A login control method and device capable of preventing violent cracking

Abstract

The invention discloses a login control method and device capable of preventing violent cracking. Violent cracking of a login authentication and authorization system is realized. According to the scheme of the invention, Continuous multiple login operations in the violent cracking process can be controlled based on authentication of all elevator shafts from the first to the Nth in the elevator; and finally, login operation of violent cracking can be limited or login of the violent cracking can be completely forbidden based on long limiting time required by the Nth elevator shaft. Therefore, violent cracking of the login authentication and authorization system can be effectively prevented by utilizing the scheme of the invention; In addition, relevant parameters for authenticating the elevator are configurable; a dynamic login attack prevention function is realized; Meanwhile, compared with a conventional verification mode based on a verification code, a verification picture and the like in the prior art, the method focuses on using an intelligent authentication means based on an authentication elevator at a system end to prevent attacks, a user does not need to execute complex interactive operation, the intelligent degree is high, and the user experience is effectively improved.

Description

technical field [0001] The invention belongs to the application fields of industrial Internet, information Internet and telecommunication network, and in particular relates to a login control method and device for preventing brute force cracking. Background technique [0002] In the field of industrial Internet, there are many problems that the login authentication and authorization systems of industrial Internet applications and industrial Internet operating system platforms are cracked and attacked by violence. Therefore, it is necessary to take corresponding measures to prevent the login authentication and authorization systems from being cracked by violence, so as to avoid the industrial Internet system. login attacks and leakage of user information. [0003] The traditional way to prevent brute force cracking is to add a verification code on the front-end login page of the system; in the widely used JWT (Json Web Token, Json Web Token) authentication mode, if the client...

AI Technical Summary

Problems solved by technology

[0013] The above-mentioned anti-brute force cracking methods are basically carried out from the perspective of user identity information authentication, and the user's interaction and participation are high. Therefore, although the above-mentioned anti-brute force cracking method can play a certain effect, it also improves the time when the user logs in to the system. The complexity and workload of the operation, and the more complex the verification process of user identity authentication, the higher the failure rate of user login; at the same time, from the system side, after the user fails to log in, it only uses the above-mentioned verification code-based, The conventional verification methods such as verifying pictures increase the complexity of user authentication, and do not use more intelligent means to prevent attacks

Therefore, the existing anti-brute force cracking methods have problems such as high complexity of user operations, poor user experience, and low intelligence in the means of system-side anti-brute force cracking.

Images