WO2019178984A1

WO2019178984A1 - Account security management method and apparatus, computer device, and storage medium

Info

Publication number: WO2019178984A1
Application number: PCT/CN2018/095320
Authority: WO
Inventors: 刘阳; 冯心; 梁瑾; 张瑞光; 李俊; 黄心官; 刘文慧
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-03-22
Filing date: 2018-07-11
Publication date: 2019-09-26
Also published as: CN108427879A

Abstract

Disclosed are an account security management method and apparatus, a computer device and a storage medium. The method comprises: determining whether an account name matches a password; if the account name is successfully matched with the password, recording a first time of the current login, and acquiring a second time of the previous login with the account name; calculating a time interval between the first time and the second time, wherein if the second time is null, the time interval is infinite; and if the time interval is greater than a pre-set time interval threshold, successfully logging in to an account corresponding to the account name.

Description

Account security management method, device, computer device and storage medium

This application claims the priority of the Chinese Patent Application entitled "Account Security Management Method, Apparatus, Computer Equipment, and Storage Media" filed on March 22, 2018, the Chinese Patent Office, Application No. 2018102418848, the entire contents of which are incorporated by reference. Combined in this application.

Technical field

The present application relates to the field of account security management, and in particular to an account security management method, apparatus, computer device and storage medium.

Background technique

When logging in to some systems or websites, you need to log in to the account name and password. Only after the password and account name are successfully matched will the login be successful. For system security, it will limit the number of consecutive incorrect passwords entered within a specified time. If the password is entered incorrectly for a preset number of times, the account name will be locked, and then the account name will be unlocked according to the set method, such as common. After a specified period of time, the normal settings are automatically restored. Specifically, in the account security management, there are two methods in the prior art, as follows:

1. When the number of logins reaches the set value, the account name is locked and you cannot log in for a period of time;

2. The business system is generally created by the administrator, instead of the registration method to generate the account name. The administrator creates a password with weak or inconvenient memory. It is necessary to force the password to be changed at the initial login. In the above first mode, the account needs to be automatically unlocked after being locked, generally the timed task is set in the system, and the unlocking task is triggered within the set time point. The configuration of the timing task requires the introduction of a third-party framework in the system, and the task execution process needs to consume a large amount of system resources, which undoubtedly increases the development workload and system hardware overhead, and extends the project development cycle; the second method, the initialization Accounts, which require additional tagging, will also increase development work. Therefore, providing a new account security management method to save development workload is an urgent problem to be solved.

technical problem

The main purpose of the application is to provide an account security management method, device, computer device and storage medium without introducing a third-party time task management framework.

Technical solution

In order to achieve the above purpose of the present application, the present application provides an account security management method, including:

Determine whether the received account name and password match;

If the account name and the password match successfully, record the first time of the current login, and obtain the second time of the previous login of the account name;

Calculating a time interval between the first time and the second time; wherein, if the second time is empty, the time interval is infinity;

If the time interval is greater than the preset time interval threshold, the account corresponding to the account name is successfully logged.

Further, if the account name and the password match successfully, the first time of the current login is recorded, and after the step of obtaining the second time of the previous login of the account name, the method includes:

If the second time is empty, a forced modification password command is generated.

Further, after the step of generating a mandatory password modification command, the method includes:

Receiving the modified password and taking the first face photo of the person who changed the password;

And storing the modified password and the first face photo in the database in association with the account name.

Further, after the step of successfully logging in to the account corresponding to the account name, the method includes:

Shooting the second face photo of the current registrant;

Retrieving the first face photo corresponding to the account name in the database;

Comparing the first face photo with the second face photo;

If it is determined that the first face photo and the second face photo are face photos of the same person, all account rights of the current registrant are opened; if the first face photo and the second face photo are determined to be different The person's face photo, according to the preset rules, closes some of the current registrant's account rights.

Further, before the step of retrieving the first face photo corresponding to the account name in the database, the method includes:

Ultrasonic scanning to the shooting area and receiving reflected waves of ultrasonic waves;

Determining the contour of the object in the shooting area based on the reflected wave;

If the contour meets the preset criteria, it is determined that the currently photographed picture is a real person image, and an instruction to invoke the first human face photo is generated.

Further, after the step of calculating the time interval between the first time and the second time, the method includes:

Clear the historical data of the number of incorrect password entries.

Further, after the step of determining whether the received account name and password match, the method includes:

If the account name and password match fail, add one to the historical data of the number of password input errors;

Determining whether the historical data after the addition is greater than a preset error threshold;

If it is greater, the account name is locked.

The application also provides an account security management device, including:

a determining unit, configured to determine whether the received account name and password match;

a record obtaining unit, configured to record a first time of the current login, and a second time of obtaining the previous login of the account name, if the account name and password are successfully matched;

a calculating unit, configured to calculate a time interval between the first time and the second time; wherein, if the second time is empty, the time interval is infinity;

The login unit is configured to successfully log in to the account corresponding to the account name if the time interval is greater than a preset time interval threshold.

The application further provides a computer device comprising a memory and a processor, the memory storing computer readable instructions, the processor executing the computer readable instructions to implement the steps of any of the methods described above.

The present application also provides a computer non-transitory readable storage medium having stored thereon computer readable instructions that, when executed by a processor, implement the steps of any of the methods described above.

Beneficial effect

The account security management method, device, computer device and storage medium of the present application do not need to refer to a third-party time task management framework for the account unlocking problem, and do not need to set additional marking bits for the initial user, thereby reducing development workload and shortening development time. . The time for judging whether to release the locked state of the account is based on the login time of the user, and the time distribution of the unlocked state is relatively dispersed, and the time task management operation is not required in the background, thereby greatly reducing the overhead of system resources.

DRAWINGS

FIG. 1 is a schematic flowchart diagram of an account security management method according to an embodiment of the present application;

2 is a schematic flowchart of an account security management method according to an embodiment of the present application;

3 is a schematic flowchart of an account security management method according to an embodiment of the present application;

FIG. 4 is a schematic flowchart diagram of an account security management method according to an embodiment of the present application;

FIG. 5 is a schematic block diagram showing the structure of an account security management apparatus according to an embodiment of the present application; FIG.

6 is a schematic block diagram showing the structure of an account security management apparatus according to an embodiment of the present application;

FIG. 7 is a schematic block diagram showing the structure of an account security management apparatus according to an embodiment of the present application; FIG.

FIG. 8 is a schematic block diagram showing the structure of an account security management apparatus according to an embodiment of the present application; FIG.

FIG. 9 is a schematic block diagram showing the structure of a computer device according to an embodiment of the present application.

BEST MODE FOR CARRYING OUT THE INVENTION

Referring to FIG. 1, an embodiment of the present application provides an account security management method, including the following steps:

S1, determining whether the received account name and password match;

S2. If the account name and password are successfully matched, record the first time of the current login, and obtain the second time of the previous login of the account name;

S3. Calculate a time interval between the first time and the second time.

S4. If the time interval is greater than a preset time interval threshold, the account corresponding to the account name is successfully logged.

As described in the above step S1, the account name refers to the name content that needs to be input when logging in to the corresponding account of the system. The above password is used to verify that the account name is correct. In a system, each account is generally set with a corresponding password. In a specific embodiment, an account can be configured with multiple passwords correspondingly, and when the account is logged in with a different password, the obtained rights are different. This step S1 means that after receiving the account name and password input by the current user, the system determines whether the account name and the password match. If the matching is successful, the system can log in to the system. If the matching fails, an error message and the like are sent.

As described in the foregoing step S2, the first time is a time recorded by the system after the matching of the account name and the password, and the time may be the time when the user inputs the account name and the password and clicks the login time, or the system determines the account name and password. If the time is matched, you can set it according to the specific requirements. The second time is the time when the system logs in the previous time. The previous login refers to the operation of clicking the login after the user inputs the account name and password. If the login is successful after clicking the login, a time will be recorded. This time can be considered as the above. The second time.

As described in the above step S3, if the second time is empty, the time interval is infinity; if the second time is empty, the current login account is the first time to log in, that is, the user has not logged in before this time. The above account, therefore, the second time does not exist, so the time interval between the first time and the second time can be considered to be infinite.

As described in the above step S4, if the time interval is greater than the preset time interval threshold, the system corresponding to the account is successfully logged. That is, regardless of whether the account is locked or unlocked before the user logs in, the system will successfully log in to the system as long as the account name and password match and the time interval is greater than the preset time interval threshold. In another embodiment, if the time interval is less than or equal to the time interval threshold, if the account corresponding to the account name is in the locked state, the account cannot be successfully logged in, and if the account corresponding to the account name is not locked, the normal user will not be affected. Login.

Referring to FIG. 2, in the embodiment, if the account name and the password are successfully matched, the first time of the current login is recorded, and after the step S2 of obtaining the second time of the previous login of the account name, the method includes:

S21. If the second time is empty, generate a mandatory password modification command.

S22. Receive the modified password, and take a first face photo of the person who changed the password;

S23. Store the modified password and the first face photo in the database in association with the account name.

As described in the above step S21, if the second time is empty, the account corresponding to the account name may be an account assigned by the system administrator, and the password is generally simple or not easy to remember, and there is a risk in the later use, if the password It is relatively simple, it is easy to be cracked; if the password is not easy to remember, it is easy to forget, it is necessary to trouble the administrator to remind, etc., so the mandatory change password command is generated, the user is required to modify the password, and the user's own modified password is relative to the user. Easy to remember, you can also set a password that is more difficult. The process of forcibly changing the password is generated. The specific process of modifying the password is as follows: when searching for the second time stored in the storage location, the search result is empty, that is, the first time is not stored, and the second time is determined to be empty. Then, the page will pop up a password change interface. The interface has the option of entering the current password and the modified password, and the interface must be filled in correctly and saved, the interface for changing the password will be closed, otherwise the modification cannot be closed. Password interface. In a specific embodiment, the repaired password is not allowed to be the same as the password before the modification, and the specific execution process is: comparing the modified password with the password before the modification, if the two are the same, then issuing remind. In this embodiment, after the password is modified, the modified password and the first face photo are respectively stored in the database in association with the account name, and the password, first face photo and account name to be modified are to be modified. Establish a path for mutual search and call. Through one of them, you can find two other two. For example, after entering the account name, you can find the corresponding password and first face photo in the database according to the account name, so that you can The password entered by the user and the user's face photo are compared accordingly.

As described in the above step S22, after the completion password is modified, the first face photo of the person who modified the password (ie, the above-mentioned user) is also photographed, and the first face photo can be used for later secondary verification or authority management.

As described in the above step S23, the modified password and the first face photo are respectively stored in the database in association with the account name, so as to compare the calling password and the first face photo according to the account name.

Referring to FIG. 2, in the embodiment, after step S4 of successfully logging in to the account corresponding to the account name, the method includes:

S41. Take a photo of the second face of the current registrant;

S42: Retrieving the first face photo corresponding to the account name in the database;

S43. Compare the first face photo with the second face photo;

S44. If it is determined that the first face photo and the second face photo are face photos of the same person, open all account rights of the current registrant; if the first face photo and the second face photo are determined For the face photos of different people, part of the current registrant's account rights are closed according to the preset rules.

As described in the above steps S41 to S44, if the first face photo and the second face photo are the same person's face photo, it means that the owner corresponding to the account name logs in, and has all the rights. If the first face photo and the second face photo are not the same person's face photo, it means that the login is performed by the owner corresponding to the account name. At this time, there are two possibilities, and the first one is the user friend to log in; The second is the account is stolen. In either case, the account permissions are set at this time to protect the security of the account. In other embodiments, when restricted by the authority, the current operator may send the authorization management information to the user. If the user receives and responds to the authorized command, the user may obtain a larger authority, which may be all rights or may be The user replies to a different authorization command and gives the corresponding permission. In a specific embodiment, for example, the system is a bank automatic withdrawal system. Although the account name and password are successfully matched, because the above face matching fails, at this time, the current user's authority is to view the account balance, but cannot withdraw money, etc. . The method for comparing the first face photo and the second face photo is: inputting the first face photo into the predicted face recognition model to calculate, and obtaining the first face value; and the second face photo Input into the above-mentioned face recognition model to calculate, and obtain the second face value. If the difference between the first face value and the second face value is within the preset range, the first face photo and The second face photo is a face photo of the same person.

Referring to FIG. 3, in the embodiment, before the step S42 of retrieving the first face photo corresponding to the account name in the database, the method includes:

S421, performing ultrasonic scanning on the shooting area, and receiving a reflected wave of the ultrasonic wave;

S422. Determine an outline of an object in the shooting area according to the reflected wave;

S423. If the contour conforms to a preset standard, it is determined that the currently captured picture is a real person picture, and an instruction to invoke the first face photo is generated.

Specifically, as described in the above steps S421 to S423, specifically, the ultrasonic wave transmitting device transmits ultrasonic waves to the imaging region, and then receives the reflected waves of the ultrasonic waves, and calculates the distance between the respective reflection points and the emission points according to the reflection time of the ultrasonic waves, thereby depicting the ultrasonic waves. The shape and contour of each object in the launch area. For example, if there is a basketball in the launch area of the ultrasonic wave, the ultrasonic wave will be reflected by the basketball. Because the basketball is round, the time for the basketball to receive the ultrasonic wave varies with the distance, and the ultrasonic receiving device The time of the received reflected waves is also different, and the outline of the basketball is depicted. In this embodiment, if the currently photographed picture is a photo such as a poster, then the photo such as the poster must be flattened, and the outline is a plane, and if it is a real person, the outline is a 3d outline. That is, the subject is scanned like a B-mode ultrasound. If the result of the scan is a 3d outline similar to the human head, the second photo taken is considered to be a live-action photo to prevent others from using the photo fraud system to obtain the above account. All the permissions to improve the security of the account.

Referring to FIG. 4, in the embodiment, after the step S3 of calculating the time interval between the first time and the second time, the method includes:

S31. If the time interval is greater than a preset time interval threshold, clear historical data of the number of error input errors.

As described in the above step S31, regardless of whether the current account is in the locked state, the account is automatically set to the unlocked state, and the number of errors before the password input is cleared. At this time, if the password is correct, the login may be successful; if the password is incorrect, Then restart the recording of the number of login errors.

In this embodiment, after the step S1 of determining whether the received account name and password match, the method includes:

S11. If the account name and password match fail, add one to the historical data of the number of password input errors;

S12. Determine whether the historical data after the addition is greater than a preset error threshold.

S13. If it is greater, the account name is locked.

As described in the above-mentioned headquarters, S11 to S13, if the account name and password input at the current time do not match, the number of times the password input error is added is accumulated.

In this embodiment, after the step S3 of calculating the time interval between the first time and the second time, the method includes:

S301. If the time interval is less than or equal to a preset time interval threshold, and the account is in a locked state, receiving a preset operation action to force the unlock state.

As described in the above step S301, the specific forced unlocking state is as follows: the button for receiving the preset forced unlocking state is clicked to generate an email input box; and determining whether the content input in the input box is a preset Content (the content is the content that the user enters when creating the account); if so, the content is sent to the specified mailbox (the mailbox is also the default mailbox when the account is created); if the email is not received, the feedback is not received. (including feedback timeout), the unlock state fails; if the feedback of the above mailbox is received, it is judged whether the content of the mailbox feedback meets the preset requirement (the same is the content of the account setting, the content and the input of the input box) Generally different), if it meets the requirements, the lock state is released, otherwise the unlock state fails. The advantage of this step is: if the current operator is someone else, then he will not know the specific email sent to that mailbox, so he will not log in to the corresponding mailbox for feedback, and even if he knows which mailbox, the password of the mailbox is not necessarily Know, further improve the security of your account.

Further, before the step of “determining whether the content fed back by the mailbox meets the preset requirement”, it is determined whether the device that logs in to the mailbox is the same as the device that is currently logged in, and if the same, the unlocking state fails. That is, if at least two different devices are to be unlocked, the unlock state cannot be completed, which is intended to increase the difficulty of unlocking. In this embodiment, it can be determined whether the device that logs in the mail and the device that is currently logged in to the account belong to the same local area network, and if the device is in the same local area network, the unlocked state cannot be completed. It also increases the difficulty of unlocking.

In this embodiment, before determining whether the content input in the input box is the preset content, the geographic location of the device that logs in to the account is also determined; determining whether the geographic location is a preset designated geographic location; if yes, An instruction to "determine whether the content input in the input box is a preset content" is generated. The method for determining the location includes multiple types. If the device that is connected to the account is wirelessly connected to the network, the device can be located through GPS, wifi positioning, base station triangulation, etc.; if the device that logs in to the account is a limited connection gateway, the location of the gateway is obtained. can.

In this embodiment, the account security management method described above may be used to write an application corresponding to the foregoing method in the login program of the system, and the third-party time task management framework is not required to be developed during development, thereby reducing the workload of opening. The time for judging whether to unlock the account name is based on the login time of the user, and the time distribution of the unlock state is relatively dispersed. The system does not need to perform time task management in the background, which greatly reduces the overhead of system resources.

Referring to FIG. 5, the application further provides an account security management apparatus, including:

The determining unit 10 is configured to determine whether the received account name and password match.

The record obtaining unit 20 is configured to record the first time of the current login and the second time of the previous login of the account name if the account name and password are successfully matched;

The calculating unit 30 is configured to calculate a time interval between the first time and the second time;

The login unit 40 is configured to successfully log in to the account corresponding to the account name if the time interval is greater than a preset time interval threshold.

In the above-mentioned judging unit 10, the account name refers to the name content that needs to be input when the system corresponding account is registered. The above password is used to verify that the account name is correct. In a system, each account is generally set with a corresponding password. In a specific embodiment, an account can be configured with multiple passwords correspondingly, and when the account is logged in with a different password, the obtained rights are different. In this embodiment, after receiving the account name and password input by the current user, the system determines whether the account name and the password match. If the matching is successful, the system can log in to the system. If the matching fails, an error message and the like are sent.

In the above record obtaining unit 20, the first time is a time when the system determines that the account name and the password are matched, and the time may be the time when the user inputs the account name and the password and clicks the login time, or the system determines the account name and password. If the time is matched, you can set it according to the specific requirements. The second time is the time when the system logs in the previous time. The previous login refers to the operation of clicking the login after the user inputs the account name and password. If the login is successful after clicking the login, a time will be recorded. This time can be considered as the above. The second time.

In the calculation unit 30, if the second time is empty, the time interval is infinity; if the second time is empty, the current login account is the first login account, that is, the account is not logged in before this time. Therefore, the second time does not exist, so the time interval between the first time and the second time can be considered to be infinite.

In the above-mentioned login unit 40, if the time interval is greater than the preset time interval threshold, the system corresponding to the account is successfully registered. That is, regardless of whether the account is locked or unlocked before the user logs in, the system will successfully log in to the system as long as the account name and password match and the time interval is greater than the preset time interval threshold. In another embodiment, if the time interval is less than or equal to the time interval threshold, if the account corresponding to the account name is in the locked state, the account cannot be successfully logged in, and if the account corresponding to the account name is not locked, the normal user will not be affected. Login.

Referring to FIG. 6, in the embodiment, the account security management apparatus further includes:

The generating unit 21 is configured to generate a forced modification password command if the second time is empty.

Modifying the photographing unit 22, for receiving the modified password, and photographing the first face photo of the person who modified the password;

The association storage unit 23 is configured to store the modified password and the first face photo in the database in association with the account name.

In the generating unit 21, if the second time is empty, it indicates that the account corresponding to the account name may be an account assigned by the system administrator, and the password is generally simple or not easy to remember, and there is a risk in the later use, if the password It is relatively simple, it is easy to be cracked; if the password is not easy to remember, it is easy to forget, it is necessary to trouble the administrator to remind, etc., so the mandatory change password command is generated, the user is required to modify the password, and the user's own modified password is relative to the user. Easy to remember, you can also set a password that is more difficult. The process of forcibly changing the password is generated. The specific process of modifying the password is as follows: when searching for the second time stored in the storage location, the search result is empty, that is, the first time is not stored, and the second time is determined to be empty. Then, the page will pop up a password change interface. The interface has the option of entering the current password and the modified password, and the interface must be filled in correctly and saved, the interface for changing the password will be closed, otherwise the modification cannot be closed. Password interface. In a specific embodiment, the repaired password is not allowed to be the same as the password before the modification, and the specific execution process is: comparing the modified password with the password before the modification, if the two are the same, then issuing remind. In this embodiment, after the password is modified, the modified password and the first face photo are respectively stored in the database in association with the account name, and the password, first face photo and account name to be modified are to be modified. Establish a path for mutual search and call. Through one of them, you can find two other two. For example, after entering the account name, you can find the corresponding password and first face photo in the database according to the account name, so that you can The password entered by the user and the user's face photo are compared accordingly.

In the above-mentioned modified photographing unit 22, after the completion password is modified, the first face photo of the person who modified the password (ie, the above-mentioned user) is also photographed, and the first face photo can be used for later secondary verification or authority management. .

In the association storage unit 23, the modified password and the first face photo are respectively stored in the database in association with the account name, so as to compare the calling password with the first face photo according to the account name.

The photographing unit 41 is configured to photograph a second face photo of the current registrant;

The retrieving unit 42 is configured to retrieve the first face photo corresponding to the account name in the database;

The comparing unit 43 is configured to compare the first face photo with the second face photo;

The authority management unit 44 is configured to: if it is determined that the first face photo and the second face photo are the same person's face photo, open all account rights of the current registrant; if the first face photo is determined If the second face photo is a face photo of a different person, the partial account right of the current registrant is closed according to a preset rule.

In the above-mentioned imaging unit 41, the retrieval unit 42, the comparison unit 43, and the authority management unit 44, if the first face photo and the second face photo are the same person's face photo, it means that the owner corresponding to the account name logs in. , it has all the permissions. If the first face photo and the second face photo are not the same person's face photo, it means that the login is performed by the owner corresponding to the account name. At this time, there are two possibilities, and the first one is the user friend to log in; The second is the account is stolen. In either case, the account permissions are set at this time to protect the security of the account. In other embodiments, when restricted by the authority, the current operator may send the authorization management information to the user. If the user receives and responds to the authorized command, the user may obtain a larger authority, which may be all rights or may be The user replies to a different authorization command and gives the corresponding permission. The method for comparing the first face photo and the second face photo is: inputting the first face photo into the predicted face recognition model to calculate, and obtaining the first face value; and the second face photo Input into the above-mentioned face recognition model to calculate, and obtain the second face value. If the difference between the first face value and the second face value is within the preset range, the first face photo and The second face photo is a face photo of the same person.

Referring to FIG. 7, in the embodiment, the account security management apparatus further includes:

The ultrasonic scanning unit 421 is configured to perform ultrasonic scanning on the imaging area and receive a reflected wave of the ultrasonic wave;

a contour determining unit 422, configured to determine an outline of an object of the photographing area according to the reflected wave;

The face determining unit 423 is configured to determine that the currently captured picture is a live picture and generate an instruction to invoke the first face photo if the outline conforms to a preset standard.

In the above-described ultrasonic scanning unit 421, contour determining unit 422, and face determining unit 423, specifically, ultrasonic waves are transmitted to the imaging region by the ultrasonic transmitting device, and then reflected waves of the ultrasonic waves are received, and each reflection point and emission are calculated according to the reflection time of the ultrasonic waves. The distance between the points, in turn, depicts the shape and contour of each object in the ultrasonic emission area. For example, if there is a basketball in the emission area of the ultrasonic wave, the ultrasound will be reflected by the basketball. Because the basketball is round, the time when the basketball receives the ultrasonic wave Because of the difference in distance, the ultrasonic receiving device receives the reflected waves for different times, and thus depicts the outline of the basketball. In this embodiment, if the currently photographed picture is a photo such as a poster, then the photo such as the poster must be flattened, and the outline is a plane, and if it is a real person, the outline is a 3d outline. That is, the subject is scanned like a B-mode ultrasound. If the result of the scan is a 3d outline similar to the human head, the second photo taken is considered to be a live-action photo to prevent others from using the photo fraud system to obtain the above account. All the permissions to improve the security of the account.

Referring to FIG. 8, in an embodiment, the account security management apparatus further includes:

The clearing unit 31 is configured to clear historical data of the number of times the password is input incorrectly.

In the above clearing unit 31, regardless of whether the current account is in the locked state, the account is automatically set to the unlocked state, and the number of errors of the previous password input is cleared at the same time. If the password is correct, the login can be successful; if the password is incorrect, Then restart the recording of the number of login errors.

In an embodiment, the account security management device further includes:

The adding unit 11 is configured to: if the account name and the password match fail, add one to the historical data of the number of password input errors;

The threshold determining unit 12 is configured to determine whether the historical data after the addition is greater than a preset error threshold;

The locking unit 13 is configured to lock the account name if the historical data is greater than a preset error threshold.

In an embodiment, the account security management device further includes:

The unlocking unit 301 is configured to receive a preset operation action forcibly releasing the locked state if the time interval is less than or equal to a preset time interval threshold and the account is in a locked state.

In the above-mentioned unlocking unit 301, the specific forced unlocking state is as follows: the button for receiving the preset forced unlocking state is clicked to generate an email input box; and determining whether the content input in the input box is pre- The content (the content is the content entered by the user when the account is created); if yes, the content is sent to the specified mailbox (the mailbox is also the default mailbox when the account is established); if the mailbox is not received Feedback (including feedback timeout), the unlock state fails; if the feedback of the above mailbox is received, it is judged whether the content of the mailbox feedback meets the preset requirement (the same is the content of the account setting, the content and the input of the input box The content is generally different. If the requirements are met, the lock status is released, otherwise the unlock status fails. The advantage of this step is: if the current operator is someone else, then he will not know the specific email sent to that mailbox, so he will not log in to the corresponding mailbox for feedback, and even if he knows which mailbox, the password of the mailbox is not necessarily Know, further improve the security of your account. Further, before the step of “determining whether the content fed back by the mailbox meets the preset requirement”, it is determined whether the device that logs in to the mailbox is the same as the device that is currently logged in, and if the same, the unlocking state fails. That is, if at least two different devices are to be unlocked, the unlock state cannot be completed, which is intended to increase the difficulty of unlocking. In this embodiment, it can be determined whether the device that logs in the mail and the device that is currently logged in to the account belong to the same local area network, and if the device is in the same local area network, the unlocked state cannot be completed. It also increases the difficulty of unlocking.

The account security management device in the embodiment of the present application can write an application corresponding to the foregoing method in the login program of the system, and does not need to introduce a third-party time task management framework during development, thereby reducing the open workload. The time for judging whether to unlock the account name is based on the login time of the user, and the time distribution of the unlock state is relatively dispersed. The system does not need to perform time task management in the background, which greatly reduces the overhead of system resources.

Referring to FIG. 9, a computer device is also provided in the embodiment of the present application. The computer device may be a server, and its internal structure may be as shown in FIG. 9. The computer device includes a processor, memory, network interface, and database connected by a system bus. Among them, the computer designed processor is used to provide calculation and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The non-volatile storage medium stores an operating system, computer readable instructions, and a database. The memory provides an environment for the operation of operating systems and computer readable instructions in a non-volatile storage medium. The database of the computer device is used for data such as face photos, passwords, etc. for account security management. The network interface of the computer device is used to communicate with an external terminal via a network connection. The computer readable instructions are executed by the processor to implement an account security management method.

The step of executing the foregoing account security management method by the processor includes: determining whether the received account name and password match; if the account name and password are successfully matched, recording the first time of the current login, and acquiring the account name and logging in the previous time. a second time; calculating a time interval between the first time and the second time; wherein, if the second time is empty, the time interval is infinity; if the time interval is greater than a preset time interval If the threshold is reached, the account corresponding to the account name is successfully logged.

In an embodiment, if the account name and password are successfully matched, the first time of the current login is recorded, and the step of obtaining the second time of the previous login of the account name includes: if the second time is Empty, the processor generates a mandatory change password command.

In an embodiment, after the step of generating, by the processor, the forced password modification command, the method includes: receiving the modified password, and capturing a first face photo of the person who modified the password; and the modified password, and the A face photo is stored in the database in association with the account name.

In an embodiment, after the step of successfully logging in the account corresponding to the account name, the method includes: capturing a second face photo of the current registrant; and extracting, in the database, a location corresponding to the account name a first face photo; comparing the first face photo with the second face photo; if it is determined that the first face photo and the second face photo are the same person's face photo, open the current All account rights of the registrant; if it is determined that the first face photo and the second face photo are face photos of different people, part of the current registrant's account rights are closed according to a preset rule.

In an embodiment, before the step of the processor capturing the first face photo corresponding to the account name in the database, the method includes: performing ultrasonic scanning on the shooting area, and receiving a reflected wave of the ultrasonic wave; The contour of the object in the shooting area is determined according to the reflected wave; if the contour conforms to the preset standard, it is determined that the currently captured picture is a real person picture, and an instruction to invoke the first face photo is generated.

In an embodiment, after the step of calculating, by the processor, the time interval between the first time and the second time, the method includes: clearing historical data of the number of times the password is input incorrectly.

In an embodiment, after the step of determining, by the processor, whether the received account name and password match, the method includes: if the account name and the password match fail, adding one to the historical data of the password input error number; Whether the historical data is greater than a preset error threshold; if greater, the account name is locked.

It will be understood by those skilled in the art that the structure shown in FIG. 9 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation of the computer device to which the present application is applied.

The embodiment of the present application further provides a computer non-volatile readable storage medium having computer readable instructions stored thereon, and when the computer readable instructions are executed by the processor, implement the flow of the embodiments of the foregoing methods.

The above description is only the preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related The technical field is equally included in the scope of patent protection of the present application.

Claims

An account security management method, characterized in that it comprises:

Determine whether the received account name and password match;

If the account name and the password match successfully, record the first time of the current login, and obtain the second time of the previous login of the account name;

Calculating a time interval between the first time and the second time;

If the time interval is greater than the preset time interval threshold, the account corresponding to the account name is successfully logged.
The account security management method according to claim 1, wherein if the account name and password are successfully matched, the first time of the current login is recorded, and the step of obtaining the second time of the previous login of the account name is performed. After that, include:

If the second time is empty, a forced modification password command is generated.
The account security management method according to claim 2, wherein the step of generating a mandatory password modification command comprises:

Receiving the modified password and taking the first face photo of the person who changed the password;

And storing the modified password and the first face photo in the database in association with the account name.
The account security management method according to claim 3, wherein the step of successfully logging in to the account corresponding to the account name comprises:

Shooting the second face photo of the current registrant;

Retrieving the first face photo corresponding to the account name in the database;

Comparing the first face photo with the second face photo;

If it is determined that the first face photo and the second face photo are face photos of the same person, all account rights of the current registrant are opened; if the first face photo and the second face photo are determined to be different The person's face photo, according to the preset rules, closes some of the current registrant's account rights.
The account security management method according to claim 4, wherein the step of retrieving the first face photo corresponding to the account name in the database comprises:

Ultrasonic scanning to the shooting area and receiving reflected waves of ultrasonic waves;

Determining the contour of the object in the shooting area based on the reflected wave;

If the contour meets the preset criteria, it is determined that the currently photographed picture is a real person image, and an instruction to invoke the first human face photo is generated.
The account security management method according to claim 1, wherein the step of calculating the time interval between the first time and the second time comprises:

If the time interval is greater than a preset time interval threshold, the historical data of the number of error input passwords is cleared.
The account security management method according to claim 1, wherein the step of determining whether the received account name and password match comprises:

If the account name and password match fail, add one to the historical data of the number of password input errors;

Determining whether the historical data after the addition is greater than a preset error threshold;

If it is greater, the account name is locked.
An account security management device, comprising:

a determining unit, configured to determine whether the received account name and password match;

a record obtaining unit, configured to record a first time of the current login, and a second time of obtaining the previous login of the account name, if the account name and password are successfully matched;

a calculating unit, configured to calculate a time interval between the first time and the second time;

The login unit is configured to successfully log in to the account corresponding to the account name if the time interval is greater than a preset time interval threshold.
The account security management device according to claim 8, wherein the account security management device further comprises:

And a generating unit, configured to generate a mandatory modification password command if the second time is empty.
The account security management device according to claim 9, wherein the account security management device further comprises:

Modifying the photographing unit for receiving the modified password, and photographing the first face photo of the person who changed the password;

And an associated storage unit, configured to store the modified password and the first face photo in the database in association with the account name.
The account security management device according to claim 10, wherein the account security management device further comprises:

a photographing unit, configured to photograph a second face of the current registrant;

a retrieving unit, configured to retrieve, in the database, the first face photo corresponding to the account name;

a comparing unit, configured to compare the first face photo with the second face photo;

a rights management unit, configured to: if it is determined that the first face photo and the second face photo are face photos of the same person, open all account rights of the current registrant; if the first face photo and the first face are determined If the two-face photo is a face photo of a different person, the partial account authority of the current registrant is closed according to a preset rule.
The account security management device according to claim 11, wherein the account security management device further comprises:

An ultrasonic scanning unit for performing ultrasonic scanning on the shooting area and receiving reflected waves of the ultrasonic waves;

a contour determining unit configured to determine an outline of an object of the photographing area according to the reflected wave;

The face determination unit is configured to determine that the currently captured picture is a live picture and generate an instruction to invoke the first face photo if the outline conforms to a preset standard.
The account security management device according to claim 8, wherein the account security management device further comprises:

The clearing unit is configured to clear historical data of the number of incorrect password input times if the time interval is greater than a preset time interval threshold.
The account security management device according to claim 8, wherein the account security management device further comprises:

Adding a unit, if the account name and password fail to match, adding one to the historical data of the number of password input errors;

a threshold value determining unit, configured to determine whether the historical data after the addition is greater than a preset error threshold;

And a locking unit, configured to: if the historical data is greater than a preset error threshold, lock the account name.
A computer device comprising a memory and a processor, the memory storing computer readable instructions, wherein the processor implements an account security management method when the computer readable instructions are executed, the account security management method comprising:

Determine whether the received account name and password match;

If the account name and the password match successfully, record the first time of the current login, and obtain the second time of the previous login of the account name;

Calculating a time interval between the first time and the second time;

If the time interval is greater than the preset time interval threshold, the account corresponding to the account name is successfully logged.
The computer device according to claim 15, wherein if the account name and the password match successfully, the first time of the current login is recorded, and after the step of obtaining the second time of the previous login of the account name, include:

If the second time is empty, a forced modification password command is generated.
The computer device according to claim 16, wherein the step of generating a mandatory password modification command comprises:

Receiving the modified password and taking the first face photo of the person who changed the password;

And storing the modified password and the first face photo in the database in association with the account name.
The computer device according to claim 17, wherein the step of successfully logging in to the account corresponding to the account name comprises:

Shooting the second face photo of the current registrant;

Retrieving the first face photo corresponding to the account name in the database;

Comparing the first face photo with the second face photo;

If it is determined that the first face photo and the second face photo are face photos of the same person, all account rights of the current registrant are opened; if the first face photo and the second face photo are determined to be different The person's face photo, according to the preset rules, closes some of the current registrant's account rights.
A computer non-readable readable storage medium having stored thereon computer readable instructions, wherein the computer readable instructions are executed by a processor to implement an account security management method, the account security management method comprising:

Determine whether the received account name and password match;

If the account name and the password match successfully, record the first time of the current login, and obtain the second time of the previous login of the account name;

Calculating a time interval between the first time and the second time;

If the time interval is greater than the preset time interval threshold, the account corresponding to the account name is successfully logged.
The computer non-volatile readable storage medium according to claim 19, wherein if the account name and password match successfully, the first time of the current login is recorded, and the previous login is obtained by acquiring the account name. After the second time step, include:

If the second time is empty, a forced modification password command is generated.