A secure locking method and apparatus, electronic device, and storage medium
By identifying the types of incorrect passwords in smart locks and calculating the factors affecting the locking time, the locking time is dynamically adjusted, solving the problem of poor user experience caused by incorrect password input in smart locks and improving both security and user experience.
Patent Information
- Application Number
- CN202211434308.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-11-16
- Publication Date
- 2025-12-12
- Estimated Expiration
- 2042-11-16
AI Technical Summary
Existing smart locks lock for extended periods when the wrong password is entered, resulting in a poor user experience and an inability to distinguish between lockouts caused by malicious trial and error and those caused by incorrect input.
By identifying the type of incorrect password and calculating the impact factor of the lockout time based on the weighting factor of the error type and the number of consecutive errors, the lockout time is dynamically adjusted to distinguish between malicious trial and error and erroneous input, and reasonable lockout times are set for each.
While effectively avoiding the risk of malicious trial-and-error unlocking, it improves the security and user experience of smart locks and reduces waiting time when inputting incorrect information.
Smart Images

Figure CN116665346B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of intelligent lock, and particularly relates to a safe locking method and device, an electronic device and a storage medium. BACKGROUND
[0002] With the progress of science and technology and the improvement of safety concept, intelligent locks begin to enter thousands of families. At present, intelligent locks support multiple unlocking methods such as passwords, fingerprints or cards, but at the same time, they also bring the risk of trial and error unlocking, that is, inputting some common and frequently used weak passwords to "try luck" and trying to open the intelligent lock.
[0003] In order to reduce the risk of trial and error unlocking, the conventional method is to perform trial and error locking, that is, after a certain number of trial and error unlocking, the intelligent lock is locked for a period of time. During the locking period of the intelligent lock, the intelligent lock enters a state of no reaction to protect the intelligent lock from being maliciously unlocked. However, for the user in the case of mispressing the wrong password, the user needs to wait for the locking time, and the user experience is poor. SUMMARY
[0004] The present application provides a safe locking method, device, electronic device and storage medium to improve the security and user experience of the intelligent lock while avoiding the risk of malicious trial and error unlocking.
[0005] According to an aspect of the present application, a safe locking method is provided, the method comprising:
[0006] If it is determined that the input password is a wrong password, determining the error type of the wrong password;
[0007] According to the error types of the continuous preset number of wrong passwords and the weighting factors of each error type, determining the influence factor of the locking time;
[0008] According to the influence factor of the locking time and the preset standard locking time, determining the target locking time to perform safe locking according to the target locking time.
[0009] According to another aspect of the present application, a safe locking device is provided, comprising:
[0010] The error type determination module is configured to determine the error type of the wrong password if it is determined that the input password is a wrong password;
[0011] The influence factor determination module is configured to determine the influence factor of the locking time according to the error types of the continuous preset number of wrong passwords and the weighting factors of each error type;
[0012] The target lock time determination module is configured to determine a target lock time according to the influence factor of the lock time and a preset standard lock time, and to perform a secure lock according to the target lock time.
[0013] According to another aspect of the present application, there is provided a secure lock electronic device, comprising:
[0014] at least one processor; and
[0015] a memory in communication with the at least one processor; wherein
[0016] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to perform the secure lock method according to any one of the embodiments of the present application.
[0017] According to another aspect of the present application, there is provided a computer readable storage medium storing computer instructions for enabling a processor to perform the secure lock method according to any one of the embodiments of the present application when executed by the processor.
[0018] The technical solution of the embodiments of the present application is that, if the input password is determined to be an incorrect password, the type of the incorrect password is determined; the influence factor of the lock time is determined according to the types of a preset number of consecutive incorrect passwords and the weighting factors of the types; and the target lock time is determined according to the influence factor of the lock time and a preset standard lock time, and a secure lock is performed according to the target lock time. This technical solution can evade the risk of malicious trial and error unlocking while improving the security and user experience of the smart lock.
[0019] It should be understood that the content described in this part is not intended to identify key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS
[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative effort.
[0021] Figure 1 is a flowchart of a secure lock method according to the first embodiment of the present application;
[0022] Figure 2is a flow chart of a security locking method according to the second embodiment of the present application;
[0023] Figure 3 is a structural schematic diagram of a security locking device according to the third embodiment of the present application;
[0024] Figure 4 is a structural schematic diagram of an electronic device implementing a security locking method according to the present application. DETAILED DESCRIPTION
[0025] In order to make the personnel in the technical field better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should belong to the scope of protection of the present application.
[0026] It should be noted that the terms "first", "second", "target" and the like in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily have to describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.
[0027] Embodiment one
[0028] Figure 1 A flow chart of a security locking method according to the first embodiment of the present application is provided, the present embodiment can be applicable to the adaptive matching of locking time for different types of error passwords, the method can be executed by a security locking device, the security locking device can be realized in the form of hardware and / or software, and the security locking device can be configured in an electronic device with data processing capability. As shown in the figure, the method comprises: Figure 1
[0029] S110, if it is determined that the input password is an error password, determining the error type of the error password.
[0030] The error type can be used to represent the unlocking mode of the smart lock, and can specifically include a standard digital password, a fingerprint, or a card, etc. The smart lock can be a door lock with at least one of the unlocking capabilities of a fingerprint, a standard digital password, and / or a card, etc.
[0031] In this embodiment, if it is determined that the input password is an error password, the error type of the error password needs to be determined first. Optionally, the error type of the error password is determined as follows: if it is determined that the error password is a biometric password or a near field communication signal password, the error type of the error password is determined as a first error type. The first error type can be an error type of an error password that is a biometric password or a near field communication signal (NFC, Near Field Communication) password. The biometric password can include, but is not limited to, a fingerprint, a finger vein, a face, an iris, a palm print, or a voice, etc. The near field communication signal password can be a password set through a near field communication signal, such as an entity identification password, e.g., a card, etc.
[0032] In this embodiment, optionally, the error type of the error password is determined as follows: if it is determined that the error password is a standard digital password, the error password is compared with a preset password in at least one password library; the password library includes a dictionary attack password library, a white list password library, and a history password library; and the error type of the error password is determined according to a comparison result.
[0033] The password library can be a database for storing passwords that is preset. Specifically, the password library can include a dictionary attack password library, a white list password library, and a history password library. The dictionary attack password library can store common, frequently used, and easily cracked passwords (i.e., weak passwords), such as standard digital passwords defined by using continuous, sequential, reverse, or continuous repetition, etc. The dictionary attack password library can be loaded in the smart lock password library when the smart lock is manufactured, or can be updated later through a network and user self-definition. The white list password library can store the standard digital password that the user currently normally enters. The history password library can store the standard digital password that the user has used before. The preset password can be a standard digital password preset in the password library.
[0034] In this embodiment, if it is determined that the incorrect password is a standard numerical password, the incorrect password can be compared with the preset password in the at least one password library (the password library for password cracking, the white list password library and / or the historical password library). For example, the similarity comparison method can be used to compare the incorrect password with the preset password in the at least one password library. Then, the error type of the incorrect password is determined according to the comparison result. The comparison result can include a comparison success and a comparison failure. It should be noted that the similarity comparison method is not limited in this embodiment and can be set according to actual needs. For example, the Euclidean distance, Manhattan distance, cosine similarity or Pearson correlation coefficient method can be used for similarity comparison.
[0035] In this embodiment, the error type of the incorrect password is determined according to the comparison result. For example, if it is determined that the incorrect password is the same as the target password for password cracking in the password library for password cracking, the error type of the incorrect password is determined as the second error type.
[0036] The target password for password cracking can refer to the password for password cracking stored in the password library for password cracking. The second error type can refer to the error type of the incorrect password that is the same as the target password for password cracking. In this embodiment, if it is determined through comparison that the incorrect password is the same as the target password for password cracking in the password library for password cracking, the error type of the incorrect password can be determined as the second error type. It should be noted that when the error type of the incorrect password is the second error type, it indicates that there is a high risk that someone tries to crack the password of the smart lock by using the password for password cracking in the password library for password cracking.
[0037] In this embodiment, the error type of the incorrect password is determined according to the comparison result. For example, if it is determined that the similarity between the incorrect password and the target white list password in the white list password library is greater than or equal to the preset first similarity threshold, the error type of the incorrect password is determined as the third error type.
[0038] The target white list password can refer to the white list password stored in the white list password library. The preset first similarity threshold can refer to the preset similarity threshold related to the white list password, which can be set according to actual needs and is not limited in this embodiment. The third error type can refer to the error type of the incorrect password with a similarity greater than or equal to the preset first similarity threshold to the target white list password.
[0039] In this embodiment, the similarity comparison method can be used to calculate the similarity between the incorrect password and the target white list password in the white list password library. If it is determined that the similarity between the incorrect password and the target white list password in the white list password library is greater than or equal to the preset first similarity threshold, the error type of the incorrect password can be determined as the third error type. It should be noted that when the error type of the incorrect password is the third error type, it indicates that the user is likely to have made a mistake.
[0040] In the embodiment, optionally, the error type of the error password is determined according to the comparison result, including: if it is determined that the similarity between the error password and the target historical password in the historical password library is greater than or equal to a preset second similarity threshold, the error type of the error password is determined as a fourth error type.
[0041] The target historical password can be a historical password stored in the historical password library. The preset second similarity threshold can be a pre-set similarity threshold related to the historical password, which can be set according to actual needs, and the embodiment does not make any limitation. The fourth error type can be the error type of the error password with a similarity greater than or equal to the preset second similarity threshold to the target historical password.
[0042] In the embodiment, the similarity between the error password and the target historical password in the historical password library can be calculated by similarity comparison. If it is determined that the similarity between the error password and the target historical password in the historical password library is greater than or equal to a preset second similarity threshold, the error type of the error password can be determined as a fourth error type. It should be noted that when the error type of the error password is the fourth error type, it indicates that the user is likely to have forgotten the password or the password is inputted unintentionally.
[0043] The present scheme can determine the error type of the error password according to the comparison result between the error password and the preset password in at least one password library when the error password is a standard digital password, so as to distinguish different error password scenarios, so as to match the appropriate smart lock locking time according to different error password scenarios.
[0044] S120, determining an influence factor of the locking time according to the error types of the continuous preset number of error passwords and the weighting factors of the error types.
[0045] The preset number can be a pre-set number of continuous error passwords, which can be set according to actual needs, and the embodiment does not make any limitation. For example, the preset number can be set to 5. The weighting factor can be a pre-set weight value corresponding to each error type, which can be set according to actual needs, and the embodiment does not make any limitation. The weighting factor is greater than or equal to 0, and generally less than or equal to 1, and can also be set to be greater than 1 according to actual conditions. The influence factor can be used to represent the influence degree on the locking time. It can be understood that the greater the influence factor, the greater the influence degree on the locking time; on the contrary, the smaller the influence factor, the smaller the influence degree on the locking time.
[0046] In the embodiment, optionally, the weighting factor of the second error type is greater than the weighting factor of the first error type, the weighting factor of the first error type is greater than the weighting factor of the fourth error type, and the weighting factor of the fourth error type is greater than the weighting factor of the third error type. The product of the weighting factor of the second error type and the preset number is greater than 1, the product of the weighting factor of the first error type and the preset number is greater than or equal to 1, the product of the weighting factor of the fourth error type and the preset number is less than 1, and the product of the weighting factor of the third error type and the preset number is less than 1. For example, the weighting factor of the second error type can be set to 0.5, the weighting factor of the first error type can be set to 0.3, the weighting factor of the fourth error type can be set to 0.1, and the weighting factor of the third error type can be set to 0.05.
[0047] In the embodiment, after determining the error type of the error password, the influence factor of the lock time can be further determined according to the error types of the continuous preset number of error passwords and the weighting factors of the error types. Specifically, the product of the weighting factor of each error type and the input number is first calculated, then the products corresponding to each error type are summed, and the influence factor of the lock time is determined according to the sum result. The sum of the input numbers of each error type is equal to the preset number. For example, it is assumed that the preset number is n, the input number and the weighting factor of the first error type are n1 and a1 respectively, the input number and the weighting factor of the second error type are n2 and a2 respectively, the input number and the weighting factor of the third error type are n3 and a3 respectively, and the input number and the weighting factor of the fourth error type are n4 and a4 respectively. Wherein, n1+n2+n3+n4=n, and a2>a1>a4>a3. The influence factor of the lock time can be determined as A=n1×a1+n2×a2+n3×a3+n4×a4. Wherein, A represents the influence factor of the lock time.
[0048] In the embodiment, after determining the error type of the error password, the influence factor of the lock time can be further determined according to the error types of the continuous preset number of error passwords and the weighting factors of the error types. Specifically, the product of the weighting factor of each error type and the input number is first calculated, then the products corresponding to each error type are summed, and the influence factor of the lock time is determined according to the sum result. The sum of the input numbers of each error type is equal to the preset number. For example, it is assumed that the preset number is n, the input number and the weighting factor of the first error type are n1 and a1 respectively, the input number and the weighting factor of the second error type are n2 and a2 respectively, the input number and the weighting factor of the third error type are n3 and a3 respectively, and the input number and the weighting factor of the fourth error type are n4 and a4 respectively. Wherein, n1+n2+n3+n4=n, and a2>a1>a4>a3. The influence factor of the lock time can be determined as A=n1×a1+n2×a2+n3×a3+n4×a4. Wherein, A represents the influence factor of the lock time.
[0049] The standard lock time can be a pre-set reference lock time, which can be set according to actual needs, and the embodiment does not make any limitation on this. For example, the standard lock time can be set to 300 seconds. The target lock time can be the actual lock time, which can be determined according to the influence factor of the lock time and the preset standard lock time.
[0050] In the embodiment, after the influence factor of the lock time is determined, the target lock time can be determined according to the influence factor of the lock time and the preset standard lock time, so as to subsequently perform the safe locking according to the target lock time. For example, the target lock time can be determined as the product of the influence factor of the lock time and the preset standard lock time, that is, T=A*t. Wherein, T represents the target lock time, and t represents the preset standard lock time.
[0051] Through the above steps, if the error type of the error password is the first error type or the second error type, it is likely that the attacker actively attacks the dictionary, at this time, the influence factor of the lock time is relatively large, and then the target lock time is greater than the preset standard lock time, thereby improving the difficulty of the attacker to crack the dictionary attack, and effectively avoiding the risk of malicious trial and error unlocking; if the error type of the error password is the third error type or the fourth error type, it is likely that the user misinputs, unconsciously misinputs or forgets the password, at this time, the influence factor of the lock time is relatively small, and then the target lock time is less than the preset standard lock time, which can give the user a certain thinking time, and effectively solve the problem that the user needs to wait for a long time due to misinput, thereby improving the user experience while avoiding the risk of malicious trial and error unlocking.
[0052] The technical scheme of the embodiment of the application, if it is determined that the input password is an error password, the error type of the error password is determined; the influence factor of the lock time is determined according to the error types of the continuous preset number of error passwords and the weighted factors of each error type; the target lock time is determined according to the influence factor of the lock time and the preset standard lock time, so as to perform the safe locking according to the target lock time. The technical scheme can improve the security and user experience of the intelligent lock while avoiding the risk of malicious trial and error unlocking.
[0053] Embodiment two
[0054] Figure 2 A flowchart of a safe locking method provided by the embodiment two of the application is based on the optimization of the above-mentioned embodiment. As shown in the figure, the method of the embodiment specifically includes the following steps: Figure 2
[0055] S210, it is judged whether the input password is illegal input, if yes, S2100 is executed, otherwise S220 is executed.
[0056] In this embodiment, when the input password is detected, it is first determined whether the input password is illegal input. For example, when the length of the input numerical password is less than the minimum length required by the smart lock, or the fingerprint, card, etc. exceeds the recognition range of the smart lock password, it can be considered as illegal input, at this time the unlocking function of the smart lock cannot be triggered, therefore it can be selected not to respond, or it can be selected to issue a prompt information (such as voice prompt), which can be set according to actual needs.
[0057] In S220, if it is determined that the input password is an error password, the error type of the error password is determined.
[0058] In S230, if it is determined that the error password is a biometric password or a near field communication signal password, the error type of the error password is determined as a first error type.
[0059] In S240, if it is determined that the error password is a standard numerical password, the error password is compared with a preset password in at least one password library; wherein the password library includes a dictionary attack password library, a white list password library and a history password library.
[0060] In S250, if it is determined that the error password is the same as a target dictionary attack password in the dictionary attack password library, the error type of the error password is determined as a second error type.
[0061] In S260, if it is determined that the similarity between the error password and a target white list password in the white list password library is greater than or equal to a preset first similarity threshold, the error type of the error password is determined as a third error type.
[0062] In S270, if it is determined that the similarity between the error password and a target history password in the history password library is greater than or equal to a preset second similarity threshold, the error type of the error password is determined as a fourth error type.
[0063] The weighting factor of the second error type is greater than the weighting factor of the first error type, the weighting factor of the first error type is greater than the weighting factor of the fourth error type, and the weighting factor of the fourth error type is greater than the weighting factor of the third error type; and the product of the weighting factor of the second error type and a preset number is greater than 1, the product of the weighting factor of the first error type and the preset number is greater than or equal to 1, the product of the weighting factor of the fourth error type and the preset number is less than 1, and the product of the weighting factor of the third error type and the preset number is less than 1.
[0064] In S280, the influence factor of the lock time is determined according to the error types of the continuous preset number of error passwords and the weighting factors of the error types.
[0065] S290, determining a target lock time according to the influence factor of the lock time and a preset standard lock time, to perform the security lock according to the target lock time.
[0066] The specific implementation of S220-S290 can refer to the detailed description in Embodiment One, which will not be repeated here.
[0067] S2100, not responding or sending a reminder message.
[0068] The technical scheme of the embodiment of the application can determine the influence factor of the lock time based on the error type of the wrong password when determining that the input password is not an illegal input, and then determine the target lock time according to the influence factor of the lock time and the preset standard lock time, which can avoid the risk of malicious trial and error to open the lock while further improving the security and user experience of the smart lock.
[0069] Embodiment Three
[0070] Figure 3 A structural schematic diagram of a security locking device provided by Embodiment Three of the application, which can execute the security locking method provided by any embodiment of the application, and has the corresponding function modules and beneficial effects of the execution method. As shown in the figure, Figure 3 The device comprises:
[0071] The error type determination module 310 is configured to determine the error type of the wrong password if it is determined that the input password is a wrong password.
[0072] The influence factor determination module 320 is configured to determine the influence factor of the lock time according to the error types of the continuous preset number of wrong passwords and the weighting factors of the error types.
[0073] The target lock time determination module 330 is configured to determine a target lock time according to the influence factor of the lock time and a preset standard lock time, to perform the security lock according to the target lock time.
[0074] Optionally, the error type determination module 310 is configured to:
[0075] If it is determined that the wrong password is a biometric password or a near field communication signal password, the error type of the wrong password is determined to be a first error type.
[0076] Optionally, the error type determination module 310 comprises:
[0077] The password comparison unit is configured to compare the wrong password with the preset password in at least one password library if it is determined that the wrong password is a standard digital password.
[0078] The password library comprises a dictionary attack password library, a white list password library and a history password library.
[0079] An error type determination unit is configured to determine an error type of the error password according to the comparison result.
[0080] Optionally, the error type determination unit is configured to:
[0081] If it is determined that the error password is identical to a target dictionary attack password in the dictionary attack password library, the error type of the error password is determined as a second error type.
[0082] Optionally, the error type determination unit is further configured to:
[0083] If it is determined that a similarity between the error password and a target white list password in the white list password library is greater than or equal to a preset first similarity threshold, the error type of the error password is determined as a third error type.
[0084] Optionally, the error type determination unit is further configured to:
[0085] If it is determined that a similarity between the error password and a target history password in the history password library is greater than or equal to a preset second similarity threshold, the error type of the error password is determined as a fourth error type.
[0086] Optionally, a weighting factor of the second error type is greater than a weighting factor of the first error type, the weighting factor of the first error type is greater than a weighting factor of the fourth error type, and the weighting factor of the fourth error type is greater than a weighting factor of the third error type.
[0087] Optionally, a product of the weighting factor of the second error type and a preset number is greater than 1, a product of the weighting factor of the first error type and the preset number is greater than or equal to 1, a product of the weighting factor of the fourth error type and the preset number is less than 1, and a product of the weighting factor of the third error type and the preset number is less than 1.
[0088] The security locking device provided in the embodiment of the application can execute the security locking method provided in any embodiment of the application, and has the corresponding function modules and beneficial effects of the execution method.
[0089] Embodiment Four
[0090] Figure 4A structural diagram of an electronic device 10 that can be used to implement embodiments of the present application is shown. The electronic device is intended to represent various forms of digital computers, such as laptops, desktops, tablets, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular telephones, smartphones, wearable devices (e.g., headsets, glasses, watches, etc.), and other similar computing devices. The components shown here, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the present application described and / or claimed in this document.
[0091] As shown, Figure 4 The electronic device 10 includes at least one processor 11, and a memory, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., communicatively connected to the at least one processor 11, where the memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer programs stored in the read-only memory (ROM) 12 or loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.
[0092] Various components in the electronic device 10 are connected to the I / O interface 15, including an input unit 16, such as a keyboard, a mouse, etc., an output unit 17, such as various types of displays, speakers, etc., a storage unit 18, such as a magnetic disk, an optical disk, etc., and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network, such as the Internet, and / or various telecommunication networks.
[0093] The processor 11 can be various general and / or special purpose processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs various methods and processes described above, such as the secure locking method.
[0094] In some embodiments, the secure locking method can be implemented as a computer program tangibly embodied in a computer readable storage medium, e.g., storage unit 18. In some embodiments, parts or all of the computer program can be loaded and / or installed onto electronic device 10 via, e.g., ROM 12 and / or communication unit 19. When the computer program is loaded onto RAM 13 and executed by processor 11, one or more of the steps of the secure locking method described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to perform the secure locking method by way of other means (e.g., by way of firmware).
[0095] Various implementations of the systems and techniques described above can be realized in digital electronic circuitry, integrated circuitry, specially designed application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include implementation in one or more computer programs that are executable and / or interpretable on a programmable system including at least one programmable processor, which can be special or general purpose, coupled to receive data and instructions from, and to transmit data and instructions to, a storage system, at least one input device, and at least one output device.
[0096] Computer programs used to implement the methods of the present application can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the computer program, when executed by the processor of the machine, implements the functions / acts specified in the flowcharts and / or block diagrams. The computer program can be executed entirely on a machine, partially on a machine, partially on a machine and partially on a remote machine or entirely on a remote machine or server.
[0097] In the context of the present application, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. A computer-readable storage medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. More specific examples of a machine-readable storage medium will include one or more lines of a program of instructions in a transitory signal, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0098] To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the electronic device. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form, including acoustic, speech, or tactile input.
[0099] The systems and techniques described here can be implemented in a computing system that includes a back end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front end component (e.g., a user computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.
[0100] The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system, to solve the defects of large management difficulty and weak business scalability in traditional physical host and VPS service.
[0101] It should be understood that the various forms of flow shown above can be used to reorder, add or delete steps. For example, each step described in the present application can be executed in parallel, sequentially or in a different order, as long as the desired results of the technical solutions of the present application can be achieved, which is not limited herein.
[0102] The above detailed description does not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present application shall be included in the protection scope of the present application.
Claims
1. A security locking method, characterized in that, The method includes: If it is determined that the entered password is an incorrect password, then determine the error type of the incorrect password; The factors influencing the locking time are determined based on the error types of a preset number of consecutive incorrect passwords and the weighting factors for each error type. Based on the factors affecting the locking time and the preset standard locking time, the target locking time is determined, and a safe locking is performed according to the target locking time. Determining the error type of the erroneous password includes: If the incorrect password is determined to be a standard numeric password, then the incorrect password is compared with the similarity of a preset password in at least one password database; The cryptographic database includes a brute-force cryptographic database, a whitelist cryptographic database, and a historical cryptographic database. Based on the comparison results, the error type of the erroneous password is determined.
2. The method according to claim 1, characterized in that, Determining the error type of the erroneous password also includes: If the incorrect password is determined to be a biometric password or a short-range wireless communication signal password, then the error type of the incorrect password is determined to be the first error type.
3. The method according to claim 1, characterized in that, Based on the comparison results, the error type of the erroneous password is determined, including: If it is determined that the incorrect password is the same as the target password in the credential stuffing database, then the error type of the incorrect password is determined to be the second error type.
4. The method according to claim 3, characterized in that, Based on the comparison results, the error type of the erroneous password is determined, including: If the similarity between the incorrect password and the target whitelist password in the whitelist password library is determined to be greater than or equal to a preset first similarity threshold, then the error type of the incorrect password is determined to be the third error type.
5. The method according to claim 4, characterized in that, Based on the comparison results, the error type of the erroneous password is determined, including: If the similarity between the incorrect password and the target historical password in the historical password database is determined to be greater than or equal to a preset second similarity threshold, then the error type of the incorrect password is determined to be the fourth error type.
6. The method according to claim 5, characterized in that, The weighting factor for the second error type is greater than the weighting factor for the first error type, the weighting factor for the first error type is greater than the weighting factor for the fourth error type, and the weighting factor for the fourth error type is greater than the weighting factor for the third error type. Wherein, the product of the weighting factor of the second error type and the preset number is greater than 1, the product of the weighting factor of the first error type and the preset number is greater than or equal to 1, the product of the weighting factor of the fourth error type and the preset number is less than 1, and the product of the weighting factor of the third error type and the preset number is less than 1.
7. A safety locking device, characterized in that, The device includes: An error type determination module is used to determine the error type of the input password if it is determined that the input password is an incorrect password. The impact factor determination module is used to determine the impact factor of the lockout time based on the error types of a preset number of consecutive erroneous passwords and the weighting factor of each error type. The target locking time determination module is used to determine the target locking time based on the influencing factors of locking time and the preset standard locking time, so as to perform safe locking based on the target locking time; The error type determination module includes: A password comparison unit is used to compare the incorrect password with a preset password in at least one password database if it is determined that the incorrect password is a standard numeric password. The cryptographic database includes a brute-force cryptographic database, a whitelist cryptographic database, and a historical cryptographic database. An error type determination unit is used to determine the error type of the erroneous password based on the comparison result.
8. A security locking electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor to enable the at least one processor to perform the security locking method according to any one of claims 1-6.
9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that cause a processor to execute the security locking method according to any one of claims 1-6.
Citation Information
Patent Citations
Password management method and system and intelligent terminal
CN106778129A
Interactive control method and device and computer-readable storage medium
CN107330319A