User identity verification method, device, computer equipment and storage medium

Abstract

The present application provides a user identity verification method, device, computer equipment and storage medium, which relates to the field of network security technology and is used to improve the accuracy of user identity verification, thereby ensuring the network security of related business systems. The method mainly includes: receiving a login request sent by a user through a management device, the login request includes a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device; a verification code is generated according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal; it is determined whether the verification code is the same as the one-time password; if the verification code is the same as the one-time password, it is determined that the user has logged in successfully.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a user identity verification method, device, computer equipment and storage medium. Background Art

[0002] At present, traditional enterprise business management systems generally use a single password to log in, that is, the user identity is verified by entering the user account and the corresponding fixed password. However, it is still possible to break into the operation page of the management system through brute force, that is, to obtain the user's corresponding account and password through brute force, so that the user identity verification passes. Summary of the invention

[0003] The embodiments of the present application provide a user identity verification method, apparatus, computer equipment and storage medium for improving the accuracy of user identity verification, thereby ensuring the network security of related business systems.

[0004] An embodiment of the present invention provides a user identity verification method, which is applied to a server and includes:

[0005] Receiving a login request sent by a user through a management device, the login request including a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device;

[0006] A verification code is generated according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0007] Determining whether the verification code is the same as the one-time password;

[0008] If the verification code is the same as the one-time password, it is determined that the user has logged in successfully.

[0009] An embodiment of the present invention provides a user identity verification device, the device comprising:

[0010] A receiving module, configured to receive a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier, and a one-time password; the one-time password is generated by a mobile terminal bound to the management device;

[0011] A generation module, used to generate a verification code according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0012] A judging module, used for judging whether the verification code is the same as the one-time password;

[0013] The determination module is used to determine that the user has logged in successfully if the verification code is the same as the one-time password.

[0014] A computer device comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned user identity verification method when executing the computer program.

[0015] A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the user identity verification method is implemented.

[0016] The present invention provides a user identity verification method, device, computer equipment and storage medium, which first receives a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device; then a verification code is generated according to the user account, the management device identifier and the current time of the server; it is determined whether the verification code is the same as the one-time password; if the verification code is the same as the one-time password, it is determined that the user has successfully logged in. Compared with the fixed password form corresponding to the user account in the prior art, this embodiment verifies the user's identity by generating a verification code according to the user account, the management device identifier and the current time of the server. Since the way the mobile terminal generates the one-time password is the same as the way the server generates the verification code, even if there is no network communication between the server and the mobile terminal, the server can still verify the one-time password in the login request, thereby improving the accuracy of user identity verification through the invention, thereby ensuring the network security of the relevant business system. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A block diagram of a user identity verification system provided for this application;

[0018] Figure 2 A flow chart of a user identity verification method provided for this application;

[0019] Figure 3 Another user identity verification method flow chart provided for this application;

[0020] Figure 4 A schematic diagram of the structure of the user identity verification device provided by this application;

[0021] Figure 5 A schematic diagram of a computer device provided for this application. DETAILED DESCRIPTION

[0022] In order to better understand the above-mentioned technical scheme, the technical scheme of the embodiments of the present application is described in detail below through the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present application and the specific features in the embodiments are detailed descriptions of the technical scheme of the embodiments of the present application, rather than limitations on the technical scheme of the present application. In the absence of conflict, the embodiments of the present application and the technical features in the embodiments may be combined with each other.

[0023] The following will be combined with the attached Figure 1 The implementation of the embodiments of the present application is described in detail.

[0024] The solution provided in the embodiment of the present application can be applied to Figure 1 In the user identity verification system 10 shown in FIG. Figure 1 As shown, the user identity verification system 10 may include: a server 11 and at least one management device 12 and a mobile terminal 13.

[0025] The mobile terminal 13 is used to generate a one-time password for the bound management device;

[0026] The management device 12 is used to send a login request to the server 11, wherein the login request includes a user account, a management device identifier and a one-time password;

[0027] The server 11 is used to generate a verification code according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0028] The server 11 is used to determine whether the verification code is the same as the one-time password;

[0029] The server 11 is used to determine that the user has successfully logged in if the server 11 determines that the verification code is the same as the one-time password.

[0030] It should be noted that the identification information table in the management device 12 in this embodiment may include multiple user accounts, each user account corresponds to one user, that is, one management device 12 in this embodiment can satisfy the login of multiple users; and the user can also be bound to multiple management devices 12, that is, the user account of the user can be stored in multiple management devices 12, so as to realize the login of the same user on different management devices 12.

[0031] The management device 12 may be run on electronic devices such as a tablet computer, a notebook computer, an ultra-mobile personal computer (UMPC), a netbook, and a personal digital assistant (PDA).

[0032] See also Figure 2 , is a user identity verification method provided by an embodiment of the present invention, which is described from the perspective of server execution, and includes steps S201 to S204:

[0033] Step S201: receiving a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier, and a one-time password.

[0034] Specifically, the user initiates a login request through the login interface displayed by the management device, that is, the user enters the user account, management device identifier and one-time password in the login interface. Among them, the one-time password is generated by the mobile terminal bound to the management device, and the management device identifier is used to uniquely identify the management device, that is, the device identifier of the management device used by the user.

[0035] It should be noted that when a user initiates a login request through the login interface, the management device identifier may be added by default, that is, the user only needs to enter the corresponding user account and one-time password to send a login request.

[0036] In an optional embodiment provided by the present invention, a bound user can be configured in the management device, and the bound user can be multiple. Then, the user account of the bound user is stored in a data table. When the user enters the user account through the login interface, the data table needs to be called to determine whether the user account entered by the user is in the data table. If the user account entered by the user is in the data table, the user can further enter the corresponding one-time password; if the user account entered by the user is not in the data table, a prompt message of "please enter the bound user account" is output to prompt the user that the user account currently entered does not belong to the account bound to the management device. In addition, when the user initiates the login through the login interface, the user can directly click the user account input box to select the user account he wants to log in.

[0037] Step S202: Generate a verification code according to the user account, the management device identifier and the current time of the server.

[0038] There is no network communication between the server and the mobile terminal, that is, the mobile terminal and the server generate a one-time password using an agreed method. Even if there is no network communication between the server and the mobile terminal, the user can still initiate a login request using the one-time password generated by the mobile terminal.

[0039] In an optional embodiment provided by the present invention, the generating of the verification code according to the user account, the management device identifier and the current time of the server includes:

[0040] S2021, obtaining the code of the time segment corresponding to the current time of the server, where the time segment is of fixed duration.

[0041] The fixed duration can be set according to the requirements, such as 3 minutes, 5 minutes, 1 hour, 2 hours or 3 hours. For example, if the fixed duration is 1 hour, it can be divided into 24 time segments, the first time segment (00:01-01:00) is coded 1, the second time segment (01:01-00:20) is coded 2, the third time segment (02:01-00:30) is 3... The 24th time segment (23:01-00:00) is coded 24.

[0042] In this embodiment, if the current time of the server is 01:30, the corresponding time segment is (01:01-00:20), and the code of the time segment corresponding to the current time of the server is 2.

[0043] It should be noted that the fixed duration in this embodiment can be configured according to the validity period of the one-time password. If the validity period of the one-time password is 5 minutes, the fixed duration is 5 minutes, and a day can be divided into 288 time segments. For example, the first time segment can be 00:00-00:05, and the second time segment can be 00:06-00:11. This embodiment will not go into details.

[0044] S2022, calculating a quotient of a difference between the current time of the server and the preset start time and the fixed time, and rounding up the quotient to obtain a target value.

[0045] The preset start time is the current time of the server most recently obtained by the mobile terminal. If the current time of the server most recently obtained by the mobile terminal is 2022-08-20 18:00, the preset start time is 2022-08-2018:00.

[0046] For example, if the current time of the server is 2022-08-19 18:00, the preset start time is 2022-08-2018:10, and the fixed duration is 5 minutes, the calculated quotient is 1450 / 5=290, and the target value obtained by rounding up 290 is still 290.

[0047] S2023, generating a verification code according to the user account, the management device identifier, the time segment code and the target value.

[0048] Specifically, this embodiment can concatenate the user account, management device identifier, time segment code and target value to obtain a verification code, or use the MD5 value generated according to the user account, management device identifier, time segment code and target value as the verification code, which is not specifically limited in this embodiment.

[0049] In this embodiment, the way in which the server generates the verification code and the way in which the mobile terminal generates the one-time password are the same. Since the verification code is generated based on the user account, the management device identifier, the time segment code and the target value, and the time segment code can ensure the timeliness of the verification code (i.e., the one-time password), the target value can ensure that even when the server and the mobile terminal have the same time segment code due to a difference of more than 1 day in their respective times (such as the time segment code corresponding to the current time determined by 2022-08-19 18:00 and 2022-08-20 18:00 is consistent), a verification code for the one-time password that is sufficient for accurate verification is generated.

[0050] Step S203, determining whether the verification code is the same as the one-time password.

[0051] It should be noted that the way the mobile terminal generates the one-time password and the way the server generates the verification code in this embodiment are systemic, except that the mobile terminal estimates the current time of the server based on the preset start time. When the server updates the preset start time, it needs to synchronize the preset start time to the mobile terminal.

[0052] Step S204: If the verification code is the same as the one-time password, it is determined that the user has logged in successfully.

[0053] The present invention provides a user identity verification method, first receiving a login request sent by a user through a management device, the login request including a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device; then generating a verification code according to the user account, the management device identifier and the current time of the server; judging whether the verification code is the same as the one-time password; if the verification code is the same as the one-time password, it is determined that the user has successfully logged in. Compared with the fixed password form corresponding to the user account in the prior art, this embodiment verifies the user's identity by generating a verification code according to the user account, the management device identifier and the current time of the server. Since the way the mobile terminal generates the one-time password is the same as the way the server generates the verification code, even if there is no network communication between the server and the mobile terminal, the server can still verify the one-time password in the login request, so that the accuracy of user identity verification can be improved through the invention, thereby ensuring the network security of the relevant business system.

[0054] See also Figure 3 , is a user identity verification method provided by an embodiment of the present invention, and the method is described from the perspective of server execution, including steps S301 to S3052:

[0055] Step S301: receiving a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier and a one-time password.

[0056] The one-time password is generated by the mobile terminal bound to the management device; the login request also includes a sending time difference calculated based on the estimated server current time of the mobile terminal and the request sending time. The request sending time is the time when the management device sends the login request. The estimated server current time of the mobile terminal is determined based on the current time of the mobile terminal and the preset start time obtained. If the preset start time is 2022-08-19 18:00, the time when the mobile terminal obtains the preset initial time is 2022-08-19 18:02, and the time when the user sends the login request is 2022-08-19 19:03, that is, the mobile terminal has passed 1 hour and 1 minute after obtaining the preset start time, so the estimated server current time of the mobile terminal is 2022-08-19 19:01.

[0057] Step S302, calculating the reception time difference between the current time of the server and the request reception time.

[0058] Step S303, determining whether the difference between the sending time difference and the receiving time difference is less than a first preset value.

[0059] For example, the estimated server current time of the mobile terminal is 2022-08-19 18:00, the request sending time is 2022-08-19 18:01, the server current time is 2022-08-19 18:02, the request receiving time is 2022-08-1918:03, and the first preset value is 3 minutes. The sending time difference is 1 minute, and the receiving time difference is 1 minute. The difference between the sending time difference and the receiving time difference is less than the first preset value, then execute step S304A, that is, generate a verification code according to the user account, the management device identifier and the current time of the server.

[0060] Step S304A: if it is determined that the difference is less than the first preset value, a verification code is generated according to the user account, the management device identifier and the current time of the server.

[0061] Step S304B: If it is determined that the difference is greater than or equal to the first preset value, determine whether the time difference between the current time of the server and the estimated current time of the server of the mobile terminal is greater than a second preset value.

[0062] Among them, step S304B is a parallel step of step S304A. If it is determined that the difference is less than the first preset value, it means that the network delay is small and the time difference between the mobile terminal and the server is small. At this time, a verification code can be generated according to the user account, the management device identifier and the current time of the server. The specific generation of the verification code can refer to Figure 2 The description of the corresponding steps in the embodiment will not be repeated here.

[0063] On the contrary, if the difference is greater than or equal to the first preset value, it means that the network delay is large and / or the time difference between the mobile terminal and the server is large. At this time, it is necessary to further determine whether the time difference between the current time of the server and the estimated current time of the server of the mobile terminal is greater than the second preset value, that is, to determine whether the large difference is caused by the inconsistency between the time of the mobile terminal and the server.

[0064] Step S3051, if it is greater than the second preset value, a QR code is generated according to the current time of the server, and the QR code is sent to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, and generate the one-time password according to the obtained current time of the server and the user account and the management device identifier.

[0065] Step S3052: If the value is less than or equal to the second preset value, a network failure prompt message "please log in again" is sent to the management device.

[0066] In this embodiment, if the time difference between the current time of the server and the estimated current time of the mobile terminal is greater than the second preset value, it means that the time difference between the mobile terminal and the server is large, and the current time of the server needs to be synchronized with the mobile terminal. The specific method is: generate a QR code according to the current time of the server, and send the QR code to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, update the preset start time according to the obtained current time of the server, and then generate the one-time password according to the obtained current time of the server, the user account, and the management device identifier.

[0067] In an embodiment provided by the present invention, before receiving a login request sent by a user through a management device, it also includes: receiving a registration request sent by the user through the management device, the registration request including a user account and a user password; if the user account and the user password are verified, obtaining the management device identifier and the mobile terminal identifier; storing the user account, the management device identifier and the mobile terminal identifier accordingly, and binding the management device and the mobile terminal corresponding to the mobile terminal identifier; generating a QR code according to the current time of the server, and sending the QR code to the management device, so that the mobile terminal bound to the management device scans the QR code to obtain and store the current time of the server, and store the obtained current time of the server as a preset start time in the mobile terminal.

[0068] In an optional embodiment provided by the present invention, after determining that the user has successfully logged in, the method further includes: counting the operation frequency of the user on the management device for each functional permission he has; and deleting the functional permission whose operation frequency of the user is less than the target value. The target value can be set according to actual needs. Specifically, the system administrator grants a user permission to a certain account. If the user has unused menus in daily use, the system will count the usage, which is divided into two stages. In the first stage, the menus move down in sequence. In the second stage, if the menus that have been moved down are still not used for a long time, the permission of the current account will be removed.

[0069] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0070] In one embodiment, a user identity verification device is provided, which corresponds one-to-one to the user identity verification method in the above embodiment. Figure 4 As shown, the functional modules of the user identity verification device are described in detail as follows:

[0071] The receiving module 41 is used to receive a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device;

[0072] A generating module 42, configured to generate a verification code according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0073] A judging module 43, used to judge whether the verification code is the same as the one-time password;

[0074] The determination module 44 is used to determine that the user has successfully logged in if the verification code is the same as the one-time password.

[0075] In an optional embodiment, the login request also includes a sending time difference calculated based on the estimated server current time of the mobile terminal and the request sending time, and the device also includes a calculation module 45:

[0076] A calculation module 45, used for calculating the reception time difference between the current time of the server and the request reception time;

[0077] A judging module 43, configured to judge whether the difference between the sending time difference and the receiving time difference is less than a first preset value;

[0078] The generating module 42 is configured to generate a verification code according to the user account, the management device identifier and the current time of the server if it is determined that the difference is less than the first preset value.

[0079] In an optional embodiment, the generation module 42 is also used to generate a QR code based on the current time of the server if it is determined that the difference is greater than or equal to the first preset value, and send the QR code to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, and generate the one-time password based on the obtained current time of the server and the user account and the management device identifier.

[0080] In an optional embodiment, the judging module 43 is used to judge whether the time difference between the current time of the server and the estimated current time of the server of the mobile terminal is greater than a second preset value;

[0081] The generating module 42 is used to generate a QR code according to the current time of the server if it is greater than the second preset value, and send the QR code to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, and generate the one-time password according to the obtained current time of the server and the user account and the management device identifier; if it is less than or equal to the second preset value, send a network failure prompt message to the management device, asking for re-login.

[0082] In an optional embodiment, the generating module 42 is specifically configured to:

[0083] An acquisition module, used to acquire the code of a time segment corresponding to the current time of the server, wherein the time segment is of a fixed duration;

[0084] The calculation module 45 is used to calculate the quotient of the difference between the current time of the server and the preset start time and the fixed time; and round up the quotient to obtain the target value;

[0085] The generating module 42 is used to generate a verification code according to the user account, the management device identifier, the code of the time segment and the target value.

[0086] In an optional embodiment, the receiving module 41 is further used to receive a registration request sent by a user through a management device, wherein the registration request includes a user account and a user password;

[0087] An acquisition module, configured to acquire the management device identifier and the mobile terminal identifier if the user account and the user password are verified;

[0088] A storage binding module, used to store the user account, the management device identifier and the mobile terminal identifier in correspondence, and bind the management device and the mobile terminal corresponding to the mobile terminal identifier;

[0089] The generating module 42 is used to generate a QR code according to the current time of the server, and send the QR code to the management device, so that the mobile terminal bound to the management device scans the QR code to obtain and store the current time of the server.

[0090] In an optional embodiment, the device further comprises:

[0091] A statistics module, used to count the operation frequency of each function permission owned by the user on the management device;

[0092] The deletion module is used to delete the function permissions whose user operation frequency is less than the target value.

[0093] For the specific definition of the user identity verification device, please refer to the definition of the user identity verification method above, which will not be repeated here. Each module in the above device can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0094] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 5As shown. The computer device includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a user identity verification method is implemented.

[0095] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0096] Receiving a login request sent by a user through a management device, the login request including a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device;

[0097] A verification code is generated according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0098] Determining whether the verification code is the same as the one-time password;

[0099] If the verification code is the same as the one-time password, it is determined that the user has logged in successfully.

[0100] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0101] Receiving a login request sent by a user through a management device, the login request including a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device;

[0102] A verification code is generated according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal;

[0103] Determining whether the verification code is the same as the one-time password;

[0104] If the verification code is the same as the one-time password, it is determined that the user has logged in successfully.

[0105] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0106] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0107] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention.

Claims

1. A user identity verification method, characterized in that: The method is applied to a server, and the method comprises: Receiving a login request sent by a user through a management device, the login request including a user account, a management device identifier and a one-time password; the one-time password is generated by a mobile terminal bound to the management device; A verification code is generated according to the user account, the management device identifier and the current time of the server; there is no network communication between the server and the mobile terminal; Determining whether the verification code is the same as the one-time password; If the verification code is the same as the one-time password, it is determined that the user has logged in successfully; The login request also includes a sending time difference calculated based on the estimated server current time of the mobile terminal and the request sending time, the request sending time is the time when the management device sends the login request, and the estimated server current time of the mobile terminal is determined based on the current time of the mobile terminal and the acquired preset start time; Before generating the verification code according to the user account, the management device identifier and the current time of the server, the method further includes: Calculate the reception time difference between the current time of the server and the request reception time; Determining whether the difference between the sending time difference and the receiving time difference is less than a first preset value; The generating a verification code according to the user account, the management device identifier and the current time of the server includes: If it is determined that the difference is less than the first preset value, generating a verification code according to the user account, the management device identifier and the current time of the server; After determining whether the difference between the sending time difference and the receiving time difference is less than a first preset value, the method further includes: If it is determined that the difference is greater than or equal to the first preset value, a QR code is generated according to the current time of the server, and the QR code is sent to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, and generate the one-time password according to the obtained current time of the server and the user account and the management device identifier.

2. The method according to claim 1, characterized in that: After determining that the difference is greater than or equal to the first preset value, the method further includes: Determine whether the time difference between the current time of the server and the estimated current time of the server of the mobile terminal is greater than a second preset value; If it is greater than the second preset value, a QR code is generated according to the current time of the server, and the QR code is sent to the mobile terminal, so that the user obtains the current time of the server by scanning the QR code, and generates the one-time password according to the obtained current time of the server and the user account and the management device identifier; If it is less than or equal to the second preset value, a network failure please log in again prompt message is sent to the management device.

3. The method according to any one of claims 1 to 2, characterized in that: The generating a verification code according to the user account, the management device identifier and the current time of the server includes: Obtaining a code of a time segment corresponding to the current time of the server, wherein the time segment is of fixed duration; Calculate the quotient of the difference between the current time of the server and the preset start time and the fixed time length; round up the quotient to obtain the target value; A verification code is generated according to the user account, the management device identifier, the code of the time segment and the target value.

4. The method according to claim 1, characterized in that: Before receiving a login request sent by a user through a management device, the method further includes: Receiving a registration request sent by a user through a management device, wherein the registration request includes a user account and a user password; If the user account and the user password are verified, the management device identifier and the mobile terminal identifier are obtained; Correspondingly storing the user account, the management device identifier and the mobile terminal identifier, and binding the management device and the mobile terminal corresponding to the mobile terminal identifier; A QR code is generated according to the current time of the server, and the QR code is sent to the management device, so that a mobile terminal bound to the management device scans the QR code to obtain and store the current time of the server.

5. The method according to claim 1, characterized in that After determining that the user has successfully logged in, the method further includes: Counting the frequency of operations performed by the user on each functional authority owned by the user on the management device; The function permissions for which the user operation frequency is less than the target value are deleted.

6. A user identity verification device, characterized in that: The device comprises: A receiving module, configured to receive a login request sent by a user through a management device, wherein the login request includes a user account, a management device identifier, and a one-time password; the one-time password is generated by a mobile terminal bound to the management device; A generation module, used to generate a verification code according to the user account, the management device identifier and the current time of the server; the request sending time is the time when the management device sends the login request, and the estimated server current time of the mobile terminal is determined according to the current time of the mobile terminal and the acquired preset start time; there is no network communication between the server and the mobile terminal; A judging module, used for judging whether the verification code is the same as the one-time password; A determination module, configured to determine that the user has successfully logged in if the verification code is the same as the one-time password; The login request also includes a sending time difference calculated based on the estimated server current time of the mobile terminal and the request sending time; The generation module is also used to perform the following steps: Calculate the reception time difference between the current time of the server and the request reception time; Determining whether the difference between the sending time difference and the receiving time difference is less than a first preset value; The generating a verification code according to the user account, the management device identifier and the current time of the server includes: If it is determined that the difference is less than the first preset value, generating a verification code according to the user account, the management device identifier and the current time of the server; The generating module also includes: If it is determined that the difference is greater than or equal to the first preset value, a QR code is generated according to the current time of the server, and the QR code is sent to the mobile terminal, so that the user can obtain the current time of the server by scanning the QR code, and generate the one-time password according to the obtained current time of the server and the user account and the management device identifier.

7. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the user identity verification method according to any one of claims 1 to 5 is implemented.

8. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the user identity verification method according to any one of claims 1 to 5 is implemented.

Images