A method and system for verifying a login

Abstract

The application provides a login verification method, comprising the following steps: a verification part internal logic of a server starts to execute a verification module; a data source array and a backup array are defined; a data source is subjected to a value assignment operation, and icons of different data types are generated; when a selected icon is clicked, the current data source is traversed; the verification module judges whether the selected icon is empty; if yes, the next step is executed, and the selected icon is subjected to a value assignment; the verification module judges whether the data source has an empty value; if no, the verification is completed. Compared with the traditional scheme, the scheme can reduce the occupied space, improve the page aesthetics, and strengthen the verification protection effect, so as to improve the security of the verification module, and effectively improve the running speed of the verification module due to the reduction of the occupied space.

Description

Technical Field

[0001] This invention relates to the field of web login management, and in particular to a login verification method. Background Technology

[0002] With the development of technology, the security requirements for website logins have gradually increased to prevent brute-force attacks or DDoS attacks on servers. When logging into a website, if the password is entered incorrectly multiple times or an abnormal login occurs, the user is required to perform a series of operations to complete the verification, such as sliding puzzles or image-based number input. However, image-based methods can still be cracked through dynamic recognition, posing a security risk to users, and sliding puzzles consume too much page space. Therefore, a new type of login verification module is needed to counter illegal network attacks. Summary of the Invention

[0003] The purpose of this invention is to provide a login verification method. This verification module prevents brute-force attacks by image recognition algorithms and has the characteristics of low space consumption.

[0004] To achieve the above objectives, the present invention is implemented through the following technical solution:

[0005] On one hand, the present invention provides a login verification method, comprising:

[0006] The server's internal logic for verification begins execution to generate the verification module;

[0007] Define a data source array and a spare array;

[0008] The system assigns values ​​to the data source and generates icons of different data types.

[0009] When the selected icon is clicked, the current data source is iterated through;

[0010] The verification module determines whether the currently selected icon is empty.

[0011] If so, execute the operation and assign a value to the currently selected icon;

[0012] The verification module determines whether the data source contains null values;

[0013] If not, verification complete.

[0014] Furthermore, the icons are divided into those with values ​​and those without values. Those with values ​​are the first type of icons, and those without values ​​are the second type of icons.

[0015] Furthermore, the verification module's determination of whether the currently selected icon is empty also includes: if not, executing S102 to reset the data source and reassign the data source value.

[0016] Furthermore, the verification module's determination of whether the data source contains null values ​​also includes: if so, waiting for the next icon selection until verification is completed.

[0017] Furthermore, the process of assigning values ​​to the data source and generating icons of different data types also includes the following method: the verification module generates icons of different data types and randomly selects a second type icon for emphasis display.

[0018] Furthermore, after assigning a value, the second type of icon is transformed into the first type of icon.

[0019] Furthermore, the verification module determines whether there are null values ​​in the data source; if so, it randomly selects a second type of icon and highlights it.

[0020] Furthermore, the process of assigning values ​​to the data source and generating icons of different data types also includes the following method: the verification module generates icons of different data types and emphasizes all icons of the second type.

[0021] Furthermore, the second type of icon supports assigning values ​​in any order. After assignment, the second type of icon is converted into the first type of icon, and the second type of icon continues to be highlighted when it is not selected.

[0022] On the other hand, the present invention provides a system for login verification, comprising:

[0023] The generation device, used for the server's verification section, begins executing the generation verification module;

[0024] Define a device to define a data source array and a spare array;

[0025] The assignment device is used to assign values ​​to the data source and generate icons of different data types;

[0026] A traversal device is used to traverse the current data source when the selected icon is clicked;

[0027] The generating device is also used for the verification module to determine whether the currently selected icon is an empty value;

[0028] The assignment device is used to assign a value to the currently selected icon when the verification module in the generation device determines that there is an empty value.

[0029] The generating device is further used by the verification module in the generating device to determine whether there are null values ​​in the data source;

[0030] The verification device is used to complete the verification when the verification module in the generation device determines that there are no null values ​​in the data source.

[0031] The beneficial effects of this invention are:

[0032] This invention achieves a novel icon design through a login verification module, thereby preventing the verification module from being cracked by dynamic identification by changing the login verification mode, and greatly reducing the space occupied by the verification module, thus improving the security of the verification module. Furthermore, the reduction in space occupied can effectively improve the running speed of the verification module. Attached Figure Description

[0033] Figure 1 A flowchart of method 1, a login verification method;

[0034] Figure 2 A flowchart of method 2, which is a login verification method;

[0035] Figure 3 This is a flowchart of method 3, which is a login verification method. Detailed Implementation

[0036] The embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0037] The following specific examples illustrate the implementation of this disclosure. Those skilled in the art can easily understand other advantages and effects of this disclosure from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this disclosure, and not all of them. This disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this disclosure. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. Based on the embodiments in this disclosure, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this disclosure.

[0038] See Figure 1 This application provides a login verification method, including the following steps:

[0039] S101, The internal logic of the server's verification section begins to execute, generating the verification module;

[0040] When a user logs in, the verification module will automatically activate if the user enters the wrong username and password three times consecutively, or if the user logs in from an unusual location, or if liveness verification is required to prevent DDoS attacks and threats to account security. Five circle icons will be displayed at the bottom of the password field, with three blue and two gray icons that continuously scale in size for strong guidance. A reminder will be displayed: "Please activate all icons before logging in."

[0041] S102. Define a data source array and a spare array;

[0042] The internal logic of the verification section begins executing the verification module, defining a data source array of length 5 as a dependency, and a spare array of length 2 or 3. After the verification module starts, it generates different numbers of random numbers based on the number of clicks required for verification. If 2 clicks are required, it generates three random numbers between 1 and 5; if 3 clicks are required, it generates two random numbers between 1 and 5. The generation process ensures that the numbers are unique; if duplicates are found, the array is regenerated. This array provides the data foundation for the verification module.

[0043] S103. Assign values ​​to the data source and generate icons of different data types;

[0044] After the data source is generated, the currently generated numbers are mapped to the corresponding positions in the array. For example, generate an array of 1, 3, and 5. Iterate through the current data to generate the initial view icon and bind a click event. Method 1: Directly generate icons. Items with values ​​are blue, and items without values ​​are gray. Categorize items with and without values ​​and display different icons to distinguish them so that users can easily identify them, while also preventing image recognition algorithms from identifying them.

[0045] S105. When the selected icon is clicked, iterate through the current data source;

[0046] When a user interacts with the login module, the login module waits for the user to click, then iterates through the current data source and identifies the status value of the clicked item.

[0047] S106. The verification module determines whether the currently selected icon is empty; if so, proceed to the next step.

[0048] After the login verification module determines the status value of the clicked item, it determines whether the clicked item is empty. When the login verification module determines that the clicked item is empty, it executes step S107.

[0049] S107. Assign a value to the currently selected icon;

[0050] The clicked item is assigned a value, transforming it into a valued item within the data source. It is then converted from a second-type icon to a first-type icon.

[0051] S108. The verification module determines whether the data source contains null values;

[0052] Once the verification module determines that there are no null values ​​in the current data source, it executes S109 to complete the verification; if there are still null values, it executes S105 and waits for the user's next click until there are no null values ​​in the data source before the verification is completed.

[0053] S109, Verification complete.

[0054] All verification buttons turn green, and the login button is activated or allowed to log in.

[0055] See Figure 2 This application provides a login verification method, another embodiment of which includes the following steps:

[0056] S201. When receiving three consecutive inputs or when verification is required during login;

[0057] S202. The internal logic of the verification section begins execution to generate the verification module. Define a data source array of length 5 as a dependency, and a spare array of length 2 or 3;

[0058] S203. Assign values ​​to the data source;

[0059] Steps S201 to S203 in this embodiment are similar to steps S101 to S103 in the previous embodiment, and will not be described again here.

[0060] S204, Method 2: Items with values ​​are blue, and items without values ​​are gray. Randomly select a gray icon, scale it, and flash it green.

[0061] After the assignment is completed, based on the data source, the icons displayed on the login interface will be blue if there are numbers and gray if there are no numbers. However, the order of the items to be clicked needs to be generated. Each time you enter, check the length of the current backup array. If the length is 1, directly take the current value. If the length is greater than 1, randomly generate a number from 1 to 6. If it is odd, take the first item in the first backup array and delete the current item. If it is even, take the second item. Repeat the current logic each time you click. After taking the current value, dynamically modify the corresponding icon on the page to make it flash green.

[0062] S205. When the user clicks, iterate through the current data source.

[0063] S206. Determine if the currently clicked item is empty;

[0064] S207. Assign a value to the clicked item, and then randomly select a gray icon to scale and flash green.

[0065] S208. Determine if the current data source contains null values;

[0066] S209. Verification complete.

[0067] Steps S205 to S209 in this embodiment are similar to steps S105 to S109 in the previous embodiment, and will not be repeated here.

[0068] See Figure 3 This application provides a login verification method, another embodiment of which includes the following steps:

[0069] S301, The internal logic of the server's verification section begins to execute, generating the verification module;

[0070] S302. Define a data source array and a spare array;

[0071] S303. Assign values ​​to the data source and generate icons of different data types;

[0072] Steps S301 to S303 in this embodiment are similar to steps S101 to S103 in the previous embodiment, and will not be repeated here.

[0073] S304, Method 3: Both items with and without values ​​are blue, and the icons of all items without values ​​are scaled and flashing blue;

[0074] Similar to Method 2, except that all the icons that are zoomed and flashed are blue and there is no restriction on the order of clicking them; users can click them in any order.

[0075] S305. When the selected icon is clicked, iterate through the current data source;

[0076] S306. The verification module determines whether the currently selected icon is empty.

[0077] S307. Assign a value to the currently selected icon;

[0078] S308. The verification module determines whether the data source contains null values;

[0079] S309. Verification complete.

[0080] Steps S305 to S309 in this embodiment are similar to steps S105 to S109 in the previous embodiment, and will not be repeated here.

[0081] If further security enhancements are needed, all three embodiments described above can increase the number of clickable items to be activated from two to three, thereby increasing the difficulty of brute-force attacks.

[0082] The above description is merely illustrative of the embodiments of the present invention and is not intended to limit the present invention. For those skilled in the art, any modifications, equivalent substitutions, improvements, etc., made without creative effort within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A login verification method, characterized in that, Includes the following steps: The server's internal logic for verification begins execution to generate the verification module; Define a data source array and a spare array; The data source is assigned a value and icons of different data types are generated. The icons are divided into those with values ​​and those without values. Those with values ​​are the first type of icon, and those without values ​​are the second type of icon. When the selected icon is clicked, the current data source is traversed. The verification module determines whether the currently selected icon is empty. If so, execute the following: assign a value to the currently selected icon; after the second type icon is assigned a value, the second type icon is converted into the first type icon. The verification module checks whether the data source contains null values; If not, verification complete.

2. The login verification method according to claim 1, characterized in that, The verification module's determination of whether the currently selected icon is empty also includes: if not, executing the data source reset step and reassigning the data source value.

3. The login verification method according to claim 1, characterized in that, The verification module's determination of whether the data source contains null values ​​also includes: if so, waiting for the next icon selection until verification is complete.

4. The login verification method according to claim 1, characterized in that, The process involves assigning values ​​to the data source and generating icons of different data types. It also includes the following method: the verification module generates icons of different data types, and randomly selects a second type icon for emphasis display.

5. The login verification method according to claim 4, characterized in that, The verification module determines whether there is a null value in the data source; if so, it randomly selects a second type icon and highlights it.

6. The login verification method according to claim 1, characterized in that, The process involves assigning values ​​to the data source and generating icons of different data types. It also includes the following method: the verification module generates icons of different data types and highlights all second-type icons.

7. The login verification method according to claim 6, characterized in that, The second type of icon can be assigned values ​​in any order. After being assigned a value, the second type of icon is converted into the first type of icon, and the second type of icon continues to be highlighted when it is not selected.

8. A system for login verification, characterized in that, include: The generation device, used for the server's verification section, begins executing the generation verification module; Define a device to define a data source array and a spare array; The assignment device is used to assign values ​​to the data source and generate icons of different data types. The icons are divided into items with values ​​and items without values. Items with values ​​are first type icons, and items without values ​​are second type icons. A traversal device is used to traverse the current data source when the selected icon is clicked; The generating device is also used for the verification module to determine whether the currently selected icon is an empty value; The assignment device is used to assign a value to the currently selected icon when the verification module in the generation device determines that there is a null value. After the second type icon is assigned a value, the second type icon is converted into the first type icon. The generating device is further used by the verification module in the generating device to determine whether there are null values ​​in the data source; The verification device is used to complete the verification when the verification module in the generation device determines that there are no null values ​​in the data source.

Images