WO2018059033A1

WO2018059033A1 - Verification method, server and system

Info

Publication number: WO2018059033A1
Application number: PCT/CN2017/090880
Authority: WO
Inventors: 欧锻灏
Original assignee: 华为技术有限公司
Priority date: 2016-09-30
Filing date: 2017-06-29
Publication date: 2018-04-05
Also published as: CN107888553A; CN107888553B

Abstract

The present invention relates to the field of communications. Provided is a verification method, comprising: a verification code server receiving a verification code acquisition request sent by a client; generating and saving a system verification code, wherein the system verification code is determined by a string of random text; encoding the system verification code to n original pictures, and generating k verification code pictures, wherein k and n are integers greater than two, and k is less than or equal to n; sending the k verification code pictures to the client; receiving a verification request sent by the client, wherein the verification request carries a verification code input by a user according to the k verification code pictures; and according to the system verification code, determining whether the verification code input by the user is correct. By means of the above-mentioned solution, a randomly generated system verification code is encoded to n original pictures, so that both the difficulty of machine recognition is increased, and the security of the verification code is ensured.

Description

Authentication method, server and system

The present application claims priority to Chinese Patent Application No. 201610878903.9, entitled "A Verification Method, Server and System", filed on September 30, 2016, the entire contents of in.

Technical field

The present invention relates to the field of communications, and in particular, to a verification method, a server, and a system.

Background technique

Currently, most websites require users to enter a verification code when they register or log in. Verification codes can be used to prevent hackers from automatically registering websites with tools, and using tools to brute force specific users, and then constantly log in and flood. The existing verification code can be a randomly generated number or letter and displayed to the user in the form of a picture, allowing the user to input as it is, and only the input is correct before the subsequent operation can be performed.

Therefore, the verification code has the feature of "forced attention", that is, the user has to pay attention. With the mandatory attention feature of the verification code, the advertiser can sell the carrier carrying the verification code as an advertisement space.

In order to increase the advertising effect, advertisers can use the frequently generated verification code to advertise. One method is to place an advertisement picture in the place where the verification code is input. The advertisement picture includes an explicit random text, but after the user is familiar with this method, it is easy to ignore the advertisement content and directly read the random text. Another method can also put an advertisement word image in the place where the verification code is input. There is an advertisement word in the advertisement word picture, and the verification code can be determined according to the advertisement word, but due to the limited number of advertisement word pictures in the verification code server, This form of ad verification code is not random enough to easily lead to exhaustive attacks. For example, once the image of the advertisement word that has appeared is processed in some way to obtain the picture feature, and then the correspondence between the picture feature and the verification code information is stored in the database, the probability of cracking of the machine can be improved next time. This type of verification code scheme is not secure enough.

Summary of the invention

The invention provides a verification method, a server and a system to solve the contradiction between the advertisement effect and the security of the verification code.

In order to achieve the above object, embodiments of the present invention adopt the following technical solutions:

In a first aspect, an embodiment of the present invention provides a verification method, where the method is applied to a verification code server, including: receiving a verification code acquisition request sent by a client; generating and saving a system verification code; wherein the system verification code is String random text determination; since the system verification code is determined by random text, illegal user brute force cracking can be avoided.

Encoding the system verification code into n original pictures to generate k verification code pictures; wherein k and n are integers greater than or equal to 2, and k is less than or equal to n; sending the k verification code pictures to the Receiving a verification request sent by the client, the verification request carrying a verification code input by the user according to the k verification code picture; determining, according to the system verification code, whether the verification code input by the user is correct .

Compared with the prior art, in the embodiment of the present invention, the verification code picture is not simply superimposed on the verification code, but the verification code is encoded into multiple pictures, so that the system verification code and the picture can be displayed separately. Added machine identification The difficulty of the certificate. When the multiple images are advertisement images, this method will not affect the display effect of the advertisement images.

In a possible design, after the generating the k verification code pictures, the method further includes:

The verification code server sends a script to the client, the script program instructing the client to monitor an operation instruction of the user for at least one verification code picture in the k verification code pictures, and superimposing the k verification code pictures in the operation instruction The information hidden in the k verification code pictures is displayed when the preset position is reached. Optionally, the script further includes prompting information for prompting the user to operate in the preset position on the client, and the prompt information may be, for example, “Please move the right verification code image to the left side to verify with the left side. Code images overlap."

In order to encode the system verification code into n original pictures, k verification code pictures are generated, and the k verification code pictures cannot visually see the system verification code, and only when the k verification code pictures are superimposed on the preset The system verification code hidden in the k-code image is displayed only when the location is displayed. The embodiments of the present invention provide various possible implementation manners:

In a possible design, the verification code server uses a (k, n) based visual cryptography method to encode the system verification code into n original pictures to generate k verification code pictures. Specifically, the verification code server converts the system verification code into a secret picture; acquires n original pictures; and encodes the secret picture into the obtained n original pictures based on the (k, n) visual cryptography method, and obtains n pictures. a shadow picture; according to any k shadow pictures in the n shadow pictures, k picture verification code pictures are obtained.

In another possible design, the verification code server uses the least significant bit substitution algorithm to encode the system verification code into n original pictures to generate k verification code pictures. The least significant bit substitution algorithm is to embed the secret picture into the least significant bit of the original picture pixel value, also called the least significant bit. Changing this position has the least impact on the quality of the original picture. Specifically, the system verification code is converted into a secret picture; two original pictures are acquired; and the secret picture and the obtained two original pictures are processed by using a least significant bit replacement algorithm to obtain two verification code pictures.

Encoding the system verification code to the k verification code pictures obtained from the n original pictures according to the (k, n) visual cryptographic method or the least significant digit replacement algorithm, so that the k verification code pictures are visually identical to the original picture, visually The system verification code cannot be directly recognized, and the user needs to superimpose the k verification code picture to the preset position to display the system verification code hidden in the k verification code picture. On the one hand, this increases the difficulty of the machine identification verification code and improves the security of the verification code; on the other hand, when the original picture is an advertisement picture, the user cannot ignore the verification code picture visually identical to the advertisement picture, thereby improving The advertising effect.

In a second aspect, an embodiment of the present invention provides a verification code server, which has the function of implementing the verification code server behavior in the foregoing first aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above.

In one possible design, the structure of the captcha server includes a processor and a memory for storing a program supporting the captcha server to perform the above method, the processor being configured to perform the in-memory store program of. The verification code server may also include a communication interface for the verification code server to communicate with other devices or communication networks.

In a third aspect, an embodiment of the present invention provides a computer storage medium for storing computer software instructions used by the verification code server, which includes a program designed to execute the above aspects as a verification code server.

Compared with the prior art, the solution provided by the present invention encodes a randomly generated system verification code into a plurality of original pictures to generate a plurality of verification code pictures, which enables the system verification code and the picture to be displayed separately. Since the system verification code is randomly generated, brute force cracking can be avoided to ensure the security of the verification code. In addition, when the original picture is an advertisement picture containing advertisement information, the separate display ensures the advertisement effect.

These and other aspects of the invention will be more apparent from the following description of the embodiments.

DRAWINGS

FIG. 1 is a schematic diagram of a verification code system according to an embodiment of the present invention;

2 is a schematic diagram of a computer device according to an embodiment of the present invention;

3 is a schematic flowchart of a method for using an advertisement verification code according to an embodiment of the present invention;

4A is an advertisement picture according to an embodiment of the present invention;

FIG. 4B is an advertisement picture according to an embodiment of the present invention;

4C is a user interface diagram of a user performing a login operation according to an embodiment of the present invention;

4D is a user interface diagram of a user mobile advertising verification code according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a verification code server according to an embodiment of the present invention.

detailed description

In order to make the objects, technical solutions and advantages of the present invention more comprehensible, the embodiments of the present invention are further described in detail below.

As shown in FIG. 1, the verification code system according to an embodiment of the present invention can be implemented in the server-client system 100. The server-client system 100 includes a CAPTCHA server 101 and a network 103. The client 102 communicates with the verification code server 101 via the network 103. The verification code server 101 is configured to generate and store a random text as a system verification code in response to the verification code acquisition request sent by the client 102 for requesting the verification code picture, and convert the system verification code into a secret picture; Obtaining the original picture from the picture library, and encoding the secret picture into the obtained original picture, thereby generating k verification code pictures and returning to the user client 102; receiving and verifying that the user recognizes the k verification code pictures according to the operation The verification code of the information input, where k is an integer greater than or equal to 2. The administrator of the verification code server can log in to the verification code server, manage the picture library in the verification code server 101, and add, delete, change, and query the picture library in the verification code server. The client 102 is configured to obtain k verification code pictures from the verification code server 101, and display the obtained k verification codes to the user; in response to the operation instruction of the k verification codes, receive the verification code input by the user, and receive the user The input verification code is sent to the verification code server 101.

In order to facilitate the understanding of the technical solutions of the embodiments of the present invention, the technical terms involved in the embodiments of the present invention are explained as follows:

(k,n)-based visual cipher: encodes a secret picture into n pictures (such as the original picture in the embodiment of the present invention) to generate n shadow pictures, wherein n shadow pictures and the original n pictures are in visual Same on the same. When any k(k<=n) shadow pictures are overlapped, the content of the hidden secret picture can be visually recognized from the superimposed result by the naked eye, and any shadow picture less than k number will not be able to obtain the secret picture. Any information.

Least Significant Bit (LSB) Substitution Algorithm: A simple and commonly used image information hiding algorithm that uses the LSB replacement algorithm to encode a randomly generated system verification code to the least significant bit of the original picture (also called the least significant bit). . Since changing the least significant bit has the least impact on the quality of the original picture, the difference between the original picture and the captcha picture cannot be seen from the naked eye.

In the embodiment of the present invention, the verification code server 101 acquires the n original picture and encodes the secret picture to the acquired n. In the original picture, k verification code pictures are generated, and the generated k verification code pictures are sent to the client 102. The client 102 presents the k verification code pictures sent by the verification code server to the user, and responds to the operation instruction of the at least one verification code picture in the k verification code picture, such as by dragging or inputting the display coordinates. The method moves the display position of at least one verification code picture in the k verification code picture. The user recognizes the information hidden in the k verification code picture by operating the k verification code picture, and inputs the verification code at the specified position according to the recognized information, and the client 102 sends the verification code input by the user to the verification code server. 101, in order for the verification code server 101 to confirm whether the verification code returned by the client 102 is correct.

It should be noted that the picture in the above picture library may be an advertisement picture. In the embodiment of the present invention, the advertisement effect of the verification code picture is determined by the picture library, and different advertisements are placed by setting different advertisement pictures in the picture library. The number of images in the image library is small, the advertising intensity is large; if there are many images in the image library, the content of the advertisement is richer. Images in the gallery can be set by the administrator based on different advertising strategies. The security of the ad verification code is determined by the strength of the random text generation algorithm, which makes brute force impossible because the generated text is random. By encoding the secret picture determined by the random text in a limited number of advertisement pictures, both the benefit of the advertisement and the security of the verification code are ensured.

It should be noted that, in the system, the number of the clients 102 may also be multiple, which is not limited by the embodiment of the present invention. Specifically, the client 102 can be any terminal such as a mobile phone, a tablet, a desktop computer, or a notebook computer.

As shown in FIG. 2, the verification code server 101 of FIG. 1 can be implemented in the manner of the computer device (or system) in FIG. 2.

FIG. 2 is a schematic diagram of a computer device according to an embodiment of the present invention. The computer device 200 includes at least one processor 201, a communication bus 202, a memory 203, and at least one communication interface 204.

The processor 201 can be a general purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present invention.

Communication bus 202 can include a path for communicating information between the components described above. The communication interface 204 uses devices such as any transceiver for communicating with other devices or communication networks, such as Ethernet, Radio Access Network (RAN), Wireless Local Area Networks (WLAN), and the like.

The memory 203 can be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type that can store information and instructions. The dynamic storage device can also be an Electrically Erasable Programmable Read-Only Memory (EEPROM), a Compact Disc Read-Only Memory (CD-ROM) or other optical disc storage, and a disc storage device. (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be Any other media accessed, but not limited to this. The memory can exist independently and be connected to the processor via a bus. The memory can also be integrated with the processor.

The memory 203 is used to store program code for executing the solution of the present invention, and is controlled by the processor 201 for execution. The processor 201 is configured to execute program code stored in the memory 503.

In a particular implementation, as an embodiment, processor 201 may include one or more CPUs, such as CPU0 and CPU1 in FIG.

In a particular implementation, as an embodiment, computer device 200 can include multiple processors, such as processor 201 and processor 208 in FIG. Each of these processors can be a single-CPU processor. It can also be a multi-core processor. A processor herein may refer to one or more devices, circuits, and/or processing cores for processing data, such as computer program instructions.

In a particular implementation, as an embodiment, computer device 200 may also include an output device 205 and an input device 206. Output device 205 is in communication with processor 201 and can display information in a variety of ways. For example, the output device 205 can be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. Wait. Input device 206 is in communication with processor 201 and can accept user input in a variety of ways. For example, input device 206 can be a mouse, keyboard, touch screen device or sensing device, and the like.

The computer device 200 described above can be a general purpose computer device or a special purpose computer device. In a specific implementation, the computer device 200 can be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet, a wireless terminal device, a communication device, an embedded device, or have FIG. A device of similar structure. Embodiments of the invention do not limit the type of computer device 200.

The verification code server in FIG. 1 may be the device shown in FIG. 2, and one or more software modules (eg, an interaction module, a processing module, etc.) are stored in the memory of the verification code server. The verification code server can implement the software module by using the processor and the program code in the memory to implement the verification method provided by the embodiment of the present invention.

Based on the system architecture diagram shown in FIG. 1 , in order to more clearly describe the processing process of the client and the verification code server, as shown in FIG. 3 , the embodiment of the present invention provides a schematic flowchart of the verification method, including:

Step 301: The administrator logs in the verification code server to manage the picture library in the verification code server.

Specifically, the administrator logs in to the verification code server, and for security, can perform authority control on the login behavior of the administrator. Administrators can manage images in the photo gallery based on ad policies, such as adding or removing images from the gallery. In the embodiment of the present invention, the picture in the picture library is hereinafter referred to as an original picture. For example, Huawei P9 will be released in London on April 6, 2016. Huawei wants to deliver the message through the advertisement verification code server. The administrator can add the two pictures in Figure 4A and Figure 4B to the picture library.

Step 302: The client sends a verification code acquisition request for requesting the verification code picture to the verification code server.

Currently, most websites require users to enter a verification code when they register or log in. Therefore, in the scenario where the verification code is required, when the user performs the operations of registration, login, etc., the verification code acquisition request is automatically triggered to be sent to the advertisement verification code server.

Step 303: The verification code server receives the verification code acquisition request sent by the client, generates and saves a system verification code, and encodes the system verification code into n original pictures to generate k verification code pictures; wherein, k and n are An integer greater than or equal to 2, and k is less than or equal to n.

It should be noted that the n original pictures may be n different pictures in the picture library, or may be obtained by copying one or more pictures in the picture library. The content of the n original pictures is not limited in the embodiment of the present invention.

In the embodiment of the present invention, by visual inspection, each verification code picture in the k verification code picture is visually identical to the corresponding original picture, and the system verification code is hidden in the verification code picture, and is invisible to the naked eye. The user can identify the hidden system verification code by performing an overlay operation on the k verification code pictures, and any one of the k verification code pictures or the multiple verification code pictures smaller than k pictures Unable to get the system verification code

Method 1: The verification code server encodes the system verification code into n original pictures, and generates k verification code pictures, specifically:

Converting the system verification code into a secret picture;

Get n original pictures;

Encoding the secret picture into the n original pictures based on the (k,n) visual cryptography method to obtain n shadow pictures;

According to any k shadow pictures in the n shadow pictures, k verification code pictures are obtained.

In the embodiment of the present invention, the secret picture is encoded into the n original pictures based on the (k, n) visual cryptography method to obtain n shadow pictures, which may be implemented in various manners. limited.

The embodiment of the present invention further provides a method for generating a verification code picture. Method 2: The k and n are both equal to 2, and the system verification code is encoded into n original pictures to generate k verification code pictures. Specifically, the system verification code is converted into a secret picture; two original pictures are acquired; and the secret picture and the two original pictures are processed by using a least significant bit replacement algorithm to obtain two verification code pictures.

The method of processing the secret picture and the two original pictures by using a least significant bit replacement algorithm to obtain two verification code pictures, specifically: randomly generating a random picture S1 having the same size as the secret picture; The secret picture and the random picture S1 perform a pixel-by-pixel exclusive-OR operation to obtain an exclusive-OR picture S2; performing RGB bit-plane decomposition on the acquired two original pictures to determine the acquired two original pictures. Hiding the bearer; the hidden bearer is any one of an R plane, a G plane, and a B plane; embedding the random picture S1 into a lowest position of a hidden picture of an original picture using a least significant bit replacement algorithm, and The picture S2 is embedded in the lowest bit of the hidden carrier of another original picture, and the two picture of the verification code are obtained.

The LSB replacement algorithm is used to encode the secret picture to the least significant bit of the original picture (also known as the least significant bit). Since changing the least significant bit has the least impact on the quality of the original picture, the difference between the captcha picture and the original picture cannot be seen from the naked eye.

In a possible design, when the administrator adds a picture in the picture library, the type of the added picture is marked. When the picture of the verification code is generated, when the type of the picture is binary, the method 1 is used to generate the verification code picture; When the type of the picture is an RGB color picture, the method 2 is used to generate a verification code picture.

It should be noted that when the system verification code is converted into a secret picture, the display of the system verification code on the secret picture may be distorted or noise-added to increase the difficulty of machine identification.

Step 304: The verification code server sends the generated k verification code pictures to the client.

Step 305: The client receives the k verification code pictures sent by the verification code server, and displays the k verification code pictures, and receives the verification code input by the user in response to the operation instruction of the k verification code pictures by the user;

Specifically, the client displays the received k verification code pictures on the output device (such as a display). The user operates at least one verification code picture in the k verification code picture by dragging, moving, etc., and changes the display position of the k verification code picture. When the k verification code picture is superimposed on the preset position, the client displays the information hidden in the k verification code picture. At this time, the user visually observes the information hidden in the k pieces of verification code pictures, and inputs the verification code at a preset position (such as the verification code input box 401) according to the observed information.

In a possible design, the client further receives a script program from the verification code server; the script program instructs the client to monitor an operation instruction of the user for at least one verification code picture in the k verification code pictures, and And displaying information hidden in the k verification code pictures when the operation instruction causes the k verification code pictures to be superimposed to a preset position. Optionally, the script program further includes prompting information for prompting the user to operate in the preset position of the client, where the prompt information may be, for example, “Please move the right verification code image to the left side to make it to the left side. Captcha images overlap."

As shown in FIG. 4C, it is an example given by an embodiment of the present invention. When the user performs the login operation, the client receives two verification code pictures from the verification code server, and displays the two received verification code pictures in the verification code display box 402. In the embodiment of the present invention, the two verification code pictures are viewed from the naked eye, and the original two pictures of FIG. 4A and FIG. 4B The pieces are the same. The user can change the display position of the two verification code pictures in the verification code display box by dragging and dropping, moving, and the like. When two captcha images are superimposed on the preset position (such as moving the captcha picture on the right side of the verification code display box in Figure 4C, so that it is superimposed on the verification code picture on the left side), the client display is hidden in these two The information in the captcha picture is shown in Figure 4D. The user can recognize that the hidden information is "CAPTCHA" by the naked eye, and input the recognized CAPTCHA into the verification code input box 401.

Step 306: The client sends the verification code input by the user to the verification code server.

As shown in FIG. 4D, when the user inputs information in the verification code input box 401 and clicks the "login" button, the client transmits the verification code input by the user to the verification code server.

Step 307: The verification code server receives the verification code returned by the client, and verifies the verification code.

In a possible design, when the verification code server saves the system verification code in step 303, a label is set for the system verification code, and the label is carried when the verification code picture is returned to the client, so as to facilitate The client carries the tag when it returns the verification code entered by the user. The verification code server can obtain the corresponding system verification code according to the label returned by the client, thereby determining whether the verification code input by the user is correct by comparing the verification code and the system verification code input by the user returned by the client. The tag can be, for example, a session identifier or a random number.

In a possible design, after the verification code server generates the system verification code, the timer is started, and when the timer expires, the verification code server deletes the system verification code. When the server receives the verification code returned by the client and cannot obtain the corresponding system verification code according to the label, the server returns a response message that the verification code expires.

Step 308: The verification code server sends the verification result to the client, so that the client performs the corresponding operation according to the verification result.

In a possible design, when the verification result is successful, the user can successfully log in; when the verification result is failed, the user cannot perform the login operation. It should be noted that the present invention does not limit the form of the verification result and the specific operation performed by the user client according to the verification result.

The solution provided by the embodiment of the present invention encodes a system verification code including random text determination into n original pictures to generate k verification code pictures, wherein the verification code picture is visually identical to the original picture content, and the k sheets are Any one of the captcha images or multiple captcha images smaller than k can't get hidden information. Since the information hidden in the k-code picture is determined by the randomly generated text, illegal users such as hackers cannot establish the relationship between the verification code and the original picture by exhaustively, and solve the problem that the number of verification codes is limited and vulnerable to exhaustive attacks. The problem. In addition, as long as the original picture used for advertising purposes does not change, the k verification code pictures generated each time are visually the same, which makes the advertisement more targeted and improves the advertising efficiency.

The embodiment of the present invention further describes a structure diagram of a verification code server that belongs to the same inventive concept in the foregoing method embodiments. As shown in FIG. 5, the verification code server 500 is configured to perform the functions of the verification code server 101 in the foregoing method embodiment of FIG. 3, including: a receiving unit 501, a processing unit 502, and a sending unit 503.

The receiving unit 501 is configured to receive a verification code acquisition request sent by the client.

The processing unit 502 is configured to generate and save a system verification code, where the system verification code is determined by a string of random texts; and the system verification code is encoded into n original pictures to generate k verification code pictures; k and n are integers greater than or equal to 2, and k is less than or equal to n;

a sending unit 503, configured to send the k verification code pictures to the client;

The receiving unit 501 is further configured to receive a verification request sent by the client, where the verification request carries a verification code input by the user according to the k verification code picture;

The processing unit 502 is further configured to determine, according to the system verification code, whether the verification code input by the user is correct.

Optionally, the sending unit 503 is further configured to send, to the client, a script program, where the script program instructs the client to monitor, by the user, at least one verification code in the k verification code pictures. An operation instruction of the picture, and displaying information hidden in the k verification code picture when the operation instruction causes the k verification code picture to be superimposed to a preset position.

In a possible implementation manner, the processing unit 502 is configured to encode the system verification code into n original pictures, and generate k verification code pictures, specifically: converting the system verification code into a secret picture. Obtaining n original pictures; encoding the secret picture into the obtained n original pictures based on the (k, n) visual cryptography method to obtain n shadow pictures; according to any k of the n shadow pictures A shadow picture, get k verification code pictures.

In a possible implementation manner, the k and n are equal to 2, the processing unit 502 is configured to encode the system verification code into n original pictures, and generate k verification code pictures, specifically: The system verification code is converted into a secret picture; two original pictures are obtained; and the secret picture and the obtained two original pictures are processed by using a least significant bit replacement algorithm to obtain two verification code pictures. The least significant bit replacement algorithm is used to process the secret picture and the obtained two original pictures to obtain two verification code pictures, specifically: randomly generating a random picture S1 having the same size as the secret picture; The secret picture and the random picture S1 perform a pixel-by-pixel exclusive-OR operation to obtain an exclusive-OR picture S2; performing RGB bit-plane decomposition on the acquired two original pictures to determine the hiding of the acquired two original pictures a carrier; the hidden carrier being any one of an R plane, a G plane, and a B plane; embedding the random picture S1 into a lowest bit of a hidden picture of an original picture, and using the least significant bit replacement algorithm S2 is embedded in the lowest bit of the hidden carrier of another original picture, and the two verification code pictures are obtained.

It should be noted that the operation instruction mentioned above may specifically be dragging or moving the k verification code pictures to change the display position of the k verification code pictures.

In the present embodiment, the verification code server 500 is presented in the form of a functional unit. A "unit" herein may refer to an application-specific integrated circuit (ASIC), circuitry, a processor and memory that executes one or more software or firmware programs, integrated logic circuitry, and/or other functions that provide the functionality described above. Device. In a simple embodiment, those skilled in the art will appreciate that the verification code server 500 can take the form shown in FIG. The receiving unit 501, the processing unit 502, and the sending unit 503 can be implemented by the processor and the memory of FIG. 2. Specifically, the receiving unit 501, and the sending unit 503 can be implemented by executing an interaction module by the processor, and the processing unit 502 can This is achieved by executing the processing module by the processor.

The embodiment of the present invention further provides a computer storage medium for storing computer software instructions for implementing the verification code server shown in FIG. 5, which includes a program designed to execute the foregoing method embodiment. The verification method provided by the embodiment of the present invention can be implemented by executing a stored program.

It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should understand that the present invention is not limited by the described action sequence. Because certain steps may be performed in other sequences or concurrently in accordance with the present invention. In addition, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

Although the present invention has been described herein in connection with the embodiments of the present invention, it will be understood by those skilled in the <RTIgt; Other variations of the disclosed embodiments are achieved. In the claims, the word "comprising" does not exclude other components or steps, and "a" or "an" does not exclude a plurality. A single processor or other unit may fulfill several of the functions recited in the claims. Certain measures are recited in mutually different dependent claims, but this does not mean that the measures are not combined to produce a good effect.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, apparatus (device), or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code. The computer program is stored/distributed in a suitable medium, provided with other hardware or as part of the hardware, or in other distributed forms, such as over the Internet or other wired or wireless telecommunication systems.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of the methods, apparatus, and computer program products of the embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the invention has been described with respect to the specific embodiments and embodiments thereof, various modifications and combinations may be made without departing from the spirit and scope of the invention. Accordingly, the specification and drawings are to be construed as the It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A verification method characterized by including

Receiving a verification code acquisition request sent by the client;

Generating and saving a system verification code; wherein the system verification code is determined by a string of random texts;

Encoding the system verification code into n original pictures to generate k verification code pictures; wherein k and n are integers greater than or equal to 2, and k is less than or equal to n;

Sending the k verification code pictures to the client;

Receiving a verification request sent by the client, where the verification request carries a verification code input by the user according to the k verification code picture;

And determining, according to the system verification code, whether the verification code input by the user is correct.
The method of claim 1 wherein the method further comprises:

Transmitting, to the client, a script program, the script program instructing the client to monitor an operation instruction of the user for at least one verification code picture in the k verification code pictures, and in the operation instruction When the k verification code pictures are superimposed on the preset position, the information hidden in the k verification code pictures is displayed.
The method according to claim 1 or 2, wherein the encoding the system verification code into n original pictures to generate k verification code pictures, specifically:

Converting the system verification code into a secret picture;

Get n original pictures;

The secret picture is encoded into the obtained n original pictures based on the (k,n) visual cryptography method to obtain n shadow pictures;

According to any k shadow pictures in the n shadow pictures, k verification code pictures are obtained.
The method according to claim 1 or 2, wherein the k and n are equal to 2, and the system verification code is encoded into n original pictures to generate k verification code pictures, specifically:

Converting the system verification code into a secret picture;

Get 2 original images;

The secret picture and the obtained two original pictures are processed by using the least significant bit replacement algorithm to obtain two verification code pictures.
The method according to claim 4, wherein the using the least significant digit substitution algorithm to process the secret picture and the obtained two original pictures to obtain two verification code pictures, specifically:

Randomly generating a random picture S1 of the same size as the secret picture;

Performing a pixel-by-pixel exclusive-OR operation on the secret picture and the random picture S1 to obtain an exclusive-OR picture S2;

Performing RGB bit plane decomposition on the obtained two original pictures to determine a hidden carrier of the acquired two original pictures; the hidden carrier is any one of an R plane, a G plane, and a B plane;

Embedding the random picture S1 into the lowest bit of the hidden carrier of one original picture using the least significant bit substitution algorithm, and embedding the or picture S2 into the lowest bit of the hidden carrier of another original picture, obtaining the two verifications Code image.
The method according to any one of claims 2 to 5, wherein the operation instruction is specifically:

Transmitting a display position of at least one of the k verification code pictures.
A verification code server, comprising:

a receiving unit, configured to receive a verification code acquisition request sent by the client;

a processing unit, configured to generate and save a system verification code; wherein the system verification code is determined by a string of random texts; encoding the system verification code into n original pictures to generate k verification code pictures; wherein k And n is an integer greater than or equal to 2, and k is less than or equal to n;

a sending unit, configured to send the k verification code pictures to the client;

The receiving unit is further configured to receive a verification request sent by the client, where the verification request carries a verification code input by the user according to the k verification code picture;

The processing unit is further configured to determine, according to the system verification code, whether the verification code input by the user is correct.
A verification code server according to claim 7, wherein:

The sending unit is further configured to send a script program to the client, where the script program instructs the client to monitor an operation instruction of the user for the k verification code pictures, and in the operation instruction When the k verification code pictures are superimposed on the preset position, the information hidden in the k verification code pictures is displayed.
The verification code server according to claim 7 or 8, wherein the processing unit is configured to encode the system verification code into n original pictures to generate k verification code pictures, specifically:

Converting the system verification code into a secret picture;

Get n original pictures;

The secret picture is encoded into the obtained n original pictures based on the (k,n) visual cryptography method to obtain n shadow pictures;

According to any k shadow pictures in the n shadow pictures, k verification code pictures are obtained.
The verification code server according to claim 7 or 8, wherein said k and n are equal to 2, said processing unit is configured to encode said system verification code into n original pictures to generate k-picture verification Code image, specifically:

Converting the system verification code into a secret picture;

Get 2 original images;

The secret picture and the obtained two original pictures are processed by using the least significant bit replacement algorithm to obtain two verification code pictures.
The verification code server according to claim 10, wherein the secret picture and the obtained two original pictures are processed by using a least significant bit replacement algorithm to obtain two verification code pictures, specifically:

Randomly generating a random picture S1 of the same size as the secret picture;

Performing a pixel-by-pixel exclusive-OR operation on the secret picture and the random picture S1 to obtain an exclusive-OR picture S2;

Performing RGB bit plane decomposition on the obtained two original pictures to determine a hidden carrier of the acquired two original pictures; the hidden carrier is any one of an R plane, a G plane, and a B plane;

Embedding the random picture S1 into the lowest bit of the hidden carrier of one original picture using the least significant bit substitution algorithm, and embedding the or picture S2 into the lowest bit of the hidden carrier of another original picture, obtaining the two verifications Code image.
The verification code server according to any one of claims 8 to 11, wherein the operation instruction is specifically:

Transmitting a display position of at least one of the k verification code pictures.
A verification code server, comprising: a processor and a memory, wherein

a computer readable program is stored in the memory;

The processor is operative to execute the method of the above claims 1 to 6 by running a program in the memory.
A verification system, characterized in that the verification system comprises a client and a verification code server,

The client is configured to send a verification code acquisition request to the verification code server, and receive the verification code server to send the k verification code pictures; displaying the k verification code pictures; receiving an operation instruction of the user on at least one verification code picture in the k verification code pictures; when the operation instruction causes the k verification code pictures to be superimposed When the preset position is reached, the information hidden in the k verification code picture is displayed; and the verification code input by the user is received;

The verification code server is configured to receive a verification code acquisition request sent by the client, generate and save a system verification code, where the system verification code is determined by a string of random texts; and the system verification code is encoded into n originals In the picture, generating k verification code pictures; sending the k verification code pictures to the client; receiving an authentication request sent by the client, the verification request carrying a verification code input by a user; according to the system a verification code determining whether the verification code input by the user is correct; wherein k and n are integers greater than or equal to 2, and k is less than or equal to n.
The system according to claim 14, wherein the verification code server is further configured to send a script to the client, the script program instructing the client to monitor the user for the k verification code At least one operation instruction of the verification code picture in the picture, and displaying information hidden in the k verification code picture when the operation instruction causes the k verification code picture to be superimposed to the preset position.
The system according to claim 14 or 15, wherein the operation instruction is specifically a display position of moving at least one of the k verification code pictures.