System interface control method, device, equipment, storage medium and program product

Abstract

The present application discloses a system interface control method, device, equipment, storage medium and program product, which relates to the field of data processing technology. The system interface control method includes: when the system is in a locked state, displaying a first interface, the first interface is the authentication interface of the system in the locked state; when receiving a user authentication instruction sent by the user based on the first interface, performing user authentication based on the user authentication instruction; when the user authentication passes, performing login user verification based on the user's login user terminal information and the system's historical login information; when the verification fails, loading the second interface after cleaning up the system's privacy files, the second interface is the functional interface of the system in the unlocked state. Since user authentication is performed based on the user authentication instruction, the security of the system is improved; by performing login user verification on the login user terminal information and the historical login information, leakage incidents that occur when the system is maliciously logged in are prevented.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a system interface control method, device, equipment, storage medium and program product. Background Art

[0002] Currently, most of the desktop hosts in enterprises are running Windows operating systems. For the public terminals in the Enterprise Command Center (ECC), there is a problem of "real-name system" for terminal users. In particular, for public terminals involved in production environment commissioning, publishing, data maintenance, etc., it is necessary to use the real name of the user, and be able to trace the usage records and provide data support for post-audit. Currently, there is no solution for such scenarios on the market.

[0003] The terminal authentication method in current scenarios is usually based on the system's own account and password or on a third-party authentication platform for authentication, which cannot meet the needs of multi-user startup, making the equipment investment cost higher and prone to leakage when the terminal is maliciously logged in. Summary of the invention

[0004] The main purpose of the present application is to provide a system interface control method, device, equipment, storage medium and program product, aiming to solve the technical problem that some public terminals allow multiple users to log in, which is prone to leakage when maliciously logged in.

[0005] To achieve the above purpose, the present application proposes a system interface control method, the system interface control method comprising:

[0006] When the system is in a locked state, displaying a first interface, wherein the first interface is an authentication interface of the system in the locked state;

[0007] When receiving a user authentication instruction sent by the user based on the first interface, performing user authentication based on the user authentication instruction;

[0008] When the user authentication is passed, the login user verification is performed based on the login client information of the user and the historical login information of the system;

[0009] When the verification fails, the second interface is loaded after the privacy files of the system are cleaned up, and the second interface is the functional interface of the system in the unlocked state.

[0010] In one embodiment, when the user authentication is passed, the step of performing login user verification based on the user's login client information and the system's historical login information includes:

[0011] When the user authentication is passed, obtaining the user's login client information;

[0012] Obtaining historical login information when the system was last logged in;

[0013] Comparing the login user information with the historical login information;

[0014] If the login user information is consistent with the historical login information, the login user verification result is set as verification passed;

[0015] If the login user information is inconsistent with the historical login information, the login user verification result is set as verification failure.

[0016] In one embodiment, the first interface includes an authentication graphic code; the user authentication instruction includes a first user authentication instruction and a second user authentication instruction; when receiving a user authentication instruction sent by the user based on the first interface, the step of performing user authentication based on the user authentication instruction includes:

[0017] Obtaining a first user authentication instruction sent by the user based on the authentication image code;

[0018] Performing preliminary authentication based on the first user authentication instruction;

[0019] When the preliminary authentication is passed, an authentication token is issued to the user terminal of the user; when the user terminal receives the authentication token, the user information is encrypting based on a preset public key to obtain a second user authentication instruction;

[0020] Upon receiving the second user authentication instruction sent by the user terminal, decrypting the second user authentication instruction by using a preset private key to obtain the user information of the user;

[0021] A secondary user authentication is performed based on the user information.

[0022] In one embodiment, after the step of performing secondary user authentication based on the user information, the method further includes:

[0023] When the user passes the secondary authentication, verifying whether the user terminal has login authority based on the user information;

[0024] If so, the step of loading a second interface after cleaning up the privacy files of the system when the verification fails is performed, wherein the second interface is a functional interface of the system in an unlocked state.

[0025] In one embodiment, the method further comprises:

[0026] When the system is in the second interface, recording the idle duration in the second interface;

[0027] If the idle duration is greater than a preset idle duration threshold, the login user terminal information of the current login user terminal is recorded and the system is switched to the first interface;

[0028] When the second interface switches to the first interface, the cleaning waiting time after the switch is recorded;

[0029] When the cleaning waiting time is greater than a preset cleaning waiting time threshold, the system is cleaned of privacy files.

[0030] In one embodiment, the method further comprises:

[0031] When the second interface closing instruction is received, the privacy files of the system are cleaned up and the system is switched to the first interface.

[0032] In addition, to achieve the above purpose, the present application also proposes a system interface control device, the system interface control device comprising:

[0033] A security protection module, used to display a first interface when the system is in a locked state, wherein the first interface is an authentication interface of the system in the locked state;

[0034] A security authentication module, configured to perform user authentication based on the user authentication instruction when receiving the user authentication instruction sent by the user based on the first interface;

[0035] A user verification module, used to perform login user verification based on the user's login client information and the system's historical login information when the user authentication is passed;

[0036] The interface switching module is used to load the second interface after cleaning the privacy files of the system when the verification fails. The second interface is the functional interface of the system in the unlocked state.

[0037] In addition, to achieve the above-mentioned purpose, the present application also proposes a system interface control device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the system interface control method described above.

[0038] In addition, to achieve the above objectives, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the system interface control method described above are implemented.

[0039] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the system interface control method described above are implemented.

[0040] One or more technical solutions proposed in this application have at least the following technical effects:

[0041] This application displays the first interface when the system is in a locked state, and the first interface is the authentication interface of the system in the locked state; when receiving the user authentication instruction sent by the user based on the first interface, the user authentication is performed based on the user authentication instruction; when the user authentication is passed, the login user verification is performed based on the user's login user terminal information and the system's historical login information; when the verification fails, the second interface is loaded after the system is cleared of privacy files, and the second interface is the functional interface of the system in the unlocked state. Since the user authentication is performed based on the user authentication instruction, the security of the system is improved; by performing the login user verification on the login user terminal information and the historical login information, the leakage incident when the system is maliciously logged in is prevented. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0043] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following is a brief introduction to the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0044] Figure 1 A flowchart of the first embodiment of the system interface control method of the present application is provided;

[0045] Figure 2 A flowchart of the second embodiment of the system interface control method of the present application is provided;

[0046] Figure 3 A flowchart of the third embodiment of the system interface control method of the present application is provided;

[0047] Figure 4 This is a schematic diagram of the overall process in one implementation of the system interface control method of this application;

[0048] Figure 5 This is a schematic diagram of the module structure of the system interface control device of the embodiment of the present application;

[0049] Figure 6This is a schematic diagram of the device structure of the hardware operating environment involved in the system interface control method in the embodiment of the present application.

[0050] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0051] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0052] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0053] The main solution of the embodiment of the present application is: when the system is in a locked state, a first interface is displayed, and the first interface is the authentication interface of the system in the locked state; when a user authentication instruction sent by the user based on the first interface is received, user authentication is performed based on the user authentication instruction; when the user authentication passes, a login user verification is performed based on the user's login client information and the system's historical login information; when the verification fails, the second interface is loaded after the system's privacy files are cleaned up, and the second interface is the functional interface of the system in the unlocked state.

[0054] In one implementation, an authentication method based on the system's own account and password can be used. The disadvantage of this authentication method is that the password is easy to forget and needs to be changed regularly. For public terminals with multiple users logged in, some applications cannot meet the needs of multi-user startup, and multi-user login places higher requirements on the performance of the machine, which increases the cost of equipment investment.

[0055] In one implementation, public terminals can be placed in an independent network segment based on a third-party authentication platform. To access the business network or machine, one must first log in to the jump server through the third-party authentication platform, and then access it from the jump server. Logging in to the jump server generally uses two-factor authentication, which is commonly a password + mobile phone verification code or a password + dynamic token. The disadvantage of this method is that you need to log in to the jump server first to access all applications, which is very unfavorable for operation and maintenance monitoring and emergency response.

[0056] The present application provides a solution, which is to control the system screen and then perform login user verification based on the user's login client information and the system's historical login information after user authentication. When the login users are inconsistent, the system's temporary files are cleared to prevent leaks caused by malicious logins to public terminals.

[0057] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a computer, a server, etc., or an electronic device, a virtual device, etc. that can realize the above functions. The following takes the system interface control device (hereinafter referred to as the control device) as an example to illustrate this embodiment and the following embodiments.

[0058] Based on this, the present application embodiment provides a system interface control method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the system interface control method of the present application.

[0059] In this embodiment, the system interface control method includes steps S10 to S40:

[0060] Step S10, when the system is in a locked state, displaying a first interface, wherein the first interface is an authentication interface of the system in a locked state.

[0061] It should be noted that the above-mentioned system is also an operating system. The system can be set in a system interface control device or in other devices connected to the system interface control device, and the embodiments of the present application are not limited to this.

[0062] It can be understood that the system may include at least two states, specifically a locked state and an unlocked state.

[0063] It should be noted that when the system is in a locked state, the system can display a first interface, which is also the authentication interface of the system in a locked state. In the authentication interface, the user can perform login verification. When the system is in an unlocked state, the system can display a second interface, which is also the functional interface of the system in an unlocked state. In the functional interface, the user can operate the system to perform functions such as viewing, modifying, and deleting data. The embodiments of the present application do not limit the functions included in the functional interface.

[0064] In a specific implementation, when the system is in a locked state, the first interface can be displayed to the user. The user can perform login verification based on the first interface, and can enter the second interface when the login verification is passed.

[0065] Step S20: upon receiving a user authentication instruction sent by the user based on the first interface, performing user authentication based on the user authentication instruction.

[0066] It should be noted that the above user authentication instruction is also the authentication instruction required for the user to log in to the system. When the user authentication instruction is received, the user authentication instruction can be performed. The user can log in to the system normally only if the user authentication passes. If the user authentication fails, the user cannot log in to the system normally.

[0067] In some implementations of the embodiments of the present application, an account and password input box for the user to log in can be set on the first interface. When the user enters the account and password and clicks the login button, a user authentication instruction can be generated based on the input account and password.

[0068] In some implementations of the embodiments of the present application, a QR code display area for users to log in can be provided on the first interface, and a login QR code can be provided in the QR code display area. The user can scan the login QR code through the user's client software, user-side applet, etc., and then generate a user authentication instruction.

[0069] In a specific implementation, when receiving a user authentication instruction sent by the user based on the first interface, the control device can perform user authentication for the user to log into the system based on the user authentication instruction. Through user login verification, the system can display the terminal user in real time, clarify the terminal usage and trend, and can also trace the user based on the usage record.

[0070] Step S30, when the user authentication is passed, performing login user verification based on the user's login client information and the system's historical login information;

[0071] Step S40, when the verification fails, the second interface is loaded after the privacy files of the system are cleaned up, and the second interface is the functional interface of the system in the unlocked state.

[0072] It should be noted that the login user information may be the user information of the login system, which may specifically include the login user account, login user password, login user identity, etc. The embodiment of the present application does not limit this.

[0073] It can be understood that the above historical login information is also the login user information of the last login to the system. By performing login user verification on the login user information and the historical login information, it can be determined whether the login user who logged into the system last time and the login user who logs into the system this time are the same login user. Specifically, when the user authentication is passed, the step of performing login user verification based on the user's login user information and the system's historical login information includes: when the user authentication is passed, obtaining the user's login user information; obtaining the historical login information when the system was last logged in; comparing the login user information with the historical login information; if the login user information is consistent with the historical login information, setting the login user verification result to verification passed; if the login user information is inconsistent with the historical login information, setting the login user verification result to verification failed.

[0074] It should be noted that in order to prevent the leakage of information caused by malicious login to the system, the embodiment of the present application performs login user verification based on login user information and historical login user information when the user authentication is passed. If the verification is passed, the user can directly log in to the system without deleting the privacy files used by the system. If the verification fails, the privacy files used by the system need to be deleted before logging in to the system.

[0075] It should be explained that the above-mentioned privacy files are temporary files that can be used to cache data in order to meet temporary needs of users, such as files generated during the process of users downloading, installing / uninstalling software, browsing the web, watching videos online, sending and receiving emails, and transferring files using instant messaging tools.

[0076] The embodiment of the present application displays the first interface when the system is in a locked state, and the first interface is the authentication interface of the system in the locked state; when receiving the user authentication instruction sent by the user based on the first interface, the user authentication is performed based on the user authentication instruction; when the user authentication is passed, the login user verification is performed based on the user's login user terminal information and the system's historical login information; when the verification fails, the second interface is loaded after the system is cleared of privacy files, and the second interface is the functional interface of the system in the unlocked state. Since the user authentication is performed based on the user authentication instruction, the security of the system is improved; by performing the login user verification on the login user terminal information and the historical login information, the leakage incident that occurs when the system is maliciously logged in is prevented.

[0077] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 2 In the embodiment of the present application, the first interface includes an authentication code; the user authentication instruction includes a first user authentication instruction and a second user authentication instruction; when receiving a user authentication instruction sent by the user based on the first interface, the step of performing user authentication based on the user authentication instruction includes:

[0078] Step S21, obtaining a first user authentication instruction sent by the user based on the authentication image code;

[0079] Step S22, performing preliminary authentication based on the first user authentication instruction;

[0080] Step S23, when the preliminary authentication is passed, issuing an authentication token to the user terminal of the user; when receiving the authentication token, the user terminal encrypts the user information based on the preset public key to obtain a second user authentication instruction;

[0081] Step S24, upon receiving the second user authentication instruction sent by the user terminal, decrypting the second user authentication instruction by using a preset private key to obtain the user information of the user;

[0082] Step S25: performing secondary user authentication based on the user information.

[0083] In some implementations of the embodiments of the present application, when the system is in the first interface, winformC# can be used to maximize the interface and force it to be on top when it starts, while disabling system hotkeys and task manager, and setting the mouse focus to the first interface at a fixed time. Through the above interface, the user can only see the first interface and cannot perform other operations.

[0084] It should be noted that the above-mentioned authentication code can be a graphic authentication code used for logging in user authentication, which can specifically be a QR code, barcode, etc., and the embodiment of the present application is not limited to this.

[0085] In some implementations of the embodiments of the present application, the technical solution of the present application is described in detail by taking the QR code scanning authentication mode as an example.

[0086] It should be noted that the QR code scanning authentication mode can be used to connect to the internal OAUTH2.0 authentication platform. The user end can use the encryption algorithm of the public-private key pair for encryption, and return the first authentication result (that is, the authentication token) to the user end after the scanning authentication is successful; when the user end obtains the first authentication result, it initiates a second authentication to the control device through the encryption process. Among them, the second authentication is the authentication of user information.

[0087] It is understandable that the above encryption algorithm may be a national secret algorithm or other algorithms, and the present application embodiment does not limit this. The above user information may include information such as user name, user account ID, user account password, etc.

[0088] Specifically, the user can scan the QR code displayed on the first interface through the user terminal, and the QR code may include a unique identifier for requesting authentication, which may be a temporary identifier. Through the identifier, the user terminal can be guided to or send the first user authentication instruction to the internal OAUTH2.0 authentication platform for preliminary authentication. During the preliminary authentication, the OAUTH2.0 authentication platform can perform authentication based on the instruction information in the first user authentication instruction, and the instruction information may include the validity information of the QR code, the identity information of the user terminal, etc.

[0089] It should be noted that when the initial authentication is passed, the OAUTH2.0 authentication platform can generate an authentication token to the user's client, which can include the user's identity information. When the user receives the authentication token, the identity information in the authentication token can be encrypted based on a preset encryption algorithm (such as a national encryption algorithm, etc.) and a preset public key to obtain a second user authentication instruction.

[0090] It is understandable that when the control device receives the second authentication instruction sent by the user terminal, it can decrypt the second user authentication instruction through the preset private key to obtain the user information of the user terminal. Based on this user information, user secondary authentication can be achieved. When the user passes the secondary authentication, the user terminal can be checked for restricted rules to determine whether the user terminal matches the restricted rules. When the user is not authorized to log in, it means that the user matches the restricted rules. At this time, a prompt can be sent to the user terminal to prompt the user to authorize, so that the user can authorize and log in to the system in time. If the user has authorized the login, the step of loading the second interface after clearing the privacy files of the system when the verification fails is executed. The second interface is the functional interface of the system in the unlocked state. That is, after the step of performing secondary user authentication based on the user information, it also includes:

[0091] When the user passes the secondary authentication, the user terminal is verified based on the user information to see whether it has the login permission. If so, when the verification fails, the second interface is loaded after the privacy file of the system is cleaned up, and the second interface is the functional interface of the system in the unlocked state.

[0092] The embodiment of the present application obtains the first user authentication instruction sent by the user based on the authentication image code; performs preliminary authentication based on the first user authentication instruction; when the preliminary authentication is passed, issues an authentication token to the user's client; when the client receives the authentication token, it encrypts the user information based on the preset public key to obtain the second user authentication instruction; when receiving the second user authentication instruction sent by the client, it decrypts the second user authentication instruction using the preset private key to obtain the user information of the user; and performs secondary authentication of the user based on the user information. Since multiple authentications are performed, the security of the user logging into the system is improved.

[0093] Based on the first embodiment and / or the second embodiment of the present application, in the third embodiment of the present application, the same or similar contents as those of the above-mentioned first embodiment and / or the second embodiment can refer to the above introduction, and will not be repeated later. Figure 3 and Figure 4 In an embodiment of the present application, the method further includes:

[0094] Step S50, when the system is in the second interface, recording the idle duration in the second interface;

[0095] Step S60, if the idle duration is greater than a preset idle duration threshold, recording the login user terminal information of the current login user terminal and switching the system to the first interface;

[0096] Step S70, when the second interface switches to the first interface, recording the cleaning waiting time after the switching;

[0097] Step S80, when the cleaning waiting time is greater than a preset cleaning waiting time threshold, the system is cleaned of private files.

[0098] It should be noted that when the system is in the second interface, a scheduled job can be started, and the scheduled job can detect the idle time duration in the second interface.

[0099] It should be understood that when the system is in the second interface, if the system is in a state where no user instructions are executed, the system can be considered to be in an idle state. When the system is in an idle state, the duration of the system being in an idle state, that is, the idle duration, can be recorded through a timed job. When the idle duration is greater than a preset idle duration threshold, the system can be automatically locked. Specifically, user information and terminal information can be recorded and the second interface can be switched to the first interface, while the user terminal is logged out of the system.

[0100] It should be noted that when the system is in the second interface, if the system is executing a user instruction or starts to execute a user instruction, the system can be considered to be in a working state. When the system switches from an idle state to a working state, the idle duration can be reset to zero.

[0101] It should be explained that when the user logs out of the system, the system can record the cleaning waiting time after the interface is switched. When the cleaning waiting time is greater than the preset cleaning waiting time threshold, if there is no new user login, the system will clean up the privacy files. If there is a new user login within the time range of the preset cleaning waiting time threshold, the system can return to the step of performing user authentication based on the user authentication instruction when receiving the user authentication instruction sent by the user based on the first interface to perform user authentication.

[0102] In some implementations of the embodiments of the present application, a custom hotkey may be provided in the system, through which the user may generate a second interface closing instruction to actively lock the system, and when the user actively logs out, the step of cleaning up the private files may be immediately triggered. Specifically, the method further includes: upon receiving the second interface closing instruction, cleaning up the private files of the system and switching the system to the first interface.

[0103] It should be noted that the system of the embodiment of the present application can also perform functions such as Web-side data display, data query, and custom parameter configuration.

[0104] Specifically, you can customize bulletin board information scrolling, local image carousel, preset idle duration threshold, maintenance / normal mode settings, version upgrade control, real-time display of system usage, and record of user-side query records.

[0105] In some implementations of the embodiments of the present application, a user fault reporting module may be provided in the system, and the user fault reporting module may be connected to an internal robot message platform, and the user may select the corresponding fault reporting content, which is sent to the corresponding processing user through the message platform after clicking. A picture carousel module may be provided in the system, and the set picture files may be carouseled. A parameter maintenance module may also be provided in the system to realize the setting and modification of corresponding parameters. A record query module may also be provided in the system to realize the user's usage record query. A version control module may also be provided in the system to realize the upgrade management of the Xisitong program version. The system may also be provided with a file cleaning module to realize the upgrade management of the program version.

[0106] It is understandable that the system can customize the path and file name of the privacy files to be cleaned up, such as setting the path of the browser cache, the user password file saved by the FTP tool, etc. The cleanup action can be triggered in three scenarios:

[0107] 1) When a user logs in, if the current user is not the same as the previous user, cleanup is triggered;

[0108] 2) When the user actively exits, cleanup is triggered immediately;

[0109] 3) The user times out and logs out passively, and the cleanup is triggered after a period of time.

[0110] The embodiment of the present application records the idle duration in the second interface when the system is in the second interface; if the idle duration is greater than the preset idle duration threshold, the login user terminal information of the current login user terminal is recorded and the system is switched to the first interface; when the second interface switches to the first interface, the cleaning waiting time after the switch is recorded; when the cleaning waiting time is greater than the preset cleaning waiting time threshold, the system performs privacy file cleaning. Since the interface switching is performed when the system idle duration exceeds the preset idle duration, the multi-user experience of the system is improved. By performing privacy file cleaning when the cleaning waiting time after the switch is greater than the preset cleaning waiting time threshold, the security and convenience of the system are improved.

[0111] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the system interface control method of the present application. More simple transformations based on this technical concept are all within the protection scope of the present application.

[0112] This application also provides a system interface control device, please refer to Figure 5 , the system interface control device comprises:

[0113] The security protection module 10 is used to display a first interface when the system is in a locked state, wherein the first interface is an authentication interface of the system in the locked state;

[0114] The security authentication module 20 is used to perform user authentication based on the user authentication instruction when receiving the user authentication instruction sent by the user based on the first interface;

[0115] A user verification module 30, configured to perform login user verification based on the user's login client information and the system's historical login information when the user authentication is passed;

[0116] The interface switching module 40 is used to load the second interface after cleaning the privacy files of the system when the verification fails. The second interface is the functional interface of the system in the unlocked state.

[0117] The system interface control device provided by the present application adopts the system interface control method in the above embodiment, which can solve the technical problem that some public terminals allow multiple users to log in, and are prone to leakage when maliciously logged in. Compared with the prior art, the beneficial effects of the system interface control device provided by the present application are the same as the beneficial effects of the system interface control method provided by the above embodiment, and other technical features in the system interface control device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0118] The present application provides a system interface control device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the system interface control method in the above-mentioned embodiment one.

[0119] Reference below Figure 6, which shows a schematic diagram of the structure of a system interface control device suitable for implementing an embodiment of the present application. The system interface control device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The system interface control device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0120] like Figure 6 As shown, the system interface control device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the system interface control device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the system interface control device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a system interface control device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0121] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0122] The system interface control device provided by the present application adopts the system interface control method in the above embodiment, which can solve the technical problem that some public terminals allow multiple users to log in, and are prone to leakage when maliciously logged in. Compared with the prior art, the beneficial effects of the system interface control device provided by the present application are the same as the beneficial effects of the system interface control method provided by the above embodiment, and other technical features in the system interface control device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0123] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0124] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0125] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the system interface control method in the above-mentioned embodiment.

[0126] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0127] The computer-readable storage medium may be included in the system interface control device; or may exist independently without being assembled into the system interface control device.

[0128] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the system interface control device, the system interface control device:

[0129] When the system is in a locked state, displaying a first interface, wherein the first interface is an authentication interface of the system in the locked state;

[0130] When receiving a user authentication instruction sent by the user based on the first interface, performing user authentication based on the user authentication instruction;

[0131] When the user authentication is passed, the login user verification is performed based on the login client information of the user and the historical login information of the system;

[0132] When the verification fails, the second interface is loaded after the privacy files of the system are cleaned up, and the second interface is the functional interface of the system in the unlocked state.

[0133] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0134] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0135] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0136] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned system interface control method, and can solve the technical problem that some public terminals allow multiple users to log in, and when they are maliciously logged in, it is easy to leak information. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the system interface control method provided by the above-mentioned embodiment, and will not be repeated here.

[0137] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned system interface control method when executed by a processor.

[0138] The computer program product provided by the present application can solve the technical problem that some public terminals allow multiple users to log in, and when they are maliciously logged in, it is easy to leak information. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the system interface control method provided by the above embodiment, and will not be repeated here.

[0139] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A system interface control method, characterized in that: The method comprises: When the system is in a locked state, displaying a first interface, wherein the first interface is an authentication interface of the system in the locked state; When receiving a user authentication instruction sent by the user based on the first interface, performing user authentication based on the user authentication instruction; When the user authentication is passed, the login user verification is performed based on the login client information of the user and the historical login information of the system; When the verification fails, the second interface is loaded after the privacy files of the system are cleaned up, and the second interface is the functional interface of the system in the unlocked state.

2. The system interface control method according to claim 1, characterized in that: When the user authentication is passed, the step of performing login user verification based on the user's login client information and the system's historical login information includes: When the user authentication is passed, obtaining the user's login client information; Obtaining historical login information when the system was last logged in; Comparing the login user information with the historical login information; If the login user information is consistent with the historical login information, the login user verification result is set as verification passed; If the login user information is inconsistent with the historical login information, the login user verification result is set as verification failure.

3. The system interface control method according to claim 1, characterized in that: The first interface includes an authentication graphic code; the user authentication instruction includes a first user authentication instruction and a second user authentication instruction; The step of performing user authentication based on the user authentication instruction when receiving the user authentication instruction sent by the user based on the first interface includes: Obtaining a first user authentication instruction sent by the user based on the authentication image code; Performing preliminary authentication based on the first user authentication instruction; When the preliminary authentication is passed, an authentication token is issued to the user terminal of the user; when the user terminal receives the authentication token, the user information is encrypting based on a preset public key to obtain a second user authentication instruction; Upon receiving the second user authentication instruction sent by the user terminal, decrypting the second user authentication instruction by using a preset private key to obtain the user information of the user; A secondary user authentication is performed based on the user information.

4. The system interface control method according to claim 3, characterized in that: After the step of performing secondary user authentication based on the user information, the method further includes: When the user passes the secondary authentication, verifying whether the user terminal has login authority based on the user information; If so, the step of loading a second interface after cleaning up the privacy files of the system when the verification fails is performed, wherein the second interface is a functional interface of the system in an unlocked state.

5. The system interface control method according to claim 1, characterized in that: The method further comprises: When the system is in the second interface, recording the idle duration in the second interface; If the idle duration is greater than a preset idle duration threshold, recording the login user terminal information of the current login user terminal and switching the system to the first interface; When the second interface switches to the first interface, the cleaning waiting time after the switch is recorded; When the cleaning waiting time is greater than a preset cleaning waiting time threshold, the system is cleaned of privacy files.

6. The system interface control method according to claim 1, characterized in that: The method further comprises: When the second interface closing instruction is received, the privacy files of the system are cleaned up and the system is switched to the first interface.

7. A system interface control device, characterized in that: The system interface control device comprises: A security protection module, used to display a first interface when the system is in a locked state, wherein the first interface is an authentication interface of the system in the locked state; A security authentication module, configured to perform user authentication based on the user authentication instruction when receiving the user authentication instruction sent by the user based on the first interface; A user verification module, used to perform login user verification based on the user's login client information and the system's historical login information when the user authentication is passed; The interface switching module is used to load the second interface after cleaning the privacy files of the system when the verification fails. The second interface is the functional interface of the system in the unlocked state.

8. A system interface control device, characterized in that: The device comprises: a memory, a processor, and a system interface control program stored in the memory and executable on the processor, wherein the system interface control program is configured to implement the steps of the system interface control method according to any one of claims 1 to 7.

9. A storage medium, characterized in that: The storage medium stores a system interface control program, and when the system interface control program is executed by the processor, the steps of the system interface control method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the system interface control method according to any one of claims 1 to 6 are implemented.

Images