User login device and method, and computer readable storage medium

Abstract

The invention provides a user login device which comprises a storage module, a receiving module, a judgment module and a processing module, the storage module at least stores a unique machine code, an emergency password and a USB-Key serial number, when the receiving module receives the emergency password and the USB-Key serial number and the judgment module verifies the emergency password and the USB-Key serial number, a first signal is output, and a second signal is output; the method comprises the following steps: inputting a unique machine code to output the unique machine code, obtaining a temporary login password according to the unique machine code to log in a system, reporting loss of a lost hardware Key, and setting a login mode as lock screen password login. After the hardware Key for login is lost, the ID of the hardware Key is added into the blacklist and the login mode of the device is changed by adopting the temporary login password generated by the unique machine code, so that when the hardware Key is lost, the system can be ensured to be still subjected to confidentiality protection. And meanwhile, the hardware Key after loss reporting cannot be used again, so that loss reporting in a real sense is realized.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a user login device, method and computer-readable storage medium. Background Art

[0002] The main function of USB-KEY is to form a dual-factor unlock screen with the lock screen password of the Windows system. Only when the USB-KEY and the lock screen password are correct can you enter the system, otherwise the unlocking fails and the user cannot enter the system desktop normally. The stand-alone USB-KEY refers to a USB-KEY that does not need to be connected to the Internet. It consists of two parts: hardware key and management software. The hardware key has a built-in single-chip microcomputer or smart card chip to store the user's private key and digital certificate. The management software mainly uses the private key or digital certificate to unlock the lock screen interface of the Windows system. The stand-alone USB-KEY is mainly used in scenarios with strict confidentiality requirements. .

[0003] The appearance of the hardware KEY is similar to that of an ordinary USB flash drive and is easy to be lost. If the user loses the hardware key, he or she will not be able to log in to the computer, which will seriously affect normal work.

[0004] In the related art, when a stand-alone USB-Key is lost, the method used is to suggest that the user enter the safe mode of the Windows system, uninstall the corresponding management software, and then log in to the system without using the hardware key after restarting. This solution does not actually report the loss of the hardware key, and entering the safe mode of the Windows system is itself a very dangerous thing, because the safe mode can uninstall any software, and the entire system will not be protected by confidentiality or control software.

[0005] In view of this, this application is filed. Summary of the invention

[0006] The present application provides a user login device, which, after the hardware key used for login is lost, uses a temporary login password generated by a unique machine code to add the ID of the hardware key to a blacklist and change the login method of the device, so that when the hardware key is lost, the system can still be protected from confidentiality.

[0007] The present application provides a user login device, comprising:

[0008] A storage module, which is used to store at least a unique machine code, an emergency password and a USB-Key serial number of a hardware key used for booting and logging in, wherein the unique machine code is determined according to the USB-Key serial number and device information;

[0009] A receiving module, used for receiving a login request, wherein the receiving module is further configured to receive an emergency password and a USB-Key serial number of a lost hardware Key;

[0010] A judgment module, configured to output a first signal if the emergency password and USB-Key serial number received by the receiving module are consistent with the data stored in the storage module;

[0011] A processing module, configured to receive the first signal and output a unique machine code;

[0012] The processing module is further configured to determine that the identity authentication is passed and allow the login request if the temporary login password received by the receiving module is consistent with the temporary login password generated in the server;

[0013] The processing module is further used to add the ID of the lost hardware Key to the blacklist;

[0014] The processing module is also used to set the login mode to a lock screen password according to the signal received by the receiving module. After the hardware key is lost, the lock screen password can be used to unlock the device and log in to prevent the user from logging in to the device in an unsecured state.

[0015] In some embodiments, when the login mode is set to lock screen password login, restart the user login device;

[0016] A receiving module, which is used to receive a lock screen password;

[0017] The judgment module is also used to judge whether the storage module stores the lock screen password;

[0018] The processing module is further used to determine that the identity authentication of the logged-in user is passed if the lock screen password is stored in the storage module, and allow the login request of the logged-in user;

[0019] The processing module is also used to determine that the identity authentication of the logged-in user fails and reject the login request of the logged-in user if the lock screen password is not stored in the storage module.

[0020] In some embodiments, a temporary login password is randomly generated based on a unique machine code for temporary login.

[0021] In some embodiments, when logging in using the hardware key for the first time, the user login device further includes:

[0022] An identification module, which is used to identify the hardware key when it is inserted for the first time, and output an electrical signal prompting to set an emergency password;

[0023] The processing module is also used to generate a unique machine code according to a certain rule based on the hard disk serial number, MAC address and hardware key of the user login device, and store the unique machine code in the storage module.

[0024] In some embodiments, the judgment module is further used to display a re-entry message if the emergency password and USB-Key serial number received by the receiving module are inconsistent with the data stored in the storage module.

[0025] The embodiment of the present application also proposes a user login method, which is applied after the hardware key is lost;

[0026] Receive the emergency password and the USB-Key serial number of the lost hardware key, and if the emergency password is consistent with the corresponding storage data in the storage module, output a unique machine code;

[0027] Receive a temporary login password, and when the temporary login password is consistent with the temporary login password generated according to the unique machine code, determine that the identity authentication is passed at this time, and allow the login request;

[0028] Add the ID of the lost hardware key to the blacklist;

[0029] The login mode is set to lock screen password login according to the electrical signal received by the receiving module.

[0030] In some embodiments, after the login mode is set to lock screen password login, restart the user login device;

[0031] Receive the lock screen password, and determine whether the stored password stores the lock screen password;

[0032] If the lock screen password is stored in the storage module, it is determined that the identity authentication of the logged-in user is passed, and the login request of the logged-in user is allowed;

[0033] If the lock screen password is not stored in the storage module, it is determined that the identity authentication of the logged-in user fails, and the login request of the logged-in user is rejected.

[0034] In some embodiments, when the hardware key is inserted for the first time, the hardware key is recognized and an electrical signal prompting the user to set an emergency password is output;

[0035] Generate a unique machine code according to certain rules based on the computer device's hard disk serial number, MAC address and hardware key ID;

[0036] And store the unique machine code and emergency password in the storage module.

[0037] In some embodiments, when the lost hardware key is found, the hardware key is identified and the ID of the hardware key is detected to be in the blacklist, and an electrical signal is outputted to request the input of the lock screen password;

[0038] Receive the lock screen password and determine whether it is correct. If correct, remove the ID from the blacklist.

[0039] The embodiment of the present application further proposes a computer-readable storage medium on which a computer program is stored, wherein the computer program implements the above-mentioned method steps when executed by a processor. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0041] Figure 1 is a schematic diagram of the structure of a user login device provided according to an exemplary embodiment;

[0042] Figure 2 A hardware configuration block diagram of a user login device provided according to an exemplary embodiment;

[0043] Figure 3 The following is a login process after the hardware key is lost according to an exemplary embodiment;

[0044] Figure 4 A control logic for logging in using a lock screen password according to an exemplary embodiment;

[0045] Figure 5 The initialization process of the hardware Key according to the exemplary embodiment;

[0046] Figure 6 Control logic for re-accessing a user login device for a hardware key that has been reported lost according to an exemplary embodiment;

[0047] Figure 7 Another control logic for re-accessing a user login device to a hardware Key that has been reported lost according to an exemplary embodiment;

[0048] Figure 8 The process of reporting loss of a hardware key according to an exemplary embodiment;

[0049] Fig. 9 is a schematic diagram of a computer device according to an exemplary embodiment;

[0050] In the above figures:

[0051] User login device 1; storage module 11; identification module 12; judgment module 13; processing module 14;

[0052] Receiving module 15; connecting port 2. DETAILED DESCRIPTION

[0053] In order to better understand the above-mentioned technical scheme, the technical scheme of the embodiments of the present application is described in detail below through the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present application and the specific features in the embodiments are detailed descriptions of the technical scheme of the embodiments of the present application, rather than limitations on the technical scheme of the present application. In the absence of conflict, the embodiments of the present application and the technical features in the embodiments may be combined with each other.

[0054] The following will be combined with the attached Figure 1 The implementation of the embodiments of the present application is described in detail.

[0055] The solution provided in the embodiment of the present application can be applied to Figure 1 In the user login device 1 shown, USB-Key management software is installed in the user login device 1, which is mainly responsible for managing and controlling the use of hardware keys to ensure data security and operational compliance.

[0056] The functions of USB-Key management software include user management, device management, key management, etc. Among them, user management includes allowing users to register and authenticate their identities and different access rights for different users.

[0057] Device management includes tracking and recording the usage of hardware keys, activation of hardware keys, and reporting of hardware key loss.

[0058] In some embodiments, the hardware key has a built-in single-chip microcomputer or smart card chip to store the user's private key and digital certificate. The management software mainly uses the private key or digital certificate to unlock the lock screen interface of the Windows system.

[0059] Reference Figure 1 The user login device 1 is provided with a connection port 2. The connection port 2 is used to connect the hardware key. By inserting the hardware key into the connection port 2.

[0060] This application proposes a safe and efficient loss reporting method for the stand-alone USB-Key usage environment. Once the user successfully reports the loss, the hardware Key can no longer unlock the computer. The loss reporting method in this application is simple and has high operating efficiency.

[0061] like Figure 2As shown, the user login device 1 may include a storage module 11. The storage module 11 is used to store at least a unique machine code, an emergency password and a USB-Key serial number of a hardware key used for power-on login.

[0062] In some embodiments, the unique machine code can be determined by the management software according to the USB-Key serial number and device information. The device information includes at least the hard disk serial number, MAC address and hardware Key ID.

[0063] Among them, the l D of the hardware key is the unique identification information of the hardware key. The hardware serial number, MAC address, hardware key ID, unique machine code, USB-Key serial number, and emergency password are stored in the preset mapping table. According to the emergency password, the corresponding unique machine code is obtained.

[0064] In some embodiments, the unique machine code is determined by the server based on the USB-Key serial number and device information.

[0065] The emergency password is the password set by the user when logging in with the hardware key for the first time. After losing the hardware key, the user can log in to the system to obtain the unique machine code stored in a specific folder.

[0066] In some embodiments, a unique machine code is generated according to certain rules based on the hard disk serial number, MAC address and hardware key ID of the computer device.

[0067] In some embodiments, the unique machine code is set as a 32-bit unique machine code.

[0068] In some embodiments, reference Figure 2 The user login device 1 comprises a receiving module 15 for receiving login information. The receiving module 15 is further configured to receive an emergency password and a USB-Key serial number of a lost hardware Key.

[0069] In some embodiments, reference Figure 2 The user login device 1 includes a judgment module 13. The judgment module 13 is used to output a first signal if the emergency password and the USB-Key serial number received by the receiving module 15 are consistent with the data stored in the storage module 11.

[0070] In some embodiments, reference Figure 2 The user login device 1 comprises a processing module 14, which is used to receive the first signal and output a unique machine code.

[0071] In some embodiments, the processing module 14 is further used to determine that the identity authentication is passed and allow the login request if the temporary login password received by the receiving module 15 is consistent with the temporary login password generated in the server.

[0072] In some embodiments, the processing module 14 is further configured to add the ID of the lost hardware Key to a blacklist;

[0073] In some embodiments, the processing module 14 is further used to set the login mode to a lock screen password according to the signal received by the receiving module 15. After the hardware key is lost, the lock screen password can be used to unlock the device and log in to prevent the user from logging into the device 1 in an unsecured state.

[0074] In the above embodiment, the loss reporting operation of the hardware key completely relies on the management software of the USB-Key itself, and does not need to rely on the security mode of the Windows operating system. At the same time, the hardware key cannot be used after the loss is reported, realizing the real loss reporting.

[0075] It should be noted that the storage module 11 of the user login device 1 in this embodiment includes multiple unique identification information, each of which corresponds to a user's hardware key, that is, the user login device 1 in this embodiment can satisfy the login of multiple users. A user's hardware key can also be bound to multiple user login devices 1, that is, the unique identification information of the user's hardware key can be stored in multiple user login devices 1, so as to realize the login of the same user on different user login devices 1.

[0076] The user login device 1 can be run on electronic devices such as mobile phones, tablet computers, laptop computers, ultra-mobile personal computers (UM PCs), netbooks, and personal digital assistants (PDAs).

[0077] In some embodiments, when the login mode is set to lock screen password login, the user login device 1 is restarted.

[0078] In some embodiments, the receiving module 15 is used to receive a lock screen password.

[0079] In some embodiments, the judgment module 13 is also used to judge whether the storage module 11 stores a lock screen password.

[0080] In some embodiments, the processing module 14 is further used to determine that the identity authentication of the logged-in user is passed if a lock screen password is stored in the storage module 11, and to allow the login request of the logged-in user.

[0081] In some embodiments, the processing module 14 is further used to determine that the identity authentication of the logged-in user fails and reject the login request of the logged-in user if the lock screen password is not stored in the storage module 11.

[0082] After the hardware key is lost, by changing the login method from two-factor login to single-factor login, only using the lock screen password for user login, compared to directly using the safe mode to uninstall the corresponding management software, the technical solution in this application can enable the user login device 1 to still have confidentiality measures, thereby improving the security of the use of the user login device 1.

[0083] In some embodiments, a temporary login password is randomly generated based on a unique machine code for temporary login.

[0084] In some embodiments, after obtaining the unique machine code of the current user login device 1, the unique machine code can be informed to the manufacturer's after-sales personnel of the hardware Key, and the management software can be logged in according to the temporary login password provided by the manufacturer's after-sales personnel.

[0085] In some embodiments, when logging in using the hardware key for the first time, the hardware key is initialized.

[0086] Reference Figure 2 The user login device 1 further comprises an identification module 12. The identification module 12 is used to identify the hardware key when the hardware key is inserted for the first time, and output an electrical signal prompting to set an emergency password.

[0087] In some embodiments, the processing module 14 is also used to generate a unique machine code according to a certain rule based on the hard disk serial number, MAC address and hardware key ID of the user login device 1, and store the unique machine code in the storage module 11.

[0088] In some embodiments, the unique machine code is written into a file protected by the management software, and other users do not have the authority to delete or modify it.

[0089] In some embodiments, the judgment module 13 is further configured to display a request for re-entry if the emergency password and USB-Key serial number received by the receiving module 15 are inconsistent with the data stored in the storage module 11 .

[0090] In some embodiments, the identification module 12 can also be used to identify the hardware key when the hardware key that has been reported lost is reinserted into the user login device 1, and pop up an interface for inputting the lock screen password.

[0091] When the user enters the correct lock screen password, the ID will be automatically removed from the blacklist and can be used normally afterwards.

[0092] When the user enters an incorrect lock screen password, continue to enter the lock screen password until the lock screen password is entered correctly.

[0093] In some embodiments, when the lock screen password is entered incorrectly, or when the number of incorrect inputs reaches a certain number, the hardware Key is locked. In some embodiments, an alarm may also be issued.

[0094] In some embodiments, whether the user is an abnormal user or an illegal user is determined based on the number of logins, and then an alarm is issued to the determined abnormal user or illegal user, thereby effectively preventing illegal users from attempting to log into the user login device 1, thereby improving the security of the terminal device.

[0095] In some embodiments, if the hardware key is unplugged before the lock screen password is entered, the hardware key will not be deleted from the blacklist.

[0096] In some embodiments, the user does not have the authority to delete the USB-Key from the blacklist, and it can only be automatically deleted within the management software.

[0097] In some embodiments, when the user loses the hardware key, a new hardware key is obtained and then the initialization operation is performed.

[0098] The embodiment of the present application also proposes a user login method, which is applied when the hardware key is lost.

[0099] In some embodiments, reference Figure 3 , receiving the emergency password and the USB-Key serial number of the lost hardware Key, if the emergency password is consistent with the corresponding storage data in the storage module 11, then outputting a unique machine code (S301).

[0100] Before executing step S301, step S300 is executed, and after opening, the user login device 1 displays a login interface. The login interface includes a report loss button. The report loss button is used to enter the report loss process.

[0101] When the report loss button is detected to be triggered, the interface for entering the emergency password and USB-Key serial number is entered.

[0102] In some embodiments, a temporary login password is received, and when the temporary login password is consistent with the temporary login password generated according to the unique machine code, it is determined that the identity authentication is passed at this time, and the login request is allowed (S302).

[0103] In some embodiments, after logging in using the temporary login password, the ID of the lost hardware Key is added to the blacklist (S303).

[0104] In some embodiments, the login mode is set to lock screen password login according to the electrical signal received by the receiving module 15 (S304).

[0105] In some embodiments, after the login mode is set to lock screen password login, the user login device 1 is restarted (S305).

[0106] Reference Figure 8 , describing a process of reporting a lost hardware key.

[0107] Click the report loss button on the login interface (S801);

[0108] Enter the emergency password and USB-Key serial number (S802);

[0109] Check the 32-bit unique machine code (S803);

[0110] The 32-bit unique machine code is notified to the hardware Key manufacturer's after-sales support via phone or text message (S804);

[0111] Log in to the user login device 1 using the temporary login password returned by the manufacturer (S805);

[0112] After successful login, the ID of the lost hardware key is added to the blacklist (S806);

[0113] The login mode is set to lock screen password login (S807).

[0114] Reference Figure 4 , explaining the control logic of logging in using the lock screen password.

[0115] In some embodiments, a lock screen password is received, and it is determined whether the stored password stores the lock screen password (S401).

[0116] In some embodiments, if a lock screen password is stored in the storage module 11, it is determined that the identity authentication of the logged-in user is passed, and the login request of the logged-in user is allowed (S402).

[0117] In some embodiments, if the lock screen password is not stored in the storage module 11, it is determined that the identity authentication of the logged-in user fails, and the login request of the logged-in user is rejected (S403).

[0118] Reference Figure 5 , describing the initialization process of the hardware Key in the embodiment of the present application.

[0119] In some embodiments, when the hardware key is inserted for the first time, the hardware key is identified ( S501 ).

[0120] In some embodiments, an electrical signal prompting to set an emergency password is output (S502).

[0121] In some embodiments, a unique machine code is generated according to the USB-Key serial number and the device information configuration (S503);

[0122] In some embodiments, the unique machine code and the emergency password are stored in the storage module 11 (S504). The storage module 11 herein may specifically refer to a command protection folder.

[0123] When the unique machine code and the emergency password are stored, it is determined that the initialization is completed at this time.

[0124] Reference Figure 6 , illustrating the control logic of re-accessing the lost hardware Key to the user login device 1 in the embodiment of the present application.

[0125] In some embodiments, when the lost hardware key is found, the hardware key is identified and it is detected that the ID of the hardware key is in the blacklist (S601).

[0126] In some embodiments, an electrical signal requesting input of a lock screen password is output to receive the lock screen password (S602).

[0127] In some embodiments, in step S062, when it is detected that the ID is in the blacklist, the screen is locked immediately and an interface for entering a lock screen password is popped up.

[0128] In some embodiments, a lock screen password is received and determined to be correct (S603). If correct, the ID is removed from the blacklist (S604).

[0129] In some embodiments, if the received lock screen password is incorrect, step S605 is executed to continue inputting the lock screen password, and then step S603 is executed.

[0130] Reference Figure 7 In the embodiment, after executing step S605, the number of times the lock screen password is input can be first determined (S606). If the number of times the lock screen password is input reaches the set number of times, step S607 is executed to lock the hardware key and issue an alarm.

[0131] If the number of times the lock screen password is entered does not reach the set number of times, step S603 is executed.

[0132] In some embodiments, when the user loses the hardware key, a new hardware key is obtained. Figure 5 Initialization control logic in.

[0133] For the specific definition of the user login device 1 through USB-KEY, please refer to the definition of the user login method through USB-KEY above, which will not be repeated here. Each module in the above-mentioned device can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0134] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Fig. 9 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a user login method through a USB-KEY is implemented.

[0135] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the above Figure 3-8 The method steps in .

[0136] The present application also provides a computer-readable storage medium on which a computer program is stored, wherein the computer program is executed by a processor to implement the above Figure 3-8 The method steps in .

[0137] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Sync hlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0138] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0139] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention.

Claims

1. A user login device, characterized in that: include: A storage module, which is used to store at least a unique machine code, an emergency password and a USB-Key serial number of a hardware key used for power-on login, wherein the unique machine code is determined according to the USB-Key serial number and device information; A receiving module, used for receiving a login request; The receiving module is further configured to receive the emergency password and the USB-Key serial number of the lost hardware Key; A judgment module, configured to output a first signal if the emergency password and the USB-Key serial number received by the receiving module are consistent with the data stored in the storage module; A processing module, configured to receive the first signal and output the unique machine code; The judging module is further configured to judge that the identity authentication is passed and allow the login request if the temporary login password received by the receiving module is consistent with the temporary login password generated in the server; The processing module is further used to add the ID of the lost hardware Key to the blacklist; The processing module is also used to set the login mode to lock screen password login according to the signal received by the receiving module.

2. The user login device according to claim 1, characterized in that: When the login mode is set to lock screen password login, restart the user login device; The receiving module is used to receive the lock screen password; The judging module is further configured to judge whether the storage module stores the lock screen password; The processing module is further configured to determine that the identity authentication of the logged-in user is passed and allow the login request of the logged-in user if the lock screen password is stored in the storage module; The processing module is further configured to determine that the identity authentication of the logged-in user fails and reject the login request of the logged-in user if the lock screen password is not stored in the storage module.

3. The user login device according to claim 1, characterized in that: The temporary login password is randomly generated according to the unique machine code for temporary login.

4. The user login device according to claim 1, characterized in that: When logging into the user login device using the hardware Key for the first time; The user login device also includes: An identification module, which is used to identify the hardware key when the hardware key is inserted for the first time, and output an electrical signal prompting to set the emergency password; The processing module is also used to generate the unique machine code according to a certain rule based on the hard disk serial number, MAC address and ID of the hardware Key of the user login device, and store the unique machine code in the storage module.

5. The user login device according to claim 1, characterized in that: The judging module is further configured to display a request to re-enter if the emergency password and the USB-Key serial number received by the receiving module are inconsistent with the data stored in the storage module.

6. A user login method, characterized in that: This user login method is used when the hardware key is lost; Receive the emergency password and the USB-Key serial number of the lost hardware key; and determine whether the emergency password is consistent with the corresponding storage data in the storage module; if consistent, output a unique machine code; Receive a temporary login password, and when the temporary login password is consistent with the temporary login password generated according to the unique machine code, determine that the identity authentication is passed at this time, and allow the login request; Add the ID of the lost hardware key to the blacklist; The login mode is set to lock screen password login according to the electrical signal received by the receiving module.

7. The user login method according to claim 6, characterized in that: After setting the login method to lock screen password login, restart the user login device; Receive a lock screen password, and determine whether the storage module stores the lock screen password; If the lock screen password is stored in the storage module, it is determined that the identity authentication of the logged-in user is passed, and the login request of the logged-in user is allowed; If the lock screen password is not stored in the storage module, it is determined that the identity authentication of the logged-in user fails, and the login request of the logged-in user is rejected.

8. The user login method according to claim 6, characterized in that: When the hardware key is inserted for the first time, the hardware key is recognized and an electrical signal prompting the user to set the emergency password is output; Generate the unique machine code according to certain rules based on the hard disk serial number, MAC address and ID of the hardware key of the computer device; The unique machine code and the emergency password are stored in a storage module.

9. The user login method according to claim 6, characterized in that: When the lost hardware key is found, the hardware key is identified and the ID of the hardware key is detected to be in the blacklist, and an electrical signal is outputted to request input of the lock screen password; Receive the lock screen password and determine whether it is correct. If correct, remove the ID from the blacklist.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method steps described in any one of claims 6 to 9 are implemented.

Images