Verification code verification method, system, electronic device and storage medium
By introducing rule information into the verification code technology to distinguish verification code and interference code and sending it to mobile devices, the problem that existing verification code technology is easy to be cracked is solved, improving the security of verification code and preventing verification Codes are abused.
Patent Information
- Application Number
- CN202210890694.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-07-27
- Publication Date
- 2025-02-25
- Estimated Expiration
- 2042-07-27
AI Technical Summary
The existing verification code technology is easily cracked by malicious programs, especially the advancement of image recognition technology, which makes it impossible to effectively distinguish between robots and real people by simply distorting and other interference methods, resulting in the abuse of verification codes to help crack other websites' verification codes.
By generating a verification picture containing the verification code and the interference code, and sending the rule information used to distinguish the verification code and the interference code to the mobile device, the client cannot effectively identify which part of the verification picture is verification through a malicious program Which part of the code is the interference code?
The security of verification code has been added, making it more difficult to maliciously crack verification codes, at least partially solving the problem of abuse of verification codes, preventing real users from being deceived to help crack verification codes.
Smart Images

Figure CN115150186B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of verification code technology, and in particular to a verification code verification method, system, electronic equipment and storage medium. Background Art
[0002] Captchas are used to distinguish between robots and real people. Early captchas generally used distorted text to reduce the recognition rate of robots. However, with the advancement of image recognition technology, simple distortion and other interference methods can no longer effectively distinguish between robots and real people. In order to crack the captchas that are difficult for AI to recognize, some people use malicious programs to send captchas to other websites, requiring users to enter the captcha before seeing the detailed content of the website. Users unknowingly help others "crack" the captcha. Summary of the invention
[0003] In view of this, embodiments of the present invention provide a verification code verification method, system, electronic device and storage medium to solve the technical defects in the above-mentioned methods.
[0004] In order to achieve the above-mentioned invention object, the following technical scheme is adopted:
[0005] In a first aspect, a verification code verification method is provided, the method comprising the steps of:
[0006] Obtaining a verification request from a client, generating a verification picture and rule information; the verification picture includes a check code and an interference code; the rule information is used to distinguish the check code from the interference code;
[0007] Output the verification image to the client; send the rule information to the mobile device;
[0008] Obtain a first verification code sent back by the client, and compare the first verification code with the verification code;
[0009] If they are consistent, the verification is successful.
[0010] Optionally, before obtaining the first verification code sent back by the client, the method further includes:
[0011] Obtaining a second verification code sent by the mobile device;
[0012] Comparing the second verification code with the interference code;
[0013] If they are consistent, the step of obtaining the first verification code sent back by the client and comparing the first verification code with the verification code is executed;
[0014] If they are inconsistent, the verification fails.
[0015] Optionally, before comparing the second verification code with the interference code, the method further includes:
[0016] The MAC address of the mobile device is obtained. If the MAC address of the mobile device is different from the reserved MAC address, the verification fails.
[0017] Optionally, the components of the check code and the interference code include one or more of words, letters, and numbers;
[0018] The interference code includes an identification mark.
[0019] Optionally, the rule information is voice information; the voice information broadcast identification mark is used to distinguish the check code from the interference code.
[0020] Optionally, constituent elements of the check code and the interference code are different, and the rule information is text information.
[0021] In a second aspect, an embodiment of the present invention further provides a verification code verification system, including a client and a user center, and also including a mobile device;
[0022] The mobile center is used to obtain the verification request of the client, generate a verification picture and rule information; the verification picture includes a check code and an interference code; the rule information is used to distinguish the check code from the interference code;
[0023] The client is used to receive the verification picture and send back a first verification code to the user;
[0024] The mobile device is used to receive the rule information;
[0025] When the user center obtains the first verification code sent back by the client, the first verification code is compared with the verification code;
[0026] If they are consistent, the verification is successful.
[0027] In a third aspect, an embodiment of the present invention provides an electronic device, comprising: one or more processors; a memory; one or more executable programs are stored in the memory, and the one or more processors read the executable program code stored in the memory, and run a password management application corresponding to the executable program code to execute any verification code verification method described in the first aspect.
[0028] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement any verification code verification method described in the first aspect.
[0029] The verification code verification method, system, electronic device and storage medium provided by the embodiment of the present invention generate a verification picture and rule information after obtaining the verification request of the client, and the rule information is used to distinguish the verification code and the interference code in the verification picture. The verification picture is output to the client, and the rule information is sent to the mobile device; thus, the verification code and the interference code cannot be distinguished on the client side, and the verification picture is sent to other users through malicious programs in time without obtaining the rule information, and other users cannot correctly identify the verification code, thereby at least partially solving the problem of the verification code being easily cracked by malicious people in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0031] Figure 1 It is a flowchart of the verification code verification method;
[0032] Figure 2 It is a structural diagram of the verification code verification system;
[0033] Figure 3 The figure is a schematic diagram of the structure of an embodiment of the electronic device of the present invention. DETAILED DESCRIPTION
[0034] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.
[0035] It should be clear that the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0036] The verification code verification method provided by the embodiment of the present invention not only increases the difficulty of maliciously cracking the verification code by adding rule information for distinguishing the verification code from the interference code and sending the rule information to the mobile device, but also can at least partially solve the malicious behavior in the prior art that some people send verification pictures to other users through malicious programs and deceive the other party's real person to replace the robot to crack the verification code.
[0037] It should be noted that the methods provided in the various embodiments of the present invention may be solidified in a certain manufactured physical product in the form of software, and when a user uses the product, the method flow of the present application may be reproduced.
[0038] like Figure 1 As shown, the verification code verification method provided by the embodiment of the present invention includes the steps of:
[0039] S101: Obtain a verification request from a client, generate a verification image and rule information; the verification image includes a check code and an interference code; the rule information is used to distinguish the check code from the interference code;
[0040] S201: Output the verification image to the client; send the rule information to the mobile device;
[0041] S301: Obtain a first verification code sent back by the client, and compare the first verification code with the verification code;
[0042] S401: If they are consistent, the verification is successful; if they are inconsistent, the verification fails.
[0043] According to the obtained verification request of the client, a verification picture with a verification code and an interference code, and rule information for assisting the user to distinguish the verification code and the interference code in the verification picture are generated. The rule information and the verification picture are sent to the client and the mobile device respectively, so that the client cannot effectively identify which part of the verification picture is the verification code and which part is the interference code through the malicious program, thereby making it impossible to input the correct verification code through the existing technology such as picture recognition. And it also at least partially solves the problem of using real users to help malicious programs input the correct verification code by sending the verification picture to other websites.
[0044] In one embodiment, before step S130, step S300 may also be included: obtaining a second verification code sent by the mobile device;
[0045] The second verification code is compared with the interference code; if they are consistent, the step of obtaining the first verification code returned by the client and comparing the first verification code with the verification code is executed; if they are inconsistent, the verification fails.
[0046] In order to further increase the security of the verification code, a verification step of the second verification code sent by the mobile device can be added before verifying the first verification code sent back by the client. If the mobile device recognizes the interference code and enters the correct second verification code, the verification phase of the first verification code can be executed. If the comparison is inconsistent, it is determined that the verification has failed, and there is no need to perform the next verification of the first verification code, which can save the verification process and improve the verification security.
[0047] To further improve the security of verification, in one embodiment, before comparing the second verification code with the interference code, further verification can be performed: obtain the MAC address of the mobile device, and if the MAC address of the mobile device is different from the reserved MAC address, the verification fails. Further determine that the mobile device is the bound mobile device.
[0048] The constituent elements of the verification code and the interference code include one or several of characters, letters, and numbers;
[0049] The interference code includes a recognition mark. The rule information is voice information; the voice information broadcasts the recognition mark for distinguishing the verification code from the interference code.
[0050] Taking an example in the application, the verification code is ABCD, and the interference code is ABCD , the underscore is the recognition mark of the interference code, the rule information is voice information, and the voice information is used to broadcast the recognition mark so that the user can distinguish the interference code from the verification code. For example, it can be set that the voice content is: "The one with an underscore is the interference code", or "Select the letters without an underscore", "The underscore is the recognition mark", etc. After the user obtains the rule information through the mobile device, enter the verification code ABCD at the user end, and compare the verification code ABCD with the verification code ABCD. If they are the same, it can be determined that the verification is successful.
[0051] In another embodiment, the constituent elements of the verification code and the interference code are different, and the rule information is text information. For example, the constituent elements of the verification code are the letters efgh, while the constituent elements of the interference code are the numbers 1234. Or, the constituent elements of the verification code are the letters and numbers a1b2, while the constituent elements of the interference code are the text "Yan Zheng Ma". The rule information is text information for recording the differences in the constituent elements of the verification code and the interference code. For example, the rule information is "The verification code is letters", "The interference code is numbers", "The verification code is letters and numbers", "The interference code is text", etc. Thus, the user can effectively distinguish the interference code from the verification code through the rule information, and robots or others who do not obtain the rule information cannot correctly distinguish the verification code from the interference code.
[0052] As Figure 2 shown, the present invention also provides a verification code verification system, including a client, a user center, and a mobile device;
[0053] The mobile center is used to obtain the verification request of the client, generate a verification picture and rule information; the verification picture includes a verification code and an interference code; the rule information is used to distinguish the verification code from the interference code;
[0054] The client is used to receive the verification picture and send back the first verification code to the user center;
[0055] The mobile device is used to receive the rule information;
[0056] When the user center obtains the first verification code sent back by the client, the first verification code is compared with the verification code;
[0057] If they are consistent, the verification is successful.
[0058] like Figure 3 As shown, as an optional embodiment, the above-mentioned electronic device may include: a shell 41, a processor 42, a memory 43, a circuit board 44 and a power supply circuit 45, wherein the circuit board 44 is arranged inside the space enclosed by the shell 41, and the processor 42 and the memory 43 are arranged on the circuit board 44; the power supply circuit 45 is used to supply power to various circuits or devices of the above-mentioned electronic device; the memory 43 is used to store executable program codes; the processor 42 runs a program corresponding to the executable program code by reading the executable program code stored in the memory 43, so as to execute the verification code verification method described in any of the aforementioned embodiment one.
[0059] The specific execution process of the above steps by the processor 42 and the steps further executed by the processor 42 by running the executable program code can be found in the description of the embodiment of the verification code verification method of the present invention, which will not be repeated here.
[0060] The electronic device exists in various forms, including but not limited to: (1) Mobile communication devices: This type of device is characterized by having mobile communication functions and providing voice and data communication as its main goal. Such terminals include: smart phones (such as iPhones), multimedia phones, functional phones, and low-end phones. (2) Ultra-mobile personal computer devices: This type of device belongs to the category of personal computers, has computing and processing functions, and generally also has mobile Internet access features. Such terminals include: PDA, MID and UMPC devices, such as iPad. (3) Portable entertainment devices: This type of device can display and play multimedia content. Such devices include: audio and video playback modules (such as iPods), handheld game consoles, e-books, as well as smart toys and portable car navigation devices. (4) Servers: Devices that provide computing services. The server's composition includes processors, hard disks, memory, system buses, etc. The server is similar to the general computer architecture, but because it needs to provide highly reliable services, it has higher requirements in terms of processing power, stability, reliability, security, scalability, manageability, etc. (5) Other electronic devices with data interaction functions.
[0061] Another embodiment of the present invention provides a computer-readable storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement the verification code verification method of the above embodiment.
[0062] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.
[0063] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referenced to each other, and each embodiment focuses on the differences from other embodiments.
[0064] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can also be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM).
[0065] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims
1. A verification code verification method, characterized in that: The method comprises the steps of: Obtaining a verification request from a client, generating a verification picture and rule information; the verification picture includes a check code and an interference code; the rule information is used to distinguish the check code from the interference code; Output the verification image to the client; send the rule information to the mobile device; Obtaining a second verification code sent by the mobile device; Comparing the second verification code with the interference code; If they are consistent, the step of obtaining the first verification code sent back by the client and comparing the first verification code with the verification code is executed; If they are inconsistent, the verification fails; Obtain a first verification code sent back by the client, and compare the first verification code with the verification code; If they are consistent, the verification is successful.
2. The verification code verification method according to claim 1, characterized in that: Before comparing the second verification code with the interference code, the method further includes: The MAC address of the mobile device is obtained. If the MAC address of the mobile device is different from the reserved MAC address, the verification fails.
3. The verification code verification method according to claim 1, characterized in that: The components of the check code and the interference code include one or more of words, letters, and numbers; The interference code includes an identification mark.
4. The verification code verification method according to claim 3, characterized in that: The rule information is voice information; the voice information broadcast identification mark is used to distinguish the check code from the interference code.
5. The verification code verification method according to claim 1, characterized in that: The check code and the interference code have different constituent elements, and the rule information is text information.
6. A verification code verification system, including a client and a user center, characterized in that: Also included are, mobile devices; The user center is used to obtain the verification request of the client, generate a verification picture and rule information; the verification picture includes a check code and an interference code; the rule information is used to distinguish the check code from the interference code; The client is used to receive the verification picture and return a first verification code to the user center; The mobile device is used to receive the rule information; Obtaining a second verification code sent by the mobile device; Comparing the second verification code with the interference code; If they are consistent, the step of obtaining the first verification code sent back by the client and comparing the first verification code with the verification code is executed; If they are inconsistent, the verification fails; When the user center obtains the first verification code sent back by the client, the first verification code is compared with the verification code; If they are consistent, the verification is successful.
7. An electronic device, characterized in that: include: One or more processors; Memory; The memory stores one or more executable programs, and the one or more processors read the executable program code stored in the memory and run the program corresponding to the executable program code to execute the verification code verification method described in any one of claims 1 to 5.
8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the verification code verification method described in any one of claims 1 to 5.
Citation Information
Patent Citations
Verification method, verification device and verification system
CN105450641A