Login authentication method and device, electronic equipment and storage medium

Abstract

The invention relates to the technical field of Internet, and discloses a login authentication method and device, electronic equipment and a storage medium. The method comprises the steps that a login authentication link for accessing an application system is acquired, the login authentication link comprises multiple authentication modes, and the multiple authentication modes are connected in series according to a preset sequence; in response to a login operation generated by adopting multiple authentication modes, determining a login process link of the application process based on the login operation; and if the login process link is consistent with the login authentication link, judging that the application system is successfully logged in. By implementing the technical scheme of the invention, the login of the application system can be carried out by combining multiple authentication modes, and the login security of the application system is greatly improved.

Description

Technical Field

[0001] The present invention relates to the field of Internet technology, and in particular to a login authentication method, device, electronic equipment and storage medium. Background Art

[0002] With the rapid development of Internet technology, more and more application systems are used by users, and the account systems of various systems cannot be unified, resulting in more and more accounts and passwords that users need to remember. Single Sign-On (SSO) unified authentication has also emerged. However, although single sign-on can solve the problem of difficulty in remembering multiple accounts and passwords, the security factor of a single login method is difficult to guarantee, resulting in the login security of the application system being difficult to guarantee, and thus it is difficult to meet the security level requirements of users. Summary of the invention

[0003] In view of this, the present invention provides a login authentication method, device, electronic device and storage medium to solve the problem that a single login method is difficult to ensure the login security of an application system.

[0004] In a first aspect, the present invention provides a login authentication method, comprising: obtaining a login authentication link for accessing an application system, the login authentication link comprising multiple authentication methods, the multiple authentication methods being connected in series in a preset order; in response to a login operation generated by using multiple authentication methods, determining a login process link of an application process based on the login operation; if the login process link is consistent with the login authentication link, determining that the application system login is successful.

[0005] The login authentication method provided by the present invention obtains a login authentication link, in which a plurality of authentication methods are arranged in series in a preset order. When a user accesses an application system, the user can perform login authentication according to the plurality of authentication methods, and generate a corresponding login process link. Only when the login process link is consistent with the login authentication link can the application system be successfully logged in. Thus, the application system can be logged in by combining a plurality of authentication methods, which greatly improves the login security of the application system.

[0006] In an optional embodiment, a login authentication link for accessing an application system is obtained, including: displaying a login authentication configuration interface, the login authentication configuration interface including an authentication method display area and an authentication configuration area, the authentication method display area including a plurality of authentication methods; in response to a selection operation for an authentication method, moving the authentication method from the authentication method display area to the authentication configuration area based on the selection operation; in response to a node connection operation generated in the authentication configuration area, connecting each authentication method in series based on the node connection operation to generate a login authentication link.

[0007] The login authentication method provided by the present invention supports the configuration of a login authentication link, thereby being able to customize combinations of multiple authentication methods in the login authentication link, thereby meeting the login habits of different users, improving the privacy and security of user accounts, and at the same time being able to adapt to the security level requirements of different users for the application system, thereby improving the diversity of authentication.

[0008] In an optional implementation, the method further includes: obtaining node fingerprints corresponding to each authentication method in the login authentication link; and generating a first process fingerprint list corresponding to the login authentication link based on the node fingerprints according to a preset process fingerprint generation rule.

[0009] In the login authentication method provided by the present invention, each authentication method has a corresponding node fingerprint, and the node fingerprint and process fingerprint generation rules are used to determine the process fingerprint list corresponding to the login authentication link, so as to ensure that different login authentication links have different process fingerprint lists, which is beneficial to improving the authentication security.

[0010] In an optional embodiment, in response to login operations generated by using multiple authentication methods, a login process link of an application process is determined based on the login operations, including: in response to a login operation generated for any one of the multiple authentication methods, a login authentication result of the target authentication method is determined; if the login authentication result indicates that the authentication is successful, detecting whether the target authentication method is the last authentication method; if the target authentication method is the last authentication method, constructing a login process link from the start node to the end node.

[0011] In the login authentication method provided by the present invention, when the login authentication result corresponding to the current target authentication method indicates that the authentication is successful, if the target authentication method is the last authentication method, it means that the login process for the application system has been completed, and at this time, a login process link from the start node to the end node can be constructed. In this way, the intelligent generation of the login process link is realized, which facilitates the rapid verification of the consistency of the login process link and the login authentication link, thereby realizing the accuracy determination of the login process link.

[0012] In an optional embodiment, the method further includes: if the login authentication result indicates an authentication failure, recording the number of authentication failures; if the number of authentication failures is greater than a preset reset error number, redirecting to the initial login page of the application system.

[0013] The login authentication method provided by the present invention compares the number of authentication failures with the preset reset error number. When the number of authentication failures is greater than the preset reset error number, the method redirects to the initial login page of the application system, thereby preventing the login link of the application system from being maliciously cracked and reducing the possibility of malicious login to the application system.

[0014] In an optional embodiment, the method also includes: if it is the first time to log in to the application system, when the login authentication result indicates that the authentication is successful, displaying a login process prompt interface; in response to a login confirmation operation generated in the login process prompt interface, determining the login process completion result corresponding to the application system based on the login confirmation operation.

[0015] The login authentication method provided by the present invention transfers the login authentication process of the application system to a user-defined login process mode when logging into the application system for the first time, and the user chooses whether the authentication is completed after each authentication node completes the authentication. Compared with the existing method that automatically determines whether to end the login process after the user passes a certain authentication process, the user is given the right to choose whether the login process is completed, thereby being able to use the customized combined authentication method as a kind of "password" of the application system, greatly improving the difficulty of cracking the authentication of the application system.

[0016] In an optional implementation, detecting whether the login process link is consistent with the login authentication link includes: obtaining a second process fingerprint list corresponding to the login process link; matching the second process fingerprint list with the first process fingerprint list corresponding to the login authentication link to obtain a process fingerprint matching result; if the process fingerprint matching result indicates that the second process fingerprint list matches the first process fingerprint list, then determining that the login process link is consistent with the login authentication link.

[0017] The login authentication method provided by the present invention calculates the second process fingerprint list of the login process link when the user confirms the completion of the login process, and determines whether the second process fingerprint list matches the first process fingerprint list, so as to quickly verify the correctness of the login process link, thereby ensuring the rigor and correctness of the local authentication and global authentication processes.

[0018] In a second aspect, the present invention provides a login authentication device, comprising: an acquisition module, used to acquire a login authentication link for accessing an application system, the login authentication link comprising multiple authentication methods, and the multiple authentication methods are connected in series in a preset order; a login module, used to respond to login operations generated by using multiple authentication methods, and determine a login process link of an application process based on the login operation; an authentication module, used to determine that the application system login is successful if the login process link is consistent with the login authentication link.

[0019] In a third aspect, the present invention provides an electronic device comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the login authentication method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0020] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the login authentication method of the first aspect or any corresponding embodiment thereof.

[0021] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions, wherein the computer instructions are used to enable a computer to execute the login authentication method of the first aspect or any corresponding embodiment thereof.

[0022] It should be noted that the beneficial effects of the login authentication device, electronic device, computer-readable storage medium and computer program product can be found in the relevant description of the login authentication method, which will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the related technologies, the drawings required for use in the specific embodiments or the related technical descriptions will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 is a flowchart of a login authentication method according to an embodiment of the present invention;

[0025] Figure 2 is a schematic diagram comparing a login process link and a login authentication link according to an embodiment of the present invention;

[0026] Figure 3 is a flow chart of another login authentication method according to an embodiment of the present invention;

[0027] Figure 4 is a schematic diagram of the configuration of a login authentication link according to an embodiment of the present invention;

[0028] Figure 5 is a flowchart of another login authentication method according to an embodiment of the present invention;

[0029] Figure 6 is a schematic diagram of a specific flow chart of a login authentication method according to an embodiment of the present invention;

[0030] Figure 7 is a structural block diagram of a login authentication device according to an embodiment of the present invention;

[0031] Figure 8 It is a schematic diagram of the hardware structure of the electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0033] With the rapid development of Internet technology, more and more application systems are used by users. In particular, there are many types of systems used in enterprises, and the account systems of various systems cannot be unified, which leads to more and more accounts and passwords that users need to remember. Single Sign On (SSO) unified authentication has also emerged. Among them, Oauth2.0 is the most common single sign-on authentication protocol. This protocol can centrally manage authorization, and the client application system connected does not have access to the user's password, which makes it safer for users to use and easier to implement.

[0034] The most common login methods are account and password login, mobile phone code scanning login, SMS verification code login, or two-factor login of account and password and SMS verification code. Although single sign-on solves the problem of difficulty in remembering multiple accounts and passwords, the current login methods still cause the following problems:

[0035] 1) Common single login methods have low security factors. Password login is prone to account theft due to password leakage, and mobile phone code scanning login and SMS verification code login are also prone to theft due to loss;

[0036] 2) Fixed login methods cannot meet the security needs of different users. Some users have higher security needs, which cannot be improved by using only common login methods;

[0037] 3) Although multiple single authentication methods improve the convenience of login, they also increase the possibility of being cracked.

[0038] The above problems have caused certain negative impacts on the security of authentication. In view of this, the technical solution of the present invention performs login authentication of the application system based on a customized combined authentication method, which can not only meet the login habits of different users, but also adapt to the security level requirements of different users, greatly improving the diversity, privacy, security, complexity and cracking difficulty of authentication.

[0039] According to an embodiment of the present invention, a login authentication method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0040] In this embodiment, a login authentication method is provided, which can be used in electronic devices such as mobile phones, tablet computers, computers, etc. Figure 1 is a flow chart of a login authentication method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0041] Step S101, obtaining a login authentication link for accessing an application system, wherein the login authentication link includes multiple authentication methods, and the multiple authentication methods are connected in series in a preset order.

[0042] The authentication method is the login method required by the user to access the application system, such as account password, verification code (such as SMS verification code, email verification code, dynamic verification code, etc.), scan code login, face recognition, etc. The preset order is the connection order of multiple authentication methods that are preset. The login authentication link is composed of multiple authentication methods connected in series according to the preset order, and there can be multiple login authentication links for accessing the application system. Figure 2 As shown, the login authentication link for accessing the application system can be generated by connecting the three authentication methods of account password, SMS verification code, and scanning code login in series; it can also be generated by connecting the three authentication methods of account password, SMS verification code, and face recognition in series.

[0043] Specifically, the login authentication link is customized by the user according to the actual login requirements. The user can configure the login authentication link through the visual interactive panel provided by the process engine, store it in the database corresponding to the application system, and bind it to the user account that logs into the application system to implement a user-specific authentication process. When the login to the application system is triggered, the user account that triggers the application system login can be obtained, and the login authentication link bound to the user account can be retrieved from the database.

[0044] Step S102, in response to login operations generated by using multiple authentication methods, determining a login process link of an application process based on the login operations.

[0045] The login operation is the operation of the user using the current authentication method to log in to the application system. Only when the authentication is successful can the next authentication method be used to continue the login authentication. The login process link is generated during the actual login process of the user. Specifically, starting from the first authentication method, a login chain is generated. Each time an authentication method is selected and passed, a login process node is added to the login chain. When the user determines that the login is completed, the login process nodes passed from the first authentication method to the last authentication method constitute the login process link.

[0046] Step S103: If the login process link is consistent with the login authentication link, it is determined that the application system login is successful.

[0047] Compare the connection order of each authentication method in the login process link with the connection order of each authentication method in the login authentication link to determine whether the authentication method and the connection order of the authentication methods of the login process link and the login authentication link are consistent. If the authentication method and the connection order of the authentication methods of the login process link and the login authentication link are consistent, it indicates that the login process link is consistent with the login authentication link. At this point, it can be determined that the authentication is passed, that is, the application system login is successful.

[0048] The login authentication method provided in this embodiment obtains a login authentication link, in which multiple authentication methods are connected in series in a preset order. When a user accesses an application system, he can perform login authentication according to multiple authentication methods and generate a corresponding login process link. Only when the login process link is consistent with the login authentication link can the application system be successfully logged in. Therefore, the application system can be logged in by combining multiple authentication methods, which greatly improves the login security of the application system.

[0049] In this embodiment, a login authentication method is provided, which can be used in electronic devices such as mobile phones, tablet computers, computers, etc. Figure 3 is a flow chart of a login authentication method according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0050] Step S201, obtaining a login authentication link for accessing the application system, the login authentication link including multiple authentication methods, and the multiple authentication methods are connected in series in a preset order.

[0051] Specifically, the above step S201 includes:

[0052] Step S2011, display the login authentication configuration interface.

[0053] The login authentication configuration interface includes an authentication method display area and an authentication configuration area. The authentication method display area includes multiple authentication methods.

[0054] The login authentication configuration interface is a visual configuration interface provided by the process engine. Specifically, Figure 4 As shown in the figure, when a custom combination authentication is required for the application system, the configuration control in the visual interactive panel provided by the process engine can be triggered, such as "Set custom authentication mode", to enter the login authentication configuration interface, which includes an authentication method display area and an authentication configuration area. In the authentication method display area, a list of authentication methods consisting of multiple authentication methods is set, such as account password, code scanning login, face recognition, email verification code, SMS verification code, and TOTP dynamic verification code. The authentication configuration area is used to support users to provide configurations for multiple authentication methods.

[0055] Step S2012, in response to a selection operation on an authentication method, moving the authentication method from the authentication method display area to the authentication configuration area based on the selection operation.

[0056] The user selects the desired authentication method from the authentication method display area, and drags the selected multiple authentication methods as authentication nodes to the authentication configuration area by visual dragging. Accordingly, the login authentication configuration interface can respond to the user's selection operation on the authentication method display area and determine the authentication method selected by the user; further, it can also respond to the user's dragging operation on the authentication method to move the selected authentication method to the authentication configuration area according to the dragging operation.

[0057] Step S2013, in response to the node connection operation generated in the authentication configuration area, each authentication method is connected in series based on the node connection operation to generate a login authentication link.

[0058] The node connection operation is an operation to connect various authentication methods in a preset order. Specifically, each authentication method is used as each authentication node, and the user configures the connection order of each authentication node, and connects each authentication node in series between the start node and the end node through a connection line (such as an arrow) to generate a corresponding login authentication link.

[0059] In some optional implementations, when configuring the login authentication link, multiple parallel login authentication links may be configured, such as Figure 2 When logging into the application system, as long as the authentication sequence of one of the login authentication links is met, the final authentication of the application system can be passed to successfully log into the application system.

[0060] In some optional implementations, the above method further includes:

[0061] Step a1, obtaining the node fingerprint corresponding to each authentication method in the login authentication link.

[0062] Step a2: Generate a first process fingerprint list corresponding to the login authentication link based on the node fingerprint according to the preset process fingerprint generation rule.

[0063] The node fingerprint is a unique identifier for each authentication method, that is, each authentication method has a corresponding unique identifier to quickly identify each authentication method. For each accessed authentication method, a randomly generated node fingerprint is assigned to each authentication method as the source data for the subsequent calculation process fingerprint.

[0064] The first process fingerprint list is a list constructed by the process fingerprints of each authentication node in the login authentication link. Specifically, when the login authentication link is generated according to each authentication method, a corresponding process fingerprint is generated for each authentication node according to the preset process fingerprint generation rule, and then the first process fingerprint list corresponding to the login authentication link is obtained.

[0065] The process fingerprint refers to a string calculated from the starting point to the authentication node according to a certain rule. Since there may be multiple login authentication links, each authentication node in each login authentication link corresponds to a process fingerprint, and each login authentication link corresponds to a process fingerprint list, where the process fingerprint of the starting node is the node fingerprint. Taking the summary algorithm rule as an example, the generation rule of the process fingerprint is: the process fingerprint of the authentication node corresponding to the current authentication method is the process fingerprint of the authentication node corresponding to the previous authentication method followed by the node fingerprint of the current authentication node as a string to be encrypted, and the SHA256 summary algorithm is used to quickly generate a summary string, which is a process fingerprint of the current authentication node, and add it to the process fingerprint list. Specifically, the generation rules of the process fingerprint are as follows:

[0066] f(x) = SHA256(f(x-1) + n(x))

[0067] Among them, x represents the current node; f(x) represents the process fingerprint of the authentication node x corresponding to the current authentication method; f(x-1) represents the process fingerprint of the authentication node corresponding to the previous authentication method; n(x) represents the node fingerprint of the authentication node x corresponding to the current authentication method, and n(x-1) represents the node fingerprint of the authentication node corresponding to the previous authentication method; f(0) represents the process fingerprint of the starting node; n(0) represents the node fingerprint of the starting node; f(0)=n(0); the "+" sign indicates that the previous and subsequent strings are connected end to end; SHA256 indicates that the SHA256 digest algorithm is used for calculation.

[0068] Each authentication method has a corresponding node fingerprint. The node fingerprint and process fingerprint generation rules are used to determine the process fingerprint list corresponding to the login authentication link, ensuring that different login authentication links have different process fingerprint lists, which is conducive to improving authentication security.

[0069] Step S202, in response to the login operation generated by using multiple authentication methods, determine the login process link of the application process based on the login operation. For details, please refer to the relevant description of the corresponding steps in the above embodiment, which will not be repeated here.

[0070] Step S203: If the login process link is consistent with the login authentication link, it is determined that the application system login is successful. Please refer to the relevant description of the corresponding steps in the above embodiment for details, which will not be repeated here.

[0071] The login authentication method provided in this embodiment supports the configuration of a login authentication link, thereby enabling customized combinations of multiple authentication methods in the login authentication link to meet the login habits of different users, thereby improving the privacy and security of user accounts, and at the same time being able to adapt to the security level requirements of different users for the application system, thereby improving the diversity of authentication.

[0072] In this embodiment, a login authentication method is provided, which can be used in electronic devices such as mobile phones, tablet computers, computers, etc. Figure 5 is a flow chart of a login authentication method according to an embodiment of the present invention. Figure 5 As shown, the process includes the following steps:

[0073] Step S301, obtaining a login authentication link for accessing the application system, the login authentication link includes multiple authentication methods, and the multiple authentication methods are connected in series in a preset order. For details, please refer to the relevant description of the corresponding steps in the above embodiment, which will not be repeated here.

[0074] Step S302, in response to login operations generated by using multiple authentication methods, determining a login process link of an application process based on the login operations.

[0075] Specifically, the above step S302 includes:

[0076] Step S3021, in response to a login operation generated for any target authentication method among the multiple authentication methods, determining a login authentication result of the target authentication method.

[0077] The target authentication method is the authentication method currently performing the authentication operation, and the target authentication method is any one of the multiple authentication methods required to log in to the application system. The login authentication result is used to indicate whether the target authentication method is successfully authenticated.

[0078] When the target authentication method is used to log in to the application system, the electronic device can respond to the login operation initiated by the user for the target authentication method and generate the corresponding login authentication result according to the login operation. For example, if the target authentication method is a text message verification code, the text message verification code is used for login, and the login authentication result corresponding to the text message verification code is generated by verifying whether the text message verification code is correct.

[0079] Step S3022: If the login authentication result indicates that the authentication is successful, then it is detected whether the target authentication method is the last authentication method.

[0080] If the login authentication result indicates that the authentication is successful, it is possible to further detect whether the target authentication method is the last layer of authentication for logging into the application system, that is, determine whether the target authentication method is the last authentication method.

[0081] Step S3023: If the target authentication method is the last authentication method, a login process link from the start node to the end node is constructed.

[0082] If the target authentication method is the last authentication method, it means that the authentication of the application system has reached the last layer. At this time, all authentication methods that have completed authentication are traversed, and all authentication methods between the start node and the end node are connected according to the authentication order of each authentication method to generate a login process link.

[0083] In some optional implementations, the above method further includes:

[0084] Step b1: If the login authentication result indicates that the authentication has failed, the number of authentication failures is recorded.

[0085] Step b2: If the number of authentication failures is greater than the preset number of reset errors, redirect to the initial login page of the application system.

[0086] The preset number of reset errors is a preset number of authentication reset errors, and the preset number of reset errors can be set through a visual interactive panel provided by the process engine.

[0087] If the current login authentication result indicates an authentication failure, the number of authentication failures is accumulated to obtain the number of authentication failures. The number of authentication failures is compared with the preset number of reset errors to determine whether the number of authentication failures is greater than the preset number of reset errors. If the number of authentication failures is greater than the preset number of reset errors, it means that re-authentication is required, and you can redirect to the initial login page of the application system. If the number of authentication failures is less than the preset number of reset errors, restart the authentication operation for the target authentication method.

[0088] By comparing the number of authentication failures with the preset reset error number, when the number of authentication failures is greater than the preset reset error number, redirecting to the initial login page of the application system can prevent the login link of the application system from being maliciously cracked, thereby reducing the possibility of malicious login to the application system.

[0089] In some optional implementations, the above method further includes:

[0090] Step c1: If it is the first time to log in to the application system, when the login authentication result indicates that the authentication is successful, a login process prompt interface is displayed.

[0091] Step c2, in response to the login confirmation operation generated in the login process prompt interface, determining the login process completion result corresponding to the application system based on the login confirmation operation.

[0092] If the user logs in to the application system for the first time after completing the authentication method configuration, when completing any authentication method, a login process prompt interface will pop up on the login interface of the application system. The login process prompt interface displays a completion control (such as "Complete Login") to indicate whether the login process is completed and a selection control (such as "Select Authentication Method") to select the next authentication method.

[0093] If the user is sure that the login process has been completed, he can click the completion control displayed in the login process prompt interface. Accordingly, the login process prompt interface can respond to the login confirmation operation generated by the user for the completion control, and determine whether the login process corresponding to the application system is completed through the login confirmation operation, and obtain the corresponding login process completion result.

[0094] If the user is sure that the login process has not been completed, he can click the selection control displayed in the login process prompt interface. Accordingly, the login process prompt interface can respond to the authentication method selection operation generated by the user for the selection control, select the next authentication method through the authentication method selection operation, and enter the authentication interface of the next authentication method for login authentication until the last authentication method is reached.

[0095] If the user is not logging into the application system for the first time after completing the authentication method configuration, the application system can display each authentication method in sequence according to the pre-configured login authentication link to indicate the login process of the application system, so that the user can log in according to the login process. For example, the multiple authentication methods of the login authentication link are: account password, SMS verification code, and face recognition. Then, when the account password authentication is successful, the SMS verification code authentication interface is automatically entered; when the SMS verification code authentication is successful, the face recognition authentication interface is automatically entered, thereby realizing the authentication of each authentication method in sequence.

[0096] When logging into the application system for the first time, the login authentication process of the application system is transferred to the user-defined login process mode. After each authentication node completes the authentication, the user can choose whether to complete the authentication. Compared with the existing automatic judgment of whether to end the login process after the user passes a certain authentication process, the choice of whether to complete the login process is given to the user, so that the customized combined authentication method can be used as a kind of "password" of the application system, which greatly increases the difficulty of cracking the authentication of the application system.

[0097] Step S303: If the login process link is consistent with the login authentication link, it is determined that the application system login is successful. Please refer to the relevant description of the corresponding steps in the above embodiment for details, which will not be repeated here.

[0098] In some optional implementations, detecting whether the login process link is consistent with the login authentication link includes:

[0099] Step d1, obtaining a second process fingerprint list corresponding to the login process link.

[0100] The second process fingerprint list is composed of the process fingerprints of the authentication nodes corresponding to each authentication method in the login process link. Specifically, in the process of logging into the application system, the login process chain data of each authentication of different users is stored through the distributed cache. When the user completes the authentication of the first authentication method, a new login process chain is created in the cache component. After that, each time an authentication method is completed and the authentication is successful, an authentication node is added to the authentication method, and the new authentication node is added to the end of the login process chain and stored in the cache, which improves the access efficiency of the login process chain. At the same time, the node fingerprint corresponding to the authentication node is obtained, and the corresponding process fingerprint is calculated using the node fingerprint of the authentication node. The process fingerprints corresponding to each authentication node are used to generate the corresponding second process fingerprint list.

[0101] Step d2, matching the second process fingerprint list with the first process fingerprint list corresponding to the login authentication link to obtain a process fingerprint matching result.

[0102] Step d3: If the process fingerprint matching result indicates that the second process fingerprint list matches the first process fingerprint list, it is determined that the login process link is consistent with the login authentication link.

[0103] Extract the process fingerprints in the second process fingerprint list corresponding to the login process link and the process fingerprints in the first process fingerprint list corresponding to the login authentication link respectively, and then compare and match the process fingerprints extracted from the second process fingerprint list with the process fingerprints extracted from the first process fingerprint list to obtain the process fingerprint matching result. If the process fingerprint matching result indicates that the process fingerprints in the second process fingerprint list are the same as those in the first process fingerprint list, it can be determined that the login process link and the login authentication link are consistent.

[0104] When the user confirms that the login process is completed, the second process fingerprint list of the login process link is calculated to determine whether the second process fingerprint list matches the first process fingerprint list, so as to quickly verify the correctness of the login process link, thereby ensuring the rigor and correctness of the local authentication and global authentication processes.

[0105] In the login authentication method provided in this embodiment, when the login authentication result corresponding to the current target authentication method indicates that the authentication is successful, if the target authentication method is the last authentication method, it means that the login process for the application system has been completed, and at this time, a login process link from the start node to the end node can be constructed. This realizes the intelligent generation of the login process link, facilitates the rapid verification of the consistency of the login process link and the login authentication link, and thus realizes the accuracy determination of the login process link.

[0106] As a specific application example of the embodiment of the present invention, the above login authentication method is described here in combination with a specific application scenario. Figure 6 As shown in the figure, after completing the configuration of the login authentication link, the authentication process for users to log in to the application system is as follows:

[0107] (1) The user accesses the initial login page of the application system.

[0108] (2) Confirm the currently selected authentication method and start the authentication operation.

[0109] (3) If the authentication method is successfully authenticated, proceed to step (4); if the authentication fails, the number of authentication errors is increased by 1, and it is determined whether the number of authentication failures is greater than the preset authentication reset number. If the number of authentication failures is greater than the preset authentication reset number, redirect to the initial login page of the application system and return to step 1 for re-authentication; if not, re-authenticate for the current authentication method.

[0110] (4) Check whether the login process is completed; if the login process is completed, proceed to step (5); if the login process is not completed, return to step (2) to perform the authentication operation of the next authentication method. It should be noted that when logging into the application system for the first time, a pop-up window will pop up on the login interface of the application system to prompt whether to complete the login process; if the login process is completed, proceed to step (5); if the login process is not completed, proceed to step (2) to select the authentication operation of the next authentication method.

[0111] (5) Determine whether the login process link satisfies any customized complete login authentication link from the start node to the end node. If so, proceed to step (6); otherwise, return to step (1) and redirect to the initial login page.

[0112] (6) After the authentication process is passed, log in to access the application system.

[0113] In the implementation process of logging into the application system, starting from the first authentication method, a login process chain is generated. Each time an authentication method is selected and passed, an authentication node is added to the login process, and the process fingerprint of the current authentication node is calculated. When the user determines to complete the login process, the process fingerprint of the final authentication node of the login process chain is calculated and quickly matched with the process fingerprint list of the user-defined login authentication chain to determine whether the current authentication process meets the user-defined process.

[0114] A comparison between the login authentication link and the login authentication link is shown in the figure below. Figure 2 As shown, if the login authentication link includes two links, one of them is: starting node, account password, SMS verification code, scan code login and end node, and the other is: starting node, account password, SMS verification code, face recognition and end node.

[0115] If the login process link is: starting node, account password, SMS verification code, scan code login, face recognition and end node, the authentication fails; if the login process link is: starting node, account password, SMS verification code and end node, the authentication fails.

[0116] If the login process link is: starting node, account password, SMS verification code, face recognition and end node, the authentication is successful; if the login process link is: starting node, account password, SMS verification code, scan code login and end node, the authentication is successful.

[0117] In this embodiment, a login authentication device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0118] This embodiment provides a login authentication device, such as Figure 7 As shown, including:

[0119] The acquisition module 401 is used to acquire a login authentication link for accessing the application system. The login authentication link includes multiple authentication methods, and the multiple authentication methods are connected in series in a preset order.

[0120] The login module 402 is used to respond to login operations generated by using multiple authentication methods and determine a login process link of the application process based on the login operations.

[0121] The authentication module 403 is used to determine that the application system login is successful if the login process link is consistent with the login authentication link.

[0122] In some optional implementations, the acquisition module 401 includes:

[0123] The configuration display unit is used to display the login authentication configuration interface, wherein the login authentication configuration interface includes an authentication method display area and an authentication configuration area, and the authentication method display area includes multiple authentication methods.

[0124] The authentication selection unit is used to respond to a selection operation on the authentication method and move the authentication method from the authentication method display area to the authentication configuration area based on the selection operation.

[0125] The node connection unit is used to respond to the node connection operation generated in the authentication configuration area, connect various authentication methods in series based on the node connection operation, and generate a login authentication link.

[0126] In some optional embodiments, the above device further includes:

[0127] The node fingerprint acquisition module is used to obtain the node fingerprint corresponding to each authentication method in the login authentication link.

[0128] The process fingerprint generation module is used to generate a first process fingerprint list corresponding to the login authentication link based on the node fingerprint according to the preset process fingerprint generation rule.

[0129] In some optional implementations, the login module 402 includes:

[0130] The login authentication unit is used to respond to a login operation generated for any target authentication method among the multiple authentication methods and determine a login authentication result of the target authentication method.

[0131] The detection unit is used to detect whether the target authentication method is the last authentication method if the login authentication result indicates that the authentication is successful.

[0132] The link construction unit is used to construct a login process link from a start node to an end node if the target authentication method is the last authentication method.

[0133] In some optional embodiments, the above device further includes:

[0134] The failure count determination module is used to record the number of authentication failures if the login authentication result indicates that the authentication has failed.

[0135] The redirection module is used to redirect to the initial login page of the application system if the number of authentication failures is greater than the preset reset error number.

[0136] In some optional embodiments, the above device further includes:

[0137] The prompt interface display unit is used to display a login process prompt interface when the login authentication result indicates that the authentication is successful if the user logs into the application system for the first time.

[0138] The login confirmation unit is used to respond to the login confirmation operation generated in the login process prompt interface and determine the login process completion result corresponding to the application system based on the login confirmation operation.

[0139] In some optional embodiments, the above device further includes:

[0140] The consistency detection module is used to detect whether the login process link is consistent with the login authentication link.

[0141] Specifically, the consistency detection module includes:

[0142] The process fingerprint acquisition unit is used to acquire a second process fingerprint list corresponding to the login process link.

[0143] The fingerprint matching unit is used to match the second process fingerprint list with the first process fingerprint list corresponding to the login authentication link to obtain a process fingerprint matching result.

[0144] The determination unit is configured to determine that the login process link is consistent with the login authentication link if the process fingerprint matching result indicates that the second process fingerprint list is the same as the first process fingerprint list.

[0145] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0146] The login authentication device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0147] The login authentication device provided by the present invention obtains a login authentication link, in which a plurality of authentication methods are arranged in series in a preset order. When a user accesses an application system, the user can perform login authentication according to the plurality of authentication methods, and generate a corresponding login process link. Only when the login process link is consistent with the login authentication link can the application system be successfully logged in. Thus, the application system can be logged in by combining a plurality of authentication methods, which greatly improves the login security of the application system.

[0148] The embodiment of the present invention also provides an electronic device having the above Figure 7 The login authentication device shown.

[0149] See also Figure 8 , Figure 8 is a schematic diagram of the structure of an electronic device provided by an optional embodiment of the present invention, such as Figure 8 As shown, the electronic device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the electronic device, including instructions stored in or on the memory to display graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple electronic devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 8A processor 10 is taken as an example.

[0150] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0151] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0152] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0153] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0154] The electronic device further includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 8 The example of connecting through bus is taken in the following.

[0155] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the electronic device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator rod, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0156] The electronic device also includes a communication interface, which is used for the electronic device to communicate with other devices or a communication network.

[0157] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0158] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0159] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A login authentication method, characterized in that: The method comprises: Obtaining a login authentication link for accessing the application system, wherein the login authentication link includes multiple authentication methods, and the multiple authentication methods are connected in series in a preset order; In response to login operations generated by using a plurality of the authentication methods, determining a login process link of the application process based on the login operations; If the login process link is consistent with the login authentication link, it is determined that the application system login is successful.

2. The method according to claim 1, characterized in that: The step of obtaining a login authentication link for accessing the application system includes: Displaying a login authentication configuration interface, the login authentication configuration interface includes an authentication mode display area and an authentication configuration area, the authentication mode display area includes multiple authentication modes; In response to a selection operation on the authentication method, moving the authentication method from the authentication method display area to the authentication configuration area based on the selection operation; In response to the node connection operation generated in the authentication configuration area, each of the authentication methods is connected in series based on the node connection operation to generate the login authentication link.

3. The method according to claim 1 or 2, characterized in that: Also includes: Obtaining node fingerprints corresponding to each of the authentication methods in the login authentication link; According to a preset process fingerprint generation rule, a first process fingerprint list corresponding to the login authentication link is generated based on the node fingerprint.

4. The method according to claim 1, characterized in that: The step of responding to the login operation generated by using the plurality of authentication methods and determining the login process link of the application process based on the login operation includes: In response to a login operation generated for any one of the multiple authentication methods, determining a login authentication result of the target authentication method; If the login authentication result indicates that the authentication is successful, detecting whether the target authentication method is the last authentication method; If the target authentication method is the last authentication method, a login process link from the start node to the end node is constructed.

5. The method according to claim 4, characterized in that Also includes: If the login authentication result indicates an authentication failure, the number of authentication failures is recorded; If the number of authentication failures is greater than the preset number of reset errors, redirect to the initial login page of the application system.

6. The method according to claim 4, characterized in that Also includes: If it is the first time to log in to the application system, when the login authentication result indicates that the authentication is successful, a login process prompt interface is displayed; In response to a login confirmation operation generated in the login process prompt interface, a login process completion result corresponding to the application system is determined based on the login confirmation operation.

7. The method according to claim 1, characterized in that Detecting whether the login process link is consistent with the login authentication link includes: Obtain a second process fingerprint list corresponding to the login process link; Matching the second process fingerprint list with the first process fingerprint list corresponding to the login authentication link to obtain a process fingerprint matching result; If the process fingerprint matching result indicates that the second process fingerprint list matches the first process fingerprint list, it is determined that the login process link is consistent with the login authentication link.

8. A login authentication device, characterized in that: The device comprises: An acquisition module, used to acquire a login authentication link for accessing the application system, wherein the login authentication link includes multiple authentication methods, and the multiple authentication methods are connected in series in a preset order; A login module, configured to respond to login operations generated by using a plurality of the authentication methods and determine a login process link of the application process based on the login operations; The authentication module is used to determine that the login to the application system is successful if the login process link is consistent with the login authentication link.

9. An electronic device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the login authentication method according to any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the login authentication method according to any one of claims 1 to 7.

Images