Login environment detection and security enhancement method and device based on WebGL fingerprint technology

Abstract

The invention discloses a login environment detection and security enhancement method and device based on the WebGL fingerprint technology, and the method comprises the steps: receiving a target request sent by a user equipment end, and enabling the target request to comprise a user login request and a system resource request; after the user identity corresponding to the target request is verified for the first time, obtaining a WebGL fingerprint which is carried by a request header of the target request and is generated based on a WebGL fingerprint technology; judging whether the WebGL fingerprint is successfully matched with fingerprints in a user fingerprint database or not, and performing secondary verification on the login environment of the target request of the user equipment side under the condition that the WebGL fingerprint cannot be successfully matched with the fingerprints in the user fingerprint database; and under the condition that the login environment of the target request of the user equipment passes the secondary verification, adding the WebGL fingerprint to a user fingerprint database.

Description

Technical Field

[0001] The present application relates to the field of web security, and more specifically, to a login environment detection and security enhancement method and device based on WebGL fingerprint technology. Background Art

[0002] At present, most web information systems widely use a token-based authentication mechanism to ensure the security of user sessions. After the user passes the login verification, the server generates a token and returns it to the user. When the user accesses system resources, he carries this token for identity authentication, and the server confirms the user's identity and authority by verifying the legitimacy and validity of the token. However, there is no verification of whether the user's login environment is abnormal. If the password is leaked or the token is illegally obtained by hackers or attackers through improper means (such as network sniffing, phishing attacks, session hijacking, etc.) during the validity period, they can disguise themselves as legitimate users and access system resources at will, and even perform sensitive operations such as data tampering and information leakage, which poses a serious threat to system security. Summary of the invention

[0003] In response to at least one defect or improvement need in the prior art, the present invention provides a login environment detection and security enhancement method and device based on WebGL fingerprint technology, which solves the problem of insufficient security of the information system, realizes real-time detection of any abnormal changes in the login environment, and improves the security of the information system.

[0004] To achieve the above-mentioned purpose, according to a first aspect of the present invention, a login environment detection and security enhancement method based on WebGL fingerprint technology is provided, the method comprising: receiving a target request sent by a user device, wherein the target request comprises a user login request and a system resource request; after the user identity corresponding to the target request is verified for the first time, obtaining a WebGL fingerprint generated based on the WebGL fingerprint technology and carried by the request header of the target request; judging whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library, and if the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, performing a secondary verification on the login environment of the target request on the user device; and if the secondary verification on the login environment of the target request on the user device is passed, adding the WebGL fingerprint to the user fingerprint library.

[0005] In an exemplary embodiment, after the user identity corresponding to the target request is verified for the first time, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried by the request header of the target request, the method further includes: detecting device information of the user device through a WebGL interface, wherein the device information includes a graphics card type, a driver version, and rendering performance; based on the device information, generating the WebGL fingerprint associated with the device information of the user device in combination with the WebGL fingerprint technology.

[0006] In an exemplary embodiment, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried by the request header of the target request, the method further includes: in a case where the target request sent by the user device is the user login request, performing a first verification on the user identity corresponding to the target request, wherein the first verification includes user name verification and user password verification.

[0007] In an exemplary embodiment, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried by the request header of the target request, the method further includes: when the target request sent by the user device is received as the system resource request, performing a first verification on the user identity corresponding to the target request, wherein the first verification includes Token legitimacy verification and Token validity verification.

[0008] In an exemplary embodiment, after performing a secondary verification on the login environment of the target request on the user device side, the method further includes: when the target request sent by the user device side is received as the user login request and the secondary verification on the login environment of the target request on the user device side fails, determining the user login request as an illegal login, rejecting and recording the user login request.

[0009] In an exemplary embodiment, after performing a secondary verification on the login environment of the target request of the user device, the method further includes: when the target request sent by the user device is received as the system resource request and the secondary verification of the login environment of the target request of the user device fails, the target request initiated by the user device is taken offline, and an initial login verification instruction is sent to the user device, wherein the initial login verification instruction is used to instruct the user to start login verification on the user device that jumps to the initial login page.

[0010] In an exemplary embodiment, obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried by the request header of the target request includes: obtaining a WebGL rendering context object and compiling a WebGL shader; creating a WebGL program for receiving the WebGL rendering context object, a vertex shader source code and a fragment shader source code corresponding to the WebGL shader; calling the WebGL program to draw graphics through a main function; reading pixel data of a rendering result of the graphics, hashing the pixel data, and obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried by the request header of the target request.

[0011] According to the second aspect of the present invention, there is also provided a login environment detection and security enhancement device based on WebGL fingerprint technology, which includes: a receiving unit, used to receive a target request sent by a user device, wherein the target request includes a user login request and a system resource request; a first verification unit, used to obtain a WebGL fingerprint generated based on the WebGL fingerprint technology and carried by the request header of the target request after the first verification of the user identity corresponding to the target request is passed; a second verification unit, used to determine whether the WebGL fingerprint is successfully matched with a fingerprint in a user fingerprint library, and if the WebGL fingerprint is not successfully matched with a fingerprint in the user fingerprint library, a second verification is performed on the login environment of the target request of the user device; an adding unit, used to add the WebGL fingerprint to the user fingerprint library if the second verification of the login environment of the target request of the user device is passed.

[0012] According to a third aspect of the present invention, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned login environment detection and security enhancement method based on WebGL fingerprint technology when running.

[0013] According to a fourth aspect of the present invention, there is also provided an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the login environment detection and security enhancement method based on WebGL fingerprint technology through the computer program.

[0014] In general, the above technical solutions conceived by the present invention can achieve the following beneficial effects compared with the prior art:

[0015] (1) The present invention provides a login environment detection and security enhancement method based on WebGL fingerprint technology, which generates a device fingerprint with high uniqueness and stability by deeply analyzing the WebGL graphics processing performance and characteristics of the user device in the Web environment. When the user logs in or requests system resources, the system will automatically capture and compare the WebGL fingerprint of the current login device with the previously recorded fingerprint information to detect any abnormal changes in the login environment in real time. When the user calls system resources, the WebGL fingerprint of the current login device can be captured and compared with the previously recorded fingerprint information in real time. This real-time performance enables the system to respond quickly to changes in the login environment, promptly detect and prevent potential illegal login behaviors, and has real-time performance.

[0016] (2) The present invention uses the WebGL API to detect details such as the user's graphics card type, driver version, and rendering performance. Since different devices and drivers have slight differences when rendering 3D graphics, this can be used to generate a unique fingerprint. Due to the relative stability of device hardware and software configuration, the WebGL fingerprint is not likely to change in a short period of time.

[0017] (3) The generation and comparison of WebGL fingerprints in the present invention are completed automatically without manual intervention by the user, and consume very little system performance. This allows users to enjoy high security while still maintaining a smooth and convenient system usage experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 A flowchart of an optional login environment detection and security enhancement method based on WebGL fingerprint technology provided in an embodiment of the present application;

[0020] Figure 2 A flowchart of another optional login environment detection and security enhancement method based on WebGL fingerprint technology provided in an embodiment of the present application;

[0021] Figure 3 A schematic diagram of an optional process of generating a WebGL fingerprint provided in an embodiment of the present application;

[0022] Figure 4 A schematic diagram of the structure of an optional login environment detection and security enhancement device based on WebGL fingerprint technology provided in an embodiment of the present application;

[0023] Figure 5 A schematic diagram of the structure of an optional electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0025] The terms "first", "second", "third", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices.

[0026] According to one aspect of the embodiments of the present application, a login environment detection and security enhancement method based on WebGL fingerprint technology is provided. Figure 1 The present invention describes a login environment detection and security enhancement method based on WebGL fingerprint technology provided in an embodiment of the present application.

[0027] Figure 1 is a flow chart of an optional login environment detection and security enhancement method based on WebGL fingerprint technology provided in an embodiment of the present application, such as Figure 1 As shown, the process of the method may include the following steps:

[0028] S102, receiving a target request sent by a user device, wherein the target request includes a user login request and a system resource request.

[0029] S104, after the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained.

[0030] S106, determining whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library. If the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, performing a secondary verification on the login environment of the target request on the user device.

[0031] S108, when the login environment of the target request of the user device is verified twice, the WebGL fingerprint is added to the user fingerprint library.

[0032] An optional login environment detection and security enhancement method based on WebGL fingerprint technology in the embodiment of the present application can be applied to abnormal detection and security enhancement of the login environment of the information system. Based on the currently widely used Token authentication mechanism, a device fingerprint with high uniqueness and stability is generated by deeply analyzing the WebGL graphics processing performance and characteristics of the user device in the Web environment. When the user logs in or requests system resources, the system will automatically capture and compare the WebGL fingerprint of the current login device with the previously recorded fingerprint information to detect any abnormal changes in the login environment in real time. Once a significant difference is found in the login environment, such as device replacement, login using an emulator or virtual machine, etc., the system will immediately trigger a high-level security verification process, such as re-entering a password to log in, etc., thereby effectively preventing potential illegal login behaviors. Optionally, the user can log in to the system at the user device end, where the user device in the user device end can be a mobile device, such as a smart mobile device, a computer, etc., or other devices, which are not limited here.

[0033] Figure 2 A flowchart of another optional login environment detection and security enhancement method based on WebGL fingerprint technology provided in an embodiment of the present application is shown as follows: Figure 2 As shown, after the user logs in to the system and initiates a login request, the system can receive a target request sent by the user's device. It should be noted that the target request may include a user login request and a system resource request. When the user logs in or requests system resources, the WebGL fingerprint generation technology can be used to obtain the WebGL fingerprint, and the fingerprint can be transmitted to the server in the head of the system login interface or the resource http request interface. After the server obtains the WebGL fingerprint, it determines whether the WebGL fingerprint exists in the user's fingerprint library. If so, the system can be used normally; if not, a secondary verification (login) or re-login (request resource) is required. In other words, after determining whether the WebGL fingerprint successfully matches the fingerprint in the user's fingerprint library, if the WebGL fingerprint cannot successfully match the fingerprint in the user's fingerprint library, the login environment of the target request on the user's device can be secondary verified. In addition, if the secondary verification of the login environment of the target request on the user's device is passed, the WebGL fingerprint can be added to the user fingerprint library for subsequent verification.

[0034] Through the above steps S102 to S108, a target request sent by a user device is received, wherein the target request includes a user login request and a system resource request; after the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained; it is determined whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library, and if the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, a secondary verification is performed on the login environment of the target request on the user device; if the secondary verification of the login environment of the target request on the user device is passed, the WebGL fingerprint is added to the user fingerprint library, thereby realizing real-time detection of any abnormal changes in the login environment and improving the security of the information system.

[0035] In an exemplary embodiment, after the user identity corresponding to the target request is authenticated for the first time, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology carried in the request header of the target request, the method further includes:

[0036] S11, detecting device information of the user device through the WebGL interface, wherein the device information includes a graphics card type, a driver version, and rendering performance;

[0037] S12, based on the device information, in combination with the WebGL fingerprint technology, generating a WebGL fingerprint associated with the device information of the user device.

[0038] In the embodiment of the present application, the device information of the user's device can be detected through the WebGL interface. It should be noted that the device information here can be the graphics card type, driver version, rendering performance, etc., and can also include other device information, which is not limited here. Based on the above device information, a WebGL fingerprint technology can be combined to generate a WebGL fingerprint associated with the device information of the user's device.

[0039] Specifically, during the WebGL fingerprint generation process, before each call to the login interface, the WebGL API can be used to detect details such as the user's graphics card type, driver version, and rendering performance. Since different devices and drivers have slight differences when rendering 3D graphics, they can be used to generate a unique fingerprint and combine these feature information with the algorithm to generate a unique WebGL fingerprint. When a user registers for the first time or logs in for the first time through a specific device, after ensuring that the login environment is normal through secondary confirmation methods such as SMS confirmation, the system will store the carried WebGL fingerprint in the user's fingerprint library.

[0040] Through this embodiment, the WebGL API is used to detect details such as the user's graphics card type, driver version, and rendering performance. Since different devices and drivers have slight differences when rendering 3D graphics, this can be used to generate a unique fingerprint. Due to the relative stability of the device hardware and software configuration, the WebGL fingerprint is not easy to change in a short period of time.

[0041] In an exemplary embodiment, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request, the method further includes:

[0042] S21, when the target request sent by the user device is a user login request, the user identity corresponding to the target request is initially verified, wherein the initial verification includes user name verification and user password verification.

[0043] In an embodiment of the present application, when the target request sent by the user device is a user login request, the user identity corresponding to the target request can be verified for the first time. It should be noted that the first verification can include user name verification and user password verification.

[0044] For example, when a user logs in or calls other system resource request interfaces, the public method for generating WebGL fingerprints can be used to obtain fingerprints, and the WebGL fingerprints can be placed in the http request header and transmitted to the server. After the server receives the request, if it is a login request, after verifying the username, password and other information, it verifies whether the WebGL fingerprint carried in the request header is in the fingerprint library of the user. If it exists, the system is entered normally; if it does not exist, it may be a new device login, and a secondary verification is performed by sending SMS or other methods.

[0045] In an exemplary embodiment, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request, the method further includes:

[0046] S31, when the target request sent by the user device is a system resource request, the user identity corresponding to the target request is first verified, wherein the first verification includes Token legitimacy verification and Token validity verification.

[0047] In an embodiment of the present application, when the target request sent by the user device is a system resource request, the user identity corresponding to the target request can be verified for the first time. It should be noted that the first verification can include Token legitimacy verification and Token validity verification.

[0048] For example, after the server receives the request, if it is a system resource request, after verifying the legitimacy and validity of the token, it verifies whether the WebGL fingerprint carried in the request header is in the fingerprint library of the user. If it exists, it returns normally. If not, the user is immediately offline, and the client jumps to the login page, requiring the user to log in again for verification.

[0049] In an exemplary embodiment, after performing secondary verification on the login environment of the target request on the user device, the method further includes:

[0050] S41, when the target request sent by the user device is received as a user login request and the login environment of the target request of the user device fails to pass the secondary verification, the user login request is determined to be an illegal login, and the user login request is rejected and recorded.

[0051] In the embodiment of the present application, the login environment can be detected and responded to abnormally. When the user requests system resources or logs in again, the system generates the WebGL fingerprint of the current device again, carries the fingerprint in the http request header, and compares it with the fingerprint library of the user stored in the database on the server side. If the comparison result shows that the WebGL fingerprint carried by the request header does not exist in the fingerprint library of the user, the system determines that there may be an abnormality in the current login environment (such as device replacement, simulator login, token hijacking, etc.), and then triggers further security verification measures, such as sending SMS verification codes, requiring secondary verification, etc. If the login behavior is confirmed to be legal, the WebGL fingerprint information stored on the server is updated; if it is confirmed to be an illegal login, the login request is rejected and the relevant information is recorded for subsequent analysis.

[0052] In an exemplary embodiment, after performing secondary verification on the login environment of the target request on the user device, the method further includes:

[0053] S51, when the target request sent by the user device is received as a system resource request and the secondary verification of the login environment of the target request of the user device fails, the target request initiated by the user device is taken offline, and an initial login verification instruction is sent to the user device, wherein the initial login verification instruction is used to instruct the user to start login verification on the user device that jumps to the initial login page.

[0054] In the embodiment of the present application, after the server receives the request, if it is a system resource request, after verifying the legitimacy and validity of the token, it verifies whether the WebGL fingerprint carried in the request header is in the fingerprint library of the user. If it exists, it returns normally. If it does not exist, the user is immediately offline, and the client jumps to the login page, requiring the user to log in again for verification. Optionally, after the user goes offline, an initial login verification instruction can be sent to the user device segment, which can be used to instruct the user to start login verification on the user device side that jumps to the initial login page. After receiving the instruction, the user device side can re-login and verify according to the instructions of the instruction.

[0055] Through this embodiment, when the user calls system resources, the WebGL fingerprint of the current login device can be captured and compared with the previously recorded fingerprint information in real time. This real-time feature enables the system to quickly respond to changes in the login environment and promptly detect and prevent potential illegal login behaviors.

[0056] In an exemplary embodiment, obtaining a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in a request header of a target request includes:

[0057] S61, obtaining a WebGL rendering context object and compiling a WebGL shader;

[0058] S62, creating a WebGL program for receiving a WebGL rendering context object, a vertex shader source code and a fragment shader source code corresponding to the WebGL shader;

[0059] S63, calling the WebGL program to draw graphics through the main function;

[0060] S64, reading pixel data of the rendering result of the graphics, performing hash encryption on the pixel data, and obtaining a WebGL fingerprint generated based on the WebGL fingerprint technology and carried by a request header of the target request.

[0061] In the embodiment of this application, Figure 3 A schematic diagram of an optional process of generating a WebGL fingerprint provided in an embodiment of the present application is as follows: Figure 3 As shown, the specific steps of generating a WebGL fingerprint may include obtaining a WebGL rendering context, compiling a shader, creating a WebGL program, implementing a main function, and generating a WebGL fingerprint.

[0062] Get the WebGL rendering context: Create a canvas tag. Then define a function getWebGLContext(canvas) that receives a canvas element as a parameter. Get the WebGL rendering context object by calling the browser's canvas.getContext("webgl") or canvas.getContext("experimental-webgl") method. If the current browser does not support WebGL, an error message will be output to the console and null will be returned.

[0063] Compile shader: define a compileShader(gl,shaderSource,shaderType) function, which is used to compile WebGL shader. It receives the WebGL rendering context object gl, the shader source code shaderSource, and the shader type shaderType as parameters. Inside the function, first create a shader object through the WebGL built-in gl.createShader(shaderType) method, then use gl.shaderSource(shader,shaderSource) to set the shader source code, and compile the shader through gl.compileShader(shader). If the compilation fails, an exception containing error information is thrown.

[0064] Create a WebGL program: define the createWebGLProgram(gl,vertexShaderSource,fragmentShaderSource) function, which is used to create and link a WebGL program. It receives the WebGL rendering context object, the vertex shader source code, and the fragment shader source code as parameters. Inside the function, first call the compileShader function defined above to compile the vertex shader and fragment shader, then create a WebGL program object, attach the compiled shader to the program through gl.attachShader, and use gl.linkProgram to link the program. If the link fails, an exception containing error information is thrown.

[0065] Main function implementation: In the main function, first get the canvas element on the page and call the getWebGLContext function to get the WebGL rendering context object. If the acquisition fails, return directly. Then, define the source code of the vertex shader and fragment shader, and call the createWebGLProgram function defined above to create a WebGL program. Next, set the clear color and clear the canvas, get the attribute position from the shader, and create a buffer to store the vertex data. Set the reading method of the vertex data through gl.vertexAttribPointer and gl.enableVertexAttribArray, and use gl.drawArrays to draw the graphics.

[0066] Generate WebGL fingerprint: After the graphics are drawn, use the gl.readPixels function to read the pixel data of the rendering result. After hashing the pixel data, you can get the WebGL fingerprint.

[0067] According to another aspect of an embodiment of the present application, a login environment detection and security enhancement device for implementing the above-mentioned login environment detection and security enhancement method based on WebGL fingerprint technology is also provided. Figure 4 is a schematic diagram of the structure of an optional login environment detection and security enhancement device based on WebGL fingerprint technology according to an embodiment of the present application, such as Figure 4 As shown, the device may include:

[0068] The receiving unit 402 is configured to receive a target request sent by a user device, wherein the target request includes a user login request and a system resource request;

[0069] The first verification unit 404 is used to obtain the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request after the first verification of the user identity corresponding to the target request is passed;

[0070] A secondary verification unit 406 is used to determine whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library. If the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, a secondary verification is performed on the login environment of the target request of the user device.

[0071] The adding unit 408 is used to add the WebGL fingerprint to the user fingerprint library when the login environment of the target request of the user device is verified twice.

[0072] It should be noted that the receiving unit 402 in this embodiment can be used to execute the above step S102, the first verification unit 404 in this embodiment can be used to execute the above step S104, the second verification unit 406 in this embodiment can be used to execute the above step S106, and the adding unit 408 in this embodiment can be used to execute the above step S108.

[0073] Through the above module, a target request sent by a user device is received, wherein the target request includes a user login request and a system resource request; after the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained; it is determined whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library, and if the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, a secondary verification is performed on the login environment of the target request on the user device; if the secondary verification of the login environment of the target request on the user device is passed, the WebGL fingerprint is added to the user fingerprint library, thereby realizing real-time detection of any abnormal changes in the login environment and improving the security of the information system.

[0074] In an exemplary embodiment, the apparatus further comprises:

[0075] A receiving unit, configured to detect device information of the user device through a WebGL interface, wherein the device information includes a graphics card type, a driver version, and rendering performance;

[0076] A generating unit is used to generate the WebGL fingerprint associated with the device information of the user device based on the device information and in combination with the WebGL fingerprint technology.

[0077] In an exemplary embodiment, the apparatus further comprises:

[0078] The first verification unit is used to perform an initial verification on the user identity corresponding to the target request when the target request sent by the user device is the user login request, wherein the initial verification includes user name verification and user password verification.

[0079] In an exemplary embodiment, the apparatus further comprises:

[0080] The second verification unit is used to perform an initial verification on the user identity corresponding to the target request when the target request sent by the user device is the system resource request, wherein the initial verification includes Token legitimacy verification and Token validity verification.

[0081] In an exemplary embodiment, the apparatus further comprises:

[0082] A recording unit is used to determine that the target request sent by the user device is the user login request and the login environment of the target request on the user device fails the secondary verification, and reject and record the user login request.

[0083] In an exemplary embodiment, the apparatus further comprises:

[0084] An offline unit is used to take the target request initiated by the user device offline when the target request sent by the user device is received as the system resource request and when the secondary verification of the login environment of the target request of the user device fails, and send an initial login verification instruction to the user device, wherein the initial login verification instruction is used to instruct the user to start login verification on the user device that jumps to the initial login page.

[0085] In an exemplary embodiment, the first verification unit includes:

[0086] Get module, used to get WebGL rendering context object and compile WebGL shader;

[0087] A creation module, used for creating a WebGL program for receiving the WebGL rendering context object, the vertex shader source code and the fragment shader source code corresponding to the WebGL shader;

[0088] A calling module is used to call the WebGL program and draw graphics through the main function;

[0089] A generation module is used to read pixel data of the rendering result of the graphic, perform hash encryption on the pixel data, and obtain the WebGL fingerprint generated based on the WebGL fingerprint technology and carried by the request header of the target request.

[0090] It should be noted here that the examples and scenarios implemented by the above-mentioned modules and corresponding steps are the same, but are not limited to the contents disclosed in the above-mentioned embodiments. It should be noted that the above-mentioned modules as part of the device can run in a hardware environment and can be implemented by software or hardware, wherein the hardware environment includes a network environment.

[0091] According to another aspect of the embodiment of the present application, a storage medium is also provided. Optionally, in this embodiment, the storage medium can be used to execute the program code of any one of the login environment detection and security enhancement methods based on WebGL fingerprint technology in the embodiment of the present application.

[0092] Optionally, in this embodiment, the storage medium is configured to store program codes for executing the following steps:

[0093] S1, receiving a target request sent by a user device, wherein the target request includes a user login request and a system resource request.

[0094] S2, after the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained.

[0095] S3, determining whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library. If the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, a secondary verification is performed on the login environment of the target request on the user device.

[0096] S4, when the login environment of the target request of the user device is verified twice, the WebGL fingerprint is added to the user fingerprint library.

[0097] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments, which will not be described in detail in this embodiment.

[0098] Among them, computer-readable storage media may include, but are not limited to, any type of disk, including floppy disks, optical disks, DVDs, CD-ROMs, microdrives and magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, DRAMs, VRAMs, flash memory devices, magnetic or optical cards, nanosystems (including molecular memory ICs), or any type of medium or device suitable for storing instructions and / or data.

[0099] According to another aspect of the embodiments of the present application, an electronic device for implementing the above-mentioned login environment detection and security enhancement method based on WebGL fingerprint technology is also provided. The electronic device can be a server, a terminal, or a combination thereof.

[0100] Figure 5 is a schematic diagram of the structure of an optional electronic device according to an embodiment of the present application, such as Figure 5 As shown, it includes a processor 502, a communication interface 504, a memory 506 and a communication bus 508, wherein the processor 502, the communication interface 504, and the memory 506 communicate with each other through the communication bus 508, wherein:

[0101] Memory 506, used for storing computer programs;

[0102] The processor 502 is used to execute the computer program stored in the memory 506 to implement the following steps:

[0103] S1, receiving a target request sent by a user device, wherein the target request includes a user login request and a system resource request.

[0104] S2, after the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained.

[0105] S3, determining whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library. If the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, a secondary verification is performed on the login environment of the target request on the user device.

[0106] S4, when the login environment of the target request of the user device is verified twice, the WebGL fingerprint is added to the user fingerprint library.

[0107] Optionally, the communication bus may be a PCI (Peripheral Component Interconnect) bus, or an EISA (Extended Industry Standard Architecture) bus, etc. The communication bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 5 The communication interface is used for communication between the electronic device and other devices.

[0108] The memory may include RAM, or may include nonvolatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0109] As an example, the memory 506 may include, but is not limited to, the receiving unit 402, the first verification unit 404, the second verification unit 406, and the adding unit 408 in the WebGL fingerprint technology-based login environment detection and security enhancement device. In addition, it may also include, but is not limited to, other module units in the WebGL fingerprint technology-based login environment detection and security enhancement device, which will not be repeated in this example.

[0110] The above-mentioned processor can be a general-purpose processor, which can include but not be limited to: CPU (Central Processing Unit), NP (Network Processor), etc.; it can also be DSP (Digital Signal Processing), ASIC (Application Specific Integrated Circuit), FPGA (Field-Programmable Gate Array) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0111] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments, and this embodiment will not be described in detail here.

[0112] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0113] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0114] In the several embodiments provided in the present application, it should be understood that the disclosed devices can be implemented in other ways. For example, the device embodiments described above are only schematic, such as the division of the units, which is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some service interfaces, and the indirect coupling or communication connection of devices or units can be electrical or other forms.

[0115] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0116] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0117] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a memory, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned memory includes: U disk, read-only memory (ROM), random access memory (RAM), mobile hard disk, disk or optical disk and other media that can store program code.

[0118] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable memory, which can include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0119] The above is only an exemplary embodiment of the present disclosure, and the scope of the present disclosure cannot be limited thereto. That is, any equivalent changes and modifications made according to the teachings of the present disclosure are still within the scope of the present disclosure. After considering the specification and practicing the disclosure here, those skilled in the art will easily think of the implementation scheme of the present disclosure. This application is intended to cover any modification, use or adaptation of the present disclosure, which follows the general principles of the present disclosure and includes common knowledge or customary technical means in the technical field not recorded in the present disclosure. The description and examples are regarded as exemplary only, and the scope and spirit of the present disclosure are defined by the claims.

[0120] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0121] It will be easily understood by those skilled in the art that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A login environment detection and security enhancement method based on WebGL fingerprint technology, characterized in that: include: Receiving a target request sent by a user device, wherein the target request includes a user login request and a system resource request; After the user identity corresponding to the target request is verified for the first time, a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained; Determine whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library, and if the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, perform secondary verification on the login environment of the target request on the user device; When the login environment of the target request of the user device is verified twice, the WebGL fingerprint is added to the user fingerprint library.

2. The login environment detection and security enhancement method based on WebGL fingerprint technology as claimed in claim 1, characterized in that: After the user identity corresponding to the target request is verified for the first time, before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request, the method further includes: Detecting device information of the user device through a WebGL interface, wherein the device information includes a graphics card type, a driver version, and rendering performance; Based on the device information, the WebGL fingerprint associated with the device information of the user device is generated in combination with the WebGL fingerprint technology.

3. The login environment detection and security enhancement method based on WebGL fingerprint technology as claimed in claim 1, characterized in that: Before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request, the method further includes: In the case that the target request sent by the user device is the user login request, the user identity corresponding to the target request is verified for the first time, wherein the first verification includes user name verification and user password verification.

4. The login environment detection and security enhancement method based on WebGL fingerprint technology as claimed in claim 1, characterized in that: Before obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request, the method further includes: In the case where the target request sent by the user device is the system resource request, the user identity corresponding to the target request is verified for the first time, wherein the first verification includes Token legitimacy verification and Token validity verification.

5. The login environment detection and security enhancement method based on WebGL fingerprint technology as claimed in claim 1, characterized in that: After performing secondary verification on the login environment of the target request of the user equipment, the method further includes: When the target request sent by the user device is received as the user login request and the secondary verification of the login environment of the target request of the user device fails, the user login request is determined to be an illegal login, and the user login request is rejected and recorded.

6. The login environment detection and security enhancement method based on WebGL fingerprint technology as claimed in claim 1, characterized in that: After performing secondary verification on the login environment of the target request of the user equipment, the method further includes: When the target request received from the user device is the system resource request and the secondary verification of the login environment of the target request from the user device fails, the target request initiated by the user device is taken offline, and an initial login verification instruction is sent to the user device, wherein the initial login verification instruction is used to instruct the user to start login verification on the user device that jumps to the initial login page.

7. The login environment detection and security enhancement method based on WebGL fingerprint technology according to any one of claims 1 to 6, characterized in that: The step of obtaining the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request includes: Get the WebGL rendering context object and compile the WebGL shader; Creating a WebGL program for receiving the WebGL rendering context object, vertex shader source code and fragment shader source code corresponding to the WebGL shader; Call the WebGL program to draw graphics through the main function; Pixel data of the rendering result of the graphic is read, the pixel data is hashed and encrypted, and the WebGL fingerprint generated based on the WebGL fingerprint technology and carried in the request header of the target request is obtained.

8. A login environment detection and security enhancement device based on WebGL fingerprint technology, characterized in that: include: A receiving unit, configured to receive a target request sent by a user equipment end, wherein the target request includes a user login request and a system resource request; A first verification unit, configured to obtain a WebGL fingerprint generated based on the WebGL fingerprint technology and carried in a request header of the target request after first verification of the user identity corresponding to the target request is passed; A secondary verification unit, used to determine whether the WebGL fingerprint successfully matches the fingerprint in the user fingerprint library, and if the WebGL fingerprint cannot successfully match the fingerprint in the user fingerprint library, perform secondary verification on the login environment of the target request of the user device end; The adding unit is used to add the WebGL fingerprint to the user fingerprint library when the login environment of the target request of the user device is verified twice.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein the program executes the method according to any one of claims 1 to 7 when executed.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to execute the method according to any one of claims 1 to 7 through the computer program.

Images