Login verification method and device, electronic equipment and nonvolatile storage medium
Patent Information
- Application Number
- CN202410867491.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-06-28
- Publication Date
- 2026-11-03
- Estimated Expiration
- 2044-06-28
AI Technical Summary
In existing technologies, the problem of elderly people and people with disabilities being unable to log in due to repeated incorrect password entries caused by unfamiliarity with the operation cannot be effectively solved.
By judging the user's age and health status, it is determined whether the user is a target type user. Multiple verification methods are used to verify the login information, including the number of characters in the account password, the types of incorrect characters, and the comparison of input time and interval time. Login is allowed after the preset conditions are met.
It improved the login success rate for specific user groups, reduced login failures due to multiple incorrect password entries, and enhanced the user experience.
Smart Images

Figure CN118890170B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of network technology and security, and more specifically, to a login authentication method, apparatus, electronic device, and non-volatile storage medium. Background Technology
[0002] With the development of the internet and the widespread use of smartphones, many services are now conducted through mobile apps or websites. To ensure the security of personal information, various app or website operators conduct security verification for users' login behavior.
[0003] Currently, common login verification methods typically involve verifying user-entered information, including username, password, and SMS verification code. Verification is only successful if every character in this information is correct. However, for certain users, such as the elderly and people with disabilities, who are less familiar with smartphones or websites and input information slowly, errors require re-entry. As the number of incorrect entries increases, frustration can arise, further affecting password accuracy. Multiple incorrect passwords can also lead to account lockout, hindering login and significantly impacting the user experience. This inconvenience can cause users to refuse to log in to the app, resulting in lost business.
[0004] There is currently no effective solution to the above problems. Summary of the Invention
[0005] This application provides a login verification method, apparatus, electronic device, and non-volatile storage medium to at least solve the technical problem of being unable to log in due to certain groups of people being unfamiliar with the operation of input devices when logging into clients or websites, resulting in multiple incorrect password entries.
[0006] According to one aspect of the embodiments of this application, a login verification method includes: receiving login information entered by a target object on a login page, wherein the login information includes the target object's username and password; determining whether the login information is consistent with preset information stored in a database, and obtaining a determination result; if the determination result indicates that the login information is inconsistent with the preset information, determining whether the target object is a user of a target type; if the target object is a user of a target type, verifying the login information through multiple verification methods, and obtaining a verification result; if the verification result meets preset conditions, determining that the target object has successfully logged in.
[0007] In some embodiments of this application, determining whether a target object is a user of the target type includes: if the username of the target object matches the username in the preset information, obtaining the registration information of the target object, wherein the registration information includes the age information and health status of the target object; if the age information of the target object is greater than or equal to the preset age and / or the health status of the target object is unhealthy, determining that the target object is a user of the target type; if the age information of the target object is less than the preset age or the health status of the target object is healthy, determining that the target object is a user of a non-target type, and returning to the login page to log in again.
[0008] In some embodiments of this application, login information is verified through multiple verification methods, including: obtaining the number of characters that do not match the user's password and the password in the preset information; if the number of characters is less than or equal to the preset number, completing the first verification method among multiple verification methods; if the number of characters is greater than the preset number, completing the first verification method and adding one error count.
[0009] In some embodiments of this application, login information is verified through multiple verification methods, including: after completing the first verification method, obtaining a first string composed of incorrectly entered characters in the user's password, and obtaining a second string corresponding to the incorrectly entered characters in preset information; comparing the first string and the second string to obtain a comparison result; if the comparison result indicates that there are no capitalization errors or adjacent key errors between the first string and the second string, completing the second verification method among the multiple verification methods; if the comparison result indicates that there are capitalization errors or adjacent key errors between the first string and the second string, completing the second verification method and increasing the error count by one.
[0010] In some embodiments of this application, login information is verified through multiple verification methods, including: after completing the second verification method, determining character groups obtained by combining adjacent characters in the password of the preset information, and obtaining multiple reference character groups; determining the total input time and the input interval time between characters for each reference character group; determining input character groups obtained by combining characters in the user password, and obtaining multiple input character groups; determining the total input time and the input interval time between characters for each input character group; when the reference character group and the input character group are consistent, determining whether the total input time and the input interval time are less than or equal to the total input time and the input interval time of the reference, and obtaining a first judgment result; when the first judgment result indicates that the total input time is less than or equal to the total input time of the reference, and / or the input interval time is less than or equal to the input interval time of the reference, completing the third verification method among the multiple verification methods; when the first judgment result indicates that the total input time is greater than the total input time of the reference, and / or the input interval time is greater than the input interval time of the reference, completing the third verification method and adding one error count.
[0011] In some embodiments of this application, determining that the target object has successfully logged in when the verification result meets preset conditions includes: after completing the third verification method, determining the total number of errors corresponding to the target object; if the total number of errors is less than the preset number of errors, determining that the verification result meets the preset conditions, and determining that the target object has successfully logged in.
[0012] In some embodiments of this application, if the verification result does not meet the preset conditions, it is determined that the target object has failed to log in and is returned to the login page to log in again.
[0013] According to another aspect of the embodiments of this application, a login verification device is also provided, comprising: a receiving module, configured to receive login information entered by a target object on a login page, wherein the login information includes the target object's username and password; a judging module, configured to judge whether the login information is consistent with preset information stored in a database, and obtain a judging result; a verification module, configured to determine whether the target object is a user of a target type when the judging result indicates that the login information is inconsistent with the preset information, and if the target object is a user of a target type, verify the login information through multiple verification methods to obtain a verification result; and a determining module, configured to determine that the target object has successfully logged in when the verification result meets preset conditions.
[0014] According to another aspect of the embodiments of this application, a non-volatile storage medium is also provided, which stores a program, wherein the program controls the device where the non-volatile storage medium is located to execute the above-mentioned login verification method when it runs.
[0015] According to another aspect of the embodiments of this application, an electronic device is also provided, including: a memory and a processor, wherein the processor is configured to run a program stored in the memory, wherein the program executes the above-described login verification method when it runs.
[0016] According to another aspect of the embodiments of this application, a computer program product is also provided, including computer instructions that, when executed by a processor, implement the above-described login verification method.
[0017] In this embodiment, the system receives login information entered by the target user on the login page, including the user's username and password. It then determines whether the login information matches preset information stored in the database, obtaining a judgment result. If the judgment result indicates that the login information does not match the preset information, it determines whether the target user is a user of the target type. If the target user is a user of the target type, it verifies the login information using multiple verification methods, obtaining a verification result. If the verification result meets preset conditions, it determines how the target user can successfully log in. This is achieved by comparing the received login information with the correct information in the database. If they do not match completely, it determines whether the user is a specific user and performs multiple rounds of verification on the entered login information. Successful login is achieved when the verification result is met. This addresses the technical problem of specific user groups being unable to log in due to unfamiliarity with input devices and repeated password entries. Attached Figure Description
[0018] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:
[0019] Figure 1 This is a hardware structure block diagram of a computer terminal for implementing a login verification method according to an embodiment of this application;
[0020] Figure 2 This is a flowchart illustrating a login verification method provided according to an embodiment of this application;
[0021] Figure 3 This is a schematic diagram of a login verification method provided according to an embodiment of this application;
[0022] Figure 4 This is a schematic diagram of a login verification device provided according to an embodiment of this application. Detailed Implementation
[0023] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.
[0024] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.
[0025] To better understand the embodiments of this application, the technical terms involved in the embodiments of this application are explained below:
[0026] Application (APP): This generally refers to third-party application software on a smartphone, which is software that is analyzed, designed, coded, and generated. Its purpose is to improve the shortcomings of the mobile phone system and personalize it, making the phone more functional and providing a better user experience.
[0027] Login password rough judgment: The rough judgment of the password is to judge the number of incorrect characters. When the number of incorrect characters exceeds the allowed range, the number of login failures is accumulated and then an approximate judgment is made. When the number of incorrect characters is within the allowed range, an approximate judgment is made.
[0028] Login password approximation judgment: This involves comparing incorrectly entered characters with correct characters. If the character is a case error or a character represented by an adjacent key, the number of failed login attempts is incremented, and then the login parameters are judged. If the character is not a case error or a character represented by an adjacent key, then the login parameters are judged.
[0029] In related technologies, common verification methods typically involve verifying user-inputted information, including account passwords and SMS verification codes. Verification is only successful when all information is correct. However, some users are unfamiliar with smartphones and website operation, resulting in slow input speeds. Repeatedly entering incorrect information causes significant inconvenience for this group. As the number of incorrect entries increases, it not only affects the accuracy of the password but also degrades the user experience. Therefore, there is a problem where certain groups, unfamiliar with the operation of input devices, repeatedly enter incorrect passwords, leading to login failures and business losses. To address this issue, this application provides a relevant solution, which is detailed below.
[0030] According to an embodiment of this application, a method embodiment for login verification is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.
[0031] The methods and embodiments provided in this application can be executed on mobile terminals, computer terminals, or similar computing devices. Figure 1 A hardware block diagram of a computer terminal for implementing a login authentication method is shown. Figure 1 As shown, the computer terminal 10 may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.
[0032] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10. As involved in the embodiments of this application, the data processing circuits serve as a form of processor control (e.g., selection of a variable resistor termination path connected to an interface).
[0033] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the login verification method in this embodiment. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby implementing the login verification method described above. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.
[0034] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.
[0035] The display may be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 10.
[0036] Under the above operating environment, this application embodiment provides a login verification method. Figure 2 This is a flowchart illustrating a login verification method according to an embodiment of this application, such as... Figure 2 As shown, the method includes the following steps:
[0037] Step S202: Receive login information entered by the target object on the login page, wherein the login information includes the target object's username and password.
[0038] In the technical solution provided in step S202, the login page can be a mobile APP, website, or client, etc., the username of the target object in the login information can be a mobile phone number or ID card number, etc., and the device that receives the login information entered by the target object on the login page can be a server that communicates with the client, etc.
[0039] Step S204: Determine whether the login information is consistent with the preset information stored in the database, and obtain the determination result.
[0040] In the technical solution provided in step S204, there are multiple ways to determine whether the login information and the preset information stored in the database are consistent. For example, the determination can be made in the following ways: if the username of the target object is consistent with the username in the preset information, that is, if there is a matching relationship between the username in the input login information and the username stored in the database, then determine whether the password in the input login information is consistent with the user password of the user whose username is stored in the database. If they are consistent, it means that the password is completely correct and the login is successful. If they are inconsistent, then determine whether the user is a target type of user, that is, a specific user. For example, a specific user is a user whose health status is unhealthy when registering, such as a person with disabilities. A specific user can also be an elderly person who is older than the preset age.
[0041] Step S206: If the judgment result indicates that the login information and the preset information are inconsistent, determine whether the target object is a user of the target type. If the target object is a user of the target type, verify the login information through multiple verification methods to obtain the verification result.
[0042] In the technical solution provided in step S204, there are multiple ways to determine whether the target object is a user of the target type when the judgment result indicates that the login information and the preset information are inconsistent. For example, it can be done in the following ways: if the username of the target object is consistent with the username in the preset information, obtain the registration information of the target object, wherein the registration information includes the age information and health status of the target object; if the age information of the target object is greater than or equal to the preset age and / or the health status of the target object is unhealthy, for example, the preset age can be 55 years old, determine that the target object is a user of the target type; if the age information of the target object is less than the preset age or the health status of the target object is healthy, determine that the target object is a user of a non-target type, and return to the login page to log in again.
[0043] The following is a specific implementation: The input login information is searched in a database, which stores the registration information of all users. The search method can be to match the input login information with the database to obtain the corresponding registration information of the user stored in the database. The registration information includes, but is not limited to, the target's age information and health status. For example, the age information can be obtained by directly viewing the age field in the registration information or by viewing the age field in the ID card number. The target's health status can be selected through radio buttons or drop-down menus, such as providing two options, "healthy" and "unhealthy," for the user to choose from, and the user must and can only choose one of them. If the target's age information is greater than or equal to a preset age and / or the target's health status is "unhealthy," the target is determined to be a user of the target type, i.e., a specific user. If the target's age information is less than a preset age or the target's health status is "healthy," the target is determined to be a user of a non-target type, and the user is returned to the login page to log in again.
[0044] The following is an optional way to determine whether a user is a target type user: Search the entered login information in the database. The database stores the registration information of all users. The search method can be to match the entered login information in the database to obtain the corresponding historical login information of the user stored in the database. The historical login information is the user's login account, password and login time saved when the login was successful in the past. The corresponding registration information can be found through the historical login information, so as to determine whether the user is a specific user.
[0045] In the technical solution provided in step S204, since login information is highly private and secure data, multiple factors need to be considered in the process of verifying login information. For example, multiple verification methods can be used to verify login information for users to log in. For example, login information can be verified from different aspects using three different verification methods.
[0046] The first verification method in the above technical solution can be a coarse password judgment method, used to determine whether the number of characters in the login information meets the requirements, and to obtain the number of characters that do not match the password in the user's password and the password in the preset information; if the number of characters is less than or equal to the preset number, the first verification method among multiple verification methods is completed; if the number of characters is greater than the preset number, the first verification method is completed, and one more error count is added. For example, the number of characters in the login password can be set to 18 characters or more, and it includes uppercase and lowercase letters and English letters. The preset number can be 5.
[0047] The second verification method in the above technical solution can be an approximate judgment method, used to determine the type of incorrect characters in the login password in the login information. After completing the first verification method, the first string composed of the incorrect characters in the user's password, i.e., the password manually entered by the user, and the second string corresponding to the incorrect characters in the preset information, i.e., the correct password stored in the database, are obtained; the first string and the second string are compared to obtain a comparison result; if the comparison result indicates that there are no capitalization errors or adjacent key errors in the first string and the second string, the second verification method among multiple verification methods is completed; if the comparison result indicates that there are capitalization errors or adjacent key errors in the first string and the second string, the second verification method is completed, and the error count is increased by one.
[0048] The following is a specific example:
[0049] For example, if a user's correct password stored in the database is 1234Aa, but the user enters 1234AA when logging in, it is a case error. If the user enters 1234As when logging in, it is an adjacent key error.
[0050] The third verification method in the above technical solution can be a parameter judgment, used to judge the specific content of the input characters in the login information for verification. After completing the second verification method, the character groups obtained by the combination of adjacent characters in the password in the preset information are determined, resulting in multiple reference character groups; the total input time and the input interval time between characters corresponding to each reference character group are determined; the input character groups obtained by the combination of characters in the user password are determined, resulting in multiple input character groups; the total input time and the input interval time between characters corresponding to the input character groups are determined; if the reference character groups and input character groups are consistent, it is judged whether the total input time and the input interval time are less than or equal to the total input time and the input interval time of the reference characters, resulting in a first judgment result; if the first judgment result indicates that the total input time is less than or equal to the total input time of the reference characters, and / or the input interval time is less than or equal to the input interval time of the reference characters, the third verification method among multiple verification methods is completed; if the first judgment result indicates that the total input time is greater than the total input time of the reference characters, and / or the input interval time is greater than the input interval time of the reference characters, the third verification method is completed, and one error count is added.
[0051] The following is a specific example:
[0052] For example, if a specific user's correct password stored in the database is 1234Aa, then combining adjacent characters creates multiple reference character sets, i.e., combining 1234Aa into {12, 23, 34, 4A, Aa}. {12, 23, 34, 4A, Aa} is the reference character set. The total input time is the time taken to input this password set. The input interval between characters is the time interval between each input character and its adjacent characters. Determining the input character sets from the character combinations in the user's password results in multiple input character sets, which the user enters as their password when logging in. Given 1235Ca, multiple input character groups can be represented as: {12, 13, 14, 15, 1C, 1a, 23, 24, 25, 2C, 2a, 35, 3C, 3a, 5C, 5a, Ca}. Select the input character group that is the same as the above-mentioned reference character group, and determine whether the total input time and the input interval time are less than or equal to the reference total input time and the reference input interval time to obtain the first judgment result. If the first judgment result indicates that the total input time is less than or equal to the reference total input time, and / or the input interval time is less than or equal to the reference input interval time, complete the third verification method among multiple verification methods.
[0053] Step S208: If the verification result meets the preset conditions, the target object is confirmed to have successfully logged in.
[0054] In the technical solution provided in step S208, after completing the third verification method, the total number of errors corresponding to the target object is determined, which is the sum of the number of errors in each of the above steps; if the total number of errors is less than the preset number of errors, the verification result is determined to meet the preset conditions, and the target object is determined to have logged in successfully. For example, the preset number of errors can be 2.
[0055] Figure 3 This is a schematic diagram of a login verification method provided according to an embodiment of this application, such as... Figure 3 As shown, it includes: a login module, a verification module, and a failure count determination module;
[0056] Initially, the user enters login information through the login module. The system then checks if this information matches the login information stored in the database. If they match, the password matches and login is successful. If they don't match (or the passwords don't match), the system proceeds to the verification module. This module includes a specific user determination module, a coarse password judgment module, an approximate judgment module, and a parameter comparison module. The execution order of these modules is fixed; the next module can only be executed after the previous one has been completed. If a module passes the judgment, the system continues to the next module. If a module fails, the failure count is incremented by 1. The specific user determination module determines whether the user belongs to the target user type. The coarse password judgment module checks if the number of characters in the login information meets the requirements. The approximate judgment module identifies the type of incorrect characters in the login information. The parameter comparison module verifies the specific content of the input characters in the login information. If the total number of errors is less than the preset number of errors, the failure count determination module determines that the verification result meets the preset conditions, and the target user has successfully logged in.
[0057] The specific execution method of the aforementioned user determination module is as follows: if the username of the target object matches the username in the preset information, obtain the registration information of the target object, which includes the target object's age information and health status; if the target object's age information is greater than or equal to the preset age and / or the target object's health status is unhealthy, determine that the target object is a user of the target type; if the target object's age information is less than the preset age or the target object's health status is healthy, determine that the target object is a user of a non-target type and return to the login page to log in again; the specific execution method of the password rough judgment module is as follows: obtain the number of characters that do not match the password in the preset information; if the number of characters is less than or equal to the preset number, complete the first verification method among multiple verification methods; if the number of characters is greater than the preset number, complete the first verification method and increase the error count by one; the specific execution method of the approximate judgment module is as follows: after completing the first verification method, obtain the first string composed of the characters entered incorrectly in the user's password, and obtain the second string corresponding to the characters entered incorrectly in the preset information; compare the first string and the second string to obtain the comparison result; if the comparison result indicates that the first string and the second string do not have capitalization errors or similarity, then... If an adjacent key press is incorrect, complete the second verification method; if the comparison result indicates a case error or an adjacent key press error between the first and second strings, complete the second verification method and increment the error count; the specific execution method of the parameter comparison module is as follows: after completing the second verification method, determine the character groups obtained by combining adjacent characters in the password in the preset information, and obtain multiple comparison character groups; determine the total input time and the input interval time between characters corresponding to each comparison character group; determine the input character groups obtained by combining characters in the user password, and obtain multiple input character groups; determine the password corresponding to each input character group. The system calculates the total input time and the input interval between characters. If the reference character set and the input character set are the same, it determines whether the total input time and the input interval are less than or equal to the reference total input time and the reference input interval, obtaining the first judgment result. If the first judgment result indicates that the total input time is less than or equal to the reference total input time, and / or the input interval is less than or equal to the reference input interval, the third verification method is completed. If the first judgment result indicates that the total input time is greater than the reference total input time, and / or the input interval is greater than the reference input interval, the second verification method is completed, and one error count is added.
[0058] Figure 4 This is a schematic diagram of a login verification device according to an embodiment of this application, such as... Figure 4 As shown, it includes: a receiving module 40, a judging module 42, a verification module 44, and a determining module 46.
[0059] The receiving module 40 is used to receive the login information entered by the target object on the login page, wherein the login information includes the target object's username and password.
[0060] The judgment module 42 is used to determine whether the login information is consistent with the preset information stored in the database, and obtain the judgment result.
[0061] The verification module 44 is used to determine whether the target object is a user of the target type when the judgment result indicates that the login information and the preset information are inconsistent. If the target object is a user of the target type, the login information is verified through multiple verification methods to obtain the verification result.
[0062] The determination module 46 is used to determine that the target object has successfully logged in if the verification result meets the preset conditions.
[0063] It should be noted that the modules in the above login verification method can be program modules (e.g., a set of program instructions to implement a specific function) or hardware modules. For the latter, they can be represented in the following forms, but are not limited to these: each of the above modules is represented by a processor, or the functions of each of the above modules are implemented by a processor.
[0064] in addition, Figure 4 The login verification device shown is used to perform Figure 2 The login verification method shown is therefore Figure 2 The relevant explanations in the document also apply to this login verification device, and will not be repeated here.
[0065] This application also provides a non-volatile storage medium, which includes a stored program. During program execution, the program controls the device where the non-volatile storage medium is located to execute the aforementioned login verification method. For example, it receives login information entered by a target user on a login page, where the login information includes the target user's username and password; it determines whether the login information matches preset information stored in a database, obtaining a determination result; if the determination result indicates that the login information and the preset information are inconsistent, it determines whether the target user is a user of the target type; if the target user is a user of the target type, it verifies the login information through multiple verification methods, obtaining a verification result; if the verification result meets preset conditions, it determines that the target user has successfully logged in.
[0066] This application also provides an electronic device, which includes a processor for running a program, wherein the login verification method described above is executed during program execution. For example, the device receives login information entered by a target user on a login page, wherein the login information includes the target user's username and password; it determines whether the login information matches preset information stored in a database, obtaining a determination result; if the determination result indicates that the login information and the preset information are inconsistent, it determines whether the target user is a user of the target type; if the target user is a user of the target type, it verifies the login information through multiple verification methods, obtaining a verification result; if the verification result meets preset conditions, it determines that the target user has successfully logged in.
[0067] According to another aspect of the embodiments of this application, a computer program product is also provided, including a computer program that, when executed by a processor, implements the above-described login verification method. For example, it receives login information entered by a target object on a login page, wherein the login information includes the target object's username and password; determines whether the login information is consistent with preset information stored in a database, and obtains a determination result; if the determination result indicates that the login information and the preset information are inconsistent, it determines whether the target object is a user of a target type; if the target object is a user of a target type, it verifies the login information through multiple verification methods, and obtains a verification result; if the verification result meets preset conditions, it determines that the target object has successfully logged in.
[0068] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.
[0069] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For instance, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.
[0070] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.
[0071] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.
[0072] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to related technologies, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.
[0073] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.
Claims
1. A login verification method, characterized in that, include: Receive login information entered by the target object on the login page, wherein the login information includes the target object's username and password; Determine whether the login information matches the preset information stored in the database, and obtain the determination result; If the judgment result indicates that the login information and the preset information are inconsistent, determine whether the target object is a user of the target type. If the target object is a user of the target type, verify the login information through multiple verification methods to obtain a verification result. If the verification result meets the preset conditions, the target object is determined to have successfully logged in; If the verification result meets preset conditions, it is determined that the target object has successfully logged in, including: After completing the third verification method, determine the total number of errors corresponding to the target object; If the total number of errors is less than the preset number of errors, the verification result is determined to meet the preset condition, and the target object is determined to have successfully logged in. The login information is verified through multiple verification methods, including: Obtain the number of characters that do not match the user password and the password in the preset information; If the number of characters is less than or equal to a preset number, the first verification method among the multiple verification methods is completed; If the number of characters exceeds the preset number, complete the first verification method and increase the error count by one. After completing the first verification method, obtain the first string composed of the characters entered incorrectly in the user's password, and obtain the second string corresponding to the characters entered incorrectly in the preset information; Compare the first string and the second string to obtain the comparison result; If the comparison result indicates that there are no capitalization errors or adjacent key errors between the first string and the second string, the second verification method among the multiple verification methods is completed. If the comparison result indicates that there is a case error or an adjacent key error between the first string and the second string, the second verification method is completed, and the error count is increased by one. After completing the second verification method, determine the character groups obtained by combining adjacent characters in the password in the preset information, and obtain multiple comparison character groups; Determine the total input time for each pair of characters and the input interval between characters for each pair of characters. Determine the input character groups obtained from the character combinations in the user password to obtain multiple input character groups; Determine the total input time and the input interval time between characters for each input character group; If the reference character group and the input character group are the same, determine whether the total input duration and the input interval duration are less than or equal to the total reference input duration and the reference input interval duration, and obtain the first determination result; If the first judgment result indicates that the total input duration is less than or equal to the total input duration of the control input, and / or the input interval duration is less than or equal to the input interval duration of the control input, the third verification method among the multiple verification methods is completed; If the first judgment result indicates that the total input duration is greater than the total input duration of the control input, and / or the input interval duration is greater than the input interval duration of the control input, the third verification method is completed, and one error count is added.
2. The method according to claim 1, characterized in that, Determining whether the target object is a user of the target type includes: If the username of the target object matches the username in the preset information, obtain the registration information of the target object, wherein the registration information includes the age information and health status of the target object; If the target object's age is greater than or equal to a preset age and / or the target object's health status is unhealthy, the target object is determined to be a user of the target type. If the target's age is less than the preset age or the target's health status is healthy, the target is determined to be a non-target user, and the user is returned to the login page to log in again.
3. The method according to claim 1, characterized in that, The method further includes: If the verification result does not meet the preset conditions, the target object is determined to have failed to log in and is returned to the login page to log in again.
4. A login verification device, characterized in that, include: A receiving module is used to receive login information entered by the target object on the login page, wherein the login information includes the target object's username and password; The judgment module is used to determine whether the login information is consistent with the preset information stored in the database, and to obtain the judgment result; The verification module is used to determine whether the target object is a user of the target type when the judgment result indicates that the login information and the preset information are inconsistent. If the target object is a user of the target type, the module verifies the login information through multiple verification methods to obtain a verification result. Verifying the login information through multiple verification methods includes: obtaining the number of characters in the user password that do not match the password in the preset information; if the number of characters is less than or equal to the preset number, performing the first verification method; if the number of characters is greater than the preset number, performing the first verification method and incrementing the error count; after performing the first verification method, obtaining a first string composed of the incorrectly entered characters in the user password and a second string corresponding to the incorrectly entered characters in the preset information; comparing the first string and the second string to obtain a comparison result; if the comparison result indicates that there are no capitalization errors or adjacent key errors between the first string and the second string, performing the second verification method; if the comparison result indicates that there are capitalization errors or adjacent key errors between the first string and the second string... In the event of an adjacent key press error, the second verification method is completed, and the error count is increased by one. After completing the second verification method, the character groups obtained by combining adjacent characters in the password in the preset information are determined, resulting in multiple reference character groups. The total input time and the input interval time between characters for each reference character group are determined. The input character groups obtained by combining characters in the user password are determined, resulting in multiple input character groups. The total input time and the input interval time between characters for each input character group are determined. If the reference character group and the input character group are consistent, the input is judged. The first judgment result is obtained by determining whether the total input duration and the input interval duration are less than or equal to the total input duration and the input interval duration of the control input. If the first judgment result indicates that the total input duration is less than or equal to the total input duration of the control input, and / or the input interval duration is less than or equal to the input interval duration of the control input, the third verification method among the multiple verification methods is completed. If the first judgment result indicates that the total input duration is greater than the total input duration of the control input, and / or the input interval duration is greater than the input interval duration of the control input, the third verification method is completed, and one error count is added. After completing the third verification method, determine the total number of errors corresponding to the target object; if the total number of errors is less than the preset number of errors, determine that the verification result meets the preset conditions, and determine that the target object has successfully logged in; The determination module is used to determine that the target object has successfully logged in if the verification result meets preset conditions.
5. A non-volatile storage medium, characterized in that, The non-volatile storage medium stores a program, wherein when the program is executed, it controls the device where the non-volatile storage medium is located to execute the login verification method according to any one of claims 1 to 3.
6. An electronic device, characterized in that, include: A memory and a processor, the processor being configured to run a program stored in the memory, wherein the program, when running, executes the login verification method according to any one of claims 1 to 3.
7. A computer program product comprising computer instructions, characterized in that, When the computer instructions are executed by the processor, they implement the login verification method according to any one of claims 1 to 3.
Citation Information
Patent Citations
Login security verification method and system
CN113779556A
