Login verification method and device, storage medium and electronic equipment

Abstract

The invention discloses a login verification method and device, a storage medium and electronic equipment. The method comprises the steps of obtaining a login verification request which is triggered in a current service client and used for requesting to log in the current service client by using a target user account; sending the login verification request to a reference service client cluster associated with the current service client; receiving a verification response result returned by the reference service client in the reference service client cluster; and determining a current security verification level corresponding to the current service client according to the verification response result, and opening a service function permission corresponding to the current security verification level for the current service client logged in by using the target user account. According to the method and the device, the technical problem of relatively low security caused by adopting a local login verification mode for the mobile terminal in the prior art under the condition that the networking state of the server and the mobile terminal is poor is solved.

Description

Technical Field

[0001] The present application relates to the field of computers, and in particular to a login verification method and device, a storage medium, and an electronic device. Background Art

[0002] In a scheduling system for scheduling various mobile terminals, in order to ensure the legality of the operation of each mobile terminal, each mobile terminal is often required to log in to the installed scheduling client first, and only after completing the user's identity authentication is it allowed to interact with the server to complete the scheduling task.

[0003] For the login verification process of the mobile terminal, if the mobile terminal is not connected to the server in a good state, the commonly used method is to use the account to log in to the local client and then perform local verification to facilitate access to the business data stored in the local mobile terminal. However, in the above method, the local verification is easily tampered with, which makes it difficult to ensure the security of the local verification in the offline state.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] The embodiments of the present application provide a login verification method and device, a storage medium and an electronic device to at least solve the technical problem of low security caused by the existing technology using local login verification for mobile terminals when the server and the mobile terminal are not in a good networking state.

[0006] According to one aspect of an embodiment of the present application, a method for login verification is provided, comprising: obtaining a login verification request triggered in a current business client, wherein the login verification request is used to request to use a target user account to log in to the current business client; sending the login verification request to a reference business client cluster associated with the current business client, wherein a reference business client in the reference business client cluster is located in the same distributed business verification network as the current business client, and verification information for verifying the current business client is recorded in the reference business client;

[0007] Optionally, determining the current security verification level corresponding to the current business client based on the verification response result includes: parsing the verification result obtained by the reference business client from the verification response result; counting the verification results of each of the reference business clients in the reference business client cluster to obtain a current verification pass rate; determining the current security verification level corresponding to the current business client based on the current online rate of the reference business clients in the reference business client cluster and the current verification pass rate.

[0008] Optionally, the above-mentioned determination of the current security verification level corresponding to the above-mentioned current business client based on the current online rate of the above-mentioned reference business client in the above-mentioned reference business client cluster and the above-mentioned current verification pass rate includes: when the above-mentioned current online rate is greater than a first online threshold, and the above-mentioned current verification pass rate is greater than a first pass threshold, determining the above-mentioned current security verification level to be the first security level, wherein the above-mentioned first security level indicates that all business function permissions in the above-mentioned current business client are enabled; when the above-mentioned current online rate is greater than a second online threshold, and the above-mentioned current verification pass rate is greater than a second pass threshold, determining the above-mentioned current security verification level to be the second security level, wherein the above-mentioned second security level indicates that some business function permissions in the above-mentioned current business client are enabled, and the above-mentioned some business function permissions are enabled. The business function permissions include: data read-only permission and sensitive business data processing permission; when the above-mentioned current online rate is greater than the third online threshold, and the above-mentioned current verification pass rate is greater than the third pass threshold, the above-mentioned current security verification level is determined to be the third security level, wherein the above-mentioned third security level indicates to enable some business function permissions in the above-mentioned current business client, and the above-mentioned some business function permissions include: data read-only permission and non-sensitive business data processing permission; wherein the above-mentioned first online threshold is greater than the above-mentioned second online threshold, and the above-mentioned second online threshold is greater than the above-mentioned third online threshold; the above-mentioned first pass threshold is greater than the above-mentioned second pass threshold, and the above-mentioned second pass threshold is greater than the above-mentioned third pass threshold; the permission scope of the above-mentioned sensitive business data processing permission is greater than the permission scope of the above-mentioned non-sensitive business data processing permission.

[0009] Optionally, according to the method of claim 1, it is characterized in that sending the login verification request to the reference business client cluster associated with the current business client includes: in the event that the current business client fails to connect to the server, reading the network access address corresponding to each of the reference business clients in the reference business client cluster from a configuration file in the current business client; and sending the login verification request to the network access address.

[0010] Optionally, sending the login verification request to the network access address includes: obtaining the online status corresponding to each reference business client in the reference business client cluster; when it is determined based on the online status that the online rate corresponding to the reference business client cluster is greater than the verification trigger condition threshold, broadcasting the login verification request to each of the network access addresses through an end-to-end protocol, wherein the login verification request includes the login information of the target user account encrypted with a key.

[0011] Optionally, after enabling the business function permissions corresponding to the current security verification level for the current business client logged in using the target user account, it also includes: receiving an object login authentication request sent by the object reference business client in the reference business client cluster, wherein the object login verification request is used to request the use of the object user account to log in to the object reference business client; parsing the login information of the object user account from the object login authentication request; and verifying the login information of the object user account.

[0012] Optionally, before obtaining the login verification request triggered in the current business client, it also includes: obtaining a login registration request triggered in the current business client; when the current business client is connected to the server, sending the login registration request to the server, wherein the server allocates a current network access address to the current business client, and sends the login information of the current business client to the reference business client located in the same distributed business verification network, wherein the login information of the current business client includes the current network access address; and saving the current network access address received from the server.

[0013] According to another aspect of an embodiment of the present application, a login verification device is also provided, including: a first acquisition unit, used to acquire a login verification request triggered in a current business client, wherein the login verification request is used to request to use a target user account to log in to the current business client; a sending unit, used to send the login verification request to a reference business client cluster associated with the current business client, wherein the reference business client in the reference business client cluster and the current business client are located in the same distributed business verification network, and the reference business client records verification information used to verify the current business client; a receiving unit, used to receive a verification response result returned by the reference business client in the reference business client cluster; a verification processing unit, used to determine a current security verification level corresponding to the current business client based on the verification response result, and enable business function permissions corresponding to the current security verification level for the current business client logged in using the target user account.

[0014] According to another aspect of the embodiments of the present application, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned login verification method when running.

[0015] According to another aspect of an embodiment of the present application, there is also provided an electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the login verification method through the computer program.

[0016] In an embodiment of the present application, a login verification request triggered in the current business client is obtained, wherein the login verification request is used to request to log in the current business client using a target user account. Then, the login verification request is sent to a reference business client cluster associated with the current business client, wherein the reference business client in the reference business client cluster is located in the same distributed business verification network as the current business client, and the reference business client records verification information for verifying the current business client. Next, the verification response result returned by the reference business client in the reference business client cluster is received. Furthermore, the current security verification level corresponding to the current business client is determined according to the verification response result, and the business function permission corresponding to the current security verification level is enabled for the current business client logged in using the target user account. In other words, in an embodiment of the present application, when the network status between the current business client and the login verification server is not good, the user account corresponding to the current business client is cloud-login-verified based on multiple reference business clients in the same distributed business verification network as the current business client. Thereby avoiding the technical problem of low login verification security caused by the current business client performing local login verification based on itself. The technical effect of improving the security of login verification is achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0018] Figure 1 is a flowchart of an optional login verification method according to an embodiment of the present application;

[0019] Figure 2 is a schematic diagram of an optional login verification method according to an embodiment of the present application;

[0020] Figure 3 is a schematic diagram of another optional login verification method according to an embodiment of the present application;

[0021] Figure 4 A schematic diagram of another optional login verification method according to an embodiment of the present application;

[0022] Figure 5 A schematic diagram of another optional login verification method according to an embodiment of the present application;

[0023] Figure 6 is a schematic diagram of the structure of an optional login verification device according to an embodiment of the present application;

[0024] Figure 7 It is a schematic diagram of the structure of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0026] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] Optionally, as an optional implementation, as Figure 1 As shown, the above login verification method includes:

[0028] S102, obtaining a login verification request triggered in the current service client, wherein the login verification request is used to request to use a target user account to log in to the current service client;

[0029] It should be noted that the above login verification method can be, but is not limited to, applied to the scenario of login verification of the user account corresponding to the current business client when the network status between the current business client and the server is not good. For example, in a scheduling system for scheduling various business clients, when the network status between the current business client and the server is not good, the scenario of login verification of the user account corresponding to the current business client is performed.

[0030] Taking the scenario where the login verification method is applied to the login verification of the user account corresponding to the current business client as an example, the current business client here can be but is not limited to being used to indicate the business client that the user account to be verified is to log in. The target user account is the user account to be verified.

[0031] Furthermore, the login verification request may be triggered in the current business client in the following manner, but is not limited to: after the account number, password and verification code of the user account are entered in the current business client, a login control is triggered.

[0032] S104, sending a login verification request to a reference service client cluster associated with the current service client, wherein the reference service client in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service client records verification information for verifying the current service client;

[0033] Optionally, as an optional embodiment, the distributed business verification network here can be, but is not limited to, a decentralized distributed network. Specifically, the distributed business verification network can include, but is not limited to, multiple business clients, wherein each of the multiple business clients stores attribute information corresponding to all business clients in the distributed business verification network (such as name, ID, network address, public key information, etc.).

[0034] Further, the reference service client cluster associated with the current service client here can be, but is not limited to, used to indicate a service client cluster composed of other service clients other than the current service client itself in the distributed service verification network where the current service client is located. The reference service client here can be, but is not limited to, used to indicate a service client in the reference service client cluster.

[0035] For example, Figure 2 As shown, it is assumed that the distributed business verification network includes 5 business clients (i.e., business client A, business client B, business client C, business client D, and business client E). Assuming that business client A detects the triggering operation of the login verification request corresponding to the target user account, business client A is the above-mentioned current business client, business client B, business client C, business client D, and business client E are the above-mentioned reference business clients, and the business client cluster composed of business client B, business client C, business client D, and business client E is the above-mentioned reference business client cluster.

[0036] It should be noted that the above login verification request may carry, but is not limited to, encrypted attribute information of the target user account to be verified (such as user account nickname, user account ID, user account login password, etc.). The above verification information may be, but is limited to, used to indicate the correct attribute information of the target user account pre-stored in the reference service client (such as user account nickname, user account ID, user account login password, whether the user account has an illegal account mark, etc.).

[0037] S106, receiving a verification response result returned by a reference service client in the reference service client cluster;

[0038] Assume that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client. The verification response result here can be, but is not limited to, used to indicate the verification result information obtained after the reference business client verifies the information carried in the login verification request. Specifically, the verification result here is used to indicate whether the target user account has passed the verification of the reference business client.

[0039] S108, determining the current security verification level corresponding to the current business client according to the verification response result, and enabling the business function authority corresponding to the current security verification level for the current business client logged in using the target user account.

[0040] It should be noted that the business client can, but is not limited to, correspond to multiple security verification levels, where different security verification levels correspond to different business function permissions.

[0041] The above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client when the network status between the current business client and the server is poor. The above method is fully explained through the following steps:

[0042] Still Figure 2 As shown in (a), it is assumed that the current business client is business client A. When the target user account to be verified, the input operation of the account password to be verified, and the selection operation of the login control are detected in business client A, the attribute information to be verified of the target user account (i.e., the login information of the target user account, such as the user account and the user account password, etc.) is obtained.

[0043] Next, the attribute information to be verified (i.e. the login information of the target user account) is encrypted and encapsulated in the login verification request. Figure 2As shown in (a), the login verification request is sent to business client B, business client C, business client D, and business client E respectively. Business client B, business client C, business client D, and business client E respectively perform login verification on the target user account through the login verification request to obtain verification response result B, verification response result C, verification response result D, and verification response result E, and as shown in Figure 2 As shown in (b), the verification response result B, the business client C, the verification response result D, and the verification response result E are returned to the client A.

[0044] Then, when business client A obtains verification response result B, business client C, verification response result D, and verification response result E, the current security verification level corresponding to business client A is determined based on verification response result B, business client C, verification response result D, and verification response result E, and the business function permissions corresponding to the current security verification level are enabled for the current business client.

[0045] In the application embodiment, a login verification request triggered in the current business client is obtained, wherein the login verification request is used to request to log in the current business client using the target user account. Then, the login verification request is sent to the reference business client cluster associated with the current business client, wherein the reference business client in the reference business client cluster is located in the same distributed business verification network as the current business client, and the reference business client records the verification information used to verify the current business client. Then, the verification response result returned by the reference business client in the reference business client cluster is received. Furthermore, the current security verification level corresponding to the current business client is determined according to the verification response result, and the business function permission corresponding to the current security verification level is opened for the current business client logged in using the target user account. In other words, in the embodiment of the present application, when the network status between the current business client and the login verification server is not good, the user account corresponding to the current business client can be cloud-login-verified based on multiple reference business clients in the same distributed business verification network as the current business client. Thereby avoiding the technical problem of low login verification security caused by the current business client performing local login verification based on itself. The technical effect of improving the security of login verification is achieved.

[0046] Optionally, as an optional implementation manner, determining the current security verification level corresponding to the current service client according to the verification response result includes:

[0047] S1, parsing the verification result obtained by the reference business client from the verification response result;

[0048] It should be noted that the verification result here may be, but is not limited to, used to indicate the verification result of the target user account login verification by the reference service client. Specifically, if the target user account passes the login verification, the verification result may be "passed", and if the target user account fails the login verification, the verification result may be "failed".

[0049] S2, counting the verification results of each reference service client in the reference service client cluster to obtain the current verification pass rate;

[0050] Taking the scenario where the above-mentioned login verification method is applied to the login verification of the user account corresponding to the current business client as an example, the above-mentioned verification results of each reference business client in the reference business client cluster are counted to obtain the current verification pass rate, which may include but is not limited to the following steps: calculating the proportion of reference business clients whose corresponding verification results are passed in the reference business clients, and taking the proportion of reference business clients whose verification results are passed as the current verification pass rate. Specifically, the proportion of reference business clients whose verification results are passed is the ratio of the number of reference business clients whose corresponding verification results are passed in the reference business clients to the number of all reference business clients.

[0051] For example, assuming that the reference business clients corresponding to the current business client include: reference business client 1, reference business client 2, reference business client 3, reference business client 4, and reference business client 5, wherein the verification result corresponding to reference business client 1 is passed, the verification result corresponding to reference business client 2 is not passed, the verification result corresponding to reference business client 3 is passed, the verification result corresponding to reference business client 4 is passed, and the verification result corresponding to reference business client 5 is passed. It can be seen that the number of reference business clients with passed verification results is 4, and the number of all reference business clients is 5, then the above current verification pass rate = (4÷5) × 100% = 80%.

[0052] S3, determining a current security verification level corresponding to the current service client according to the current online rate and the current verification pass rate of the reference service clients in the reference service client cluster.

[0053] Optionally, as an optional implementation, the current online rate here may be, but is not limited to, used to indicate the proportion of reference service clients in the reference service clients whose operation status is online. Specifically, it may be, but is not limited to, based on the following steps to obtain the current online rate of the reference service clients, count the number of all reference service clients and the number of reference service clients that have returned operation status information, obtain the ratio of the number of reference service clients that have returned operation status information to the number of all reference service clients, and use the above ratio as the current online rate of the reference service clients.

[0054] Further, assuming that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client, the above method is fully explained by the following steps:

[0055] Parse the verification response results returned by each reference business client included in the reference business client cluster, and obtain the verification results corresponding to the above-mentioned each reference business client. Next, obtain the ratio of the number of reference business clients whose corresponding verification results are passed included in the reference business client cluster to the number of all reference business clients included in the reference business client cluster, and use the above ratio as the current verification pass rate. Obtain the ratio of the number of reference business clients that have returned operating status information included in the reference business client cluster to the number of all reference business clients included in the reference business client cluster, and use the above ratio as the current online rate of the reference business client. Furthermore, determine the current security verification level corresponding to the current business client based on the above-mentioned current verification pass rate and the current online rate of the above-mentioned reference business client.

[0056] It should be noted that, without considering the current security verification level of the current business client (ie, all business clients have the same business function authority), if the verification result pass rate is greater than 51%, it is determined that the target user account passes this login verification.

[0057] In the application embodiment, the verification result obtained by the reference business client is parsed from the verification response result. The verification results of each reference business client in the reference business client cluster are counted to obtain the current verification pass rate. Then, according to the current online rate and the current verification pass rate of the reference business clients in the reference business client cluster, the current security verification level corresponding to the current business client is determined. In other words, in the embodiment of the present application, the current security verification level corresponding to the current business client is determined by the current verification pass rate and the current online rate of the reference business client. This avoids the problem of the current security verification level corresponding to the current business client being inaccurate due to the small number of reference business clients participating in the verification and the verification errors of individual reference business clients among the reference business clients participating in the verification. Thereby achieving the technical effect of improving the accuracy of the current security verification level corresponding to the current business client.

[0058] Optionally, as an optional implementation manner, determining a current security verification level corresponding to the current service client according to a current online rate and a current verification pass rate of a reference service client in a reference service client cluster includes:

[0059] S1, when the current online rate is greater than the first online threshold and the current verification pass rate is greater than the first pass threshold, determining that the current security verification level is the first security level, wherein the first security level indicates that all business function permissions in the current business client are enabled;

[0060] For example, assuming that the first online threshold is 80% and the first pass threshold is 80%. When the previous online rate is greater than the previous online rate greater than 80%, and the current verification pass rate is greater than 80%, it is determined that the current security verification level corresponding to the current business client is the first security level. The current business client can operate all business functions.

[0061] S2, when the current online rate is greater than the second online threshold and the current verification pass rate is greater than the second pass threshold, determining that the current security verification level is the second security level, wherein the second security level indicates enabling some business function permissions in the current business client, and some business function permissions include: data read-only permission and sensitive business data processing permission;

[0062] For example, assuming that the second online threshold is 65% and the second pass threshold is 65%. When the previous online rate is greater than the previous online rate greater than 65%, and the current verification pass rate is greater than 65%, it is determined that the current security verification level corresponding to the current business client is the second security level. The current business client can view and operate business functions and can also process sensitive business data.

[0063] S3, when the current online rate is greater than the third online threshold and the current verification pass rate is greater than the third pass threshold, determining that the current security verification level is the third security level, wherein the third security level indicates enabling some business function permissions in the current business client, and some business function permissions include: data read-only permission and non-sensitive business data processing permission;

[0064] For example, assuming that the third online threshold is 50% and the third pass threshold is 50%. When the previous online rate is greater than the previous online rate greater than 50%, and the current verification pass rate is greater than 50%, it is determined that the current security verification level corresponding to the current business client is the third security level. The current business client can view and operate business functions and process non-sensitive business data.

[0065] Among them, the first online threshold is greater than the first online threshold, the second online threshold is greater than the third online threshold; the first pass threshold is greater than the second pass threshold, the second pass threshold is greater than the third pass threshold; the authority scope of the sensitive business data processing authority is greater than the authority scope of the non-sensitive business data processing authority.

[0066] It should be noted that the above embodiment is only an embodiment for explaining the above login verification method, and the first online threshold, the second online threshold, the third online threshold, the first pass threshold, the second pass threshold, and the third pass threshold may also correspond to other values, and are not limited to the values ​​in the above embodiment. In the embodiments of the present application, no limitation is made to this.

[0067] In addition, it should be noted that the current security level corresponding to the current business client corresponding to the target user account verified by the central service may also be the first security level.

[0068] In the application embodiment, when the current online rate is greater than the first online threshold and the current verification pass rate is greater than the first pass threshold, the current security verification level is determined to be the first security level, wherein the first security level indicates that all business function permissions in the current business client are enabled. When the current online rate is greater than the second online threshold and the current verification pass rate is greater than the second pass threshold, the current security verification level is determined to be the second security level, wherein the second security level indicates that some business function permissions in the current business client are enabled, and some business function permissions include: data read-only permission and sensitive business data processing permission. When the current online rate is greater than the third online threshold and the current verification pass rate is greater than the third pass threshold, the current security verification level is determined to be the third security level, wherein the third security level indicates that some business function permissions in the current business client are enabled, and some business function permissions include: data read-only permission and non-sensitive business data processing permission. Among them, the first online threshold is greater than the second online threshold, and the second online threshold is greater than the third online threshold; the first pass threshold is greater than the second pass threshold, and the second pass threshold is greater than the third pass threshold; the permission scope of sensitive business data processing permission is greater than the permission scope of non-sensitive business data processing permission. In other words, in the embodiment of the present application, the current security verification level corresponding to the current business client is determined according to the relationship between the current online rate, the current verification pass rate and the predetermined threshold value. This allows the current business client to obtain the operation authority indicated by the current security verification level. In other words, in this embodiment, by allocating different operation authorities to business clients with different security verification levels, the technical problem of reducing business security caused by business clients with lower security verification levels obtaining too many operation authorities is avoided. The technical effect of improving the security of business processing is achieved.

[0069] Optionally, as an optional implementation manner, sending the login verification request to a reference service client cluster associated with the current service client includes:

[0070] S1, when the current service client fails to connect to the server, read the network access address corresponding to each reference service client in the reference service client cluster from the configuration file in the current service client;

[0071] It should be noted that before reading the network access address corresponding to each reference service client in the reference service client cluster from the configuration file in the current service client, the process also includes: pre-storing the network access addresses of all reference service clients in the reference service cluster in the current service client.

[0072] Furthermore, as an optional implementation, before reading the network access addresses corresponding to each reference business client in the reference business client cluster from the configuration file in the current business client, it also includes: modifying the configuration file in the current business client, and instructing that when the current business client fails to connect to the server, login verification is performed on the user account to be verified through the reference business client that exists in the same distributed business verification network; and when the current business client successfully connects to the server, login verification is performed on the user account to be verified through the server.

[0073] In other words, in this embodiment, by pre-configuring the configuration file of the current business client, the business client automatically sends a login verification request to the reference business client when the connection with the server fails. Then, the user account to be verified is verified through the reference business client. This avoids the technical problem of low login verification security caused by the current business client performing local login verification based on its own user account to be verified when the connection between the current business client and the server fails. Thus, the technical effect of improving the security of login verification is achieved.

[0074] As another optional embodiment, in the case where the network connection between the server and the current business client often fails, the configuration file in the current business client can also be modified, and the reference business client located in the same distributed business verification network as the current business client is instructed to log in and verify the user account to be verified corresponding to the current business client. Further, in the case where the network status between the server and the current business client is good, the configuration file in the current business client can also be modified, and the server is instructed to log in and verify the user account to be verified corresponding to the current business client.

[0075] Assume that the configuration file in the current business client has been modified in advance, and it is indicated that the user account to be verified corresponding to the current business client is to be logged in and verified through the reference business client located in the same distributed business verification network as the current business client. Then, when the current business client detects the login verification, regardless of whether the network status between the current business client and the server is good. The current business client will send a login verification request to the reference business client, and perform login verification for the target user account through the reference business client. Further, assume that the configuration file in the current business client has been modified in advance, and it is indicated that the user account to be verified corresponding to the current business client is to be logged in and verified through the server located in the same distributed business verification network as the current business client. Then, when the current business client detects the login verification, regardless of whether the network status between the current business client and the server is good. The current business client will send a login verification request to the server, and perform login verification on the target user account through the server.

[0076] In other words, in this embodiment, by modifying the configuration file, multiple authentication methods are provided for the user account corresponding to the client, thereby solving the technical problem of the single login authentication method in the prior art, which can only be performed through the server. Thus, the technical effect of enriching the login authentication method is achieved.

[0077] S2, sending a login verification request to the network access address.

[0078] In the application embodiment, when the current business client fails to connect to the server, the network access address corresponding to each reference business client in the reference business client cluster is read from the configuration file in the current business client. Then a login verification request is sent to the network access address. In other words, in this embodiment, the configuration file in the current business client is modified in advance so that when the current business client fails to connect to the server, the current business client automatically reads the network address corresponding to each reference business client in the reference business client cluster and sends a verification login request to the above network address. This avoids the technical problem of low login verification security caused by the current business client performing local login verification on the user account to be verified based on itself when the current business client fails to connect to the server. Thereby achieving the technical effect of improving the security of login verification.

[0079] Optionally, as an optional implementation, sending a login verification request to a network access address includes:

[0080] S1, obtaining the online status of each reference service client in the reference service client cluster;

[0081] Optionally, when the reference service client is in an offline state, it is still possible to return information such as its operating status to the current service client. The current service client may, but is not limited to, determine the current online rate of the reference service client by using the operating status information returned by the reference service client. Specifically, the number of all reference service clients and the number of reference service clients whose operating status is returned as an online state are counted. The ratio of the number of reference service clients whose operating status is returned as an online state to the number of all reference service clients is obtained, and the above ratio is used as the current online rate of the reference service client.

[0082] Furthermore, when the reference service client is in an offline state and cannot return any information to the current service client, the current service client may, but is not limited to, obtain the current online rate of the reference service client based on the following steps. Specifically, the number of all reference service clients and the number of reference service clients that have returned running status information are counted. The ratio of the number of reference service clients that have returned running status information to the number of all reference service clients is obtained. The above ratio is used as the current online rate of the reference service client.

[0083] S2, when it is determined based on the online status that the online rate corresponding to the reference business client cluster is greater than the verification trigger condition threshold, a login verification request is broadcast to each network access address through an end-to-end protocol, wherein the login verification request includes the login information of the target user account encrypted with a key.

[0084] It should be noted that the end-to-end protocol here can be but is not limited to being used to indicate a point-to-point network protocol (Peer-to-Peer, referred to as P2P for short), which is a decentralized peer-to-peer network protocol.

[0085] Taking the scenario where the above login verification method is applied to the login verification of the user account corresponding to the current business client as an example, the above method is fully explained by the following steps:

[0086] The current service client determines the current online rate of the reference service client based on the running status information returned by the reference service client, or the current service client determines the current online rate of the reference service client based on the number of reference service clients that have returned running status information and the number of all reference service clients.

[0087] When the current online rate of the reference service client is greater than the verification trigger condition threshold, a login verification request is broadcasted to the network access address corresponding to each reference service client through the P2P protocol.

[0088] In the application embodiment, the online status of each reference business client in the reference business client cluster is obtained. When it is determined based on the online status that the online rate corresponding to the reference business client cluster is greater than the verification trigger condition threshold, a login verification request is broadcast to each network access address through the end-to-end protocol, wherein the login verification request includes the login information of the target user account encrypted with a key. That is to say, in this embodiment, only when the online rate corresponding to the reference business client cluster is greater than the trigger condition threshold, a login verification request is broadcast to the network access address corresponding to each reference business client through the P2P protocol. This avoids the technical problem of inaccurate login verification due to too few business clients participating in the verification. The technical effect of improving the accuracy and security of login verification is achieved.

[0089] Optionally, as an optional implementation, after enabling the business function permission corresponding to the current security verification level for the current business client logged in using the target user account, the method further includes:

[0090] S1, receiving an object login authentication request sent by an object reference service client in a reference service client cluster, wherein the object login authentication request is used to request to use an object user account to log in to the object reference service client;

[0091] S2, parsing the login information of the object user account from the object login authentication request;

[0092] S3, verify the login information of the target user account.

[0093] It should be noted that the current service client stores the public key information (i.e., public key information) corresponding to each reference service client included in the reference service client cluster, and the private key information (i.e., private key information) corresponding to the current service client itself. Correspondingly, each reference service client included in the reference service client cluster also stores the public key information corresponding to the current service client, and the private key information corresponding to each of the above-mentioned reference service clients.

[0094] Optionally, as an optional embodiment, the object login authentication request sent by the object reference service client may include, but is not limited to, information obtained by encrypting the login information of the object user account using the public key of the current service client.

[0095] Furthermore, the above-mentioned parsing the login information of the object user account from the object login authentication request may include but is not limited to: decrypting the information included in the object login authentication request based on the private key of the current business client to obtain the login information of the object user account.

[0096] For example, Figure 3 It is assumed that the service client A is the authenticated party for the login authentication of the user account S, and the service client B is the authenticating party for the login authentication of the user account S. The login authentication process of the user account S may include the following steps:

[0097] Execute steps S302-S306, the service client A uses the public key of the service client B to encrypt the login information of the user account S to obtain the encrypted login information, and then encapsulates the encrypted login information into the login authentication request of the user account S.

[0098] Next, step S306 is executed, and the service client A sends a login authentication request to the service client B.

[0099] Then, when the business client B receives the login authentication request, steps S308-S310 are executed to decrypt the encrypted login information included in the login authentication request based on the private key of the client B itself to obtain the login information of the user account S. Then, the business client B performs login verification processing on the user account S based on the login information of the user account S.

[0100] Further, step S312 is executed, and the business client B sends the verification response result of the user account S to the business client A.

[0101] It should be noted that the above embodiment is an explanation example of a verified party service client (i.e., client A) and a verifying party service client (i.e., client B) performing login verification on a user account to be verified (i.e., user account S). In fact, all verified party service clients (such as the above current service client, the above object reference service client, etc.) and a verifying party service client (such as the above current service client, the above reference service client, etc.) can use the above method to verify the user account to be verified.

[0102] Assuming that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client, the above method is fully explained by the following steps:

[0103] The current business client receives an object login authentication request (i.e., a verification request for requesting to log in to the object reference business client using the object user account) sent by the object reference business client in the reference business client cluster, wherein the object login authentication request includes information obtained by encrypting the login information of the object user account using the public key of the current business client. Then, based on the private key of the current business client, the information included in the object login authentication request is decrypted to obtain the login information of the object user account (i.e., the user account to be verified and the password of the user account to be verified, etc.). Then, the login information of the object user account is compared with the accurate information of the object user account stored in advance to confirm whether the object user account can pass the login verification. In the application embodiment, an object login authentication request sent by the object reference business client in the reference business client cluster is received, wherein the object login authentication request is used to request to log in to the object reference business client using the object user account. Then, the login information of the object user account is parsed from the object login authentication request. Then, the login information of the object user account is verified. In other words, in the embodiment of the present application, in addition to being the verified party, the current business client can also be used as a verifier for verifying the user account corresponding to other reference business clients. In other words, business clients in the same distributed business verification network can verify each other, thus avoiding the technical problem of low login verification security caused by the current business client performing local login verification based on its own user account to be verified when the current business client fails to connect to the server. This achieves the technical effect of improving login verification security.

[0104] Optionally, as an optional implementation, before obtaining the login verification request triggered in the current service client, the method further includes:

[0105] S1, obtain the login registration request triggered in the current business client;

[0106] S2, when the current business client is connected to the server, a login registration request is sent to the server, wherein the server allocates a current network access address to the current business client, and sends the login information of the current business client to the reference business client in the same distributed business verification network, wherein the login information of the current business client includes the current network access address;

[0107] S3, save the current network access address received from the server.

[0108] It should be noted that the login registration request here may be, but is not limited to, used to request adding a new service client to the distributed service verification network.

[0109] Assuming that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client, the above method is fully explained by the following steps:

[0110] Get Figure 4 The login registration request is triggered in the current business client 412 (i.e., the newly added business client) shown in (a). Then, when the current business client 412 is connected to the server 414, the login registration request is sent to the server 414. The server 414 allocates the current network access address to the current business client 412, and sends the login information (such as the current network access address, business client ID, business client nickname, etc.) of the current business client 412 to the reference business client 402, the reference business client 404, the reference business client 406, the reference business client 408, and the reference business client 410 located in the same distributed business verification network, and returns the network access addresses corresponding to the reference business client 402, the reference business client 404, the reference business client 406, the reference business client 408, and the reference business client 410, as well as the current network address of the current business client 412, to the current business client 412. Then, the current service client 412 stores the received network access addresses corresponding to the reference service client 402, the reference service client 404, the reference service client 406, the reference service client 408, and the reference service client 410, as well as the current network address of the current service client 412 in the local computer, thereby successfully joining the above-mentioned distributed service verification network.

[0111] Specifically, the distributed service verification network added with the current service client is as follows: Figure 4 As shown in (b), it is composed of a current business client 412, a server 414 and a reference business client 402, a reference business client 404, a reference business client 406, a reference business client 408, and a reference business client 410, wherein all business clients in the distributed business verification network (i.e., including the current business client 412 and the reference business client 402, the reference business client 404, the reference business client 406, the reference business client 408, and the reference business client 410) are connected to the server 414, and all business clients in the distributed business verification network are connected to each other.

[0112] In the application embodiment, a login registration request triggered in the current business client is obtained. Then, when the current business client is in a connected state with the server, a login registration request is sent to the server, wherein the server will assign the current network access address to the current business client, and send the login information of the current business client to the reference business client located in the same distributed business verification network, and the login information of the current business client includes the current network access address. Then save the current network access address received from the server. In other words, the current network access address of the current network client is broadcasted to the reference business client located in the same distributed business verification network based on the server. The current network client is enabled to join the above-mentioned distributed business verification network, and then the user account corresponding to the current business client is logged in and verified through the reference business client located in the same distributed business verification network. This avoids the technical problem of low login verification security caused by the current business client performing local login verification on the user account to be verified based on itself when the current business client fails to connect to the server. Thereby achieving the technical effect of improving the security of login verification.

[0113] Optionally, as an optional embodiment, it is assumed that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client, such as Figure 5 The following steps are shown to fully explain the above method:

[0114] Execute steps S502-S504. After the current service client receives the login operation of the target user account, determine whether the online rate of each reference service client in the same distributed service verification network as the current service client is greater than the verification trigger condition threshold.

[0115] When the online rate of the reference service client is less than the verification trigger condition threshold, step S514 - 2 is executed to determine that the target user account verification login fails.

[0116] In the case where the online rate of the reference service client is greater than the verification trigger condition threshold, steps S506-S512 are executed, and the current service client broadcasts a login verification request to each reference service client, wherein the login verification request includes the login information of the target user account after key encryption. Then each reference service client parses the login verification request and performs login verification on the target user account. Next, each reference service client sends the verification response result to the current service client, so that the current service client determines whether the verification is successful based on the verification response results corresponding to each reference service client (i.e., whether the verification pass rate of the reference service client is greater than a predetermined threshold).

[0117] Furthermore, if the verification pass rate of the reference service client is greater than the predetermined threshold, step S514-1 is executed to determine that the target user account login verification is successful. If the verification pass rate of the reference service client is greater than the predetermined threshold, step S514-2 is executed to determine that the target user account login verification fails.

[0118] In the embodiment of the present application, when the network status between the current business client and the login verification server is not good, the user account corresponding to the current business client can be cloud-login verified based on multiple reference business clients in the same distributed business verification network as the current business client. This avoids the technical problem of low login verification security caused by the current business client performing local login verification based on itself. The technical effect of improving the security of login verification is achieved.

[0119] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0120] Optionally, as another optional embodiment, assuming that the above login verification method is applied to the scenario of login verification of the user account corresponding to the current business client, the above method is fully explained by the following steps:

[0121] When the client corresponding to the scheduling system in the distributed business verification network, or the business client scheduled by the scheduling system logs in to the user account. When it is determined that the current online rate of other clients in the distributed business verification network is lower than the verification trigger condition threshold, the operation status of the client corresponding to the above scheduling system, or the above business client, is set to the online state, and waits for other clients in the above distributed business verification network to go online.

[0122] When the current online rate of other clients in the distributed business verification network is higher than the verification trigger condition threshold, login verification is performed in sequence according to the online time of other clients in the distributed business verification network until all clients are verified.

[0123] In this embodiment, when it is determined that the current online rate of other clients in the distributed business verification network is lower than the verification trigger condition threshold, wait for other clients in the above distributed business verification network to go online. When the current online rate of other clients in the distributed business verification network is higher than the verification trigger condition threshold, login verification is performed in sequence according to the online time of other clients in the distributed business verification network until all clients are verified. This avoids the problem that other clients in the distributed business verification network cannot perform user account login verification on the client corresponding to the system or the business client scheduled by the scheduling system due to a short offline time.

[0124] According to another aspect of the embodiments of the present application, a login verification device for implementing the above-mentioned login verification method is also provided. Figure 6 As shown, the device comprises:

[0125] A first acquisition unit 602 is used to acquire a login verification request triggered in the current service client, wherein the login verification request is used to request to use a target user account to log in to the current service client;

[0126] The sending unit 604 is used to send the login verification request to the reference service client cluster associated with the current service client, wherein the reference service client in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service client records verification information for verifying the current service client;

[0127] The receiving unit 606 is configured to receive a verification response result returned by a reference service client in the reference service client cluster;

[0128] The verification processing unit 608 is used to determine the current security verification level corresponding to the current business client according to the verification response result, and enable the business function authority corresponding to the current security verification level for the current business client logged in using the target user account.

[0129] Optionally, the verification processing unit includes: a parsing module, used to parse the verification result obtained by the reference business client from the verification response result; a statistical module, used to count the verification results of each reference business client in the reference business client cluster to obtain the current verification pass rate; a determination module, used to determine the current security verification level corresponding to the current business client based on the current online rate and current verification pass rate of the reference business clients in the reference business client cluster.

[0130] Optionally, the determination module is also used to determine that the current security verification level is the first security level when the current online rate is greater than the first online threshold and the current verification pass rate is greater than the first pass threshold, wherein the first security level indicates that all business function permissions in the current business client are enabled; when the current online rate is greater than the second online threshold and the current verification pass rate is greater than the second pass threshold, determine that the current security verification level is the second security level, wherein the second security level indicates that some business function permissions in the current business client are enabled, and some business function permissions include: data read-only permission and sensitive business data processing permission; when the current online rate is greater than the third online threshold and the current verification pass rate is greater than the third pass threshold, determine that the current security verification level is the third security level, wherein the third security level indicates that some business function permissions in the current business client are enabled, and some business function permissions include: data read-only permission and non-sensitive business data processing permission; wherein the first online threshold is greater than the second online threshold, and the second online threshold is greater than the third online threshold; the first pass threshold is greater than the second pass threshold, and the second pass threshold is greater than the third pass threshold; the permission scope of sensitive business data processing permission is greater than the permission scope of non-sensitive business data processing permission.

[0131] Optionally, the sending unit includes: a reading module, used to read the network access address corresponding to each reference business client in the reference business client cluster from the configuration file in the current business client when the current business client fails to connect to the server; and a sending module, used to send a login verification request to the network access address.

[0132] Optionally, the sending module is also used to obtain the online status of each reference business client in the reference business client cluster; when it is determined based on the online status that the online rate corresponding to the reference business client cluster is greater than the verification trigger condition threshold, a login verification request is broadcast to each network access address through an end-to-end protocol, wherein the login verification request includes the login information of the target user account encrypted with a key.

[0133] Optionally, the login verification device also includes: a first receiving unit, used to receive an object login authentication request sent by an object reference business client in a reference business client cluster, wherein the object login verification request is used to request the use of an object user account to log in to the object reference business client; a parsing unit, used to parse the login information of the object user account from the object login authentication request; and a first verification processing unit, used to verify the login information of the object user account.

[0134] Optionally, the login verification device also includes: a second acquisition unit, used to acquire a login registration request triggered in the current business client; a first sending unit, used to send the login registration request to the server when the current business client is in a connected state with the server, wherein the server will assign a current network access address to the current business client, and send the login information of the current business client to a reference business client located in the same distributed business verification network, wherein the login information of the current business client includes the current network access address; and a saving unit, used to save the current network access address received from the server.

[0135] For a specific implementation example, reference may be made to the example shown in the above login verification method, which will not be described in detail in this example.

[0136] According to another aspect of the embodiment of the present application, an electronic device for implementing the above-mentioned login verification method is also provided. The electronic device may be Figure 1 The terminal device or server shown in the figure. This embodiment is described by taking the electronic device as a terminal as an example. Figure 7 As shown, the electronic device includes a memory 702 and a processor 704. The memory 702 stores a computer program, and the processor 704 is configured to execute the steps in any of the above method embodiments through the computer program.

[0137] Optionally, in this embodiment, the electronic device may be located in at least one network device among a plurality of network devices of a computer network.

[0138] Optionally, in this embodiment, the processor may be configured to perform the following steps through a computer program:

[0139] S1, obtaining a login verification request triggered in the current business client, wherein the login verification request is used to request to use a target user account to log in to the current business client;

[0140] S2, sending a login verification request to a reference service client cluster associated with the current service client, wherein the reference service client in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service client records verification information for verifying the current service client;

[0141] S3, receiving a verification response result returned by a reference service client in the reference service client cluster;

[0142] S4, determining the current security verification level corresponding to the current business client according to the verification response result, and enabling the business function permission corresponding to the current security verification level for the current business client logged in using the target user account.

[0143] Alternatively, a person skilled in the art may understand that: Figure 7 The structure shown is for illustration only, and the electronic device may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a PDA, a mobile Internet device (Mobile Internet Devices, MID), a PAD, or other terminal devices. Figure 7 The structure of the electronic device is not limited. Figure 7 More or fewer components (such as network interfaces, etc.) as shown in, or with Figure 7 Different configurations are shown.

[0144] Among them, the memory 702 can be used to store software programs and modules, such as the program instructions / modules corresponding to the method and device for login verification in the embodiment of the present application. The processor 704 executes various functional applications and data processing by running the software programs and modules stored in the memory 702, that is, to implement the above-mentioned login verification method. The memory 702 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 702 may further include a memory remotely located relative to the processor 704, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof. Among them, the memory 702 may be specifically, but not limited to, used to store information such as the above-mentioned verification response results. As an example, such as Figure 7 As shown, the memory 702 may include, but is not limited to, the first acquisition unit 602, the sending unit 604, the receiving unit 606, and the verification processing unit 608 in the login verification device. In addition, other module units in the login verification device may also be included but are not limited to, which will not be repeated in this example.

[0145] Optionally, the transmission device 706 is used to receive or send data via a network. Specific examples of the network may include a wired network and a wireless network. In one example, the transmission device 706 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices and routers via a network cable so as to communicate with the Internet or a local area network. In one example, the transmission device 706 is a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0146] In addition, the electronic device mentioned above further includes: a connection bus 708, which is used to connect various module components in the electronic device mentioned above.

[0147] In other embodiments, the terminal device or server may be a node in a distributed system, wherein the distributed system may be a blockchain system, and the blockchain system may be a distributed system formed by connecting the multiple nodes through network communication. Among them, the nodes may form a peer-to-peer (P2P, Peer To Peer) network, and any form of computing device, such as a server, terminal and other electronic devices, may become a node in the blockchain system by joining the peer-to-peer network.

[0148] According to one aspect of the present application, a computer-readable storage medium is provided, and a processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided in the above-mentioned various optional implementations.

[0149] Optionally, in this embodiment, the computer-readable storage medium may be configured to store a computer program for performing the following steps:

[0150] S1, obtaining a login verification request triggered in the current business client, wherein the login verification request is used to request to use a target user account to log in to the current business client;

[0151] S2, sending a login verification request to a reference service client cluster associated with the current service client, wherein the reference service client in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service client records verification information for verifying the current service client;

[0152] S3, receiving a verification response result returned by a reference service client in the reference service client cluster;

[0153] S4, determining the current security verification level corresponding to the current business client according to the verification response result, and enabling the business function permission corresponding to the current security verification level for the current business client logged in using the target user account.

[0154] Optionally, in this embodiment, a person of ordinary skill in the art may understand that all or part of the steps in the various methods of the above embodiments may be completed by instructing hardware related to the terminal device through a program, and the program may be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, etc.

[0155] If the integrated units in the above embodiments are implemented in the form of software functional units and sold or used as independent products, they can be stored in the above computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling one or more computer devices (which may be personal computers, servers, or network devices, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application.

[0156] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0157] In the several embodiments provided in the present application, it should be understood that the disclosed client can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0158] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0159] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0160] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A login verification method, characterized in that: include: Obtaining a login verification request triggered in the current service client, wherein the login verification request is used to request to use a target user account to log in to the current service client; Sending the login verification request to a reference service client cluster associated with the current service client, wherein the reference service clients in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service clients record verification information for verifying the current service client; Receiving a verification response result returned by the reference service client in the reference service client cluster; A current security verification level corresponding to the current business client is determined according to the verification response result, and a business function permission corresponding to the current security verification level is enabled for the current business client logged in using the target user account.

2. The method according to claim 1, characterized in that Determining the current security verification level corresponding to the current service client according to the verification response result includes: Parsing the verification result obtained by the reference service client from the verification response result; Collecting statistics on the verification results of each of the reference service clients in the reference service client cluster to obtain a current verification pass rate; The current security verification level corresponding to the current service client is determined according to the current online rate and the current verification pass rate of the reference service client in the reference service client cluster.

3. The method according to claim 2, characterized in that The determining, according to the current online rate and the current verification pass rate of the reference service client in the reference service client cluster, the current security verification level corresponding to the current service client comprises: When the current online rate is greater than the first online threshold and the current verification pass rate is greater than the first pass threshold, determining that the current security verification level is the first security level, wherein the first security level indicates enabling all business function permissions in the current business client; When the current online rate is greater than the second online threshold and the current verification pass rate is greater than the second pass threshold, the current security verification level is determined to be the second security level, wherein the second security level indicates that some business function permissions in the current business client are enabled, and the some business function permissions include: data read-only permission and sensitive business data processing permission; When the current online rate is greater than a third online threshold and the current verification pass rate is greater than a third pass threshold, determining that the current security verification level is a third security level, wherein the third security level indicates enabling some business function permissions in the current business client, and the some business function permissions include: data read-only permission and non-sensitive business data processing permission; Among them, the first online threshold is greater than the second online threshold, and the second online threshold is greater than the third online threshold; the first pass threshold is greater than the second pass threshold, and the second pass threshold is greater than the third pass threshold; the authority scope of the sensitive business data processing authority is greater than the authority scope of the non-sensitive business data processing authority.

4. The method according to claim 1, characterized in that: The sending the login verification request to the reference service client cluster associated with the current service client comprises: In the case that the current service client fails to connect to the server, reading the network access address corresponding to each of the reference service clients in the reference service client cluster from the configuration file in the current service client; Sending the login verification request to the network access address.

5. The method according to claim 4, characterized in that The sending the login verification request to the network access address comprises: Obtaining the online status of each reference service client in the reference service client cluster; When it is determined based on the online status that the online rate corresponding to the reference business client cluster is greater than the verification trigger condition threshold, the login verification request is broadcast to each of the network access addresses through an end-to-end protocol, wherein the login verification request includes the login information of the target user account encrypted with a key.

6. The method according to claim 1, characterized in that After the process of enabling the service function permission corresponding to the current security verification level for the current service client logged in using the target user account, the process further includes: Receiving an object login authentication request sent by an object reference service client in the reference service client cluster, wherein the object login authentication request is used to request to use an object user account to log in to the object reference service client; Parsing the object user account login information from the object login authentication request; The login information of the target user account is verified.

7. The method according to any one of claims 1 to 6, characterized in that Before obtaining the login verification request triggered in the current service client, the method further includes: Obtaining a login registration request triggered in the current business client; When the current service client is in a connected state with the server, the login registration request is sent to the server, wherein the server allocates a current network access address to the current service client, and sends the login information of the current service client to the reference service client located in the same distributed service verification network, wherein the login information of the current service client includes the current network access address; The current network access address received from the server is saved.

8. A login verification device, characterized in that: include: A first acquisition unit is used to acquire a login verification request triggered in the current service client, wherein the login verification request is used to request to use a target user account to log in to the current service client; A sending unit, configured to send the login verification request to a reference service client cluster associated with the current service client, wherein the reference service clients in the reference service client cluster and the current service client are located in the same distributed service verification network, and the reference service clients record verification information for verifying the current service client; A receiving unit, configured to receive a verification response result returned by the reference service client in the reference service client cluster; The verification processing unit is used to determine the current security verification level corresponding to the current business client according to the verification response result, and enable the business function authority corresponding to the current security verification level for the current business client logged in using the target user account.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein the program is executed by a processor to perform the method described in any one of claims 1 to 7.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to execute the method according to any one of claims 1 to 7 through the computer program.

Images