Login verification method and device, equipment, storage medium and product

Abstract

The invention discloses a login verification method and device, equipment, a storage medium and a product, and relates to the technical field of data security, and the method comprises the steps: responding to a login instruction triggered in a command line interface, and obtaining user type information according to the login instruction; generating a login verification password according to the user type information and the internal password generation parameter; a local login password input by the user on the command line interface is obtained, and the local login password is generated based on the target password generation tool according to the multi-dimensional password parameters input by the user; and performing login verification according to the login verification password and the local login password. By means of the mode, after a user obtains the local login password generated based on the target password generation tool, the local login password is input from the command line interface, then login verification is achieved by comparing the local login password with the login verification password, and the system can be operated only after verification is passed; therefore, the system data can be prevented from being maliciously tampered, and the security of the system is improved.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to login verification methods, devices, equipment, storage media and products. Background Art

[0002] In the development of communication products, it is usually necessary to provide a way for personnel from various departments to log in to the system. By default, the login method is Android Debug Bridge (ADB) login, and ADB login does not require a password, that is, developers and ordinary users can enter the system and randomly modify system data. However, in actual situations, ordinary users do not have the authority to modify system data. If the data is maliciously tampered with by force, the system will crash. Therefore, the above method cannot prevent system data from being maliciously tampered with.

[0003] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0004] The main purpose of this application is to provide a login verification method, device, equipment, storage medium and product, aiming to solve the technical problem that the existing technology cannot prevent system data from being maliciously tampered with.

[0005] To achieve the above purpose, the present application proposes a login verification method, which includes:

[0006] In response to a login instruction triggered in a command line interface, obtaining user type information according to the login instruction;

[0007] Generate a login verification password according to the user type information and internal password generation parameters;

[0008] Acquire a local login password input by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to multi-dimensional password parameters input by the user;

[0009] Login verification is performed according to the login verification password and the local login password.

[0010] In one embodiment, the step of performing login verification according to the login verification password and the local login password includes:

[0011] Aligning the login verification password and the local login password;

[0012] Slice the aligned login verification password and the aligned local login password respectively;

[0013] Generate multiple password groups according to the login verification password after slicing and the local login password after slicing;

[0014] Login verification is performed according to the multiple password groups.

[0015] In one embodiment, the step of performing login verification according to the multiple password groups includes:

[0016] Counting the number of the plurality of password groups and creating the number of instance tasks;

[0017] Allocating a password group to each of the instance tasks;

[0018] Login verification is performed on the multiple password groups by executing the instance tasks of the respective assigned password groups in parallel.

[0019] In one embodiment, the step of generating a login verification password according to the user type information and internal password generation parameters includes:

[0020] When the login instruction is a preset instruction, obtaining first information of a device running a command line interface;

[0021] When it is determined according to the first information that the device meets the target device requirement, detecting a current version of the device;

[0022] When the current version is a secure version, obtaining the current device serial code and current certificate information according to the internal password generation parameters;

[0023] generating first derived data according to the current device serial code;

[0024] Determine a current hash value of the target storage device according to the current certificate information;

[0025] Based on a target message authentication code algorithm, generating second derived data according to the current hash value and the first string;

[0026] Based on the target key generation algorithm, a login verification password is generated according to the user type information, the first derived data, the second derived data and the current number of iterations.

[0027] In one embodiment, before the step of obtaining the local login password input by the user in the command line interface, the method further includes:

[0028] In response to a password generation instruction triggered in a tool command line interface, obtaining multi-dimensional password parameters according to the password generation instruction;

[0029] Acquire second information of a device running a target password generation tool;

[0030] When the second information is target device information, determining whether the object under the target path is empty;

[0031] If not, extracting a first public key from the multi-dimensional cryptographic parameters according to the first instruction, and determining a second public key according to the second instruction and the private key data;

[0032] When the first public key is the same as the second public key, a local login password is generated based on the target password generation tool and according to the multi-dimensional password parameters.

[0033] In one embodiment, the step of generating a local login password based on the target password generation tool and the multi-dimensional password parameters includes:

[0034] Obtaining input certificate information, input device serial code, and input user type information according to the multi-dimensional password parameters;

[0035] generating third derived data according to the input device serial code;

[0036] Determine a target hash value of a target storage device according to the input certificate information;

[0037] generating fourth derived data based on the target message authentication code algorithm and the target hash value and the second string;

[0038] Based on a target key generation algorithm, a local login password is generated according to the input user type information, the third derived data, the fourth derived data and the target number of iterations.

[0039] In addition, to achieve the above purpose, the present application also proposes a login verification device, which includes:

[0040] An acquisition module, configured to respond to a login instruction triggered in a command line interface and acquire user type information according to the login instruction;

[0041] A generation module, used to generate a login verification password according to the user type information and internal password generation parameters;

[0042] The acquisition module is further used to acquire a local login password input by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to the multi-dimensional password parameters input by the user;

[0043] A verification module is used to perform login verification according to the login verification password and the local login password.

[0044] In addition, to achieve the above-mentioned purpose, the present application also proposes a login verification device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the login verification method described above.

[0045] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the login verification method described above are implemented.

[0046] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the login verification method described above are implemented.

[0047] One or more technical solutions proposed in this application have at least the following technical effects: by responding to a login instruction triggered in a command line interface, obtaining user type information according to the login instruction; generating a login verification password according to the user type information and internal password generation parameters; obtaining a local login password entered by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to the multi-dimensional password parameters entered by the user; and performing login verification according to the login verification password and the local login password. In the above manner, after obtaining the local login password generated based on the target password generation tool, the user enters the local login password from the command line interface, and then performs login verification by comparing it with the login verification password. Only after the verification is passed can the system be operated, thereby preventing the system data from being maliciously tampered with and improving the security of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] The accompanying drawings herein are incorporated in and constitute a part of the specification, illustrate embodiments consistent with the present application, and together with the description, are used to explain the principles of the present application.

[0049] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0050] Figure 1 A flowchart of the first embodiment of the login verification method of this application is provided;

[0051] Figure 2 A flowchart of the second embodiment of the login verification method of this application is provided;

[0052] Figure 3 A schematic diagram of a password group provided for the second embodiment of the login verification method of this application;

[0053] Figure 4 This is a schematic diagram of the overall process of the login verification method provided in Example 1 of the present application;

[0054] Figure 5 This is a schematic diagram of the module structure of the login verification device according to an embodiment of the present application;

[0055] Figure 6 This is a schematic diagram of the device structure of the hardware operating environment involved in the login verification method in the embodiment of the present application.

[0056] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0057] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a login verification device, etc. The following takes the login verification device as an example to illustrate this embodiment and the following embodiments.

[0058] Based on this, the present application embodiment provides a login verification method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the login verification method of the present application.

[0059] In this embodiment, the login verification method includes steps S10 to S40:

[0060] Step S10, in response to a login instruction triggered in the command line interface, obtaining user type information according to the login instruction.

[0061] It should be understood that the login instruction refers to the instruction entered in the command line interface when the user needs to enter the system, and the login instruction includes an instruction representing the user identity and an ADB instruction, and the ADB instruction may be an adb shell instruction. The user type information is determined by parsing the login instruction. For example, if the instruction representing the user identity is a root instruction, it indicates an administrator identity, and if the instruction representing the user identity is a user instruction, it indicates an ordinary user identity.

[0062] It should be noted that the application scenario of this embodiment can be a communication product development scenario under the Linux system. In this application scenario, the ADBD (Android Debug Bridge Daemon) code is modified to redirect the login execution / bin / sh to the bin application that performs login verification. After the redirection is completed, a password needs to be entered when entering the system and a login verification will also be performed, thereby preventing system data from being maliciously tampered with and ensuring the security of the system.

[0063] Step S20, generating a login verification password according to the user type information and internal password generation parameters.

[0064] It is understandable that the login verification password refers to the password used to verify the local login password entered by the user in the command line interface. The login verification password is automatically generated locally. The internal password generation parameters refer to the parameters required to automatically generate the login verification password locally. The internal password generation parameters are directly obtained, including but not limited to the current device serial code, current certificate information, etc. After obtaining the internal password generation parameters, the login verification password is generated in combination with the user type information.

[0065] Further, step S20 includes: when the login instruction is a preset instruction, obtaining first information of a device running a command line interface; when it is determined that the device meets the target device requirements based on the first information, detecting the current version of the device; when the current version is a secure version, obtaining the current device serial code and current certificate information based on internal password generation parameters; generating first derived data based on the current device serial code; determining the current hash value of the target storage device based on the current certificate information; based on a target message authentication code algorithm, generating second derived data based on the current hash value and a first character string; based on a target key generation algorithm, generating a login verification password based on the user type information, the first derived data, the second derived data, and the current number of iterations.

[0066] It should be understood that the first information refers to the information of the device running the command line interface, which includes but is not limited to device functions, device name, device memory information, device identification information, and operating system information. After obtaining the first information, it is necessary to determine whether the device meets the target device conditions based on the first information. If so, it indicates that the device is qualified. The target device condition can be that the device type is SA525 device type and the device identification information is yc identification information.

[0067] It is understandable that when determining that the device meets the target device requirements, it is necessary to further detect whether the current version of the device is a secure version. If so, it indicates that the device is secure. If not, it directly prompts that the system login fails. The target message authentication code algorithm refers to a hash-based message authentication code algorithm. The target message authentication algorithm can be an HMAC-SHA-512 algorithm, where SHA-512 represents the hash function used by the HMAC-SHA-512 algorithm. After obtaining the current device serial code, the first derived data can be generated based on the current device serial code based on the target message authentication algorithm.

[0068] It should be noted that the target storage device refers to a storage device for storing information and protecting chips. The target storage device may be a non-volatile storage device (electronic fuse, efuse), and the current hash value of the target storage device may be roothash. The first string may be the user's slat. After obtaining the current hash value of the target storage device, the second derived data is generated in combination with the first string, so that the second derived data is more secure.

[0069] It is understandable that the target key generation algorithm can be a PBKDF2 (Password-Based KeyDerivation Function 2) algorithm. After obtaining the second derived data, the login verification password is generated by combining the user type information, the first derived data and the current iteration number. The login verification password will be stored locally and used to verify the local login password entered by the user in the command line interface.

[0070] Step S30, obtaining a local login password input by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to multi-dimensional password parameters input by the user.

[0071] It should be understood that the local login password refers to the password that the user enters in the command line interface when entering the system, and the local login password can be generated by the target password generation tool and pushed to the user terminal. For the user, after the user terminal receives the local login password pushed by the target password generation tool, the local login password will be entered into the command line interface.

[0072] It should be noted that the target password generation tool can be a one-machine-one-secret password generation tool, that is, it generates a local login password for each device. Before using the target password generation tool, it is necessary to set the environment variables. In addition, the target password generation tool also has a cross-platform feature. For example, it can be applied to the ARM (Advanced RISCMachine) platform and the Linux X86 platform. After obtaining the multi-dimensional password parameters entered by the user, the target password generation tool generates and outputs the local login password.

[0073] Furthermore, before step S30, it also includes: in response to a password generation instruction triggered in the tool command line interface, obtaining multi-dimensional password parameters according to the password generation instruction; obtaining second information of the device running the target password generation tool; when the second information is the target device information, determining whether the object under the target path is empty; if not, extracting the first public key from the multi-dimensional password parameters according to the first instruction, and determining the second public key according to the second instruction and private key data; when the first public key is the same as the second public key, generating a local login password based on the target password generation tool and the multi-dimensional password parameters.

[0074] It can be understood that the multi-dimensional password parameters refer to the parameters used to generate a local login password in the target password generation tool. The multi-dimensional password parameters are read from the login verification device and input by the user into the target password generation tool. The multi-dimensional password parameters include but are not limited to input certificate information, input device serial code, and input user type information.

[0075] It should be understood that the second information refers to the information of the device running the target password generation tool. When the second information is determined to be the target device information, it indicates that the type of the device is an X86 device type. At this time, it is further determined whether the object under the target path is empty. If so, the password generation process ends. If not, the password generation process continues. Among them, the target path can be an oemkey path.

[0076] It can be understood that the first instruction refers to an instruction for extracting a public key from a certificate, and the first instruction can be an openssl x509 instruction. After extracting the first public key, the first public key can be stored in the extre_cert_root.pem file. The second instruction refers to an instruction for extracting private key data, and the second instruction can be an openssl ec instruction. The extracted private key data includes but is not limited to a private key exponent, a prime number, etc. After determining the second public key, the second public key can be stored in the extra_cert_root.pem file. According to the diff command, detect whether the first public key in the extre_cert_root.pem file and the second public key in the extra_cert_root.pem file are the same. If so, continue the password generation process.

[0077] Furthermore, the step of generating a local login password based on the target password generation tool according to the multi-dimensional password parameters includes: obtaining input certificate information, input device serial code and input user type information according to the multi-dimensional password parameters; generating third derived data according to the input device serial code; determining a target hash value of a target storage device according to the input certificate information; generating fourth derived data according to the target hash value and a second character string based on a target message authentication code algorithm; and generating a local login password according to the input user type information, the third derived data, the fourth derived data and a target number of iterations based on a target key generation algorithm.

[0078] It is understandable that after the third derived data and the fourth derived data are generated, the local login password is generated in combination with the input user type information and the target number of iterations. For different devices, the generated local login password is different. For example, for the administrator's device, the generated local login password is ZTdm0DQwYjdMmZGJjMmI5ZmY1Yjc5N2ZmYmJiYzAwYmY, and for the ordinary user's device, the generated local login password is ZDUw0DEx0DQ5YjY0ZDRjZmE0Y2FlZGE5YmMzMDkyMTU.

[0079] Step S40: Perform login verification based on the login verification password and the local login password.

[0080] It should be understood that after obtaining the local login password entered by the user, the local login password is compared with the login verification password. When the local login password and the login verification password are the same, it indicates that the verification has passed and you can enter the system normally. When the local login password and the login verification password are different, it indicates that the verification has failed and the system login has failed.

[0081] This embodiment responds to the login instruction triggered in the command line interface, obtains user type information according to the login instruction; generates a login verification password according to the user type information and internal password generation parameters; obtains the local login password entered by the user in the command line interface, wherein the local login password refers to the one generated by the target password generation tool according to the multi-dimensional password parameters entered by the user; and performs login verification according to the login verification password and the local login password. In the above manner, after obtaining the local login password generated based on the target password generation tool, the user enters the local login password from the command line interface, and then performs login verification by comparing it with the login verification password. Only after the verification is passed can the system be operated, thereby preventing the system data from being maliciously tampered with and improving the security of the system.

[0082] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 2 , step S40 includes steps S401 to S404:

[0083] Step S401, aligning the login verification password and the local login password.

[0084] It should be noted that in order to ensure the consistency of password slices, after obtaining the local login password entered by the user, the login verification password and the local login password are aligned by endpoint alignment, that is, the starting endpoint of the login verification password is aligned with the starting endpoint of the local login password.

[0085] Step S402, slicing the aligned login verification password and the aligned local login password respectively.

[0086] It can be understood that after alignment, the number of characters of the aligned local login password is counted respectively, and then the slice position point is determined according to the number of characters. To avoid the long-tail effect, the number of characters of the login verification password after each slice is the same. For example, if the number of characters is 44, the login verification passwords after each slice are 1-11, 12-22, 23-33, and 34-44 respectively.

[0087] Step S403, generating multiple password groups according to the sliced ​​login verification password and the sliced ​​local login password.

[0088] It should be understood that after obtaining the sliced ​​local login password, the sliced ​​local login password and the corresponding sliced ​​login verification password are divided into a password group until all sliced ​​login verification passwords are divided.

[0089] Step S404: perform login verification according to the multiple password groups.

[0090] Further, step S404 includes: counting the number of the multiple password groups and creating the number of instance tasks; assigning a password group to each of the instance tasks; and performing login verification on the multiple password groups by executing the instance tasks of each assigned password group in parallel.

[0091] It should be understood that the example task refers to the task of performing login verification on multiple password groups. The number of the example tasks is consistent with the number of password groups. Figure 3 , Figure 3 The diagram is a password group diagram, which takes 4 password groups as an example. Specifically, instance task A, instance task B, instance task C and instance task D are created respectively, and then password group 1 is assigned to instance task A, password group 2 is assigned to instance task B, password group 3 is assigned to instance task C3, and password group 4 is assigned to instance task D. Among them, the order of assigning password groups can be adjusted according to actual needs. At this time, the instance tasks of each assigned password group are executed in parallel, so that the sliced ​​login verification password in each password group and the sliced ​​local login password are compared at the same time to complete the login verification.

[0092] This embodiment aligns the login verification password and the local login password; slices the aligned login verification password and the aligned local login password respectively; generates multiple password groups according to the sliced ​​login verification password and the sliced ​​local login password; and performs login verification according to the multiple password groups. In the above manner, after the login verification password and the local login password are aligned, they are sliced ​​at the same slicing position point. After generating multiple password groups, a password group is assigned to each instance task to ensure that each task instance is assigned a password group, and then multiple instance tasks are executed in parallel, so that the login verification password and the local login password in each password group are compared at the same time, thereby effectively improving the password comparison efficiency, and then improving the login verification efficiency.

[0093] For example, to help understand the implementation process of the login verification method obtained by combining this embodiment with the above-mentioned embodiment 1, please refer to Figure 4 , Figure 4 A schematic diagram of the overall process of a login verification method is provided, specifically:

[0094] Before the user needs to log in to the system, it is necessary to read the multi-dimensional password parameters from the login verification device and enter the password generation instruction in the tool command line interface. The password generation instruction carries the multi-dimensional password parameters. For the target password generation tool, the multi-dimensional password parameters are obtained by parsing the password generation instruction, and then a local login password is generated according to the multi-dimensional password parameters, and the local login password is pushed to the user. After receiving the local login password, the user enters the process of logging into the system, that is, entering the login instruction in the command line interface. The login instruction includes instructions that represent the user identity and ADB instructions. For the login verification device, the user type information is obtained by parsing the login instruction, and then the login verification password is generated in combination with the internal password generation parameters, and then the prompt information for entering the password is displayed in the command line interface, for example, "Please enter your After the user enters the local login password and confirms it, the login verification password and the local login password are aligned, and the aligned login verification password and the aligned local login password are sliced ​​respectively. Multiple password groups are generated according to the sliced ​​login verification password and the sliced ​​local login password, and login verification is performed on the multiple password groups in parallel. When the comparison results of each password group are all consistent with the passwords, it indicates that the verification is passed and the system can be entered normally. When the comparison result of at least one password group is that the passwords are inconsistent, it indicates that the verification fails, and the system login fails.

[0095] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the login verification method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0096] This application also provides a login verification device, please refer to Figure 5 , the login verification device comprises:

[0097] The acquisition module 10 is used to respond to a login instruction triggered in a command line interface and acquire user type information according to the login instruction.

[0098] The generating module 20 is used to generate a login verification password according to the user type information and internal password generation parameters.

[0099] The acquisition module 10 is further used to acquire a local login password input by a user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to multi-dimensional password parameters input by a user.

[0100] The verification module 30 is used to perform login verification according to the login verification password and the local login password.

[0101] This embodiment responds to the login instruction triggered in the command line interface, obtains user type information according to the login instruction; generates a login verification password according to the user type information and internal password generation parameters; obtains the local login password entered by the user in the command line interface, wherein the local login password refers to the one generated by the target password generation tool according to the multi-dimensional password parameters entered by the user; and performs login verification according to the login verification password and the local login password. In the above manner, after obtaining the local login password generated based on the target password generation tool, the user enters the local login password from the command line interface, and then performs login verification by comparing it with the login verification password. Only after the verification is passed can the system be operated, thereby preventing the system data from being maliciously tampered with and improving the security of the system.

[0102] The login verification device provided by the present application adopts the login verification method in the above embodiment, which can solve the technical problem that the prior art cannot prevent the system data from being maliciously tampered with. Compared with the prior art, the beneficial effects of the login verification device provided by the present application are the same as the beneficial effects of the login verification method provided by the above embodiment, and the other technical features in the login verification device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0103] In one embodiment, the generation module 20 is also used to obtain first information of a device running a command line interface when the login instruction is a preset instruction; detect the current version of the device when it is determined that the device meets the target device requirements based on the first information; obtain the current device serial code and current certificate information based on internal password generation parameters when the current version is a secure version; generate first derived data based on the current device serial code; determine the current hash value of the target storage device based on the current certificate information; based on the target message authentication code algorithm, generate second derived data based on the current hash value and the first character string; based on the target key generation algorithm, generate a login verification password based on the user type information, the first derived data, the second derived data and the current number of iterations.

[0104] In one embodiment, the acquisition module 10 is also used to respond to a password generation instruction triggered in the tool command line interface, obtain multi-dimensional password parameters according to the password generation instruction; obtain second information of the device running the target password generation tool; when the second information is the target device information, determine whether the object under the target path is empty; if not, extract the first public key from the multi-dimensional password parameters according to the first instruction, and determine the second public key according to the second instruction and private key data; when the first public key is the same as the second public key, generate a local login password based on the target password generation tool and the multi-dimensional password parameters.

[0105] In one embodiment, the acquisition module 10 is also used to respond to a password generation instruction triggered in the tool command line interface, obtain multi-dimensional password parameters according to the password generation instruction; obtain second information of the device running the target password generation tool; when the second information is the target device information, determine whether the object under the target path is empty; if not, extract the first public key from the multi-dimensional password parameters according to the first instruction, and determine the second public key according to the second instruction and private key data; when the first public key is the same as the second public key, generate a local login password based on the target password generation tool and the multi-dimensional password parameters.

[0106] In one embodiment, the verification module 30 is also used to align the login verification password and the local login password; slice the aligned login verification password and the aligned local login password respectively; generate multiple password groups according to the sliced ​​login verification password and the sliced ​​local login password; and perform login verification according to the multiple password groups.

[0107] In one embodiment, the verification module 30 is also used to count the number of the multiple password groups and create the number of instance tasks; assign a password group to each of the instance tasks; and perform login verification on the multiple password groups by executing the instance tasks of each assigned password group in parallel.

[0108] The present application provides a login verification device, which includes: at least one processor; and a memory that is communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the login verification method in the above-mentioned embodiment one.

[0109] Reference below Figure 6 , which shows a schematic diagram of the structure of a login verification device suitable for implementing the embodiment of the present application. The login verification device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The login verification device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0110] like Figure 6As shown, the login verification device may include a processing device 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the login verification device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the login verification device to communicate with other devices wirelessly or wired to exchange data. Although the figure shows a login verification device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or provided instead.

[0111] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0112] The login verification device provided by the present application adopts the login verification method in the above embodiment, which can solve the technical problem that the prior art cannot prevent the system data from being maliciously tampered with. Compared with the prior art, the beneficial effects of the login verification device provided by the present application are the same as the beneficial effects of the login verification method provided by the above embodiment, and the other technical features in the login verification device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0113] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0114] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0115] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the login verification method in the above-mentioned embodiment.

[0116] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0117] The above-mentioned computer-readable storage medium may be included in the login verification device; or it may exist independently without being assembled into the login verification device.

[0118] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0119] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0120] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0121] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned login verification method, and can solve the technical problem that the prior art cannot prevent system data from being maliciously tampered with. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the login verification method provided by the above-mentioned embodiment, and will not be repeated here.

[0122] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned login verification method when executed by a processor.

[0123] The computer program product provided by this application can solve the technical problem that the prior art cannot prevent system data from being maliciously tampered with. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the login verification method provided by the above embodiment, which will not be repeated here.

[0124] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A login verification method, characterized in that: The method comprises: In response to a login instruction triggered in a command line interface, obtaining user type information according to the login instruction; Generate a login verification password according to the user type information and internal password generation parameters; Acquire a local login password input by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to multi-dimensional password parameters input by the user; Login verification is performed according to the login verification password and the local login password.

2. The method according to claim 1, characterized in that The step of performing login verification according to the login verification password and the local login password comprises: Aligning the login verification password and the local login password; Slice the aligned login verification password and the aligned local login password respectively; Generate multiple password groups according to the login verification password after slicing and the local login password after slicing; Login verification is performed according to the multiple password groups.

3. The method according to claim 2, characterized in that The step of performing login verification according to the multiple password groups includes: Counting the number of the plurality of password groups and creating the number of instance tasks; Allocating a password group to each of the instance tasks; Login verification is performed on the multiple password groups by executing the instance tasks of the respective assigned password groups in parallel.

4. The method according to claim 1, characterized in that The step of generating a login verification password according to the user type information and internal password generation parameters includes: When the login instruction is a preset instruction, obtaining first information of a device running a command line interface; When it is determined according to the first information that the device meets the target device requirement, detecting a current version of the device; When the current version is a secure version, obtaining the current device serial code and current certificate information according to the internal password generation parameters; generating first derived data according to the current device serial code; Determine a current hash value of the target storage device according to the current certificate information; Based on a target message authentication code algorithm, generating second derived data according to the current hash value and the first string; Based on the target key generation algorithm, a login verification password is generated according to the user type information, the first derived data, the second derived data and the current number of iterations.

5. The method according to claim 1, characterized in that Before the step of obtaining the local login password input by the user in the command line interface, the method further includes: In response to a password generation instruction triggered in a tool command line interface, obtaining multi-dimensional password parameters according to the password generation instruction; Acquire second information of a device running a target password generation tool; When the second information is target device information, determining whether the object under the target path is empty; If not, extracting the first public key from the multi-dimensional cryptographic parameters according to the first instruction, and determining the second public key according to the second instruction and the private key data; When the first public key is the same as the second public key, a local login password is generated according to the multi-dimensional password parameters based on the target password generation tool.

6. The method according to claim 5, characterized in that The step of generating a local login password based on the target password generation tool according to the multi-dimensional password parameters includes: Obtaining input certificate information, input device serial code, and input user type information according to the multi-dimensional password parameters; generating third derived data according to the input device serial code; Determine a target hash value of a target storage device according to the input certificate information; generating fourth derived data based on the target message authentication code algorithm and the target hash value and the second string; Based on a target key generation algorithm, a local login password is generated according to the input user type information, the third derived data, the fourth derived data and the target number of iterations.

7. A login verification device, characterized in that: The device comprises: An acquisition module, configured to respond to a login instruction triggered in a command line interface and acquire user type information according to the login instruction; A generation module, used to generate a login verification password according to the user type information and internal password generation parameters; The acquisition module is further used to acquire a local login password input by the user in the command line interface, wherein the local login password refers to a password generated by a target password generation tool according to the multi-dimensional password parameters input by the user; A verification module is used to perform login verification according to the login verification password and the local login password.

8. A login verification device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the login verification method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the login verification method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the login verification method according to any one of claims 1 to 6 are implemented.

Images