CN113268765B - Credential detection method, system, electronic device and storage medium - Google Patents

Abstract

The present application relates to a credential detection method, system, electronic device and storage medium, wherein the credential detection method includes: querying whether there is a historical detection record of a target file in the system; if there is no historical detection record of the target file in the system Execute the preset in-file credential detection task; if there is a historical detection record of the target file in the system, determine whether the current modification time of the target file is consistent with the modification time of the target file recorded in the historical detection record of the target file , and whether the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record of the target file, if so, end the detection of the target file, if not, execute the in-file credential detection rule Credential detection task. The present application solves the problem of lack of a method for detecting credentials in a file in the related art, and realizes rapid detection of credentials in a file.

Description

Credential detection method, system, electronic device and storage medium

technical field

The present application relates to the field of information security, and in particular, to a credential detection method, system, electronic device and storage medium.

Background technique

Credentials, including login account passwords for systems or services, key codes for access to specific services, and keys for data encryption and decryption, etc. Many service systems store some access credentials in files, or even in plaintext. These files can be files created by users to store their own credentials, shared credentials for a group of users, configuration files that contain system or service passwords, or source code that contains embedded passwords. Credentials in files may be scanned by attackers and used maliciously. Attackers can easily access related systems or services through legitimate credentials, which is extremely harmful.

There is currently no method and system for detecting credentials in a file in the prior art.

Aiming at the problem of lack of a method for detecting credentials in a file in the related art, no effective solution has been proposed yet.

SUMMARY OF THE INVENTION

In this embodiment, a credential detection method, system, electronic device, and storage medium are provided to solve the problem of the lack of a method for detecting credentials in a file in the related art.

In a first aspect, a credential detection method is provided in this embodiment. The credential detection method is used to detect credentials in a file in the system, and the method includes:

Query whether there is a historical detection record of the target file in the system;

In the case that the historical detection record of the target file does not exist in the system, a preset in-file credential detection task is executed, and the historical detection record of the target file is created; the historical detection record includes the modification time of the target file and the credential detection rule in the file;

In the case that the historical detection record of the target file exists in the system, determine the current modification time of the target file and the modification time of the target file recorded in the historical detection record of the target file Whether it is consistent, and whether the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record of the target file, and if so, end the verification The detection of the target file, if not, execute the task of detecting the credentials in the file, and update the historical detection record of the target file.

In some of these embodiments, the in-file credential detection task includes: finding whether a preset credential keyword exists in the target file, and if so, extracting credential content in the target file according to a preset matching rule ;

The in-file credential detection rule includes the preset credential keyword and the preset matching rule.

In some of the embodiments, before querying whether the historical detection record of the target file exists in the system, the method further includes: judging whether the suffix name of the target file matches a preset suffix name rule , if not, end the detection of the target file.

In some of the embodiments, before querying whether the historical detection record of the target file exists in the system, the method further includes: judging whether the size of the target file is within a preset file size range , if not, end the detection of the target file.

In some of these embodiments, a credential detection method is provided, the credential detection method applied to a system containing a plurality of files, the method comprising:

Use the credential detection method described in any of the above to detect the files in the system;

After the detection of all files in the system is completed, the credential detection result is reported to the user.

In some of these embodiments, the credential detection result includes:

The file path of the file whose credential content is detected, the detected credential keyword, and the credential content corresponding to the credential keyword.

In some of the embodiments, using the credential detection method described in any one of the above to detect the files in the system includes:

According to a preset detection period, the file in the system is detected by using the credential detection method described in any one of the above.

In a second aspect, a credential detection system is provided in this embodiment, and the credential detection system includes a detection configuration module, a credential detection module, and a detection history module;

The credential detection module is used to perform in-file credential detection on files in the system, and the in-file credential detection includes: querying whether there is a historical detection record of the target file in the system; if the target does not exist in the system In the case of the historical detection record of the file, the preset in-file credential detection task is executed, and the historical detection record of the target file is created; the historical detection record includes the modification time of the target file and the content in the file. credential detection rules; the in-file credential detection task includes: finding out whether there is a preset credential keyword in the target file, and if so, extracting the credential content in the target file according to a preset matching rule; the file The internal credential detection rule includes the preset credential keyword and the preset matching rule; in the case that the historical detection record of the target file exists in the system, determine the current modification of the target file Whether the time is consistent with the modification time of the target file recorded in the historical detection record of the target file, and whether the current in-file credential detection rules of the in-file credential detection task and all the target files Whether the in-file credential detection rules recorded in the historical detection record are consistent, if so, end the detection of the target file, if not, execute the in-file credential detection task, and update all the target files. the historical detection records;

The detection configuration module is used to configure the credential keyword and the matching rule;

The detection history module is used for storing the historical detection records of the files in the system.

In a third aspect, in this embodiment, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the above-mentioned first The credential detection method described in the aspect.

In a fourth aspect, this embodiment provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the credential detection method described in the first aspect above.

Compared with the related art, the credential detection method, system, electronic device and storage medium provided by the present application solve the problem of lack of a method for detecting credentials in files in the related art by performing credential detection on files in the system.

The details of one or more embodiments of the application are set forth in the accompanying drawings and the description below in order to make other features, objects and advantages of the application more apparent.

Description of drawings

The drawings described herein are used to provide further understanding of the present application and constitute a part of the present application. The schematic embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation of the present application. In the attached image:

1 is a block diagram of a hardware structure of a terminal of a credential detection method provided by an embodiment of the present application;

2 is a flowchart of a credential detection method provided by one of the embodiments;

3 is a flowchart of a credential detection method provided by one of the embodiments;

FIG. 4 is a structural block diagram of a credential detection system provided by one embodiment of the present invention.

Detailed ways

For a clearer understanding of the purpose, technical solutions and advantages of the present application, the present application is described and illustrated below with reference to the accompanying drawings and embodiments.

Unless otherwise defined, the technical or scientific terms involved in this application shall have the general meaning understood by a person with ordinary skills in the technical field to which this application belongs. Words like "a", "an", "an", "the", "these" and the like in this application do not denote quantitative limitations, and they may be singular or plural. The terms "comprising", "comprising", "having" and any variations thereof referred to in this application are intended to cover non-exclusive inclusion; for example, processes, methods and The system, product or device is not limited to the listed steps or modules (units), but may include unlisted steps or modules (units), or may include other steps or modules inherent to these processes, methods, products or devices (unit). References in this application to "connected," "connected," "coupled," and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. As used in this application, "plurality" refers to two or more. "And/or" describes the association relationship between associated objects, indicating that there can be three kinds of relationships. For example, "A and/or B" can mean that A exists alone, A and B exist at the same time, and B exists alone. Normally, the character "/" indicates that the objects associated with each other are an "or" relationship. The terms "first", "second", "third", etc. involved in this application are only for distinguishing similar objects, and do not represent a specific order for the objects.

The method embodiments provided in this embodiment may be executed in a terminal, a computer or a similar computing device. For example, it runs on a terminal. FIG. 1 is a block diagram of the hardware structure of the terminal according to the credential detection method of this embodiment. As shown in FIG. 1 , the terminal may include one or more (only one is shown in FIG. 1 ) processor 102 and a memory 104 for storing data, wherein the processor 102 may include but is not limited to a microprocessor MCU or may A processing device such as a programming logic device FPGA. The above-mentioned terminal may also include an input and output device 108 . Those of ordinary skill in the art can understand that the structure shown in FIG. 1 is only for illustration, which does not limit the structure of the above-mentioned terminal. For example, the terminal may also include more or fewer components than shown in FIG. 1 , or have a different configuration than that shown in FIG. 1 .

The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer programs corresponding to the credential detection method in this embodiment. A functional application and data processing are implemented, namely, the above-mentioned method is implemented. Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, memory 104 may further include memory located remotely from processor 102, and these remote memories may be connected to the terminal through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

The input and output device 108 may include a display, a mouse and a keyboard light device, or a touch screen, which is used to realize the interaction between the user and the terminal, for example, the credential detection rules in the user profile and the terminal displaying the credential detection result to the user.

In this embodiment, a credential detection method is provided for detecting credentials in a file in the system. FIG. 2 is a flowchart of the credential detection method in this embodiment. As shown in FIG. 2 , the process includes:

S201, query whether there is a historical detection record of the target file in the system;

If there is no historical detection record of the target file in the system, step S202 and step S205 are executed.

S202, creating a historical detection record of the target file.

Specifically, the historical detection record includes the modification time of the target file. If the historical detection record of the target file does not exist, it means that the target file has not been detected before, and the in-file credential detection task is performed for the target, and the history of the target file is created. The detection record is used for future query.

If there is a history detection record of the target file in the system, step S203 is executed.

S203, determine whether the current modification time of the target file is consistent with the modification time recorded in the historical detection record, and whether the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record.

If the current modification time of the target file is consistent with the modification time recorded in the historical detection record, and the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record, then the target file will end. detection. If there is any inconsistency, for example, the current modification time of the target file is inconsistent with the modification time recorded in the historical detection record, and/or, the in-file credential detection rules of the current in-file credential detection task and the in-file credential detection rules recorded in the historical detection record If the credential detection rules are inconsistent, step S204 and step S205 are executed.

S204, update the historical detection record of the target file. Specifically, updating the detection record is to replace the in-file credential detection rule and file modification time recorded in the historical detection record with the current in-file credential detection rule and file modification time.

S205, performing a preset task of detecting credentials in a file.

In the credential detection method provided in this embodiment, before performing the in-file credential detection task, the system is first queried to see if there is a historical detection record of the target file. The modification time is consistent with the modification time recorded in the historical detection record, and the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record, it means that the target file has been detected since the historical detection. No modification or change has occurred, and the in-file credential detection rules for this detection and historical detection have not changed, so no further detection is required in this case, which can speed up the detection of credential files in the system.

As an implementation manner, the above-mentioned preset in-file credential detection task includes: finding whether a preset credential keyword exists in the target file, and if so, extracting the credential in the target file according to a preset matching rule content; the in-file credential detection rule includes the preset credential keyword and the preset matching rule.

Specifically, the above-mentioned credential keyword is a keyword for identifying a credential, for example, password, pass, pwd, login, secure, key, credential, etc., which are commonly used to name the credential.

The matching rule between the credential keyword and the credential content can be a regular match, such as (pass:|key:)(.*\s+), to get the content from pass: or key: to the next space. (pass:|key:) is the first matching content, which represents the credential keyword. After the match is successful, get the second matching content (.*\s+), that is, a space, you can get the credential content after pass: or key: .

The above-mentioned historical detection record may further include the file path of the file. When querying the historical detection record of the file, the query can be performed according to the file path.

In the credential detection method provided by this embodiment, by performing keyword search and credential content matching on files, and skipping files that have been previously detected according to the credential detection rules in the same file and have not been modified so far, it is possible to quickly detect the files in the system. The credentials in the file are detected, the credential files in the system are scanned, and the credential information in various credential files is extracted.

In some of the embodiments, a credential detection method is provided. On the basis of the above-mentioned embodiment, before querying whether there is a historical detection record of the target file in the system, the credential detection method further includes:

S301: Determine whether the suffix name of the target file matches a preset suffix name rule. If no, the detection of the target file is ended, and if yes, step S201 is executed.

Filter out the configuration files that may save credentials according to the file suffix, and detect for specific file types, which can further speed up the detection of credential files in the system.

In the credential detection method provided in this embodiment, files that may store credentials are filtered out according to the file suffix, which further speeds up the detection of credential files in the system.

In some of the embodiments, a credential detection method is provided. The credential detection method is based on the above-mentioned embodiment. Before querying whether there is a historical detection record of the target file in the system, the method further includes:

S401: Determine whether the size of the target file is within a preset file size range, and if not, end the detection of the target file. If yes, step S201 is executed.

According to the file size of the file, the configuration files that may save the credentials are filtered out, and the detection of files of a specific size can further speed up the detection of the credential files in the system.

In the credential detection method provided in this embodiment, files that may store credentials are filtered out according to the file size of the files, which further speeds up the detection of credential files in the system.

In some of the embodiments, a credential detection method is provided. The credential detection method is based on the above-mentioned embodiment. Before querying whether there is a historical detection record of the target file in the system, the method further includes:

S501, determine whether the size of the target file is within a preset file size range, and whether the size of the target file is within the preset file size range, if not, end the detection of the target file. If yes, step S201 is executed.

According to the file size and suffix name of the file, the configuration files that may save credentials can be filtered out, which can further speed up the detection of credential files in the system. Judging whether the size of the target file is within the preset file size range and judging whether the size of the target file is within the preset file size range can be performed simultaneously or sequentially, and the sequence is not limited.

The credential detection method provided in this embodiment filters out files that may store credentials according to the file suffix and file size, which further speeds up the detection of credential files in the system.

In some of the embodiments, a credential detection method is provided. FIG. 3 is a flowchart of the credential detection method adopted in this embodiment. As shown in FIG. 3 , the credential detection method includes the following steps:

Step S601, judging whether the suffix name of the target file matches a preset suffix name rule. If not, end the detection, if yes, execute step S602.

S602: Determine whether the size of the target file is within a preset file size range. If no, end the detection, if yes, execute step S603.

S603, query whether there is a historical detection record of the target file in the system. If no, go to step S613, if yes, go to step S604.

S613, creating a historical detection record of the target file.

S604, determine whether the current modification time of the target file is consistent with the modification time of the target file recorded in the historical detection record of the target file, and whether the in-file credential detection rule of the current in-file credential detection task is the same as that recorded in the historical detection record of the target file Whether the in-file credential detection rules are consistent. If yes, end the detection, if not, execute step S605 and step S606.

S605, update the historical detection record of the target file.

S606 , perform the task of checking the credentials in the file.

It should be noted that the steps shown in the above flow or the flow chart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical sequence is shown in the flow chart, in the In some cases, steps shown or described may be performed in an order different from that herein. For example, step S605, updating the historical detection record of the target file, and step S606, performing the task of checking the credentials in the file, can be interchanged.

The credential detection method provided in this embodiment filters out the configuration files that may save credentials according to the file suffix and file size, and then extracts credential information through credential keywords and matching rules between credential keywords and credential content. For files that have not changed in time, the in-file credential detection task of the same in-file credential detection rule can be skipped, which can speed up the detection of credential files in the system. Finally, the credential file information is reported to the central system uniformly for user confirmation, which is convenient for users to do. good system protection.

A credential detection method is provided in this embodiment, and the credential detection method is applied to a system containing multiple files, and the method includes:

S701, set the detection period;

S702, according to the detection period, use the credential detection method of any one of the foregoing embodiments to detect the files in the system.

After the detection of all files in the system is completed, the credential detection result is reported to the user.

Specifically, the credential detection result may include: the file path of the file whose credential content is detected, the detected credential keyword, and the credential content corresponding to the credential keyword.

In the credential detection method provided in this embodiment, by setting a detection period, credential detection is performed on files in the system regularly, and the detected credential files and credential information are reported to the user to detect whether there is a credential file in the system, which is convenient for users to do a good job in the system. protection.

The present embodiment will be described and illustrated below through preferred embodiments.

In this preferred embodiment, a credential detection method is provided, and the credential detection method is applied to a system containing multiple files, and the method includes:

S801, set the detection period;

S802 , according to the detection period, use the credential detection method (as shown in FIG. 3 ) provided in any of the foregoing embodiments to detect the files in the system.

S803 , after the detection of all files in the system is completed, the credential detection result is reported and displayed to the user.

In this embodiment, a credential detection system is also provided, and the system is used to implement the above-mentioned embodiments and preferred implementations, and what has been described will not be repeated. The terms "module", "unit", "subunit", etc. used below may be a combination of software and/or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementations in hardware, or a combination of software and hardware, are also possible and contemplated.

FIG. 4 is a structural block diagram of the credential detection system of the present embodiment. As shown in FIG. 4 , the system includes: a detection configuration module 10 , a credential detection module 20 and a detection history module 30 ;

The credential detection module 20 is used to perform in-file credential detection on files in the system, and the in-file credential detection includes: querying whether there is a historical detection record of the target file in the system; if there is no historical detection record of the target file in the system , execute the preset in-file credential detection task, and create a historical detection record of the target file; the historical detection record includes the modification time of the target file and the in-file credential detection rules; if there is a historical detection record of the target file in the system , to determine whether the current modification time of the target file is consistent with the modification time of the target file recorded in the historical detection record of the target file, and whether the in-file credential detection rules of the credential detection task in the current file are recorded in the historical detection record of the target file. Whether the in-file credential detection rules are consistent, if so, end the detection of the target file; if not, execute the in-file credential detection task and update the historical detection record of the target file;

The detection configuration module 10 is used to configure credential keywords and matching rules, and the credential detection module 20 detects the credentials in the file according to the configured credential keywords and matching rules; The module 20 performs credential detection on the files in the system according to the configured detection period.

The detection history module 30 is used for storing historical detection records of files in the system. Specifically, the storage method is persistent storage (eg, database storage and file storage), so as to be provided to the credential detection module 20 for subsequent query.

Optionally, the credential detection system may further include a document credential display module, configured to receive the detection result of the detection configuration module 10 and display the detected credential information to the user.

Optionally, the credential detection system can be divided into two units: a protection center and a protection terminal, wherein the protection center includes the above-mentioned detection configuration module 10 and the above-mentioned file credential display module, the above-mentioned credential detection module 20 of the protection terminal, and the above-mentioned detection history module 30. and the detection result reporting module, wherein the credential detection module 20 will report the detection result, including the file path of the file whose credential content is detected, the detected credential keyword and the credential content corresponding to the credential keyword, and then submit the combination to the detection result report module, the detection result reporting module is used to send the detection result to the protection center.

It should be noted that each of the above modules may be functional modules or program modules, and may be implemented by software or hardware. For the modules implemented by hardware, the above-mentioned modules may be located in the same processor; or the above-mentioned modules may also be located in different processors in any combination.

The credential detection system provided by this embodiment can quickly detect and scan the credentials in the files in the system by searching the files for keywords and matching the content of the credentials, and skipping the files that have been detected before and whose modification time has not changed. The credential file in the system is exported, which is convenient for users to protect the system.

An electronic device is also provided in this embodiment, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

Optionally, the above-mentioned electronic device may further include a transmission device and an input-output device, wherein the transmission device is connected to the above-mentioned processor, and the input-output device is connected to the above-mentioned processor.

It should be noted that, for specific examples in this embodiment, reference may be made to the examples described in the foregoing embodiments and optional implementation manners, and details are not repeated in this embodiment.

In addition, in combination with the credential detection method provided in the foregoing embodiment, a storage medium may also be provided in this embodiment for implementation. A computer program is stored on the storage medium; when the computer program is executed by the processor, any one of the credential detection methods in the foregoing embodiments is implemented.

It should be understood that the specific embodiments described herein are used to illustrate this application, not to limit it. According to the embodiments provided in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

Obviously, the accompanying drawings are only some examples or embodiments of the present application, and for those skilled in the art, the present application can also be applied to other similar situations according to these drawings, but no creative work is required. In addition, it can be understood that although the work done in this development process may be complex and lengthy, for those of ordinary skill in the art, certain designs, manufactures and designs based on the technical content disclosed in this application Modifications such as production or production are only conventional technical means, and should not be regarded as insufficient content disclosed in this application.

The term "embodiment" is used in this application to mean that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the application. The appearance of the phrase in various places in the specification does not necessarily mean the same embodiment, nor does it mean that it is mutually exclusive or alternative to other embodiments. It can be clearly or implicitly understood by those of ordinary skill in the art that the embodiments described in this application may be combined with other embodiments without conflict.

The above-mentioned embodiments only represent several embodiments of the present application, and the descriptions thereof are relatively specific and detailed, but should not be construed as a limitation on the scope of patent protection. It should be pointed out that for those skilled in the art, without departing from the concept of the present application, several modifications and improvements can be made, which all belong to the protection scope of the present application. Therefore, the scope of protection of the present application should be determined by the appended claims.

Claims (9)

1. a credential detection method, is characterized in that, is used to detect credential in the file in the system, and described method comprises: Query whether there is a historical detection record of the target file in the system; In the case that the historical detection record of the target file does not exist in the system, a preset in-file credential detection task is executed, and the historical detection record of the target file is created; the historical detection record includes the modification time of the target file and the credential detection rule in the file; In the case that the historical detection record of the target file exists in the system, determine the current modification time of the target file and the modification time of the target file recorded in the historical detection record of the target file Whether it is consistent, and whether the in-file credential detection rule of the current in-file credential detection task is consistent with the in-file credential detection rule recorded in the historical detection record of the target file, and if so, end the verification Detecting the target file, if not, executing the credential detection task in the file, and updating the historical detection record of the target file; The in-file credential detection task includes: finding whether a preset credential keyword exists in the target file, and if so, extracting the credential content in the target file according to a preset matching rule; The in-file credential detection rule includes the preset credential keyword and the preset matching rule. 2 . The credential detection method according to claim 1 , wherein, before querying whether the historical detection record of the target file exists in the system, the method further comprises: judging the suffix of the target file. 3 . Whether the name matches the preset suffix name rule, if not, end the detection of the target file. 3. The credential detection method according to claim 1 or 2, characterized in that, before querying whether the historical detection record of the target file exists in the system, the method further comprises: judging the target file Whether the size of the target file is within the preset file size range, if not, end the detection of the target file. 4. A credential detection method, characterized in that, applied to a system comprising a plurality of files, the method comprising: Utilize the credential detection method according to any one of claims 1 to 3 to detect the files in the system; After the detection of all files in the system is completed, the credential detection result is reported to the user. 5. The credential detection method according to claim 4, wherein the credential detection result comprises: The file path of the file whose credential content is detected, the detected credential keyword, and the credential content corresponding to the credential keyword. 6. The credential detection method according to claim 4, wherein detecting the files in the system comprises: According to a preset detection period, the files in the system are detected. 7. A credential detection system, comprising a detection configuration module, a credential detection module and a detection history module; The credential detection module is used to perform in-file credential detection on files in the system, and the in-file credential detection includes: querying whether there is a historical detection record of the target file in the system; if the target does not exist in the system In the case of the historical detection record of the file, the preset in-file credential detection task is executed, and the historical detection record of the target file is created; the historical detection record includes the modification time of the target file and the content in the file. credential detection rules; the in-file credential detection task includes: finding out whether there is a preset credential keyword in the target file, and if so, extracting the credential content in the target file according to a preset matching rule; the file The internal credential detection rule includes the preset credential keyword and the preset matching rule; in the case that the historical detection record of the target file exists in the system, determine the current modification of the target file Whether the time is consistent with the modification time of the target file recorded in the historical detection record of the target file, and whether the current in-file credential detection rules of the in-file credential detection task and all the target files Whether the in-file credential detection rules recorded in the historical detection record are consistent, if so, end the detection of the target file, if not, execute the in-file credential detection task, and update all the target files. the historical detection records; The detection configuration module is used to configure the credential keyword and the matching rule; The detection history module is used for storing the historical detection records of the files in the system. 8. An electronic device comprising a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the computer program according to any one of claims 1 to 6. The credential detection method described above. 9 . A computer-readable storage medium on which a computer program is stored, wherein when the computer program is executed by a processor, the steps of the credential detection method according to any one of claims 1 to 6 are implemented. 10 .

Images