Dynamic detection time two-factor authentication method, computer device, medium, product

Abstract

The application discloses a dynamic detection time secondary authentication method, a computer device, a medium and a product. The method comprises the following steps: in response to a dialing requirement, determining a dialing type and a dialing time; if the dialing type is a first dialing and the dialing time is not within a preset time range, triggering secondary authentication, permitting login after passing the secondary authentication, and dynamically updating the time based on a first strategy; if the dialing type is not a first dialing, obtaining user information, and determining a corresponding target time table; if the dialing time exists in the target time table, determining a last offline time corresponding to the same dialing time, if a time interval from the dialing time to the last offline time is greater than a preset time length, triggering secondary authentication, permitting login after passing the secondary authentication, and dynamically updating the time based on a second strategy; if the dialing time does not exist in the target time table, triggering secondary authentication, permitting login after passing the secondary authentication, and dynamically updating the time based on a third strategy. The method can dynamically detect and dynamically update, and meets different user requirements.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of computer, and particularly relates to a dynamic detection time secondary authentication method, a computer device, a medium and a product. BACKGROUND

[0002] SSL VPN is a VPN technology that has arisen in recent years, and its application has developed rapidly with the popularity of Web and the rise of electronic commerce and remote office. SSL protocol is mainly composed of SSL record protocol and handshake protocol, which together provide authentication, encryption and tamper-proofing functions for application access connection.

[0003] The prior art is to configure fixed time for permitting or rejecting dial-in VPN, when a user uses an SSL VPN client to dial, the gateway is searched for a security policy, if a related policy is matched, a corresponding action is taken, for example, the time for permitting dial-in VPN is configured on the gateway, dialing in the time can be successful, otherwise, it fails; or the time for rejecting dial-in VPN is configured on the gateway, dialing in the time fails, otherwise, it can be successful.

[0004] The existing authentication technology is to perform authentication only once when dialing, if the authentication passes, dial-in is permitted, if the authentication fails, dial-in is rejected, that is, the time for controlling user dial-in SSL VPN is disclosed in the prior art by using this security policy scheme, since the set time is fixed, when a normal user dials in the time that is not allowed, dialing fails, which affects work. For example, the time for permitting dial-in is set by A unit as working hours, B user has temporary work to access the company website in non-working hours, in this case, B user is rejected to dial-in; in addition, if additional access permission is applied due to special circumstances, the network administrator needs to manually modify the policy, which wastes manpower and time. SUMMARY

[0005] Therefore, the embodiments of the present disclosure provide a dynamic detection time secondary authentication method, a computer device, a medium and a product, which can solve the problems that the authentication method disclosed in the prior art cannot meet the login needs of different users in different time periods and has poor applicability.

[0006] In a first aspect, the embodiments of the present disclosure provide a dynamic detection time secondary authentication method, comprising:

[0007] In response to a dialing demand, determining a dialing type and a dialing time;

[0008] If the dialing type belongs to first dialing and the dialing time is within a preset time range, permitting the user to log in;

[0009] If the dialing time is not within the preset time range, triggering secondary authentication, if through the secondary authentication, the user is permitted to log in, and the time range is dynamically updated based on the first strategy;

[0010] If the dialing type is not the first dialing, the user information is obtained;

[0011] The corresponding target time table is determined based on the user information;

[0012] When the dialing time exists in the target time table, the last offline time corresponding to the same dialing time is determined, which is recorded as the target time;

[0013] If the time interval from the dialing time to the target time is greater than the preset length, triggering secondary authentication, if through the secondary authentication, the user is permitted to log in, and the time range is dynamically updated based on the second strategy;

[0014] If the dialing time does not exist in the target time table, triggering secondary authentication, if through the secondary authentication, the user is permitted to log in, and the time range is dynamically updated based on the third strategy.

[0015] Optionally, the dynamically updating the time range based on the first strategy comprises:

[0016] Obtaining the current online time range;

[0017] Judging whether the current online time range is greater than the preset online length, if not, the preset time range is taken as the target time table; if yes, the current online time range and the preset time range are taken as the target time table.

[0018] Optionally, the dynamically updating the time range based on the second strategy comprises:

[0019] Obtaining the current online time range;

[0020] Judging whether the current online time range is greater than the preset online length, if yes, deleting the newly added time period corresponding to the target time from the target time table, and newly adding the current login time period to obtain the updated target time table;

[0021] If not, deleting the newly added time period corresponding to the target time from the target time table to obtain the updated target time table.

[0022] Optionally, the dynamically updating the time range based on the third strategy comprises:

[0023] Judging whether the time interval from the current login time to the last offline time is greater than the preset length, if yes, taking the preset time range as the updated target time table;

[0024] If no, the online time range of the current time is obtained, it is judged whether the online time range of the current time is greater than the preset online time length, if yes, the online time range of the current time and the preset time range are taken as the target time table; if no, the preset time range is taken as the updated target time table.

[0025] Optionally, the method further comprises optimizing the obtained online time range of the current time.

[0026] The optimizing the obtained online time range of the current time comprises:

[0027] Based on the online time range of the current time, a login time and a logout time are determined.

[0028] Login hour information and login minute information of the login time are extracted.

[0029] Based on a first analysis strategy, the login hour information and the login minute information are analyzed to obtain a target login time.

[0030] Logout hour information and logout minute information of the logout time are extracted.

[0031] Based on a second analysis strategy, the logout hour information and the logout minute information are analyzed to obtain a target logout time.

[0032] The target login time and the target logout time form a time range, which is taken as the optimized online time range of the current time.

[0033] Optionally, the analyzing the login hour information and the login minute information based on the first analysis strategy to obtain the target login time comprises:

[0034] A first difference between the login minute information and a preset sub-time length is obtained, if the first difference is not less than 0, a time length difference between the login time and the next whole hour is obtained, it is judged whether the time length difference is greater than the preset online time length, if yes, a sum of the login hour information and the preset sub-time length is taken as the target login time; if no, the next whole hour is taken as the target login time.

[0035] If the first difference is less than 0, it is judged whether an absolute value of the first difference is greater than the preset online time length, if yes, the login hour information is taken as the target login time, if no, a sum of the login hour information and the preset sub-time length is taken as the target login time.

[0036] Optionally, the analyzing the logout hour information and the logout minute information based on the second analysis strategy to obtain the target logout time comprises:

[0037] obtaining a second difference value of the logout minute information and the preset sub time length, if the second difference value is not less than 0, obtaining a time difference value of the preset sub time length and the logout minute information, judging whether the time difference value is greater than the preset online time length, if yes, taking the sum of the logout hour information and twice the preset sub time length as the target logout time, if no, taking the sum of the logout hour information and the preset sub time length as the target logout time;

[0038] if the second difference value is less than 0, judging whether the logout minute information is greater than the preset online time length, if yes, taking the sum of the logout hour information and the preset sub time length as the target logout time, if no, taking the logout hour information as the target logout time.

[0039] Optionally, the method further comprises: when the current online time range is greater than the preset online time length, obtaining a total time length of the current online time range;

[0040] dividing the total time length at intervals of a preset sub time length to obtain a plurality of sub blocks sorted by time;

[0041] judging whether a time length of a last sub block is greater than the preset online time length, if yes, taking the current online time range and the preset time range as a target time table;

[0042] if no, deleting a time range corresponding to the last sub block from the current online time range to obtain an effective time range;

[0043] taking the effective time range and the preset time range as the target time table.

[0044] Optionally, a ratio of the preset sub time length to the preset online time length is T, and T is an element in the range of 3 to 7.

[0045] In a second aspect, the embodiments of the present disclosure further provide a dynamic detection time secondary authentication system, and the system specifically includes the following contents:

[0046] a response module, configured to determine a dialing type and a dialing time in response to a dialing demand;

[0047] a first judgment module, configured to grant a user login if the dialing type is a first dialing and the dialing time is within a preset time range;

[0048] a first dynamic update module, configured to trigger secondary authentication if the dialing time is not within the preset time range, grant the user login if the secondary authentication is passed, and dynamically update the time range based on a first strategy;

[0049] a user information acquisition module, configured to acquire user information if the dialing type is not the first dialing;

[0050] a time table determining module, configured to determine a corresponding target time table based on the user information;

[0051] a second determining module, configured to determine a last offline time corresponding to the same dialing time as the dialing time in the target time table, and record the last offline time as a target time;

[0052] a second dynamic updating module, configured to trigger secondary authentication if a time interval from the dialing time to the target time is greater than a preset time length, and permit the user to log in if the secondary authentication is passed, and dynamically update a time range based on a second strategy;

[0053] a third dynamic updating module, configured to trigger secondary authentication if the dialing time does not exist in the target time table, and permit the user to log in if the secondary authentication is passed, and dynamically update a time range based on a third strategy.

[0054] In a third aspect, the embodiments of the present disclosure further provide a computer device, which adopts the technical scheme as follows:

[0055] The computer device comprises:

[0056] at least one processor; and

[0057] a memory connected with the at least one processor in communication; wherein

[0058] The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the dynamic detection time secondary authentication method described in any one of the above.

[0059] In a fourth aspect, the embodiments of the present disclosure further provide a computer readable storage medium, which stores computer instructions for causing a computer to execute the dynamic detection time secondary authentication method described in any one of the above.

[0060] In a fifth aspect, the embodiments of the present disclosure further provide a computer program product, which comprises computer programs / instructions, and the computer programs / instructions are executed by a processor to implement the steps of the method described in any one of the above.

[0061] The dynamic detection time secondary authentication method disclosed in the application focuses on the identity authentication scene before the network node accesses the SSLVPN, greatly improves the security of the system through multiple authentication processes and dynamic time range updating, especially through the processing of the first dialing, time interval and target time table, effectively prevents illegal login attempts; dynamic detection and updating of the time range can better adapt to the user's daily behavior patterns and provide more personalized login experience; the security policy can be dynamically adjusted according to the user's different dialing behaviors to ensure that appropriate security protection levels are provided in different use scenarios, which can effectively solve the access identity authentication problem of the network node and also allow users who need to access in special situations to dial normally; through the concept of dynamically generating time strategies proposed in the application, more accurate decisions can be made based on user behavior data, thereby improving the overall intelligence and automation level, increasing flexibility, and reducing the burden on network administrators, that is, reducing the frequency of manual strategy modification and management costs.

[0062] The above description is only a summary of the technical solutions of the present disclosure, in order to more clearly understand the technical means of the present disclosure, the content of the specification can be implemented, and in order for the above and other purposes, features and advantages of the present disclosure to be more obvious and easy to understand, the following preferred embodiments are described in detail below, and the accompanying drawings are described as follows. BRIEF DESCRIPTION OF DRAWINGS

[0063] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following will briefly introduce the drawings needed to be used in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present disclosure, and those skilled in the art can obtain other drawings according to these drawings without creating any creative labor.

[0064] Figure 1 The flowchart of the dynamic detection time secondary authentication method provided by the embodiments of the present disclosure.

[0065] Figure 2 The flowchart of the method for dynamically updating the time range based on the first strategy provided by the embodiments of the present disclosure.

[0066] Figure 3 The flowchart of the method for dynamically updating the time range based on the second strategy provided by the embodiments of the present disclosure.

[0067] Figure 4 The flowchart of the method for dynamically updating the time range based on the third strategy provided by the first embodiment of the present application.

[0068] Figure 5 The flowchart of the method for dynamically updating the time range based on the third strategy provided by the second embodiment of the present application.

[0069] Figure 6 A flowchart of a method for optimizing the acquired online time range of the current time is provided for the embodiments of the present disclosure.

[0070] Figure 7 A flowchart of a processing method when the online time range of the current time is greater than the preset online duration is provided for the embodiments of the present disclosure.

[0071] Figure 8 A structural diagram of a computer device is provided for the embodiments of the present disclosure. DETAILED DESCRIPTION

[0072] The embodiments of the present disclosure will be described in detail below with reference to the drawings.

[0073] It should be apparent that the following describes the embodiments of the present disclosure through specific, concrete examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, not all. The present disclosure can also be implemented or applied by other different specific embodiments, and various modifications or changes can be made to the details in the specification without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present disclosure.

[0074] It should be noted that the various aspects of the embodiments described below are within the scope of the appended claims. It should be apparent that the aspects described herein can be embodied in a wide variety of forms and that any specific structure and / or function described herein is merely illustrative. Based on the disclosure provided, one skilled in the art should appreciate that an aspect described herein can be implemented independently of any other aspects and that two or more of these aspects can be combined in various ways. For example, an apparatus can be implemented or a method can be practiced using any number of the aspects set forth herein. In addition, such an apparatus can be implemented or such a method can be practiced using other structure and / or functionality in addition to or other than one or more of the aspects set forth herein.

[0075] It should also be noted that the drawings provided in the following embodiments only schematically illustrate the basic concept of the present disclosure, and only the components related to the present disclosure are shown in the drawings, not the number, shape and size of the components when actually implemented. The actual implementation of each component can be a random change in shape, number and ratio, and the layout pattern of the components can also be more complex.

[0076] Also in the following description, specific details are provided to thoroughly understand examples. However, one of ordinary skill in the art will appreciate that the aspects described can be practiced without these specific details.

[0077] Referring to Figure 1 The application discloses a dynamic detection time secondary authentication method, specifically comprising the following steps:

[0078] S100, in response to the dialing demand, determining the dialing type and the dialing time.

[0079] Specifically, according to the dialing request initiated by the user, the dialing type is determined, that is, it is identified whether the request is the first dialing or the subsequent dialing, and the current dialing time is determined.

[0080] S200, if the dialing type belongs to the first dialing and the dialing time is within the preset time range, a login permission instruction (that is, the user is permitted to log in) is triggered.

[0081] The preset time range is a commonly used time table preset according to the user's applicable scene or work habit.

[0082] Specifically, if it is identified as the first dialing and the dialing time is within the preset time range (for example, from 8 pm to 6 am), the login permission instruction is directly triggered; for a new user, only basic initial verification is required, which reduces the complexity of use of the new user and also provides a friendly login experience for the new user.

[0083] In this step, it is first judged whether the dialing type belongs to the first dialing, if yes, then it is judged whether the dialing time is within the preset time range, if yes, the login permission instruction is triggered, if not (that is, not within the preset time range), S300 is executed.

[0084] S300, if the dialing time is not within the preset time range, secondary authentication is triggered, if the secondary authentication is passed, the login permission instruction is triggered, and the time range is dynamically updated based on the first strategy.

[0085] Specifically, if the dialing time of the first dialing is not within the preset time range, the secondary authentication process is triggered, only after the secondary authentication is passed, the user can log in, and the time range is dynamically updated according to the first strategy.

[0086] When the secondary authentication is not passed, a login rejection instruction is triggered.

[0087] The secondary authentication increases the security, especially when the user logs in at a non-pre-set time, the account security is ensured, and the dynamic updating of the time range makes the security strategy more flexible and adaptive.

[0088] S400, if the dialing type does not belong to the first dialing, obtaining user information.

[0089] Specifically, for non-first dialing, detailed information of the user needs to be obtained, including but not limited to login history, usage habits, etc., obtaining user information helps the system better understand user behavior patterns, so as to take more personalized and secure time management strategies.

[0090] S500, determining the corresponding target time table based on the user information.

[0091] Among them, the corresponding target time table belongs to the standard time range that allows the user to log in.

[0092] S600, when the current dialing time exists in the target time table, determining the last offline time corresponding to the same dialing time, denoted as the target time.

[0093] Specifically, when the current dialing time exists in the target time table, the offline time of the last user in the same dialing time in the online working time period is determined, and the offline time is recorded as the target time.

[0094] S700, if the time interval from the current dialing time to the target time is greater than the preset length, triggering secondary authentication, if the secondary authentication is passed, triggering the login permission instruction, and dynamically updating the time range based on the second strategy.

[0095] Specifically, under the premise that the current dialing time exists in the target time table, it is determined whether the time interval from the current dialing time to the target time is greater than the preset length, if yes, triggering secondary authentication, if the secondary authentication is passed, triggering the login permission instruction, and dynamically updating the time range based on the second strategy; if no (i.e. the time interval is not greater than the preset length), triggering the login permission instruction.

[0096] S800, if the current dialing time does not exist in the target time table, triggering secondary authentication, if the secondary authentication is passed, triggering the login permission instruction, and dynamically updating the time range based on the third strategy.

[0097] Specifically, if the current dialing time is not recorded in the target time table, secondary authentication will be triggered, after the authentication is passed, the user logs in, and the time range is updated according to the third strategy.

[0098] Among them, when the current dialing time does not exist in the target time table, and the secondary authentication is not passed, triggering the login rejection instruction, and the corresponding target time table remains unchanged.

[0099] In the case of no record in the target time table, secondary authentication increases security, and updating the time range may introduce new time points, further optimizing the user's login experience.

[0100] The dynamic detection time secondary authentication method disclosed in the application focuses on the identity authentication scene before the network node accesses the SSLVPN, greatly improves the security of the system through multiple authentication processes and dynamic time range updates, especially effectively prevents illegal login attempts through the processing of the first dialing, time interval and target time table; dynamic detection and update of the time range can better adapt to the user's daily behavior patterns and provide more personalized login experience; the security policy can be dynamically adjusted according to the user's different dialing behaviors to ensure that appropriate security protection levels are provided in different use scenarios, which can effectively solve the access identity authentication problem of the network node and also allow users who need to access in special situations to dial normally; through the concept of dynamically generating time strategies proposed in the application, more accurate decisions can be made based on user behavior data, thereby improving the overall intelligence and automation level, increasing flexibility, and reducing the burden on network administrators, that is, reducing the frequency of manual strategy modification and management costs.

[0101] In this embodiment, the secondary authentication can be password verification, mobile phone verification code, etc.

[0102] Reference Figure 2 The method for dynamically updating the time range based on the first strategy specifically includes the following contents:

[0103] When the secondary authentication passes, a pass instruction of the secondary authentication is generated;

[0104] In response to the pass instruction, a login permission instruction is triggered;

[0105] An online time range of the current time is obtained;

[0106] It is judged whether the online time range of the current time is greater than a preset online duration, if not, the preset time range is taken as the target time table; if yes, the online time range of the current time and the preset time range are taken as the target time table.

[0107] The online time range of the current time refers to the continuous login online time range between login and logout.

[0108] The scheme disclosed in this embodiment is for the case of first dialing, dialing time of the first dialing not being within the preset time range, and passing the secondary authentication.

[0109] When the user passes the secondary authentication, the system generates a pass instruction indicating that the user has passed the additional security detection, and then triggers a login permission instruction to allow the user to log in in response to the pass instruction; at the same time, records the current online time range of the user, that is, the time period from login to logout of the user; compares the online time range with the preset online duration, if the online time range is less than the preset online duration, the preset time range is taken as the target time table; if the online time range is greater than the preset online duration, the online time range and the preset time range are taken together as the target time table.

[0110] By introducing the secondary authentication mechanism, the security of the system is significantly improved, that is, even if the dialing time is not within the preset time range (such as the first dialing), the authenticity of the user's identity can be ensured; the time range is dynamically updated, which can be automatically adjusted according to the actual use of the user, avoiding the dependence on the fixed time strategy. For example, the user can be allowed to log in outside the preset security time period through secondary authentication, improving the flexibility of the system.

[0111] By dynamically updating the time range, the problem that the user cannot access due to the fixed time strategy is avoided. For example, a user suddenly needs to access the system during non-working hours, and can normally log in after passing the secondary authentication, meeting the user's temporary access demand and improving the user experience.

[0112] The method dynamically updates the time table using the actual online time range of the user, making the security strategy more data-driven, and enabling the strategy to be adjusted according to the real behavior of the user, so that the security protection is more targeted and effective; at the same time, the dynamic updating strategy reduces the intervention demand of the administrator, reduces the frequency of manual modification of the strategy and management cost, and the administrator does not need to manually adjust the strategy for each user's special access demand, the system can automatically process and update, improving the efficiency.

[0113] Reference Figure 3 The method for dynamically updating the time range based on the second strategy specifically includes the following contents:

[0114] When the secondary authentication passes, a pass instruction of the secondary authentication is generated;

[0115] In response to the pass instruction, a login permission instruction is triggered;

[0116] An online time range is obtained;

[0117] It is judged whether the online time range is greater than a preset online duration, if yes, a newly added time period corresponding to a target time in the target time table is deleted, and a login time period is newly added, to obtain an updated target time table;

[0118] If not, delete the newly added time period corresponding to the target time from the target time table to obtain an updated target time table.

[0119] The scheme disclosed in this embodiment is for the case that the current dialing time exists in the corresponding target time table obtained by the first dialing, the time interval from the dialing time to the target time is greater than the preset duration, and secondary authentication is passed.

[0120] The method disclosed in this embodiment can dynamically adjust the target time table according to the actual online time and the preset duration, and can flexibly adjust the time management strategy according to the user's behavior and authentication state; through secondary authentication, only legitimate users can perform login operations, increasing the security of the system, and updating the time table can ensure that the system can manage time according to the latest user activity record, avoiding the risk of long online time; by judging whether the online time exceeds the preset duration, the target time table can be adjusted in time, and the overtime period is deleted and the login time period is newly added. This dynamic adjustment helps to more effectively manage user online time and system resource usage.

[0121] This method ensures that the target time table is updated to each login, can reflect the current state and activity of the user in real time, and ensures the accuracy of time management and the rapid response of the system to changes; through dynamic deletion and addition of time periods, resource allocation can be optimized, avoiding long-term occupation of unused resources, and improving the overall system efficiency.

[0122] In summary, the method of dynamically updating the time range based on the second strategy provides an effective, secure and flexible time management mechanism, especially suitable for system environments that require precise control and response to user activities.

[0123] Further, in this application, if the time interval from the dialing time to the target time is greater than the preset duration and the secondary authentication fails, a login rejection instruction is triggered and the newly added time period corresponding to the target time is deleted from the target time table to obtain an updated target time table.

[0124] Referring to Figure 4 , the method of dynamically updating the time range based on the third strategy specifically includes the following contents:

[0125] When the secondary authentication is passed, a pass instruction of the secondary authentication is generated;

[0126] In response to the pass instruction, a login permission instruction is triggered;

[0127] Judge whether the time interval from the current login time to the last offline time is greater than the preset duration, if yes, take the preset time range as the updated target time table;

[0128] If not, the online time range of the current time is obtained, and it is determined whether the online time range of the current time is greater than the preset online duration. If yes, the online time range of the current time and the preset time range are taken as the target time table; if not, the preset time range is taken as the updated target time table.

[0129] The scheme disclosed in this embodiment is for the case that the current dialing time does not exist in the corresponding target time table obtained by the first dialing, the time interval from the dialing time to the target time is greater than the preset duration, and the secondary authentication is passed.

[0130] In this embodiment, it is determined whether the time interval from the current login time to the last offline time is greater than the preset duration, that is, it is determined whether the time interval from the current login time to the nearest last offline time is greater than the preset duration. For example, the preset duration can be set to one week, so as to ensure that the user has a reasonable time range reference for a long time without logging in.

[0131] In this embodiment, the preset online duration is preferably set to 5 minutes, that is, it is ensured that the work of the user after logging in is meaningful, and the original corresponding event table does not need to be updated for short-time login browsing, thereby reducing unnecessary data updating.

[0132] In the method disclosed in this embodiment, when the user passes the secondary authentication (such as password verification, mobile phone verification code, etc.), a “passing instruction” is generated, and the instruction triggers permission for the user to log in. It is determined whether the interval between the current login time and the last offline time is greater than the preset duration (such as one week). If yes, the preset time range is taken as the updated target time table. If not (that is, the interval is not greater than the preset duration), the online time range of the current time is obtained after the current offline.

[0133] Then, it is determined whether the online time of the current time is greater than the preset online duration (such as 5 minutes). If yes, the online time range of the current time and the preset time range are combined to serve as the updated target time table. If not, the preset time range is still taken as the updated target time table.

[0134] By setting the preset online duration, the situation that the time table is frequently updated due to short-time login (such as simple information checking) of the user can be avoided, thereby reducing unnecessary data updating and processing. For the user who logs in again after a long time interval, the system automatically adopts the preset time range, avoids frequent updating of the time table, and optimizes the use of system resources. The scheme can dynamically adjust the time table according to the actual online duration of the user, ensure that the updating of the time table matches the actual use behavior of the user, and improve the flexibility and user experience of the system. The method can dynamically determine and update the time table, optimize the performance and user experience of the system while ensuring security.

[0135] Reference Figure 5In another embodiment, the method for dynamically updating the time range based on the third strategy specifically comprises:

[0136] generating a pass instruction of the secondary authentication when the secondary authentication passes;

[0137] triggering a login permission instruction in response to the pass instruction;

[0138] obtaining the current online time range;

[0139] determining whether the current online time range is greater than the preset online duration, and if yes, merging the current online time range and the preset time range as the target time table (i.e., the newly obtained current online time range, obtaining the updated target time table); and if no, not updating the target time table.

[0140] The method disclosed in this embodiment generates a pass instruction when the user passes the secondary authentication, which triggers the user to log in. After the user logs out, the current online time range of the user is obtained, i.e., the current online time range between login and logout. Then, it is determined whether the current online time range is greater than the preset online duration, and if yes, the current online time range and the preset time range are merged as the updated target time table, and if no, the target time table is not updated.

[0141] By setting the preset online duration, the situation of frequently updating the time table due to the user's short-time login (e.g., simply browsing information) can be avoided, thereby reducing unnecessary data updating and processing. Only when the actual online time of the user exceeds the preset duration, the time table is updated, ensuring that the updating of the time table is based on the real behavior of the user intentionally using the system, rather than meaningless short-time login. When the current online time is short, the time table of short-time login can not be updated, avoiding unnecessary calculation and storage operations, thereby optimizing the use of system resources and performance. The time table can be dynamically adjusted according to the actual online duration of the user, ensuring that the updating of the time table matches the actual use behavior of the user, and improving the flexibility and user experience of the system.

[0142] Further, the dynamic secondary authentication method disclosed in the present application further comprises: optimizing the obtained current online time range, whether it is based on the first strategy, the second strategy or the third strategy for dynamically updating the time range, the optimized current online time range is used for subsequent operations.

[0143] Reference Figure 6 The method for optimizing the obtained current online time range specifically comprises:

[0144] A100, based on the current online time range, determining the login time and logout time.

[0145] For example, in embodiment one, when the secondary online time range is 09:10-12:03, the login time is determined as 09:10 and the logout time is determined as 12:03; in embodiment two, when the secondary online time range is 09:28-12:20, the login time is determined as 09:28 and the logout time is determined as 12:20; in embodiment three, when the secondary online time range is 09:58-12:58, the login time is determined as 09:58 and the logout time is determined as 12:58; in embodiment four, when the secondary online time range is 09:48-12:32, the login time is determined as 09:48 and the logout time is determined as 12:32.

[0146] A200, extracting login hour information and login minute information of the login time.

[0147] In embodiment one, the login hour information is 09:00 and the login minute information is 10 minutes; in embodiment two, the login hour information is 09:00 and the login minute information is 28 minutes; in embodiment three, the login hour information is 09:00 and the login minute information is 58 minutes; in embodiment four, the login hour information is 09:00 and the login minute information is 48 minutes.

[0148] A300, obtaining a first difference between the login minute information and a preset sub time length.

[0149] If the preset sub time length is half an hour, in embodiment one, the first difference is -20, in embodiment two, the first difference is -2, in embodiment three, the first difference is 28, and in embodiment four, the first difference is 18.

[0150] A400, if the first difference is not less than 0, obtaining a time length difference between the login time and the next whole point, determining whether the time length difference is greater than the preset online time length, if yes, taking the sum of the login hour information and the preset sub time length as the target login time; if no, taking the next whole point as the target login time.

[0151] In embodiment three, the first difference is greater than 0, then the time length difference between the obtained login time (09:58) and the next whole point (i.e. 10 o'clock) is 2 minutes; because the time length difference is not greater than the preset online time length (e.g. 5 minutes), the next whole point is taken as the target login time, i.e. 10 o'clock is taken as the target login time of embodiment three.

[0152] In embodiment four, the first difference is greater than 0, then the time length difference between the obtained login time (09:48) and the next whole point (i.e. 10 o'clock) is 12 minutes; because the time length difference is greater than the preset online time length (e.g. 5 minutes), the sum of the login hour information and the preset sub time length is taken as the target login time, i.e. the sum of 9 o'clock and the preset sub time length (30 minutes) is taken as the target login time of embodiment four, i.e. 09:30.

[0153] A500, if the first difference value is less than 0, determining whether the absolute value of the first difference value is greater than the preset online duration, if yes, taking the login hour information as the target login time, if no, taking the sum of the login hour information and the preset sub-duration as the target login time.

[0154] In embodiment one, the first difference value is -20, the absolute value of the first difference value (i.e. 20) is greater than the preset online duration (e.g. 5 minutes), and the login hour information is taken as the target login time, i.e. 9 o'clock.

[0155] In embodiment two, the first difference value is -2, the absolute value of the first difference value (i.e. 2) is not greater than the preset online duration (e.g. 5 minutes), and the sum of the login hour information and the preset sub-duration is taken as the target login time, i.e. 09:30.

[0156] A600, extracting the logout hour information and the logout minute information of the logout time.

[0157] In embodiment one, the logout hour information is 12:00; the logout minute information is 3 minutes; in embodiment two, the logout hour information is 12:00; the logout minute information is 20 minutes; in embodiment three, the logout hour information is 12:00; the logout minute information is 58 minutes; and in embodiment two, the logout hour information is 12:00; the logout minute information is 32 minutes.

[0158] A700, obtaining a second difference value of the logout minute information and the preset sub-duration.

[0159] If the preset sub-duration is half an hour, in embodiment one, the second difference value is -27; in embodiment two, the second difference value is -10; in embodiment three, the second difference value is 28; and in embodiment four, the second difference value is 2.

[0160] A800, if the second difference value is not less than 0, obtaining a time difference value of the preset sub-duration and the logout minute information, determining whether the time difference value is greater than the preset online duration, if yes, taking the sum of the logout hour information and twice the preset sub-duration as the target logout time, if no, taking the sum of the logout hour information and the preset sub-duration as the target logout time.

[0161] In embodiment three, the second difference value is greater than 0, the time difference value of the preset sub-duration (e.g. half an hour) and the logout minute information is 28, which is greater than the preset online duration (e.g. 5 minutes), and the sum of the logout hour information and twice the preset sub-duration is taken as the target logout time, i.e. 13:00 is taken as the target logout time.

[0162] In embodiment four, the second difference value is greater than 0, the time difference value between the obtained preset sub time length (for example, half an hour) and the logout minute information is 2, the time difference value is not greater than the preset online time length (for example, 5 minutes), and the sum of the logout hour information and the preset sub time length (for example, half an hour) is taken as the target logout time, that is, 12:30 is taken as the target logout time.

[0163] A900, if the second difference value is less than 0, it is judged whether the logout minute information is greater than the preset online time length, if yes, the sum of the logout hour information and the preset sub time length is taken as the target logout time, and if no, the logout hour information is taken as the target logout time.

[0164] In embodiment one, the second difference value is less than 0, the logout minute information is not greater than the preset online time length, and the logout hour information is taken as the target logout time, that is, 12:00 is taken as the target logout time.

[0165] In embodiment two, the second difference value is less than 0, the logout minute information is greater than the preset online time length, and the sum of the logout hour information and the preset sub time length is taken as the target logout time, that is, 12:30 is taken as the target logout time.

[0166] A1000, the time range formed by the target login time and the target logout time is taken as the optimized current online time range.

[0167] In embodiment one, the current online time range is 09:10-12:03, and the optimized current online time range is 09:00-12:00; in embodiment two, the current online time range is 09:28-12:20, and the optimized current online time range is 09:30-12:30; in embodiment three, the current online time range is 09:58-12:58, and the optimized current online time range is 10:00-13:00; in embodiment four, the current online time range is 09:48-12:32, and the optimized current online time range is 09:30-12:30.

[0168] The method for optimizing the obtained current online time range disclosed in this embodiment can ensure that the time of the user in the system is more compact by optimizing the login and logout times, reduce unnecessary waiting or idle time, adjust the login and logout times to the integral points or multiples of the preset sub time length, help to reduce the fragmentation of time, make the online time more continuous and efficient, and the optimized time range is more in line with the daily habits and needs of the user, avoid the decline of user experience caused by unreasonable login or logout time, and more effectively allocate system resources by adjusting the online time of the user, ensure that the use of resources is more reasonable and efficient; by adjusting the time to the preset sub time length, the accuracy of time management can be enhanced, and the user can better plan and manage his own time.

[0169] Through the above optimization method, the online time of the user will be more reasonable and efficient, thereby improving the overall use experience and the utilization efficiency of system resources.

[0170] With reference to Figure 7 Further, the dynamic detection secondary authentication method disclosed in the application further comprises: when the current online time range is greater than the preset online time length, obtaining a total time length of the current online time range;

[0171] dividing the total time length by a preset sub-time length to obtain a plurality of sub-blocks sorted by time;

[0172] determining whether the time length of the last sub-block is greater than the preset online time length, and if so, taking the current online time range and the preset time range as the target time table;

[0173] if not, deleting the time range corresponding to the last sub-block from the current online time range to obtain an effective time range;

[0174] taking the effective time range and the preset time range as the target time table.

[0175] Preferably, the preset sub-time length is set to half an hour, the preset online time length is set to 5 minutes, and the ratio of the preset sub-time length to the preset online time length is T, T∈(3, 7).

[0176] In this embodiment, for the determination of the time length of the last sub-block, short-time inactive or invalid behavior can be filtered out, for example, when the time length of the last sub-block is not greater than the preset online time length, the user is in a state of organizing files and preparing to log off within this period of time, which can be determined as not belonging to the user's common time period, and therefore this part of time can be deleted to extract a more effective time period for the user's office work.

[0177] For example, when the current online time range is from 10:00 to 11:32, the total time length can be determined as 1 hour and 32 minutes, the total time length is divided by half an hour to obtain a plurality of sub-blocks sorted by time, including half an hour (i.e. the first sub-block is from 10:00 to 10:30), half an hour (i.e. the second sub-block is from 10:30 to 11:00), half an hour (i.e. the third sub-block is from 11:00 to 11:30), and 2 minutes (i.e. the fourth sub-block is from 11:30 to 11:32); because the time length of the last sub-block (2 minutes) is not greater than the preset online time length (for example, 5 minutes), the time range corresponding to the last sub-block is deleted from the current online time range to obtain an effective time range (i.e. from 10:00 to 11:30), and finally the effective time range and the preset time range are taken as the target time table.

[0178] For example, if the duration of the last sub-block (i.e. online time) exceeds 5 minutes, the time is written into the time table; for example, if the online time of a certain customer is 09:10:11-12:03:21, 09:00:00-12:00:00 is written into the time table; if the online time is 09:27:11-12:10:24, 09:30:00-12:30:00 is written into the time table.

[0179] In the prior art, the access time of the SSL VPN is controlled by a fixed policy, which lacks flexibility, and when a user needs to access at a non-specified time, access rejection problems are encountered. The dynamic detection time secondary authentication method avoids the dependence on the fixed time policy by dynamically updating the time range; the existing SSL VPN technology only performs authentication once when dialing, which is difficult to cope with complex access requirements in large-scale applications. The scheme disclosed in the application introduces secondary authentication, increases the level of authentication, improves the user's identity recognition and security protection capability, and through the dynamic update of the corresponding time range, can automatically adjust according to the specific behavior of the user, reduces the additional management operation, and for users with temporary access needs, such as emergency work needs, does not need to be manually modified by the administrator. Policy, automatically analyze and judge, automatically process, effectively shorten the response time, and reduce the operation cost.

[0180] The dynamic detection time secondary authentication method disclosed in the application can be applied to the case where the dialing time period of each user is large or not fixed, and the administrator configuration is large. For example, some people in a company have fixed working hours, and some people need to work in three shifts, so it is not possible to configure a fixed time period to allow login, and it is not safe to put everything through.

[0181] For example, the time period from dialing to logging out of the user zhangsan on the first day is 09:00:00-12:00:00, 14:00:00-18:00:00; the time period from dialing to logging out of the user lisi on the first day is 00:00:00-08:00:00; the time table currently generated by the user zhangsan is 09:00:00-12:00:00, 14:00:00-18:00:00 (i.e. the preset time range of the user zhangsan can be set to 09:00:00-12:00:00, 14:00:00-18:00:00), and the time table currently generated by the user lisi is 00:00:00-08:00:00 (i.e. the preset time range of the user lisi can be set to 00:00:00-08:00:00).

[0182] User zhangsan needs to log in at 13:00:00-13:30:00 the next day, if the gateway does not start the secondary authentication, it will be rejected to log in, the time table does not change; if the secondary authentication is started, the secondary authentication can be successfully logged in after passing, the time table is updated to 09:00:00-12:00:00, 13:00:00-13:30:00, 14:00:00-18:00:00. User lisi needs to log in at 16:00:00-00:00:00 the next day, if the gateway does not start the secondary authentication, it will be rejected to log in, the time table does not change; if the secondary authentication is started, the secondary authentication can be successfully logged in after passing, the time table is updated to 00:00:00-08:00:00, 16:00:00-00:00:00.

[0183] If user zhangsan does not have online at 13:00:00-13:30:00 after a week, his time table will be updated to 09:00:00-12:00:00, 14:00:00-18:00:00.

[0184] The method disclosed in the application makes the authentication mode more flexible, meets more authentication needs, can automatically generate a time table, and can reduce the operation of the administrator; the secondary authentication can enable the user to still log in the VPN in special circumstances.

[0185] In a second aspect, the embodiments of the present disclosure further provide a dynamic detection time secondary authentication system, which specifically includes the following contents:

[0186] A response module is configured to determine a dialing type and a dialing time in response to a dialing demand;

[0187] A first judgment module is configured to trigger a login permission instruction if the dialing type belongs to the first dialing and the dialing time is within a preset time range;

[0188] A first dynamic updating module is configured to trigger the secondary authentication if the dialing time is not within the preset time range, trigger the login permission instruction if the secondary authentication is passed, and dynamically update the time range based on the first strategy;

[0189] A user information acquisition module is configured to acquire user information if the dialing type does not belong to the first dialing;

[0190] A time table determination module is configured to determine a corresponding target time table based on the user information;

[0191] A second judgment module is configured to determine a last offline time corresponding to the same dialing time as the target time when the dialing time exists in the target time table;

[0192] The second dynamic updating module is configured to trigger secondary authentication if the time interval from the dialing time to the target time is greater than the preset time length, trigger a login permission instruction if the secondary authentication is passed, and dynamically update the time range based on a second strategy.

[0193] The third dynamic updating module is configured to trigger secondary authentication if the dialing time does not exist in the target time table, trigger a login permission instruction if the secondary authentication is passed, and dynamically update the time range based on a third strategy.

[0194] It should be noted that the specific acquisition schemes in the dynamic detection time secondary authentication method disclosed in the first aspect of the present application are all applicable to the dynamic detection time secondary authentication system disclosed in the second aspect of the present application, and thus will not be described again here.

[0195] The computer device according to the embodiments of the present disclosure includes a memory and a processor. The memory is configured to store non-transitory computer readable instructions. Specifically, the memory can include one or more computer program products, which can include various forms of computer readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include random access memory (RAM) and / or cache memory, etc. The non-volatile memory may, for example, include read-only memory (ROM), hard disk, flash memory, etc.

[0196] The processor can be a central processing unit (CPU) or other forms of processing units with data processing and / or instruction execution capabilities, and can control other components in the computer device to perform desired functions. In an embodiment of the present disclosure, the processor is configured to run the computer readable instructions stored in the memory, so that the computer device performs all or part of the steps of the dynamic detection time secondary authentication method of the embodiments of the present disclosure.

[0197] Those skilled in the art should understand that, in order to solve the technical problem of how to obtain a good user experience effect, the present embodiment can also include well-known structures such as communication buses, interfaces, etc., which should also be included in the protection scope of the present disclosure.

[0198] As Figure 8 A structural schematic diagram of a computer device according to an embodiment of the present disclosure is provided. It shows a structural schematic diagram of a computer device suitable for use in the embodiments of the present disclosure. Figure 8 The computer device shown is only an example, and should not impose any limitations on the functions and use range of the embodiments of the present disclosure.

[0199] As Figure 8As shown, the computer device can include a processor (e.g., a central processing unit, a graphics processing unit, etc.) that can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) or loaded from a storage device into a random access memory (RAM). Various programs and data required for the operation of the computer device are also stored in the RAM. The processor, the ROM, and the RAM are connected to each other through a bus. An input / output (I / O) interface is also connected to the bus.

[0200] Generally, the following devices can be connected to the I / O interface: input devices including, for example, sensors or visual information collection devices; output devices including, for example, display screens; storage devices including, for example, magnetic tapes, hard disks, etc.; and communication devices. The communication devices can allow the computer device to communicate wirelessly or wired with other devices (such as edge computing devices) to exchange data. Although Figure 8 The computer device is shown with various devices, but it should be understood that all of the shown devices are not required to be implemented or present. More or fewer devices can alternatively be implemented or present.

[0201] In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing program code for executing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network through the communication device, or installed from the storage device, or installed from the ROM. When the computer program is executed by the processor, all or part of the steps of the dynamic detection time secondary authentication method of the embodiments of the present disclosure are performed.

[0202] Detailed descriptions of the embodiments can refer to the corresponding descriptions in the foregoing embodiments, which will not be repeated here.

[0203] The computer-readable storage medium according to the embodiments of the present disclosure has non-transitory computer-readable instructions stored thereon. When the non-transitory computer-readable instructions are run by a processor, all or part of the steps of the dynamic detection time secondary authentication method of the embodiments of the present disclosure described above are performed.

[0204] The computer-readable storage medium described above includes, but is not limited to, optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card), and media with built-in ROM (e.g., ROM cartridge).

[0205] For detailed description of this embodiment, please refer to the corresponding description in the aforementioned embodiments, which will not be repeated here.

[0206] The basic principles of the present disclosure have been described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, and effects mentioned in this disclosure are merely illustrative and not restrictive, and should not be construed as necessarily possessed by each embodiment of the present disclosure. Furthermore, the specific details disclosed above are provided for illustrative purposes and to facilitate understanding, rather than as limitations. These details do not limit the present disclosure to necessarily being implemented using these specific details.

[0207] In the present disclosure, relational terms such as first and second, etc. are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. The block diagrams of the devices, devices, equipment, and systems involved in the present disclosure are merely illustrative examples and are not intended to require or imply that they must be connected, arranged, or configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, devices, equipment, and systems can be connected, arranged, or configured in any manner. Words such as "including," "comprising," "having," and the like are open-ended words, meaning "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or" and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

[0208] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Moreover, the word "exemplary" does not mean that the example described is preferred or better than other examples.

[0209] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0210] Various changes, modifications, and alterations to the techniques described herein can be made without departing from the teachings of the attached claims. Moreover, the scope of the claims of the present disclosure is not limited to the particular aspects described herein. Rather, the scope of the claims of the present disclosure includes all alternatives, modifications, and equivalents falling within the scope of the claims of the present disclosure. Accordingly, the attached claims are incorporated into this Detailed Description by reference.

[0211] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the generic principles defined herein can be applied to other aspects without departing from the scope of the disclosure. Thus, the present disclosure is not intended to be limited to the aspects shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

[0212] The above description has been presented for the purpose of illustration and description. Furthermore, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although various example aspects and embodiments have been discussed above, those of ordinary skill in the art will appreciate a variety of modifications, alternatives, permutations, and equivalents thereof. Accordingly, the disclosure is intended to embrace all such alterations, modifications, and permutations of the aspects described herein, including other aspects falling within the scope of the appended claims.

Claims

1. A dynamic detection time two-factor authentication method, characterized in that, The method comprises the following steps: determining a dialing type and a dialing time in response to a dialing requirement; if the dialing type is a first dialing and the dialing time is within a preset time range, permitting the user to log in, wherein the preset time range is a commonly used time table preset according to a user's applicable scenario or work habit; if the dialing time is not within the preset time range, triggering a secondary authentication, and if the secondary authentication is passed, permitting the user to log in and dynamically updating the time range based on a first strategy; if the dialing type is not a first dialing, obtaining user information; determining a corresponding target time table based on the user information; when the dialing time exists in the target time table, determining a last offline time corresponding to the same dialing time, denoted as a target time; if a time interval from the dialing time to the target time is greater than a preset length, triggering a secondary authentication, and if the secondary authentication is passed, permitting the user to log in and dynamically updating the time range based on a second strategy; if the dialing time does not exist in the target time table, triggering a secondary authentication, and if the secondary authentication is passed, permitting the user to log in and dynamically updating the time range based on a third strategy; the dynamically updating the time range based on the first strategy comprises: obtaining a current online time range; determining whether the current online time range is greater than a preset online length, if not, taking the preset time range as a target time table, and if yes, taking the current online time range and the preset time range as the target time table; the dynamically updating the time range based on the second strategy comprises: obtaining a current online time range; determining whether the current online time range is greater than a preset online length, if yes, deleting a newly added time period corresponding to the target time from the target time table and adding the current login time period to obtain an updated target time table, and if not, deleting the newly added time period corresponding to the target time from the target time table to obtain an updated target time table; the dynamically updating the time range based on the third strategy comprises: determining whether a time interval from a current login time to a last offline time is greater than a preset length, if yes, taking the preset time range as an updated target time table, and if not, obtaining a current online time range, determining whether the current online time range is greater than a preset online length, if yes, taking the current online time range and the preset time range as a target time table, and if not, taking the preset time range as an updated target time table.

2. The dynamic detection time two-factor authentication method of claim 1, wherein, The method further comprises the following steps: optimizing the obtained current online time range; the optimizing the obtained current online time range comprises: determining a login time and a logout time based on the current online time range; extracting login hour information and login minute information of the login time; analyzing the login hour information and the login minute information based on a first analysis strategy to obtain a target login time; extracting logout hour information and logout minute information of the logout time; analyzing the logout hour information and the logout minute information based on a second analysis strategy to obtain a target logout time; The target login time and the target logout time constitute a time range as an optimized online time range of the current time.

3. The dynamic detection time two-factor authentication method of claim 2, wherein, The target login time is obtained by analyzing the login hour information and the login minute information based on a first analysis strategy, and the target logout time is obtained by analyzing the logout hour information and the logout minute information based on a second analysis strategy. The first difference value between the login minute information and the preset sub time length is obtained, and if the first difference value is not less than 0, a time difference between the login time and the next whole hour is obtained. It is determined whether the time difference is greater than the preset online time length. If yes, the sum of the login hour information and the preset sub time length is taken as the target login time. If no, the next whole hour is taken as the target login time. If the first difference value is less than 0, it is determined whether the absolute value of the first difference value is greater than the preset online time length. If yes, the login hour information is taken as the target login time. If no, the sum of the login hour information and the preset sub time length is taken as the target login time.

4. The dynamic detection time two-factor authentication method of claim 2, wherein, The target logout time is obtained by analyzing the logout hour information and the logout minute information based on a second analysis strategy. The second difference value between the logout minute information and the preset sub time length is obtained, and if the second difference value is not less than 0, a time difference between the preset sub time length and the logout minute information is obtained. It is determined whether the time difference is greater than the preset online time length. If yes, the sum of the logout hour information and twice the preset sub time length is taken as the target logout time. If no, the sum of the logout hour information and the preset sub time length is taken as the target logout time. If the second difference value is less than 0, it is determined whether the logout minute information is greater than the preset online time length. If yes, the sum of the logout hour information and the preset sub time length is taken as the target logout time. If no, the logout hour information is taken as the target logout time.

5. The dynamic detection time two-factor authentication method of claim 1, wherein, Further comprising: When the online time range of the current time is greater than the preset online time length, the total time length of the online time range of the current time is obtained. The total time length is divided into several sub blocks in time sequence at intervals of the preset sub time length. It is determined whether the time length of the last sub block is greater than the preset online time length. If yes, the online time range of the current time and the preset time range are taken as the target time table. If no, the time range corresponding to the last sub block is deleted from the online time range of the current time to obtain an effective time range. The effective time range and the preset time range are taken as the target time table. The ratio of the preset sub time length to the preset online time length is T, and T∈(3,7).

6. The dynamic detection time two-factor authentication method of claim 5, wherein, The computer device comprises:

7. A computer apparatus, comprising: at least one processor; and a memory connected in communication with the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the dynamic detection time secondary authentication method of any one of claims 1-6. The computer readable storage medium stores computer instructions for causing a computer to perform the dynamic detection time secondary authentication method of any one of claims 1-6.

8. A computer-readable storage medium, characterized in that, The computer instructions are executed by the processor to implement the steps of the method of any one of claims 1-6.

9. A computer program product comprising computer instructions, characterized in that, ​

Images