Customized slider verification access control method and system

Abstract

The invention provides a customized sliding block verification access control method and system. The method comprises the following steps: acquiring current verification behavior information and historical verification behavior information of a user; calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information; the verification behavior passing probability of the user under the high trust index is calculated; when the verification behavior passing probability is smaller than a probability threshold value, popping up a pop-up window for starting customized sliding block verification to inquire whether a user starts a customized sliding block verification mode or not; if the user starts the customized sliding block verification mode, calculating an input speed index of the user; and selecting different verification modes for sliding verification in the next verification according to the input speed index. Different verification modes are selected according to different input speed indexes, so that sliding block verification better meets the requirements of a user, the verification passing time can be shortened, the verification passing probability can be improved, and the problem that verification is difficult to pass in the sliding block verification process is solved.

Description

Technical Field

[0001] The present application relates to the field of sliding verification technology, and in particular to a customized sliding verification access control method and system. Background Art

[0002] Sliding verification (often also called slider verification) is a user-interactive verification method and is a common verification method in websites, apps and other applications. Users use a mouse or touch screen to slide the slider to a specified position along a specified path or direction to complete the verification process. This verification method not only increases the difficulty of automated attacks, but also improves the user experience because slider verification is more intuitive and easier to operate than the traditional verification code input method. There are two types of slider verification codes: one is a slider verification code that completes the verification by "sliding to the bottom" in the sliding box, and the other is a slider verification code that completes the verification by sliding the slider to piece together the puzzle.

[0003] Since the "slide to the bottom" slider verification code seems to have low security, it will make some users feel unsafe and reduce their trust in the system. Therefore, most websites or apps choose the puzzle slider verification code. However, the puzzle slider verification code is too complicated for some users with simple permissions, who are not familiar with the operation of electronic devices, or who are easily careless. It is easy to make mistakes in operation and fail to pass the access control, affecting the user experience. Summary of the invention

[0004] The present application provides a customized slider verification access control method and system to solve the problem of difficulty in passing the verification during the slider verification process.

[0005] The first aspect of the present application provides a customized slider verification access control method, comprising:

[0006] Obtain the user's current verification behavior information and historical verification behavior information, wherein the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information;

[0007] Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior;

[0008] Calculating the passing probability of the user verification behavior under a high trust index, wherein the high trust index is the trust index greater than a trust index threshold;

[0009] When the probability of passing the verification behavior is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode;

[0010] If the user enables the customized slider verification mode, calculating the user's input speed index;

[0011] Different verification modes are used for sliding verification in the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode and a second customized verification mode.

[0012] Optionally, the current verification behavior information includes a current IP address, a current verification time, and a current access time; and the calculating of the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information includes:

[0013] Obtain the historical verification success information within a first preset time period, wherein the historical verification success information includes a historical IP address, a historical verification time, and a historical access time;

[0014] When the amount of the historical verification success information is greater than the quantity threshold, the user's trust index is calculated based on the historical IP address, historical verification time, historical access time and the current IP address, current verification time, and current access time.

[0015] Optionally, the calculating of the probability of passing the user's verification behavior under a high trust index includes:

[0016] Obtain the total number of verifications and the number of successful verifications within the first preset time period under a high trust index;

[0017] The probability of passing the user's verification behavior is calculated based on the total number of verification times and the number of successful verifications.

[0018] Optionally, if the user enables the customized slider verification, calculating the user's input speed index includes:

[0019] Obtain the historical verification time of the same user every second preset time, so as to calculate a first average input time according to the historical verification time, wherein the first average input time is an average value of the sum of multiple historical verification times of the same user;

[0020] Obtaining the historical verification times of different users according to the historical verification behavior information of different users at every second preset time, so as to calculate a second average input time according to the historical verification times of different users, wherein the second average input time is an average value of the sum of the historical verification times of different users;

[0021] The input speed index is calculated based on the first average input time and the second average input time.

[0022] Optionally, selecting a different verification mode for sliding verification at the next verification according to the input speed index includes:

[0023] When the input speed index is greater than a first input speed index threshold, using the first customized verification mode to perform sliding verification;

[0024] When the input speed index is less than a second input speed index threshold, using the second customized verification mode to perform sliding verification;

[0025] When the input speed index is between the second input speed index threshold and the first input speed index threshold, the current verification mode is maintained for sliding verification; the current verification mode includes a general slider verification mode, the first customized verification mode and the second customized verification mode.

[0026] Optionally, verification using the universal slider verification mode includes:

[0027] Acquire the historical verification failure information to set the notch position of the slider verification picture according to the historical verification failure information;

[0028] Performing device environment detection on the access device to obtain an access mode of the access device; the access mode includes a browser dark mode and a color inversion mode;

[0029] The background color of the slider verification picture is dynamically adjusted according to the access mode.

[0030] Optionally, the historical verification failure information includes a first coordinate and a second coordinate of the notch, and the first coordinate and the second coordinate are two symmetrical coordinates of the notch respectively; and setting the notch position of the slider verification picture according to the historical verification failure information includes:

[0031] Clustering the plurality of the first coordinates and the second coordinates by a K-Means algorithm to calculate a discrete ratio;

[0032] If the discrete ratio is greater than the ratio threshold, obtaining the center point coordinates of the first coordinate and the second coordinate;

[0033] When generating the slider verification picture, the gap is set at a position away from the center point coordinates.

[0034] Optionally, when the input speed index is greater than a first input speed index threshold, using the first customized verification mode to perform sliding verification includes:

[0035] Calling the universal slider verification mode;

[0036] In the general slider verification mode, moving the slider and the notch of the slider verification picture to the bottom of the slider verification picture;

[0037] A separate route jump verification page is selected as the verification method of the slider verification picture to provide a simple verification page;

[0038] Increase the time interval for calculating the current cursor position and the time interval for forming the slider movement coordinate changes to reduce the calculation frequency.

[0039] Optionally, when the input speed index is less than a second input speed index threshold, adopting the second customized verification mode to perform sliding verification includes:

[0040] Calling the universal slider verification mode;

[0041] In the universal slider verification mode, increasing the length of the slider and the notch from a first length to a second length;

[0042] Two gaps are provided on the slider verification picture to perform sliding verification in a double-vacancy verification manner;

[0043] A pop-up window for security reinforcement is popped up on the page where the slider verification image is located to ask the user whether to enable the security reinforcement rule;

[0044] If the user turns on the security reinforcement rule, a verification code rule parameter input box pops up to allow the user to customize the verification code rule parameters; the verification code rule parameters include the left offset value and the right offset value of the slider.

[0045] A second aspect of the present application provides a customized slider verification access control system, which is applied to the method provided in the first aspect, and the system includes:

[0046] Credibility judgment module: used to obtain the user's current verification behavior information and historical verification behavior information, the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information;

[0047] Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior;

[0048] Calculation module: used to calculate the probability of passing the user's verification behavior under a high trust index, wherein the high trust index is the trust index greater than the trust index threshold;

[0049] Customized enabling module: used for popping up a pop-up window for enabling customized slider verification to ask the user whether to enable customized slider verification when the passing probability of the verification behavior is less than the probability threshold;

[0050] The calculation module is also used to calculate the user's input speed index after the user enables the customized slider verification;

[0051] A selection verification module is used to adopt different verification modes for sliding verification in the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode and a second customized verification mode.

[0052] The present application provides a customized slider verification access control method and system, the method comprising: obtaining the user's current verification behavior information and historical verification behavior information; calculating the trust index of the current verification behavior according to the current verification behavior information and the historical verification success information; calculating the user's verification behavior passing probability under a high trust index; when the verification behavior passing probability is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode; if the user enables the customized slider verification mode, the user's input speed index is calculated; and different verification modes are selected for sliding verification at the next verification according to the input speed index. Different verification modes are selected according to different input speed indexes, so that the slider verification can better meet the user's own needs, shorten the verification passing time, and increase the verification passing probability. Under the premise of ensuring basic security, it brings a better verification experience to the user and solves the problem of verification passing difficulty during the slider verification process. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the technical solution of the present application, the drawings required for use in the embodiments are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0054] Figure 1 A flow chart of a customized slider verification access control method provided in an embodiment of the present application;

[0055] Figure 2 A flow chart of a method for calculating a trust index of a current verification behavior provided in an embodiment of the present application;

[0056] Figure 3 A flow chart of a method for calculating an input speed index provided in an embodiment of the present application;

[0057] Figure 4 A flow chart of a method for selecting different verification modes for sliding verification provided in an embodiment of the present application;

[0058] Figure 5 A flow chart of a method for performing sliding verification using a first customized verification mode provided in an embodiment of the present application;

[0059] Figure 6 A flow chart of a method for performing sliding verification using a second customized verification mode provided in an embodiment of the present application;

[0060] Figure 7 A schematic diagram of the structure of a customized slider verification access control system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0061] The following embodiments are described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following embodiments do not represent all implementations consistent with the present application. They are only examples of systems and methods consistent with some aspects of the present application as detailed in the claims.

[0062] There are two types of slider verification codes. One is a slider verification code that completes verification by sliding the slider to the bottom, and the other is a slider verification code that completes verification by sliding the slider to form a puzzle. Since the "slide to the bottom" slider verification code looks less secure, it will make some users feel unsafe and reduce their trust in the system. Therefore, most websites or apps choose the puzzle-style slider verification code. However, the puzzle-style slider verification code is too complicated for some users with simple permissions, who are not familiar with the operation of electronic devices, or who are easily careless. It is easy to make mistakes in operation and fail to pass access control, affecting the user experience.

[0063] In order to solve the problem of difficulty in passing the verification during the slider verification process, some embodiments of the present application provide a customized slider verification access control method. Before introducing the method of the present application, the verification process of the initial slider verification code is first explained, which mainly includes: selecting a background image for the slider verification code; if the verification method is "slider puzzle" verification, randomly dividing a gap on the background image; supporting the user to drag the slider in the sliding area to move the slider to the gap or the end of the verification code image; obtaining the distance between the stop position of the user dragging the slider and the gap position in the background image; obtaining the time and speed of the user dragging the slider; if the user meets the distance, time and speed requirements, the verification is passed, otherwise the verification fails.

[0064] See also Figure 1 The customized slider verification access control method provided by this application includes:

[0065] S100: Obtain the user's current verification behavior information and historical verification behavior information.

[0066] The current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the initial slider verification code is a commonly used puzzle-style slider verification code. The historical verification behavior information includes historical verification success information and historical verification failure information. In some embodiments, the historical verification behavior information is stored in the verification behavior array, and the obtained current verification behavior information is also stored in the verification behavior array.

[0067] S200: Calculate the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information.

[0068] The trust index is used to verify the credibility of the user's verification behavior. It can verify whether the user's current verification behavior is verified by a real user or a non-natural user such as artificial intelligence. The current verification behavior information includes the current IP address, current verification time, and current access time. Figure 2 In some embodiments, calculating the trust index of the current verification behavior according to the current verification behavior information and the historical verification success information includes:

[0069] S210: Obtain historical verification success information within a first preset time period.

[0070] Historical verification behavior information is information whose verification Boolean value is positive. In some embodiments, historical verification success information can be obtained based on the verification Boolean value. The first preset time period is at least one week, and can also be ten days or one month. The longer the first preset time period, the more accurate the result calculated by the historical verification success information. The historical verification success information includes historical IP addresses, historical verification time, and historical access time. Exemplarily, in the historical verification success information, the user uses a mobile phone with iOS16.0.1 version and an IP address of 10.0.0.1 to perform access verification at 08:00:00 on November 2, 2024 and the verification is successful. The historical IP address is 10.0.0.1, the historical access time is 11 / 2 / 2024 8:00:00AM, and the verification Boolean value is True, where True indicates that the verification Boolean value is positive.

[0071] S220: When the number of historical successful verification information is greater than the quantity threshold, the trust index of the current verification behavior is calculated based on the historical IP address, historical verification time, historical access time and the current IP address, current verification time, and current access time.

[0072] In order to improve the accuracy of the trust index, the trust index of the current verification behavior can be calculated when the number of elements in the verification behavior array, that is, the number of historical verification success information, is greater than the number threshold. For example, the trust index is calculated when the number of historical verification success information is greater than 10. In some embodiments, the process of calculating the trust index of the current verification behavior based on the historical IP address, historical verification time, historical access time and the current IP address, current verification time, and current access time is as follows:

[0073] S231: If the percentage of the number of visits of the current IP address to the number of visits of the historical IP addresses is greater than a first threshold, the initial value of the trust index is increased by a first value.

[0074] In some embodiments, the initial value of the trust index is 0.5, and the first threshold can be set to 75%. If the percentage of the number of visits to the current IP address to the number of visits to the historical IP address is greater than 75%, it means that the current IP address is an IP address that has been visited. At this time, the credibility of the user verification behavior increases. Therefore, the initial value of the trust index increases by a first value, such as 0.25.

[0075] S232: If the current IP address is an IP address that has not been visited, the initial value is reduced by a second value.

[0076] If the current IP address is an IP address that has not been visited, there may be a remote login, and the credibility of the user verification behavior is reduced. Therefore, the initial value is reduced by a second value. The second value can be smaller than the first value, for example, it can be reduced by 0.2.

[0077] S233: Construct a probability density function based on historical verification time.

[0078] S234: Divide the interval of probability values ​​enclosed by the historical verification time into three parts.

[0079] S235: If the current verification time is in the interval with the highest probability value, the initial value is increased by a first value.

[0080] S236: If the current verification time is in the interval with the second highest probability value, the initial value remains unchanged.

[0081] S237: If the current verification time is in the interval with the third highest probability value, the initial value is reduced by a second value.

[0082] S238: Calculate the difference of historical access time within a third preset time period to obtain the number of verification times.

[0083] S239: If the number of verification times is less than the first number threshold, the initial value remains unchanged; if the number of verification times is greater than the first number threshold, the initial value is reduced by a third value.

[0084] In some embodiments, the third preset time length may be 1 minute, the first number threshold may be 3 times, and the third value may be 0.5.

[0085] Through the comprehensive calculation of the above aspects, the trust index obtained can be used to judge the credibility of user verification behavior.

[0086] S300: Calculate the probability of the user's verification behavior passing under a high trust index.

[0087] The trust index threshold may be 1. When the trust index is greater than 1, it can be considered that the credibility of the user's verification behavior is high and the verification is performed by the user himself. At this time, the probability of passing the user's verification behavior is calculated. In some embodiments, calculating the probability of passing the user's verification behavior includes:

[0088] S310: Obtain the total number of verifications and the number of successful verifications within a first preset time period under a high trust index.

[0089] It is understandable that the total number of verifications and the number of successful verifications are both obtained through historical verification behavior information.

[0090] S320: Calculate the user's verification behavior pass probability based on the total number of verifications and the number of successful verifications.

[0091] If the total number of verifications is s, the number of successful verifications is n, and the probability of passing the verification behavior is p, then p = n / s.

[0092] S400: When the probability of passing the verification behavior is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode.

[0093] When the probability of passing the verification behavior is less than the probability threshold, it means that due to certain factors, it may not be suitable to use the initial slider verification code for verification. Therefore, a customized slider verification mode is provided for users for verification.

[0094] S500: If the user enables the customized slider verification mode, calculate the user's input speed index.

[0095] See also Figure 3 , calculating the input speed index includes the following steps:

[0096] S510: Obtain historical verification time of the same user at intervals of a second preset time, so as to calculate a first average input time according to the historical verification time.

[0097] The second preset duration can be 1 week, and the first average input time is the average of the sum of multiple historical verification times of the same user. For example, the historical verification time of the user's first verification behavior is 20ms, the historical verification time of the second verification behavior is 60ms, and the historical verification time of the third verification behavior is 40ms. Then the first average input time is (20ms+60ms+40ms) / 3=40ms.

[0098] S520: Obtaining historical verification times of different users according to historical verification behavior information of different users at second preset time intervals, so as to calculate a second average input time according to the historical verification times of different users.

[0099] The second average input time is the average of the sum of the historical verification times of different users. By calculating the second average input time and comparing it with the first average input time, the difference in verification input time between the current user who is verifying and other users can be compared.

[0100] S530: Calculate an input speed index according to the first average input time and the second average input time.

[0101] Input speed index=first average input time / second average input time.

[0102] S600: Using a different verification mode to perform sliding verification in the next verification according to the input speed index.

[0103] In the embodiment of the present application, the verification mode includes a general slider verification mode, a first customized verification mode and a second customized verification mode, wherein verification using the general slider verification mode includes:

[0104] S601: Obtain historical verification failure information to set a notch position of a slider verification image according to the historical verification failure information.

[0105] The historical verification failure information includes the first coordinate and the second coordinate of the notch, which are two symmetrical coordinates of the notch. You can access the center of the device screen as the origin to establish a rectangular coordinate system. Each time the verification fails, the first coordinate and the second coordinate of the notch are recorded to determine whether the verification failure is caused by screen damage at the notch. If the screen is damaged at the notch, the notch position should be reset. Setting the notch position of the slider verification image based on the historical verification failure information includes:

[0106] S6011: Cluster the multiple first coordinates and second coordinates using a K-Means algorithm to calculate a discrete ratio.

[0107] Since the first coordinate and the second coordinate of the gap are recorded each time the verification fails, when the recorded first coordinate and the second coordinate reach a certain value, clustering can be performed through the K-Means algorithm to calculate the discrete ratio.

[0108] S6012: If the discrete ratio is greater than the ratio threshold, obtain the center point coordinates of the first coordinate and the second coordinate.

[0109] If the discrete ratio is greater than the ratio threshold, it means that the first coordinate and the second coordinate form a clustering effect. It is suspected that the screen of the device is damaged, and the notch should be set in a non-damaged position.

[0110] S6013: When generating a slider verification image, the gap is set at a position away from the center point coordinates.

[0111] The center point coordinates of the first coordinate and the second coordinate are the positions where the screen is suspected to be damaged. When the slider verification picture is generated, the notch position is set at a position far away from the center point coordinates.

[0112] S602: Perform device environment detection on the access device to obtain an access mode of the access device.

[0113] The access mode includes the browser dark mode and the color inversion mode. The device environment detection is performed on the access device to determine whether the access mode of the access device is the browser dark mode or the color inversion mode.

[0114] S603: Dynamically adjust the slider to verify the background color of the image according to the access mode.

[0115] Dynamically adjust the background color of the slider verification image based on the access mode obtained. For example, in the browser dark mode, use a dark background; in the color inversion mode, use a background with high contrast to facilitate user verification.

[0116] See also Figure 4 , selecting a different verification mode for sliding verification at the next verification according to the input speed index includes the following steps:

[0117] S610: When the input speed index is greater than a first input speed index threshold, adopt a first customized verification mode to perform sliding verification.

[0118] The first input speed index threshold can be 2. When the input speed index is greater than the first input speed index threshold, it means that the user verification success speed is slow. It is suspected that the access device has low performance and may be stuck. Therefore, the first customized verification mode is used for sliding verification. Figure 5 In some embodiments, using the first customized verification mode to perform sliding verification includes:

[0119] S611: Calling the general slider verification mode.

[0120] S612: In the general slider verification mode, the slider and the notch of the slider verification picture are moved to the bottom of the slider verification picture.

[0121] Since some users do not know that they can directly drag the slider in the verification code image for verification, they mistakenly believe that verification can only be done by dragging the slider area. For these users who are not familiar with the operation of electronic devices, moving the slider and the notch of the slider verification image to the bottom of the slider verification image can facilitate users to concentrate on dragging the slider for verification, thereby increasing the probability of successful verification and thereby improving the user experience during the verification process.

[0122] S613: Select a separate route jump verification page as the verification method of the slider verification picture to provide a simple verification page.

[0123] There are three display forms of puzzle-style slider verification codes in the application, triggered, embedded and pop-up. Triggered means that the verification puzzle is displayed only after the mouse cursor moves into the verification bar, which does not affect the original layout of the web page. Embedded means that the puzzle verification area is directly embedded and displayed on the web page, which is clear and intuitive and convenient for users to use. The pop-up type can generally be bound to its own verification mode, and the sliding verification code will pop up after clicking verification. For example, the user enters the user name and password, and after clicking login, the page pops up the slider verification code. However, all three methods require the current access device to have good performance. Therefore, in order to reduce the calculation and rendering pressure of the device, in some embodiments, a separate routing jump verification page can be selected as the verification mode of the slider verification picture to provide a simple verification page. When programming the simplified version of the verification page, no unnecessary function library is referenced, and a separate routing jump verification page is provided, rather than popping up or embedding the slider verification dialog box on the basis of the original page, which can reduce the calculation and rendering pressure of the device and is suitable for application on low-performance devices.

[0124] S614: Increase the time interval for calculating the current cursor position and the time interval for forming the change of the slider movement coordinates to reduce the calculation frequency.

[0125] Increasing the time interval for calculating the current cursor position and the time interval for calculating the change in the slider movement coordinates can reduce the local calculation frequency of the current access device and alleviate the errors caused by lag.

[0126] It should also be noted that since enabling the customized slider verification mode will affect the time spent on each user verification behavior, when the user enables the customized slider verification mode, the current verification time in the user's verification behavior array can be cleared in the background; and when the current number of successful verification information in the verification behavior array does not reach the quantity threshold, the probability density function is not used to calculate the trust index of the current verification behavior, so as to alleviate the pressure on the current access device.

[0127] S620: When the input speed index is less than the second input speed index threshold, adopt a second customized verification mode to perform sliding verification.

[0128] The second input speed index threshold may be 1. When the input speed index is less than the second input speed index threshold, it indicates that the user's verification is successful at a relatively fast speed, and the user is suspected to be careless. Therefore, the second customized verification mode is used for sliding verification. Figure 6 , the second customized verification mode is used for sliding verification, including:

[0129] S621: Calling the general slider verification mode.

[0130] S622: In the general slider verification mode, the length of the slider and the notch is increased from the first length to the second length.

[0131] For example, the lengths of the slider and the notch may be increased by 10% respectively, increasing the lengths of the slider and the notch from a first length of 5 mm to a second length of 5.5 mm, to facilitate user verification.

[0132] S623: setting two gaps on the slider verification picture to perform sliding verification using a double-gap verification method.

[0133] Since the number and size of the gaps have increased, the length of the sliding verification picture should also be extended. For example, if the initial length of the sliding verification picture is x pixels, the sliding verification picture can be extended to 2x pixels. In order to see the pictures from x to 2x pixels, the user can drag the slider. When the slider slides to the far right, continue to control the slider at the far right end. The system will regard this operation as a command to continue swiping right. It should also be noted that when the double-vacancy verification method is used for sliding verification, the user controls the slider to fill any gap to successfully verify. By lengthening the gap and setting two gaps, the user's attention can be improved, thereby shortening the time it takes for the user to pass the verification and improving the user's experience during the verification process.

[0134] S624: A security reinforcement pop-up window is popped up on the page where the slider verification image is located to ask the user whether to enable the security reinforcement rule.

[0135] Since the above-mentioned double-vacancy verification process is equivalent to reducing the security of the slider verification in disguise, in some embodiments, security reinforcement rules can also be set.

[0136] S625: If the user turns on the security reinforcement rule, a verification code rule parameter input box pops up so that the user can customize the verification code rule parameters.

[0137] Among them, the verification code rule parameters include the left offset value and the right offset value of the slider. For example, before the security reinforcement rule is enabled, the function rule for the system to determine whether the slider controlled by the user covers the gap is that the absolute value of the distance between the right coordinate of the slider controlled by the user and the right coordinate of the gap does not exceed 1vw. The user can set the parameters entered in the input box to set the left offset value to 0vw and the right offset value to 5vw, that is, when the right coordinate of the slider controlled by the user is 0-5vw to the right of the right coordinate of the slider gap, the slider verification is passed. After the verification is passed, the user can choose to turn off the security reinforcement rule or adjust the verification code rule parameters of the security reinforcement rule at any time in the system.

[0138] S630: When the input speed index is between the second input speed index threshold and the first input speed index threshold, maintain the current verification mode to perform sliding verification.

[0139] It can be understood that the current verification mode is one of the general slider verification mode, the first customized verification mode and the second customized verification mode. It should be noted that if the user enables the customized slider verification mode for the first time, the current verification mode is automatically changed to the general slider verification mode. When the input speed index is between the second input speed index threshold and the first input speed index threshold, if the current verification mode is the general slider verification mode, the general slider verification mode is maintained unchanged, and if the current verification mode is the first customized verification mode, the first customized verification mode is maintained unchanged.

[0140] After the sliding verification is completed, the customized slider verification mode can be exited. When exiting, the customized exit mechanism can also be followed. In some embodiments, the method also includes: until the user manually exits the customized slider verification mode, or the number of times the trust index is less than the trust index threshold is greater than the second number threshold, exit the customized slider verification mode. The user can actively choose to turn off the customized slider verification mode in the system at any time. After turning off the customized slider verification mode in this way, the user can actively choose to turn it on in the system at any time. Alternatively, when the number of times the trust index is less than the trust index threshold is greater than the second number threshold, for example, 5 times, exit the customized slider verification mode. After exiting the customized slider verification mode in this way, the user needs to open it through a pop-up window invitation when the probability of passing the verification behavior is less than the probability threshold.

[0141] The control method provided by the present application determines the credibility of the user's verification behavior by calculating the trust index of the current verification behavior, calculates the probability of passing the verification behavior when the credibility of the user being a real person for access verification is high, and provides a customized verification method for the user to perform slider verification when the probability of passing the verification behavior is low, and selects different verification modes according to different input speed indexes to dynamically adjust the verification mode according to the customer's own situation, so that the slider verification can better meet the user's own needs, solve the problem of difficulty in passing the verification during the slider verification process, shorten the verification time, and increase the probability of passing the verification, thereby bringing a better verification experience to the user while ensuring basic security.

[0142] Based on the above-mentioned customized slider verification access control method, some embodiments of the present application also provide a customized slider verification access control system, which is applied to the method provided in some embodiments above, see Figure 7 ,The system includes a credibility judgment module, a calculation module, a customized ,enabling module and a selection verification module.

[0143] The credibility judgment module is used to obtain the user's current verification behavior information and historical verification behavior information, and calculate the trust index of the current verification behavior based on the current verification behavior information and historical verification success information.

[0144] The current verification behavior information and the historical verification behavior information are the information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information. The trust index is used to verify the credibility of the user's verification behavior.

[0145] The calculation module is used to calculate the probability of passing the user's verification behavior under a high trust index, wherein the trust index is used to verify the credibility of the user's verification behavior.

[0146] The customized enabling module is used to pop up a pop-up window for enabling customized slider verification to ask the user whether to enable customized slider verification when the probability of passing the verification behavior is less than the probability threshold.

[0147] The calculation module is further used to calculate the user's input speed index after the user enables the customized slider verification.

[0148] The verification module is selected to adopt different verification modes for sliding verification at the next verification according to the input speed index.

[0149] It can be seen from the above technical solutions that the embodiment of the present application provides a customized slider verification access control method and system, the method includes: obtaining the user's current verification behavior information and historical verification behavior information; calculating the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information; calculating the user's verification behavior pass probability under a high trust index; when the verification behavior pass probability is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode; if the user enables the customized slider verification mode, the user's input speed index is calculated; and different verification modes are selected for sliding verification at the next verification based on the input speed index. Selecting different verification modes based on different input speed indexes can make the slider verification more meet the user's own needs, shorten the verification pass time, and increase the verification pass probability. Under the premise of ensuring basic security, it brings a better verification experience to the user and solves the problem of verification pass difficulty during the slider verification process.

[0150] Similar parts between the embodiments provided in this application can be referenced to each other. The specific implementation methods provided above are only a few examples under the general concept of this application and do not constitute a limitation on the protection scope of this application. For those skilled in the art, any other implementation methods expanded based on the scheme of this application without creative work belong to the protection scope of this application.

Claims

1. A customized slider verification access control method, characterized in that: include: Obtain the user's current verification behavior information and historical verification behavior information, wherein the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information; Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior; Calculating the passing probability of the user verification behavior under a high trust index, wherein the high trust index is the trust index greater than a trust index threshold; When the probability of passing the verification behavior is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode; If the user enables the customized slider verification mode, calculating the user's input speed index; Different verification modes are used for sliding verification in the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode and a second customized verification mode.

2. The customized slider authentication access control method according to claim 1, characterized in that: The current verification behavior information includes the current IP address, the current verification time, and the current access time; the trust index of the current verification behavior calculated based on the current verification behavior information and the historical verification success information includes: Obtain the historical verification success information within a first preset time period, wherein the historical verification success information includes a historical IP address, a historical verification time, and a historical access time; When the amount of the historical verification success information is greater than the quantity threshold, the user's trust index is calculated based on the historical IP address, historical verification time, historical access time and the current IP address, current verification time, and current access time.

3. The customized slider authentication access control method according to claim 1, characterized in that: The calculation of the probability of passing the user's verification behavior under a high trust index includes: Obtain the total number of verifications and the number of successful verifications within the first preset time period under a high trust index; The probability of passing the user's verification behavior is calculated based on the total number of verifications and the number of successful verifications.

4. The customized slider authentication access control method according to claim 2, characterized in that: If the user enables the customized slider verification, calculating the user's input speed index includes: Obtain the historical verification time of the same user every second preset time, so as to calculate a first average input time according to the historical verification time, wherein the first average input time is an average value of the sum of multiple historical verification times of the same user; Obtaining historical verification times of different users according to the historical verification behavior information of different users at every second preset time, so as to calculate a second average input time according to the historical verification times of different users, wherein the second average input time is an average value of the sum of the historical verification times of different users; The input speed index is calculated based on the first average input time and the second average input time.

5. The customized slider authentication access control method according to claim 1, characterized in that: The selecting a different verification mode for sliding verification at the next verification according to the input speed index comprises: When the input speed index is greater than a first input speed index threshold, using the first customized verification mode to perform sliding verification; When the input speed index is less than a second input speed index threshold, using the second customized verification mode to perform sliding verification; When the input speed index is between the second input speed index threshold and the first input speed index threshold, the current verification mode is maintained for sliding verification; the current verification mode includes the general slider verification mode, the first customized verification mode and the second customized verification mode.

6. The customized slider authentication access control method according to claim 5, characterized in that: Verification using the universal slider verification mode includes: Acquire the historical verification failure information to set the notch position of the slider verification picture according to the historical verification failure information; Performing device environment detection on the access device to obtain an access mode of the access device; the access mode includes a browser dark mode and a color inversion mode; The background color of the slider verification picture is dynamically adjusted according to the access mode.

7. The customized slider authentication access control method according to claim 6, characterized in that: The historical verification failure information includes a first coordinate and a second coordinate at the gap, and the first coordinate and the second coordinate are two symmetrical coordinates at the gap respectively; and setting the gap position of the slider verification picture according to the historical verification failure information includes: Clustering the plurality of the first coordinates and the second coordinates by a K-Means algorithm to calculate a discrete ratio; If the discrete ratio is greater than the ratio threshold, obtaining the center point coordinates of the first coordinate and the second coordinate; When generating the slider verification picture, the gap is set at a position away from the center point coordinates.

8. The customized slider authentication access control method according to claim 6, characterized in that: When the input speed index is greater than a first input speed index threshold, performing sliding verification using the first customized verification mode includes: Calling the universal slider verification mode; In the general slider verification mode, moving the slider and the notch of the slider verification picture to the bottom of the slider verification picture; A separate route jump verification page is selected as the verification method of the slider verification picture to provide a simple verification page; Increase the time interval for calculating the current cursor position and the time interval for forming the slider movement coordinate changes to reduce the calculation frequency.

9. The customized slider authentication access control method according to claim 8, characterized in that: When the input speed index is less than a second input speed index threshold, using the second customized verification mode to perform sliding verification includes: Calling the universal slider verification mode; In the universal slider verification mode, increasing the length of the slider and the notch from a first length to a second length; Two gaps are provided on the slider verification picture to perform sliding verification in a double-vacancy verification manner; A pop-up window for security reinforcement is popped up on the page where the slider verification image is located to ask the user whether to enable the security reinforcement rule; If the user turns on the security reinforcement rule, a verification code rule parameter input box pops up to allow the user to customize the verification code rule parameters; the verification code rule parameters include the left offset value and the right offset value of the slider.

10. A customized slider verification access control system, characterized in that: The method according to any one of claims 1 to 9 is applied, wherein the system comprises: Credibility judgment module: used to obtain the user's current verification behavior information and historical verification behavior information, the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information; Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior; Calculation module: used to calculate the probability of passing the user's verification behavior under a high trust index, wherein the high trust index is the trust index greater than the trust index threshold; Customized enabling module: used for popping up a pop-up window for enabling customized slider verification to ask the user whether to enable customized slider verification when the passing probability of the verification behavior is less than the probability threshold; The calculation module is also used to calculate the user's input speed index after the user enables the customized slider verification; A selection verification module is used to adopt different verification modes for sliding verification in the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode and a second customized verification mode.

Images