A system login permission management method, system and medium

Abstract

The embodiment of the application provides a system login permission management method, system and medium, the method comprises the following steps: carrying out identity authentication on a user based on an access request instruction, if the identity authentication is successful, obtaining the access permission corresponding to the user; calling an application list accessible by the user in the system according to the access permission; recording the time when the user accesses the application list, and generating an access time; judging whether the access time is greater than or equal to a preset time threshold; if yes, generating a dynamic verification code according to a dynamic verification instruction according to the access time interval, and intermittently verifying the access permission through the dynamic verification code; if no, transmitting the user access record to a terminal; through the identity authentication of the user, dynamic account login is carried out, the security of the system login interface is realized, in addition, the application list under the corresponding permission is called according to the access permission of the user, the data without access permission is encrypted, and the access security of the system data is realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of permission management, in particular, to a system login permission management method, system and medium. BACKGROUND

[0002] In the system login process, in order to ensure the security of user login, the system will set some authentication procedures and access permission protection strategies to realize access security. In the existing system login permission management method, dynamic password and account cannot be generated in the user identity authentication process, which causes password cracking to be easy. In addition, when the system application is accessed, different access permissions and application lists under different permissions are not set, and after the user logs in the system, all applications in the system can be viewed, which causes poor data security. In view of the above problems, an effective technical solution is currently needed. SUMMARY

[0003] The purpose of the embodiments of the present application is to provide a system login permission management method, system and medium, which realizes the security of the system login interface by authenticating the user identity and dynamically logging in the account, and realizes the access security of system data by calling the application list under the corresponding permission according to the access permission of the user, and encrypting the data without access permission.

[0004] The embodiments of the present application also provide a system login permission management method, which comprises:

[0005] Authenticating the user identity based on the access request instruction, generating a dynamic account password if the identity authentication is successful, and logging into the system according to the dynamic account password;

[0006] Obtaining the access permission of the user, and calling the application list accessible by the user in the system according to the access permission;

[0007] Recording the time of the user accessing the application list, and generating an access time;

[0008] Judging whether the access time is greater than or equal to a preset time threshold;

[0009] If yes, generating a dynamic verification instruction, generating a dynamic verification code according to the access time interval based on the dynamic verification instruction, and intermittently verifying the access permission through the dynamic verification code;

[0010] If no, transmitting the user access record to the terminal.

[0011] Optionally, in the system login permission management method described in the embodiments of the present application, the user identity is authenticated based on the access request instruction, and the identity authentication process is as follows:

[0012] Obtain access request instructions and call authentication procedures of different levels according to the access request instructions;

[0013] Authenticate the user's identity through the authentication procedure and obtain authentication information;

[0014] Compare the authentication information with the system's built-in identity information to obtain the authentication match;

[0015] Determining whether the authentication matching degree is greater than or equal to a set matching degree threshold;

[0016] If it is greater than or equal to, the user identity authentication is determined to be successful;

[0017] If it is less than, it is determined that the user authentication has failed.

[0018] Optionally, in the system login authority management method described in the embodiment of the present application, if identity authentication is successful, a dynamic account and password are generated, and logging into the system according to the dynamic account and password specifically includes:

[0019] Obtain the initial account database and password database. If the identity authentication is successful, a group of accounts will be randomly called through the initial account database.

[0020] Match a set of passwords in the password database based on a set of accounts called, and log in to the system using the account and password;

[0021] During the system login process, obtain the system login interface and calculate the login interface retention time;

[0022] If the login interface is maintained for longer than the set retention time, the account and password destruction program will be started to destroy the previous set of accounts and passwords;

[0023] When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

[0024] Optionally, in the system login permission management method described in the embodiment of the present application, obtaining the access rights corresponding to the user and retrieving a list of applications accessible to the user in the system according to the access rights specifically includes:

[0025] Obtain the user's corresponding access rights and generate access levels;

[0026] Classify all application lists in the system into different levels and generate application levels;

[0027] Match the access level with the application level, classify the applications according to the matching results, and generate a list of applications with matching access levels;

[0028] The application list of the corresponding level is called according to the current access level, and the application list is displayed on the system display interface.

[0029] Optionally, in the system login authority management method described in the embodiment of the present application, a dynamic verification code is generated according to the dynamic verification instruction at the access time interval, and the access authority is intermittently verified using the dynamic verification code, specifically including:

[0030] Get the time when the user accesses the application list and generate the access time;

[0031] Set refresh nodes based on access time according to preset time threshold and multiple of time threshold;

[0032] When the access time reaches the refresh node, the verification program is jumped to generate a dynamic verification code;

[0033] The dynamic verification code is pushed to the user's mobile phone, and the user enters the dynamic verification code for intermittent verification during the access period.

[0034] Optionally, in the system login authority management method described in the embodiment of the present application, if is less than , then after determining that the user identity authentication has failed, the method further includes:

[0035] If the user fails the first authentication, the failure reason is generated and the authentication protection program is started;

[0036] Generate limited authentication time according to authentication protection program;

[0037] When the system time reaches the limit authentication time, if the user identity authentication instruction is received again, the user identity will be authenticated again according to the authentication procedure;

[0038] If the second authentication is successful, the previous authentication failure record will be cleared;

[0039] If the secondary authentication fails, the authentication process will be locked.

[0040] In a second aspect, an embodiment of the present application provides a system login authority management system, the system comprising: a memory and a processor, the memory comprising a program of a system login authority management method, the program of the system login authority management method being executed by the processor to implement the following steps:

[0041] Authenticate the user based on the access request instruction. If the authentication is successful, a dynamic account and password are generated. The user logs into the system based on the dynamic account and password and obtains the corresponding access rights of the user.

[0042] Retrieve the list of applications accessible to the user in the system based on access rights;

[0043] Record the time when the user accesses the application list and generate the access time;

[0044] Determine whether the access time is greater than or equal to a preset time threshold;

[0045] If it is greater than or equal to, a dynamic verification instruction is generated, and a dynamic verification code is generated according to the dynamic verification instruction at the access time interval, and the access authority is intermittently verified through the dynamic verification code;

[0046] If it is less, the user access record is transmitted to the terminal.

[0047] Optionally, in the system login authority management system described in the embodiment of the present application, the user is authenticated based on the access request instruction, and the authentication process is as follows:

[0048] Obtain access request instructions and call authentication procedures of different levels according to the access request instructions;

[0049] Authenticate the user's identity through the authentication procedure and obtain authentication information;

[0050] Compare the authentication information with the system's built-in identity information to obtain the authentication match;

[0051] Determining whether the authentication matching degree is greater than or equal to a set matching degree threshold;

[0052] If it is greater than or equal to, the user identity authentication is determined to be successful;

[0053] If it is less than, it is determined that the user authentication has failed.

[0054] Optionally, in the system login authority management system described in the embodiment of the present application, if identity authentication is successful, a dynamic account and password are generated, and logging into the system according to the dynamic account and password specifically includes:

[0055] Obtain the initial account database and password database. If the identity authentication is successful, a group of accounts will be randomly called through the initial account database.

[0056] Match a set of passwords in the password database based on a set of accounts called, and log in to the system using the account and password;

[0057] During the system login process, obtain the system login interface and calculate the login interface retention time;

[0058] If the login interface is maintained for longer than the set retention time, the account and password destruction program will be started to destroy the previous set of accounts and passwords;

[0059] When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

[0060] In a third aspect, an embodiment of the present application further provides a computer-readable storage medium, which includes a system login authority management method program. When the system login authority management method program is executed by a processor, the steps of the system login authority management method as described in any one of the above items are implemented.

[0061] As can be seen from the above, the embodiment of the present application provides a system login permission management method, system and medium, which authenticates the user based on the access request instruction. If the identity authentication is successful, a dynamic account password is generated, the system is logged in according to the dynamic account password, and the user's corresponding access rights are obtained; the application list accessible to the user in the system is retrieved according to the access rights; the time when the user accesses the application list is recorded to generate the access time; it is determined whether the access time is greater than or equal to the preset time threshold; if it is greater than or equal to, a dynamic verification instruction is generated, and a dynamic verification code is generated according to the dynamic verification instruction according to the access time interval, and the access rights are intermittently verified through the dynamic verification code; if it is less than, the user access record is transmitted to the terminal; by authenticating the user identity and performing dynamic account login, the security of the system login interface is achieved, and in addition, the application list under the corresponding permission is called according to the user's access rights, and the data without access rights is encrypted to achieve access security of the system data. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without creative work.

[0063] Figure 1 A flowchart of the system login authority management method provided in an embodiment of the present application;

[0064] Figure 2 A flowchart of a user identity authentication method for a system login authority management method provided in an embodiment of the present application;

[0065] Figure 3 This is a flow chart of the dynamic account and password login system of the system login authority management method provided in the embodiment of the present application. DETAILED DESCRIPTION

[0066] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work fall within the scope of protection of the present application.

[0067] It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined or explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and should not be understood as indicating or implying relative importance.

[0068] Please refer to Figure 1 , Figure 1 This is a flowchart of a system login authority management method in some embodiments of the present application. The system login authority management method is used in a terminal device and includes the following steps:

[0069] S101, authenticate the user based on the access request instruction. If the authentication is successful, a dynamic account and password are generated, and the user logs into the system according to the dynamic account and password;

[0070] S102, obtaining the user's corresponding access rights, and calling the list of applications accessible to the user in the system according to the access rights;

[0071] S103, recording the time when the user accesses the application list, generating an access time, and determining whether the access time is greater than or equal to a preset time threshold;

[0072] S104, if it is greater than or equal to, generating a dynamic verification instruction, generating a dynamic verification code according to the dynamic verification instruction and at the access time interval, and intermittently verifying the access permission through the dynamic verification code;

[0073] S105: If it is less than, the user access record is transmitted to the terminal.

[0074] It should be noted that when logging in, the user identity needs to be authenticated and a dynamic account and password need to be generated to prevent the password from being easily cracked. In addition, during the access process, uninterrupted verification will be performed based on the access time. For different access permissions, the system display interface will show different application lists to protect data privacy within the system and improve data access security.

[0075] Please refer to Figure 2 , Figure 2 This is a flow chart of a user identity authentication method for a system login authority management method in some embodiments of the present application. According to an embodiment of the present invention, the user is authenticated based on the access request instruction. The identity authentication process is as follows:

[0076] S201, obtaining an access request instruction, calling different levels of authentication programs according to the access request instruction, authenticating the user identity through the authentication program, and obtaining authentication information;

[0077] S202, comparing the authentication information with the system's built-in identity information to obtain an authentication match;

[0078] S203, determining whether the authentication matching degree is greater than or equal to a set matching degree threshold;

[0079] S204, if it is greater than or equal to, then it is determined that the user identity authentication is successful;

[0080] S205: If it is less than, it is determined that the user identity authentication fails.

[0081] It should be noted that during the identity authentication process, by comparing the identity information built into the system and performing user identity analysis based on the built-in identity information, the system is prevented from being accessed by outsiders or intruders, thereby improving user identity security.

[0082] Please refer to Figure 3 , Figure 3 This is a flowchart of a dynamic account and password login system in a system login permission management method in some embodiments of the present application. According to an embodiment of the present invention, if the identity authentication is successful, a dynamic account and password are generated, and the system is logged in according to the dynamic account and password, specifically including:

[0083] S301, obtain the initial account database and password database, if the identity authentication is successful, then randomly call a group of accounts through the initial account database;

[0084] S302, matching a set of passwords in the password database according to the called set of accounts, and logging into the system using the account and password;

[0085] S303, during the system login process, obtaining the system login interface and calculating the login interface retention time;

[0086] S304: If the login interface retention time is greater than the set retention time, start the account and password destruction program to destroy the previous set of accounts and passwords;

[0087] S305: When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

[0088] It should be noted that when a user logs into the system, the system uses the time the user stays in the operating interface to assist in determining whether the user is currently logged into the system. If the user has not logged into the system for a long time, the previously generated account and password will be destroyed to improve the security of the account and password.

[0089] According to an embodiment of the present invention, obtaining the access rights corresponding to a user and retrieving a list of applications accessible to the user in the system based on the access rights specifically includes:

[0090] Obtain the user's corresponding access rights and generate access levels;

[0091] Classify all application lists in the system into different levels and generate application levels;

[0092] Match the access level with the application level, classify the applications according to the matching results, and generate a list of applications with matching access levels;

[0093] The application list of the corresponding level is called according to the current access level, and the application list is displayed on the system display interface.

[0094] It should be noted that by matching the application level with the access permission level, different access permissions can be accurately called to match different application lists, thereby implementing access permission restrictions.

[0095] According to an embodiment of the present invention, a dynamic verification code is generated according to an access time interval based on a dynamic verification instruction, and access rights are intermittently verified using the dynamic verification code, specifically including:

[0096] Get the time when the user accesses the application list and generate the access time;

[0097] Set refresh nodes based on access time according to preset time threshold and multiple of time threshold;

[0098] When the access time reaches the refresh node, the verification program is jumped to generate a dynamic verification code;

[0099] The dynamic verification code is pushed to the user's mobile phone, and the user enters the dynamic verification code for intermittent verification during the access period.

[0100] It should be noted that the user identity is continuously refreshed and authenticated during the user access process. It can be understood that when the user access time reaches the refresh node, it is verified again through the dynamic verification code. Only after the verification is successful can the user continue to access, thereby improving access security.

[0101] According to an embodiment of the present invention, if is less than , then after determining that the user identity authentication has failed, the method further includes:

[0102] If the user fails the first authentication, the failure reason is generated and the authentication protection program is started;

[0103] Generate limited authentication time according to authentication protection program;

[0104] When the system time reaches the limit authentication time, if the user identity authentication instruction is received again, the user identity will be authenticated again according to the authentication procedure;

[0105] If the second authentication is successful, the previous authentication failure record will be cleared;

[0106] If the secondary authentication fails, the authentication process will be locked.

[0107] It should be noted that the reasons for failure include the user entering the wrong password or an outsider intruding. The secondary authentication is used to identify the cause and analyze it, so as to control the authentication program. When it is determined that an outsider has intruded into the system, the authentication program will be locked and the user will not be able to log in to the system.

[0108] According to an embodiment of the present invention, the method further includes: obtaining current access rights, accessing a corresponding application list according to the current access rights, and obtaining access information;

[0109] Determine whether the access information meets the access requirements;

[0110] If the access requirements are not met, apply for access permission upgrade and generate an audit result;

[0111] If the audit result is successful, the current access level will be upgraded and new access permissions will be generated. The data in the application list will be accessed based on the new access permissions.

[0112] If the access requirements are met, an access record is generated.

[0113] If the review is unsuccessful, the privilege escalation request will be rejected.

[0114] It should be noted that the application list is accessed according to different access rights, and it is judged whether the access data meets the requirements, and an access level upgrade review is conducted to adjust the access level.

[0115] In a second aspect, an embodiment of the present application provides a system login authority management system, the system comprising: a memory and a processor, the memory including a program of a system login authority management method, and when the program of the system login authority management method is executed by the processor, the following steps are implemented:

[0116] Authenticate the user based on the access request instruction. If the authentication is successful, a dynamic account and password are generated. The user logs into the system based on the dynamic account and password and obtains the corresponding access rights of the user.

[0117] Retrieve the list of applications accessible to the user in the system based on access rights;

[0118] Record the time when the user accesses the application list and generate the access time;

[0119] Determine whether the access time is greater than or equal to a preset time threshold;

[0120] If it is greater than or equal to, a dynamic verification instruction is generated, and a dynamic verification code is generated according to the dynamic verification instruction at the access time interval, and the access authority is intermittently verified through the dynamic verification code;

[0121] If it is less, the user access record is transmitted to the terminal.

[0122] It should be noted that when logging in, the user identity needs to be authenticated and a dynamic account and password need to be generated to prevent the password from being easily cracked. In addition, during the access process, uninterrupted verification will be performed based on the access time. For different access permissions, the system display interface will show different application lists to protect data privacy within the system and improve data access security.

[0123] According to an embodiment of the present invention, the user is authenticated based on the access request instruction. The authentication process is as follows:

[0124] Obtain access request instructions and call authentication procedures of different levels according to the access request instructions;

[0125] Authenticate the user's identity through the authentication procedure and obtain authentication information;

[0126] Compare the authentication information with the system's built-in identity information to obtain the authentication match;

[0127] Determine whether the authentication matching degree is greater than or equal to the set matching degree threshold;

[0128] If it is greater than or equal to, the user identity authentication is determined to be successful;

[0129] If it is less than, it is determined that the user authentication has failed.

[0130] It should be noted that during the identity authentication process, by comparing the identity information built into the system and performing user identity analysis based on the built-in identity information, the system is prevented from being accessed by outsiders or intruders, thereby improving user identity security.

[0131] According to an embodiment of the present invention, if the identity authentication is successful, a dynamic account and password are generated, and the system is logged in according to the dynamic account and password, specifically including:

[0132] Obtain the initial account database and password database. If the identity authentication is successful, a group of accounts will be randomly called through the initial account database.

[0133] Match a set of passwords in the password database based on a set of accounts called, and log in to the system using the account and password;

[0134] During the system login process, obtain the system login interface and calculate the login interface retention time;

[0135] If the login interface is maintained for longer than the set retention time, the account and password destruction program will be started to destroy the previous set of accounts and passwords;

[0136] When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

[0137] It should be noted that when a user logs into the system, the system uses the time the user stays in the operating interface to assist in determining whether the user is currently logged into the system. If the user has not logged into the system for a long time, the previously generated account and password will be destroyed to improve the security of the account and password.

[0138] According to an embodiment of the present invention, obtaining the access rights corresponding to a user and retrieving a list of applications accessible to the user in the system based on the access rights specifically includes:

[0139] Obtain the user's corresponding access rights and generate access levels;

[0140] Classify all application lists in the system into different levels and generate application levels;

[0141] Match the access level with the application level, classify the applications according to the matching results, and generate a list of applications with matching access levels;

[0142] The application list of the corresponding level is called according to the current access level, and the application list is displayed on the system display interface.

[0143] It should be noted that by matching the application level with the access permission level, different access permissions can be accurately called to match different application lists, thereby implementing access permission restrictions.

[0144] According to an embodiment of the present invention, a dynamic verification code is generated according to an access time interval based on a dynamic verification instruction, and access rights are intermittently verified using the dynamic verification code, specifically including:

[0145] Get the time when the user accesses the application list and generate the access time;

[0146] Set refresh nodes based on access time according to preset time threshold and multiple of time threshold;

[0147] When the access time reaches the refresh node, the verification program is jumped to generate a dynamic verification code;

[0148] The dynamic verification code is pushed to the user's mobile phone, and the user enters the dynamic verification code for intermittent verification during the access period.

[0149] It should be noted that the user identity is continuously refreshed and authenticated during the user access process. It can be understood that when the user access time reaches the refresh node, it is verified again through the dynamic verification code. Only after the verification is successful can the user continue to access, thereby improving access security.

[0150] According to an embodiment of the present invention, if is less than , then after determining that the user identity authentication has failed, the method further includes:

[0151] If the user fails the first authentication, the failure reason is generated and the authentication protection program is started;

[0152] Generate limited authentication time according to authentication protection program;

[0153] When the system time reaches the limit authentication time, if the user identity authentication instruction is received again, the user identity will be authenticated again according to the authentication procedure;

[0154] If the second authentication is successful, the previous authentication failure record will be cleared;

[0155] If the secondary authentication fails, the authentication process will be locked.

[0156] It should be noted that the reasons for failure include the user entering the wrong password or an outsider intruding. The secondary authentication is used to identify the cause and analyze it, so as to control the authentication program. When it is determined that an outsider has intruded into the system, the authentication program will be locked and the user will not be able to log in to the system.

[0157] According to an embodiment of the present invention, the method further includes: obtaining current access rights, accessing a corresponding application list according to the current access rights, and obtaining access information;

[0158] Determine whether the access information meets the access requirements;

[0159] If the access requirements are not met, apply for access permission upgrade and generate an audit result;

[0160] If the audit result is successful, the current access level will be upgraded and new access permissions will be generated. The data in the application list will be accessed based on the new access permissions.

[0161] If the access requirements are met, an access record is generated.

[0162] If the review is unsuccessful, the privilege escalation request will be rejected.

[0163] It should be noted that the application list is accessed according to different access rights, and it is judged whether the access data meets the requirements, and an access level upgrade review is conducted to adjust the access level.

[0164] A third aspect of the present invention provides a computer-readable storage medium, which includes a system login authority management method program. When the system login authority management method program is executed by a processor, the steps of any of the above-mentioned system login authority management methods are implemented.

[0165] The present invention discloses a system login permission management method, system and medium, which authenticate the user based on an access request instruction. If the identity authentication is successful, a dynamic account password is generated, the system is logged in according to the dynamic account password, and the user's corresponding access rights are obtained; a list of applications accessible to the user in the system is called according to the access rights; the time when the user accesses the application list is recorded to generate an access time; it is determined whether the access time is greater than or equal to a preset time threshold; if it is greater than or equal to, a dynamic verification instruction is generated, a dynamic verification code is generated according to the dynamic verification instruction according to the access time interval, and the access rights are intermittently verified by the dynamic verification code; if it is less than, the user access record is transmitted to the terminal; the user identity is authenticated and dynamic account login is performed to achieve the security of the system login interface; in addition, the application list under the corresponding permission is called according to the user's access rights, and data without access rights is encrypted to achieve access security of system data.

[0166] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of units is merely a logical function division. In actual implementation, there may be other division methods, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0167] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed across multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0168] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0169] Those skilled in the art will understand that all or part of the steps of the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a readable storage medium. When the program is executed, it executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: mobile storage devices, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc. Various media that can store program codes.

[0170] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

Claims

1. A system login authority management method, characterized in that: include: Authenticate the user based on the access request instruction. If the authentication is successful, a dynamic account and password will be generated and the user will log in to the system based on the dynamic account and password. Obtain the user's corresponding access rights, and retrieve the list of applications that the user can access in the system based on the access rights; Record the time when the user accesses the application list and generate the access time; Determine whether the access time is greater than or equal to a preset time threshold; If it is greater than or equal to, a dynamic verification instruction is generated. A dynamic verification code is generated according to the dynamic verification instruction at the access time interval. The dynamic verification code is used to intermittently verify the access rights, specifically including: Get the time when the user accesses the application list and generate the access time; Set refresh nodes based on access time according to preset time threshold and multiple of time threshold; When the access time reaches the refresh node, the verification program is jumped to generate a dynamic verification code; Push the dynamic verification code to the user's mobile phone, and the user enters the dynamic verification code for intermittent verification during the access period; If it is less than, the user access record is transmitted to the terminal; Get the current access rights, access the corresponding application list based on the current access rights, and obtain access information; Determine whether the access information meets the access requirements; If the access requirements are not met, apply for access permission upgrade and generate an audit result; If the audit result is successful, the current access level will be upgraded and new access permissions will be generated. The data in the application list will be accessed based on the new access permissions. If the access requirements are met, an access record is generated; If the review is unsuccessful, the privilege escalation request will be rejected.

2. The system login authority management method according to claim 1, characterized in that: The user is authenticated based on the access request instruction. The authentication process is as follows: Obtain access request instructions and call authentication procedures of different levels according to the access request instructions; Authenticate the user's identity through the authentication procedure and obtain authentication information; Compare the authentication information with the system's built-in identity information to obtain the authentication match; Determining whether the authentication matching degree is greater than or equal to a set matching degree threshold; If it is greater than or equal to, the user identity authentication is determined to be successful; If it is less than, it is determined that the user authentication has failed.

3. The system login authority management method according to claim 2, characterized in that: If the identity authentication is successful, a dynamic account and password will be generated, and the system will be logged in based on the dynamic account and password, including: Obtain the initial account database and password database. If the identity authentication is successful, a group of accounts will be randomly called through the initial account database. Match a set of passwords in the password database based on a set of accounts called, and log in to the system using the account and password; During the system login process, obtain the system login interface and calculate the login interface retention time; If the login interface is maintained for longer than the set retention time, the account and password destruction program will be started to destroy the previous set of accounts and passwords; When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

4. The system login authority management method according to claim 3, characterized in that: Obtain the user's corresponding access rights and retrieve the list of applications that the user can access in the system based on the access rights, including: Obtain the user's corresponding access rights and generate access levels; Classify all application lists in the system into different levels and generate application levels; Match the access level with the application level, classify the applications according to the matching results, and generate a list of applications with matching access levels; The application list of the corresponding level is called according to the current access level, and the application list is displayed on the system display interface.

5. The system login authority management method according to claim 2, characterized in that: If it is less than, it is determined that the user authentication failed, and also includes: If the user fails the first authentication, the failure reason is generated and the authentication protection program is started; Generate limited authentication time according to authentication protection program; When the system time reaches the limit authentication time, if the user identity authentication instruction is received again, the user identity will be authenticated again according to the authentication procedure; If the second authentication is successful, the previous authentication failure record will be cleared; If the secondary authentication fails, the authentication process will be locked.

6. A system login authority management system, characterized in that: The system includes: a memory and a processor, wherein the memory includes a program of a system login authority management method, and when the program of the system login authority management method is executed by the processor, the following steps are implemented: Authenticate the user based on the access request instruction. If the authentication is successful, a dynamic account and password are generated. The user logs into the system based on the dynamic account and password and obtains the corresponding access rights of the user. Retrieve the list of applications accessible to the user in the system based on access rights; Record the time when the user accesses the application list and generate the access time; Determine whether the access time is greater than or equal to a preset time threshold; If it is greater than or equal to, a dynamic verification instruction is generated. A dynamic verification code is generated according to the dynamic verification instruction at the access time interval. The dynamic verification code is used to intermittently verify the access rights, specifically including: Get the time when the user accesses the application list and generate the access time; Set refresh nodes based on access time according to preset time threshold and multiple of time threshold; When the access time reaches the refresh node, the verification program is jumped to generate a dynamic verification code; Push the dynamic verification code to the user's mobile phone, and the user enters the dynamic verification code for intermittent verification during the access period; If it is less than, the user access record is transmitted to the terminal; Get the current access rights, access the corresponding application list based on the current access rights, and obtain access information; Determine whether the access information meets the access requirements; If the access requirements are not met, apply for access permission upgrade and generate an audit result; If the audit result is successful, the current access level will be upgraded and new access permissions will be generated. The data in the application list will be accessed based on the new access permissions. If the access requirements are met, an access record is generated; If the review is unsuccessful, the privilege escalation request will be rejected.

7. The system login authority management system according to claim 6, characterized in that: The user is authenticated based on the access request instruction. The authentication process is as follows: Obtain access request instructions and call authentication procedures of different levels according to the access request instructions; Authenticate the user's identity through the authentication procedure and obtain authentication information; Compare the authentication information with the system's built-in identity information to obtain the authentication match; Determining whether the authentication matching degree is greater than or equal to a set matching degree threshold; If it is greater than or equal to, the user identity authentication is determined to be successful; If it is less than, it is determined that the user authentication has failed.

8. The system login authority management system according to claim 7, characterized in that: If the identity authentication is successful, a dynamic account and password will be generated, and the system will be logged in based on the dynamic account and password, including: Obtain the initial account database and password database. If the identity authentication is successful, a group of accounts will be randomly called through the initial account database. Match a set of passwords in the password database based on a set of accounts called, and log in to the system using the account and password; During the system login process, obtain the system login interface and calculate the login interface retention time; If the login interface is maintained for longer than the set retention time, the account and password destruction program will be started to destroy the previous set of accounts and passwords; When logging in again, a second identity authentication is required to generate a new account and password to log in to the system.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a system login authority management method program. When the system login authority management method program is executed by a processor, the steps of the system login authority management method according to any one of claims 1 to 5 are implemented.

Images