Login protection method

Abstract

The invention provides a log-in protection method, which relates to the technical field of computer software, software communication and information security. at the outside of an object log-in interface, an agent is used to acquire user log-in information, at least password item in user log-in information is subjected to encryption conversion; when the actual operation of the user directs to the position of a subwindow to be sent on the object log-in interface, and user log-in information is sent to the object log-in interface by the window information span thread; the method actively and dynamically controls and installs a defense hook program for the window attribution thread; due to competition, the window attribution thread is positioned on the chain head of the hook and is privileged to be called for execution, the defense hook program is directly returned to shield the following hooks in the end so as to avoid the malicious interception of information related to window process. The method realizes the concurrent operation of common software products, network service systems and agent independent from the object application program, is widely applied to E-mail boxes, network banks, business affairs, government affairs, communication, game and information systems with required user log-in, and can effectively protect user accounts from embezzlement.

Description

technical field [0001] The invention relates to the technical fields of computer software, network communication and information security. Background technique [0002] Login is the only way for users to enter and use the application system. On the login interface, the user enters login information (mainly account information, including user name / account number, password, and possibly auxiliary information such as verification code), and accepts system verification after confirmation. In the network environment, especially on the Internet, all kinds of spy programs (programs that steal user information, such as Trojan horse programs, etc.) are rampant, but they are very secretive and hard to find. They often steal account information and infringe users without knowing it. User Privacy and Property. This has become a major public hazard in the network society, greatly endangering the normal order of various applications such as e-mail, online banking, e-commerce, e-governme...

AI Technical Summary

Problems solved by technology

This method is relatively complicated, and it will be very difficult to make an accurate judgment. Moreover, if the system kernel is touched, there is also a risk of stability, not to mention the variable of the operating system version upgrade.

It thinks that intercepting the sending of WM_GETTEXT messages is sufficient to prevent the theft of text information, but it is not enough; moreover, it cannot solve the hidden worries of eavesdropping on keyboards and peeping screens

To sum up, the existing technical methods still have certain limitations in preventing the user's account information from being stolen during the login process.

Images