Login verification method, device, computer equipment, storage medium and program product

Abstract

The present invention relates to the field of industry information technology, and discloses a login verification method, device, computer equipment, storage medium and program product. The method includes: in response to a user's login operation, sending a first login request to a backend management platform; the first login request includes the user's mobile phone number information; receiving a QR code generated by the backend management platform according to the first login request; in response to the user's scanning operation, the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; in response to the user's real-name verification operation through the mini program, a random code is obtained through the mini program; the random code is generated based on a key and a timestamp; in response to the user's input of the random code, a second login request is sent to the backend management platform for login. The above scheme is simple and safe when implementing the login verification function.

Description

Technical Field

[0001] The present invention relates to the field of industry information technology, and in particular to a login verification method, device, computer equipment, storage medium and program product. Background Art

[0002] MFA (Multi-Factor Authentication) is a method of identity authentication in computer systems. Users need to pass two or more authentication methods to enter the system and access resources. The TOTP (Time-Based One-Time Password) algorithm is a time-based one-time password algorithm that calculates a one-time password based on a pre-shared key and the current time. To activate MFA, it is generally necessary to first bind the user's identity and the user's physical device in the login authentication system. During the login process, in addition to entering the user's pre-set password, you also need to enter the access code (passcode) displayed on the user's physical device to complete the entire identity authentication. When using the TOTP algorithm for MFA, as long as the client (prover) and the server (verifier) ​​keep the clocks consistent and both parties have pre-set a shared key, the values ​​calculated in the same time segment will be the same. Therefore, the user identity and the shared key can be first bound in the authentication system, and then the shared key can be placed in the physical device. During the authentication process, the physical device and the authentication system each calculate an access code based on the shared key and timestamp through the TOTP algorithm. As long as the access codes are consistent, it can be proved that the user holds the physical device. During the entire authentication process, the physical device and the authentication system do not need to interact, which is very flexible.

[0003] However, the above solution requires the use of physical equipment, which is not simple enough. Summary of the invention

[0004] In view of this, the present invention provides a login verification method, apparatus, computer equipment, storage medium and program product to solve the problem that login verification requires the help of physical equipment and is not simple enough.

[0005] In the first aspect, the present invention provides a login verification method, which is applied to a terminal device, and the method includes: in response to a user's login operation, sending a first login request to a backend management platform; the first login request includes the user's mobile phone number information; receiving a QR code generated by the backend management platform according to the first login request; in response to the user's scanning operation, the scanning operation is to use a target software to scan the QR code, and the target software jumps to a mini program after scanning the code; the mini program is a program mounted on the target software for performing real-name verification according to the user's mobile phone number; in response to the user's real-name verification operation performed through the mini program, obtaining a random code through the mini program; the random code is generated based on a key and a timestamp; in response to the user inputting the random code, sending a second login request to the backend management platform for login.

[0006] In the above scheme, the terminal device sends a first login request based on the user's mobile phone number information, receives a QR code generated based on the first login request, and uses the target software to scan the QR code, which can perform a first-level verification on the user's identity information, and jump to the mini program for real-name verification by scanning the QR code, and obtain a random code corresponding to the user's real-name verification information, which can perform a second-level verification on the user's identity information without the need for additional physical equipment, thereby ensuring the security of user login verification while being simple.

[0007] In an optional embodiment, the QR code contains a random code ciphertext; obtaining the random code through the mini program includes: obtaining the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by a back-end management platform based on a key and a timestamp; calling a decryption service of a third-party authentication platform to decrypt the random code ciphertext to obtain a random code; the decryption service decrypts the ciphertext using the key and timestamp.

[0008] The above scheme further limits the process of the mini program obtaining the random code. The random code generated based on the key and timestamp is difficult to be predicted by other malicious software and is time-effective, further ensuring the security of user login verification.

[0009] In an optional implementation, after responding to the user inputting the random code, the method further includes: determining whether the random code input by the user is correct; if correct, sending a second login request to the backend management platform.

[0010] In the second aspect, the present invention provides a login verification method, which is applied to a back-end management platform, and the method includes: receiving a first login request sent by a terminal device; the first login request includes the user's mobile phone number information; generating a QR code according to the first login request and sending it to the terminal device, so that the terminal device jumps to a mini program in response to the user's scanning operation, and obtains a random code through the mini program in response to the user's real-name verification operation through the mini program, and sends a second login request to the back-end management platform in response to the user inputting the random code; the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for real-name verification based on the user's mobile phone number; the random code is generated based on a key and a timestamp; receiving the second login request sent by the terminal device, and logging in.

[0011] In the above scheme, the back-end management platform receives the first login request sent by the terminal device based on the user's mobile phone number information to generate a QR code, so that the terminal device can receive the QR code and scan the QR code using the target software. This can perform a first-level verification on the user's identity information, and by scanning the QR code to jump to the mini program for real-name verification, obtain a random code corresponding to the user's real-name verification information, and perform a second-level verification on the user's identity information without the need for additional physical equipment. This ensures the security of user login verification while being simple.

[0012] In an optional implementation, the second login request includes the user's mobile phone number information; after receiving the second login request sent by the terminal device, the method further includes: parsing the second login request to determine whether the user's mobile phone number meets the access rights; if so, the login is passed.

[0013] The above solution determines whether the user's mobile phone number meets the access rights after the user passes the dual identity authentication of the QR code and the random code, further ensuring the security of the user's account on the back-end management platform.

[0014] In a third aspect, the present invention provides a login verification device, which is applied to a terminal device, and the device includes: a first request module, which is used to send a first login request to a back-end management platform in response to a user's login operation; the first login request includes the user's mobile phone number information; a QR code receiving module, which is used to receive a QR code generated by the back-end management platform according to the first login request; a scanning module, which is used to respond to the user's scanning operation, and the scanning operation is to scan the QR code using a target software, and the target software jumps to a mini program after scanning the code; the mini program is a program mounted on the target software for real-name verification based on the user's mobile phone number; a mini program module, which is used to obtain a random code through the mini program in response to the user's real-name verification operation performed through the mini program; the random code is generated based on a key and a timestamp; a second request module, which is used to send a second login request to the back-end management platform in response to the user's input of the random code for login.

[0015] In a fourth aspect, the present invention provides a login verification device, which is applied to a back-end management platform, and the device includes: a first receiving module, which is used to receive a first login request sent by a terminal device; the first login request includes the user's mobile phone number information; a QR code generation module, which is used to generate a QR code according to the first login request and send it to the terminal device, so that the terminal device jumps to a mini program in response to the user's scanning operation, obtains a random code through the mini program in response to the user's real-name verification operation through the mini program, and sends a second login request to the back-end management platform in response to the user's input of the random code; the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for real-name verification according to the user's mobile phone number; the random code is generated based on a key and a timestamp; a second receiving module, which is used to receive the second login request sent by the terminal device, and log in.

[0016] In a fifth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, computer instructions being stored in the memory, and the processor executing the login verification method of the above-mentioned first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0017] In a sixth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the login verification method of the first aspect or any corresponding embodiment thereof.

[0018] In a seventh aspect, the present invention provides a computer program product, comprising computer instructions, wherein the computer instructions are used to enable a computer to execute the login verification method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0020] Figure 1 is a flowchart of a login verification method according to an embodiment of the present invention;

[0021] Figure 2 is a flow chart of another login verification method according to an embodiment of the present invention;

[0022] Figure 3 is a flowchart of another login verification method according to an embodiment of the present invention;

[0023] Figure 4 is a flowchart of another login verification method according to an embodiment of the present invention;

[0024] Figure 5 is a structural block diagram of a login verification device according to an embodiment of the present invention;

[0025] Figure 6 is a structural block diagram of another login verification device according to an embodiment of the present invention;

[0026] Figure 7 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0028] MFA (Multi-Factor Authentication) is a method of identity authentication in computer systems. Users need to pass two or more authentication methods to enter the system and access resources.

[0029] The TOTP (Time-Based One-Time Password) algorithm is a time-based one-time password algorithm that calculates a one-time password based on a pre-shared key and the current time. It has been accepted as the RFC 6238 standard and has become the cornerstone of active open authentication. It is used in many multi-factor authentication systems. The formula of the TOTP algorithm is TOTP (K, T) = Truncate (HMAC-SHA-1 (K, T)), where the parameter K represents the shared key and the parameter T represents the time variable.

[0030] To enable MFA, you generally need to first bind the user's identity and the user's physical device in the login authentication system. During the login process, in addition to entering the user's pre-set password, you also need to enter the access code (passcode) displayed on the user's physical device to complete the entire identity authentication. When using the TOTP algorithm for MFA, as long as the client (prover) and the server (verifier) ​​keep the clock consistent and both parties pre-set a shared key, the values ​​calculated in the same time segment are the same. Therefore, the user's identity and the shared key can be bound in the authentication system first, and then the shared key can be placed in the physical device. During the authentication process, the physical device and the authentication system each calculate the access code based on the shared key and timestamp through the TOTP algorithm. As long as the access codes are consistent, it can be proved that the user holds the physical device. During the entire authentication process, the physical device and the authentication system do not need to interact, which is very flexible.

[0031] However, the above solution requires the use of physical equipment and is still not simple enough.

[0032] Therefore, an embodiment of the present invention provides a login verification method, which jumps to a small program for real-name verification by scanning a QR code generated according to the user's mobile phone number information and obtains a random code to achieve a simple and highly secure login verification.

[0033] According to an embodiment of the present invention, a login verification method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0034] In this embodiment, a login verification method is provided, which can be used in terminal devices such as mobile phones, tablet computers, etc. Figure 1 is a flow chart of a login verification method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0035] Step S101: In response to a user's login operation, a first login request is sent to a backend management platform.

[0036] The first login request includes the user's mobile phone number information.

[0037] The back-end management platform is a platform for users to handle the required services, and the client can log in through the terminal device. For example, the back-end management platform is the business system of XX Bank. Therefore, in order to ensure the security of handling business, security verification is required when logging in to the client of the back-end management platform through the terminal device to prevent other people other than the user from logging into the user's account and causing losses to the user. When logging in to the back-end management platform, you need to first enter the client login page of the back-end management platform. The terminal device has downloaded and configured an application that can enter the login page of the back-end management platform, such as a browser or a client application of the back-end management platform. The user enters the login page of the back-end management platform through the application in the terminal device. In order to ensure the security of the login, the user needs to enter his or her mobile phone number information on the login page and initiate the login operation. The terminal device then sends a first login request containing the user's mobile phone number information to the back-end management platform.

[0038] Step S102: receiving a QR code generated by a backend management platform according to the first login request.

[0039] After receiving the first login request containing the user's mobile phone number information, the backend management platform generates a QR code for the user to log in according to the first login request. The QR code also contains the user's mobile phone number information. Only the mobile phone number that generates the QR code can scan the code to perform subsequent login verification steps. If the mobile phone number information scanned is different from the mobile phone number information that generates the QR code, the random code cannot be obtained by scanning the code. After generating the QR code, the backend management platform sends it to the terminal device, and the terminal device receives the QR code and displays it to the user.

[0040] Step S103, in response to the user's scanning operation, the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code.

[0041] After the user receives the QR code sent by the back-end management platform through the terminal device, he can scan the QR code through the target software. The target software is an application software that the user has previously verified and logged in with the mobile phone number information. The mini program is a program mounted on the target software for real-name verification based on the user's mobile phone number. The mini program can assist in real-name verification when logging in to the back-end management platform. The user can jump to the mini program after scanning the QR code through the target software.

[0042] Step S104, in response to the real-name verification operation performed by the user through the mini program, a random code is obtained through the mini program.

[0043] After scanning the code to jump to the mini program, the mini program will further perform real-name verification on the user. The user can perform real-name verification operations through the mini program interface, such as entering the mobile phone number again to request the mini program to display the random code for this login to the back-end management platform. The mini program, as a carrier for displaying random codes to users, can obtain random codes when users perform real-name verification. The mini program can obtain random codes through the random code generation service of the third-party authentication platform and display them to the user. The random code is generated based on the key and timestamp, which is difficult to be cracked by other malicious software and is time-sensitive, further ensuring the security of users logging into the back-end management platform.

[0044] Step S105, in response to the user inputting the random code, sending a second login request to the backend management platform for login.

[0045] After the user views the random code for logging into the backend management platform in the mini program, he or she enters the random code in the login page of the backend management platform to generate a second login request and send it to the backend management platform for login.

[0046] In the login verification method provided in this embodiment, the terminal device sends a first login request based on the user's mobile phone number information, receives a QR code generated based on the first login request, and uses the target software to scan the QR code, which can perform a first-level verification on the user's identity information, and jump to the mini program for real-name verification by scanning the QR code, and obtain a random code corresponding to the user's real-name verification information, which can perform a second-level verification on the user's identity information without the need for additional physical equipment, thereby ensuring the security of user login verification while being simple.

[0047] In this embodiment, a login verification method is provided, which can be used for a back-end management platform, such as a laptop computer, a desktop computer, a server, etc. Figure 2 is a flow chart of a login verification method according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps:

[0048] Step S201: receiving a first login request sent by a terminal device.

[0049] The back-end management platform is a platform that users need to handle the required services, and can be logged in remotely through a terminal device. In order to ensure the security of handling services, security verification is required when logging in to the back-end management platform through a terminal device to prevent other people other than the user from logging into the user's account and causing losses to the user. When logging in to the back-end management platform, it is necessary to first enter the login page of the back-end management platform through a terminal management device. The terminal device has downloaded and configured an application that can enter the login page of the back-end management platform, such as a browser. The user enters the login page of the back-end management platform through the application in the terminal device. In order to ensure the security of the login, the user needs to enter his or her mobile phone number information on the login page and initiate a login operation. The terminal device sends a first login request containing the user's mobile phone number information to the back-end management platform, and the back-end management platform receives the first login request sent by the terminal device.

[0050] Step S202, generate a QR code based on the first login request and send it to the terminal device, so that the terminal device responds to the user's scanning operation, jumps to the mini program, responds to the user's real-name verification operation through the mini program, obtains a random code through the mini program, and sends a second login request to the back-end management platform in response to the user's input of the random code.

[0051] The code scanning operation is to use the target software to scan the QR code, and the target software will jump to the mini program after scanning the code. The mini program is a program mounted on the target software for real-name verification based on the user's mobile phone number. The random code is generated based on the key and timestamp.

[0052] After receiving the first login request, the backend management platform generates a corresponding QR code based on the mobile phone number information in the first login request and sends it to the terminal device. The intermediate steps from the terminal device receiving the QR code to sending the second login request to the backend management platform are detailed in Figure 1 Steps S103 to S105 of the embodiment are not described in detail here.

[0053] Step S203, receiving a second login request sent by the terminal device, and logging in.

[0054] After the backend management platform receives the second login request sent by the terminal device, it can log in or verify again based on the information of the second login request. After successful verification, the user can log in remotely to the backend management platform through the terminal device.

[0055] In the login verification method provided in this embodiment, the back-end management platform receives the first login request sent by the terminal device based on the user's mobile phone number information to generate a QR code, so that the terminal device can receive the QR code and scan the QR code using the target software. This can perform a first-level verification on the user's identity information, and by scanning the QR code to jump to the mini program for real-name verification, obtain a random code corresponding to the user's real-name verification information, and perform a second-level verification on the user's identity information without the need for additional physical equipment. This ensures the security of the user's login verification while being simple.

[0056] In this embodiment, a login verification method is provided, which is jointly executed by the terminal device and the backend management platform. Figure 3 is a flow chart of a login verification method according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0057] Step S301: In response to a user's login operation, the terminal device sends a first login request to a backend management platform.

[0058] The first login request includes the user's mobile phone number information.

[0059] For details, please see Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0060] Step S302: the backend management platform receives a first login request sent by a terminal device.

[0061] For details, please see Figure 2 Step S201 of the illustrated embodiment will not be described in detail here.

[0062] Step S303: the backend management platform generates a QR code according to the first login request and sends it to the terminal device.

[0063] Optionally, after receiving the first login request, the backend management platform generates a random code ciphertext based on the key and the timestamp, and generates a corresponding QR code according to the random code ciphertext and the mobile phone number information in the first login request, that is, the QR code includes the mobile phone number information and the random code ciphertext. Step S304, the terminal device receives the QR code generated by the backend management platform according to the first login request.

[0064] For details, please see Figure 1 Step S102 of the illustrated embodiment will not be described in detail here.

[0065] Step S305, the terminal device responds to the user's scanning operation, which is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code.

[0066] The mini program is a program mounted on the target software and used to perform real-name verification based on the user's mobile phone number. Exemplarily, the target software is WeChat, and the mini program is the WeChat mini program.

[0067] For details, please see Figure 1 Step S103 of the illustrated embodiment will not be described in detail here.

[0068] Optionally, a QR code expiration time limit is preset, such as 24 hours, and the user can jump to the mini program only if the user scans the QR code within the QR code expiration time limit, otherwise the QR code needs to be obtained again. If the user scans the QR code outside the QR code expiration time limit, the user is prompted that an error occurred in scanning the QR code, or that the QR code has exceeded the time limit, and the user needs to follow the steps for obtaining the QR code to obtain a new QR code and scan it.

[0069] Step S306: The terminal device obtains a random code through the mini-program in response to the real-name verification operation performed by the user through the mini-program.

[0070] The random code is generated based on the key and timestamp. Users need to perform real-name verification on the mini program page using their mobile phone number information. The mini program can respond to the user's real-name verification operation and obtain the random code ciphertext in the previously scanned QR code so that the third-party authentication platform can decrypt the random code ciphertext using the same key as used for encryption.

[0071] Specifically, the steps of obtaining the random code through the applet are as follows: first, the random code ciphertext in the QR code is obtained through the applet, and the ciphertext is generated in advance by the back-end management platform based on the key and timestamp. Exemplarily, the back-end management platform first generates a random code through a random number generation algorithm (such as a pseudo-random number generator such as a linear congruential method and a multiplication congruential method), and then encrypts the random code through the key and timestamp to obtain the random code ciphertext. The number of digits of the random code can be set according to demand, for example, to 4 digits or 6 digits. After the applet obtains the random code ciphertext in the QR code, the random code ciphertext is sent to the third-party authentication platform to call the decryption service of the third-party authentication platform. The decryption service decrypts the random code ciphertext with the same key and timestamp as when encrypting to obtain the random code, that is, the key for encrypting and decrypting the random code is the same, so as to ensure that the random code obtained through the applet is the same as the random code generated by the back-end management platform, which is convenient for subsequent random code consistency verification. Since the generation process of the random code cannot be predicted by other malware, it is highly secure.

[0072] Step S307: In response to the user inputting the random code, the terminal device sends a second login request to the backend management platform.

[0073] After the user enters the random code on the login interface, the backend management platform determines whether the random code entered by the user is correct. If it is correct, the terminal device sends a second login request to the backend management platform; if it is incorrect, the login interface prompts the user that the random code entered is wrong and waits for the user to enter it again.

[0074] Optionally, a random code expiration time limit is preset, for example, 5 minutes. When the random code entered by the user is correct and the time of submitting the random code is within the random code expiration time limit, the user is determined to have passed the random code verification. If the time when the user submits the random code is outside the random code expiration time limit, the user is prompted that the random code entered is incorrect, or that the random code has exceeded the time limit, and the user needs to obtain a new random code and enter it again according to the steps for obtaining the random code. By setting the random code expiration time limit, the security of the random code is further improved.

[0075] Optionally, a web application that is compatible with the backend management platform is used instead of a mini program. The web application is mounted under the target software and is used to perform real-name verification based on the user's mobile phone number. The user obtains a random code by interacting with the random code acquisition function of the web application. Exemplarily, the web application is a public account, and relevant technical personnel can set up the real-name verification interaction function according to needs. For example, the user binds the mobile phone number information in the public account, and enters the corresponding command to obtain the random code through the preset interaction function of the public account, or the random code acquisition function automatically pops up after the public account is bound to the mobile phone number information.

[0076] Optionally, if the user exits the mini program midway, they need to log in again and obtain the random code again.

[0077] Optionally, a random code is used instead of the user's account password for account login, which does not affect the account login when the user forgets the password.

[0078] Optionally, the user is logged in when the account password and random code entered are correct, further improving login security.

[0079] Step S308: the backend management platform receives the second login request sent by the terminal device and passes the login.

[0080] When the back-end management platform receives the second login request, it can perform further verification. Optionally, the second login request includes the user's mobile phone number information. After receiving the second login request sent by the terminal device, the back-end management platform parses the second login request to determine whether the user's mobile phone number meets the access rights, such as whether the mobile phone number has been registered or whether the real-name information is pre-filled, etc. If the user's mobile phone number meets the access rights, the login is passed. If not, the user is prompted to check whether there is an error in the previous steps or contact relevant business personnel to resolve the problem.

[0081] In the login verification method provided in this embodiment, the terminal device sends a first login request to the back-end management platform based on the user's mobile phone number information, receives a QR code generated by the back-end management platform based on the first login request, and uses the target software to scan the QR code, which can perform a first-level verification on the user's identity information, and jump to the mini program for real-name verification by scanning the QR code, and obtain a random code corresponding to the user's real-name verification information, which can perform a second-level verification on the user's identity information without the need for additional physical equipment, thereby ensuring the security of user login verification while being simple.

[0082] As one or more specific application embodiments of the embodiments of the present invention, the optimal implementation scheme or the scheme that the inventor most wants to embody is described below in combination with specific application scenarios. Figure 4 is a flow chart of a login verification method according to an embodiment of the present invention. Figure 4 As shown, after the user enters the login interface on the mobile phone (corresponding to the terminal device in the aforementioned embodiment), enters the mobile phone number and clicks the Get Random Code option on the login interface to send a first login request to the back-end management platform. After receiving the request, the back-end management platform generates a random code through a random code generation algorithm, and encrypts the random code into a random code ciphertext based on the key and timestamp, and then generates a QR code based on the random code ciphertext and the mobile phone number entered by the user. A QR code page for the login mobile phone number pops up in the login interface. The user uses WeChat (corresponding to the target software in the aforementioned embodiment) that has been logged in with the user's mobile phone number to scan the QR code and jump to the WeChat applet. The user performs real-name verification again in the WeChat applet. After confirming that the login is made with the local number, the applet obtains the user's real-name verification code. The random code ciphertext in the QR code is sent to a third-party authoritative platform (third-party authentication platform) to request the third-party authoritative platform to decrypt the random code ciphertext based on the timestamp and the same key as that used for encryption to obtain a random code. The user closes the QR code page on the login interface and enters the random code in the random code input position. The back-end management platform verifies whether the random code entered by the user is correct. If incorrect, the login page prompts "Incorrect random code". If correct, the terminal device sends a second login request to the back-end management platform. The back-end management platform determines whether the user's mobile phone number has access rights. If not, the login page prompts "Please contact the administrator to assign business system access rights". If so, the verification is passed and the user logs in successfully.

[0083] In this embodiment, a login verification device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0084] This embodiment provides a login verification device, which is applied to a terminal device, such as Figure 5 As shown, including:

[0085] The first request module 501 is used to send a first login request to the backend management platform in response to the user's login operation; the first login request includes the user's mobile phone number information;

[0086] A QR code receiving module 502, used to receive a QR code generated by the backend management platform according to the first login request;

[0087] The code scanning module 503 is used to respond to the user's code scanning operation, where the target software is used to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for performing real-name verification according to the user's mobile phone number;

[0088] Mini-program module 504, for obtaining a random code through the mini-program in response to a real-name verification operation performed by a user through the mini-program; the random code is generated based on a key and a timestamp;

[0089] The second request module 505 is used to send a second login request to the backend management platform in response to the user inputting the random code to log in.

[0090] In an optional embodiment, the QR code contains a random code ciphertext, and the mini program module is also used to: obtain the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by the back-end management platform based on the key and timestamp; call the decryption service of the third-party authentication platform to decrypt the random code ciphertext to obtain the random code; the decryption service decrypts the ciphertext through the key and timestamp.

[0091] In an optional implementation, it further includes a random code determination module for determining whether the random code input by the user is correct; if correct, a second login request is sent to the backend management platform.

[0092] This embodiment provides another login verification device, which is applied to a backend management platform, such as Figure 6 As shown, including:

[0093] The first receiving module 601 is used to receive a first login request sent by a terminal device; the first login request includes the user's mobile phone number information;

[0094] The QR code generation module 602 is used to generate a QR code according to the first login request and send it to the terminal device, so that the terminal device jumps to the mini program in response to the user's scanning operation, obtains a random code through the mini program in response to the user's real-name verification operation through the mini program, and sends a second login request to the backend management platform in response to the user's input of the random code; the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for real-name verification according to the user's mobile phone number; the random code is generated based on the key and the timestamp;

[0095] The second receiving module 603 is used to receive a second login request sent by the terminal device and log in.

[0096] In an optional implementation, the second login request includes the user's mobile phone number information; the device also includes a permission verification module, which is used to parse the second login request and determine whether the user's mobile phone number meets the access permission; if so, the login is passed.

[0097] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0098] The login verification device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0099] The embodiment of the present invention also provides a computer device having the above Figure 5 or Figure 6 The login verification device shown.

[0100] See also Figure 7 , Figure 7 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 7As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 7 A processor 10 is taken as an example.

[0101] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0102] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0103] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0104] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0105] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0106] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0107] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0108] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0109] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A login verification method, characterized in that: Applied to a terminal device, the method comprises: In response to the user's login operation, a first login request is sent to the backend management platform; the first login request includes the user's mobile phone number information; Receiving a QR code generated by a backend management platform according to the first login request; In response to a scanning operation by the user, the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for performing real-name verification according to the user's mobile phone number; In response to a real-name verification operation performed by a user through the mini-program, a random code is obtained through the mini-program; the random code is generated based on a key and a timestamp; In response to the user inputting the random code, sending a second login request to the backend management platform for logging in; The two-dimensional code includes a random code ciphertext; the obtaining of the random code through the mini program includes: Obtain the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by the backend management platform based on the key and timestamp; The decryption service of the third-party authentication platform is called to decrypt the random code ciphertext to obtain the random code; the decryption service decrypts the ciphertext using the key and timestamp.

2. The method according to claim 1, characterized in that After responding to the user inputting the random code, the method further includes: Determine whether the random code entered by the user is correct; If correct, send a second login request to the backend management platform.

3. A login verification method, characterized in that: Applied to a backend management platform, the method includes: Receiving a first login request sent by a terminal device; the first login request includes a user's mobile phone number information; A QR code is generated according to the first login request and sent to the terminal device, so that the terminal device jumps to the mini program in response to the user's scanning operation, obtains a random code through the mini program in response to the user's real-name verification operation through the mini program, and sends a second login request to the back-end management platform in response to the user's input of the random code; the scanning operation is to use the target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for real-name verification according to the user's mobile phone number; the random code is generated based on the key and the timestamp; Receiving a second login request sent by the terminal device, and logging in; The two-dimensional code includes a random code ciphertext; the obtaining of the random code through the mini program includes: Obtain the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by the backend management platform based on the key and timestamp; The decryption service of the third-party authentication platform is called to decrypt the random code ciphertext to obtain the random code; the decryption service decrypts the ciphertext using the key and timestamp.

4. The method according to claim 3, characterized in that The second login request includes the user's mobile phone number information; After receiving the second login request sent by the terminal device, the method further includes: Parse the second login request to determine whether the user's mobile phone number meets the access rights requirements; If satisfied, log in.

5. A login verification device, characterized in that: Applied to a terminal device, the device comprises: A first request module, configured to send a first login request to a backend management platform in response to a user's login operation; the first login request includes the user's mobile phone number information; A QR code receiving module, used to receive a QR code generated by a backend management platform according to the first login request; A code scanning module, used to respond to a code scanning operation of a user, wherein the code scanning operation is to use a target software to scan the QR code, and the target software jumps to a mini program after scanning the code; the mini program is a program mounted on the target software for performing real-name verification according to the user's mobile phone number; A mini-program module, configured to obtain a random code through the mini-program in response to a real-name verification operation performed by a user through the mini-program; the random code is generated based on a key and a timestamp; A second request module, configured to send a second login request to the backend management platform in response to the user inputting the random code, so as to log in; The two-dimensional code includes a random code ciphertext; the obtaining of the random code through the mini program includes: Obtain the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by the backend management platform based on the key and timestamp; The decryption service of the third-party authentication platform is called to decrypt the random code ciphertext to obtain the random code; the decryption service decrypts the ciphertext using the key and timestamp.

6. A login verification device, characterized in that: Applied to the back-end management platform, the device includes: A first receiving module, configured to receive a first login request sent by a terminal device; the first login request includes a user's mobile phone number information; A QR code generation module, configured to generate a QR code according to the first login request and send it to a terminal device, so that the terminal device jumps to the mini program in response to a user's scanning operation, obtains a random code through the mini program in response to a user's real-name verification operation through the mini program, and sends a second login request to a backend management platform in response to a user inputting the random code; the scanning operation is to use a target software to scan the QR code, and the target software jumps to the mini program after scanning the code; the mini program is a program mounted on the target software for performing real-name verification according to the user's mobile phone number; the random code is generated based on a key and a timestamp; A second receiving module is used to receive a second login request sent by the terminal device and log in; The two-dimensional code includes a random code ciphertext; the obtaining of the random code through the mini program includes: Obtain the random code ciphertext in the QR code through the mini program; the random code ciphertext is pre-generated by the backend management platform based on the key and timestamp; The decryption service of the third-party authentication platform is called to decrypt the random code ciphertext to obtain the random code; the decryption service decrypts the ciphertext using the key and timestamp.

7. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the login verification method according to any one of claims 1 to 4 by executing the computer instructions.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the login verification method according to any one of claims 1 to 4.

9. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to cause a computer to execute the login verification method according to any one of claims 1 to 4.

Images