Method, device and equipment for authenticating login system and storage medium

Abstract

The embodiment of the invention provides a method and device for authenticating a login system, equipment and a storage medium. The method comprises the following steps: in response to a login password acquisition request, acquiring a current login password, and encrypting the current login password to obtain encrypted information; receiving a to-be-authenticated login password, authenticating the to-be-authenticated login password based on the current login password, and determining whether the user is allowed to log in the target system or not according to an authentication result; wherein the login password to be authenticated is obtained by the security server through analyzing the encrypted information and feeding back after the user forwards the encrypted information to the security server. According to the embodiment of the invention, the login password is locally generated and encrypted in the intelligent device or system, so that the user forwards the encrypted information to the security server for decryption and obtains the login password, and the convenience of the user to log in the intelligent device or system under the condition that the user forgets the login password can be improved on the premise of ensuring the security.

Description

Technical Field

[0001] The present application relates to the field of login authentication technology, and in particular to a method, apparatus, device and storage medium for authenticating a login system. Background Art

[0002] With the development of Internet technology, the application of various smart devices or systems has become more and more popular. Smart devices or systems usually provide administrator accounts, so that users can use the administrator account and its corresponding login password to log in to the management program of the smart device or system to manage the smart device or system.

[0003] For security reasons, smart devices or systems are usually configured to require a user to change the login password after the user logs into the management program for the first time, so as to prevent others from logging into the management program using the default password.

[0004] However, in actual applications, users often forget their modified login passwords and need to retrieve the passwords or restore the default passwords before they can log in to the management program again. In order to improve the security of device management, the steps for retrieving passwords or restoring default passwords are usually very complicated, so it is not very convenient for users to log in to smart devices or systems when they forget their login passwords. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide a method, device, equipment and storage medium for authenticating and logging into a system, so as to improve the convenience of a user logging into a smart device or system when he forgets his login password.

[0006] In a first aspect, an embodiment of the present application provides a method for authenticating and logging into a system, comprising: In response to a user's request for obtaining a login password for a target system, obtaining a current login password for the target system, and encrypting the current login password to obtain encrypted information; receiving a login password to be authenticated input by the user, authenticating the login password to be authenticated based on the current login password, and determining whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds back the encrypted information.

[0007] In an embodiment of the present application, the current login password is obtained and encrypted locally on the smart device or system, so that the user can forward the encrypted information to a security server for decryption and obtain the corresponding login password. This can improve the convenience of the user logging into the smart device or system when they forget the login password while ensuring security.

[0008] In some possible embodiments, before receiving the login password to be authenticated input by the user, the method further includes: A request string is generated based on the encrypted information and a preset request interface, so that the user can forward the encrypted information to the security server based on the request string.

[0009] In the embodiment of the present application, the efficiency of forwarding encrypted information is further improved by presetting a request interface locally in the smart device or system and combining it with encrypted information to generate a request string for requesting a security server.

[0010] In some possible embodiments, the generating a request string based on the encrypted information and a preset request interface, so that the user forwards the encrypted information to the security server based on the request string, includes: A request string is generated based on the encrypted information and a preset request interface, and the request string is converted into a graphic identification code so that after the user scans the graphic identification code through a mobile terminal held by the user, the encrypted information is forwarded to the security server based on the request string obtained by parsing the graphic identification code.

[0011] In the embodiment of the present application, the flexibility of forwarding encrypted information is further improved by converting the request character string into a graphic identification code for the mobile terminal to scan and identify and initiate a request to the security server.

[0012] In some possible embodiments, the encrypted information is obtained by encrypting the current login password and the device identification of the target system; The security server is configured to: Receiving the encrypted information forwarded by the user, parsing the encrypted information to obtain the corresponding current login password and device identification; A registration terminal number bound to the device identification is acquired based on a pre-stored registration information database, and the current login password is sent to a target mobile terminal corresponding to the registration terminal number.

[0013] In the embodiment of the present application, a registration information library is set up to implement login password management for different devices, thereby further improving the flexibility of smart device login authentication.

[0014] In some possible embodiments, the encrypted information is obtained by encrypting the current login password and the target terminal number preset in the target system; The security server is configured to: Receiving the encrypted information forwarded by the user, parsing the encrypted information to obtain the corresponding current login password and target terminal number; The current login password is sent to a target mobile terminal corresponding to the target terminal number.

[0015] In an embodiment of the present application, the mobile phone number corresponding to the user (administrator) is pre-stored locally in the smart device or system, and the mobile phone number is encrypted together with the current login password and forwarded to the security server, so that the security server parses the encrypted information and directly feeds back the current login password to the mobile terminal corresponding to the mobile phone number, thereby further improving the convenience of the user logging into the smart device or system when he forgets the login password.

[0016] In some possible embodiments, the method for authenticating and logging into the system further includes: In response to a user's account registration request for the target system, obtaining a terminal number to be registered specified in the account registration request, and encrypting the terminal number to be registered and a device identifier of the target system to obtain registration encryption information; The security server is also configured to: Receiving the registration encrypted information forwarded by the user, parsing the registration encrypted information to obtain the corresponding terminal number and device identification to be registered; Authentication information is sent to a mobile terminal corresponding to the terminal number to be registered to perform identity authentication on the terminal number to be registered, and after the identity authentication is successfully passed, the terminal number to be registered and the device identification are bound and stored in the registration information library.

[0017] In the embodiment of the present application, the registration information submitted by the user on the smart device is authenticated by the security server, thereby further improving the security of the user's registration and login account.

[0018] In some possible embodiments, in response to a user's request for obtaining a login password for a target system, obtaining a current login password for the target system, and encrypting the current login password to obtain encrypted information includes: In response to a user's request for obtaining a login password for a target system, obtaining a preset login password corresponding to the target account based on the target account specified in the request for obtaining the login password as the current login password for the target system; The target account number and the current login password are encrypted to obtain encrypted information.

[0019] In an embodiment of the present application, by obtaining the previously preset login passwords of different users according to the account as the current login password, the smart device can perform login authentication for different users by retrieving the password, further improving the convenience of the user logging into the smart device or system when the login password is forgotten.

[0020] In some possible embodiments, in response to a user's request for obtaining a login password for a target system, obtaining a current login password for the target system includes: In response to a user's request to obtain a login password for a target system, a random login password is generated based on a preset random algorithm as a current login password for the target system.

[0021] In the embodiment of the present application, by using a randomly generated login password as the current login password, the login authentication of the device is implemented in the form of a random password, which further improves the security of the user logging into the smart device or system when the user forgets the login password.

[0022] In some possible embodiments, the method for authenticating and logging into the system further includes: After the random login password is generated, if a login password to be authenticated that is consistent with the random login password is not received within a preset valid time period, the current login password of the target system is reset.

[0023] In an embodiment of the present application, by configuring a validity period for the random login password and invalidating the current random login password when the authentication fails after the timeout, the security of the user logging into the smart device or system when the login password is forgotten is further improved.

[0024] In some possible embodiments, the method for authenticating and logging into the system further includes: If the number of times that the authentication of the login password to be authenticated input by the user based on the current login password fails exceeds a preset number threshold, the login account of the user is locked.

[0025] In the embodiment of the present application, by locking the user account that has exceeded the limit of continuous authentication failures, the security of the user logging into the smart device or system when forgetting the login password is further improved.

[0026] In some possible embodiments, encrypting the current login password to obtain encrypted information includes: Select a target encryption rule from a plurality of preset encryption rules to encrypt the current login password to obtain encrypted information, and record an encryption identifier corresponding to the target encryption rule; The generating a request string based on the encrypted information and a preset request interface, so that the user forwards the encrypted information to the security server based on the request string, is specifically: Generate a request string based on the encryption information, the encryption identifier and a preset request interface, so that the user can forward the encryption information and the encryption identifier to the security server based on the request string; The security server is configured to: Receive the encrypted information and the encryption identifier forwarded by the user, obtain the corresponding target decryption rule based on the encryption identifier, parse the encrypted information based on the target decryption rule to obtain the corresponding current login password; and feed back the current login password to the user.

[0027] In an embodiment of the present application, information such as a login password is encrypted by dynamically selecting encryption rules, thereby further improving the security of a user logging into a smart device or system when the user forgets the login password.

[0028] In a second aspect, an embodiment of the present application provides a device for authenticating and logging into a system, including: A password encryption module, used to respond to a user's request for obtaining a login password for a target system, obtain a current login password for the target system, and encrypt the current login password to obtain encrypted information; A login authentication module, configured to receive a login password to be authenticated input by the user, authenticate the login password to be authenticated based on the current login password, and determine whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds back the encrypted information.

[0029] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor can implement the method described in any embodiment of the first aspect when executing the program.

[0030] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the method described in any embodiment of the first aspect can be implemented.

[0031] In a fifth aspect, an embodiment of the present application provides a computer program product, wherein the computer program product includes a computer program, wherein when the computer program is executed by a processor, the method described in any embodiment of the first aspect can be implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 A flowchart of a method for authenticating and logging into a system provided in an embodiment of the present application; Figure 2 An interactive system architecture diagram of the authentication and login system method provided in an embodiment of the present application; Figure 3 A schematic diagram of the structure of an authentication and login system provided in an embodiment of the present application; Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0034] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0035] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0036] like Figure 1 As shown, the embodiment of the present application provides a method for authenticating and logging into a system, which may include the steps of: S1. In response to a user's request to obtain a login password for a target system, obtain a current login password for the target system, and encrypt the current login password to obtain encrypted information.

[0037] It should be noted that the authentication login system method of the embodiment of the present application can be executed by a smart device or system. The smart device or system can be any device or system with certain processing functions, such as a smart bracelet, a smart home appliance, an Internet of Things device or a network device. The target system refers to the management program in the smart device or system.

[0038] Specifically, when a user needs to log in to the management program (target system) of a smart device or system and forgets the login password, a request to obtain the login password (login password acquisition request) can be initiated to the smart device or system. Exemplarily, a button indicating that a user has forgotten the password can be clicked on the visual interface of the smart device or system to initiate the login password acquisition request.

[0039] When the smart device or system receives the user's login password acquisition request, it locally acquires the current login password for logging into the target system, wherein the current login password may be a previously set fixed password or a password randomly generated in real time.

[0040] Then, the current login password is encrypted to obtain encrypted information.

[0041] The encryption process may be implemented using a symmetric encryption algorithm or an asymmetric encryption algorithm (public key and private key) pre-negotiated with a security server (e.g., a pre-configured cloud server), so that the encrypted information may be decrypted on the security server using a corresponding decryption strategy.

[0042] S2, receiving the login password to be authenticated input by the user, authenticating the login password to be authenticated based on the current login password, and determining whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds it back.

[0043] It should be noted that after the smart device or system generates encrypted information, the encrypted information can be displayed on the visual interface of the smart device or system; optionally, the encrypted information can also be displayed through a Web terminal (such as a management host) connected to the smart device or system; then, the user can obtain the encrypted information through a certain communication method (such as a mobile terminal such as a mobile phone) and forward the encrypted information to the security server, and then the security server parses the encrypted information and returns the corresponding login password. Exemplarily, the encrypted information can be a string, and the user can send the string to the security server through a URL request on the mobile terminal or the Web terminal to request the security server to decrypt the string.

[0044] Exemplarily, the security server may use a decryption algorithm corresponding to the encryption algorithm to decrypt the encrypted information, obtain the current login password, and then feed the current login password back to the user.

[0045] Exemplarily, the security server may return the decrypted current login password directly through the link through which the user sent the encrypted information.

[0046] Optionally, the encrypted information may include a device identification, so that after the security server parses the encrypted information to obtain the current login password and the device identification, it can feedback the current login password to the target mobile terminal corresponding to the registered terminal number according to the registered terminal number corresponding to the device identification.

[0047] Optionally, the encrypted information may also include the target terminal number, so that after the security server parses the encrypted information to obtain the current login password and the target terminal number, it can directly send the current login password to the target mobile terminal corresponding to the target terminal number.

[0048] If the user holds a target mobile terminal corresponding to the registered terminal number (target terminal number), after the target mobile terminal obtains the login password returned by the security server, the user can enter the login password into the smart device or system for login authentication according to the login password. At this time, the smart device or system receives the login password (login password to be authenticated) entered by the user, and authenticates the login password to be authenticated based on the current login password recorded locally. For example, if the login password to be authenticated is consistent with the current login password, the authentication is successful and the user is allowed to log in to the target system; otherwise, the authentication fails and the user is denied login.

[0049] In an embodiment of the present application, the current login password is obtained and encrypted locally on the smart device or system, so that the user can forward the encrypted information to the security server for decryption and obtain the corresponding login password. This not only ensures the security of obtaining the login password, but also the smart device or system does not need to establish a communication connection with the mobile terminal and the security server to log in to the smart device or system, thereby effectively improving the convenience of users logging into the smart device or system when they forget the login password.

[0050] It should be noted that since the login password is encrypted on the smart device or system side and decrypted on the security server side, the login password is transmitted in ciphertext during the transmission process, thus ensuring the security of the login password during transmission. In addition, in order to enhance the reliability of encryption and decryption, the login password can be encrypted and decrypted using a public and private key method; specifically, public key encryption is used on the smart device or system side and private key decryption is used on the security server side. In this way, even if the smart device or system is cracked, as long as the private key on the security server side is not leaked, the confidentiality of the information in the process of retrieving the login password can still be ensured.

[0051] In some possible embodiments, before step S2, the following steps may also be included: S101 . Generate a request string based on the encrypted information and a preset request interface, so that the user can forward the encrypted information to a security server based on the request string.

[0052] It should be noted that the request string for requesting the security server, such as a URL (uniform resource locator), can be generated locally on the smart device or system. For example, the encrypted information can be used as an API parameter and combined with a preset request interface (with the request API of the security server) to generate a request string; then, the user can directly initiate a connection request to the security server through the request string and forward the encrypted information to the security server.

[0053] Exemplarily, the smart device and system can display the generated request string, and the user manually enters the request string on the mobile terminal held by the user (or uses methods such as text recognition after taking a photo) to trigger sending a request to the security server; alternatively, the smart device and system can send the request string to the mobile terminal held by the user via wired or wireless methods (such as Bluetooth, hotspot network, etc.), so that the mobile terminal held by the user triggers sending a request to the security server.

[0054] Based on this, by presetting a request interface locally on the smart device or system, a request string for encrypted information is generated locally on the smart device or system, without the need to organize the generation of the request string at the user's mobile terminal, thereby further improving the efficiency and reliability of forwarding encrypted information.

[0055] In some possible embodiments, step S101, generating a request string based on the encrypted information and a preset request interface, so that the user can forward the encrypted information to the security server based on the request string, may include: S1011. Generate a request string based on the encrypted information and a preset request interface, and convert the request string into a graphic identification code so that after the user scans the graphic identification code through a mobile terminal held by the user, the encrypted information is forwarded to the security server based on the request string obtained by parsing the graphic identification code.

[0056] Specifically, after the smart device or system generates a request string about the encrypted information locally, it can further convert it into the form of a graphic identification code (such as a QR code) and display it. Since the request string can be a URL string carrying the encrypted information, the user can automatically connect to the URL corresponding to the graphic identification code by using a mobile terminal to scan and parse the graphic identification code, thereby directly establishing a connection with the security server and sending encrypted information; after receiving the corresponding API request, the security server can obtain the encrypted information from it, decrypt it, and feedback the login password to the target mobile terminal corresponding to the corresponding registration number.

[0057] Based on this, by scanning the code to identify the request string and automatically connecting to the security server and sending encrypted information, the flexibility of forwarding encrypted information is effectively improved, which is conducive to further improving the convenience of retrieving login passwords.

[0058] In some possible embodiments, the encrypted information is obtained by encrypting the current login password and the device identification of the target system; The security server is configured as: Receive the encrypted information forwarded by the user, parse the encrypted information to obtain the corresponding current login password and device identification; The registered terminal number bound to the device identification is obtained based on the pre-stored registration information library, and the current login password is sent to the target mobile terminal corresponding to the registered terminal number.

[0059] It should be noted that in the scenario where the smart device or system only supports single-user management, the device ID and the user are bound one-to-one, and the security server can parse and manage login passwords for different smart devices or systems through the device ID.

[0060] Specifically, after the security server parses the encrypted information forwarded by the user and obtains the corresponding current login password and device identification, it can search the pre-stored registration information library for the registration terminal number bound to the device identification, and send the current login password to the corresponding target mobile terminal based on the registration terminal number. If the user holds the target mobile terminal corresponding to the registration terminal number, the user can obtain the current login password fed back by the security server through the target mobile terminal. The registration information library stores information on different device identifications and their corresponding binding registration terminal numbers.

[0061] In some possible embodiments, in a scenario where the smart device or system supports multi-user management, multiple user accounts may be registered and bound to the same device identifier.

[0062] Specifically, when registering an administrator account, it is necessary to add a user name (user account) field. Based on this, the registration information library can store the registration terminal number information of different device identifiers and their corresponding bound different user names. Accordingly, in the process of retrieving the login password, when the user initiates a login password acquisition request for the target system, he needs to enter the username field, and then the smart device or system encrypts the username, device identifier and the corresponding current login password (corresponding to the username) to generate encrypted information; after the security server decrypts and obtains the username, device identifier and the corresponding current login password, it first searches for the registration terminal number information of the corresponding user and device in the pre-stored registration information library according to the username and device identifier, and sends the current login password based on the registration terminal number.

[0063] Based on this, by setting up a registration information library to bind and store the registration information of different devices and different accounts, it is possible to manage login passwords for different devices and different user accounts, thereby further improving the flexibility of smart device login authentication.

[0064] In some possible embodiments, the encrypted information is obtained by encrypting the current login password and the target terminal number preset in the target system; The security server is configured as: Receive the encrypted information forwarded by the user, parse the encrypted information to obtain the corresponding current login password and target terminal number; The current login password is sent to the target mobile terminal corresponding to the target terminal number.

[0065] It should be noted that, in some possible embodiments, in addition to encrypting the device identification and forwarding it to the security server and having the security server determine the target mobile terminal based on the decrypted device identification, it is also possible to directly obtain the target terminal number corresponding to the pre-stored administrator on the smart device or local system, and encrypt the target terminal number together with the current login password so that the user can forward the encrypted information to the security server. In this way, after receiving and parsing the encrypted information, the security server can directly feedback the current login password to the corresponding target mobile terminal according to the target terminal number.

[0066] Among them, the smart device or system can pre-store one or more terminal numbers corresponding to administrators locally. In the case where terminal numbers corresponding to multiple administrators are pre-stored, the user can enter the user account when initiating a login password acquisition request, and then the smart device or system can obtain the target terminal number of the corresponding administrator based on the user account, which is used for encryption processing with the current login password. Accordingly, the current login password can be a randomly generated login password or a preset login password corresponding to the user account entered by the user.

[0067] In some possible embodiments, the method for authenticating and logging into the system may further include the steps of: S3, in response to the user's account registration request for the target system, obtaining the terminal number to be registered specified in the account registration request, encrypting the terminal number to be registered and the device identification of the target system to obtain registration encryption information; The security server is also configured to: Receive the registration encrypted information forwarded by the user, parse the registration encrypted information to obtain the corresponding terminal number and device identification to be registered; Authentication information is sent to the mobile terminal corresponding to the terminal number to be registered to authenticate the terminal number to be registered, and after the identity authentication is successfully passed, the terminal number to be registered and the device identification are bound and stored in the registration information library.

[0068] It should be noted that in the process of user account registration, an interactive process similar to steps S1 to S2 can be set. Specifically, when a user needs to register an administrator account for the target system, he can initiate an account registration request on the smart device or system and enter the mobile phone number he wants to register (in the scenario where the same device supports multi-user management, he also needs to enter the user name he wants to register); then the smart device or system obtains the terminal number to be registered entered by the user according to the account registration request submitted by the user, and encrypts the terminal number to be registered with the device identification of the current smart device or system to obtain the registration encryption information.

[0069] Then, the user forwards the registration encrypted information to the security server through a certain communication method (for example, sending it by connecting a URL request through a mobile terminal); illustratively, the user can forward the registration encrypted information to the security server by connecting a URL request by entering the registration encrypted information on a mobile terminal, or by using a mobile terminal to scan a QR code (converted from the registration encrypted information).

[0070] After receiving the registration encrypted information forwarded by the user, the security server decrypts the registration encrypted information using the corresponding decryption algorithm based on the encryption and decryption protocol predetermined by the smart device to obtain the terminal number and device identification to be registered; then, exemplarily, the security server can send a random verification code to the corresponding target mobile terminal based on the terminal number to be registered, and at the same time return a verification page for entering the verification code based on the link through which the user forwarded the registration encrypted information; if the user holds the terminal number to be registered to the corresponding target mobile terminal, the target mobile terminal can receive the random verification code and enter the verification code on the verification page, and submit the verification code to the security server; finally, the security server compares the verification code entered by the user with the previously generated random verification code to authenticate the identity of the current registered user, and after the authentication is successful, the terminal number to be registered and the device identification requested by the user are bound and stored in the registration information library.

[0071] In some possible embodiments, in step S1, in response to a user's request to obtain a login password for a target system, obtaining a current login password for the target system, and encrypting the current login password to obtain encrypted information may include: S111, in response to a user's request for obtaining a login password for a target system, obtaining a preset login password corresponding to the target account based on the target account specified in the request for obtaining the login password, as the current login password of the target system; S112: Encrypt the target account and the current login password to obtain encrypted information.

[0072] It should be noted that, when the smart device or system responds to the user's request to obtain the login password of the target system, the pre-set and recorded login password may be used as the current login password of the target system.

[0073] Specifically, in scenarios where a smart device or system supports co-management of multiple user accounts, different users can register and set a corresponding login password for the same smart device or system. When a user forgets a password and needs to retrieve it, the user can enter the user name (target account) they registered when initiating a login password acquisition request. The smart device or system can then obtain the corresponding pre-recorded preset login password based on the target account as the current login password for the target system. After the password is encrypted and the security server decrypts the password, the user can retrieve the login password they previously set and use it to log in to the target system.

[0074] Based on this, by implementing login authentication of smart devices in the manner of retrieving passwords, login authentication in multi-user account management scenarios can be achieved, further improving the convenience of users logging into smart devices or systems when they forget their login passwords.

[0075] In some possible embodiments, in step S1, in response to a user's request to obtain a login password for a target system, obtaining a current login password for the target system may include: S121. In response to a user's request to obtain a login password for a target system, a random login password is generated based on a preset random algorithm as a current login password for the target system.

[0076] It should be noted that when a user forgets his password, in addition to logging into the target system by retrieving the password, he can also log in to the target system by obtaining a random password.

[0077] Specifically, when responding to a user's request to obtain a login password for a target system, the smart device or system can generate a random login password based on a preset random algorithm as the current login password for the target system. In this way, the smart device or system does not need to distinguish between different user accounts to retrieve passwords, but instead uniformly uses random passwords to implement system login authentication, further improving the convenience of users logging into the smart device or system when they forget their login passwords; at the same time, by randomly generating passwords, it avoids the situation where the preset password is cracked or stolen by other users, thereby further improving the security of the smart device or system login authentication.

[0078] In some possible embodiments, the method for authenticating and logging into the system may further include the steps of: S4. After the random login password is generated, if a login password to be authenticated that is consistent with the random login password is not received within a preset valid time, the current login password of the target system is reset.

[0079] It should be noted that in the scenario where a random login password is used for login authentication, in order to further improve the security of login authentication, a valid login time limit may also be set.

[0080] Specifically, the timing starts each time a random login password is generated. If the login is not successfully authenticated within the preset valid time, that is, if a login password to be authenticated that is consistent with the current random login password is not received within the preset valid time, the current login password of the target system is reset.

[0081] Resetting the current login password of the target system may be to regenerate a random login password and use the new random login password as the current login password, or to reset the current login password of the target system to a preset fixed password. In this case, even if the user obtains the previously generated random login password, he or she cannot pass the authentication of the target system. If the user wants to retrieve the password to log in to the system again, he or she needs to initiate the process of obtaining the login password again.

[0082] Based on this, by configuring a validity period for the random login password and invalidating the current random login password when the authentication fails after a timeout, the security of the smart device or system login authentication is further improved.

[0083] In some possible embodiments, the method for authenticating and logging into the system may further include the steps of: S5. If the number of times that the authentication of the login password to be authenticated input by the user based on the current login password fails exceeds a preset number threshold, the user's login account is locked.

[0084] It should be noted that in order to prevent brute force cracking, a login authentication protection policy can also be set. Specifically, after the user initiates the password retrieval process, if the number of authentication failures based on the same current login password for the login password to be authenticated entered by the user exceeds the preset limit, the user's login account will be locked.

[0085] Optionally, after the user's login account is locked, a preset lockout period can be set, such as three days, during which the user can no longer use the login account to log in to the system. In addition, an unlocking function for locked accounts can be set. After the user's login account is locked, the user can request authentication and unlocking through other more advanced security verification methods (such as manual appeal, etc.).

[0086] Based on this, by locking the user account that has exceeded the limit of consecutive authentication failures, brute force cracking can be effectively prevented, thereby further improving the security of smart device or system login authentication.

[0087] In some possible embodiments, in step S1, encrypting the current login password to obtain encrypted information may include: Select a target encryption rule from a plurality of preset encryption rules to encrypt the current login password, obtain encrypted information, and record the encryption identifier corresponding to the target encryption rule; Step S101, generating a request string based on the encrypted information and a preset request interface, so that the user can forward the encrypted information to the security server based on the request string, specifically: Generate a request string based on the encryption information, the encryption identifier and a preset request interface, so that the user can forward the encryption information and the encryption identifier to the security server based on the request string; The security server is configured as: Receive the encrypted information and encryption identifier forwarded by the user, obtain the corresponding target decryption rule based on the encryption identifier, parse the encrypted information based on the target decryption rule to obtain the corresponding current login password; and feed back the current login password to the user.

[0088] It should be noted that each time encryption is performed, one of the multiple locally preset encryption rules (or algorithms) can be selected, and then the user forwards the currently used encryption rule information (encryption identifier) ​​together with the encrypted information to the security server, so that the security server obtains the corresponding decryption rule (or algorithm) according to the encryption identifier to decrypt the current encrypted information.

[0089] Based on this, by using different encryption rules to encrypt information such as the login password during the password retrieval process, the security of the user logging into the smart device or system when the login password is forgotten is further improved.

[0090] like Figure 2 As shown, the method of authenticating and logging into the system of an embodiment of the present application exemplarily mainly involves the interaction between the following three parts: a smart device or system, a mobile phone, and a security server.

[0091] As an example, the authentication login system method of the embodiment of the present application can be implemented by the following steps: 1. In response to the password retrieval request initiated by the user, the program in the smart device or system randomly generates a login password, and then encrypts the login password and the device ID (or mobile phone number) to obtain an encrypted string; 2. Use the encrypted string as an API parameter, and combine the API parameter with the request API corresponding to the security server to form a request URL string that is sent to the security server; 3. Convert the request URL string into a QR code and display it on the Web; 4. The user (administrator) scans the QR code with a mobile phone; 5. After the mobile phone scans the QR code, it automatically connects to the corresponding URL and transmits the corresponding encrypted string to the security server; 6. After receiving the corresponding API request, the security server obtains the encrypted string from the request and then decrypts it to obtain the device ID (or mobile phone number) and login password; 7. The security server notifies the administrator of the login password through a reliable channel; for example, obtaining the pre-registered mobile phone number based on the device identifier (or directly parsing the encrypted string to obtain the mobile phone number), and then sending a text message to the mobile phone with the mobile phone number to inform the login password; or, after confirming the administrator's identity, verbally notifying, etc.; 8. After receiving the login password, the administrator uses this login password to log in to the smart device or system; 9. After receiving the login password entered by the administrator, the smart device or system compares it with the previously determined login password. If the comparison is consistent, the authentication is successful and the administrator is allowed to log in to the system, otherwise the login is denied.

[0092] Please refer to Figure 3 , Figure 3 The following is a block diagram showing the composition of the authentication login system provided by some embodiments of the present application. It should be understood that the authentication login system is similar to the above-mentioned Figure 1 Corresponding to the method embodiment, the various steps involved in the above method embodiment can be executed. The specific functions of the device of the authentication and login system can be found in the description above. To avoid repetition, the detailed description is appropriately omitted here.

[0093] Figure 3 The device of the authentication login system includes at least one software function module that can be stored in a memory in the form of software or firmware or fixed in the device of the authentication login system, and the device of the authentication login system includes: The password encryption module 310 is used to respond to the user's request for obtaining the login password of the target system, obtain the current login password of the target system, and encrypt the current login password to obtain encrypted information; The login authentication module 320 is used to receive the login password to be authenticated input by the user, authenticate the login password to be authenticated based on the current login password, and determine whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds it back.

[0094] It can be understood that the above-mentioned device item embodiment corresponds to the method item embodiment of the present invention. The device of an authentication login system provided by the embodiment of the present invention can implement the authentication login system method provided by any method item embodiment of the present invention.

[0095] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0096] like Figure 4 As shown, some embodiments of the present application provide an electronic device 400, which includes: a memory 410, a processor 420, and a computer program stored in the memory 410 and executable on the processor 420, wherein the processor 420 reads the program from the memory 410 through a bus 430 and executes the program to implement the method of any embodiment included in the method of the above-mentioned authentication login system.

[0097] Processor 420 can process digital signals and can include various computing structures, such as complex instruction set computer structure, reduced instruction set computer structure, or a structure that implements a combination of multiple instruction sets. In some examples, processor 420 can be a microprocessor.

[0098] The memory 410 may be used to store instructions executed by the processor 420 or data related to the execution of instructions. These instructions and / or data may include codes for implementing some or all functions of one or more modules described in the embodiments of the present application. The processor 420 of the disclosed embodiment may be used to execute instructions in the memory 410 to implement the method shown above. The memory 410 includes a dynamic random access memory, a static random access memory, a flash memory, an optical memory, or other memory known to those skilled in the art.

[0099] Some embodiments of the present application further provide a computer-readable storage medium having a computer program stored thereon. The computer program is executed by a processor to execute the method described in the method embodiment.

[0100] Some embodiments of the present application further provide a computer program product, which, when executed on a computer, enables the computer to execute the method described in the method embodiment.

[0101] It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the embodiments can be referred to each other. For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0102] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0103] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0104] If the function is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, and other media that can store program codes.

[0105] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0106] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0107] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A method for authenticating and logging into a system, characterized in that: include: In response to a user's request for obtaining a login password for a target system, obtaining a current login password for the target system, and encrypting the current login password to obtain encrypted information; receiving a login password to be authenticated input by the user, authenticating the login password to be authenticated based on the current login password, and determining whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds back the encrypted information.

2. The method for authenticating and logging into a system according to claim 1, characterized in that: Before receiving the login password to be authenticated input by the user, the method further includes: A request string is generated based on the encrypted information and a preset request interface, so that the user can forward the encrypted information to the security server based on the request string.

3. The method for authenticating and logging into a system according to claim 2, characterized in that: The generating a request string based on the encrypted information and a preset request interface, so that the user forwards the encrypted information to the security server based on the request string, includes: A request string is generated based on the encrypted information and a preset request interface, and the request string is converted into a graphic identification code so that after the user scans the graphic identification code through a mobile terminal held by the user, the encrypted information is forwarded to the security server based on the request string obtained by parsing the graphic identification code.

4. The method for authenticating and logging into a system according to claim 1, characterized in that: The encrypted information is obtained by encrypting the current login password and the device identification of the target system; The security server is configured to: Receiving the encrypted information forwarded by the user, parsing the encrypted information to obtain the corresponding current login password and device identification; A registration terminal number bound to the device identification is acquired based on a pre-stored registration information database, and the current login password is sent to a target mobile terminal corresponding to the registration terminal number.

5. The method for authenticating and logging into a system according to claim 1, characterized in that: The encrypted information is obtained by encrypting the current login password and the target terminal number preset in the target system; The security server is configured to: Receiving the encrypted information forwarded by the user, parsing the encrypted information to obtain the corresponding current login password and target terminal number; The current login password is sent to a target mobile terminal corresponding to the target terminal number.

6. The method for authenticating and logging into a system according to claim 4, characterized in that: Also includes: In response to a user's account registration request for the target system, obtaining a terminal number to be registered specified in the account registration request, and encrypting the terminal number to be registered and a device identifier of the target system to obtain registration encryption information; The security server is also configured to: Receiving the registration encrypted information forwarded by the user, parsing the registration encrypted information to obtain the corresponding terminal number and device identification to be registered; Authentication information is sent to a mobile terminal corresponding to the terminal number to be registered to perform identity authentication on the terminal number to be registered, and after the identity authentication is successfully passed, the terminal number to be registered and the device identification are bound and stored in the registration information library.

7. The method for authenticating and logging into a system according to claim 1, characterized in that: The step of obtaining the current login password of the target system in response to a user's request for obtaining the login password of the target system, and encrypting the current login password to obtain encrypted information includes: In response to a user's request for obtaining a login password for a target system, obtaining a preset login password corresponding to the target account based on the target account specified in the request for obtaining the login password as the current login password for the target system; The target account number and the current login password are encrypted to obtain encrypted information.

8. The method for authenticating and logging into a system according to claim 1, characterized in that: The step of obtaining the current login password of the target system in response to a user's request for obtaining the login password of the target system includes: In response to a user's request to obtain a login password for a target system, a random login password is generated based on a preset random algorithm as a current login password for the target system.

9. The method for authenticating and logging into a system according to claim 8, characterized in that: Also includes: After the random login password is generated, if a login password to be authenticated that is consistent with the random login password is not received within a preset valid time period, the current login password of the target system is reset.

10. The method for authenticating and logging into a system according to claim 1, characterized in that: Also includes: If the number of times that the authentication of the login password to be authenticated input by the user based on the current login password fails exceeds a preset number threshold, the login account of the user is locked.

11. The method for authenticating and logging into a system according to claim 2, characterized in that: The step of encrypting the current login password to obtain encrypted information includes: Select a target encryption rule from a plurality of preset encryption rules to encrypt the current login password to obtain encrypted information, and record an encryption identifier corresponding to the target encryption rule; The generating a request string based on the encrypted information and a preset request interface, so that the user forwards the encrypted information to the security server based on the request string, is specifically: Generate a request string based on the encryption information, the encryption identifier and a preset request interface, so that the user can forward the encryption information and the encryption identifier to the security server based on the request string; The security server is configured to: Receive the encrypted information and the encryption identifier forwarded by the user, obtain the corresponding target decryption rule based on the encryption identifier, parse the encrypted information based on the target decryption rule to obtain the corresponding current login password, and feed back the current login password to the user.

12. A device for authenticating and logging into a system, characterized in that: include: A password encryption module, used to respond to a user's request for obtaining a login password for a target system, obtain a current login password for the target system, and encrypt the current login password to obtain encrypted information; A login authentication module, configured to receive a login password to be authenticated input by the user, authenticate the login password to be authenticated based on the current login password, and determine whether to allow the user to log in to the target system according to the authentication result; The login password to be authenticated is obtained after the user forwards the encrypted information to the security server and the security server parses the encrypted information and feeds back the encrypted information.

13. An electronic device, characterized in that: It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor can implement the method of the authentication login system described in any one of claims 1-11 when executing the program.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method of the authentication and login system as described in any one of claims 1 to 11 is executed.

Images