Information system terminal login security verification method and information system

Abstract

The invention relates to the field of software security, in particular to an interactive system terminal login security verification method, an interactive system and an interactive system. The method comprises the following steps that a server generates a corresponding activation code for each workstation and sends the activation code to an administrator of the corresponding workstation, a terminal device generates a device serial number and sends a login security verification request to the server, and the content of the login security verification request comprises hardware information, the device serial number, position information and the activation code; and the server verifies the login security verification request when receiving the login security verification request sent by the terminal device. And the user is effectively prevented from illegally copying and abusing software on the terminal equipment to carry out illegal login.

Description

Technical Field

[0001] The present invention relates to the field of software security, and in particular to an interactive system terminal login security verification method, an interactive system, and an interactive system. Background Art

[0002] With the rapid development of informatization, various information systems and terminal software are increasing day by day. There are deficiencies in the authorization verification of various terminal software. The terminal software is not bound to the terminal device and its workstation. Users cannot conduct statistical analysis on the data submitted by the terminal devices in each workstation and the operation status of the terminal software. It is also impossible to ensure that the terminal software is not used by other illegal users. In order to avoid the illegal copying and abuse of the application functions of the terminal software without authorization as much as possible, thereby infringing the legitimate rights and interests of the software licensor, there is an urgent need for a method for authorization management of the software running on the terminal device in this scenario. Summary of the invention

[0003] In view of the above problems, the present invention proposes a technical solution:

[0004] The present invention provides a method for terminal login security verification of an information system, wherein the information system comprises a terminal device and a server, wherein the terminal device is allowed to log in to the server only when the terminal device is located at a designated workstation, and the method comprises the following steps:

[0005] S1: The server generates a corresponding activation code for each workstation and sends the activation code to the administrator of the corresponding workstation.

[0006] When each activation code is only allowed to authorize one terminal device, the number of activation codes corresponding to a workstation is equal to the number of terminal devices allowed to log in to the workstation;

[0007] When each activation code allows multiple terminal devices to be authorized, one workstation corresponds to one activation code, and the server records the maximum number of terminal devices that the activation code allows to be authorized;

[0008] S2: The terminal device generates a device serial number using a preset algorithm based on its own hardware information;

[0009] The terminal device generates location information according to the location;

[0010] The terminal device sends a login security verification request to the server. The content of the login security verification request includes hardware information, device serial number, location information, and activation code;

[0011] S3: When the server receives a login security verification request from a terminal device, it verifies whether the hardware information matches the device serial number through a preset algorithm. If they do not match, the verification fails. If they match, the verification continues.

[0012] Verify whether the workstation corresponding to the activation code matches the location information. If they do not match, verification fails. If they match, verification continues.

[0013] When each activation code is only allowed to authorize one terminal device, check whether the current activation code has been authorized for use by other terminal devices. If so, the verification fails. If not, the verification succeeds and the corresponding relationship between the current activation code and the authorized terminal device is recorded;

[0014] When each activation code allows authorization of multiple terminal devices, check whether the number of terminal devices authorized by the current activation code has reached the maximum number of terminal devices allowed to be authorized by the activation code. If so, the verification fails. If not, the verification succeeds and the number of terminal devices authorized by the current activation code is updated.

[0015] Preferably, the activation code is sent to the administrator of the corresponding workstation by email.

[0016] Preferably, the activation code is generated according to the location information of the corresponding workstation.

[0017] Preferably, the location information of the workstation includes the latitude and longitude of the workstation.

[0018] Preferably, the hardware information includes a CPU serial number or a disk serial number.

[0019] The present invention also provides an information system, including a terminal device and a server. The terminal device is allowed to log in to the server only when the terminal device is located at a designated workstation. The system is characterized in that the method described in any one of claims 1 to 6 is used to perform login security verification between the terminal device and the server.

[0020] Beneficial effects:

[0021] The technical solution proposed by the present invention uses a multiple verification method to effectively prevent users from illegally copying and abusing the software on the terminal device for illegal login. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 A schematic diagram of a use scenario of a terminal device in an embodiment of the present invention; DETAILED DESCRIPTION

[0023] In order to make the purpose, features and advantages of the present invention more obvious and easy to understand, the technical solutions in the embodiments of the present invention are described clearly and completely below. Obviously, the embodiments described below are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] like Figure 1 As shown, a method for secure verification of terminal login in an information system is provided. The information system includes a terminal device and a server. The terminal device is allowed to log in to the server only when the terminal device is located at a designated workstation. The method includes the following steps:

[0025] S1: The server generates a corresponding activation code for each workstation and sends the activation code to the administrator of the corresponding workstation. In this embodiment, the sending method is email. The activation code is generated according to the location information of the corresponding workstation, and the location information of the workstation includes the latitude and longitude of the workstation.

[0026] When each activation code is only allowed to authorize one terminal device, the number of activation codes corresponding to a workstation is equal to the number of terminal devices allowed to log in to the workstation;

[0027] When each activation code allows multiple terminal devices to be authorized, one workstation corresponds to one activation code, and the server records the maximum number of terminal devices that the activation code allows to be authorized;

[0028] S2: The terminal device generates a device serial number using a preset algorithm based on its own hardware information;

[0029] The terminal device generates location information according to the location;

[0030] The terminal device sends a login security verification request to the server. The content of the login security verification request includes hardware information, device serial number, location information, and activation code;

[0031] In this embodiment, the hardware information includes a CPU serial number or a disk serial number;

[0032] S3: When the server receives a login security verification request from a terminal device, it verifies whether the hardware information matches the device serial number through a preset algorithm. If they do not match, the verification fails. If they match, the verification continues.

[0033] Verify whether the workstation corresponding to the activation code matches the location information. If they do not match, verification fails. If they match, verification continues.

[0034] When each activation code is only allowed to authorize one terminal device, check whether the current activation code has been authorized for use by other terminal devices. If so, the verification fails. If not, the verification succeeds and the corresponding relationship between the current activation code and the authorized terminal device is recorded;

[0035] When each activation code allows authorization of multiple terminal devices, check whether the number of terminal devices authorized by the current activation code has reached the maximum number of terminal devices allowed to be authorized by the activation code. If so, the verification fails. If not, the verification succeeds and the number of terminal devices authorized by the current activation code is updated.

[0036] The workstation described in the present invention is a location such as Figure 1 As shown, the terminal device is only allowed to perform secure login verification with the server at the designated workstation.

[0037] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for verifying terminal login security in an information system, wherein the information system comprises a terminal device and a server, wherein the terminal device is allowed to log in to the server only when the terminal device is located at a designated workstation, characterized in that: The method comprises the following steps: S1: The server generates a corresponding activation code for each workstation and sends the activation code to the administrator of the corresponding workstation. When each activation code is only allowed to authorize one terminal device, the number of activation codes corresponding to a workstation is equal to the number of terminal devices allowed to log in to the workstation; When each activation code allows multiple terminal devices to be authorized, one workstation corresponds to one activation code, and the server records the maximum number of terminal devices that the activation code allows to be authorized; S2: The terminal device generates a device serial number using a preset algorithm based on its own hardware information; The terminal device generates location information according to the location; The terminal device sends a login security verification request to the server. The content of the login security verification request includes hardware information, device serial number, location information, and activation code; S3: When the server receives a login security verification request from a terminal device, it verifies whether the hardware information matches the device serial number through a preset algorithm. If they do not match, the verification fails. If they match, the verification continues. Verify whether the workstation corresponding to the activation code matches the location information. If they do not match, verification fails. If they match, verification continues. When each activation code is only allowed to authorize one terminal device, check whether the current activation code has been authorized for use by other terminal devices. If so, the verification fails. If not, the verification succeeds and the corresponding relationship between the current activation code and the authorized terminal device is recorded; When each activation code allows authorization of multiple terminal devices, check whether the number of terminal devices authorized by the current activation code has reached the maximum number of terminal devices allowed to be authorized by the activation code. If so, the verification fails. If not, the verification succeeds and the number of terminal devices authorized by the current activation code is updated.

2. According to claim 1, a method for security verification of information system terminal login, characterized in that: The activation code is sent to the administrator of the corresponding workstation by email.

3. According to claim 1, a method for security verification of information system terminal login, characterized in that: The activation code is generated based on the location information of the corresponding workstation.

4. The information system terminal login security verification method according to claim 3 is characterized in that: The location information of the workstation includes the latitude and longitude of the workstation.

5. The information system terminal login security verification method according to claim 1, characterized in that: The hardware information includes the CPU serial number or the disk serial number.

6. An information system, comprising a terminal device and a server, wherein the terminal device is allowed to log in to the server only when the terminal device is located at a designated workstation, characterized in that: Use the method described in any one of claims 1 to 6 to perform login security verification between the terminal device and the server.

Images