Customized slider verification access control method and system

Abstract

The present application provides a customized slider verification access control method and system. The method includes: obtaining the current verification behavior information and historical verification behavior information of a user; calculating a trust index of the current verification behavior according to the current verification behavior information and historical verification success information; calculating the passing probability of the user's verification behavior under a high trust index; when the passing probability of the verification behavior is less than a probability threshold, popping up a window for enabling customized slider verification to ask the user whether to enable the customized slider verification mode; if the user enables the customized slider verification mode, calculating an input speed index of the user; and selecting different verification modes for sliding verification according to the input speed index at the next verification. Selecting different verification modes according to different input speed indexes can make the slider verification better meet the user's own needs, shorten the verification passing time, increase the verification passing probability, and solve the problem of difficult verification passing in the process of slider verification.

Description

Technical Field

[0001] This application relates to the technical field of sliding verification, and particularly to a customized slider verification access control method and system. Background Art

[0002] Sliding verification (usually also known as slider verification) is a user-interactive verification method and a common verification method in applications such as websites and APPs. Users use a mouse or touch screen to slide a slider along a specified path or direction to a specified position to complete the verification process. This verification method can not only increase the difficulty of automated attacks, but also improve the user experience because slider verification is more intuitive and easier to operate than traditional input verification code methods. There are two types of slider verification codes. One is the slider verification code that is completed by "swiping to the end" within a sliding box, and the other is the slider verification code that is completed by sliding the slider to piece together a puzzle.

[0003] Since the "swipe to the end" type of slider verification code seems to have low security, it will make some users feel insecure and reduce their trust in the system. Therefore, most websites or APPs choose the puzzle type of slider verification code. However, the puzzle type of slider verification code is too complex for some users with simple permissions, unfamiliar with electronic device operations, or users who are prone to carelessness, and it is easy to make operational mistakes and fail to pass the access control, affecting the user experience. Summary of the Invention

[0004] This application provides a customized slider verification access control method and system to solve the problem of difficult verification during the slider verification process.

[0005] The first aspect of this application provides a customized slider verification access control method, including:

[0006] Obtain the user's current verification behavior information and historical verification behavior information. The current verification behavior information and the historical verification behavior information are the information when the user uses the initial slider verification code for verification. The historical verification behavior information includes historical verification success information and historical verification failure information;

[0007] Calculate the trust index of the current verification behavior according to the current verification behavior information and the historical verification success information. The trust index is used to verify the credibility of the user's verification behavior;

[0008] Calculate the passing probability of the user's verification behavior under a high trust index. The high trust index is the trust index greater than the trust index threshold;

[0009] When the passing probability of the verification behavior is less than the probability threshold, pop up a window to enable customized slider verification to ask the user whether to enable the customized slider verification mode;

[0010] If the user enables the customized slider verification mode, calculate the input speed index of the user;

[0011] According to the input speed index, adopt different verification modes for sliding verification during the next verification. The verification modes include a general slider verification mode, a first customized verification mode, and a second customized verification mode.

[0012] Optionally, the current verification behavior information includes the current IP address, the current verification time, and the current access time. The calculation of the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information includes:

[0013] Obtain the historical verification success information within a first preset duration. The historical verification success information includes the historical IP address, the historical verification time, and the historical access time;

[0014] When the number of the historical verification success information is greater than the number threshold, calculate the trust index of the user based on the historical IP address, the historical verification time, the historical access time, the current IP address, the current verification time, and the current access time.

[0015] Optionally, the calculation of the passing probability of the user's verification behavior under a high trust index includes:

[0016] Obtain the total number of verifications and the number of successful verifications within the first preset duration under a high trust index;

[0017] Calculate the passing probability of the user's verification behavior based on the total number of verifications and the number of successful verifications.

[0018] Optionally, the calculation of the input speed index of the user if the user enables the customized slider verification includes:

[0019] Obtain the historical verification time of the same user every second preset duration to calculate the first average input time according to the historical verification time. The first average input time is the average value of the sum of multiple historical verification times of the same user;

[0020] Obtain the historical verification time of different users every second preset duration according to the historical verification behavior information of different users to calculate the second average input time according to the historical verification time of different users. The second average input time is the average value of the sum of the historical verification times of different users;

[0021] Calculate the input speed index based on the first average input time and the second average input time.

[0022] Optionally, the selection of different verification modes for sliding verification at the next verification according to the input speed index includes:

[0023] When the input speed index is greater than the first input speed index threshold, perform sliding verification using the first customized verification mode;

[0024] When the input speed index is less than the second input speed index threshold, perform sliding verification using the second customized verification mode;

[0025] When the input speed index is between the second input speed index threshold and the first input speed index threshold, maintain the current verification mode for sliding verification; the current verification mode includes a general slider verification mode, the first customized verification mode, and the second customized verification mode.

[0026] Optionally, performing verification using the general slider verification mode includes:

[0027] Obtain the historical verification failure information to set the notch position of the slider verification picture according to the historical verification failure information;

[0028] Perform device environment detection on the access device to obtain the access mode of the access device; the access mode includes a browser dark mode and a color inversion mode;

[0029] Dynamically adjust the background color of the slider verification picture according to the access mode.

[0030] Optionally, the historical verification failure information includes the first coordinate and the second coordinate at the notch, and the first coordinate and the second coordinate are two coordinates symmetric to each other at the notch; setting the notch position of the slider verification picture according to the historical verification failure information includes:

[0031] Cluster multiple of the first coordinates and the second coordinates through the K-Means algorithm to calculate the discrete ratio;

[0032] If the discrete ratio is greater than the ratio threshold, obtain the center point coordinates of the first coordinate and the second coordinate;

[0033] When generating the slider verification picture, set the notch at a position far from the center point coordinates.

[0034] Optionally, when the input speed index is greater than the first input speed index threshold, performing sliding verification using the first customized verification mode includes:

[0035] Call the general slider verification mode;

[0036] In the general slider verification mode, move the slider and the notch of the slider verification picture to the bottom of the slider verification picture;

[0037] Select a separate routing jump verification page as the verification method for the slider verification picture to provide a simple verification page;

[0038] Increase the time interval for calculating the current cursor position and the time interval for forming the coordinate change of the slider movement to reduce the calculation frequency.

[0039] Optionally, when the input speed index is less than the second input speed index threshold, using the second customized verification mode for sliding verification includes:

[0040] Call the general slider verification mode;

[0041] In the general slider verification mode, increase the length dimension of the slider and the notch from the first length to the second length;

[0042] Set two notches on the slider verification picture to perform sliding verification using a double vacancy verification method;

[0043] Pop up a security reinforcement pop-up window on the page where the slider verification picture is located to ask the user whether to enable the security reinforcement rule;

[0044] If the user enables the security reinforcement rule, a verification code rule parameter input box will pop up to allow the user to customize and input the verification code rule parameters; the verification code rule parameters include the left offset value and the right offset value of the slider.

[0045] The second aspect of the present application provides a customized slider verification access control system, which is applied to the method provided in the first aspect. The system includes:

[0046] Reliability judgment module: used to obtain the user's current verification behavior information and historical verification behavior information. The current verification behavior information and the historical verification behavior information are the information when the user uses the initial slider verification code for verification. The historical verification behavior information includes historical verification success information and historical verification failure information;

[0047] Calculate the trust index of the current verification behavior according to the current verification behavior information and the historical verification success information. The trust index is used to verify the credibility of the user's verification behavior;

[0048] Calculation module: used to calculate the passing probability of the user's verification behavior under a high trust index. The high trust index is the trust index greater than the trust index threshold;

[0049] Customization enabling module: used to pop up a window for enabling customized slider verification to ask the user whether to enable customized slider verification when the passing probability of the current verification behavior is less than the probability threshold;

[0050] The calculation module is also used to calculate the input speed index of the user after the user enables the customized slider verification;

[0051] Selection verification module: used to perform sliding verification in different verification modes during the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode, and a second customized verification mode.

[0052] This application provides a customized slider verification access control method and system. The method includes: obtaining the current verification behavior information and historical verification behavior information of the user; calculating the trust index of the current verification behavior according to the current verification behavior information and historical verification success information; calculating the passing probability of the user's verification behavior under a high trust index; when the passing probability of the verification behavior is less than the probability threshold, popping up a window for enabling customized slider verification to ask the user whether to enable the customized slider verification mode; if the user enables the customized slider verification mode, calculating the input speed index of the user; and selecting different verification modes to perform sliding verification during the next verification according to the input speed index. Selecting different verification modes according to different input speed indexes makes the slider verification more meet the user's own needs, can shorten the verification passing time, improve the verification passing probability, and bring a better verification experience to the user on the premise of ensuring basic security, and solve the problem of difficult verification passing during the slider verification process. Description of the Drawings

[0053] In order to more clearly illustrate the technical solutions of this application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without creative efforts.

[0054] Figure 1 It is a flowchart of the customized slider verification access control method provided by the embodiment of this application;

[0055] Figure 2 It is a flowchart of the method for calculating the trust index of the current verification behavior provided by the embodiment of this application;

[0056] Figure 3 It is a flowchart of the method for calculating the input speed index provided by the embodiment of this application;

[0057] Figure 4 It is a flowchart of the method for selecting different verification modes to perform sliding verification provided by the embodiment of this application;

[0058] Figure 5 It is a flowchart of a method for sliding verification using the first customized verification mode provided by an embodiment of the present application;

[0059] Figure 6 It is a flowchart of a method for sliding verification using the second customized verification mode provided by an embodiment of the present application;

[0060] Figure 7 It is a schematic structural diagram of a customized slider verification access control system provided by an embodiment of the present application. Detailed implementation manners

[0061] Embodiments will be described in detail below, and examples thereof are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementation manners described in the following embodiments do not represent all implementation manners consistent with the present application. They are merely examples of systems and methods consistent with some aspects of the present application described in detail in the claims.

[0062] There are two types of slider verification codes. One is the slider verification code that is completed by "swiping to the end" within the sliding box, and the other is the slider verification code that is completed by sliding the slider to piece together a puzzle. Since the "swipe to the end" type of slider verification code seems to have low security, it will make some users feel insecure and reduce their trust in the system. Therefore, most websites or APPs choose the puzzle type of slider verification code. However, the puzzle type of slider verification code is too complex for some users with simple permissions, unfamiliar with electronic device operations, or users who are prone to carelessness, and it is easy to make operation mistakes and result in failure to pass access control, affecting the user experience.

[0063] To solve the problem of difficult verification passing in the slider verification process, some embodiments of the present application provide a customized slider verification access control method. Before introducing the method of the present application, the verification process of the initial slider verification code is first described, which mainly includes: selecting a background picture for the slider verification code; if the verification method is "slider puzzle" verification, randomly dividing a gap on the background picture; supporting the user to drag the slider in the sliding area to move the slider to the gap or the end of the verification code picture; obtaining the distance between the stop position of the user dragging the slider and the position of the gap in the background picture; obtaining the time and speed of the user dragging the slider; if the user meets the distance, time, and speed requirements, the verification passes, otherwise the verification fails.

[0064] See Figure 1 , the customized slider verification access control method provided by the present application includes:

[0065] S100: Obtain the current verification behavior information and historical verification behavior information of the user.

[0066] The current verification behavior information and the historical verification behavior information are the information when the user uses the initial slider verification code for verification. The initial slider verification code is a common jigsaw-style slider verification code. The historical verification behavior information includes historical verification success information and historical verification failure information. In some embodiments, the historical verification behavior information is stored in a verification behavior array, and the obtained current verification behavior information is also stored in the verification behavior array.

[0067] S200: Calculate the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information.

[0068] The trust index is used to verify the credibility of the user's verification behavior, and can verify whether the user's current verification behavior is performed by a real user or a non-natural user such as an artificial intelligence. The current verification behavior information includes the current IP address, the current verification time, and the current access time. See Figure 2 , in some embodiments, calculating the trust index of the current verification behavior based on the current verification behavior information and the historical verification success information includes:

[0069] S210: Obtain the historical verification success information within the first preset duration.

[0070] The historical verification behavior information is the information with a positive verification boolean value. In some embodiments, the historical verification success information can be obtained according to the verification boolean value. The first preset duration is at least one week, and can also be ten days or one month. The longer the first preset duration, the more accurate the result calculated from the historical verification success information. The historical verification success information includes the historical IP address, the historical verification time, and the historical access time. Exemplarily, in the historical verification success information, the user uses a mobile phone with the iOS 16.0.1 version, accesses and verifies successfully at 08:00:00 on November 2, 2024 with the IP address of 10.0.0.1, then the historical IP address is 10.0.0.1, the historical access time is 11 / 2 / 2024 8:00:00 AM, and the verification boolean value is True, where True indicates that the verification boolean value is positive.

[0071] S220: When the number of historical verification success information is greater than the number threshold, calculate the trust index of the current verification behavior based on the historical IP address, the historical verification time, the historical access time, the current IP address, the current verification time, and the current access time.

[0072] To improve the accuracy of the trust index, when the number of elements in the verification behavior array, that is, the number of historical verification success messages, is greater than the quantity threshold, the trust index of the current verification behavior can be calculated. For example, the trust index can be calculated when the number of historical verification success messages is greater than 10. In some embodiments, the process of calculating the trust index of the current verification behavior based on the historical IP address, historical verification time, historical access time, current IP address, current verification time, and current access time is as follows:

[0073] S231: If the percentage of the access times of the current IP address in the access times of the historical IP address is greater than the first threshold, the initial value of the trust index is increased by the first value.

[0074] In some embodiments, the initial value of the trust index is 0.5. The first threshold can be set to 75%. If the percentage of the access times of the current IP address in the access times of the historical IP address is greater than 75%, it indicates that the current IP address is an already accessed IP address. At this time, the credibility of the user verification behavior increases. Therefore, the initial value of the trust index is increased by the first value, such as 0.25.

[0075] S232: If the current IP address is an unaccessed IP address, the initial value is decreased by the second value.

[0076] If the current IP address is an unaccessed IP address, there may be a remote login, and the credibility of the user verification behavior decreases. Therefore, the initial value is decreased by the second value. The second value can be less than the first value. For example, it can be decreased by 0.2.

[0077] S233: Construct a probability density function based on the historical verification time.

[0078] S234: Divide the interval of the probability value enclosed by the historical verification time into three parts.

[0079] S235: If the current verification time is in the interval with the highest probability value, the initial value is increased by the first value.

[0080] S236: If the current verification time is in the interval with the second highest probability value, the initial value remains unchanged.

[0081] S237: If the current verification time is in the interval with the third highest probability value, the initial value is decreased by the second value.

[0082] S238: Calculate the difference in the historical access time within the third preset duration to obtain the verification times.

[0083] S239: If the verification times are less than the first number threshold, the initial value remains unchanged; if the verification times are greater than the first number threshold, the initial value is decreased by the third value.

[0084] In some embodiments, the third preset duration may be 1 min, the first number threshold may be 3 times, and the third value may be 0.5.

[0085] Through the comprehensive calculation in the above aspects, the obtained trust index can be used to judge the credibility of the user's verification behavior.

[0086] S300: Calculate the passing probability of the user's verification behavior under a high trust index.

[0087] The trust index threshold may be 1. When the trust index is greater than 1, it can be considered that the credibility of the user's verification behavior is relatively high and the verification is performed by the user himself. At this time, calculate the passing probability of the user's verification behavior. In some embodiments, calculating the passing probability of the user's verification behavior includes:

[0088] S310: Obtain the total number of verifications and the number of successful verifications within the first preset duration under a high trust index.

[0089] It can be understood that both the total number of verifications and the number of successful verifications are obtained through historical verification behavior information.

[0090] S320: Calculate the passing probability of the user's verification behavior according to the total number of verifications and the number of successful verifications.

[0091] If the total number of verifications is s, the number of successful verifications is n, and the passing probability of the verification behavior is p, then p = n / s.

[0092] S400: When the passing probability of the verification behavior is less than the probability threshold, pop up a window to enable customized slider verification to ask the user whether to enable the customized slider verification mode.

[0093] When the passing probability of the verification behavior is less than the probability threshold, it means that under the influence of certain factors, it may not be suitable to use the initial slider verification code for verification. Therefore, provide the user with a customized slider verification mode for verification.

[0094] S500: If the user enables the customized slider verification mode, calculate the input speed index of the user.

[0095] See Figure 3 , calculating the input speed index includes the following steps:

[0096] S510: Obtain the historical verification time of the same user every second preset duration to calculate the first average input time according to the historical verification time.

[0097] The second preset duration can be 1 week. The first average input time is the average of the historical verification times of multiple historical verifications of the same user. Exemplarily, the historical verification time of the user's first verification behavior is 20 ms, the historical verification time of the second verification behavior is 60 ms, and the historical verification time of the third verification behavior is 40 ms. Then the first average input time is (20 ms + 60 ms + 40 ms) / 3 = 40 ms.

[0098] S520: At every second preset duration, obtain the historical verification times of different users according to the historical verification behavior information of different users, so as to calculate the second average input time according to the historical verification times of different users.

[0099] The second average input time is the average of the sum of the historical verification times of different users. By calculating and comparing the second average input time and the first average input time, the gap in the verification input time between the currently verified user and other users can be compared.

[0100] S530: Calculate the input speed index according to the first average input time and the second average input time.

[0101] Input speed index = First average input time / Second average input time.

[0102] S600: Perform sliding verification using different verification modes at the next verification according to the input speed index.

[0103] In the embodiments of the present application, the verification modes include a general slider verification mode, a first customized verification mode, and a second customized verification mode. Among them, performing verification using the general slider verification mode includes:

[0104] S601: Obtain historical verification failure information to set the notch position of the slider verification picture according to the historical verification failure information.

[0105] The historical verification failure information includes the first coordinate and the second coordinate at the notch. The first coordinate and the second coordinate are two symmetric coordinates at the notch. A rectangular coordinate system can be established with the center of the device screen as the origin. Each time a verification fails, record the first coordinate and the second coordinate at the notch to determine whether the verification failure is caused by screen damage at the position of the notch. If there is screen damage at the notch, the notch position should be reset. Setting the notch position of the slider verification picture according to the historical verification failure information includes:

[0106] S6011: Cluster multiple first coordinates and second coordinates through the K-Means algorithm to calculate the discrete ratio.

[0107] Since the first coordinate and the second coordinate at the notch are recorded each time the verification fails, when the recorded first coordinate and second coordinate reach a certain quantity value, clustering can be performed through the K-Means algorithm to calculate the discrete ratio.

[0108] S6012: If the discrete ratio is greater than the ratio threshold, obtain the center point coordinates of the first coordinate and the second coordinate.

[0109] If the discrete ratio is greater than the ratio threshold, it indicates that the first coordinate and the second coordinate have an aggregation effect, suspecting that the screen of the device is damaged, and the notch should be set at a non-damaged position.

[0110] S6013: When generating the slider verification picture, set the notch at a position far from the center point coordinates.

[0111] The center point coordinates of the first coordinate and the second coordinate are the positions suspected of screen damage. When generating the slider verification picture, set the notch position at a position far from the center point coordinates.

[0112] S602: Perform device environment detection on the access device to obtain the access mode of the access device.

[0113] The access mode includes the browser dark mode and the color inversion mode. Perform device environment detection on the access device to determine whether the access mode of the access device is the browser dark mode or the color inversion mode.

[0114] S603: Dynamically adjust the background color of the slider verification picture according to the access mode.

[0115] Dynamically adjust the background color of the slider verification picture according to the obtained access mode. For example, in the browser dark mode, use a dark background; in the color inversion mode, use a background with a relatively high contrast to facilitate user verification.

[0116] See Figure 4 , selecting different verification modes for sliding verification according to the input speed index during the next verification includes the following steps:

[0117] S610: When the input speed index is greater than the first input speed index threshold, perform sliding verification using the first customized verification mode.

[0118] The first input speed index threshold can be 2. When the input speed index is greater than the first input speed index threshold, it indicates that the user's verification success speed is slow, suspecting that the performance of the access device is low and there may be lags. Therefore, perform sliding verification using the first customized verification mode. See Figure 5 , in some embodiments, performing sliding verification using the first customized verification mode includes:

[0119] S611: Calling the general slider verification mode.

[0120] S612: In the general slider verification mode, the slider and the notch of the slider verification picture are moved to the bottom of the slider verification picture.

[0121] Since some users do not know that they can directly drag the slider in the verification code image for verification, they mistakenly believe that verification can only be done by dragging the slider area. For these users who are not familiar with the operation of electronic devices, moving the slider and the notch of the slider verification image to the bottom of the slider verification image can facilitate users to concentrate on dragging the slider for verification, thereby increasing the probability of successful verification and thereby improving the user experience during the verification process.

[0122] S613: Select a separate route jump verification page as the verification method of the slider verification picture to provide a simple verification page.

[0123] There are three display forms of puzzle-style slider verification codes in the application, triggered, embedded and pop-up. Triggered means that the verification puzzle is displayed only after the mouse cursor moves into the verification bar, which does not affect the original layout of the web page. Embedded means that the puzzle verification area is directly embedded and displayed on the web page, which is clear and intuitive and convenient for users to use. The pop-up type can generally be bound to its own verification mode, and the sliding verification code will pop up after clicking verification. For example, the user enters the user name and password, and after clicking login, the page pops up the slider verification code. However, all three methods require the current access device to have good performance. Therefore, in order to reduce the calculation and rendering pressure of the device, in some embodiments, a separate routing jump verification page can be selected as the verification mode of the slider verification picture to provide a simple verification page. When programming the simplified version of the verification page, no unnecessary function library is referenced, and a separate routing jump verification page is provided, rather than popping up or embedding the slider verification dialog box on the basis of the original page, which can reduce the calculation and rendering pressure of the device and is suitable for application on low-performance devices.

[0124] S614: Increase the time interval for calculating the current cursor position and the time interval for forming the change of the slider movement coordinates to reduce the calculation frequency.

[0125] Increasing the time interval for calculating the current cursor position and the time interval for calculating the change in the slider movement coordinates can reduce the local calculation frequency of the current access device and alleviate the errors caused by lag.

[0126] It should also be noted that since enabling the customized slider verification mode will affect the time spent by the user for each verification behavior, when the user enables the customized slider verification mode, the current verification time used in the user verification behavior array can be cleared in the background; when the number of current verification success messages in the verification behavior array has not reached the quantity threshold, the probability density function can be not used to calculate the trust index of the current verification behavior, so as to relieve the pressure on the current access device.

[0127] S620: When the input speed index is less than the second input speed index threshold, perform sliding verification using the second customized verification mode.

[0128] The second input speed index threshold can be 1. When the input speed index is less than the second input speed index threshold, it indicates that the user verifies successfully quickly, and the user is suspected of being careless. Therefore, sliding verification is performed using the second customized verification mode. See Figure 6 , performing sliding verification using the second customized verification mode includes:

[0129] S621: Invoke the general slider verification mode.

[0130] S622: In the general slider verification mode, increase the length dimensions of the slider and the notch from the first length to the second length.

[0131] For example, the length dimensions of the slider and the notch can be increased by 10% respectively, and the lengths of the slider and the notch are increased from the first length of 5 mm to the second length of 5.5 mm to facilitate the user to perform verification.

[0132] S623: Set two notches on the slider verification picture to perform sliding verification using the double vacancy verification method.

[0133] Since the number and size of the notches are both increased, the length of the sliding verification picture should also be extended. For example, if the initial length of the sliding verification picture is x pixels, the sliding verification picture can be extended to 2x pixels. In order to view the picture from the xth to the 2xth pixel, the user can drag the slider. When the slider slides to the rightmost side, continuously control the slider at the rightmost end, and the system will regard this operation as a continue to swipe right instruction. It should also be noted that when performing sliding verification using the double vacancy verification method, the user controls the slider to fill any one of the notches, and it is considered a verification success. By lengthening the notches and setting two notches, the user's attention can be improved, thereby shortening the time for the user to pass the verification and enhancing the user's experience during the verification process.

[0134] S624: Pop up a security reinforcement pop-up window on the page where the slider verification picture is located to ask the user whether to enable the security reinforcement rule.

[0135] Since the above-mentioned double-vacancy verification process is equivalent to reducing the security of the slider verification in disguise, in some embodiments, security reinforcement rules can also be set.

[0136] S625: If the user turns on the security reinforcement rule, a verification code rule parameter input box pops up so that the user can customize the verification code rule parameters.

[0137] Among them, the verification code rule parameters include the left offset value and the right offset value of the slider. For example, before the security reinforcement rule is enabled, the function rule for the system to determine whether the slider controlled by the user covers the gap is that the absolute value of the distance between the right coordinate of the slider controlled by the user and the right coordinate of the gap does not exceed 1vw. The user can set the parameters entered in the input box to set the left offset value to 0vw and the right offset value to 5vw, that is, when the right coordinate of the slider controlled by the user is 0-5vw to the right of the right coordinate of the slider gap, the slider verification is passed. After the verification is passed, the user can choose to turn off the security reinforcement rule or adjust the verification code rule parameters of the security reinforcement rule at any time in the system.

[0138] S630: When the input speed index is between the second input speed index threshold and the first input speed index threshold, maintain the current verification mode to perform sliding verification.

[0139] It can be understood that the current verification mode is one of the general slider verification mode, the first customized verification mode and the second customized verification mode. It should be noted that if the user enables the customized slider verification mode for the first time, the current verification mode is automatically changed to the general slider verification mode. When the input speed index is between the second input speed index threshold and the first input speed index threshold, if the current verification mode is the general slider verification mode, the general slider verification mode is maintained unchanged, and if the current verification mode is the first customized verification mode, the first customized verification mode is maintained unchanged.

[0140] After the sliding verification is completed, the customized slider verification mode can be exited. When exiting, the customized exit mechanism can also be followed. In some embodiments, the method also includes: until the user manually exits the customized slider verification mode, or the number of times the trust index is less than the trust index threshold is greater than the second number threshold, exit the customized slider verification mode. The user can actively choose to turn off the customized slider verification mode in the system at any time. After turning off the customized slider verification mode in this way, the user can actively choose to turn it on in the system at any time. Alternatively, when the number of times the trust index is less than the trust index threshold is greater than the second number threshold, for example, 5 times, exit the customized slider verification mode. After exiting the customized slider verification mode in this way, the user needs to open it through a pop-up window invitation when the probability of passing the verification behavior is less than the probability threshold.

[0141] The control method provided by this application determines the credibility of the user's verification behavior by calculating the trust index of the current verification behavior. When the credibility of the user's access verification as a real person is high, it calculates the verification behavior passing probability. When the verification behavior passing probability is low, it provides the user with a customized verification method to enable the user to perform a slider verification, and selects different verification modes according to different input speed indexes to dynamically adjust the verification mode according to the customer's own situation, so that the slider verification better meets the user's own needs, solves the problem of difficult verification passing in the slider verification process, can shorten the verification passing time, and improve the probability of verification passing. On the premise of ensuring basic security, it brings a better verification experience to the user.

[0142] Based on the above customized slider verification access control method, some embodiments of this application also provide a customized slider verification access control system, which is applied to the method provided by the above embodiments. Refer to Figure 7 The system includes a credibility judgment module, a calculation module, a customization enabling module, and a selection verification module.

[0143] The credibility judgment module is used to obtain the current verification behavior information and historical verification behavior information of the user, and calculate the trust index of the current verification behavior according to the current verification behavior information and historical verification success information.

[0144] Among them, the current verification behavior information and historical verification behavior information are the information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information. The trust index is used to verify the credibility of the user's verification behavior.

[0145] The calculation module is used to calculate the verification behavior passing probability of the user under a high trust index, where the trust index is used to verify the credibility of the user's verification behavior.

[0146] The customization enabling module is used to pop up a window to enable customized slider verification to ask the user whether to enable customized slider verification when the verification behavior passing probability is less than the probability threshold.

[0147] The calculation module is also used to calculate the input speed index of the user after the user enables customized slider verification.

[0148] The selection verification module is used to perform sliding verification using different verification modes according to the input speed index during the next verification.

[0149] As can be seen from the above technical solutions, the embodiments of the present application provide a customized slider verification access control method and system. The method includes: obtaining the current verification behavior information and historical verification behavior information of a user; calculating a trust index of the current verification behavior according to the current verification behavior information and historical verification success information; calculating the passing probability of the user's verification behavior under a high trust index; when the passing probability of the verification behavior is less than a probability threshold, popping up a window for enabling customized slider verification to ask the user whether to enable the customized slider verification mode; if the user enables the customized slider verification mode, calculating an input speed index of the user; and selecting different verification modes for sliding verification according to the input speed index at the next verification. By selecting different verification modes according to different input speed indexes, the slider verification can better meet the user's own needs, shorten the verification passing time, and increase the verification passing probability. On the premise of ensuring basic security, a better verification experience can be brought to the user, and the problem of difficult verification passing in the slider verification process can be solved.

[0150] For the similarities between the embodiments provided in the present application, reference can be made to each other. The specific embodiments provided above are only several examples under the general concept of the present application and do not constitute a limitation on the protection scope of the present application. For those skilled in the art, any other implementation manner extended based on the solution of the present application without creative efforts belongs to the protection scope of the present application.

Claims

1. A customized slider verification access control method, characterized in that: include: Obtain the user's current verification behavior information and historical verification behavior information, wherein the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information; Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior; Calculating the passing probability of the user verification behavior under a high trust index, wherein the high trust index is the trust index greater than a trust index threshold; When the probability of passing the verification behavior is less than the probability threshold, a pop-up window for enabling customized slider verification is popped up to ask the user whether to enable the customized slider verification mode; If the user enables the customized slider verification mode, calculating the user's input speed index; Using different verification modes for sliding verification in the next verification according to the input speed index, the verification modes include a general slider verification mode, a first customized verification mode, and a second customized verification mode; The selecting a different verification mode for sliding verification at the next verification according to the input speed index comprises: When the input speed index is greater than a first input speed index threshold, using the first customized verification mode to perform sliding verification; When the input speed index is less than a second input speed index threshold, using the second customized verification mode to perform sliding verification; When the input speed index is between the second input speed index threshold and the first input speed index threshold, the current verification mode is maintained for sliding verification; the current verification mode includes the general slider verification mode, the first customized verification mode and the second customized verification mode.

2. The customized slider authentication access control method according to claim 1, characterized in that: The current verification behavior information includes the current IP address, the current verification time, and the current access time; the trust index of the current verification behavior calculated based on the current verification behavior information and the historical verification success information includes: Obtain the historical verification success information within a first preset time period, wherein the historical verification success information includes a historical IP address, a historical verification time, and a historical access time; When the amount of the historical verification success information is greater than the quantity threshold, the user's trust index is calculated based on the historical IP address, historical verification time, historical access time and the current IP address, current verification time, and current access time.

3. The customized slider authentication access control method according to claim 2, characterized in that: The calculation of the probability of passing the user's verification behavior under a high trust index includes: Obtain the total number of verifications and the number of successful verifications within the first preset time period under a high trust index; The probability of passing the user's verification behavior is calculated based on the total number of verification times and the number of successful verifications.

4. The customized slider authentication access control method according to claim 2, characterized in that: If the user enables the customized slider verification, calculating the user's input speed index includes: Obtain the historical verification time of the same user every second preset time, so as to calculate a first average input time according to the historical verification time, wherein the first average input time is an average value of the sum of multiple historical verification times of the same user; Obtaining historical verification times of different users according to the historical verification behavior information of different users at every second preset time, so as to calculate a second average input time according to the historical verification times of different users, wherein the second average input time is an average value of the sum of the historical verification times of different users; The input speed index is calculated based on the first average input time and the second average input time.

5. The customized slider authentication access control method according to claim 1, characterized in that: Verification using the universal slider verification mode includes: Acquire the historical verification failure information to set the notch position of the slider verification picture according to the historical verification failure information; Performing device environment detection on the access device to obtain an access mode of the access device; the access mode includes a browser dark mode and a color inversion mode; The background color of the slider verification picture is dynamically adjusted according to the access mode.

6. The customized slider authentication access control method according to claim 5, characterized in that: The historical verification failure information includes a first coordinate and a second coordinate at the gap, and the first coordinate and the second coordinate are two symmetrical coordinates at the gap respectively; and setting the gap position of the slider verification picture according to the historical verification failure information includes: Clustering the plurality of the first coordinates and the second coordinates by a K-Means algorithm to calculate a discrete ratio; If the discrete ratio is greater than the ratio threshold, obtaining the center point coordinates of the first coordinate and the second coordinate; When generating the slider verification picture, the gap is set at a position away from the center point coordinates.

7. The customized slider authentication access control method according to claim 5, characterized in that: When the input speed index is greater than a first input speed index threshold, performing sliding verification using the first customized verification mode includes: Calling the universal slider verification mode; In the general slider verification mode, moving the slider and the notch of the slider verification picture to the bottom of the slider verification picture; A separate route jump verification page is selected as the verification method of the slider verification picture to provide a simple verification page; Increase the time interval for calculating the current cursor position and the time interval for forming the slider movement coordinate changes to reduce the calculation frequency.

8. The customized slider authentication access control method according to claim 7, characterized in that: When the input speed index is less than a second input speed index threshold, performing sliding verification using the second customized verification mode includes: Calling the universal slider verification mode; In the universal slider verification mode, increasing the length of the slider and the notch from a first length to a second length; Two gaps are provided on the slider verification picture to perform sliding verification in a double-vacancy verification manner; A security reinforcement pop-up window is popped up on the page where the slider verification image is located to ask the user whether to enable the security reinforcement rule; If the user turns on the security reinforcement rule, a verification code rule parameter input box pops up to allow the user to customize the verification code rule parameters; the verification code rule parameters include the left offset value and the right offset value of the slider.

9. A customized slider verification access control system, characterized in that: The method according to any one of claims 1 to 8 is applied, wherein the system comprises: Credibility judgment module: used to obtain the user's current verification behavior information and historical verification behavior information, the current verification behavior information and the historical verification behavior information are information when the user uses the initial slider verification code for verification, and the historical verification behavior information includes historical verification success information and historical verification failure information; Calculating a trust index of the current verification behavior according to the current verification behavior information and the historical verification success information, wherein the trust index is used to verify the credibility of the user's verification behavior; Calculation module: used to calculate the probability of passing the user's verification behavior under a high trust index, wherein the high trust index is the trust index greater than the trust index threshold; Customized enabling module: used for popping up a pop-up window for enabling customized slider verification to ask the user whether to enable customized slider verification when the passing probability of the verification behavior is less than the probability threshold; The calculation module is also used to calculate the user's input speed index after the user enables the customized slider verification; A selection verification module is used to adopt different verification modes for sliding verification in the next verification according to the input speed index, and the verification modes include a general slider verification mode, a first customized verification mode and a second customized verification mode.

Images