Web Access Control Using Random Paths and Dual Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing single packet authorization (SPA) technologies require specific software installation, which increases maintenance costs and introduces potential vulnerabilities, making them susceptible to cyberattacks.
Innovation Solution
Implement a method and apparatus for access control that uses a randomly generated first page with a verification control and authorization code, ensuring only authorized users can access service resources without installing additional software, by employing a seven-layer SPA scheme.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If single packet authorization (SPA) technology is adopted to prevent scanning operations, then security against cyberattacks is improved, but maintenance costs increase and potential vulnerabilities are introduced due to requiring specific software installation
Solution Approach 1:
The patent extracts the core authentication functionality from complex SPA software and implements it through a simplified web-based verification control. Instead of requiring full SPA software installation, the solution uses a lightweight verification control embedded in a web page that performs authorization code verification, thereby maintaining security while eliminating software complexity and maintenance overhead.
Solution Approach 2:
The patent replaces the mechanical/software-based SPA system with a web-based authentication mechanism. Instead of using traditional SPA software that requires installation and configuration, the solution uses a web page with verification control that processes authorization codes through standard web protocols, substituting complex software mechanics with simpler web technology.
2Reliability
If dual authentication with random path and authorization code is implemented, then access control security is improved, but system complexity increases
Solution Approach 1:
The patent makes the verification control universal by designing it to work within standard web page frameworks. The verification control can be integrated into existing web applications without requiring separate authentication systems, thereby achieving strong access control security while avoiding additional system complexity through multi-functionality.
Solution Approach 2:
The patent introduces a web page as an intermediary between the user and the authentication system. The verification control on the web page mediates the authentication process by receiving and validating authorization codes, thereby simplifying the overall system architecture while maintaining secure dual authentication through the intermediary layer.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The present disclosure relates to a field of network security technologies and discloses a method and an apparatus for access control of service resources, an electronic device and a storage medium. The method includes: displaying (S101) a first page of a target application in response to an access request for the first page initiated through a specific address, wherein the first page includes a verification control, and the specific address of the first page includes a random path generated randomly; receiving (S102) an authorization code input in the verification control, and displaying a login page of the target application in response to the authorization code being successfully authenticated; and receiving (S103) authentication information input in the login page, and displaying a page of related service resources of the target application in response to the authentication information being successfully authenticated.