Dynamic detection time secondary authentication method, computer device, medium and product

Abstract

The invention discloses a dynamic detection time secondary authentication method, a computer device, a medium and a product. The method comprises the following steps: in response to a dialing demand, determining a dialing type and dialing time; if the dialing type belongs to the first dialing and the dialing time is not within the preset time range, triggering secondary authentication, allowing login after passing, and dynamically updating the time based on a first strategy; if the dialing does not belong to the first dialing, obtaining user information, and determining a corresponding target time table; when the dialing time exists in the target time table, the last offline time corresponding to the same dialing time is determined, if the time interval between the dialing time and the last offline time is larger than the preset duration, secondary authentication is triggered, login is permitted after passing, and the time is dynamically updated based on a second strategy; and if the dialing time does not exist in the target time table, secondary authentication is triggered, login is permitted after the secondary authentication passes, and the time is dynamically updated based on a third strategy. The method can be used for dynamic detection and dynamic updating, and meets different user requirements.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to a dynamic detection time secondary authentication method, a computer device, a medium, and a product. Background Art

[0002] SSL VPN is a VPN technology that has emerged in recent years. Its application has developed rapidly with the popularization of the Web and the rise of e-commerce and remote office. The SSL protocol is mainly composed of the SSL record protocol and the handshake protocol, which together provide authentication, encryption and anti-tampering functions for application access connections.

[0003] The prior art is to configure a fixed time for allowing or denying dial-in to the VPN. When a user dials using an SSLVPN client, the security policy will be searched on the gateway. If a relevant policy is matched, a corresponding action will be taken. For example, a time for allowing dial-in to the VPN is configured on the gateway. Dial-up within this time can succeed, otherwise it will fail; or a time for denying dial-in to the VPN is configured on the gateway. Dial-up within this time will fail, otherwise it will succeed.

[0004] The existing authentication technology is to perform authentication only once when dialing. If the authentication is passed, the dial-in is allowed, and if the authentication fails, the dial-in is rejected. That is, the security policy scheme disclosed in the prior art controls the time when users dial into SSLVPN. Since the set time is fixed, when a normal user dials in during an unallowed time, it will fail, which will affect the work. For example, the time allowed for dial-in by unit A is set during working hours. One day, user B has a temporary job during non-working hours and needs to visit the company website. In this case, user B will be denied dial-in; in addition, if additional access rights are applied for under special circumstances, the network administrator needs to manually modify the policy, which wastes manpower and time. Summary of the invention

[0005] In view of this, the embodiments of the present disclosure provide a dynamic detection time secondary authentication method, computer device, medium, and product, which can solve the problems that the authentication method disclosed in the prior art cannot meet the login needs of different users in different time periods and has poor applicability.

[0006] In a first aspect, an embodiment of the present disclosure provides a dynamic detection time secondary authentication method, including:

[0007] In response to the dialing demand, determining the dialing type and the dialing time;

[0008] If the dialing type is the first dialing and the dialing time is within the preset time range, allowing the user to log in;

[0009] If the dial-up time is not within the preset time range, a secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the first strategy;

[0010] If the dialing type is not the first dialing, obtaining user information;

[0011] determining a corresponding target schedule based on the user information;

[0012] When the dialing time exists in the target time table, determining the last offline time corresponding to the same dialing time, and recording it as the target time;

[0013] If the time interval between the dialing time and the target time is greater than the preset time length, a secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the second strategy;

[0014] If the dial-up time does not exist in the target time table, secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the third policy.

[0015] Optionally, dynamically updating the time range based on the first strategy includes:

[0016] Get the current online time range;

[0017] Determine whether the current online time range is greater than a preset online time length. If not, use the preset time range as the target schedule; if so, use the current online time range and the preset time range as the target schedule.

[0018] Optionally, dynamically updating the time range based on the second strategy includes:

[0019] Get the current online time range;

[0020] Determine whether the current online time range is greater than the preset online time length, if so, delete the newly added time period corresponding to the target time from the target time table, and add the current login time period to obtain an updated target time table;

[0021] If not, the newly added time period corresponding to the target time is deleted from the target time table to obtain an updated target time table.

[0022] Optionally, dynamically updating the time range based on the third strategy includes:

[0023] Determine whether the time interval between the current login time and the last offline time is greater than a preset time, and if so, use the preset time range as the updated target schedule;

[0024] If not, obtain the current online time range and determine whether the current online time range is greater than the preset online duration. If so, use the current online time range and the preset time range as the target schedule; if not, use the preset time range as the updated target schedule.

[0025] Optionally, the method further includes: optimizing the obtained online time range;

[0026] The optimization of the obtained online time range includes:

[0027] Determine the login time and logout time based on the online time range;

[0028] Extracting login hour information and login minute information of the login time;

[0029] Analyze the login hour information and the login minute information based on the first analysis strategy to obtain a target login time;

[0030] Extracting the logout hour information and the logout minute information of the logout time;

[0031] Analyze the logout hour information and the logout minute information based on a second analysis strategy to obtain a target logout time;

[0032] The target login time and the target logout time constitute a time range as the optimized online time range for the current time.

[0033] Optionally, analyzing the login hour information and the login minute information based on the first analysis strategy to obtain the target login time includes:

[0034] Obtain a first difference between the login minute information and a preset sub-duration. If the first difference is not less than 0, obtain a time difference between the login time and the next full hour, and determine whether the time difference is greater than the preset online time. If so, take the sum of the login hour information and the preset sub-duration as the target login time; if not, take the next full hour as the target login time;

[0035] If the first difference is less than 0, determine whether the absolute value of the first difference is greater than the preset online time. If so, use the login hour information as the target login time. If not, use the sum of the login hour information and the preset sub-time as the target login time.

[0036] Optionally, the logout hour information and the logout minute information are analyzed based on a second analysis strategy to obtain a target logout time;

[0037] Obtain a second difference between the logout minute information and the preset sub-duration, and if the second difference is not less than 0, obtain a time difference between the preset sub-duration and the logout minute information, and determine whether the time difference is greater than the preset online duration, and if so, use the sum of the logout hour information and twice the preset sub-duration as the target logout time, and if not, use the sum of the logout hour information and the preset sub-duration as the target logout time;

[0038] If the second difference is less than 0, determine whether the logout minute information is greater than the preset online duration. If so, use the sum of the logout hour information and the preset sub-duration as the target logout time. If not, use the logout hour information as the target logout time.

[0039] Optionally, the method further includes: when the online time range of the current time is greater than a preset online time, obtaining a total time of the online time range of the current time;

[0040] Divide the total duration into preset sub-durations to obtain a plurality of sub-blocks sorted by time;

[0041] Determine whether the duration of the last sub-block is greater than the preset online duration, and if so, use the current online time range and the preset time range as the target schedule;

[0042] If not, the time range corresponding to the last sub-block is deleted from the current online time range to obtain a valid time range;

[0043] The effective time range and the preset time range are used as a target time table.

[0044] Optionally, the ratio of the preset sub-duration to the preset online duration is T, T∈(3,7).

[0045] In a second aspect, the embodiment of the present disclosure further provides a dynamic detection time secondary authentication system, which specifically includes the following contents:

[0046] A response module, for determining a dialing type and a dialing time in response to a dialing demand;

[0047] A first judgment module, configured to allow the user to log in if the dialing type is the first dialing and the dialing time is within a preset time range;

[0048] A first dynamic update module, configured to trigger secondary authentication if the dial-up time is not within a preset time range, and to allow the user to log in if the secondary authentication is passed, and to dynamically update the time range based on the first strategy;

[0049] A user information acquisition module, used to acquire user information if the dialing type is not the first dialing;

[0050] A schedule determination module, used to determine a corresponding target schedule based on user information;

[0051] A second judgment module is used to determine the last offline time corresponding to the same dialing time when the dialing time exists in the target time table, and record it as the target time;

[0052] A second dynamic update module is used to trigger secondary authentication if the time interval between the dialing time and the target time is greater than a preset time length, and if the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on a second strategy;

[0053] The third dynamic update module is used to trigger secondary authentication if the dial-up time does not exist in the target timetable, and if the secondary authentication is passed, allow the user to log in and dynamically update the time range based on the third strategy.

[0054] In a third aspect, the embodiments of the present disclosure further provide a computer device, which adopts the following technical solution:

[0055] The computer device comprises:

[0056] at least one processor; and,

[0057] a memory communicatively connected to the at least one processor; wherein,

[0058] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute any of the dynamic detection time secondary authentication methods described above.

[0059] In a fourth aspect, an embodiment of the present disclosure further provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute any of the dynamic detection time secondary authentication methods described above.

[0060] In a fifth aspect, an embodiment of the present disclosure further provides a computer program product, including a computer program / instruction, which implements the steps of any of the above methods when executed by a processor.

[0061] The dynamic detection time secondary authentication method disclosed in the present application focuses on the identity authentication scenario before the network node accesses the SSLVPN. Through multiple authentication processes and dynamic time range updates, the security of the system is greatly improved, especially through the processing of the first dial-up, time interval and target timetable, it effectively prevents illegal login attempts; the dynamic detection and update time range can better adapt to the user's daily behavior patterns and provide a more personalized login experience; the security policy can be dynamically adjusted according to the user's different dial-up behaviors to ensure that the appropriate security protection level can be provided in different usage scenarios, which can effectively solve the access identity authentication problem of the network node and allow users who need access under special circumstances to dial normally; through the concept of dynamically generating time policies proposed in the present application, more accurate decisions can be made based on user behavior data, thereby improving the overall intelligence and automation level, which not only increases flexibility, but also reduces the burden on network administrators, that is, reduces the frequency of manual policy modification and management costs.

[0062] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the following preferred embodiments are specifically cited and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0064] Figure 1 A flowchart of a dynamic detection time secondary authentication method provided in an embodiment of the present disclosure.

[0065] Figure 2 A flowchart of a method for dynamically updating a time range based on a first strategy provided in an embodiment of the present disclosure.

[0066] Figure 3 A flowchart of a method for dynamically updating a time range based on a second strategy provided in an embodiment of the present disclosure.

[0067] Figure 4 A flowchart of a method for dynamically updating a time range based on a third strategy provided in the first embodiment of the present application.

[0068] Figure 5 A flowchart of a method for dynamically updating a time range based on a third strategy provided in the second embodiment of the present application.

[0069] Figure 6 A flowchart of a method for optimizing the acquired online time range provided in an embodiment of the present disclosure.

[0070] Figure 7 A flowchart of a method for processing when the online time range is greater than a preset online time length is provided in an embodiment of the present disclosure.

[0071] Figure 8 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0072] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0073] It should be clear that the following embodiments of the present disclosure are described by specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other in the absence of conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0074] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.

[0075] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0076] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

[0077] Reference Figure 1 The present application discloses a dynamic detection time secondary authentication method, which specifically includes the following steps:

[0078] S100, in response to a dialing requirement, determining a dialing type and a dialing time.

[0079] Specifically, according to the dialing request initiated by the user, the dialing type is determined, that is, it is identified whether the request is the first dialing or the subsequent dialing, and the current dialing time is determined.

[0080] S200: If the dialing type is the first dialing and the dialing time is within a preset time range, triggering a login permission instruction (ie, allowing the user to log in).

[0081] Among them, the preset time range is a common schedule preset according to the user's applicable scenarios or work habits.

[0082] Specifically, if it is identified as the first dial-up and the dial-up time is within the preset time range (for example, 8 pm to 6 am), the login permission instruction will be directly triggered; for new users, only basic initial verification is required, which reduces the complexity of new users' use and also provides new users with a friendly login experience.

[0083] In this step, first determine whether the dialing type is the first dialing, if so, then determine whether the dialing time is within the preset time range, if so, trigger the login permission instruction, if not (i.e. not within the preset time range), execute S300.

[0084] S300, if the dialing time is not within the preset time range, trigger the secondary authentication, if the secondary authentication is passed, trigger the login permission instruction, and dynamically update the time range based on the first strategy.

[0085] Specifically, if the dialing time of the first dial is not within the preset time range, the secondary authentication process will be triggered. Only after the secondary authentication is passed can the user log in, and the time range will be dynamically updated according to the first strategy.

[0086] Among them, when the secondary authentication fails, the login rejection instruction is triggered.

[0087] Secondary authentication increases security, especially when users log in at non-preset times, ensuring account security, and dynamically updated time ranges make security policies more flexible and adaptable.

[0088] S400: If the dialing type is not the first dialing, obtain user information.

[0089] Specifically, for non-first dialing, it is necessary to obtain detailed information of the user, including but not limited to login history, usage habits, etc. Obtaining user information helps the system better understand user behavior patterns, thereby adopting more personalized and secure time management strategies.

[0090] S500: Determine a corresponding target schedule based on user information.

[0091] The corresponding target time table is a standard time range within which the user is allowed to log in.

[0092] S600: When the current dialing time exists in the target time table, the last offline time corresponding to the same dialing time is determined and recorded as the target time.

[0093] Specifically, when the current dial-up time exists in the target time table, the offline time of the last time the user was in the online working time period at the same dial-up time is determined, and the offline time is recorded as the target time.

[0094] S700, if the time interval from the current dialing time to the target time is greater than the preset time length, trigger the secondary authentication, if the secondary authentication passes, trigger the login permission instruction, and dynamically update the time range based on the second strategy.

[0095] Specifically, under the premise that the current dialing time exists in the target timetable, it is determined whether the time interval from the current dialing time to the target time is greater than the preset duration. If so, a secondary authentication is triggered. If the secondary authentication passes, a login permission instruction is triggered, and the time range is dynamically updated based on the second strategy; if not (that is, the time interval is not greater than the preset duration), a login permission instruction is triggered.

[0096] S800, if the current dial-up time does not exist in the target time table, trigger the secondary authentication, if the secondary authentication is passed, trigger the login permission instruction, and dynamically update the time range based on the third strategy.

[0097] Specifically, if the current dial-up time is not recorded in the target timetable, secondary authentication will be triggered. After the authentication is passed, the user logs in and the time range is updated according to the third policy.

[0098] Among them, when the current dial-up time does not exist in the target time table and the secondary authentication fails, a login rejection instruction is triggered and the corresponding target time table remains unchanged.

[0099] In the absence of records in the target timeline, two-factor authentication increases security, and the update time range may introduce new time points to further optimize the user's login experience.

[0100] The dynamic detection time secondary authentication method disclosed in the present application focuses on the identity authentication scenario before the network node accesses the SSLVPN. Through multiple authentication processes and dynamic time range updates, the security of the system is greatly improved, especially through the processing of the first dial-up, time interval and target timetable, it effectively prevents illegal login attempts; the dynamic detection and update time range can better adapt to the user's daily behavior patterns and provide a more personalized login experience; the security policy can be dynamically adjusted according to the user's different dial-up behaviors to ensure that the appropriate security protection level can be provided in different usage scenarios, which can effectively solve the access identity authentication problem of the network node and allow users who need access under special circumstances to dial normally; through the concept of dynamically generating time policies proposed in the present application, more accurate decisions can be made based on user behavior data, thereby improving the overall intelligence and automation level, which not only increases flexibility, but also reduces the burden on network administrators, that is, reduces the frequency of manual policy modification and management costs.

[0101] In this embodiment, the secondary authentication may be password verification, mobile phone verification code, etc.

[0102] Reference Figure 2 , the method for dynamically updating the time range based on the first strategy specifically includes the following contents:

[0103] When the secondary authentication is passed, a secondary authentication pass instruction is generated;

[0104] In response to the passing instruction, triggering a login permission instruction;

[0105] Get the current online time range;

[0106] Determine whether the current online time range is greater than the preset online time. If not, use the preset time range as the target schedule; if so, use the current online time range and the preset time range as the target schedule.

[0107] The current online time range refers to the continuous online time range from login to logoff.

[0108] The solution disclosed in this embodiment is for the situation that it is the first dialing, the dialing time of the first dialing is not within the preset time range, and the secondary authentication is passed.

[0109] When the user passes the secondary authentication, the system generates a pass instruction, indicating that the user has passed the additional security check, and then triggers the login permission instruction in response to the pass instruction, allowing the user to log in; at the same time, the user's current online time range is recorded, that is, the time period from the user logging in to the user going offline; the current online time range is compared with the preset online time length, if the current online time range is less than the preset online time length, the preset time range is used as the target schedule; if the current online time range is greater than the preset online time length, the current online time range and the preset time range are used together as the target schedule.

[0110] The introduction of the secondary authentication mechanism significantly improves the security of the system. Even in non-preset time ranges (such as the first dial-up time is not within the preset time range), the authenticity of the user's identity can be ensured; the dynamic update time range can be automatically adjusted according to the user's actual usage, avoiding dependence on fixed time strategies. For example, outside the preset security time period, users can also be allowed to log in through secondary authentication, which improves the flexibility of the system.

[0111] By dynamically updating the time range, the problem of users being unable to access the system due to fixed time policies is avoided. For example, if a user suddenly needs to access the system during non-working hours, he can log in normally after secondary authentication, which meets the user's temporary access needs and improves the user experience.

[0112] This method utilizes the user's actual online time range to dynamically update the schedule, making the security policy more data-driven and able to adjust the policy based on the user's actual behavior, making security protection more targeted and effective; at the same time, dynamic policy update reduces the need for administrator intervention, reduces the frequency of manual policy modification and management costs, and administrators do not need to manually adjust the policy for each user's special access needs. The system can automatically process and update, improving efficiency.

[0113] Reference Figure 3 The method for dynamically updating the time range based on the second strategy specifically includes the following contents:

[0114] When the secondary authentication is passed, a secondary authentication pass instruction is generated;

[0115] In response to the passing instruction, triggering a login permission instruction;

[0116] Get the current online time range;

[0117] Determine whether the current online time range is greater than the preset online time. If so, delete the newly added time period corresponding to the target time from the target schedule, and add the current login time period to obtain an updated target schedule;

[0118] If not, the newly added time period corresponding to the target time is deleted from the target timetable to obtain an updated target timetable.

[0119] The solution disclosed in this embodiment is for the case where it is not the first dialing, the current dialing time exists in the corresponding target time table obtained, the time interval from the dialing time to the target time is greater than the preset time length, and the secondary authentication is passed.

[0120] The method disclosed in this embodiment can dynamically adjust the target schedule according to the actual online time and the preset duration, and can flexibly adjust the time management strategy according to the user's behavior and authentication status; through secondary authentication, it is ensured that only legitimate users can log in, which increases the security of the system. At the same time, updating the schedule can ensure that the system can manage time according to the latest user activity records to avoid the risk of being online for too long; by judging whether the online time exceeds the preset duration, the target schedule can be adjusted in time, the timeout period can be deleted and the login period can be added. This dynamic adjustment helps to more effectively manage the user's online time and system resource usage.

[0121] This method ensures that the target schedule is updated accurately to each login, which can reflect the user's current status and activities in real time, ensure the accuracy of time management and the system's rapid response to changes; by dynamically deleting and adding time periods, resource allocation can be optimized, avoiding the occupation of resources that have not been used for a long time, and improving the operating efficiency of the overall system.

[0122] In general, the method of dynamically updating the time range based on the second strategy provides an effective, secure and flexible time management mechanism, which is particularly suitable for system environments that require precise control and response to user activities.

[0123] Furthermore, in the application, if the time interval from the dialing time to the target time is greater than the preset time length and the secondary authentication fails, a login rejection instruction is triggered and the newly added time period corresponding to the target time is deleted from the target timetable to obtain an updated target timetable.

[0124] Reference Figure 4 The method for dynamically updating the time range based on the third strategy specifically includes the following contents:

[0125] When the secondary authentication is passed, a secondary authentication pass instruction is generated;

[0126] In response to the passing instruction, triggering a login permission instruction;

[0127] Determine whether the time interval between the current login time and the last offline time is greater than the preset time length. If so, use the preset time range as the updated target schedule;

[0128] If not, obtain the current online time range and determine whether the current online time range is greater than the preset online duration. If so, use the current online time range and the preset time range as the target schedule; if not, use the preset time range as the updated target schedule.

[0129] The solution disclosed in this embodiment is for the case where it is not the first dialing, the current dialing time does not exist in the corresponding target time table obtained, the time interval from the dialing time to the target time is greater than the preset time length, and the secondary authentication is passed.

[0130] Among them, it is determined whether the time interval from the current login time to the last offline time is greater than the preset time length, that is, whether the time interval from the current login time to the most recent last offline time is greater than the preset time length. For example, the preset time length can be set to one week to ensure that users who have not logged in for a long time have a reasonable time range reference.

[0131] The preset online duration is preferably set to 5 minutes, which ensures that the work done by the user after logging in is meaningful. For short-term login browsing, it is not necessary to update the original corresponding event table, thereby reducing unnecessary data updates.

[0132] The method disclosed in this embodiment generates a "pass instruction" when the user passes the secondary authentication (such as password verification, mobile phone verification code, etc.). This instruction triggers the user to log in; it determines whether the interval between the current login time and the last offline time is greater than a preset duration (such as one week). If so, the preset time range is used as the updated target schedule; if not (that is, the interval is not greater than the preset duration), after the user goes offline, the online time range of that time is obtained.

[0133] Then determine whether the current online time is greater than the preset online time (such as 5 minutes). If so, merge the current online time range with the preset time range as the updated target schedule. If not, still use the preset time range as the updated target schedule.

[0134] By setting a preset online duration, you can avoid frequently updating the schedule for users who log in for a short time (such as simply checking information), thereby reducing unnecessary data updates and processing. For users who log in again after a long time interval, the system will automatically use the preset time range, avoiding frequent schedule updates and optimizing system resource usage. This solution can dynamically adjust the schedule according to the user's actual online duration, ensuring that the schedule update matches the user's actual usage behavior, thereby improving the system's flexibility and user experience. This method can optimize system performance and user experience while ensuring security by dynamically judging and updating the schedule.

[0135] Reference Figure 5In another embodiment, the method for dynamically updating the time range based on the third strategy specifically includes:

[0136] When the secondary authentication is passed, a secondary authentication pass instruction is generated;

[0137] In response to the passing instruction, triggering a login permission instruction;

[0138] Get the current online time range;

[0139] Determine whether the current online time range is greater than the preset online time length. If so, use the current online time range and the preset time range as the target schedule (i.e., the newly acquired current online time range is used to obtain the updated target schedule); if not, do not update the target schedule.

[0140] The method disclosed in this embodiment generates a "pass instruction" after the user passes the secondary authentication, and this instruction triggers the user to log in; when the user goes offline, the user's current online time range is obtained, that is, the current online time range from login to offline; then it is determined whether the current online time range is greater than the preset online time length, if so, the current online time range is merged with the preset time range as the updated target time schedule, if not, the target time schedule is not updated.

[0141] By setting a preset online duration, you can avoid frequently updating the schedule for users who log in for a short time (such as simply browsing information), thereby reducing unnecessary data updates and processing. The schedule will only be updated when the user's actual online time exceeds the preset duration, ensuring that the schedule update is based on the user's real behavior of intentionally using the system rather than meaningless short-term logins; when the current online time is short, the schedule for short-term logins may not be updated, avoiding unnecessary calculation and storage operations, thereby optimizing the system's resource usage and performance; the schedule can be dynamically adjusted according to the user's actual online time, ensuring that the schedule update matches the user's actual usage behavior, thereby improving the system's flexibility and user experience.

[0142] Furthermore, the dynamic detection secondary authentication method disclosed in the present application also includes: optimizing the obtained online time range at that time, whether it is based on the first strategy dynamic update time range, the second strategy dynamic update time range, or the third strategy dynamic update time range, the optimized online time range at that time is used for subsequent operations.

[0143] Reference Figure 6 , a method for optimizing the obtained online time range, specifically including:

[0144] A100 determines the login time and logout time based on the online time range.

[0145] For example, in Example 1, the online time range is 09:10-12:03, and the login time is determined to be 09:10 and the logout time is 12:03; in Example 2, the online time range is 09:28-12:20, and the login time is determined to be 09:28 and the logout time is 12:20; in Example 3, the online time range is 09:58-12:58, and the login time is determined to be 09:58 and the logout time is 12:58; in Example 4, the online time range is 09:48-12:32, and the login time is determined to be 09:48 and the logout time is 12:32.

[0146] A200, extracts login hour information and login minute information of the login time.

[0147] In Example 1, the login hour information is 09:00, and the login minute information is 10 minutes; in Example 2, the login hour information is 09:00, and the login minute information is 28 minutes; in Example 3, the login hour information is 09:00, and the login minute information is 58 minutes; in Example 4, the login hour information is 09:00, and the login minute information is 48 minutes.

[0148] A300, obtain the first difference between the login minute information and the preset sub-time length.

[0149] If the preset sub-time length is half an hour, the first difference is -20 in the first embodiment, the first difference is -2 in the second embodiment, the first difference is 28 in the third embodiment, and the first difference is 18 in the fourth embodiment.

[0150] A400, if the first difference is not less than 0, obtain the time difference between the login time and the next hour, and determine whether the time difference is greater than the preset online time. If so, use the sum of the login hour information and the preset sub-time as the target login time; if not, use the next hour as the target login time.

[0151] In Example 3, the first difference is greater than 0, and the difference between the obtained login time (09:58) and the next hour (i.e. 10 o'clock) is 2 minutes; because the difference is not greater than the preset online time (e.g. 5 minutes), the next hour is used as the target login time, that is, 10 o'clock is used as the target login time of Example 3.

[0152] In Example 4, the first difference is greater than 0, and the difference between the obtained login time (09:48) and the next hour (i.e. 10 o'clock) is 12 minutes; because the difference is greater than the preset online time (e.g. 5 minutes), the sum of the login hour information and the preset sub-time is used as the target login time, that is, the sum of 9 o'clock and the preset sub-time (30 minutes) is used as the target login time of Example 4, i.e. 09:30.

[0153] A500, if the first difference is less than 0, determine whether the absolute value of the first difference is greater than the preset online time. If so, use the login hour information as the target login time. If not, use the sum of the login hour information and the preset sub-time as the target login time.

[0154] In the first embodiment, the first difference is -20, and the absolute value of the first difference (ie, 20) is greater than the preset online time (eg, 5 minutes), so the login hour information is used as the target login time, that is, 9 o'clock.

[0155] In the second embodiment, the first difference is -2, and the absolute value of the first difference (ie, 2) is not greater than the preset online duration (eg, 5 minutes). The sum of the login hour information and the preset sub-duration is used as the target login time, ie, 09:30.

[0156] A600, extract the logout hour information and logout minute information of the logout time.

[0157] In the first embodiment, the logout hour information is 12:00; the logout minute information is 3 minutes; in the second embodiment, the logout hour information is 12:00; the logout minute information is 20 minutes; in the third embodiment, the logout hour information is 12:00; the logout minute information is 58 minutes; in the second embodiment, the logout hour information is 12:00; the logout minute information is 32 minutes.

[0158] A700, obtains a second difference between the logout minute information and the preset sub-time length.

[0159] If the preset sub-time length is half an hour, in Example 1, the second difference is -27; in Example 2, the second difference is -10; in Example 3, the second difference is 28; in Example 4, the second difference is 2.

[0160] A800, if the second difference is not less than 0, obtain the time difference between the preset sub-duration and the logout minute information, and determine whether the time difference is greater than the preset online time. If so, use the sum of the logout hour information and twice the preset sub-duration as the target logout time. If not, use the sum of the logout hour information and the preset sub-duration as the target logout time.

[0161] In Example 3, the second difference is greater than 0, and the time difference between the obtained preset sub-time (for example, half an hour) and the logout minute information is 28. This time difference is greater than the preset online time (for example, 5 minutes). The sum of the logout hour information and twice the preset sub-time is used as the target logout time, that is, 13:00 is used as the target logout time.

[0162] In embodiment 4, the second difference is greater than 0, and the time difference between the obtained preset sub-duration (for example, half an hour) and the logout minute information is 2. The time difference is not greater than the preset online time (for example, 5 minutes). The sum of the logout hour information and the preset sub-duration (for example, half an hour) is used as the target logout time, that is, 12:30 is used as the target logout time.

[0163] A900, if the second difference is less than 0, determine whether the logout minute information is greater than the preset online duration. If so, use the sum of the logout hour information and the preset sub-duration as the target logout time. If not, use the logout hour information as the target logout time.

[0164] In the first embodiment, the second difference is less than 0, the logout minute information is not greater than the preset online duration, and the logout hour information is used as the target logout time, that is, 12:00 is used as the target logout time.

[0165] In the second embodiment, the second difference is less than 0, the logout minute information is greater than the preset online duration, and the sum of the logout hour information and the preset sub-duration is used as the target logout time, that is, 12:30 is used as the target logout time.

[0166] A1000 uses the target login time and the target logout time to form a time range as the optimized online time range.

[0167] In the first embodiment, the online time range is 09:10-12:03, and the optimized online time range is 09:00-12:00; in the second embodiment, the online time range is 09:28-12:20, and the optimized online time range is 09:30-12:30; in the third embodiment, the online time range is 09:58-12:58, and the optimized online time range is 10:00-13:00; in the fourth embodiment, the online time range is 09:48-12:32, and the optimized online time range is 09:30-12:30.

[0168] The method disclosed in this embodiment for optimizing the obtained online time range can ensure that the user's time in the system is more compact and reduce unnecessary waiting or idle time by optimizing login and logout times. The login and logout times are adjusted to the hour or multiples of a preset sub-time length, which helps to reduce time fragmentation and make the online time more continuous and efficient. The optimized time range is more in line with the user's daily habits and needs, avoiding the decline in user experience due to unreasonable login or logout times. By adjusting the user's online time, system resources can be allocated more effectively to ensure that the use of resources is more reasonable and efficient; by adjusting the time to a preset sub-time length, the accuracy of time management can be enhanced to help users better plan and manage their time.

[0169] Through the above optimization methods, users' online time will be more reasonable and efficient, thereby improving the overall user experience and the utilization efficiency of system resources.

[0170] Reference Figure 7 , further, the dynamic detection secondary authentication method disclosed in the present application further includes: when the online time range of the current time is greater than the preset online time length, obtaining the total time length of the online time range of the current time;

[0171] Divide the total duration into preset sub-durations to obtain a number of sub-blocks sorted by time;

[0172] Determine whether the duration of the last sub-block is greater than the preset online duration. If so, use the current online time range and the preset time range as the target schedule;

[0173] If not, delete the time range corresponding to the last sub-block from the current online time range to obtain the valid time range;

[0174] Use the effective time range and the preset time range as the target schedule.

[0175] Among them, the preset sub-time is preferably set to half an hour; the preset online time is preferably set to 5 minutes; the ratio of the preset sub-time to the preset online time is T, T∈(3,7).

[0176] In this embodiment, with respect to the judgment of the duration of the last sub-block, short periods of inactive or invalid behavior can be filtered out. For example, when the duration of the last sub-block is not greater than the preset online duration, the user is most likely organizing files and preparing to go offline during this period of time, and it can be determined that this does not belong to the user's commonly used time period. Therefore, this part of time can be deleted to extract a time period that is more effective for the user's office work.

[0177] For example, when the current online time range is from 10:00 to 11:32, the total duration can be determined to be 1 hour and 32 minutes. The total duration is divided into half-hour intervals, and the obtained sub-blocks sorted by time include: half an hour (i.e., the first sub-block is from 10:00 to 10:30), half an hour (i.e., the second sub-block is from 10:30 to 11:00), half an hour (i.e., the third sub-block is from 11:00 to 11:30), and 2 minutes (i.e., the fourth sub-block is from 11:30 to 11:32); because the duration of the last sub-block (2 minutes) is not greater than the preset online duration (e.g., 5 minutes), the time range corresponding to the last sub-block is deleted from the current online time range to obtain the effective time range (i.e., 10:00 to 11:30), and the effective time range and the preset time range are finally used as the target schedule.

[0178] For example, if the duration of the last sub-block (i.e., online time) exceeds 5 minutes, this period of time will be written into the schedule; for example, if a customer's online time is 09:10:11-12:03:21, 09:00:00-12:00:00 will be written into the schedule; if the online time is 09:27:11-12:10:24, 09:30:00-12:30:00 will be written into the schedule.

[0179] In the prior art, the access time of SSLVPN is controlled by a fixed policy, which lacks flexibility. When users need to access at non-specified times, they will encounter access denial issues. The dynamic detection time secondary authentication method avoids dependence on fixed time policies by dynamically updating the time range; the existing SSLVPN technology only performs authentication once when dialing, and this method is difficult to cope with complex access requirements in large-scale applications. The solution disclosed in this application increases the level of authentication by introducing secondary authentication, improves the user's identity recognition and security protection capabilities, and can automatically adjust according to the user's specific behavior through dynamic updates of the corresponding time range, reducing additional management operations. For users with temporary access needs, such as urgent work needs, there is no need for the administrator to manually modify the policy, and automatic analysis and judgment and automatic processing can be performed, effectively shortening the response time and reducing operating costs.

[0180] The dynamic detection time secondary authentication method disclosed in this application can be applied to situations where the dial-up time periods of each user vary greatly or are not fixed, and the administrator has a large amount of configuration. For example, some people in a company have fixed working hours, and some people need to work in three shifts. It is impossible to configure a fixed time period to allow login, and it is unsafe to allow all users to log in.

[0181] For example, the time periods from when user zhangsan dialed in to when he went offline on the first day were 09:00:00-12:00:00 and 14:00:00-18:00:00; the time period from when user lisi dialed in to when he went offline on the first day was 00:00:00-08:00:00; the time table currently generated by user zhangsan is 09:00:00-12:00:00 and 14:00:00-18:00:00 (i.e., the preset time range of user zhangsan can be set to 09:00:00-12:00:00 and 14:00:00-18:00:00), and the time table currently generated by user lisi is 00:00:00-08:00:00 (i.e., the preset time range of user lisi can be set to YY+242328P

[0182] is 00:00:00-08:00:00).

[0183] User zhangsan needs to log in from 13:00:00 to 13:30:00 the next day. If the gateway does not enable secondary authentication, the login will be rejected and the schedule will remain unchanged. If secondary authentication is enabled, the user can log in successfully after passing the secondary authentication. The schedule will be updated to 09:00:00-12:00:00, 13:00:00-13:30:00, and 14:00:00-18:00:00. User lisi needs to log in from 16:00:00 to 00:00:00 the next day. If the gateway does not enable secondary authentication, the login will be rejected and the schedule will remain unchanged. If secondary authentication is enabled, the user can log in successfully after passing the secondary authentication. The schedule will be updated to 00:00:00-08:00:00, and 16:00:00-00:00:00.

[0184] If user zhangsan is not online during the period of 13:00:00-13:30:00 a week later, his schedule will be updated to 09:00:00-12:00:00, 14:00:00-18:00:00.

[0185] The method disclosed in the present application makes the authentication mode more flexible, meets more authentication requirements, can automatically generate a schedule, and can reduce the administrator's operations; the secondary authentication allows users to log in to the VPN under special circumstances.

[0186] In a second aspect, the embodiment of the present disclosure further provides a dynamic detection time secondary authentication system, which specifically includes the following contents:

[0187] A response module, for determining a dialing type and a dialing time in response to a dialing demand;

[0188] A first judgment module is used to trigger a login permission instruction if the dialing type is the first dialing and the dialing time is within a preset time range;

[0189] A first dynamic update module is used to trigger secondary authentication if the dial-up time is not within a preset time range, and if the secondary authentication is passed, trigger a login permission instruction, and dynamically update the time range based on the first strategy;

[0190] A user information acquisition module, used to acquire user information if the dialing type is not the first dialing;

[0191] A schedule determination module, used to determine a corresponding target schedule based on user information;

[0192] The second judgment module is used to determine the last offline time corresponding to the same dialing time when there is a dialing time in the target time table, and record it as the target time;

[0193] A second dynamic update module is used to trigger secondary authentication if the time interval from the dial-up time to the target time is greater than a preset time length, and if the secondary authentication is passed, trigger a login permission instruction, and dynamically update the time range based on a second strategy;

[0194] The third dynamic update module is used to trigger the secondary authentication if the dial-up time does not exist in the target timetable, and if the secondary authentication is passed, trigger the login permission instruction and dynamically update the time range based on the third strategy.

[0195] It should be noted that the specific acquisition schemes in the dynamic detection time secondary authentication method disclosed in the first aspect of this application are applicable to the dynamic detection time secondary authentication system disclosed in the second aspect of this application, so they will not be repeated here one by one.

[0196] The computer device according to the embodiment of the present disclosure includes a memory and a processor. The memory is used to store non-temporary computer-readable instructions. Specifically, the memory may include one or more computer program products, and the computer program product may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may, for example, include a read-only memory (ROM), a hard disk, a flash memory, etc.

[0197] The processor may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the computer device to perform desired functions. In one embodiment of the present disclosure, the processor is used to run the computer-readable instructions stored in the memory, so that the computer device performs all or part of the steps of the dynamic detection time secondary authentication method of each embodiment of the present disclosure.

[0198] Those skilled in the art should be able to understand that in order to solve the technical problem of how to obtain a good user experience, the present embodiment may also include well-known structures such as a communication bus and an interface, and these well-known structures should also be included in the protection scope of the present disclosure.

[0199] like Figure 8 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure is shown, which is a schematic diagram of the structure of a computer device suitable for implementing the embodiment of the present disclosure. Figure 8 The computer device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0200] like Figure 8As shown, the computer device may include a processor (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) or a program loaded from a storage device into a random access memory (RAM). In the RAM, various programs and data required for the operation of the computer device are also stored. The processor, ROM, and RAM are connected to each other via a bus. An input / output (I / O) interface is also connected to the bus.

[0201] Typically, the following devices can be connected to the I / O interface: input devices such as sensors or visual information acquisition devices; output devices such as display screens; storage devices such as tapes, hard disks, etc.; and communication devices. The communication device can allow the computer device to communicate with other devices (such as edge computing devices) wirelessly or by wire to exchange data. Figure 8 A computer device having various devices is shown, but it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed instead.

[0202] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processor, all or part of the steps of the dynamic detection time secondary authentication method of an embodiment of the present disclosure are executed.

[0203] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

[0204] According to the computer-readable storage medium of the embodiment of the present disclosure, non-transitory computer-readable instructions are stored thereon. When the non-transitory computer-readable instructions are executed by a processor, all or part of the steps of the dynamic detection time secondary authentication method of each embodiment of the present disclosure are executed.

[0205] The above-mentioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card) and media with built-in ROM (e.g., ROM box).

[0206] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

[0207] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0208] In the present disclosure, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. The block diagrams of the devices, devices, equipment, and systems involved in the present disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, devices, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The words "such as" used here refer to the phrase "such as but not limited to", and can be used interchangeably with them.

[0209] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.

[0210] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0211] Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.

[0212] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0213] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A dynamic detection time secondary authentication method, characterized in that: include: In response to the dialing demand, determining the dialing type and the dialing time; If the dialing type is the first dialing and the dialing time is within the preset time range, allowing the user to log in; If the dial-up time is not within the preset time range, a secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the first strategy; If the dialing type is not the first dialing, obtaining user information; determining a corresponding target schedule based on the user information; When the dialing time exists in the target time table, determining the last offline time corresponding to the same dialing time, and recording it as the target time; If the time interval between the dialing time and the target time is greater than the preset time length, a secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the second strategy; If the dial-up time does not exist in the target time table, secondary authentication is triggered. If the secondary authentication is passed, the user is allowed to log in, and the time range is dynamically updated based on the third policy.

2. The dynamic detection secondary authentication method according to claim 1, characterized in that: The dynamically updating the time range based on the first strategy includes: Get the current online time range; Determine whether the current online time range is greater than a preset online time length. If not, use the preset time range as the target schedule; if so, use the current online time range and the preset time range as the target schedule.

3. The dynamic detection secondary authentication method according to claim 2, characterized in that: The dynamically updating the time range based on the second strategy includes: Get the current online time range; Determine whether the current online time range is greater than the preset online time length, if so, delete the newly added time period corresponding to the target time from the target time table, and add the current login time period to obtain an updated target time table; If not, the newly added time period corresponding to the target time is deleted from the target time table to obtain an updated target time table.

4. The dynamic detection secondary authentication method according to claim 3, characterized in that: The dynamically updating time range based on the third strategy includes: Determine whether the time interval between the current login time and the last offline time is greater than a preset time, and if so, use the preset time range as the updated target schedule; If not, obtain the current online time range and determine whether the current online time range is greater than the preset online duration. If so, use the current online time range and the preset time range as the target schedule; if not, use the preset time range as the updated target schedule.

5. The dynamic detection secondary authentication method according to claim 4, characterized in that: Also includes: Optimize the current online time range obtained; The optimization of the obtained online time range includes: Determine the login time and logout time based on the online time range; Extracting login hour information and login minute information of the login time; Based on the first analysis strategy, the login hour information and the login minute information are subjected to YY+242328P Analyze and obtain the target login time; Extracting the logout hour information and the logout minute information of the logout time; Analyze the logout hour information and the logout minute information based on a second analysis strategy to obtain a target logout time; The target login time and the target logout time constitute a time range as the optimized online time range for the current time.

6. The dynamic detection secondary authentication method according to claim 5, characterized in that: The analyzing the login hour information and the login minute information based on the first analysis strategy to obtain the target login time includes: Obtain a first difference between the login minute information and a preset sub-duration. If the first difference is not less than 0, obtain a time difference between the login time and the next full hour, and determine whether the time difference is greater than the preset online time. If so, take the sum of the login hour information and the preset sub-duration as the target login time; if not, take the next full hour as the target login time; If the first difference is less than 0, determine whether the absolute value of the first difference is greater than the preset online time. If so, use the login hour information as the target login time. If not, use the sum of the login hour information and the preset sub-time as the target login time.

7. The dynamic detection secondary authentication method according to claim 5, characterized in that: The logout hour information and the logout minute information are analyzed based on the second analysis strategy to obtain the target logout time; Obtain a second difference between the logout minute information and the preset sub-duration, and if the second difference is not less than 0, obtain a time difference between the preset sub-duration and the logout minute information, and determine whether the time difference is greater than the preset online duration, and if so, use the sum of the logout hour information and twice the preset sub-duration as the target logout time, and if not, use the sum of the logout hour information and the preset sub-duration as the target logout time; If the second difference is less than 0, determine whether the logout minute information is greater than the preset online time. If so, use the sum of the logout hour information and the preset sub-time as the target logout time. If not, use the logout hour information as the target logout time.

8. The dynamic detection secondary authentication method according to claim 4, characterized in that: Also includes: When the online time range of the current time is greater than the preset online time length, obtaining the total time length of the online time range of the current time; Divide the total duration into preset sub-durations to obtain a plurality of sub-blocks sorted by time; Determine whether the duration of the last sub-block is greater than the preset online duration, and if so, use the current online time range and the preset time range as the target schedule; If not, delete the time range corresponding to the last sub-block from the current online time range to obtain a valid time range; The effective time range and the preset time range are used as a target time table.

9. The dynamic detection secondary authentication method according to claim 8, characterized in that: The ratio of the preset sub-duration to the preset online duration is T, T∈(3,7).

10. A computer device, characterized in that: The computer device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the right YY+242328P The dynamic detection secondary authentication method described in any one of claims 1-9.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the dynamic detection secondary authentication method described in any one of claims 1-9.

12. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

Images