Login method, system, user equipment and storage medium

Abstract

The embodiment of the present invention relates to the field of communication security, and discloses a login method, system, user equipment and storage medium. The login method of the present invention includes: obtaining a user equipment serial number, wherein the serial number is an identifier for distinguishing each user equipment; determining a third-level login password according to the serial number; obtaining a third-level command interpreter shell permission using the third-level login password; wherein the third-level shell permission includes a root permission. This improves the difficulty of passwords being used by others after being leaked, thereby improving the security of system files of service equipment.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of communication security, and in particular to a login method, system, user equipment and storage medium. Background Art

[0002] At present, in order to ensure the security of the service equipment, a password is required for verification when the user terminal logs in to the service equipment. The user terminal can access the service equipment only after the verification is passed.

[0003] However, the initial password used for login is usually set uniformly at the factory. The initial passwords set at the factory are mostly the same or can be found on the network. The password is easy to crack, resulting in poor security. In addition, if the user changes the password during use, it is easy for the user to forget it, or the password is kept confidential for the sake of easy memorization. In the case of IP address leakage, it is easy for illegal personnel to log in and tamper with the device configuration by password cracking. Summary of the invention

[0004] The purpose of the embodiments of the present invention is to provide a login method, system, user equipment and storage medium, which increase the difficulty of passwords being used by others after being leaked, thereby improving the security of system files of service equipment.

[0005] To solve the above technical problems, an embodiment of the present invention provides a login method, including: obtaining a user device serial number, wherein the serial number is an identifier to distinguish each user device; determining a third-level login password based on the serial number; using the third-level login password to obtain a third-level command interpreter shell permission; wherein the third-level shell permission includes root permission.

[0006] An embodiment of the present invention also provides a user device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the above-mentioned login method.

[0007] An embodiment of the present invention further provides a login system, comprising: the above-mentioned user device and service device, wherein the user device is communicatively connected with the service device to operate files in the service device.

[0008] An embodiment of the present invention further provides a computer-readable storage medium storing a computer program, and the computer program implements the above-mentioned login method when executed by a processor.

[0009] Compared with the related art, the embodiment of the present invention uses the serial number of the user device to determine the third-level login password. Since the serial number of each user device is unique, the third-level login password determined according to the serial number is uniquely corresponding to the user device, and only the user device can pass the verification by using the corresponding third-level login password. Therefore, even if the password is leaked, it is still impossible to pass the verification using other devices, and thus it is impossible to obtain the third-level command interpreter shell permission, and it is also impossible to use the root permission to change the configuration of the system files, which increases the difficulty of being used by others after the password is leaked, thereby improving the security of the system files.

[0010] In addition, determining the third-level login password according to the serial number includes: sending the serial number to the encryption server so that the encryption server performs encryption calculation according to the serial number to obtain the corresponding third-level login password; receiving the third-level login password sent by the encryption server. Since the encryption algorithm is configured by the encryption server, the user device has no way of obtaining the encryption algorithm used to obtain the login password. Therefore, even if the serial number is known by others, since they cannot know the required encryption algorithm, they cannot determine the final login password, which increases the difficulty of knowing the login password.

[0011] In addition, the length of the third-level login password is less than or equal to 16 characters. The password length is limited to less than 16 characters to avoid being too long and inconvenient for users to enter.

[0012] In addition, before using the third-level login password to obtain the third-level command interpreter shell authority, it also includes: obtaining the first-level shell authority and obtaining the second-level shell authority; wherein the first-level shell authority is lower than the second-level shell authority, and the second-level shell authority is lower than the third-level shell authority; in the case of obtaining the second shell authority, the third-level login password is used to obtain the third-level command interpreter shell authority. The management authority is graded, and more operations can be performed only after obtaining a higher level of shell authority. The same steps that need to be verified are more cumbersome, thereby further improving the security of system files.

[0013] In addition, obtaining the first-level shell permission and obtaining the second-level shell permission includes: obtaining the first-level shell permission through a first preset login method; obtaining the second-level shell permission through a second preset login method; wherein the security of obtaining the permission through the second preset login method is greater than the security of obtaining the permission through the first preset login method. Since the login methods of different levels of shell permissions are different, and the login security is gradually increasing, the security of obtaining higher-level shell permissions is higher.

[0014] In addition, the first preset login method includes: a password-free login method; the second preset login method includes: logging in by verifying the user name and the preset password.

[0015] In addition, the first-level shell permissions include: file query permissions; the second-level shell permissions include: device monitoring permissions and basic command permissions.

[0016] In addition, before obtaining the first shell authority through the first preset login method, the method further includes: establishing a communication connection with the service device through a serial port connection method, or establishing a communication connection with the service device through a secure shell protocol SSH. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0018] Figure 1 is a flowchart of a login method according to an embodiment of the present application;

[0019] Figure 2 is a flowchart of a login method according to another embodiment of the present application;

[0020] Figure 3 is a schematic diagram of the structure of a user equipment according to an embodiment of the present application;

[0021] Figure 4 It is a structural diagram of the login system according to an embodiment of the present application. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical scheme and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. However, it will be appreciated by those skilled in the art that in the embodiments of the present invention, many technical details are provided to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can be implemented.

[0023] The division of the following embodiments is for the convenience of description and shall not constitute any limitation on the specific implementation of the present invention. The embodiments may be combined with each other and referenced to each other without contradiction.

[0024] The first embodiment of the present invention relates to a login method, including: obtaining a user device serial number, wherein the serial number is an identifier for distinguishing each user device; determining a third-level login password according to the serial number; obtaining a third-level command interpreter shell permission using the third-level login password; wherein the third-level shell permission includes a root permission. This increases the difficulty of the password being used by others after being leaked, thereby improving the security of the system files of the service device. The implementation details of the login method of this embodiment are described in detail below. The following content is only the implementation details provided for the convenience of understanding and is not necessary for implementing this solution.

[0025] The login method in this embodiment is as follows Figure 1 As shown, including:

[0026] Step 101: Obtain a user equipment serial number, where the serial number is an identifier for distinguishing each user equipment.

[0027] Step 102, determine the third-level login password according to the serial number.

[0028] Step 103, using the third-level login password to obtain the third-level command interpreter shell authority; wherein the third-level shell authority includes the root authority.

[0029] The command interpreter Shell is an important program for users to interact with the operating system. In the operating system, the shell has many functions and permissions, and the entire operating system can be controlled through the shell. In order to control the shell, it is necessary to verify the identity of the user who logs in to the shell, and then match the corresponding management permissions for the user. The third-level shell permission is the highest administrator permission, including root permissions, which can perform any operation on the operating system.

[0030] In this embodiment, the third-level login password for obtaining the third-level shell permission is determined according to the user device serial number. The user device serial number is an identifier for distinguishing each user device and is a globally unique identification code for electronic products. The user can view the serial number of the electronic product in the manual or warranty card of the electronic product, or search for the serial number in the menu of the electronic product, or even check the official website of the electronic product to determine the serial number.

[0031] A unique login password corresponding to the electronic product is generated according to the serial number, and the unique login password is the third-level login password. Different serial numbers generate different third-level login passwords, and there is no situation where the same third-level login password is generated using different serial numbers. The length of the third-level login password generated by different serial numbers can be different, and the content contained in the generated third-level login password can be a free combination of numbers, letters, special symbols, etc.

[0032] On the shell interface, enter the third-level login password determined by the serial number. If the password is verified correctly, the user device obtains the third-level command interpreter shell permission, that is, obtains the root permission of the device, and can perform any operation on the operating system.

[0033] Compared with the related art, the embodiment of the present invention uses the serial number of the user device to determine the third-level login password. Since the serial number of each user device is unique, the third-level login password determined according to the serial number is uniquely corresponding to the user device, and only the user device can pass the verification by using the corresponding third-level login password. Therefore, even if the password is leaked, it is still impossible to pass the verification using other devices, and thus it is impossible to obtain the third-level command interpreter shell permission, and it is also impossible to use the root permission to change the configuration of the system files, which increases the difficulty of being used by others after the password is leaked, thereby improving the security of the system files.

[0034] In addition, the third-level login password is determined according to the serial number. The third-level login password can be generated by the encryption server and sent to the user device, or the user device obtains the encryption algorithm and calculates the third-level login password according to the obtained encryption algorithm.

[0035] In the case where the third-level login password is generated by the encryption server, the following steps are included: sending the serial number to the encryption server so that the encryption server can perform encryption calculations based on the serial number to obtain the corresponding third-level login password; and receiving the third-level login password sent by the encryption server. Since the encryption algorithm is configured by the encryption server, the user device has no way of obtaining the encryption algorithm used to obtain the login password. Therefore, even if the serial number is known by others, since they cannot know the required encryption algorithm, they cannot determine the final login password, which increases the difficulty of knowing the login password.

[0036] In the case where the user device calculates the third-level login password by itself, the sequence number is sent to the encryption server, and the encryption server determines whether the received sequence number matches the unique sequence number corresponding to the user device that sent the information, and if they match, the encryption algorithm is returned to the user device. After receiving the encryption algorithm, the user device calculates the third-level login password.

[0037] The encryption algorithm mentioned above may be a hash algorithm. Encryption by the hash algorithm can ensure that the third-level login passwords generated by two different serial numbers are different, so as to improve the confidentiality of the password.

[0038] In addition, the length of the third-level login password is fixed, usually less than or equal to 16 characters. The password length is limited to less than 16 characters to avoid being too long and inconvenient for users to enter.

[0039] Another embodiment of the present invention relates to a login method. This embodiment introduces the differences between the first-level shell authority, the second-level shell authority and the third-level shell authority, as well as the different methods used to obtain different levels of shell authority. The login method in this embodiment includes:

[0040] Step 201, obtaining the first-level shell authority through a first preset login method.

[0041] Step 202: Obtain secondary shell authority through a second preset login method.

[0042] Step 203: Obtain the user equipment serial number, where the serial number is an identifier for distinguishing each user equipment.

[0043] Step 204, determine the third-level login password according to the serial number.

[0044] Step 205, using the third-level login password to obtain the third-level shell authority.

[0045] Specifically, in this embodiment, the serial port login of the user device or the login through the secure shell protocol SSH is divided into three levels of login. After completing the first level login, the first level shell permission is obtained, after completing the second level login, the second level shell permission is obtained, and after completing the third level login, the third level shell permission is obtained.

[0046] Only after obtaining the first-level shell permission can the user continue to obtain the second-level shell permission by logging in. Similarly, only after obtaining the second-level shell permission can the third-level shell permission be obtained by using the third-level login password. If the user fails to obtain the second shell permission, the third shell permission cannot be obtained. The first-level shell permission is lower than the second-level shell permission, and the second-level shell permission is lower than the third-level shell permission. For example, the first-level shell permission includes: query file permission; the second-level shell permission includes: device monitoring permission and basic command permission, and the third-level shell permission includes: root permission. Obtaining high-level shell permission can execute the operation commands contained in the low-level shell permission.

[0047] In addition, the security of obtaining permissions through the second preset login method is greater than the security of obtaining permissions through the first preset login method. For example, the first preset login method includes: a password-free login method; the second preset login method includes: logging in by verifying a user name and a preset password. Since different levels of shell permissions have different login methods and the login security is gradually increasing, it is more secure to obtain higher levels of shell permissions.

[0048] In addition, before obtaining the first shell authority through the first preset login method, the method further includes: establishing a communication connection with the service device through a serial port connection method, or establishing a communication connection with the service device through a secure shell protocol SSH.

[0049] The step division of the above methods is only for the purpose of clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0050] In addition, the present application also provides an apparatus embodiment corresponding to the first embodiment, and the login apparatus includes: an acquisition module for acquiring a user device serial number, wherein the serial number is an identifier for distinguishing each user device; a determination module for determining a third-level login password based on the serial number; a login module for obtaining a third-level command interpreter shell permission using the third-level login password; wherein the third-level shell permission includes root permission.

[0051] In addition, the login module is also used to obtain the first-level shell authority through the first preset login method; obtain the second-level shell authority through the second preset login method; and when obtaining the second shell authority, use the third-level login password to obtain the third-level command interpreter shell authority.

[0052] This embodiment can be implemented in conjunction with the above method embodiment. The relevant technical details mentioned in the method embodiment are still valid in this embodiment, and are not repeated here to reduce repetition. Accordingly, the relevant technical details mentioned in this embodiment can also be applied in the method embodiment.

[0053] It is worth mentioning that all modules involved in this embodiment are logic modules. In practical applications, a logic unit can be a physical unit, a part of a physical unit, or a combination of multiple physical units. In addition, in order to highlight the innovative part of the present invention, this embodiment does not introduce units that are not closely related to solving the technical problem proposed by the present invention, but this does not mean that there are no other units in this embodiment.

[0054] The embodiment of the present invention relates to a user equipment, such as Figure 3 As shown, it includes at least one processor 301; and a memory 302 that is communicatively connected to the at least one processor 301; wherein the memory 302 stores instructions that can be executed by the at least one processor 301, and the instructions are executed by the at least one processor 301 so that the at least one processor 301 can execute the above-mentioned triple extraction method.

[0055] The memory 302 and the processor 301 are connected in a bus manner, and the bus may include any number of interconnected buses and bridges, and the bus connects various circuits of one or more processors 301 and the memory 302 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on a transmission medium. The data processed by the processor is transmitted on a wireless medium through an antenna, and further, the antenna also receives data and transmits the data to the processor 301.

[0056] The processor 301 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management and other control functions. The memory 302 can be used to store data used by the processor when performing operations.

[0057] The embodiment of the present invention relates to a login system, such as Figure 4 As shown, the login system includes: the above-mentioned user device 41, the service device 42, and the user device 41 is in communication connection with the service device 42 to operate the files in the service device 42. The user device 41 obtains the operation authority of the system files of the service device 42 through the above-mentioned login method, and the operation authority at least includes the third shell authority.

[0058] The relevant technical details mentioned in the method embodiment are still valid in this embodiment, and will not be repeated here to reduce repetition. Accordingly, the relevant technical details mentioned in this embodiment can also be applied in the method embodiment.

[0059] The embodiment of the present invention relates to a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, the above method embodiment is implemented.

[0060] That is, those skilled in the art can understand that all or part of the steps in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a program, and the program is stored in a storage medium, including several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0061] Those skilled in the art will appreciate that the above embodiments are specific embodiments for implementing the present invention, and that in actual applications, various changes may be made in form and detail without departing from the spirit and scope of the present invention.

Claims

1. A login method, characterized in that: include: Obtaining a user equipment serial number, wherein the serial number is an identifier for distinguishing each user equipment; Determine the third-level login password according to the serial number, including: Sending the serial number to an encryption server, where the encryption server determines whether the received serial number matches the unique serial number corresponding to the user device sending the information; If they match, the encryption server performs encryption operation according to the serial number to obtain the corresponding third-level login password, or the encryption server obtains the encryption algorithm; Receiving the third-level login password or the encryption algorithm sent by the encryption server. If the encryption algorithm sent by the encryption server is received, the user device calculates the third-level login password according to the encryption algorithm; Using the third-level login password to obtain the third-level command interpreter shell authority; Among them, the third-level shell permissions include root permissions.

2. The login method according to claim 1, characterized in that: The length of the third-level login password is less than or equal to 16 digits.

3. The login method according to claim 1, characterized in that: include: Before using the third-level login password to obtain the third-level command interpreter shell authority, the method further includes: Obtain the first-level shell permissions and obtain the second-level shell permissions; The first-level shell authority is lower than the second-level shell authority, and the second-level shell authority is lower than the third-level shell authority; When the secondary shell authority is obtained, the step of using the third-level login password to obtain the third-level command interpreter shell authority is performed.

4. The login method according to claim 3, characterized in that: The step of obtaining the primary shell permission and the secondary shell permission includes: Obtain the first-level shell permission through the first preset login method; Obtain secondary shell permissions through the second preset login method; Among them, the security of obtaining permission through the second preset login method is greater than the security of obtaining permission through the first preset login method.

5. The login method according to claim 4, characterized in that: The first preset login method includes: a password-free login method; the second preset login method includes: logging in by verifying a user name and a preset password.

6. The login method according to claim 3, characterized in that: The first-level shell permissions include: file query permissions; the second-level shell permissions include: device monitoring permissions and basic command permissions.

7. A user equipment, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the login method as described in any one of claims 1 to 6.

8. A login system, characterized in that: include: The user device and the service device as claimed in claim 7, wherein the user device is communicatively connected with the service device to operate files in the service device.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the login method according to any one of claims 1 to 6 is implemented.

Images