Two-factor authentication method, system, device, medium and computer program product

Abstract

The invention provides a two-factor authentication method, system and device, a medium and a computer program product. The method comprises the following steps: configuring various two-factor authentication modes of various third-party industrial control applications; monitoring a window event of the target third-party industrial control application; identifying a target authentication event of the target third-party industrial control application according to the window event; obtaining a target two-factor authentication mode corresponding to the target third-party industrial control application; and performing two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result. According to the invention, various two-factor authentication modes of various third-party industrial control applications are configured; and identifying the corresponding target authentication event according to the monitored window event of the target third-party industrial control application, and performing two-factor authentication on the target authentication event according to the obtained target two-factor authentication mode corresponding to the target third-party industrial control application to obtain the authentication result, thereby realizing the two-factor authentication of the third-party industrial control system. And the efficiency and the accuracy of two-factor authentication are improved.

Description

Technical Field

[0001] The present disclosure relates to the field of industrial control security technology, and in particular to a two-factor authentication method, system, device, medium and computer program product. Background Art

[0002] At present, in industrial control scenarios, both equipment and applications need to comply with the "GBT 22239-2018 Information Security Technology Network Security Level Protection Basic Requirements". The third-level standard requirements mentioned in this requirement are "using passwords, cryptographic technology, biometric technology and other two or more combined identification technologies to authenticate users, and at least one of the identification technologies should be implemented using cryptographic technology" to ensure the effectiveness and stability of functions in the industrial control field.

[0003] However, the original old machines and their industrial control applications have not been used for a long time and have not been upgraded. The authentication of many Windows industrial control applications cannot support two-factor authentication and do not meet the requirements of level protection. Summary of the invention

[0004] The technical problem to be solved by the present disclosure is to overcome the defect that old industrial control applications in the prior art cannot support two-factor authentication, and to provide a two-factor authentication method, system, device, medium and computer program product.

[0005] The present invention solves the above technical problems through the following technical solutions:

[0006] A first aspect of the present disclosure provides a two-factor authentication method, comprising:

[0007] Configure various two-factor authentication modes for various third-party industrial control applications;

[0008] Monitor window events of target third-party industrial control applications;

[0009] Identifying a target authentication event of the target third-party industrial control application according to the window event;

[0010] Obtaining a target two-factor authentication mode corresponding to the target third-party industrial control application;

[0011] Perform two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result.

[0012] Preferably, it also includes:

[0013] Obtain authentication events of various third-party industrial control applications and obtain various authentication events;

[0014] Generate an authentication knowledge base according to the various authentication events;

[0015] The steps of configuring various two-factor authentication modes for various third-party industrial control applications include:

[0016] Various two-factor authentication modes for various third-party industrial control applications are configured according to the authentication knowledge base.

[0017] Preferably, the step of acquiring a target two-factor authentication mode corresponding to the target third-party industrial control application includes:

[0018] A target two-factor authentication mode corresponding to the target third-party industrial control application is acquired according to the authentication knowledge base.

[0019] Preferably, it also includes:

[0020] When the authentication result includes that both two-factor authentication are passed, the target authentication event is confirmed to be a security event.

[0021] Preferably, it also includes:

[0022] In a case where the authentication result includes at least one failure in the two-factor authentication, the target authentication event is confirmed to be an unsafe event, and the target authentication event is intercepted.

[0023] Preferably, the two-factor authentication mode includes a combination of username and password authentication and biometric authentication or a combination of username and password and Ukey (a hardware device connected to a computer via a USB interface) authentication;

[0024] and / or,

[0025] The target authentication event includes at least one of a user name input box, a password input box, a type of a submit control, and a name of a submit control.

[0026] A second aspect of the present disclosure provides a two-factor authentication system, comprising:

[0027] Configuration module, used to configure various two-factor authentication modes for various third-party industrial control applications;

[0028] A monitoring module, used to monitor window events of target third-party industrial control applications;

[0029] An identification module, configured to identify a target authentication event of the target third-party industrial control application according to the window event;

[0030] A first acquisition module is used to acquire a target two-factor authentication mode corresponding to the target third-party industrial control application;

[0031] The two-factor authentication module is used to perform two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result.

[0032] Preferably, it also includes:

[0033] The second acquisition module is used to acquire authentication events of various third-party industrial control applications and obtain various authentication events;

[0034] A generation module, used to generate an authentication knowledge base according to the various authentication events;

[0035] The configuration module is used to configure various types of two-factor authentication modes for various types of third-party industrial control applications according to the authentication knowledge base.

[0036] Preferably, the first acquisition module is used to acquire a target two-factor authentication mode corresponding to the target third-party industrial control application according to the authentication knowledge base.

[0037] Preferably, it also includes:

[0038] The first confirmation module is used to confirm that the target authentication event is a security event when the authentication result includes that both two-factor authentication are passed.

[0039] Preferably, it also includes:

[0040] The second confirmation module is used to confirm that the target authentication event is an unsafe event and intercept the target authentication event when the authentication result includes at least one failure in the two-factor authentication.

[0041] Preferably, the two-factor authentication mode includes a combination of username and password authentication and biometric authentication or a combination of username and password and Ukey authentication;

[0042] and / or,

[0043] The target authentication event includes at least one of a user name input box, a password input box, a type of a submit control, and a name of a submit control.

[0044] A third aspect of the present disclosure provides an electronic device, including a memory, a processor, and a computer program stored in the memory and used to run on the processor, and when the processor executes the computer program, the two-factor authentication method described in the first aspect is implemented.

[0045] A fourth aspect of the present disclosure provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the two-factor authentication method described in the first aspect is implemented.

[0046] A fifth aspect of the present disclosure provides a computer program product, including a computer program, which, when executed by a processor, implements the two-factor authentication method as described in the first aspect.

[0047] On the basis of being in accordance with the common sense in the art, the above-mentioned preferred conditions can be arbitrarily combined to obtain the preferred embodiments of the present disclosure.

[0048] The positive and progressive effects of this disclosure are:

[0049] The present invention configures various two-factor authentication modes for various third-party industrial control applications; identifies corresponding target authentication events based on the monitored window events of the target third-party industrial control applications, and performs two-factor authentication on the target authentication events based on the target two-factor authentication mode corresponding to the target third-party industrial control applications to obtain authentication results, thereby realizing two-factor authentication of third-party industrial control systems and improving the efficiency and accuracy of two-factor authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is a flowchart of the two-factor authentication method provided in Example 1 of the present disclosure.

[0051] Figure 2 A schematic diagram of the modules of the two-factor authentication system provided in Embodiment 2 of the present disclosure.

[0052] Figure 3 This is a schematic diagram of the structure of an electronic device for implementing a two-factor authentication method according to Embodiment 3 of the present disclosure. DETAILED DESCRIPTION

[0053] The present disclosure is further described below by way of examples, but the present disclosure is not limited to the scope of the examples.

[0054] Prefixes such as "first" and "second" are used in the embodiments of the present disclosure only to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. The use of prefixes such as ordinal numbers to distinguish description objects in the embodiments of the present disclosure does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and no unnecessary limitation should be constituted due to the use of such prefixes. In addition, in the description of the present embodiment, unless otherwise specified, the meaning of "plurality" is two or more.

[0055] In the embodiments of the present disclosure, the collection, storage, use, processing, transmission, provision and disclosure of user personal information involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0056] Example 1

[0057] Figure 1This is a flowchart of a two-factor authentication method provided in Embodiment 1 of the present disclosure. The two-factor authentication method is applied to a third-party industrial control two-factor authentication platform. The third-party industrial control two-factor authentication platform can perform two-factor authentication on multiple third-party industrial control applications, such as Figure 1 As shown, including:

[0058] S1. Configure various two-factor authentication modes for various third-party industrial control applications;

[0059] In an optional embodiment, the two-factor authentication mode includes a combination of username and password authentication and biometric authentication or a combination of username and password and Ukey authentication.

[0060] S2, monitoring window events of the target third-party industrial control application;

[0061] S3, identifying a target authentication event of a target third-party industrial control application according to the window event;

[0062] In an optional embodiment, the target authentication event includes at least one of a user name input box, a password input box, a type of a submit control, and a name of a submit control.

[0063] S4. Obtain a target two-factor authentication mode corresponding to a target third-party industrial control application;

[0064] S5. Perform two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result.

[0065] In this embodiment, the third-party industrial control application includes an authentication client module, an operating system window event, and an authentication server module. The third-party industrial control application is responsible for receiving the user's authentication information and performing preliminary verification. Specifically, the authentication client module is responsible for receiving the user's username and password input. The authentication server module is responsible for verifying whether the username and password are correct. The operating system window event is created by the third-party industrial control application and is used to record the user's operation behavior.

[0066] This embodiment configures various types of two-factor authentication modes for various third-party industrial control applications; identifies the corresponding target authentication event based on the monitored window event of the target third-party industrial control application, and performs two-factor authentication on the target authentication event based on the target two-factor authentication mode corresponding to the target third-party industrial control application to obtain an authentication result, thereby realizing two-factor authentication of the third-party industrial control system and improving the efficiency and accuracy of two-factor authentication.

[0067] In an optional embodiment, it also includes:

[0068] Obtain authentication events of various third-party industrial control applications and obtain various authentication events;

[0069] Generate an authentication knowledge base based on various authentication events;

[0070] Step S1 includes:

[0071] Configure various two-factor authentication modes for various third-party industrial control applications based on the authentication knowledge base.

[0072] In an optional embodiment, step S4 includes:

[0073] The target two-factor authentication mode corresponding to the target third-party industrial control application is obtained according to the authentication knowledge base.

[0074] In the specific implementation process, the third-party industrial control application two-factor authentication platform includes an authentication self-learning module, an authentication configuration module, a window HOOK module, and a two-factor authentication module. The third-party industrial control application two-factor authentication platform implements the two-factor authentication function for third-party industrial control applications through the authentication self-learning module, the authentication configuration module, the window HOOK module, and the two-factor authentication module, ensuring system security.

[0075] The two-factor authentication platform for third-party industrial control applications learns authentication events through the authentication self-learning module, forms an authentication self-learning knowledge base, and configures the two-factor authentication mode. Then, the window events of the third-party industrial control application are monitored through the window HOOK module to identify the authentication events. Finally, the corresponding configured two-factor authentication mode is determined according to the authentication self-learning knowledge base, and two-factor authentication is performed to ensure the security verification of the user's identity. Specifically, the authentication self-learning module is used to learn authentication events of various third-party industrial control applications (such as user name input box, password input box, type of submission control and name of submission control) to form an authentication self-learning knowledge base. The authentication configuration module is used to automatically identify the authentication window events of the third-party industrial control application according to the authentication self-learning knowledge base, and configure the two-factor authentication mode. Specifically, the program name, window, user name, password, submission name and type are automatically identified according to the authentication self-learning knowledge base, and displayed to the interface to configure the two-factor authentication mode. The window HOOK module is used to monitor the operating system window events of the third-party industrial control application, intercept unsafe authentication events, and pop up the two-factor authentication window after the authentication is submitted. The two-factor authentication module is used to determine the configured two-factor authentication mode according to the authentication self-learning knowledge base and perform two-factor authentication.

[0076] This embodiment can automatically learn and configure two-factor authentication modes of different third-party industrial control applications through the third-party industrial control application two-factor authentication platform.

[0077] In an optional embodiment, it also includes:

[0078] When the authentication results include passing the two-factor authentication, the target authentication event is confirmed to be a security event.

[0079] In an optional embodiment, it also includes:

[0080] When the authentication result includes at least one failure in the two-factor authentication, the target authentication event is confirmed as an unsafe event, and the target authentication event is intercepted.

[0081] In this embodiment, the third-party industrial control application dual-factor authentication platform self-learns authentication events of various third-party industrial control applications, forms an authentication self-learning knowledge base, and configures a dual-factor authentication mode. Specifically:

[0082] a) Use deep learning techniques (such as convolutional neural networks) to extract features of authentication window elements, and use position recognition algorithms to determine the locations of the username input box, password input box, and login button, etc.

[0083] b) Use classification algorithms (such as support vector machines) to identify control types to improve the accuracy of type identification.

[0084] c) Use optical character recognition (OCR) technology to identify field label text to ensure the accuracy of text recognition.

[0085] d) Configure two-factor authentication mode, such as username and password authentication + biometric authentication or username and password authentication + Ukey authentication.

[0086] Furthermore, the third-party industrial control application two-factor authentication platform monitors the third-party industrial control application window events and identifies the authentication events of the third-party industrial control application, specifically:

[0087] a) The window HOOK module monitors the window events of third-party industrial control applications through the HOOK program.

[0088] b) The HOOK program defines the HOOK subprocess function, monitors authentication events, and installs the HOOK subprocess function into the Windows system dynamic linked list library.

[0089] Furthermore, the third-party industrial control application two-factor authentication platform determines the two-factor authentication mode corresponding to the third-party industrial control application through the authentication self-learning knowledge base, and performs two-factor authentication, specifically:

[0090] a) When an authentication event is detected, the two-factor authentication mode related to the third-party industrial control application is determined through the authentication self-learning knowledge base (for example, Ukey two-factor authentication requires the configuration of the binding relationship between the Ukey serial number and the user name).

[0091] b) After the third-party industrial control application submits the authentication, a two-factor authentication window pops up and authentication is performed through another authentication method (such as Ukey).

[0092] c) Return the authentication result to the third-party industrial control application, and the authentication server module determines the final authentication result.

[0093] This embodiment does not require customized development of third-party industrial control applications. It provides a two-factor authentication function by automatically learning the authentication window events of third-party industrial control applications and intercepting window login events, effectively improving the security of the industrial control system. By learning the authentication events of various third-party industrial control applications, an authentication self-learning knowledge base is formed, thereby automatically identifying and configuring the two-factor authentication mode, solving the problem that the original old industrial control applications cannot support two-factor authentication, and meeting the third-level standard requirements specified in "GBT22239-2018 Information Security Technology Network Security Level Protection Basic Requirements".

[0094] Example 2

[0095] Corresponding to the aforementioned two-factor authentication method embodiment, the present disclosure also provides an embodiment of a two-factor authentication system.

[0096] Figure 2 This is a module diagram of a two-factor authentication system provided in Embodiment 2 of the present disclosure. The two-factor authentication system is applied to a third-party industrial control two-factor authentication platform. The third-party industrial control two-factor authentication platform can perform two-factor authentication on multiple third-party industrial control applications, such as Figure 2 As shown, the system includes: a configuration module 21, a monitoring module 22, an identification module 23, a first acquisition module 24, and a two-factor authentication module 25;

[0097] Configuration module 21, used to configure various two-factor authentication modes for various third-party industrial control applications;

[0098] In an optional embodiment, the two-factor authentication mode includes a combination of username and password authentication and biometric authentication or a combination of username and password and Ukey authentication.

[0099] A monitoring module 22, used to monitor window events of a target third-party industrial control application;

[0100] An identification module 23, used to identify a target authentication event of a target third-party industrial control application according to the window event;

[0101] In an optional embodiment, the target authentication event includes at least one of a user name input box, a password input box, a type of a submit control, and a name of a submit control.

[0102] A first acquisition module 24 is used to acquire a target two-factor authentication mode corresponding to a target third-party industrial control application;

[0103] The two-factor authentication module 25 is used to perform two-factor authentication on a target authentication event according to a target two-factor authentication mode to obtain an authentication result.

[0104] In this embodiment, the third-party industrial control application includes an authentication client module, an operating system window event, and an authentication server module. The third-party industrial control application is responsible for receiving the user's authentication information and performing preliminary verification. Specifically, the authentication client module is responsible for receiving the user's username and password input. The authentication server module is responsible for verifying whether the username and password are correct. The operating system window event is created by the third-party industrial control application and is used to record the user's operation behavior.

[0105] This embodiment configures various types of two-factor authentication modes for various third-party industrial control applications; identifies the corresponding target authentication event based on the monitored window event of the target third-party industrial control application, and performs two-factor authentication on the target authentication event based on the target two-factor authentication mode corresponding to the target third-party industrial control application to obtain an authentication result, thereby realizing two-factor authentication of the third-party industrial control system and improving the efficiency and accuracy of two-factor authentication.

[0106] In an optional embodiment, it also includes:

[0107] The second acquisition module is used to acquire authentication events of various third-party industrial control applications and obtain various authentication events;

[0108] A generation module is used to generate an authentication knowledge base based on various authentication events;

[0109] The configuration module is used to configure various two-factor authentication modes for various third-party industrial control applications based on the authentication knowledge base.

[0110] In an optional embodiment, the first acquisition module is used to acquire a target two-factor authentication mode corresponding to a target third-party industrial control application according to an authentication knowledge base.

[0111] In the specific implementation process, the third-party industrial control application two-factor authentication platform includes an authentication self-learning module, an authentication configuration module, a window HOOK module, and a two-factor authentication module. The third-party industrial control application two-factor authentication platform implements the two-factor authentication function for third-party industrial control applications through the authentication self-learning module, the authentication configuration module, the window HOOK module, and the two-factor authentication module, ensuring system security.

[0112] The two-factor authentication platform for third-party industrial control applications learns authentication events through the authentication self-learning module, forms an authentication self-learning knowledge base, and configures the two-factor authentication mode. Then, the window events of the third-party industrial control application are monitored through the window HOOK module to identify the authentication events. Finally, the corresponding configured two-factor authentication mode is determined according to the authentication self-learning knowledge base, and two-factor authentication is performed to ensure the security verification of the user's identity. Specifically, the authentication self-learning module is used to learn authentication events of various third-party industrial control applications (such as user name input box, password input box, type of submission control and name of submission control) to form an authentication self-learning knowledge base. The authentication configuration module is used to automatically identify the authentication window events of the third-party industrial control application according to the authentication self-learning knowledge base, and configure the two-factor authentication mode. Specifically, the program name, window, user name, password, submission name and type are automatically identified according to the authentication self-learning knowledge base, and displayed to the interface to configure the two-factor authentication mode. The window HOOK module is used to monitor the operating system window events of the third-party industrial control application, intercept unsafe authentication events, and pop up the two-factor authentication window after the authentication is submitted. The two-factor authentication module is used to determine the configured two-factor authentication mode according to the authentication self-learning knowledge base and perform two-factor authentication.

[0113] This embodiment can automatically learn and configure two-factor authentication modes of different third-party industrial control applications through the third-party industrial control application two-factor authentication platform.

[0114] In an optional embodiment, it also includes:

[0115] The first confirmation module is used to confirm that the target authentication event is a security event when the authentication result includes that both the two-factor authentication are passed.

[0116] In an optional embodiment, it also includes:

[0117] The second confirmation module is used to confirm that the target authentication event is an unsafe event and intercept the target authentication event when the authentication result includes at least one failure in the two-factor authentication.

[0118] In this embodiment, the third-party industrial control application dual-factor authentication platform self-learns authentication events of various third-party industrial control applications, forms an authentication self-learning knowledge base, and configures a dual-factor authentication mode. Specifically:

[0119] a) Use deep learning techniques (such as convolutional neural networks) to extract features of authentication window elements, and use position recognition algorithms to determine the locations of the username input box, password input box, and login button, etc.

[0120] b) Use classification algorithms (such as support vector machines) to identify control types to improve the accuracy of type identification.

[0121] c) Use optical character recognition (OCR) technology to identify field label text to ensure the accuracy of text recognition.

[0122] d) Configure two-factor authentication mode, such as username and password authentication + biometric authentication or username and password authentication + Ukey authentication.

[0123] Furthermore, the third-party industrial control application two-factor authentication platform monitors the third-party industrial control application window events and identifies the authentication events of the third-party industrial control application, specifically:

[0124] a) The window HOOK module monitors the window events of third-party industrial control applications through the HOOK program.

[0125] b) The HOOK program defines the HOOK subprocess function, monitors authentication events, and installs the HOOK subprocess function into the Windows system dynamic linked list library.

[0126] Furthermore, the third-party industrial control application two-factor authentication platform determines the two-factor authentication mode corresponding to the third-party industrial control application through the authentication self-learning knowledge base, and performs two-factor authentication, specifically:

[0127] a) When an authentication event is detected, the two-factor authentication mode related to the third-party industrial control application is determined through the authentication self-learning knowledge base (for example, Ukey two-factor authentication requires the configuration of the binding relationship between the Ukey serial number and the user name).

[0128] b) After the third-party industrial control application submits the authentication, a two-factor authentication window pops up and authentication is performed through another authentication method (such as Ukey).

[0129] c) Return the authentication result to the third-party industrial control application, and the authentication server module determines the final authentication result.

[0130] This embodiment does not require customized development of third-party industrial control applications. It provides a two-factor authentication function by automatically learning the authentication window events of third-party industrial control applications and intercepting window login events, effectively improving the security of the industrial control system. By learning the authentication events of various third-party industrial control applications, an authentication self-learning knowledge base is formed, thereby automatically identifying and configuring the two-factor authentication mode, solving the problem that the original old industrial control applications cannot support two-factor authentication, and meeting the third-level standard requirements specified in "GBT22239-2018 Information Security Technology Network Security Level Protection Basic Requirements".

[0131] As for the system embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The system embodiment described above is only illustrative, wherein the units described as separate components may or may not be physically separated, and the components as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the disclosed solution.

[0132] Example 3

[0133] Figure 3 This is a schematic diagram of the structure of an electronic device shown in Embodiment 3 of the present disclosure. The electronic device includes a memory, a processor, and a computer program stored in the memory and used to run on the processor. When the processor executes the computer program, the two-factor authentication method described in any of the above embodiments is implemented. Figure 3 The electronic device 90 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0134] like Figure 3 As shown, the electronic device 90 may be in the form of a general-purpose computing device, for example, it may be a server device. The components of the electronic device 90 may include, but are not limited to: at least one processor 91, at least one memory 92, and a bus 93 connecting different system components (including the memory 92 and the processor 91).

[0135] The bus 93 includes a data bus, an address bus, and a control bus.

[0136] The memory 92 may include a volatile memory, such as a random access memory (RAM) 921 and / or a cache memory 922 , and may further include a read only memory (ROM) 923 .

[0137] The memory 92 may also include a program tool 925 (or utility) having a set (at least one) of program modules 924, such program modules 924 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0138] The processor 91 executes various functional applications and data processing by running the computer program stored in the memory 92, such as the two-factor authentication method provided in any of the above embodiments.

[0139] The electronic device 90 may also communicate with one or more external devices 94 (e.g., keyboards, pointing devices, etc.). Such communication may be performed via an input / output (I / O) interface 95. Furthermore, the electronic device 90 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via a network adapter 96. Figure 3 As shown, the network adapter 96 communicates with other modules of the electronic device 90 via the bus 93. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in conjunction with the electronic device 90, including but not limited to: microcode, device drivers, redundant processors, external disk drive arrays, RAID (disk array) systems, tape drives, and data backup storage systems, etc.

[0140] It should be noted that although several units / modules or sub-units / modules of the electronic device are mentioned in the above detailed description, this division is merely exemplary and not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more units / modules described above can be embodied in one unit / module. Conversely, the features and functions of one unit / module described above can be further divided into multiple units / modules to be embodied.

[0141] Example 4

[0142] Embodiment 4 of the present disclosure further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the two-factor authentication method provided in any of the above embodiments is implemented.

[0143] The readable storage medium may include but is not limited to: a portable disk, a hard disk, a random access memory, a read-only memory, an erasable programmable read-only memory, an optical storage device, a magnetic storage device or any suitable combination of the above.

[0144] Example 5

[0145] Embodiment 5 of the present disclosure further provides a computer program product, including a computer program, which implements any of the above-mentioned two-factor authentication methods when executed by a processor.

[0146] Among them, the program code for executing the computer program product of the present disclosure can be written in any combination of one or more programming languages, and the program code can be executed completely on the user device, partially on the user device, as an independent software package, partially on the user device and partially on a remote device, or completely on the remote device.

[0147] Although the specific embodiments of the present disclosure are described above, those skilled in the art should understand that this is only an example, and the protection scope of the present disclosure is defined by the appended claims. Those skilled in the art may make various changes or modifications to these embodiments without departing from the principles and essence of the present disclosure, but these changes and modifications all fall within the protection scope of the present disclosure.

Claims

1. A two-factor authentication method, characterized in that: include: Configure various two-factor authentication modes for various third-party industrial control applications; Monitor window events of target third-party industrial control applications; Identifying a target authentication event of the target third-party industrial control application according to the window event; Obtaining a target two-factor authentication mode corresponding to the target third-party industrial control application; Perform two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result.

2. The two-factor authentication method according to claim 1, wherein: Also includes: Obtain authentication events of various third-party industrial control applications and obtain various authentication events; Generate an authentication knowledge base according to the various authentication events; The steps of configuring various two-factor authentication modes for various third-party industrial control applications include: Various two-factor authentication modes for various third-party industrial control applications are configured according to the authentication knowledge base.

3. The two-factor authentication method according to claim 2, wherein: The step of obtaining a target two-factor authentication mode corresponding to the target third-party industrial control application includes: A target two-factor authentication mode corresponding to the target third-party industrial control application is acquired according to the authentication knowledge base.

4. The two-factor authentication method according to claim 1, wherein: Also includes: When the authentication result includes that both two-factor authentication are passed, the target authentication event is confirmed to be a security event.

5. The two-factor authentication method according to claim 1, wherein: Also includes: In a case where the authentication result includes at least one failure in the two-factor authentication, the target authentication event is confirmed to be an unsafe event, and the target authentication event is intercepted.

6. The two-factor authentication method according to claim 1, wherein: The two-factor authentication mode includes a combination of username and password authentication and biometric authentication or a combination of username and password and Ukey authentication; and / or, The target authentication event includes at least one of a user name input box, a password input box, a type of a submit control, and a name of a submit control.

7. A two-factor authentication system, characterized in that: include: Configuration module, used to configure various two-factor authentication modes for various third-party industrial control applications; A monitoring module, used to monitor window events of target third-party industrial control applications; An identification module, used for identifying a target authentication event of the target third-party industrial control application according to the window event; A first acquisition module is used to acquire a target two-factor authentication mode corresponding to the target third-party industrial control application; The two-factor authentication module is used to perform two-factor authentication on the target authentication event according to the target two-factor authentication mode to obtain an authentication result.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and used to run on the processor, characterized in that: When the processor executes the computer program, the two-factor authentication method according to any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the two-factor authentication method according to any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the two-factor authentication method according to any one of claims 1 to 6 is implemented.

Images