Login verification method and device based on Ukey, equipment, medium and program product

Abstract

The present invention relates to the technical field of data security, and discloses a Ukey-based login verification method, apparatus and device, a medium and a program product, the method comprising: responding to an unlocking request sent by a terminal to be logged in, the unlocking request carrying Ukey key information; performing secret key verification on the unlocking request; and under the condition that the secret key verification is successful, generating an unlocking secret key, and sending the unlocking secret key to a mobile terminal bound with the to-be-logged-in terminal, so that the mobile terminal unlocks the to-be-logged-in terminal. According to the invention, a dual verification mechanism is adopted, namely, the validity of the Ukey is verified firstly, and then the unlocking key is sent to the mobile phone, so that the safety and reliability of the unlocking process are further ensured.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a Ukey-based login verification method, device, equipment, medium and program product. Background Art

[0002] With the continuous development of information technology, security issues such as protecting personal information security and preventing identity theft are increasingly valued. In a network environment, remote unlocking or verification strategies are one of the important means to ensure user identity and data security. At present, mainstream remote unlocking or verification strategies include SMS verification codes, email verification, and two-factor authentication.

[0003] However, traditional remote unlocking or verification strategies have some security risks. For example, SMS verification codes are vulnerable to counterfeiting or theft, email verification may be hacked, and two-factor authentication may also be intercepted. These security risks may lead to the leakage of users' personal information, account theft, and other problems, posing a serious threat to users' information security.

[0004] Therefore, there is an urgent need for a new verification method with higher security and confidentiality to better protect the personal information security of users. Summary of the invention

[0005] In view of this, the present invention provides a login verification method based on Ukey to provide a new verification method with higher security and confidentiality.

[0006] In a first aspect, the present invention provides a login verification method based on Ukey, the method comprising:

[0007] Respond to the unlock request sent by the terminal to be logged in, the unlock request carries the Ukey key information;

[0008] Perform key verification on unlock request;

[0009] When the secret key verification is successful, an unlocking key is generated and sent to the mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in.

[0010] Compared with traditional remote unlocking or verification strategies, this method can better protect users' personal information security, reduce the risk of information leakage and identity theft, ensure the security of user data and devices, and provide users with a more secure and reliable verification experience.

[0011] In an optional implementation, performing key verification on the unlock request includes:

[0012] Determine whether the device information contained in the Ukey key information exists in the pre-set authorized device list;

[0013] If the device information included in the Ukey key information exists in the preset authorized device list, determine whether the Ukey key information is within the preset validity period;

[0014] When the Ukey key information is within the preset validity period, the Ukey key information is dynamically verified.

[0015] In this embodiment, after the remote server receives the Ukey key information sent by the terminal, it immediately verifies the key. The verification process strictly follows the security principle, including the inspection of the legality and validity of the key, effectively ensuring the legality and security of the unlocking request. That is, the legality, validity and security of the Ukey key information are verified at multiple levels, providing a comprehensive security protection level, effectively preventing unauthorized access and key abuse, and improving the overall security and reliability of verification.

[0016] In an optional implementation, dynamically verifying the Ukey key information includes:

[0017] Generate a random challenge string and share it with the terminal to be logged in;

[0018] Perform a hash operation based on the Ukey key information and the challenge string to obtain a first verification result;

[0019] Compare the first verification result with the second verification result, wherein the second verification result is a verification result obtained by performing a hash operation on the terminal to be logged in based on the Ukey key information and the challenge string;

[0020] If the comparison results are consistent, it is confirmed that the key verification is successful.

[0021] In this embodiment, each verification uses randomly generated new challenge data. By using a randomly generated challenge string and hash operation, replay attacks and data tampering can be effectively prevented, thereby ensuring the effectiveness and security of key verification.

[0022] In an optional implementation, generating an unlocking key includes:

[0023] Randomly generate an unlock string;

[0024] The unlocking string is encrypted using a symmetric encryption algorithm to obtain an encrypted unlocking string;

[0025] Add a digital signature to the encrypted unlock string to generate an unlock key.

[0026] In this embodiment, the unlocking key is generated by randomly generating an unlocking string, encrypting it, and adding a digital signature, which provides high security and tamper resistance. Encryption protects the confidentiality of the data, while the digital signature ensures the integrity and source of the unlocking key. That is, after the key verification is successful, the remote server generates a secure unlocking key. The key generation process uses a high-intensity encryption algorithm and random factors to ensure the uniqueness and difficulty of cracking the key.

[0027] In a second aspect, the present invention provides a login verification method based on Ukey, the method is applied to a terminal to be logged in, and the method includes:

[0028] Send an unlock request to the server. The unlock request carries the Ukey key information. The server verifies the unlock request. If the key verification is successful, it generates an unlock key and sends the unlock key to the mobile terminal bound to the terminal to be logged in.

[0029] Receive the unlock request sent by the mobile terminal after confirming the unlock key.

[0030] The terminal unlocking method based on the Ukey key provided in this embodiment is highly secure and easy to operate, effectively preventing problems such as password leakage and data leakage, and improving the security and user experience of the terminal device.

[0031] In a third aspect, the present invention provides a login verification device based on Ukey, the device is applied to a server, and the device includes:

[0032] The response module is used to respond to the unlock request sent by the terminal to be logged in, and the unlock request carries the Ukey key information;

[0033] Verification module, used to verify the key of the unlock request;

[0034] The generation module is used to generate an unlocking key when the secret key verification is successful, and send the unlocking key to the mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in.

[0035] In a fourth aspect, the present invention provides a Ukey-based login verification device, which is applied to a terminal to be logged in, and includes:

[0036] The sending module is used to send an unlock request to the server. The unlock request carries the Ukey key information. The server performs key verification on the unlock request. If the key verification is successful, an unlock key is generated and sent to the mobile terminal bound to the terminal to be logged in;

[0037] The receiving module is used to receive the unlocking request sent by the mobile terminal after confirming the unlocking key.

[0038] In a fifth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the Ukey-based login verification method of the above-mentioned first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0039] In a sixth aspect, the present invention provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute the Ukey-based login verification method of the above-mentioned first aspect or any corresponding embodiment thereof.

[0040] In a seventh aspect, the present invention provides a computer program product, comprising computer instructions, which are used to enable a computer to execute the Ukey-based login verification method of the above-mentioned first aspect or any corresponding embodiment thereof.

[0041] It should be noted that the Ukey-based login verification device, computer device and computer-readable storage medium provided by the present invention correspond to the Ukey-based login verification method described above. Therefore, for the beneficial effects of the Ukey-based login verification device, computer device and computer-readable storage medium, please refer to the description of the corresponding beneficial effects of the Ukey-based login verification method above, which will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 is a flowchart of a login verification method based on Ukey according to an embodiment of the present invention;

[0044] Figure 2 is a flowchart of another Ukey-based login verification method according to an embodiment of the present invention;

[0045] Figure 3 is a flowchart of another Ukey-based login verification method according to an embodiment of the present invention;

[0046] Figure 4 is a structural block diagram of a login verification device based on Ukey according to an embodiment of the present invention;

[0047] Figure 5is a structural block diagram of another Ukey-based login verification device according to an embodiment of the present invention;

[0048] Figure 6 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0050] According to an embodiment of the present invention, a Ukey-based login verification method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0051] In this embodiment, a login verification method based on Ukey is provided, which can be executed by the server. Figure 1 : is a flowchart of a login verification method based on Ukey according to an embodiment of the present invention, such as Figure 1 As shown, the process includes the following steps:

[0052] Step S101, responding to an unlock request sent by the terminal to be logged in, where the unlock request carries Ukey key information.

[0053] The terminal to be logged in is generally a terminal device that the user needs to log in, such as a desktop computer, laptop computer, tablet computer, or any control device that needs to be unlocked. Ukey is a digital key, and it is usually a physical device with an independent encryption chip for special key generation and storage. It has high physical security, avoids the key from being exposed in an unsafe environment, and the generated key is difficult to copy and forge. In addition, Ukey generally performs one-click authentication through physical contact or short-range wireless communication, which can effectively prevent remote attacks.

[0054] When the user initiates an unlock request on the terminal to be logged in, the information carrying the Ukey key is sent to the remote server. During this process, the communication between the terminal to be logged in and the server adopts a secure encryption protocol, which can effectively ensure the security of data during transmission.

[0055] Step S102: Perform key verification on the unlock request to verify the validity of the unlock request.

[0056] Step S103, if the secret key verification is successful, an unlocking secret key is generated, and the unlocking secret key is sent to the mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in. The mobile terminal can be a mobile phone, a tablet computer, etc. When the terminal to be logged in is turned on for the first time, it can be bound to the mobile phone, and the unlocking secret key can be sent to the mobile terminal by SMS. The key sending process adopts a secure communication channel and encryption protocol to prevent the key from being intercepted or stolen. During the unlocking process, the user does not need to remember complex passwords, and only needs to receive and input the received unlocking key through the mobile phone to complete the unlocking operation. At the same time, the generation and sending process of the unlocking key is real-time, the unlocking process is fast and simple, and has a good user experience.

[0057] The complete unlocking process is as follows Figure 2 As shown, when the terminal to be logged in is turned on, it is first determined whether the terminal to be logged in is turned on for the first time. If the terminal to be logged in is turned on for the first time, the terminal to be logged in is bound to the mobile phone; if the terminal to be logged in is not turned on for the first time, if the power-on is locked or the power-on password is forgotten, an unlock request carrying the Ukey key information is sent to the remote server, and the server performs key verification. If the key verification passes, an unlock key is generated and sent to the bound mobile phone. After the mobile phone confirms, the terminal to be logged in is unlocked, otherwise it remains locked.

[0058] In this embodiment, a double verification mechanism is adopted, that is, the validity of the Ukey key is first verified, and then the unlocking key is sent to the mobile phone, ensuring the security and reliability of the unlocking process.

[0059] The SMS verification method based on Ukey can be easily integrated into existing systems and applications, without the need for additional hardware or complex installation configuration, making it easy to manage and maintain. The transmission process of the unlocking key uses a secure communication channel and encryption protocol to prevent the key from being intercepted or stolen, so that user personal information and data are fully protected.

[0060] In this embodiment, a terminal remote unlocking strategy based on Ukey is provided, and its workflow is simple and clear. The user only needs to initiate an unlocking request through the terminal, and the remote server can verify the validity of the Ukey key and generate a secure unlocking password to send to the bound mobile phone. Once the mobile phone receives the unlocking password, the user can unlock the computer. The SMS verification method based on Ukey has obvious advantages in confidentiality and information security. Compared with traditional remote unlocking or verification strategies, this method can better protect the user's personal information security, reduce the risk of information leakage and identity theft, ensure the security of user data and equipment, and provide users with a safer and more reliable verification experience.

[0061] In some optional implementations, performing key verification on the unlock request includes:

[0062] Determine whether the device information contained in the Ukey key information exists in the pre-set authorized device list. Before the terminal to be logged in is used, the terminal device will be associated with the Ukey and recorded in the authorized device list. During actual verification, a legitimacy check can be performed to ensure that the Ukey is only used on authorized devices to prevent the use of unauthorized devices.

[0063] In the case that the device information included in the Ukey key information exists in the preset authorized device list, it is determined whether the Ukey key information is within the preset validity period, and the preset validity period may be from January 1, 2024 to December 31, 2024. That is, after the legality check is correct, the validity of the Ukey key information can be further checked to prevent expired or revoked keys from being used.

[0064] When the Ukey key information is within the preset validity period, the Ukey key information is dynamically verified. Specifically, dynamic verification can be performed through a one-time password or a challenge response mechanism to ensure that the current status of the Ukey is safe and legal.

[0065] In this embodiment, after the remote server receives the Ukey key information sent by the terminal, it immediately verifies the key. The verification process strictly follows the security principle, including the inspection of the legality and validity of the key, effectively ensuring the legality and security of the unlocking request. That is, the legality, validity and security of the Ukey key information are verified at multiple levels, providing a comprehensive security protection level, effectively preventing unauthorized access and key abuse, and improving the overall security and reliability of verification.

[0066] In some optional implementations, the Ukey key information is dynamically verified, including:

[0067] A challenge string is randomly generated and shared with the terminal to be logged in.

[0068] Perform a hash operation based on the Ukey key information and the challenge string to obtain a first verification result;

[0069] Compare the first verification result with the second verification result, wherein the second verification result is a verification result obtained by performing a hash operation on the terminal to be logged in based on the Ukey key information and the challenge string;

[0070] If the comparison results are consistent, it is confirmed that the key verification is successful.

[0071] In this embodiment, the server randomly generates a challenge string and shares the challenge string with the terminal to be logged in, so that the terminal to be logged in generates a verification result based on the Ukey key information and the challenge string at the same time, and compares the verification result of the terminal to be logged in with the verification result generated by the server, thereby realizing dynamic verification. In this embodiment, each verification uses a randomly generated new challenge data. By using a randomly generated challenge string and a hash operation, replay attacks and data tampering can be effectively prevented, ensuring the effectiveness and security of key verification.

[0072] In some optional implementations, generating an unlocking key includes:

[0073] Generate the unlock string randomly. You can use a high-quality random number generator to ensure the randomness and unpredictability of the unlock key.

[0074] The unlocking string is encrypted using a symmetric encryption algorithm to obtain an encrypted unlocking string. Specifically, a high-strength symmetric encryption algorithm such as AES (Advanced Encryption Standard) can be used to encrypt and transmit the unlocking key to ensure the security of the key during transmission.

[0075] Add a digital signature to the encrypted unlock string to generate an unlock key. Use digital signature technology to verify the integrity and source of the unlock key, which can effectively prevent tampering and forgery.

[0076] In this embodiment, the unlocking key is generated by randomly generating an unlocking string, encrypting it, and adding a digital signature, which provides high security and tamper resistance. Encryption protects the confidentiality of the data, while the digital signature ensures the integrity and source of the unlocking key. That is, after the key verification is successful, the remote server generates a secure unlocking key. The key generation process uses a high-intensity encryption algorithm and random factors to ensure the uniqueness and difficulty of cracking the key.

[0077] In this embodiment, a login verification method based on Ukey is provided, which can be executed by a terminal or other device, referring to Figure 3 As shown, the process includes the following steps:

[0078] Step S201, sending an unlock request to the server, the unlock request carries Ukey key information, the server performs key verification on the unlock request, generates an unlock key if the key verification succeeds, and sends the unlock key to the mobile terminal bound to the terminal to be logged in;

[0079] Step S201, receiving an unlock request sent by a mobile terminal after confirming an unlock key.

[0080] In this embodiment, the SMS verification method based on Ukey has higher security and confidentiality, and the protection of personal information is more reliable. Since the Ukey key is part of the verification, it is not easy to be counterfeited or misappropriated, and the verification process does not involve the transmission of sensitive information, which effectively reduces the risk of personal information leakage. In addition, the generation and verification process of the Ukey key is subject to strict encryption and security control, which further guarantees the user's information security and the accuracy of identity recognition. The login verification method based on Ukey provided in this embodiment can be used in enterprise environments, personal devices, public terminals, etc. Specifically, Ukey is used to unlock the device within the enterprise to ensure that only authorized personnel can access sensitive data and systems. Users use Ukey to unlock on personal computers or mobile devices to protect personal privacy and data security. In scenarios such as self-service terminals and shared devices, use Ukey to ensure that each use is safe and controlled.

[0081] The terminal unlocking method based on the Ukey key provided in this embodiment is highly secure and easy to operate, effectively preventing problems such as password leakage and data leakage, and improving the security and user experience of the terminal device.

[0082] In this embodiment, a login verification device based on Ukey is also provided, which is applied to a server to implement the above-mentioned embodiments and preferred implementation modes, and those that have been described will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0083] This embodiment provides a login verification device based on Ukey, such as Figure 4 As shown, the device comprises:

[0084] The response module 301 is used to respond to the unlock request sent by the terminal to be logged in, and the unlock request carries the Ukey key information;

[0085] Verification module 302, used to perform key verification on the unlock request;

[0086] The generating module 303 is used to generate an unlocking key when the key verification is successful, and send the unlocking key to the mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in.

[0087] In some optional implementations, the verification module 302 includes:

[0088] A judgment unit is used to judge whether the device information contained in the Ukey key information exists in a preset authorized device list; if the device information contained in the Ukey key information exists in the preset authorized device list, judge whether the Ukey key information is within a preset validity period; if the Ukey key information is within the preset validity period, dynamically verify the Ukey key information.

[0089] In some optional implementations, the verification module 302 further includes:

[0090] A dynamic verification unit is used to randomly generate a challenge string and share the challenge string with the terminal to be logged in; perform a hash operation based on the Ukey key information and the challenge string to obtain a first verification result; compare the first verification result with the second verification result, wherein the second verification result is the verification result obtained by the terminal to be logged in performing a hash operation based on the Ukey key information and the challenge string; when the comparison results are consistent, confirm that the secret key verification is successful.

[0091] In some optional implementations, the generating module 303 further includes:

[0092] The generation unit is used to randomly generate an unlocking string; encrypt the unlocking string using a symmetric encryption algorithm to obtain an encrypted unlocking string; add a digital signature to the encrypted unlocking string to generate an unlocking key.

[0093] In this embodiment, a Ukey-based login verification device is also provided, which is applied to the terminal to be logged in, and is used to implement the above embodiments and preferred implementations, such as Figure 5 As shown, the device comprises:

[0094] The sending module 401 is used to send an unlock request to the server. The unlock request carries the Ukey key information. The server performs key verification on the unlock request. If the key verification is successful, an unlock key is generated and sent to the mobile terminal bound to the terminal to be logged in.

[0095] The receiving module 401 is used to receive an unlocking request sent by the mobile terminal after confirming the unlocking key.

[0096] The ukey-based login verification device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0097] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0098] The embodiment of the present invention also provides a computer device having the above Figure 6 The Ukey-based login verification device is shown.

[0099] See also Figure 6 , Figure 6 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 6 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 6 A processor 10 is taken as an example.

[0100] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0101] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0102] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0103] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0104] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0105] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0106] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0107] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A login verification method based on Ukey, characterized in that: The method is applied to a server, and the method comprises: Respond to the unlock request sent by the terminal to be logged in, the unlock request carries the Ukey key information; Performing secret key verification on the unlock request; When the key verification is successful, an unlocking key is generated and sent to a mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in.

2. The method according to claim 1, characterized in that The performing key verification on the unlock request includes: Determine whether the device information contained in the Ukey key information exists in a pre-set authorized device list; If the device information included in the Ukey key information exists in a preset authorized device list, determine whether the Ukey key information is within a preset validity period; When the Ukey key information is within a preset validity period, the Ukey key information is dynamically verified.

3. The method according to claim 1, characterized in that The dynamically verifying the Ukey key information includes: Randomly generate a challenge string, and share the challenge string with the terminal to be logged in; Perform a hash operation based on the Ukey key information and the challenge string to obtain a first verification result; Compare the first verification result with the second verification result, wherein the second verification result is a verification result obtained by the terminal to be logged in performing a hash operation based on the Ukey key information and the challenge string; If the comparison results are consistent, it is confirmed that the key verification is successful.

4. The method according to claim 1, characterized in that: The generating of the unlocking key comprises: Randomly generate an unlock string; Encrypting the unlocking string using a symmetric encryption algorithm to obtain an encrypted unlocking string; A digital signature is added to the encrypted unlocking string to generate the unlocking key.

5. A login verification method based on Ukey, characterized in that: The method is applied to a terminal to be logged in, and the method comprises: Send an unlock request to the server, the unlock request carries the Ukey key information, the server performs key verification on the unlock request, generates an unlock key if the key verification succeeds, and sends the unlock key to the mobile terminal bound to the terminal to be logged in; An unlocking request is received after the mobile terminal confirms the unlocking key.

6. A login verification device based on Ukey, characterized in that: The device is applied to a server, and comprises: A response module, used to respond to an unlock request sent by the terminal to be logged in, wherein the unlock request carries Ukey key information; A verification module, used for performing a secret key verification on the unlock request; The generating module is used to generate an unlocking key when the key verification is successful, and send the unlocking key to the mobile terminal bound to the terminal to be logged in, so that the mobile terminal unlocks the terminal to be logged in.

7. A login verification device based on Ukey, characterized in that: The device is applied to a terminal to be logged in, and the device includes: A sending module, used to send an unlock request to a server, wherein the unlock request carries Ukey key information, and the server performs key verification on the unlock request. If the key verification is successful, an unlock key is generated and sent to a mobile terminal bound to the terminal to be logged in; The receiving module is used to receive the unlocking request sent by the mobile terminal after confirming the unlocking key.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the Ukey-based login verification method described in any one of claims 1 to 4 or the Ukey-based login verification method described in claim 5 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the Ukey-based login verification method described in any one of claims 1 to 4 or the Ukey-based login verification method described in claim 5.

10. A computer program product, characterized in that It includes computer instructions, which are used to enable a computer to execute the Ukey-based login verification method described in any one of claims 1 to 4 or the Ukey-based login verification method described in claim 5.

Images