development company, common code snippets are typically collected, archived, and componentized. These components are then categorized according to business needs to form different business components. Developers can then select the appropriate business components to use as needed, improving the efficiency and quality of software project development. Furthermore, the componentization of these code snippets allows the company to establish its own intellectual property system, which is gradually accumulated and strengthened.

[0003] In the software development process, whether in the early, middle, or late stages, the support of a management system is indispensable. However, for managers, the supervision of the management system is poor when they are away from home. Managers often need to access the company system through insecure public networks, and core assets such as source code and design documents are at high risk of being stolen or leaked, posing security risks. Summary of the Invention

[0004] To address the above issues, this invention transmits data wirelessly through a portable mobile management terminal, a remote terminal, and a user operating terminal. This allows the mobile management terminal to access real-time status information of the user's access terminal while separating access permissions from file decoding permissions, preventing code leaks when administrators are away. Furthermore, when the status information of the accessed user operating terminal triggers a danger signal, it can promptly alert the administrator for assistance, thereby greatly improving the administrator's ability to monitor software information while away and preventing information leaks.

[0005] According to an embodiment of the present invention, a system for information security management of software development data is provided. The system includes:

[0006] User interface: Used to submit login requests, request access to read specified files, receive permission encoding and decoding information, and execute corresponding file read or operation requests;

[0007] Mobile management terminal: includes a permission information identification module and a software information encryption management module, used to generate and forward the user's permission information and the file permission information requested for access and reading, and generate decoding information for each corresponding file based on the user's permission information and the file permission information requested for access and reading and send it to the user's operating terminal;

[0008] The permission information recognition module is used to obtain user login information. When a data access and read request is received, it determines whether the user has the operation permission based on the user's identity information and generates the user's permission information and logs. The software information encryption management module is used to manage the permissions of software information and uses an asymmetric encryption algorithm to encrypt sensitive software information.

[0009] Remote terminal: Used to receive and process information forwarded by the mobile management terminal, and to receive information sent by the user terminal for access and reading.

[0010] Mobile management terminals, remote terminals, and user operation terminals transmit data wirelessly.

[0011] Furthermore, the user login information in the mobile management terminal includes: user identity information, user permission level, target file request information, and file access permission information requested for reading. The user identity information includes: username, ID, and IMSI. The log includes: ID, access time, target file path, access type: read / write, permission judgment result, and operation result.

[0012] The permission information recognition module includes an identity authentication submodule, an information upload submodule, a requirement submodule, and a retrieval submodule;

[0013] The identity authentication submodule includes: an identity authentication unit, an access control unit, and an operation log unit;

[0014] The information uploading submodule is used to obtain and report the IP address, MAC address, VNI number, and IP address of the VETP where the virtual machine is located when each virtual machine joins the VXLAN network.

[0015] The identity authentication submodule is used to receive and store key information of at least one protected software and information authentication parameters required to execute the key information, and to authenticate the information authentication parameters and IMSI information simultaneously; the key information is the functional parameters of the software information; the information authentication parameters are user identifiers and / or software information;

[0016] The demand submodule is used to receive user operation demand information for accessing the target file and to pass the corresponding permission judgment request to the identity authentication submodule.

[0017] The retrieval submodule is used to query information about files that the user has authorized access to, and to match a set of operable target files for subsequent permission judgment or log generation.

[0018] Furthermore, the specific steps of the encryption process described in the software information encryption management module are as follows:

[0019] Step S01: Generate a key pair: Generate a positive integer e and a positive decimal d, such that... , where s is the preset decimal place limit, the subscript N indicates that the calculation in the parentheses will ultimately retain N decimal places, k is a positive integer; the positive integer e is stored as the key, an integer n is generated, n represents the length of the plaintext when represented in decimal, and {d,s,N,n} is published as the public key;

[0020] Step S02 Encryption: The encryptor generates a decimal m such that... And m has no more than s decimal places, M is plaintext, and the encryption method calculates... C represents the ciphertext.

[0021] Furthermore, the mobile management terminal has the authority to operate and read status information sent by the remote terminal.

[0022] Furthermore, the process of generating decoding information for each corresponding file based on permission information in the mobile management terminal is as follows: calculating intermediate values ​​using a double-angle formula. Where e is a multiple; by To obtain the intermediate value ;calculate That is, the plaintext M is obtained.

[0023] Furthermore, the mobile management terminal also includes an SDK distribution module and an information reinforcement module;

[0024] The SDK distribution module is used to harden AAR and JAR files using DEX packing, DEX source code separation and dynamic restoration, DEXVMP, and anti-debugging technologies, and to provide security protection for mobile management terminals, including:

[0025] Protect resource files, SO files, and runtime data files in the mobile management terminal;

[0026] Monitor the memory space of the mobile management terminal;

[0027] Collect fault information from mobile management terminals;

[0028] Obtain the security posture of the mobile management terminal, including: the source of the attack, the form of the attack, the operating environment, and related information after the attack when the mobile management terminal is attacked;

[0029] The information hardening module is used to harden the security of the mobile management terminal.

[0030] Furthermore, the remote terminal processes the information forwarded by the mobile management terminal as follows: Based on the user's identity information, it confirms whether the user is permitted to perform operations on files in the requested access list. If so, the remote terminal sends the user's login information to the mobile management terminal. Based on the user's permission information and the file permission information requested for access, an access permission code is generated for each file. This access permission code is sent to the user's terminal, and the mobile management terminal sends the decoding information of the files for which the user has read permissions to the user's terminal. The access permission code includes a read permission code and an identification code corresponding to multiple permission levels.

[0031] Furthermore, the method for confirming whether a user is allowed to perform operations on files in the information list requested for access and reading in the remote terminal is as follows: confirming whether the user's identity information matches the identification code of the corresponding permission level of the permission code; if they match, the user has read permission; otherwise, the user does not. Further, the remote terminal includes:

[0032] Storage submodule: Used to store user identity information, permission judgment results, access control policies, and a list of files requested by the user;

[0033] Transmission submodule: Used to send the user access permission judgment result and the corresponding access read permission code to the mobile management terminal or user operation terminal;

[0034] The display submodule is used to show the file information requested by the user, the permission verification status, and the operation log, and to allow administrators to review and confirm.

[0035] Furthermore, after generating the access and read permission code corresponding to each file in the remote terminal, the remote terminal generates an access and read log and generates a confirmation information identifier. When the time difference between the access and read information sent by the user terminal and the access and read information generated by the remote terminal is greater than a preset time threshold, an early warning information is issued.

[0036] The above-mentioned English abbreviations have the following meanings:

[0037] SDK: Software Development Kit

[0038] DEX: Dex Virtual Machine Protection, a DEX bytecode protection technology based on virtual machine mechanisms.

[0039] DEXVMP: Virtual Machine Protection

[0040] AAR: Android Application Archive, Android application library

[0041] JAR: Java Archive, a software package file format.

[0042] This invention transmits data wirelessly through a portable mobile management terminal, a remote terminal, and a user operating terminal. It allows real-time monitoring of user access status information via the mobile management terminal, while separating access permissions from file decoding permissions to prevent code leakage when administrators are away. When the status information of the accessed user operating terminal triggers a danger signal, it can promptly alert the administrator for assistance, greatly improving the monitoring of software information by administrators when they are away and preventing information leakage.

[0043] It should be understood that the description in the Summary of the Invention is not intended to limit the key or essential features of the embodiments of the present invention, nor is it intended to restrict the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0044] The above and other features, advantages, and aspects of the various embodiments of the present invention will become more apparent from the accompanying drawings and the following detailed description. Wherein:

[0045] Figure 1 A system block diagram for information security management of software development data according to an embodiment of the present invention is shown;

[0046] Figure 2 A system block diagram of an authorization information recognition module according to an embodiment of the present invention is shown;

[0047] Figure 3 A system block diagram of a remote terminal according to an embodiment of the present invention is shown;

[0048] Figure 4 A schematic diagram of the decryption process of the asymmetric encryption algorithm according to an embodiment of the present invention is shown. Detailed Implementation

[0049] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0050] According to an embodiment of the present invention, a system for information security management of software development data is proposed. By transmitting data wirelessly through a portable mobile management terminal, a remote terminal, and a user operating terminal, the system allows real-time status information of the user access terminal to be accessed via the mobile management terminal. Access permissions are separated from file decoding permissions to prevent code leakage when administrators are away. Furthermore, when the status information of the accessed user operating terminal triggers a danger signal, it can promptly alert the administrator for assistance, thereby greatly improving the monitoring of software information by administrators when they are away and preventing information leakage.

[0051] The principles and spirit of the present invention will be explained in detail below with reference to several representative embodiments.

[0052] Figure 1 This is a schematic diagram of a system flow diagram for information security management of software development data according to an embodiment of the present invention. The system includes:

[0053] User interface: Used to submit login requests, request access to read specified files, receive permission encoding and decoding information, and execute corresponding file read or operation requests;

[0054] Mobile management terminal: includes a permission information identification module and a software information encryption management module, used to generate and forward the user's permission information and the file permission information requested for access and reading, and generate decoding information for each corresponding file based on the user's permission information and the file permission information requested for access and reading and send it to the user's operating terminal;

[0055] The permission information recognition module is used to obtain user login information. When a data access and read request is received, it determines whether the user has the operation permission based on the user's identity information and generates the user's permission information and logs. The software information encryption management module is used to manage the permissions of software information and uses an asymmetric encryption algorithm to encrypt sensitive software information.

[0056] Remote terminal: Used to receive and process information forwarded by the mobile management terminal, and to receive information sent by the user's operating terminal for access and reading.

[0057] It should be noted that although the operation of the system of the present invention has been described in a specific order in the above embodiments and accompanying drawings, this does not require or imply that the operations must be performed in that specific order, or that all the operations shown must be performed to achieve the desired result. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step, and / or one step may be broken down into multiple steps.

[0058] To provide a clearer explanation of the system for information security management of software development data, a specific embodiment will be described below. However, it is worth noting that this embodiment is only for better illustrating the present invention and does not constitute an improper limitation of the present invention.

[0059] The following example will further illustrate the system used for information security management of software development data:

[0060] like Figures 1-3 As shown, the system includes:

[0061] User terminal 1: Used to submit login requests, request access to read specified files, receive permission encoding and decoding information, and execute corresponding file read or operation requests.

[0062] Mobile management terminal 2 includes a permission information identification module 210 and a software information encryption management module 220, which are used to generate and forward the user's permission information and the file permission information requested for access and reading, and generate decoding information for each corresponding file based on the user's permission information and the file permission information requested for access and reading, and send it to the user operation terminal 1.

[0063] Specifically, the permission information recognition module 210 is used to obtain user login information. When a data access and read request is received, it determines whether the user has the operation permission based on the user's identity information and generates the user's permission information and logs.

[0064] Specifically, the user login information includes: user identity information, user permission level, target file request information, and file access permission information requested for reading. The user identity information includes: username, ID, and IMSI. The log includes: ID, access time, target file path, access type: read / write, permission judgment result, and operation result.

[0065] Specifically, the software information encryption management module 220 is used to manage software information permissions and uses an asymmetric encryption algorithm to encrypt sensitive software information. During software program development, a large amount of development data is generated, which generally needs to be managed. The software source code completed in each phase of development contains complete development ideas and corresponding development results, so the source code needs to be encrypted. Therefore, the source code of the program that has completed one phase of development is the object for subsequent encryption processing, including:

[0066] Generate key pair: Generate a positive integer e and a positive decimal d, such that... , where s is the preset decimal place limit, the subscript N indicates that the calculation expression in the parentheses will ultimately retain N decimal places, and k is a positive integer;

[0067] A positive integer e is stored as a key, an integer n is generated, and n represents the length of the plaintext when it is represented in decimal. {d, s, N, n} is published as a public key.

[0068] Encryption process:

[0069] The cryptographer attempts to generate a fraction m such that... And m has no more than s decimal places, M is plaintext; the encryption method is calculated. C is used as the ciphertext.

[0070] like Figure 4 As shown, the decryption process of mobile management terminal 2 includes:

[0071] Calculate the intermediate value using the double-angle formula. Where e is a multiple; by To obtain the intermediate value ;calculate That is, the plaintext M is obtained.

[0072] The double-angle formula for the sine function is:

[0073] Where m is an even number, .

[0074] Where m is an odd number, .

[0075] The double-angle formula for the cosine function is:

[0076] Where m is an even number, .

[0077] Where m is an odd number, .

[0078] Replace all cos() functions in the encryption and decryption processes with sin() or tan() functions, resulting in an odd positive integer e. When e is odd, the double-angle formula of the sin() function does not contain a cosine term.

[0079] Specifically, the mobile management terminal 2 has the authority to operate and read the status information sent by the remote terminal 3. In order to achieve consistency and standardization of software data, it is necessary to control access to the source code, whether it is under development or in the database, and strictly control access by external personnel.

[0080] Specifically, the permission information identification module 210 includes an identity authentication submodule 211, an information upload submodule 212, a requirement submodule 213, and a retrieval submodule 214;

[0081] The identity authentication submodule 211 includes: an identity authentication unit 2111, an access control unit 2112, and an operation log unit 2113; it is used to receive and store key information of at least one protected software and information authentication parameters required to execute the key information, and to authenticate the information authentication parameters and IMSI information simultaneously; the key information is the functional parameters of the software information; the information authentication parameters are user identifiers and / or software information.

[0082] The user access read permission code includes a read permission code and an identification code corresponding to multiple permission levels. The user's identity information is matched with the identification code corresponding to the permission level of the permission code to determine whether the user has read permission.

[0083] The identity authentication unit 2111 uses personal facial recognition and fingerprint authentication. After successful identification, the corresponding permissions can be obtained. R&D companies have a large amount of experimental data, which is closely related to the company's innovation and development. Therefore, this dual restriction can prevent the loss of company data and record the specific matters of each module and unit every day.

[0084] The information upload submodule 212 is used to obtain and report the IP address, MAC address, VNI number and IP address of the VETP where the virtual machine is located when each virtual machine joins the VXLAN network;

[0085] The requirement submodule 213 is used to receive the user's operation requirement information for accessing the target file and to pass the corresponding permission judgment request to the identity authentication submodule;

[0086] The retrieval submodule 214 is used to query information about files that the user has authorized access to, and to match a set of operable target files for subsequent permission judgment or log generation.

[0087] Specifically, the mobile management terminal 2 also includes an SDK distribution module 230 and an information hardening module 240. The information hardening module 240 is used to harden the security of the mobile management terminal 2. This implementation uses a firewall. Since it is an internal information management platform, the firewall is first configured at the network layer of the network model to filter network access, prevent malicious attacks, and improve system security.

[0088] Specifically, the SDK distribution module uses DEX packing, DEX source code separation and dynamic restoration, DEXVMP, and anti-debugging technologies to harden AAR and JAR files, giving the hardened AAR and JAR files security protection capabilities against reverse engineering and dynamic debugging.

[0089] The mobile management terminal 2 shall be protected against at least one of the following:

[0090] Protect the resource files, SO files, and runtime data files in mobile management terminal 2;

[0091] Monitor the memory space of mobile management terminal 2;

[0092] Collect fault information of mobile management terminal 2;

[0093] Obtain the security posture of mobile management terminal 2, including: the source of the attack, the attack method, the operating environment, and related information after the attack when mobile management terminal 2 is attacked. The mobile terminal security SDK can add functions such as security encryption, communication signature, and secure storage to mobile applications. It can also monitor various security attacks in real time and provide plug-in components such as anti-virus, anti-hijacking, anti-screenshot, and secure keyboard security. The security SDK can improve the security level of mobile applications and provide security protection for risk points. The security SDK includes, but is not limited to, anti-hijacking SDK, anti-screenshot SDK, and secure keyboard SDK.

[0094] Remote terminal 3 includes a storage submodule 310, a transmission submodule 320, and a display submodule 330. It receives and processes information forwarded by mobile management terminal 2, and receives access and read information sent by user operation terminal 1. Based on user identity information, it confirms whether the user is permitted to perform operations on files in the requested access and read information list. If confirmed, remote terminal 3 sends user login information to mobile management terminal 2. Based on the user's permission information and the permission information of the requested files, it generates access and read permission codes for each file and sends these codes to user operation terminal 1. Mobile management terminal 2 then sends the decoding information of the files for which the user has read permissions to user operation terminal 1. The access and read permission codes include a read permission code and identification codes corresponding to multiple permission levels.

[0095] Storage submodule 310: Used to store user identity information, permission judgment results, access control policies, and a list of files requested by the user;

[0096] Transmission submodule 320: Used to send the user access permission judgment result and the corresponding access read permission code to the mobile management terminal 2 or the user operation terminal 1;

[0097] Display submodule 330: Used to display the file information requested by the user, permission verification status, and operation log, and for administrators to review and confirm.

[0098] Specifically, the method for confirming whether a user is allowed to perform operations on files in the information list that they have requested to access and read is as follows: confirm whether the user's identity information matches the identification code of the corresponding permission level of the permission code. If they match, the user has read permission; otherwise, the user does not have read permission.

[0099] Specifically, after generating the access and read permission code for each file, remote terminal 3 generates an access and read log and generates a confirmation message identifier. When the time difference between the access and read information sent by user terminal 1 and the access and read information generated by remote terminal 3 exceeds a preset time threshold, an early warning message is issued. Software development code information mainly represents the implementation relationships between different functions during code implementation. Therefore, the encryption process mainly targets the relationships between different functional blocks, where the functions and their behavior directly affect the relationships between functional blocks. Therefore, this embodiment divides the code into blocks according to its functions and constructs a graph structure based on the functional relationships between functional modules. The code scrambling path is determined based on the edge relationships of the graph structure, and decoding and file access permissions are separated, effectively preventing the leakage of source code.

[0100] User terminal 1, mobile management terminal 2, and remote terminal 3 transmit data wirelessly.

[0101] While the spirit and principles of the invention have been described with reference to several specific embodiments, it should be understood that the invention is not limited to the disclosed specific embodiments, and the division of aspects does not imply that features in these aspects cannot be combined for benefit; such division is merely for ease of description. The invention is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.

[0102] Regarding the limitation of the scope of protection of this invention, those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art without creative effort based on the technical solution of this invention are still within the scope of protection of this invention.

Claims

1. A system for information security management of software development data, characterized in that, The system includes: User interface: Used to submit login requests, request access to read specified files, receive permission encoding and decoding information, and execute corresponding file read or operation requests; Mobile management terminal: includes a permission information identification module and a software information encryption management module, used to generate and forward the user's permission information and the file permission information requested for access and reading, and generate decoding information for each corresponding file based on the user's permission information and the file permission information requested for access and reading and send it to the user's operating terminal; The permission information recognition module is used to obtain user login information. When a data access and read request is received, it determines whether the user has the operation permission based on the user's identity information and generates the user's permission information and logs. The software information encryption management module is used to manage the permissions of software information and uses an asymmetric encryption algorithm to encrypt sensitive software information. Remote terminal: Used to receive and process information forwarded by the mobile management terminal, and to receive information sent by the user terminal for access and reading. Mobile management terminals, remote terminals, and user operation terminals transmit data wirelessly.

2. The system for information security management of software development data according to claim 1, characterized in that, The user login information in the mobile management terminal includes: user identity information, user permission level, target file request information, and file access permission information requested for reading. The user identity information includes: username, ID, and IMSI. The log includes: ID, access time, target file path, access type: read / write, permission judgment result, and operation result. The permission information recognition module includes an identity authentication submodule, an information upload submodule, a requirement submodule, and a retrieval submodule; The identity authentication submodule includes: an identity authentication unit, an access control unit, and an operation log unit; The information uploading submodule is used to obtain and report the IP address, MAC address, VNI number, and IP address of the VETP where the virtual machine is located when each virtual machine joins the VXLAN network. The identity authentication submodule is used to receive and store key information of at least one protected software and information authentication parameters required to execute the key information, and to authenticate the information authentication parameters and IMSI information simultaneously; the key information is the functional parameters of the software information; the information authentication parameters are user identifiers and / or software information; The demand submodule is used to receive user operation demand information for accessing the target file and to pass the corresponding permission judgment request to the identity authentication submodule. The retrieval submodule is used to query information about files that the user has authorized access to, and to match a set of operable target files for subsequent permission judgment or log generation.

3. A system for information security management of software development data according to claim 2, characterized in that, The specific steps of the encryption process described in the software information encryption management module are as follows: Step S01: Generate a key pair: Generate a positive integer e and a positive decimal d, such that... , where s is the preset decimal place limit, the subscript N indicates that the calculation in the parentheses will ultimately retain N decimal places, k is a positive integer; the positive integer e is stored as the key, an integer n is generated, n represents the length of the plaintext when represented in decimal, and {d,s,N,n} is published as the public key; Step S02 Encryption: The encryptor generates a decimal m such that... And m has no more than s decimal places, M is plaintext, and the encryption method calculates... C represents the ciphertext.

4. A system for information security management of software development data according to claim 2, characterized in that, The mobile management terminal has the authority to operate and read status information sent by the remote terminal.

5. A system for information security management of software development data according to claim 1, characterized in that, The process described in the mobile management terminal for generating decoding information for each corresponding file based on permission information is as follows: The intermediate value is calculated using a double-angle formula. Where e is a multiple; by To obtain the intermediate value ;calculate That is, the plaintext M is obtained.

6. A system for information security management of software development data according to claim 1, characterized in that, The mobile management terminal also includes an SDK distribution module and an information reinforcement module; The SDK distribution module is used to harden AAR and JAR files using DEX packing, DEX source code separation and dynamic restoration, DEXVMP, and anti-debugging technologies, and to provide security protection for mobile management terminals, including: Protect resource files, SO files, and runtime data files in the mobile management terminal; Monitor the memory space of the mobile management terminal; Collect fault information from mobile management terminals; Obtain the security posture of the mobile management terminal, including: the source of the attack, the form of the attack, the operating environment, and related information after the attack when the mobile management terminal is attacked; The information hardening module is used to harden the security of the mobile management terminal.

7. A system for information security management of software development data according to claim 1, characterized in that, The remote terminal handles the information forwarded by the mobile management terminal as follows: Based on the user's identity information, it confirms whether the user is permitted to perform operations on files in the requested access list. If so, the remote terminal sends the user's login information to the mobile management terminal. Based on the user's permission information and the file permission information requested for access, it generates an access permission code for each file and sends this code to the user's terminal. The mobile management terminal then sends the decoding information of the files for which the user has read permissions to the user's terminal. The access permission code includes a read permission code and an identification code corresponding to multiple permission levels.

8. A system for information security management of software development data according to claim 7, characterized in that, The method for confirming whether a user is allowed to perform operations on files in the information list requested for access and reading in the remote terminal is as follows: confirm whether the user's identity information matches the identification code of the corresponding permission level of the permission code. If they match, the user has read permission; otherwise, the user does not have read permission.

9. A system for information security management of software development data according to claim 1, characterized in that, The remote terminal includes: Storage submodule: Used to store user identity information, permission judgment results, access control policies, and a list of files requested by the user; Transmission submodule: Used to send the user access permission judgment result and the corresponding access read permission code to the mobile management terminal or user operation terminal; The display submodule is used to show the file information requested by the user, the permission verification status, and the operation log, and to allow administrators to review and confirm.

10. A system for information security management of software development data according to claim 1, characterized in that, After generating the access and read permission code corresponding to each file in the remote terminal, the remote terminal generates an access and read log and generates a confirmation information identifier. When the time difference between the access and read information sent by the user terminal and the access and read information generated by the remote terminal is greater than a preset time threshold, an early warning information is issued.

Images