A verification processing method, device, equipment and medium
By using read-only characters to verify the keyboard and randomly generated characters in the verification processing method, and verifying the password string based on the input order and character display position, the problem of high risk of password leakage in the prior art is solved, and higher password security is achieved.
Patent Information
- Application Number
- CN202010509703.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-06-05
- Publication Date
- 2025-05-20
- Estimated Expiration
- 2040-06-05
AI Technical Summary
The prior art cannot effectively reduce the risk of password leakage when increasing the complexity of password input, and the randomization of letter layout of virtual security keyboards cannot completely solve the problem of password leakage.
By displaying M characters read-only verification keyboard, obtaining and verifying the password string of N characters entered in sequence. The verification process is based on the input sequence of characters and the character display position in the keyboard, and the randomly generated characters in the keyboard are configured to generate the position sequence of verification information for storage.
Effectively improves the security of password strings. Even if characters in password strings are leaked, the password string composed of leaked characters cannot pass verification, thereby enhancing the security of passwords.
Smart Images

Figure CN111679781B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of computer technology, specifically to the field of verification processing, and in particular to a verification processing method, a verification processing device, a verification processing equipment and a computer-readable storage medium. Background Technology
[0002] Many application clients (for example, ATM (Automatic Teller Machine), online banking clients, etc.) involve password input and verification when performing highly sensitive permission operations; if the password is peeped at during the user's password input, the peeper can complete the password verification based on the password and perform highly sensitive permission operations. Therefore, a protection mechanism needs to be set up during the password input and verification process to improve the security of the password. A common protection mechanism is to enter the password through a virtual security keyboard when performing highly sensitive permission operations, where the virtual security keyboard is a keyboard that scrambles the letter layout of the virtual keyboard to make the letters random. However, entering the password through the virtual security keyboard only increases the complexity of password input and cannot effectively reduce the risk of password leakage. SUMMARY OF THE INVENTION
[0003] The embodiments of the present application provide a verification processing method, device, equipment and medium, which can effectively improve the security of password strings.
[0004] On the one hand, the embodiment of the present application provides a verification processing method, the method comprising:
[0005] Displaying a verification page, the verification page includes a display area and an input area, the display area is used to display M character verification keyboards, the character verification keyboard is a read-only keyboard, and the character verification keyboard includes at least one character randomly displayed at the character display position;
[0006] Get the password string to be verified in the input area. The password string includes N characters entered in sequence, where M and N are both positive integers. The characters in the password string are the characters displayed in the character verification keyboard;
[0007] The password string is verified based on the input sequence of N characters and the character display position of N characters in the M character verification keyboard.
[0008] On the other hand, an embodiment of the present application provides a verification processing device, the device comprising:
[0009] The display unit is used to display a verification page, the verification page includes a display area and an input area, the display area is used to display M character verification keyboards, the character verification keyboard is a read-only keyboard, and the character verification keyboard includes at least one character randomly displayed at the character display position;
[0010] A processing unit, configured to obtain a password string to be verified input in an input area, where the password string includes N characters input in sequence, and both M and N are positive integers, and the characters in the password string are characters displayed on a character verification keyboard; and verify the password string according to the input order of the N characters and the character display positions of the N characters on the M character verification keyboards.
[0011] In an implementation manner, the display unit is further configured to:
[0012] Display a configuration page, where the configuration page includes a configuration area, the configuration area includes a configuration keyboard, the configuration keyboard is a read-write keyboard, and the configuration keyboard includes at least one randomly generated character; the at least one character is randomly displayed according to the character display positions in the configuration keyboard;
[0013] The processing unit is further configured to:
[0014] Obtain P characters sequentially selected on the configuration keyboard, where P is a positive integer;
[0015] Generate verification information according to the P characters and the character display positions of the P characters, where the verification information includes a first position sequence formed by the character display positions of the P characters on the configuration keyboard according to the selection order of the P characters.
[0016] In this technical solution, the displayed configuration page includes a configuration area, the configuration area includes a configuration keyboard, and at least one character included in the configuration keyboard is randomly generated. P characters sequentially selected on the configuration keyboard can be obtained in the configuration keyboard, where the sequentially selected P characters form a password string, and then verification information is generated according to the P characters and the character display positions of the P characters; since the verification information is a first position sequence formed by the character display positions of the P characters on the configuration keyboard according to the selection order of the P characters, the position sequence (verification information) of the P characters is stored, rather than the symbols or instructions represented by the P characters themselves. In this way, even if the symbols or instructions represented by the characters themselves are leaked, since the position sequence of the P characters is stored, the password string composed of the leaked P characters cannot pass the verification during the subsequent password string verification process, thereby effectively improving the security of the password string.
[0017] In another implementation manner, a display control is included in the display area; the processing unit is further configured to:
[0018] When the display control in the display area is triggered and the M character verification keyboards are in a displayed state, hide the M character verification keyboards in the display area;
[0019] When the display control in the display area is triggered and the M-character verification keyboard is in the hidden state, the M-character verification keyboard is displayed in the display area.
[0020] In another embodiment, the processing unit is further configured to:
[0021] Start a countdown from the moment when the verification page starts to be displayed, and display the countdown value in the display area;
[0022] When the countdown value is 0 and the M-character verification keyboard is in the displayed state, hide the M-character verification keyboard in the display area;
[0023] When the countdown value is 0 and the M-character verification keyboard is in the hidden state, display the M-character verification keyboard in the display area.
[0024] In another embodiment, the processing unit is specifically configured to:
[0025] Obtain a second position sequence corresponding to the password string, where the second position sequence refers to the position sequence formed by the character display positions of N characters in the character verification keyboard according to the input order of the N characters;
[0026] Compare the first position sequence and the second position sequence;
[0027] If the two are the same, the password string verification is successful.
[0028] In another embodiment, the N characters are distributed in the same character verification keyboard; or, the N characters are distributed in multiple character verification keyboards.
[0029] In another embodiment, the processing unit is further configured to:
[0030] Use a dynamic encryption algorithm to encrypt the first position sequence, form a dynamic character sequence and store it;
[0031] Obtain the dynamic character sequence from the storage space, and use the dynamic encryption algorithm to decrypt the dynamic character sequence to obtain the first position sequence.
[0032] On the other hand, an embodiment of the present application provides a verification processing device, which includes:
[0033] A processor, adapted to implement one or more instructions; and,
[0034] A computer-readable storage medium, where the computer-readable storage medium stores one or more instructions, and the one or more instructions are adapted to be loaded and executed by the processor to perform the above verification processing method.
[0035] On the other hand, an embodiment of the present application provides a computer-readable storage medium storing one or more instructions adapted to be loaded and executed by a processor to perform the above-described verification processing method.
[0036] In an embodiment of the present application, the displayed verification page includes a display area and an input area. The display area is used to display M read-only character verification keyboards, and each character verification keyboard includes at least one randomly displayed character at a character display position. The input area is used to receive the password string to be verified, and the password string includes N characters input in sequence. Then, the password string is verified according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. First, since the character verification keyboard is a read-only keyboard, that is, no writing operation can be performed on the keyboard, this can avoid leaving traces of password string input on the character verification keyboard and improve input security. Second, each character included in the character verification keyboard is randomly generated, so each time the verification page is displayed, the characters in the character verification keyboards included in the verification page are different, which further improves security. Third, verification is performed according to the input order of the characters in the password string and their character display positions in the character verification keyboard, rather than the symbols or instructions represented by the characters themselves. Thus, even if the N characters in the input password string are leaked, since the characters in the character verification keyboard displayed each time change, it means that in the next verification process, these N characters may not exist in the character verification keyboard, or even if they exist in the character verification keyboard, their character display positions have changed. Therefore, the password string composed of these leaked N characters cannot pass the verification, effectively improving the security of the password string. BRIEF DESCRIPTION OF THE DRAWINGS
[0037] To more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.
[0038] Figure 1 Shows a schematic structural diagram of a verification processing system provided by an exemplary embodiment of the present application;
[0039] Figure 2 Shows a schematic diagram of a configuration page provided by an exemplary embodiment of the present application;
[0040] Figure 3 Shows a schematic diagram of generating characters using a dynamic mapping algorithm provided by an exemplary embodiment of the present application;
[0041] Figure 4 Shows a schematic diagram of a verification page provided by an exemplary embodiment of the present application;
[0042] Figure 5 Shows a schematic flowchart of a verification processing method provided by an exemplary embodiment of the present application;
[0043] Figure 6a Shows a schematic diagram of a character selection verification keyboard provided by an exemplary embodiment of the present application;
[0044] Figure 6b Shows a schematic diagram of another character selection verification keyboard provided by an exemplary embodiment of the present application;
[0045] Figure 7 Shows a schematic flowchart of another verification processing method provided by an exemplary embodiment of the present application;
[0046] Figure 8a Shows a schematic diagram of another verification page provided by an exemplary embodiment of the present application;
[0047] Figure 8b Shows a schematic diagram of yet another verification page provided by an exemplary embodiment of the present application;
[0048] Figure 8c Shows a schematic diagram of yet another verification page provided by an exemplary embodiment of the present application;
[0049] Figure 8d Shows a schematic diagram of yet another verification page provided by an exemplary embodiment of the present application;
[0050] Figure 9 Shows a schematic diagram of the structure of a verification processing device provided by an exemplary embodiment of the present application;
[0051] Figure 10 Shows a schematic diagram of the structure of a verification processing device provided by an exemplary embodiment of the present application. Detailed implementation manners
[0052] Next, the technical solutions in the embodiments of the present application will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.
[0053] Embodiments of this application relate to passwords. A password is a technique used for obfuscation. Generally, a password consists of at least one character in sequence and is also known as a password string. Here, the character can include letters, numbers, arithmetic symbols, punctuation marks, other symbols, and some functional symbols, etc.; passwords can be divided into static passwords and dynamic passwords. A static password refers to a password in which each character and the arrangement order of the characters in the password string remain fixed. For example, if the characters forming the static password are 1, 2, 3, 4, 5, 6 respectively, and the arrangement order of the characters is 1-2-3-4-5-6, then the static password is 123456. When inputting the password subsequently, inputting the password string 123456 can verify successfully; a dynamic password refers to a password string dynamically generated each time the password string is input, such as a verification code sent by the server, etc. For example, the currently input dynamic password is the password string a1b24j, and the dynamic password input next time can be the password string luy85b. Although the dynamic passwords input each time are different, they can all verify successfully. From the foregoing description, it can be seen that static passwords are more easily stolen and less secure compared to dynamic passwords. Embodiments of this application propose a verification processing method for static passwords. This verification processing method can convert static passwords into dynamic passwords for input and verification, optimize the security protection mechanism of the password string, ensure the secure storage of the password string, and improve the security of the password.
[0054] The verification processing solution for static passwords proposed in the embodiments of this application will be introduced in detail below with reference to the accompanying drawings.
[0055] Figure 1 FIG. shows a schematic structural diagram of a verification processing system provided by an exemplary embodiment of this application; as Figure 1 shown, the verification processing system may include a server 101 and at least one terminal 102. Among them:
[0056] The terminal 102 may include but is not limited to: PC (Personal Computer), PDA (tablet computer), mobile phone, ATM (Automatic Teller Machine), wearable intelligent device, etc.; the terminal 102 is configured with a display device, and the display device may also be a monitor, a display screen, a touch screen, etc., and the touch screen may also be a touch control screen, a touch control panel, etc.; various application clients may be included in the terminal 102; an application client refers to an application program installed and running in the terminal, and the types of application clients may include but are not limited to: IM (Instant Messaging) client, content interaction client, SNS (Social Networking Services) client, etc. Among them, an IM client refers to an application program that realizes online chatting and communication based on instant messaging technology, such as WeChat, QQ, enterprise WeChat, mobile office software, etc. A content interaction client refers to an application program that can realize content interaction, such as online banking, Weibo, personal space, news and other application programs. An SNS client refers to an application program that can realize social interaction, such as a map application program, a game application program, etc. that include social interaction functions. Specifically, when the user opens a certain application client installed in the terminal 102 (such as WeChat, online banking, enterprise WeChat, QQ, etc.), the display device of the terminal 102 displays a verification page, and the verification page is used to prompt the user to input a password string; the terminal 102 verifies the input password string to be verified; if the password string is verified successfully, the display device of the terminal 102 switches the verification page to a service page (the service page may be the first display page after the application client is opened). It can be understood that in addition to running the application client may require inputting a password string, logging in to a device (such as the server 101, the terminal 102, etc.) may also require inputting a password string. In this embodiment of the application, the verification processing solution is described by taking the input of the password string of the application client as an example, and it will not have a limiting effect on this embodiment of the application.
[0057] The server 101 may be a background server of various application clients in the terminal 102, and is used to interact with the terminal 102 to provide computing and application service support for various application clients in the terminal 102. The server may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, as well as big data and artificial intelligence platforms. The terminal 102 and the server 101 may be directly or indirectly connected through wired or wireless communication methods, and this application does not make any restrictions here.
[0058] Figure 1 The verification processing system shown can execute a verification processing method, thereby changing the verification processing mode of the static password and improving the security of the password string. The verification processing method may include but is not limited to the following steps:
[0059] (1) The terminal 102 displays a configuration page. The configuration page refers to the page displayed by the application client in the terminal 102 for initial setting or resetting the password string required to log in to the application client. Here, the application client is any application client installed in the terminal 102, and the configuration page is the registration page displayed by the terminal 102 when registering the application client. The configuration page includes a configuration area, the configuration area includes a configuration keyboard, the configuration keyboard is a read-write keyboard (read and write operations can be performed on the keyboard, and the write operations here may include but are not limited to: clicking, swiping, etc.), and the configuration keyboard includes at least one randomly generated character, and the at least one character can be randomly displayed in the configuration keyboard according to the character display position in the configuration keyboard; among them, at least one character in the configuration keyboard can be randomly generated by the terminal 102 using a dynamic mapping algorithm, and the dynamic mapping algorithm is a mapping algorithm used to randomly generate characters, and the dynamic mapping algorithm may include but is not limited to: random number generation algorithm, hash mapping algorithm, distributed mapping algorithm, etc. A schematic diagram of the configuration page can be seen in Figure 2 , Figure 2 shows a schematic diagram of a configuration page provided by an exemplary embodiment of the present application; as Figure 2 shown, the configuration page 201 includes a configuration area 202, and the configuration area 202 includes a configuration keyboard 203.
[0060] (2) Obtain P characters sequentially selected in the configuration keyboard, where P is a positive integer. Among them, the P characters form a password string in the order of being selected. The operation methods for the user to select characters in the configuration keyboard may include but are not limited to: click operation (touch a character with a finger and then release it, and then touch the next character), or swipe operation (touch a character with a finger and keep the touch action to swipe from the previous character to the next character). For example, as Figure 2As shown, the configured keyboard 203 contains 9 characters: K1, K2, K3, K4, K5, K6, K7, K8, and K9. Let P be set to 5, indicating that the user needs to sequentially select 5 characters from the 9 characters to form a password string. For example, if the user sequentially clicks on the 5 characters K1, K4, K5, K8, and K9 on the configured keyboard 203, the 5 sequentially selected characters are K1 - K4 - K5 - K8 - K9, and the password string is K1K4K5K8K9. Another example: If the user continuously slides their finger from K1 to K9 on the configured keyboard 203, passing through the 5 characters K1, K4, K5, K8, and K9 in sequence, the sliding trajectory s1s2s3s4 can be obtained based on the character display positions of K1, K4, K5, K8, and K9 on the configured keyboard, and the password string is K1K4K5K8K9.
[0061] (3) Generate verification information based on the P characters and their character display positions. The verification information includes a first position sequence formed by the character display positions of the P characters on the configured keyboard in the selected order of the P characters. Taking Figure 2 the configured keyboard 203 and coordinate system shown as an example for illustration, if the characters sequentially selected on the configured keyboard 203 are K1, K4, K5, K8, and K9, then based on the coordinate system, the character display positions of K1, K4, K5, K8, and K9 on the configured keyboard 203 can be determined. For example, the character display position of K1 is (x1, y1), the character display position of K4 is (x1, y2), the character display position of K5 is (x2, y2), the character display position of K8 is (x2, y3), and the character display position of K9 is (x3, y3); the first position sequence formed by the character display positions of K1, K4, K5, K8, and K9 in the selected order is (x1, y1) - (x1, y2) - (x1, y2) - (x2, y3) - (x3, y3).
[0062] In one embodiment, the terminal 102 can directly store the first position sequence (i.e., the verification information). In another embodiment, the terminal 102 can use a dynamic encryption algorithm to encrypt the first position sequence (i.e., the verification information), generate a dynamic character sequence and store it. The dynamic encryption algorithm can be the dynamic mapping algorithm mentioned above. For specific details, refer to the relevant description of the dynamic mapping algorithm above and will not be elaborated here. Taking the terminal 102 using the dynamic mapping algorithm to encrypt the first position sequence as an example, since each position in the first position sequence corresponds to a character randomly generated by the dynamic mapping algorithm in the configured keyboard, the character sequence corresponding to the first position sequence in the configured keyboard can be used as the dynamic character sequence for storage. For example, if the character sequence corresponding to the first position sequence in the configured keyboard is K1 - K4 - K5 - K8 - K9, the terminal 102 stores the character sequence K1 - K4 - K5 - K8 - K9 as the dynamic character sequence. In addition, the characters in the configured keyboard can be randomly recalculated and updated using the dynamic mapping algorithm at a certain frequency, and the terminal 102 can also update the dynamic character sequence stored in the storage space according to this frequency. For example, if the character sequence of the first position sequence input by the user is K1 - K2 - K3 - K4 - K5, what the terminal 102 actually stores is the dynamic character sequence generated by using the dynamic mapping algorithm based on the character sequence K1 - K2 - K3 - K4 - K5 (for example, the stored dynamic character sequence is R1 - R2 - R3 - R4 - R5); by way of illustration, Figure 3 shows a schematic diagram of generating characters using the dynamic mapping algorithm provided by an exemplary embodiment of the present application; as Figure 3As shown, the characters in the configured keyboard to which the first position sequence belongs are: K1, K2, K3, K4, K5, K6, K7, K8, K9 respectively, and the character sequence of the first position sequence is K1-K4-K5-K8-K9; then, the updated characters corresponding to the character display positions of each character in the first position sequence can be randomly calculated by using the dynamic mapping algorithm. For example, by using the dynamic mapping algorithm to randomly calculate, the updated characters corresponding to the character display positions of each character in the first position sequence are: R1, R4, R5, R8, R9 respectively. Then, in the updated configured keyboard, the character sequence composed of each character forming the first position sequence is: R1-R4-R5-R8-R9, and the terminal 102 stores the character sequence R1-R4-R5-R8-R9 as the dynamic character sequence; it should be noted that for the other positions in the configured keyboard except the character display positions of each character in the first position sequence, the characters randomly generated by using the dynamic mapping algorithm can be used for display, and the embodiments of the present application do not limit this. In one implementation manner, the terminal 102 can use the dynamic encryption algorithm to generate and store the dynamic character sequence R1-R2-R3-R4-R5; in another implementation manner, the terminal 102 can send the character sequence K1-K4-K5-K8-K9 of the first position sequence to the server 101, and the server 101 uses the dynamic encryption algorithm to generate the dynamic character sequence R1-R4-R5-R8-R9 and send the dynamic character sequence R1-R4-R5-R8-R9 to the terminal 102 for storage.
[0063] It can be seen that the terminal 102 can implement the function of setting the password string by executing the implementation process described in the foregoing steps (1) to (3).
[0064] In the password string setting scheme described in steps (1) to (3), the displayed configuration page includes a configuration area, the configuration area includes a configured keyboard, and at least one character included in the configured keyboard is randomly generated. P characters sequentially selected in the configured keyboard can be obtained in the configured keyboard, where the sequentially selected P characters form a password string, and then verification information is generated according to the P characters and the character display positions of the P characters; since the verification information is the first position sequence formed by the character display positions of the P characters in the configured keyboard in the selected order of the P characters, the position sequence (verification information) of the P characters is stored, rather than storing the symbols or instructions represented by the P characters themselves. In this way, even if the symbols or instructions represented by the characters themselves are leaked, since the position sequence of the P characters is stored, in the subsequent password string verification process, the password string composed of the leaked P characters cannot pass the verification, thereby effectively improving the security of the password string.
[0065] (4) The terminal 102 displays a verification page. The verification page may refer to a page displayed in the application client of the terminal 102 for inputting a password string. Here, the application client is any application client installed on the terminal 102, so the verification page is the login page displayed by the terminal 102 when logging in to this application client; for example, the application client can be WeChat, and the verification page is the WeChat login page displayed by the terminal 102 when logging in to WeChat. The verification page may include a display area and an input area. The display area is used to display M character verification keyboards, where M is a positive integer; the character verification keyboard is a read-only keyboard (only the keyboard can be read, and write operations cannot be performed on the keyboard), and at least one character randomly displayed at the character display position is included in the character verification keyboard. Each of the M character verification keyboards is a complete keyboard area, and the characters included in each character verification keyboard may be partially the same or completely different. For a schematic diagram of the verification page, please refer to Figure 4 , Figure 4 which shows a schematic diagram of a verification page provided by an exemplary embodiment of the present application. As Figure 4 shown, the verification page 401 includes a display area 402 and an input area 403.
[0066] (5) Obtain the password string to be verified input in the input area. The password string includes N characters input in sequence, where N is a positive integer, and the characters in the password string are the characters displayed in the character verification keyboard. Among them, the N characters input in sequence may be distributed in the same character verification keyboard; or distributed in multiple character verification keyboards. As Figure 4 shown, the characters N1, N5, N8 in the input area are distributed in the first character verification keyboard, and the characters R4, R9 are distributed in the last character verification keyboard. For the user, the user only needs to remember the character display positions of each character that makes up the password string in the character verification keyboard, and the trajectory of the character display positions of each character on the character verification keyboard when inputting each character in sequence. When inputting the password string subsequently, the user can conceive the character display positions of each character and the trajectory of the character display positions of each character on the character verification keyboard according to the M character verification keyboards, and input the characters corresponding to the trajectory in sequence according to the trajectory of each character on the character verification keyboard to complete the input of the password string.
[0067] (6) Verify the password string according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. In the embodiment of the present application, the password string is verified by verifying the character display positions and input order of each character in the password string. Taking the process of setting the password string described in Figure 2 and the process of inputting the password string described in Figure 4 as an example, asFigure 2 As shown, the character display positions of the characters that make up the password string are (x1, y1), (x1, y2), (x2, y2), (x2, y3), (x3, y3) respectively, and the input order is (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3); for example Figure 4 As shown, the password string in the input area is N1R4N5N8R9, and the corresponding character display positions are (x1, y1), (x1, y2), (x2, y2), (x2, y3), (x3, y3), and the input order is (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3); compare Figure 2 the obtained character display positions and input order of each character with Figure 4 the obtained character display positions and input order of each character, and it can be determined that Figure 2 the obtained character display positions of each character are the same as Figure 4 the obtained character display positions of each character, and Figure 2 the obtained input order of each character is the same as Figure 4 the obtained input order of each character, indicating that the password string verification is successful; if Figure 2 the obtained character display positions of each character are not the same as Figure 4 the obtained character display positions of each character, or Figure 2 the obtained input order of each character is not the same as Figure 4 the obtained input order of each character, then it indicates that the password string verification fails.
[0068] It can be seen that the terminal 102 can implement the functions of password string input and verification by executing the implementation process described in the foregoing steps (4) to (6).
[0069] In the embodiments of the present application, the displayed verification page includes a display area and an input area. The display area is used to display M read-only character verification keyboards, and each character verification keyboard includes at least one character randomly displayed at a character display position. The input area is used to receive the password string to be verified. The password string includes N characters input in sequence. Then, the password string is verified according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. First, since the character verification keyboard is a read-only keyboard, that is, no writing operation can be performed on the keyboard, this can avoid leaving traces of the password string input on the character verification keyboard and improve input security. Second, each character included in the character verification keyboard is randomly generated, so each time the verification page is displayed, the characters in the character verification keyboards included in the verification page are different, which further improves security. Third, the verification is performed according to the input order of the characters in the password string and their character display positions in the character verification keyboard, rather than the symbols or instructions represented by the characters themselves. Even if the N characters in the input password string are leaked, since the characters in the character verification keyboard displayed each time will change, it means that in the next verification process, these N characters may not exist in the character verification keyboard, or even if they exist in the character verification keyboard, the character display positions have changed. Therefore, the password string composed of these leaked N characters cannot pass the verification, effectively improving the security of the password string.
[0070] Based on the description of the foregoing verification processing system, please refer to Figure 5 , Figure 5 which is a schematic flowchart of a verification processing method provided by an embodiment of the present application. This verification processing method can be implemented by the Figure 1 terminal 102 shown. This method may include but is not limited to the following steps S501 - S503:
[0071] S501, the terminal displays a verification page, and the verification page includes a display area and an input area.
[0072] The user uses the application client to open and display the verification page. The verification page includes a display area and an input area. The display area displays M character verification keyboards. Here, the character verification keyboard is a read-only keyboard, and the character verification keyboard includes at least one character, and these characters are randomly generated, such as randomly generated by using a dynamic mapping algorithm. As Figure 4 shown, Figure 4 shows a schematic diagram of a verification page provided by an exemplary embodiment of the present application.
[0073] S502, the terminal obtains the password string to be verified entered in the input area. The password string includes N characters entered in sequence, where N is a positive integer, and the characters in the password string are the characters displayed on the character verification keyboard. As Figure 4 shown, M character verification keyboards are displayed on the verification page, and the user enters the password string to be verified in the input area according to the M character verification keyboards.
[0074] In one implementation, the user can select one of the M character verification keyboards and enter the password string to be verified in the input area according to this character verification keyboard; as Figure 6a shown, the user can select the first character verification keyboard in the display area. Then the user observes the character display positions of each character on the first character verification keyboard and conceives the trajectory of the first position sequence of the set password string on the character verification keyboard. Based on the trajectory of the first position sequence on the character verification keyboard, the user enters each character that makes up the trajectory in the input area; for example, the trajectory of the first position sequence of the password string in the user's memory on the character verification keyboard is Figure 2 the trajectory composed of the coordinates (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3) in the coordinate system. In Figure 6a the first character verification keyboard shown, the character corresponding to the coordinate (x1, y1) is N1, the character corresponding to the coordinate (x1, y2) is N4, the character corresponding to the coordinate (x1, y2) is N5, the character corresponding to the coordinate (x2, y3) is N8, and the character corresponding to the coordinate (x1, y2) is N9. Then the user can enter the password string N1N4N5N8N9 in the input area according to the characters passed by this trajectory.
[0075] In another implementation, the user can select multiple character verification keyboards among the M character verification keyboards and enter the password string to be verified in the input area according to the multiple character verification keyboards; as Figure 6b shown, the user selects the first character verification keyboard and the last character verification keyboard among the M character verification keyboards and enters the password string to be verified in the input area according to the first character verification keyboard and the last character verification keyboard. Specifically, the user observes the character display positions of each character on the first character verification keyboard and the last character verification keyboard and conceives the trajectory of the first position sequence of the set password string on the first character verification keyboard and the last character verification keyboard. Based on the trajectory of the first position sequence on the first character verification keyboard and the last character verification keyboard, the user enters each character that makes up the trajectory in the input area of the first character verification keyboard and the last character verification keyboard; for example, the trajectory of the first position sequence of the password string in the user's memory on the character verification keyboard is Figure 2The trajectory formed by the coordinates (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3) in the coordinate system, in Figure 6b In the first character verification keyboard shown, the character corresponding to the coordinate (x1, y1) is N1, the character corresponding to the coordinate (x1, y2) is N4, the character corresponding to the coordinate (x1, y2) is N5, the character corresponding to the coordinate (x2, y3) is N8, the character corresponding to the coordinate (x1, y2) is N9, in Figure 6b In the last character verification keyboard shown, the character corresponding to the coordinate (x1, y1) is R1, the character corresponding to the coordinate (x1, y2) is R4, the character corresponding to the coordinate (x1, y2) is R5, the character corresponding to the coordinate (x2, y3) is R8, the character corresponding to the coordinate (x1, y2) is R9. Then the user can input the password string: N1R4N5N8R9, or, R1R4N5N8R9, or, N1R4R5R8R9, etc. according to the characters corresponding to the trajectory in the input area. The above password strings can all be verified successfully.
[0076] S503, the terminal verifies the password string according to the input order of N characters and the character display positions of N characters in M character verification keyboards.
[0077] In one embodiment, the method for verifying a password string according to the input order of N characters and the character display positions of the N characters on the character verification keyboard may include, but is not limited to: obtaining a second position sequence corresponding to the password string, where the second position sequence refers to the position sequence formed by the character display positions of the N characters on the character verification keyboard in the input order of the N characters; comparing the first position sequence and the second position sequence; if the two are the same, the password string is verified successfully. Among them, since the first position sequence may be stored in the storage space in the form of a dynamic character sequence, before performing the operation of comparing the first position sequence and the second position sequence, the dynamic character sequence may also be obtained from the storage space, and the dynamic encryption algorithm is used to decrypt the dynamic character sequence to obtain the first position sequence. For example, if the 5 selected characters on the configured keyboard are K1K4K5K8K9, and the character display position of K1 is (x1, y1), the character display position of K4 is (x1, y2), the character display position of K5 is (x1, y2), the character display position of K8 is (x2, y3), and the character display position of K9 is (x3, y3), then the first position sequence formed by the character display positions of the 5 characters on the configured keyboard in the input order of P characters is (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3); if the selected characters on the character verification keyboard are R1R4R5R8R9, and the character display position of R1 is (x1, y3), the character display position of R4 is (x1, y2), the character display position of R5 is (x1, y2), the character display position of R8 is (x2, y3), and the character display position of R9 is (x3, y3), then the second position sequence formed by the character display positions of the N characters on the character verification keyboard in the input order of the N characters is (x1, y3)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3); comparing the first position sequence (x1, y1)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3) and the second position sequence (x1, y3)-(x1, y2)-(x1, y2)-(x2, y3)-(x3, y3), it can be seen that the first position sequence is not the same as the second position sequence, so it is determined that the password string verification fails.
[0078] In another embodiment, the method for verifying the password string may further include: verifying whether the values of P and N are the same. If the values of P and N are different, it indicates that the number of characters in the set password string is different from the number of characters in the input password string, and then it is determined that the verification of the password string fails. For example, if the number of selected characters in the configured keyboard is 6 (the value of P), and the number of selected characters in the character verification keyboard is 5 (the value of N), then it is determined that the password string verification fails. It should be noted that even if the values of P and N are verified to be the same, the step of verifying the password string according to the input order of N characters and the character display positions of N characters in the character verification keyboard still needs to be executed; if the values of P and N are verified to be different, the step of verifying the password string according to the input order of N characters and the character display positions of N characters in the character verification keyboard may no longer be executed.
[0079] Based on the implementation process described in steps S501 - S503, it can be seen that the content described in steps S501 - S503 involves the process of password string input and verification. The embodiments of the present application also support the function of setting the password string. The specific implementation process of setting the password string can be seen in the following content.
[0080] In one embodiment, the terminal displays a configuration page. The configuration page includes a configuration area, and the configuration area includes a configuration keyboard. The configuration keyboard is a read - write keyboard, and the configuration keyboard includes at least one randomly generated character, where at least one character is randomly displayed according to the character display positions in the configuration keyboard; obtain P characters sequentially selected in the configuration keyboard, where P is a positive integer; the terminal generates verification information according to the P characters and the character display positions of the P characters. The verification information includes a first position sequence formed by the character display positions of the P characters in the configuration keyboard according to the selection order of the P characters.
[0081] It can be seen that the terminal can obtain P characters sequentially selected in the configuration keyboard, where the sequentially selected P characters form a password string, and then generate verification information according to the P characters and the character display positions of the P characters; since the verification information is a first position sequence formed by the character display positions of the P characters in the configuration keyboard according to the selection order of the P characters, the position sequence (verification information) of the P characters is stored, rather than storing the symbols or instructions represented by the P characters themselves. In this way, even if the symbols or instructions represented by the characters themselves are leaked, since the stored is the position sequence of the P characters, the password string composed of these P leaked characters cannot pass the verification during the subsequent password string verification process, thus effectively improving the security of the password string.
[0082] In the embodiments of the present application, the displayed verification page includes a display area and an input area. The display area is used to display M read-only character verification keyboards, and each character verification keyboard includes at least one character randomly displayed at a character display position. The input area is used to receive the password string to be verified. The password string includes N characters input in sequence. Then, the password string is verified according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. First, since the character verification keyboard is a read-only keyboard, that is, no writing operation can be performed on the keyboard, this can avoid leaving traces of the password string input on the character verification keyboard and improve the input security. Second, each character included in the character verification keyboard is randomly generated, so each time the verification page is displayed, the characters in the character verification keyboards included in the verification page are all different, which further improves the security. Third, the verification is performed according to the input order of the characters in the password string and the character display positions in the character verification keyboards, rather than the symbols or instructions represented by the characters themselves. Even if the N characters in the input password string are leaked, since the characters in the character verification keyboards displayed each time will change, it means that in the next verification process, these N characters may not exist in the character verification keyboards, or even if they exist in the character verification keyboards, the character display positions have changed. Therefore, the password string composed of these N leaked characters cannot pass the verification, effectively improving the security of the password string.
[0083] See Figure 7 , Figure 7 shows a schematic flowchart of another verification processing method provided by an exemplary embodiment of the present application. This verification processing method can be implemented by the Figure 1 terminal 102 shown. The method includes but is not limited to the following steps S701 - S704:
[0084] Step S701, the terminal displays a verification page, and the verification page includes a display area and an input area.
[0085] Step S702, the terminal controls the display of the M character verification keyboards.
[0086] Among them, the display control refers to controlling the appearance state of the character verification keyboard. The appearance state can include display or hide. Display means that the character verification keyboard is visible, and hide means that the character verification keyboard is invisible.
[0087] Step S703, the terminal obtains the password string to be verified input in the input area. The password string includes N characters input in sequence, where N are all positive integers.
[0088] Step S704: The terminal verifies the password string according to the input order of the N characters and the character display positions of the N characters on the M-character verification keyboard.
[0089] In one embodiment, the display area includes a display control. In step 702, the terminal can control the display of the M-character verification keyboard through this display control. The display control method may include, but is not limited to: when the display control in the display area is triggered and the M-character verification keyboard is in the display state, hiding the M-character verification keyboard in the display area; when the display control in the display area is triggered and the M-character verification keyboard is in the hidden state, displaying the M-character verification keyboard in the display area. In this implementation, the user can trigger the display control to realize the display control of the M-character verification keyboard. For example, when the current M-character verification keyboard is in the display state and the user triggers the display control, the terminal hides the M-character verification keyboard. At this time, the user can input the password string in the input area according to the character display positions of the M-character verification keyboard in memory, so that the character display positions of each character in the password string on the M-character verification keyboard and the password string cannot be leaked at the same time, improving the security of the password string. Similarly, if the M-character verification keyboard is in the hidden state and the user can trigger the display control, the terminal will display the M-character verification keyboard.
[0090] In one implementation, the display control can be a key or a button, etc. For example, Figure 8a shows a schematic diagram of another verification page provided by an exemplary embodiment of the present application; as Figure 8a shown, a display control 801 is displayed in the display area 402 included in the verification page 401; the display control 801 is presented as a key. When the display control 801 in the display area 402 is triggered and the M-character verification keyboard is in the display state, the M-character verification keyboard is hidden in the display area 402; when the display control 801 in the display area 402 is triggered and the M-character verification keyboard is in the hidden state, the M-character verification keyboard is displayed in the display area 402. In another implementation, the display control can be a slider; for example: Figure 8b shows a schematic diagram of yet another verification page provided by an exemplary embodiment of the present application; as Figure 8b shown, the display area includes a slider 804 for adjusting the transparency. When the pointer in the slider 804 slides, the transparency of the character verification keyboard can be adjusted; the lower the transparency of the character verification keyboard, the easier it is to see the characters included in the character verification keyboard, and the higher the transparency of the character verification keyboard, the less likely it is to see the characters included in the character verification keyboard. For example Figure 8bAs shown, dragging the pointer from 0 to 100% indicates that the transparency of the character verification keyboard is adjusted from 0 to 100%, and further indicates that the character verification keyboard is adjusted from the display state to the hidden state.
[0091] It can be understood that the number of display controls included in the display area can be one or more. In one implementation, the display area includes one display control (see Figure 8a ); The method for the terminal to control the display of M character verification keyboards through one display control may include, but is not limited to: when the display control in the display area is triggered and the M character verification keyboards are in the display state, hiding the M character verification keyboards in the display area; Or, when the display control in the display area is triggered and all M character verification keyboards are in the hidden state, displaying the M character verification keyboards in the display area. In this implementation, one display control can control the display of M character verification keyboards. In another implementation, the display area includes M display controls, and one display control corresponds to one character verification keyboard; The method for the terminal to control the display of M character verification keyboards may include, but is not limited to: when a display control is triggered and the character verification keyboard corresponding to the triggered display control is in the display state, hiding the corresponding character verification keyboard in the display area; Or, when a display control is triggered and the character verification keyboard corresponding to the triggered display control is in the hidden state, displaying the corresponding character verification keyboard in the display area. In this implementation, one character verification keyboard corresponds to one display control, so M character verification keyboards correspond to M display controls. For example, Figure 8c shows another schematic diagram of a verification page provided by an exemplary embodiment of the present application; As Figure 8c shown, in the display area 402 included in the verification page 401, each character verification keyboard corresponds to a display control 802; When the display control 802 is triggered, the character verification keyboard corresponding to the display control 802 switches its display state; For example, when the first character verification keyboard is currently in the display state and the display control corresponding to the first character verification keyboard is triggered, the first character verification keyboard is hidden. Another example is that when the first character verification keyboard is currently in the hidden state and the display control corresponding to the first character verification keyboard is triggered, the first character verification keyboard is displayed.
[0092] In another embodiment, the method for the terminal to control the display of the M-character verification keyboard may include, but is not limited to: starting a countdown from the moment when the verification page starts to be displayed, and displaying the countdown value in the display area; when the countdown value is 0 and the M-character verification keyboard is in the display state, hiding the M-character verification keyboard in the display area; when the countdown value is 0 and the M-character verification keyboard is in the hidden state, displaying the M-character verification keyboard in the display area. In this implementation, when the terminal starts to display the verification page, the terminal synchronously starts a countdown and displays the countdown value in the display area of the verification page; when the countdown value changes to 0, the display state of the M-character verification keyboard is switched (the display state is switched to the hidden state or the hidden state is switched to the display state). It can be seen that through the countdown method, the terminal can directly implement the display control of the M-character verification keyboard. For example, Figure 8d shows another schematic diagram of a verification page provided by an exemplary embodiment of the present application; as Figure 8d shown, the M-character verification keyboard included in the verification page 401 is in the display state, and the countdown value 803 displayed in the display area 402 included in the verification page 401 is 30s. Then, starting from the moment when the countdown value is displayed, after 30s, the M-character verification keyboard is hidden in the display area 402.
[0093] The foregoing embodiments that use the display control method of the display control or the countdown method to control the display of the character verification keyboard can be flexibly selected and used according to actual needs. It can be understood that the display control methods of the above two embodiments can also be used in combination. The implementation method of their combined use may include: starting a countdown from the moment when the verification page starts to be displayed, and displaying the countdown value in the display area; when the countdown value changes to 0, presenting a display control in the display area; when the display control in the display area is triggered and the M-character verification keyboard is in the display state, hiding the M-character verification keyboard in the display area; when the display control in the display area is triggered and the M-character verification keyboard is in the hidden state, displaying the M-character verification keyboard in the display area. In this combined use implementation method, the presentation of the display control is controlled by the countdown, and then the display of the M-character verification keyboard is controlled by the presented display control.
[0094] In the embodiments of the present application, the terminal can control the display of an M-character verification keyboard, that is, control the M-character verification keyboard to be in a displayed state or a hidden state. For example, the terminal can set a display control in the display area. When the user triggers the display control, the terminal switches the display state of the M-character verification keyboard to the hidden state (or switches the hidden state to the displayed state). In this way, the user can actively control the display duration of the M-character verification keyboard on the verification page. If the user remembers the character display positions on the M-character verification keyboard and enters a password string in the input area when the M-character verification keyboard is in the hidden state, the character display positions of each character on the character verification keyboard and the password string entered in the input area will not be leaked at the same time, improving the security of the password string. Another example is that the terminal can also set a countdown in the display area. When the countdown value changes to 0, the terminal actively closes the M-character verification keyboard, so that the M-character verification keyboard will not be displayed on the verification page for a long time. In this way, the characters included in the character verification keyboard and the password string entered in the input area cannot be remembered in a short time, making it impossible to easily correspond the character display positions of each character on the character verification keyboard with the password string entered in the input area, reducing the risk of password string leakage and further improving the security of the password string.
[0095] Figure 9 FIG. 4 shows a schematic structural diagram of a verification processing device provided by an exemplary embodiment of the present application; the verification processing device can be used as a computer program (including program code) running in the terminal 102. For example, the verification processing device can be an application client (such as WeChat, QQ) in the terminal 102; the verification processing device can be used to execute Figure 5 、 Figure 7 Some or all of the steps in the method embodiments shown in FIG. 5. Please refer to Figure 9 FIG. 6, the verification processing device includes the following units:
[0096] A display unit 901, configured to display a verification page, where the verification page includes a display area and an input area. The display area is used to display an M-character verification keyboard. The character verification keyboard is a read-only keyboard, and at least one character randomly displayed at a character display position is included in the character verification keyboard;
[0097] A processing unit 902, configured to obtain a password string to be verified entered in the input area. The password string includes N characters entered in sequence, where M and N are both positive integers; the characters in the password string are the characters displayed on the character verification keyboard;
[0098] Verify the password string according to the input order of the N characters and the character display positions of the N characters on the M-character verification keyboard.
[0099] In one embodiment, the display unit 901 is further configured to:
[0100] display a configuration page, the configuration page includes a configuration area, the configuration area includes a configuration keyboard, the configuration keyboard is a read-write keyboard, and the configuration keyboard includes at least one randomly generated character; the at least one character is randomly displayed according to the character display positions in the configuration keyboard; the processing unit 902 is further configured to:
[0101] obtain P characters sequentially selected in the configuration keyboard, where P is a positive integer;
[0102] generate verification information according to the P characters and the character display positions of the P characters, the verification information includes a first position sequence formed by the character display positions of the P characters in the configuration keyboard according to the selection order of the P characters.
[0103] In one embodiment, the display area includes a display control; the processing unit 902 is further configured to:
[0104] when the display control in the display area is triggered and the M-character verification keyboard is in the displayed state, hide the M-character verification keyboard in the display area;
[0105] when the display control in the display area is triggered and the M-character verification keyboard is in the hidden state, display the M-character verification keyboard in the display area.
[0106] In one embodiment, the processing unit 902 is further configured to:
[0107] start a countdown from the moment when the verification page starts to be displayed, and display the countdown value in the display area;
[0108] when the countdown value is 0 and the M-character verification keyboard is in the displayed state, hide the M-character verification keyboard in the display area;
[0109] when the countdown value is 0 and the M-character verification keyboard is in the hidden state, display the M-character verification keyboard in the display area.
[0110] In one embodiment, the processing unit 902 is specifically configured to:
[0111] obtain a second position sequence corresponding to the password string, the second position sequence refers to a position sequence formed by the character display positions of N characters in the character verification keyboard according to the input order of the N characters;
[0112] compare the first position sequence and the second position sequence;
[0113] if the two are the same, the password string verification is successful.
[0114] In one embodiment, N characters are distributed in the same character verification keyboard; alternatively, N characters are distributed in multiple character verification keyboards.
[0115] In one embodiment, the processing unit 902 is further configured to:
[0116] Encrypt the first position sequence using a dynamic encryption algorithm to generate and store a dynamic character sequence;
[0117] Obtain the dynamic character sequence from the storage space and decrypt the dynamic character sequence using the dynamic encryption algorithm to obtain the first position sequence.
[0118] According to an embodiment of the present application, Figure 9 Each unit in the verification processing device shown can be separately or wholly combined into one or several other units to form, or a certain one (or some) of the units can be further split into a plurality of smaller units with functional division to form, which can achieve the same operation without affecting the realization of the technical effects of the embodiments of the present application. The above units are divided based on logical functions. In practical applications, the function of one unit can also be realized by multiple units, or the functions of multiple units can be realized by one unit. In other embodiments of the present application, the verification processing device may also include other units. In practical applications, these functions can also be assisted by other units and can be realized by the cooperation of multiple units. According to another embodiment of the present application, it can be achieved by running a computer program (including program code) capable of executing the respective steps involved in the corresponding method shown in Figure 5 , Figure 7 on a general computing device such as a computer including processing elements and storage elements such as a central processing unit (CPU), a random access storage medium (RAM), and a read-only storage medium (ROM), to construct a verification processing device as shown in Figure 9 and to implement the verification processing method of the embodiments of the present application. The computer program can be recorded on, for example, a computer-readable recording medium, loaded into the above computing device through the computer-readable recording medium, and run therein.
[0119] In an embodiment of the present application, the display unit 901 of the terminal 102 displays a configuration page. The configuration page includes a configuration area, and the configuration area includes a configuration keyboard. At least one character included in the configuration keyboard is randomly generated. The processing unit 902 can obtain P characters sequentially selected in the configuration keyboard in the configuration keyboard. Among them, the P characters sequentially selected form a password string, and then verification information is generated according to the P characters and the character display positions of the P characters. Since the verification information is the first position sequence formed by the character display positions of the P characters in the configuration keyboard in the selected order of the P characters, the position sequence (verification information) of the P characters is stored, rather than storing the symbols or instructions represented by the P characters themselves. In this way, even if the symbols or instructions represented by the characters themselves are leaked, since the position sequence of the P characters is stored, in the subsequent password string verification process, the password string composed of the leaked P characters cannot pass the verification, thereby effectively improving the security of the password string. In addition, the display unit 901 of the terminal 102 displays a verification page. The verification page includes a display area and an input area. The display area is used to display M read-only character verification keyboards. Each character verification keyboard includes at least one character randomly displayed at the character display position. The input area is used to receive the password string to be verified input. The password string includes N characters input in sequence, and the characters in the password string are the characters displayed in the M character verification keyboards. Then, the password string is verified according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. First, since the character verification keyboard is a read-only keyboard, that is, no writing operation can be performed on the keyboard, this can avoid leaving traces of password string input on the character verification keyboard and improve input security. Second, each character included in the character verification keyboard is randomly generated, so each time the verification page is displayed, the characters in the character verification keyboard included in the verification page are different, which further improves security. Third, verification is performed according to the input order of the characters in the password string and the character display positions in the character verification keyboard, rather than the symbols or instructions represented by the characters themselves. In this way, even if the N characters in the input password string are leaked, since the characters in the character verification keyboard displayed each time will change, it means that in the next verification process, these N characters may not exist in the character verification keyboard, or even if they exist in the character verification keyboard, the character display positions have changed. Therefore, the password string composed of the leaked N characters cannot pass the verification, thereby effectively improving the security of the password string.
[0120] Figure 10 FIG. shows a schematic structural diagram of a verification processing device provided by an exemplary embodiment of the present application. Please refer to Figure 10, the verification processing device includes a processor 1001, a communication interface 1002, and a computer-readable storage medium 1003. Among them, the processor 1001, the communication interface 1002, and the computer-readable storage medium 1003 can be connected through a bus or other means. Among them, the communication interface 1002 is used to receive and send data. The computer-readable storage medium 1003 can be stored in the memory of the verification processing device. The computer-readable storage medium 1003 is used to store a computer program, and the computer program includes program instructions. The processor 1001 is used to execute the program instructions stored in the computer-readable storage medium 1003. The processor 1001 (or CPU (Central Processing Unit)) is the computing core and control core of the verification processing device, and it is suitable for implementing one or more instructions. Specifically, it is suitable for loading and executing one or more instructions to implement the corresponding method flow or corresponding function.
[0121] The embodiment of the present application also provides a computer-readable storage medium (Memory). The computer-readable storage medium is a memory device in the verification processing device and is used to store programs and data. It can be understood that the computer-readable storage medium here can include both the built-in storage medium in the verification processing device and, of course, the extended storage medium supported by the verification processing device. The computer-readable storage medium provides a storage space, and this storage space stores the processing system of the verification processing device. And, one or more instructions suitable for being loaded and executed by the processor 1001 are also stored in this storage space. These instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory; optionally, it can also be at least one computer-readable storage medium located far from the aforementioned processor.
[0122] In one embodiment, the verification processing device can be Figure 1 the terminal 102 shown in the figure; one or more instructions are stored in the computer-readable storage medium; the processor 1001 loads and executes one or more instructions stored in the computer-readable storage medium to implement the corresponding steps in the above-mentioned verification processing method embodiment; in a specific implementation, one or more instructions in the computer-readable storage medium are loaded and executed by the processor 1001 to perform the following steps:
[0123] Display a verification page. The verification page includes a display area and an input area. The display area is used to display an M-character verification keyboard. The character verification keyboard is a read-only keyboard, and the character verification keyboard includes at least one character randomly displayed at the character display position.
[0124] Obtain the password string to be verified entered in the input area. The password string includes N characters entered in sequence, where both M and N are positive integers. The characters in the password string are the characters displayed on the character verification keyboard.
[0125] Verify the password string according to the input order of the N characters and the character display positions of the N characters on the M-character verification keyboard.
[0126] In one implementation, one or more instructions in the computer-readable storage medium are loaded by the processor 1001 and further perform the following steps:
[0127] Display a configuration page. The configuration page includes a configuration area, the configuration area includes a configuration keyboard. The configuration keyboard is a read-write keyboard, and the configuration keyboard includes at least one randomly generated character. The at least one character is randomly displayed according to the character display positions in the configuration keyboard.
[0128] Obtain P characters sequentially selected on the configuration keyboard, where P is a positive integer.
[0129] Generate verification information according to the P characters and the character display positions of the P characters. The verification information includes a first position sequence formed by the character display positions of the P characters on the P-character configuration keyboard according to the selection order of the P characters.
[0130] In one implementation, the display area includes a display control. One or more instructions in the computer-readable storage medium are loaded by the processor 1001 and further perform the following steps:
[0131] When the display control in the display area is triggered and the M-character verification keyboard is in the display state, hide the M-character verification keyboard in the display area.
[0132] When the display control in the display area is triggered and the M-character verification keyboard is in the hidden state, display the M-character verification keyboard in the display area.
[0133] In one implementation, one or more instructions in the computer-readable storage medium are loaded by the processor 1001 and further perform the following steps:
[0134] Start a countdown from the moment the verification page starts to be displayed, and display the countdown value in the display area.
[0135] When the countdown value is 0 and the M-character verification keyboard is in the display state, hide the M-character verification keyboard in the display area.
[0136] When the countdown value is 0 and the M-character verification keyboard is in the hidden state, display the M-character verification keyboard in the display area.
[0137] In one embodiment, when one or more instructions in a computer-readable storage medium are loaded by a processor 1001 and execute to verify a password string according to the input order of N characters and the character display positions in an N-character verification keyboard, the following steps are specifically executed:
[0138] Obtain a second position sequence corresponding to the password string, where the second position sequence refers to the position sequence formed by the character display positions of N characters in the character verification keyboard according to the input order of the N characters;
[0139] Compare the first position sequence and the second position sequence;
[0140] If the two are the same, the password string is successfully verified.
[0141] In one embodiment, the N characters are distributed in the same character verification keyboard; or, the N characters are distributed in multiple character verification keyboards.
[0142] In one embodiment, one or more instructions in a computer-readable storage medium are loaded by a processor 1001 and further execute the following steps:
[0143] Use a dynamic encryption algorithm to encrypt the first position sequence, generate a dynamic character sequence and store it;
[0144] One or more instructions in a computer-readable storage medium are loaded by a processor 1001 and further execute the following steps before comparing the first position sequence and the second position sequence:
[0145] Obtain the dynamic character sequence from the storage space, and use a dynamic encryption algorithm to decrypt the dynamic character sequence to obtain the first position sequence.
[0146] In the embodiment of the present application, the processor 1001 displays a configuration page. The configuration page includes a configuration area, and the configuration area includes a configuration keyboard. At least one character included in the configuration keyboard is randomly generated. The processor 1001 can obtain P characters sequentially selected in the configuration keyboard. Among them, the P characters sequentially selected form a password string, and then verification information is generated according to the P characters and the character display positions of the P characters. Since the verification information is the first position sequence formed by the character display positions of the P characters in the configuration keyboard in the selected order of the P characters, the position sequence (verification information) of the P characters is stored, rather than the symbols or instructions represented by the P characters themselves. In this way, even if the symbols or instructions represented by the characters themselves are leaked, since the stored is the position sequence of the P characters, the password string composed of the leaked P characters cannot pass the verification during the subsequent password string verification process, thus effectively improving the security of the password string. In addition, the processor 1001 displays a verification page. The verification page includes a display area and an input area. The display area is used to display M read-only character verification keyboards. Each character verification keyboard includes at least one character randomly generated at the character display position. The input area is used to receive the password string to be verified. The password string includes N characters input in sequence, and the characters in the password string are the characters displayed in the character verification keyboards. Then, the password string is verified according to the input order of the N characters and the character display positions of the N characters in the M character verification keyboards. First, since the character verification keyboard is a read-only keyboard, that is, no writing operation can be performed on the keyboard, this can avoid leaving traces of password string input on the character verification keyboard and improve input security. Second, each character included in the character verification keyboard is randomly generated. Then, each time the verification page is displayed, the characters in the character verification keyboards included in the verification page are different, which further improves security. Third, verification is performed according to the input order of the characters in the password string and the character display positions in the character verification keyboard, rather than the symbols or instructions represented by the characters themselves. In this way, even if the N characters in the input password string are leaked, since the characters in the character verification keyboard displayed each time will change, it means that in the next verification process, these N characters may not exist in the character verification keyboard, or even if they exist in the character verification keyboard, the character display positions have changed. Therefore, the password string composed of the leaked N characters cannot pass the verification, thus effectively improving the security of the password string.
[0147] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in combination with the embodiments disclosed in this application can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed in hardware or software depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this application.
[0148] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in the embodiments of the present invention are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium or transmitted through a computer-readable storage medium. The computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wirelessly (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that the computer can access or a data storage device such as a server or data center that includes one or more integrated available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (SSD)), etc.
[0149] As described above, the above are only specific embodiments of this application, but the protection scope of this application is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present invention can easily think of changes or substitutions, which should all be covered by the protection scope of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.
Claims
1. A verification processing method, characterized in that: The method comprises: Displaying a verification page, the verification page comprising a display area and an input area, the display area being used to display M character verification keyboards, the character verification keyboards being read-only keyboards, and the character verification keyboards comprising at least one character randomly displayed at a character display position; each of the character verification keyboards corresponds to a display control, the display control being used to control the corresponding character verification keyboard to be in a display state or a hidden state; Obtaining a password string to be verified input in the input area according to multiple character verification keyboards among the M character verification keyboards, wherein the password string includes N characters input in sequence, wherein M and N are both positive integers; and the N characters in the password string are distributed in the multiple character verification keyboards; Generate a second position sequence corresponding to the password string according to the input order of the N characters and the character display position of each character in the N characters in the corresponding character verification keyboard; the second position sequence refers to: the character display positions of the N characters in the plurality of character verification keyboards, a position sequence composed of the input order of the N characters; Compare the second position sequence with the first position sequence; the first position sequence is a position sequence consisting of the character display positions of the P characters selected by the user in the configuration keyboard in the configuration phase according to the selection order of the P characters, where P is a positive integer; If the second position sequence is the same as the first position sequence, the password string verification is successful.
2. The method according to claim 1, characterized in that The method further comprises: Displaying a configuration page, wherein the configuration page includes a configuration area, wherein the configuration area includes a configuration keyboard, wherein the configuration keyboard is a read-write keyboard, and wherein the configuration keyboard includes at least one randomly generated character; wherein the at least one character is randomly displayed according to a character display position in the configuration keyboard; Obtaining P characters selected in sequence in the configuration keyboard; Verification information is generated according to the P characters and the character display positions of the P characters, the verification information comprising a first position sequence consisting of the character display positions of the P characters in the configured keyboard in the order in which the P characters are selected.
3. The method according to claim 1, characterized in that The display area includes a display control; the method further includes: When the display control in the display area is triggered and the M character verification keyboards are in a display state, hiding the M character verification keyboards in the display area; When the display control in the display area is triggered and the M-character verification keyboard is in a hidden state, the M-character verification keyboard is displayed in the display area.
4. The method according to claim 1, characterized in that: The method further comprises: Starting the countdown from the moment the verification page begins to be displayed, and displaying the countdown value in the display area; When the countdown value is 0 and the M-character verification keyboard is in a display state, hiding the M-character verification keyboard in the display area; When the countdown value is 0 and the M-character verification keyboard is in a hidden state, the M-character verification keyboard is displayed in the display area.
5. The method according to claim 1, characterized in that The method further comprises: encrypting the first position sequence using a dynamic encryption algorithm to generate a dynamic character sequence and store the sequence; Before comparing the second position sequence with the first position sequence, the method further includes: The dynamic character sequence is acquired from the storage space, and the dynamic encryption algorithm is used to decrypt the dynamic character sequence to obtain the first position sequence.
6. A verification processing device, characterized in that: The device comprises: A display unit is used to display a verification page, wherein the verification page includes a display area and an input area, wherein the display area is used to display M character verification keyboards, wherein the character verification keyboards are read-only keyboards, and wherein the character verification keyboards include at least one character randomly displayed at a character display position; each of the character verification keyboards corresponds to a display control, wherein the display control is used to control the corresponding character verification keyboard to be in a display state or a hidden state; A processing unit is used to obtain a password string to be verified input in the input area according to multiple character verification keyboards among the M character verification keyboards, the password string including N characters input in sequence, wherein M and N are both positive integers, and the N characters in the password string are distributed in the multiple character verification keyboards; and generate a second position sequence corresponding to the password string according to the input sequence of the N characters and the character display position of each of the N characters in the corresponding character verification keyboard; the second position sequence refers to: the character display positions of the N characters in the multiple character verification keyboards, a position sequence composed of the input sequence of the N characters; compare the second position sequence with the first position sequence; the first position sequence is a position sequence composed of the character display positions of the P characters selected by the user in the configuration keyboard in the selection sequence of the P characters during the configuration stage, and P is a positive integer; if the second position sequence is the same as the first position sequence, the password string is successfully verified.
7. A verification processing device, characterized in that: The device comprises: a processor adapted to implement one or more instructions; and, A computer-readable storage medium storing one or more instructions, wherein the one or more instructions are suitable for being loaded by the processor and executing the verification processing method according to any one of claims 1 to 5.
8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more instructions, and the one or more instructions are suitable for being loaded by a processor and executing the verification processing method according to any one of claims 1 to 5.
9. A computer program product, characterized in that The computer program product includes one or more computer instructions, and when the computer instructions are loaded and executed, the verification processing method according to any one of claims 1 to 5 is executed.
Citation Information
Patent Citations
Gesture impression password setting and application method
CN104700007A