Login verification method and electronic device

Abstract

The application discloses a login verification method and an electronic device, and relates to the technical field of login verification, and comprises the following steps: in response to receiving a verification data packet sent by a server, generating a verification interaction interface comprising at least a first object and a second object, setting the position of the first object according to a first position parameter, and setting the position of the second object according to a second position parameter; in response to obtaining an interaction start operation of a user on the first object, recording the operation information of the user on the first object; in response to obtaining an interaction end operation of the user on the first object, generating a first motion track of the first object, and determining a corresponding first landing point position; and sending an interaction data packet comprising at least the first landing point position to the server, so that the server performs verification determination. The application can integrate real physical motion modeling and client interaction behavior analysis, improve the verification protection capability, and overcome the problem of insufficient protection capability in the face of verification attacks in the prior art.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of login verification, and in particular to a login verification method and an electronic device. BACKGROUND

[0002] With the increasing requirements of information systems, mobile applications and Web platforms on user identity verification, various types of verification code technologies are widely used to prevent malicious login and automated attacks. Existing user verification methods mainly include character recognition verification, image selection verification, SMS or email verification and sliding puzzle dynamic interactive verification. Although these verification methods have achieved certain results in improving user experience and blocking simple script attacks, their security is being severely challenged in the face of increasingly complex counter-attack technologies.

[0003] Under the background of the rapid development of generative artificial intelligence (AIGC) and deepfake technology, attack methods based on image recognition and trajectory reproduction are constantly evolving. On the one hand, static verification methods such as character recognition verification and image selection verification can achieve very high cracking rates. On the other hand, although sliding puzzle verification introduces behavior trajectory analysis, fixed simple paths are also vulnerable to trajectory reproduction technology. In addition, the SMS and email verification methods also face the problems of high delay and privacy leakage risks. SUMMARY

[0004] The present application provides a login verification method and an electronic device that can integrate real physical motion modeling and client interaction behavior analysis to improve the protection capability of verification, thereby effectively preventing malicious login and automated attacks and ensuring system security, to at least solve the problems of insufficient resistance, high delay and privacy leakage risks in the related art in the face of existing verification attack technologies such as image recognition and trajectory reproduction.

[0005] In one aspect, the present application provides a login verification method applied to a client, comprising:

[0006] In response to the client receiving a verification data packet sent by a server, the client parses the verification data packet to obtain a verification interaction interface generation parameter, an object ejection motion model, a first position parameter and a second position parameter;

[0007] According to the verification interaction interface generation parameter, a verification interaction interface including at least a first object and a second object is generated, and the position of the first object is set according to the first position parameter and the position of the second object is set according to the second position parameter;

[0008] In response to obtaining a user interaction start operation on the first object, the operation information of the user on the first object is recorded and the display position of the first object is updated;

[0009] In response to obtaining the end operation of the user interaction with the first object, a first motion trajectory of the first object is generated based on an object ejection motion model, operation information, and a current position of the first object, and a corresponding first landing point position is determined;

[0010] An interaction data packet including at least the first landing point position is sent to the server for verification determination.

[0011] In another aspect, the present application provides a login verification method applied to a server, comprising:

[0012] In response to the server receiving a verification request sent by the client, a verification interaction interface matched with the client is selected, and a first position parameter and a second position parameter are generated to control the positions of a first object and a second object on the verification interaction interface, respectively;

[0013] An object ejection motion model is set, and combined with the verification interaction interface generation parameters, the first position parameter and the second position parameter, a verification data packet is generated and sent to the client;

[0014] In response to receiving the interaction data packet fed back by the client, the interaction data packet is parsed to obtain a first landing point position of the first object;

[0015] A deviation distance between the first landing point position and the position of the second object is calculated, and the deviation distance is compared with a deviation threshold value;

[0016] In response to the deviation distance being less than or equal to the deviation threshold value, it is determined that the verification is passed, and a verification pass data packet is sent to the client;

[0017] In response to the deviation distance being greater than the deviation threshold value, it is determined that the verification is not passed, an object position reset parameter is generated, encapsulated into a verification failure data packet, and sent to the client.

[0018] In yet another aspect, the present application further provides an electronic device, comprising a memory for storing a computer program, and a processor for executing the computer program to implement the steps of any of the above login verification methods.

[0019] This application achieves a real-world physical motion simulation in the user verification process by parsing the verification data packet on the client side and generating parameters, object launch motion model, and position parameters based on the verification interaction interface. It also combines the user's actual operation information with the object launch motion model to generate the motion trajectory and landing position. Compared to traditional static or fixed-path CAPTCHAs, this application provides a dynamic and physically based interaction method, making it difficult to automatically crack using image recognition or trajectory reproduction attacks, thus improving verification protection capabilities. Furthermore, compared to SMS and email verification, this application avoids high latency and user privacy leaks by performing real-time verification via the device network without requiring additional user information. Attached Figure Description

[0020] To more clearly illustrate the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This application provides an application environment for a login verification method in an embodiment of this application.

[0022] Figure 2 A flowchart of a login verification method applied to a client is provided as an embodiment of this application;

[0023] Figure 3 A flowchart of a login verification method applied to a server, provided as an embodiment of this application;

[0024] Figure 4 A login verification interaction flowchart is provided for an embodiment of this application;

[0025] Figure 5 A schematic diagram of a verification interaction interface provided in an embodiment of this application;

[0026] Figure 6 This application provides a schematic diagram of a login verification process.

[0027] Figure 7 This is a schematic diagram of an electronic device provided in an embodiment of this application. Detailed Implementation

[0028] With reference to the drawings and specific embodiments described below, the technical solutions in the embodiments of the present application will be clearly and completely described, obviously, the described embodiments are only part of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0029] It should be noted that in the description of the present application, the term "comprise", "include" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, article or equipment including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or includes elements inherent to such process, method, article or equipment. The terms "first", "second" and the like in the present application are used to distinguish similar objects, not to describe a specific order or sequence.

[0030] In order to enable those skilled in the art to better understand the present application, the present application will be further described in detail below with reference to the drawings and specific embodiments.

[0031] The login verification method provided by the present application can be applied to the application environment as shown in Figure 1 The client 102 communicates with the server 104 through the network, the user inputs the login information such as account and password in the client 102, when the information is correct, the client 102 sends a verification request to the server 104, the server 104 feeds back a verification data packet, the client 102 generates and displays a verification interaction interface, the user operates a first object on the verification interaction interface for verification, the client 102 records the final first landing position and sends it to the server 104, and based on the verification result fed back by the server 104, the user is logged in or the user is required to re-verify. The client 102 can be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices, and the server 104 can be implemented by an independent server or a server cluster composed of multiple servers.

[0032] As shown in Figure 2 The embodiment of the present application provides a login verification method, which is applied to the client 102 and includes the following steps.

[0033] Step 201, in response to receiving the verification data packet sent by the server, parsing the verification data packet to obtain a verification interaction interface generation parameter, an object ejection motion model, a first position parameter and a second position parameter;

[0034] In step 202, a verification interaction interface including at least a first object and a second object is generated according to the verification interaction interface generation parameter, and the position of the first object is set according to the first position parameter, and the position of the second object is set according to the second position parameter.

[0035] In step 203, in response to obtaining the interaction start operation of the user on the first object, the operation information of the user on the first object is recorded and the display position of the first object is updated.

[0036] In step 204, in response to obtaining the interaction end operation of the user on the first object, the first motion trajectory of the first object is generated based on the object ejection motion model, the operation information and the current position of the first object, and the corresponding first landing point position is determined.

[0037] In step 205, an interaction data packet including at least the first landing point position is sent to the server for the server to perform verification judgment.

[0038] Specifically, the application introduces real physical motion simulation into the user verification process by parsing the verification data packet on the client and generating the verification interaction interface based on the verification interaction interface generation parameter, the object ejection motion model and the position parameter, and generating the motion trajectory and the landing point position in combination with the actual operation information of the user and the object ejection motion model. Compared with the traditional static or fixed path verification code, a dynamic and physical law-based interaction mode is realized, which is difficult to be automatically cracked by image recognition or trajectory reproduction attack technology, and the verification protection capability is improved. In addition, compared with the SMS email verification, the application does not need to obtain additional information of the user, and performs real-time verification through the device network, avoiding the problems of delay and user privacy leakage.

[0039] In one embodiment, before the client receives the verification data packet sent by the server, it further includes:

[0040] According to the account information input by the user, a login data packet is generated and sent to the server, so that the server compares the account information with the user data stored in the database for consistency and feeds back the comparison result;

[0041] In response to receiving the comparison result fed back by the server as consistent, it is determined that the account information input by the user is correct, and a verification request is sent to the server to obtain the verification data packet;

[0042] In response to receiving the comparison result fed back by the server as inconsistent, it is determined that the account information input by the user is incorrect, and a login failure prompt is output.

[0043] Specifically, in this embodiment, by adding an account information consistency comparison step before receiving the verification data packet, obviously erroneous or non-existent accounts can be eliminated in advance during the first stage of identity verification, reducing the frequency of invalid verification interactions, thereby reducing the resource consumption of the server and client, and improving the overall login response speed.

[0044] In one embodiment, based on the object ejection motion model, operation information, and the current position of the first object, a first motion trajectory of the first object is generated, and the corresponding first landing point position is determined, including:

[0045] Based on the operation information, the initial velocity vector of the first object is calculated;

[0046] The initial velocity vector and the current position of the first object are input into the object ejection motion model. Based on the gravity acceleration and air resistance simulation parameters set in the object ejection motion model, the two-dimensional motion process of the first object is simulated to generate the first motion trajectory.

[0047] Determine the intersection point between the first motion trajectory and the horizon in the verification interface, and use the position of the intersection point as the first landing point position.

[0048] Specifically, in this embodiment, physical simulation parameters such as gravitational acceleration and air resistance are introduced when generating the first motion trajectory, making the motion trajectory of the object closer to the real physical motion process. This can prevent attackers from simply fitting a fixed trajectory model, significantly increase the difficulty of automated scripts simulating clicks / drags, and enhance security.

[0049] In one embodiment, the initial velocity vector of the first object is calculated based on the operation information, including:

[0050] Based on the first position parameter, determine the starting position coordinates of the first object and use them as the launch reference point;

[0051] Analyze the operation information to obtain the coordinates of the stretching endpoint and displacement duration of the first object;

[0052] Based on the coordinates of the launch reference point and the end point of the stretching, the stretching displacement and the direction of the displacement are calculated.

[0053] The opposite direction of displacement is taken as the initial direction of motion of the first object;

[0054] The initial velocity of the first object is calculated based on the amount of tensile displacement and the displacement duration.

[0055] The initial velocity vector is obtained by combining the initial direction of motion and the initial speed.

[0056] Specifically, in this embodiment, by extracting the coordinates of the stretching endpoint and the displacement duration from the user operation information, calculating the initial velocity vector, and taking the opposite direction of the displacement direction as the initial motion direction, it is possible to achieve fine-grained restoration of the mechanical characteristics of the user operation, further improving the randomness and personalization of the trajectory, making it difficult for attackers to reproduce the same trajectory under different devices and scenarios even if they capture the operation data.

[0057] In a preferred embodiment, the initial velocity of the first object is calculated based on the tensile displacement and the displacement duration, and the method further includes:

[0058] Based on an adaptive calculation method that combines device interaction precision and interface scaling parameters, a pixel length scaling factor is set, specifically expressed as:

[0059] ;

[0060] Where k represents the pixel length scaling factor, k0 represents the preset initial scaling factor, preferably ranging from 0.5 to 1.5 mm / px, more preferably 1.0 mm / px, and S ui To verify the parameters generated by the interactive interface, For device interaction accuracy, all data are obtained from the client by the server; f(·) is preferably a monotonically increasing function to allow low-precision devices to appropriately amplify the displacement mapping.

[0061] Multiply the stretch displacement by the set pixel length ratio factor to convert the pixel-level stretch displacement of the first object on the verification interface into the physical displacement in the object's catapult motion model, obtain the converted stretch displacement, and calculate the initial velocity.

[0062] Specifically, this embodiment introduces a pixel length scaling factor during the initial speed calculation process and employs an adaptive calculation method that combines device interaction precision and interface scaling parameters. This ensures that devices with different resolutions and scaling ratios maintain consistent initial speeds under the same gesture operation, significantly improving the consistency and fairness of cross-device interaction experience. Simultaneously, the preferred range of the scaling factor is 0.5–1.5 mm / px, and by using a monotonically increasing function to perform displacement mapping amplification compensation for low-precision devices, it effectively reduces speed attenuation caused by insufficient touch precision, thereby improving the accuracy of interaction verification and the controllability of user operations. Furthermore, this embodiment has good scalability, adapting to different screen sizes, resolutions, and interface layouts, avoiding the instability issues caused by a fixed scaling factor in multi-terminal environments.

[0063] It is worth noting that, in a preferred embodiment, the object's ejection motion model is a parabolic motion model, the verification interface is a two-dimensional planar coordinate system, with the horizontal direction as the x-axis and the vertical direction as the y-axis. Let the gravitational acceleration be g and the air resistance be α (α=0 when there is no air resistance). The first motion trajectory can be represented as:

[0064] ;

[0065] Among them, (x s ,y s ) represents the coordinates of the stretch endpoint of the first object, v 0x The x-component of the initial velocity vector is represented by the initial velocity vector multiplied by the cosine of the displacement direction, v. 0y The initial velocity vector is represented by its component along the y-axis, which is the initial velocity vector multiplied by the sine of the displacement direction. t represents the motion time of the first object.

[0066] The first trajectory can also be represented in the form y(x), as follows:

[0067] ;

[0068] Where x represents the horizontal displacement of the first object in the verification interface, and y represents the vertical displacement of the first object. Both are calculated with the stretching endpoint coordinates of the first object as the reference point, and the interface coordinates are converted into physical coordinates through the pixel length scaling factor.

[0069] like Figure 3 As shown, embodiments of this application also provide a login verification method, applied to server 104, including:

[0070] Step 301: In response to receiving a verification request sent by the client, select a verification interaction interface that matches the client, and generate a first position parameter and a second position parameter to control the position of the first object and the position of the second object on the verification interaction interface, respectively.

[0071] Step 302: Set the object ejection motion model, and generate a verification data packet by combining the parameters generated by the verification interaction interface, the first position parameter and the second position parameter, and send it to the client.

[0072] Step 303: In response to receiving the interaction data packet from the client, the interaction data packet is parsed to obtain the first landing point position of the first object;

[0073] Step 304: Calculate the deviation distance between the first landing point position and the second object position, and compare the deviation distance with the deviation threshold;

[0074] Step 305: In response to the deviation distance being less than or equal to the deviation threshold, the verification is deemed successful, and a verification success data packet is sent to the client.

[0075] Step 306: In response to the deviation distance being greater than the deviation threshold, the verification is determined to be unsuccessful, and object position reset parameters are generated, encapsulated into a verification failure data packet, and sent to the client.

[0076] Specifically, this application introduces the object's catapult motion model and position parameters when the server generates the verification data packet, and determines the result by comparing the deviation distance with a threshold after receiving the landing position from the client. This enables the server to uniformly control and verify the physical simulation trajectory, preventing the client from unilaterally forging verification results. At the same time, it can issue a reset parameter in case of failure, supports multiple rounds of defense and dynamic difficulty adjustment, and improves the security and availability of verification protection.

[0077] In one embodiment, selecting a verification interaction interface that matches the client includes:

[0078] Parse the verification request to obtain the client's device type information and interface display parameters;

[0079] Based on the device type information, select the interface that matches the client from the preset verification interaction interface templates as the verification interaction interface, and generate the corresponding verification interaction interface generation parameters according to the interface display parameters.

[0080] Specifically, in this embodiment, the verification interaction interface template is matched by parsing the client device type information and interface display parameters. This can optimize the interaction interface for different devices, such as PCs and mobile devices, and improve the smoothness and adaptability of operation. At the same time, it can prevent the verification difficulty from being unbalanced due to differences in device resolution or interaction, thereby enhancing the user experience.

[0081] In one embodiment, generating a first position parameter and a second position parameter to control the positions of a first object and a second object on the verification interface, respectively, includes:

[0082] Based on the verification interface, determine the interactive areas;

[0083] Multiple candidate initial position coordinates are randomly selected within the interactive area, and a safe initial position with a distance greater than or equal to the interface boundary of the verification interactive interface is randomly selected as the position of the first object and the first position parameter is generated.

[0084] Parse the verification request to obtain the client's interaction characteristic parameters;

[0085] Based on the first position parameters and interaction characteristic parameters, the hit area of ​​the first object is calculated through the object ejection motion model;

[0086] In the hitable area, a safe target location whose distance from the interface boundary of the verification interaction interface is greater than or equal to the second safe distance threshold is randomly selected as the location of the second object and the second location parameter is generated.

[0087] Specifically, in this embodiment, a safe distance threshold and dynamic calculation of the hit area are introduced during the generation of the first object position and the second object position. This ensures the completeness of the interaction and avoids misoperation caused by the object position being close to the interface boundary. At the same time, by combining the interaction characteristic parameters to randomize the position, attackers are prevented from predicting the target position, thus improving the randomness of the protection.

[0088] In one embodiment, before calculating the deviation distance between the first landing point position and the position of the second object, and comparing the deviation distance with a deviation threshold, the method further includes:

[0089] Obtain the precision of the client's device interaction;

[0090] Based on the device interaction accuracy and the parameters generated by the verification interface, set the deviation threshold, where the deviation threshold is preferably set to 50 pixels.

[0091] Specifically, in this embodiment, a deviation threshold is dynamically set based on the interaction accuracy of the client device before judging the verification result. This can automatically adjust the verification error tolerance range according to the differences in device input accuracy, such as touch screen and mouse, which not only ensures security but also avoids misjudgment due to an excessively small threshold, thereby improving the cross-device verification success rate.

[0092] In a preferred embodiment, after setting a deviation threshold based on the device interaction accuracy and the parameters generated by the verification interface, the method further includes:

[0093] In response to the server determining that the user's current verification has failed and receiving a re-verification request from the client, the system queries the user's cumulative number of verification failures within a preset period.

[0094] If the cumulative number of verification failures is less than or equal to the cumulative failure limit, a tolerance threshold is generated based on the cumulative number of verification failures and the failure tolerance coefficient. The deviation threshold is then increased by the tolerance threshold so that the verification judgment can be re-executed based on the increased deviation threshold when the next interactive data packet feedback from the client is received. This process is repeated until the cumulative number of verification failures exceeds the cumulative failure limit.

[0095] If the cumulative number of verification failures exceeds the cumulative failure limit, all tolerance thresholds are deleted to reset the deviation threshold.

[0096] Specifically, this embodiment introduces a dynamic tolerance threshold adjustment mechanism based on the number of recent verification failures by the user, in addition to setting a deviation threshold according to the device interaction accuracy and the parameters generated by the verification interface. This mechanism can gradually relax the deviation threshold according to the cumulative number of verification failures within a preset period, thereby reducing the false judgment rate caused by factors such as accidental operation deviations, insufficient touch accuracy, or network latency, and thus improving the verification pass rate of real users. At the same time, a cumulative failure limit is set, and all tolerance thresholds are deleted after the limit is exceeded to reset the deviation threshold, preventing attackers from gradually expanding the fault tolerance range through multiple attempts to crack the system. This achieves a dynamic balance between security and user experience.

[0097] In one embodiment, the verification is deemed unsuccessful, and object position reset parameters are generated, including:

[0098] Record the current first position parameter and the current second position parameter;

[0099] From the interactive area, randomly select a safe reset position other than the current first position parameter, and use it as the reset position of the first object, and generate the first object position reset parameter;

[0100] Based on the reset position of the first object, the hitable area of ​​the first object is recalculated, and a safe target reset position other than the current second position parameter is randomly selected as the reset position of the second object and the second object position reset parameter is generated.

[0101] Specifically, in this embodiment, by recording the current first position parameters and second position parameters and excluding these parameters when reselecting a position, the predictability of the trajectory caused by position repetition is avoided, thereby effectively improving the randomness and security of the verification process. At the same time, by recalculating the hitable area after resetting the position of the first object and selecting the reset position of the second object accordingly, the rationality and interactive challenge of the spatial distribution of the target position and the starting position are ensured, making the verification task both feasible and, to a certain extent, preventing users from circumventing verification by memorizing or guessing the position.

[0102] like Figure 4 As shown, embodiments of this application also provide a login verification method, including:

[0103] Step 401: The client sends a verification request to the server, and the server generates and sends a verification data packet back to the client.

[0104] Step 402: The client generates a verification interaction interface that includes at least a first object and a second object based on the verification data packet, and sets the positions of the first object and the second object respectively.

[0105] Step 403: In response to receiving the user's interaction start operation on the first object, the client records the corresponding operation information; in response to receiving the user's interaction end operation on the first object, the client determines the first landing point position of the first object based on the operation information and the current position of the first object and sends it to the server.

[0106] Step 404: The server determines whether the verification is successful based on the deviation distance between the first landing point position and the second object position, and sends the verification result back to the client.

[0107] Step 405: In response to a successful verification result, the client ends the verification interaction interface.

[0108] Step 406: In response to the verification result being unsuccessful, the client retains the verification interaction interface and resets the positions of the first object and the second object respectively.

[0109] Specifically, this embodiment realizes a complete closed loop between the client and the server, including verification request, interaction generation, trajectory landing point calculation and server judgment, and dynamically adjusts the state of the interactive interface according to the verification result, which not only improves the continuity and interactivity of user verification, but also achieves a balance between security and user experience.

[0110] like Figure 5 As shown, in one embodiment, a verification interaction interface is set up, in which a moving ball 501 as the first object and a fixed ball 502 as the second object are set. The user clicks and presses and holds the moving ball 501 to move it backward to achieve a slingshot-like stretch. After the user releases the moving ball 501, the moving ball 501 moves in a parabolic motion to the position of the landing ball 503, that is, the first landing position. At this time, the distance between the center of the landing ball 503 and the fixed ball 502 is used as the deviation distance to perform subsequent verification judgment.

[0111] It is worth noting that, to enhance the user experience, this embodiment can display the object's trajectory in real time within the verification interface and provide animated feedback to clearly indicate the operation result to the user. Furthermore, the interactive object can be designed with various shapes, colors, or features to guide the user's operation direction and force. This embodiment has good scalability, allowing the addition of new object types, interface templates, or gesture operations without affecting existing solutions, facilitating system upgrades and cross-platform deployment.

[0112] like Figure 6As shown, in one embodiment, the user inputs login information, such as username and password, into the client. When the login information is correct, the client sends a verification request to the server. The server sends back a verification data packet, which stores parameters for generating the verification interface, an object ejection motion model, a first position parameter, and a second position parameter. The client generates and displays a verification interface to the user based on the received verification data packet. On the verification interface, the user manipulates the first object using the position of the second object as a reference target. For example, the user clicks and holds the object to stretch and drag it, or releases it to make it pop up. This causes the first object to move in a motion manner that conforms to the object ejection motion model, such as throwing it. The object moves along a line, generating a first trajectory and arriving at a first landing point. The client sends the first landing point to the server. The server determines whether the verification passes based on the deviation distance between the first landing point and the second object's position and sends feedback to the client. If successful, the client closes the verification interface and allows the user to log in. If unsuccessful, the client records the number of failures and re-requests the first and second position parameters from the server to update the positions of the first and second objects on the verification interface, allowing the user to attempt the operation again. This continues until the user's failure count reaches the limit, for example, 3 times. At this point, the verification interface is closed and the user's login attempt is denied for 5-10 minutes.

[0113] In one embodiment, the login verification method provided in this application further includes:

[0114] The client calculates the initial velocity vector of the first object based on the user operation information it obtains, and makes small adjustments to the initial velocity direction and speed multiple times to increase the unpredictability of the motion trajectory;

[0115] When an abnormality is detected in the duration, displacement length, or operation speed of a user's stretching operation, a safety procedure is triggered, which includes at least: regenerating the positions of the first and second objects, and adjusting the verification target position to increase the verification difficulty.

[0116] The server collects user interaction data within a preset period, analyzes operation patterns, identifies abnormal or repetitive behaviors, and dynamically adjusts verification parameters based on the identification results, including at least: deviation threshold and random disturbance amplitude, to improve verification security.

[0117] It is worth noting that in this embodiment, when the user operates the first object on the verification interaction interface, the client will generate the initial velocity vector of the first object based on the user's stretching action; subsequently, the client will add a small random perturbation to the initial velocity vector, so that the motion trajectory generated by the same user operation in each verification is slightly different, thereby increasing the system's anti-attack capability.

[0118] During operation, the client continuously monitors the user's operation status. If the system detects that the operation time is too short or too long, the stretching displacement is too large or too small, or the operation speed is abnormal, the system will trigger a security handling mechanism. The security handling includes regenerating the positions of the first and second objects randomly, or adjusting the position of the verification target to appropriately increase the verification difficulty, thereby preventing users or attack programs from bypassing the verification logic by using extreme operations.

[0119] In addition, the server will collect user interaction data within a preset period, including trajectory patterns, operation time and speed distribution, and analyze the operation patterns. By identifying abnormal or repetitive patterns, the system can dynamically adjust the verification parameters, such as appropriately increasing the random disturbance amplitude or adjusting the deviation threshold, making it difficult for automated attacks and trajectory reproduction attacks to succeed, while ensuring that legitimate user operations can still be successfully verified.

[0120] Specifically, this embodiment introduces random perturbations into the initial velocity vector and motion trajectory, making it impossible for attackers to accurately reproduce the user's trajectory, thereby enhancing system security and improving anti-attack capabilities. It detects and processes excessively fast, slow, or extreme operations to prevent users or attack programs from bypassing the verification logic, enhancing protection against abnormal operations and thus improving verification reliability. By statistically analyzing multiple user operation data, it identifies abnormal and repetitive behaviors and dynamically adjusts verification parameters to adapt to multiple interactions, improving the system's resistance to automated attacks and mass cracking. By combining device interaction accuracy and interface parameter settings with random perturbations and security processing levels, it ensures consistent verification difficulty and user experience across different terminal devices, achieving cross-device consistency and improving user experience and fairness.

[0121] It is worth noting that the login verification method provided in this application significantly overcomes the shortcomings of traditional verification methods in terms of security, user experience, and cross-device adaptability compared to existing technologies. Specifically: First, addressing the issue that static verification methods such as character recognition CAPTCHAs and image selection CAPTCHAs are easily compromised by image recognition algorithms and deepfake techniques, this application introduces a dynamic interaction method based on a physical motion model. By generating operable first and second objects on the client side and combining user operations to generate initial velocity vectors and motion trajectories, the object's ejection motion conforms to real physical laws, such as parabolic motion and air resistance simulation, making it difficult for attackers to achieve automated cracking through fixed trajectory fitting or trajectory reproduction techniques. Second, addressing the issue that fixed paths in sliding puzzle verification are easily attacked by trajectory reproduction attacks, this application randomizes the initial position, target position, and... By introducing small random perturbations, the trajectory of each verification is made different and unpredictable, significantly improving the anti-attack capability. Furthermore, addressing the high latency and privacy leakage risks associated with SMS or email verification codes, this application's solution performs verification via real-time network communication between the client and server, eliminating the need for additional user information. This shortens verification response time and effectively protects user privacy. In addition, this application solves the problem of inconsistencies in operation caused by differences in terminal devices, resolutions, and interaction precision by dynamically setting the deviation range with a dynamic tolerance threshold and adaptive device interaction precision, ensuring the fairness and usability of the verification process. Finally, this application's solution forms a complete closed loop between the client and server, dynamically adjusting verification parameters based on abnormal user operations, repetitive behaviors, and cumulative failure counts, achieving a balance between security and user experience, and significantly improving the overall protection capability and applicability of the system.

[0122] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods according to the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method.

[0123] like Figure 7 As shown, embodiments of this application also provide an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform the steps in any of the above-described login verification method embodiments.

[0124] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0125] The login verification method and electronic device provided in this application have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the embodiments above are only intended to help understand the method and core ideas of this application. It should be noted that those skilled in the art can make several improvements and modifications to this application without departing from the principles of this application, and these improvements and modifications also fall within the protection scope of this application.

Claims

1. A login verification method applied to a client, characterized in that, The method comprises the following steps: In response to receiving the verification data packet sent by the server, the verification data packet is parsed to obtain a verification interaction interface generation parameter, an object ejection motion model, a first position parameter, and a second position parameter. The first position parameter and the second position parameter are generated by the server to match the verification interaction interface of the client, which comprises the following steps: determining an interactive area based on the verification interaction interface, randomly selecting a plurality of candidate initial position coordinates in the interactive area, and randomly selecting a safe initial position with a distance greater than or equal to a first safety distance threshold from the interface boundary of the verification interaction interface as the position of the first object and generating the first position parameter, parsing a verification request to obtain an interaction characteristic parameter of the client, calculating a hittable area of the first object based on the first position parameter and the interaction characteristic parameter through the object ejection motion model, randomly selecting a safe target position with a distance greater than or equal to a second safety distance threshold from the interface boundary of the verification interaction interface in the hittable area as the position of the second object and generating the second position parameter; According to the verification interaction interface generation parameter, a verification interaction interface including at least a first object and a second object is generated, and the position of the first object is set according to the first position parameter, and the position of the second object is set according to the second position parameter; In response to obtaining the user's interaction start operation on the first object, the user's operation information on the first object is recorded and the display position of the first object is updated; In response to obtaining the user's interaction end operation on the first object, a first motion trajectory of the first object is generated based on the object ejection motion model, the operation information, and the current position of the first object, and a corresponding first landing position is determined, which further comprises the following steps: calculating the initial velocity vector of the first object based on the obtained user operation information, and adjusting the initial velocity direction and rate of the first object multiple times; when detecting that the duration, displacement length, or operation speed of the user's stretching operation is abnormal, triggering a safety processing; statistical user interaction behavior data in a preset period and sending it to the server for the server to analyze the operation mode, identify abnormal or repetitive behaviors, and dynamically adjust the verification parameters based on the identification result. sending an interaction data packet including at least the first landing position to the server for the server to perform a verification determination, wherein the verification determination is performed by the server according to a deviation distance between the first landing position and the position of the second object and comparing the deviation distance with a deviation threshold, wherein the deviation threshold is determined by the server, including: obtaining a device interaction accuracy of the client, generating the deviation threshold according to the device interaction accuracy and the verification interaction interface generation parameter, in response to the server determining that the user's current verification fails and accepting the re-verification request fed back by the client, querying the cumulative verification failure number of the user within a preset period, if the cumulative verification failure number is less than or equal to the cumulative failure upper limit, generating a tolerance threshold according to the cumulative verification failure number and the failure tolerance coefficient, and increasing the deviation threshold by the tolerance threshold, for re-executing the verification determination based on the increased deviation threshold when the client feedback interaction data packet is received next time, recursively until the cumulative verification failure number is greater than the cumulative failure upper limit, if the cumulative verification failure number is greater than the cumulative failure upper limit, deleting all the tolerance thresholds to reset the deviation threshold.

2. The login verification method of claim 1, wherein, Before the client receives the verification data packet sent by the server, it further includes: generating a login data packet according to the user input account information and sending it to the server for the server to compare the account information with the user data stored in the database and feed back the comparison result; in response to receiving the comparison result fed back by the server as consistent, determining that the user input account information is correct, and sending a verification request to the server to obtain the verification data packet; in response to receiving the comparison result fed back by the server as inconsistent, determining that the user input account information is incorrect, and outputting a login failure prompt.

3. The login verification method of claim 1, wherein, The first object's first motion trajectory is generated based on the object projectile motion model, the operation information and the current position of the first object, and the corresponding first landing position is determined, including: According to the operation information, the initial velocity vector of the first object is calculated; input the initial velocity vector and the current position of the first object into the object projectile motion model, simulate the two-dimensional motion process of the first object based on the gravity acceleration and air resistance simulation parameters set in the object projectile motion model, and generate the first motion trajectory; determine the intersection of the first motion trajectory and the horizon in the verification interaction interface, and take the position of the intersection as the first landing position.

4. The login verification method according to claim 3, wherein The initial velocity vector of the first object is calculated according to the operation information, including: According to the first position parameter, the starting position coordinates of the first object are determined as the launch reference point; parsing the operation information to obtain the stretching endpoint coordinates and displacement duration of the first object; According to the launch reference point and the stretching endpoint coordinates, the stretching displacement and displacement direction are calculated; The opposite direction of the displacement direction is taken as the initial motion direction of the first object; According to the stretching displacement amount and the displacement duration, the initial speed of the first object is calculated; The initial motion direction and the initial speed are combined to obtain the initial velocity vector.

5. A login verification method applied to a server, characterized in that, Comprise: In response to receiving the authentication request sent by the client, an authentication interaction interface matched with the client is selected, and a first position parameter and a second position parameter are generated to control the positions of a first object and a second object on the authentication interaction interface, comprising: determining an interactive area based on the authentication interaction interface; Randomly selecting a plurality of candidate initial position coordinates within the interactive area, and randomly selecting a safe initial position with a distance from the interface boundary of the authentication interaction interface greater than or equal to a first safety distance threshold as the position of the first object and generating the first position parameter, parsing the authentication request to obtain the interactive characteristic parameters of the client, calculating the hit area of the first object according to the first position parameter and the interactive characteristic parameters through an object ejection motion model, and randomly selecting a safe target position with a distance from the interface boundary of the authentication interaction interface greater than or equal to a second safety distance threshold as the position of the second object and generating the second position parameter; Setting an object ejection motion model, and combining the authentication interaction interface generation parameters, the first position parameter and the second position parameter, generating an authentication data packet and sending it to the client; In response to receiving the interactive data packet fed back by the client, the first landing position of the first object is obtained by parsing the interactive data packet, wherein the process of generating the first landing position by the client further comprises: the client calculates the initial velocity vector of the first object according to the obtained user operation information, and adjusts the initial velocity direction and rate of the first object a few times; When the client detects that the duration, displacement length or operation speed of the user stretching operation is abnormal, trigger safety processing; The server statistics the interactive behavior data of the user in a preset period, analyzes the operation mode, identifies abnormal or repeated behavior, and dynamically adjusts the verification parameters based on the identification result; Obtaining the device interaction precision of the client, setting a deviation threshold according to the device interaction precision and the authentication interaction interface generation parameters; The deviation distance between the first landing position and the position of the second object is calculated, and the deviation distance is compared with the deviation threshold; In response to the deviation distance being less than or equal to the deviation threshold, it is determined that the authentication is passed, and an authentication pass data packet is sent to the client; In response to the deviation distance being greater than the deviation threshold, it is determined that the authentication is not passed, and an object position reset parameter is generated, encapsulated into an authentication failure data packet and sent to the client; In response to the server determining that the current user authentication fails and receiving the re-authentication request from the client, the cumulative authentication failure number of the user in a preset period is queried. If the cumulative authentication failure number is less than or equal to the upper limit of the cumulative failure, a tolerance threshold is generated according to the cumulative authentication failure number and a failure tolerance coefficient, and the deviation threshold is increased by the tolerance threshold. When the client receives the interactive data packet again, the authentication judgment is re-executed based on the increased deviation threshold, and the process is recursively performed until the cumulative authentication failure number is greater than the upper limit of the cumulative failure. If the cumulative authentication failure number is greater than the upper limit of the cumulative failure, all tolerance thresholds are deleted to reset the deviation threshold.

6. The login verification method of claim 5, wherein, The selected authentication interaction interface matched with the client includes: Analyzing the authentication request to obtain device type information and interface display parameters of the client; According to the device type information, an interface matched with the client is selected from the preset authentication interaction interface template as the authentication interaction interface, and the corresponding authentication interaction interface generation parameter is generated according to the interface display parameter.

7. The login verification method of claim 5, wherein, The determination of the authentication failure and the generation of the object position reset parameter include: Record the current first position parameter and the current second position parameter; From the interactive area, a safe reset position other than the current first position parameter is randomly selected as the reset position of the first object and the first object position reset parameter is generated; Based on the reset position of the first object, the hitable area of the first object is recalculated, and a safe target reset position other than the current second position parameter is randomly selected as the reset position of the second object and the second object position reset parameter is generated.

8. An electronic device, comprising: It includes: Memory for storing computer programs; The processor is used to execute the computer program to realize the steps of the login verification method in any one of claims 1 to 7.

Images