WO2021012552A1 - Login processing method and related device - Google Patents

Abstract

Disclosed are a login processing method and a related device. The method is applied to the technical field of passwords, and comprises: generating, on the basis of a specified information digest algorithm, digest information for password information; carrying out the hash processing of the digest information by means of a random number to obtain a hash value corresponding to the digest information; and performing encryption processing on the hash value and account information, sending a first verification request, which comprises the above-mentioned random number, the encrypted hash value and the encrypted account information, to a server, and performing login processing on a user when first indication information indicating that the verification is passed is received. By means of the present application, on the one hand, hash calculation is performed on the digest information corresponding to password information by means of a random number, such that the randomness of the ciphertext corresponding to password information is ensured, and the security of the password information is improved; on the other hand, password information and user information can be encrypted at the same time, and the security of the user information during a transmission process is further improved.

Description

Login processing method and related equipment

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on July 25, 2019, the application number is 201910679227.6, and the application name is "a login processing method and related equipment", the entire content of which is incorporated into this application by reference in.

Technical field

This application relates to the field of computer technology, in particular to a login processing method and related equipment.

Background technique

At present, more and more attention is paid to user information. When a user logs in to a service platform, the user information input by the user needs to be transmitted to the back end through the front end for verification. When the back end verification passes, the user is logged in. Among them, in the transmission process of user information, if the user information is not protected enough, it is easy to cause the user information to be illegally obtained or illegally tampered with, which seriously affects the security of user information and the accuracy of back-end verification results.

Therefore, how to protect the user information input by the user during the user login process has become an urgent problem to be solved.

Summary of the invention

The embodiments of the present application provide a login processing method and related equipment, which help ensure the security of user information during the transmission process.

In the first aspect, an embodiment of the present application provides a login processing method, the method is applied to a client, and the method includes:

Receiving a login request carrying user information, where the user information includes password information and account information entered by the user;

Generating digest information for the password information based on a designated information digest algorithm;

Generating a random number according to a preset rule, and hashing the digest information by using the random number to obtain a hash value corresponding to the digest information;

Performing encryption processing on the hash value and the account information, and generating a first verification request including the random number, the encrypted hash value, and the encrypted account information;

Sending the first verification request to the server, so that the server verifies the user based on the first verification request, and returns the first indication information that the verification passed to the client after the verification is passed;

When receiving the first indication information that the authentication is passed, log in to the user, where the first indication information is used to indicate that both the password information and the account information of the user pass the authentication.

In the second aspect, the embodiments of the present application provide another login processing method, which is applied to a server, and the method includes:

Receive a first verification request from a client, the first verification request carries a random number, a hash value corresponding to the encrypted digest information, and encrypted account information, the digest information is based on the client The specified information digest algorithm is obtained by data processing the password information entered by the user;

Performing decryption processing on the encrypted hash value and the account information based on the pre-configured key to obtain the plaintext information corresponding to the account information and the decrypted hash value;

If it is detected that there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed;

Acquiring target digest sample information corresponding to target password sample information stored in association with the target account sample information, where the target digest sample information is obtained by data processing on the password sample information based on the specified information digest algorithm;

Perform a hash calculation on the target digest sample information based on the random number to obtain the sample hash value corresponding to the target digest sample information. If it is detected that the hash value matches the sample hash value, it is determined The verification of the password information is passed;

The first indication information that has passed the verification is returned to the client, so that the client can log in the user based on the indication information, and the indication information is used to indicate the user’s password information and the Account information is verified.

In a third aspect, an embodiment of the present application provides a login processing device, which includes a module for executing the method of the first aspect.

In a fourth aspect, an embodiment of the present application provides another login processing device, and the login processing device includes a module for executing the method of the second aspect.

In a fifth aspect, an embodiment of the present application provides a client. The client includes an input device, an output device, a processor, and a memory, and the input device, output device, processor, and memory are connected to each other. Wherein, the memory is used to store a computer program that supports the server to execute the above method, the computer program includes program instructions, and the processor is configured to invoke the program instructions to execute the method of the above first aspect.

In a sixth aspect, an embodiment of the present application provides a server. The server includes a processor, a network interface, and a memory. The processor, the network interface, and the memory are connected to each other, wherein the network interface is controlled by the processor. For sending and receiving messages, the memory is used to store a computer program that supports the server to execute the above method, the computer program includes program instructions, and the processor is configured to call the program instructions to execute the method of the second aspect described above.

In a seventh aspect, embodiments of the present application provide a computer non-volatile readable storage medium, the computer non-volatile readable storage medium stores a computer program, the computer program includes program instructions, and the program instructions When executed by a processor, the processor is caused to execute the method of the first aspect.

In the embodiments of this application, on the one hand, a random number is used to hash the digest information corresponding to the password information, which ensures the randomness of the cipher text corresponding to the password information, which is beneficial to improve the security of the password information; Encryption of information and user information at the same time helps to further improve the security of user information during transmission.

Description of the drawings

FIG. 1 is a schematic structural diagram of a login processing system provided by an embodiment of the present application;

2 is a schematic flowchart of a login processing method provided by an embodiment of the present application;

FIG. 3 is a schematic flowchart of another login processing method provided by an embodiment of the present application;

4 is a schematic flowchart of another login processing method provided by an embodiment of the present application;

FIG. 5 is a schematic diagram of the interaction process of a login processing method provided by an embodiment of the present application;

FIG. 6 is a schematic block diagram of a login processing apparatus provided by an embodiment of the present application;

FIG. 7 is a schematic block diagram of a client provided by an embodiment of the present application;

FIG. 8 is a schematic block diagram of another login processing apparatus provided by an embodiment of the present application;

Fig. 9 is a schematic block diagram of a server provided by an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of them. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

The login processing method described in the embodiment of the present application involves a client that can provide login access for users and a server that provides login services. Please refer to Fig. 1, which is a schematic structural diagram of a login processing system applicable to the embodiment of the present application. As shown in FIG. 1, the login processing system may include a client 101 and a server 102. Wherein, the server may refer to a server in a server group composed of multiple servers for providing login-related services such as login processing. The client may be a smart terminal in which an application requiring login processing or a website that can open the application is pre-installed in the smart terminal. The client may also be the application itself, which is not specifically limited in this application. Exemplarily, the application may be an application corresponding to the log platform.

In one embodiment, the client 101 in the login processing system may receive a login request carrying user information, and the user information includes password information and account information input by the user. Further, the client 101 may generate digest information for the password information based on a specified information digest algorithm, generate a random number according to a preset rule, and hash the digest information through the random number to obtain the hash value corresponding to the digest information . Further, the client 101 may encrypt the hash value and account information, generate a first verification request including the random number, the encrypted hash value, and the encrypted account information, and perform the first verification The request is sent to the server 102.

Further, after the server 102 receives the above-mentioned first verification request from the client 101, it may decrypt the encrypted hash value and account information based on the pre-configured key to obtain the plaintext information corresponding to the account information and decrypt it. After the hash value. Further, if the server 102 detects that there is target account sample information matching the plaintext information in the database, it determines that the verification of the account information is passed, and obtains the target summary sample information corresponding to the target password sample information stored in association with the target account sample information . Further, the server 102 may perform a hash calculation on the target digest sample information based on the aforementioned random number to obtain the sample hash value corresponding to the target digest sample information, and if it is detected that the hash value matches the sample hash value, it is determined to match the password information After the verification is passed, the first indication information that the verification passed is returned to the client, and the first indication information is used to indicate that the password information and account information of the user are both verified.

Further, after the client 101 receives the instruction information, it may perform login processing based on the user. In this way, on the one hand, a random number is used to hash the digest information corresponding to the password information, which ensures the randomness of the password information corresponding to the cipher text, which is beneficial to improve the security of the password information; Encrypting user information at the same time helps to further improve the security of user information during transmission.

Referring to Figure 2, Figure 2 is a schematic flowchart of a login processing method provided by an embodiment of the present application. The method is applied to the client and can be executed by the client. As shown in the figure, the login processing method may include:

201: Receive a login request carrying user information, where the user information includes password information and account information entered by the user.

202: Generate digest information for the password information based on the specified information digest algorithm. Among them, the designated information digest algorithm may include a message digest algorithm (Message-Digest Algorithm 5, MD5) or a cyclic redundancy check algorithm (Cyclic Redundancy Check, CRC), etc., and may also include other information digest algorithms. There is no specific limitation.

Among them, a typical application of MD5 is to generate a message digest (Message-Digest) for a piece of information (Message) to prevent tampering. Specifically, MD5 has been widely used to determine the reliability of file transmission. For example, the sending terminal provides an MD5 checksum in advance. After the receiving terminal receives the file, it uses the MD5 algorithm to calculate the MD5 checksum of the received file, and then by checking whether the two checksums are consistent, the received file can be judged Whether there is an error. Even if you make a small change in the original text (such as replacing d with c), its MD5 checksum will change dramatically.

Among them, the cyclic redundancy check CRC is a hash function that generates a short fixed-digit check code based on data such as network data packets or computer files. It can be used to detect or verify data transmission or storage. error. The generated numbers are calculated and appended to the data before transmission or storage, and then the receiver checks to determine whether the data has changed. That is, if the contents of two files are exactly the same, the CRCs of the two files must be the same. Therefore, it is possible to determine whether the specific contents of the two files are the same by comparing whether the CRCs of the two files are the same.

In one embodiment, the above-mentioned designated information digest algorithm may be selected from the information digest algorithm MD5 and cyclic redundancy check algorithm (CRC) preset by the user according to his own needs, or may be a system default setting. In one embodiment, when the specified information digest algorithm has been predetermined, the user can adjust the specified information digest algorithm according to his own needs. For example, the predetermined specified information digest algorithm is MD5, and the subsequent user can follow his own It is required to change the specified information digest algorithm to CRC.

In one embodiment, when the designated message digest algorithm is the cyclic redundancy check algorithm CRC, the server may generate digest information for the password information based on the cyclic redundancy check algorithm CRC; or, when the designated message digest algorithm is the message digest algorithm MD5 , The server can generate digest information for the password information based on MD5. It can be seen that the above-mentioned summary information includes the summary information generated for the password information based on the cyclic redundancy check algorithm CRC or the summary information generated for the password information based on the information digest algorithm MD5.

203: Generate a random number according to a preset rule, and hash the digest information through the random number to obtain a hash value corresponding to the digest information.

Wherein, the preset rule indicates the value corresponding to the random number generated. In one embodiment, the client may hash the digest information by using random numbers to obtain the hash value corresponding to the digest information. Using random numbers for hashing calculations, the same digest information will not appear after the hashing results are the same, ensuring the randomness of the obtained hash values. Among them, the hash processing of the digest information can be regarded as the encryption process of the password information, and the hash value after the hash processing can be regarded as the cipher text corresponding to the password information. Therefore, the random number is used for the hash calculation. When the same password is encrypted, the result is the same, which ensures the randomness of the ciphertext, and accordingly, improves the security of the password information.

In one embodiment, assuming that the random number is N, the summary information obtained in step 202 is an array, from a to z, 0 to 9, A to Z, a total of 62 characters, that is, index 0 in the array represents a, 1 Represents b, and so on. The server hashes the digest information through random numbers, and the specific process of obtaining the hash value corresponding to the digest information is as follows: The server divides the digest information into groups of 8 bits, and takes 4 groups in total (that is, only 32 characters). Further, the server processes each group, first converts the 8 bits of each group to hexadecimal, and performs bit-AND operation with 0x3FFFFFFF after the conversion to obtain the value A.

Further, the server can use A to do N (random number) processing times, and each time use A and 0x0000003D to perform bitwise AND operation to obtain a number (less than 62), use this number as an index to fetch the characters in the array to obtain character B, and at the same time Shift A to the right by 5 bits to generate a new A, and the new A(A) is used as a new round of processing to prevent the same A from being processed N times with the same result. Then finally N (random number) different Bs will be generated, and N B combinations are defined as C.

Furthermore, 4 groups of C will be generated in the end, and the server will combine 4 groups of C into D as the final hash value.

It can be seen that the advantage of using random numbers to process digest information is: the digest value generated by the same password is the same, so brute force cracking (collision method) can be used, which can be collided in a certain time, and the success of collision is only time And the question of probability. Therefore, the digest must be hashed again. The purpose is that even if the same password is hashed with a random number after generating the same digest information, the result must be different. Can improve the security of the password.

204: Perform encryption processing on the hash value and account information, and generate a first verification request including the random number, the encrypted hash value, and the encrypted account information.

In one embodiment, the server may use a preset encryption algorithm to encrypt the hash value and account information, and generate a first verification request including the encrypted hash value, encrypted account information, and the aforementioned random number . The preset encryption algorithm may include a symmetric encryption algorithm or an asymmetric encryption algorithm, which is not specifically limited in this application.

205: Send the first verification request to the server, so that the server verifies the user based on the first verification request, and returns the first indication information that the verification is passed to the client after the verification is passed.

206: When receiving the first indication information that the verification is passed, perform a login process on the user, where the first indication information is used to indicate that the password information and account information of the user are both verified.

The server may send the first verification request generated in step 204 to the server. After receiving the first verification request from the client, the server may decrypt the encrypted hash value and account information based on the pre-configured key. Obtain the plaintext information corresponding to the account information and the decrypted hash value. Further, if the server detects that there is target account sample information matching the plaintext information in the database, it determines that the verification of the account information is passed, and obtains the target summary sample information corresponding to the target password sample information stored in association with the target account sample information. Further, the server may perform a hash calculation on the target digest sample information based on the above random number to obtain the sample hash value corresponding to the target digest sample information. If the hash value matches the sample hash value, it determines the password information After the verification is passed, the first instruction information indicating that the verification passed is returned to the client, and the first instruction information is used to indicate that the password information and account information of the user are both verified.

Further, after the client receives the instruction information, it can perform login processing based on the account information and password information input by the user, so as to realize the login of the account corresponding to the account information.

In the embodiment of this application, on the one hand, the client uses random numbers to hash the digest information corresponding to the password information, which ensures the randomness of the cipher text corresponding to the password information, which is beneficial to improve the security of the password information; The password information and user information can be encrypted at the same time, which is beneficial to further improve the security of user information during transmission.

Referring to Figure 3, Figure 3 is a schematic flowchart of another login processing method provided by an embodiment of the present application. The method is applied to the client and can be executed by the client. As shown in the figure, the login processing method may include:

301: Receive a login request carrying user information, where the user information includes password information and account information entered by the user. For the specific implementation of step 301, reference may be made to the related description of step 201 in the foregoing embodiment, which is not repeated here.

302: The cyclic redundancy check algorithm CRC is determined from the preset information digest algorithm MD5 and the cyclic redundancy check algorithm CRC to determine the specified information digest algorithm, and the first cipher information is generated based on the cyclic redundancy check algorithm CRC. Summary information.

Among them, the reliability of the information digest algorithm MD5 is greater than that of the cyclic redundancy check algorithm CRC, that is, if the CRCs of the two files are different, it can be proved that the contents of the two files are definitely different. However, if the CRCs of the two files are the same , The contents of the two files are not necessarily the same. But CRC only occupies 2 bytes, while MD5 occupies 16 bytes. Therefore, the efficiency will be higher when CRC is used to generate summary information. In summary, when the application performs step 302, the cyclic redundancy check algorithm CRC may be selected as the designated information digest algorithm first, and the first digest information for the cryptographic information is generated based on the cyclic redundancy check algorithm CRC, thereby improving data Processing efficiency.

303: Generate a random number according to a preset rule, and hash the first digest information through the random number to obtain a hash value corresponding to the first digest information.

304: Perform encryption processing on the hash value and account information, and generate a first verification request that includes the random number, the hash value after encryption, and the account information after encryption.

305: Send the first verification request to the server, so that the server verifies the user based on the first verification request, and returns the first indication information that the verification is passed to the client after the verification is passed.

306: After receiving the first indication information that has passed the verification, if it is detected that the first indication information indicates that the first summary information matches the target summary sample information corresponding to the password sample information pre-stored in the database by the user, based on the information summary The algorithm MD5 generates the second digest information for the password information, and hashes the second digest information according to the random number to obtain the hash value corresponding to the second digest information.

307: Perform encryption processing on the hash value corresponding to the second digest information, generate a second verification request including the hash value corresponding to the encrypted second digest information, and send the second verification request to the server so that the server can base After the encrypted second digest information corresponds to the hash value verification, after the password information input by the user matches the password sample information stored in the database by the user in advance, the third indication information that the verification passed is returned to the client.

308: When the third instruction information is received, perform login processing on the user.

In one embodiment, after the cyclic redundancy check algorithm CRC is used to generate the first summary information corresponding to the password information, the first summary information corresponding to the password information may be generated first based on the CRC, and the subsequent steps are performed based on the first summary information 303～305. When the server receives the first verification request, it can

The encrypted hash value and account information are decrypted based on the pre-configured key. If the server detects that there is target account sample information in the database that matches the plaintext information, it will determine that the account information is verified and obtain Target summary sample information corresponding to the target password sample information stored in association with the target account sample information. Further, the server 102 may perform a hash calculation on the target digest sample information based on the above random number to obtain the sample hash value corresponding to the target digest sample information. If it is detected that the hash value and the sample hash value do not match, it determines that the password is not matched. If the verification of the information fails, the second indication information indicating that the verification failed may be returned to the client. The second indication information is used to indicate that the password information input by the user does not match the password sample information pre-stored by the user in the database.

Further, after the client receives the second indication information returned by the server after the user authentication fails,

If it is detected that the second indication information indicates that the password information input by the user does not match the password sample information pre-stored by the user in the database, prompt information is output, and the prompt information is used to prompt the user that the password is entered incorrectly.

It is understandable that the reliability of the information digest algorithm MD5 is greater than that of the cyclic redundancy check algorithm CRC, that is, if the CRC of the two files are different, it can be proved that the content of the two files must be different, but the CRC only accounts for two Bytes, while MD5 takes 16 bytes. Correspondingly, in step 302, the cyclic redundancy check algorithm CRC is firstly determined from the preset message digest algorithm MD5 and the cyclic redundancy check algorithm CRC to determine the specified message digest algorithm, and based on the cyclic redundancy check algorithm CRC, the password The first summary information of the information, and the subsequent steps 303 to 305 are executed based on the first summary information. When the server verifies the password information, it is also based on the hash value corresponding to the first digest information. Therefore, if the hash value corresponding to the first digest information matches the sample corresponding to the pre-stored target digest sample information in the database, If the desired value does not match, it can be directly determined that the password information entered by the user does not match the password sample information pre-stored by the user in the database. In this way, since the CRC occupies fewer bytes, the data processing efficiency can be improved while ensuring the security of the password information.

In one embodiment, when the server determines that the user’s account information is passed, if the server verifies based on the hash value corresponding to the first digest information, it determines that the hash value corresponding to the first digest information is the same as the one in the database. The sample hash value corresponding to the stored target digest sample information matches, and the first indication information that has passed the verification can be sent to the client. The first indication information is used to indicate that the first digest information and the user's pre-stored password sample information in the database The corresponding target summary sample information matches.

Further, after receiving the first indication information, the client may generate second digest information for the password information based on the message digest algorithm MD5, and hash the second digest information according to the random number to obtain the second digest information corresponding Step 307 is executed to send a second verification request including the hash value corresponding to the encrypted second digest information to the server. Based on the second verification request, the server may compare the hash value corresponding to the second summary information with the previously determined sample hash value corresponding to the target summary sample information, and if the comparison obtains the hash value corresponding to the second summary information If the sample hash value corresponding to the above-mentioned target summary sample information matches, the verified third indication information can be returned to the client. The third indication information is used to indicate the second summary information and the user's pre-stored password sample in the database The target summary sample information corresponding to the information matches.

Further, the client may perform login processing on the user when receiving the third instruction information. In this way, it is equivalent to first filtering out different password information through CRC, and then using MD5 for further verification only for password information with the same hash value corresponding to CRC, which is equivalent to a comprehensive use of two information digest algorithms. The advantage is that it can not only improve the verification efficiency of password information, but also ensure the reliability of verification.

In the embodiments of the present application, the client can comprehensively utilize the advantages of the two information digest algorithms, CRC and MD5, which can not only improve the verification efficiency of password information, but also ensure the reliability of verification.

Referring to Figure 4, Figure 4 is a schematic flowchart of another login processing method provided by an embodiment of the present application. The method may be executed by a server. As shown in the figure, the login processing method may include:

401: Receive a first verification request from the client. The first verification request carries a random number, a hash value corresponding to the encrypted digest information, and encrypted account information. The digest information is based on the client's specified information The digest algorithm is obtained by data processing the password information entered by the user.

402: Decrypt the encrypted hash value and account information based on the pre-configured key to obtain the plaintext information corresponding to the account information and the decrypted hash value.

In one embodiment, the keys required for server decryption are all set uniformly and stored in the designated area after the setting is completed. Any encrypted hash value and account information sent by the client can be decrypted using the unified key. In one embodiment, after the server receives the first verification request, it can obtain a preset key from the designated area, and use the key to encrypt the hash value corresponding to the encrypted digest information and the encrypted The account information is decrypted.

403: If it is detected that there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed, and the target summary sample information corresponding to the target password sample information stored in association with the target account sample information is obtained. The digest sample information is obtained by data processing of the password sample information based on the specified information digest algorithm.

In one embodiment, on the server side, each user account may correspond to a storage area, and the storage area is associated with the account sample information of each user account and the summary sample information corresponding to the password sample information, and each storage area is A unique account ID is added.

In an embodiment, the server may find the storage area uniquely corresponding to the account identification from at least one preset storage area based on the account identification in the account information, and obtain the pre-stored target of the user in the storage area Account sample information, and then determine whether the pre-stored target account sample information and the plaintext information corresponding to the account information match, if they match, continue to obtain the pre-stored target summary corresponding to the user’s target password sample information from the storage area Sample information. In this way, one storage area corresponds to one user, which can improve the efficiency of querying user account information and password information.

Among them, the above-mentioned target summary sample information is obtained by performing data processing on the password sample information based on a specified information digest algorithm. In one embodiment, the above-mentioned designated information digest algorithm may include the information digest algorithm MD5 or the cyclic redundancy check algorithm CRC, and the first digest generated based on the cyclic redundancy check algorithm CRC for the target password sample information is pre-stored in the database. The sample sub-information and the second digest sample sub-information generated based on the information digest algorithm MD5 for the target password information.

In one embodiment, if the server detects that there is target account sample information that matches the plaintext information in the database, it determines that the verification of the account information is passed, and obtains the target password sample information stored in association with the target account sample information from the first The one summary sample sub-information and the second summary sample sub-information select the target summary sample information matching the specified information summary algorithm.

Exemplarily, if the specified information digest algorithm is the information digest algorithm MD5, then the server determines the second digest sample sub-information as the target digest sample information corresponding to the target password sample information; if the specified information digest algorithm is the cyclic redundancy check algorithm CRC, then the server determines the first digest sample sub-information as the target digest sample information corresponding to the target password sample information.

404: Perform a hash calculation on the target digest sample information based on the random number to obtain a sample hash value corresponding to the target digest sample information. If a match between the hash value and the sample hash value is detected, it is determined that the verification of the password information is passed. Wherein, how to use random numbers to hash the target summary sample information can refer to the related description of step 203 in the foregoing embodiment, which will not be repeated here.

In one embodiment, after the server obtains the sample hash value corresponding to the target summary sample information, the sample hash value can be compared with the hash value for similarity, if the comparison shows that the similarity between the two is greater than or equal to the preset similarity The degree threshold is determined to pass the verification of the password information. The random number is used to hash the target digest sample information, so that the obtained sample hash value has randomness, is not easy to be tampered with, and can improve the accuracy of password information verification.

405: Return the first indication information that the authentication is passed to the client, so that the client can log in to the user based on the indication information, where the first indication information is used to indicate that the password information and account information of the user have passed the authentication.

In one embodiment, after the server determines that the user’s password information and account information have been verified, it may return to the client the first indication that the authentication is passed, and when the client receives the first indication, it may follow the user’s input Account information and password information for login processing.

In one embodiment, after the server obtains the sample hash value corresponding to the target digest sample information, if it detects that the hash value does not match the sample hash value, it can determine that the password information is not verified, and send the first sample to the client. Two indication information, the second indication information is used to indicate that the password information input by the user does not match the password sample information pre-stored by the user in the database.

In one embodiment, the digest information (hereinafter referred to as the first digest information) corresponding to the encrypted hash value carried in the first verification request is obtained based on the cyclic redundancy check algorithm CRC. In this case, after the server receives the first verification request and determines that the user’s account information is passed based on the first verification request, if it detects that the hash value matches the sample hash value, it determines the verification of the password information Pass, and send first instruction information to the server. The first instruction information also indicates that the first summary information matches the target summary sample information corresponding to the password sample information pre-stored by the user in the database.

Further, since the reliability of the first digest information generated by the cyclic redundancy check algorithm CRC is low, the verification of the password information input by the user can be further verified in combination with the information digest algorithm. In this case, after the client receives the first indication information for indicating that the first digest information matches the target digest sample information corresponding to the password sample information stored in the database in advance by the user, the client can generate the corresponding password based on the information digest algorithm MD5 The second digest information of the information, and hash the second digest information according to the random number to obtain the hash value corresponding to the second digest information. Further, the client may perform encryption processing on the hash value corresponding to the second digest information, generate a second verification request including the hash value corresponding to the encrypted second digest information, and send the second verification request to the server. Further, after receiving the second verification request, the server can decrypt the hash value corresponding to the encrypted second digest information to obtain the hash value corresponding to the second digest information, and obtain the MD5 based on the information digest algorithm in advance. The target summary sample information obtained by performing data processing on the target password sample information is to obtain the aforementioned second summary sample sub-information.

Further, the server performs a hash calculation on the second digest sample sub-information based on the random number to obtain the sample hash value corresponding to the second digest sample sub-information, if it is detected that the hash value corresponds to the second digest sample sub-information If the hash value of the sample matches, it is determined that the verification of the password information is passed, and the third instruction information is sent to the client. When the client receives the third instruction information, the user is logged in.

In this embodiment of the application, the server uses random numbers to hash the target summary sample information, so that the obtained sample hash value is random, not easy to be tampered with, and can improve the accuracy of password information verification.

In an embodiment, please refer to FIG. 5, which is an interactive schematic diagram of a login processing method proposed in an embodiment of the present application. The method includes the following steps:

501: The client receives a login request carrying user information, where the user information includes password information and account information entered by the user.

502: The client generates digest information for the password information based on the specified information digest algorithm, generates a random number according to a preset rule, and hashes the digest information through the random number to obtain a hash value corresponding to the digest information.

503: The client encrypts the hash value and account information, generates a first verification request including the random number, the encrypted hash value, and the encrypted account information, and sends the first verification request to the server. For the specific implementation manners of step 501 to step 502, reference may be made to the related description of step 201 to step 205 in the foregoing embodiment, which will not be repeated here.

504: The server decrypts the encrypted hash value and account information based on the pre-configured key, and obtains the plaintext information corresponding to the account information and the decrypted hash value. If it detects that there is a matching plaintext information in the database The target account sample information confirms that the verification of the account information is passed.

505: The server obtains the target digest sample information corresponding to the target password sample information stored in association with the target account sample information, and performs a hash calculation on the target digest sample information based on the above random number to obtain the sample hash value corresponding to the target digest sample information , If it is detected that the hash value matches the sample hash value, it is determined that the verification of the password information is passed.

506: The server returns the first indication information that the verification is passed to the client. For the specific implementation manners of step 504 to step 505, reference may be made to the related description of step 401 to step 405 in the foregoing embodiment, which will not be repeated here.

507: The client performs login processing on the user. In an embodiment, after the client receives the first instruction information from the server, it may perform login processing based on the user's account information and password information.

The embodiment of the present application also provides a login processing device. The device includes a module for executing the method described in FIG. 2 or FIG. 3, and is configured on the client. Specifically, refer to FIG. 6, which is a schematic block diagram of a login processing apparatus provided by an embodiment of the present application. The login processing device of this embodiment includes:

The input module 10 is configured to receive a login request carrying user information, the user information including password information and account information entered by the user;

The processing module 11 is configured to generate digest information for the password information based on a specified information digest algorithm, generate a random number according to a preset rule, and hash the digest information by the random number to obtain the digest information Corresponding to the hash value, encrypting the hash value and the account information, and generating a first verification request including the random number, the encrypted hash value, and the encrypted account information;

The output module 12 is configured to send the first verification request to the server, so that the server verifies the user based on the first verification request, and returns the verified first to the client after the verification is passed. Instruction information

The processing module 11 is further configured to perform login processing on the user when the input module 10 receives the first indication information that the authentication is passed, and the first indication information is used to indicate the password information of the user and the Account information is verified.

In an embodiment, the specified information digest algorithm includes an information digest algorithm MD5 or a cyclic redundancy check algorithm CRC, and the digest information includes digest information generated for the cryptographic information based on the cyclic redundancy check algorithm CRC Or based on the digest information generated by the information digest algorithm MD5 for the password information.

In one embodiment, the processing module 11 is specifically configured to determine the cyclic redundancy check algorithm CRC as the designated information digest algorithm from the preset information digest algorithm MD5 and the cyclic redundancy check algorithm CRC; The cyclic redundancy check algorithm CRC generates first summary information for the cryptographic information.

In one embodiment, the summary information is the first summary information, and the processing module 11 is further configured to receive second indication information returned by the server after failing to verify the user; if the second information is detected If the instruction information indicates that the password information input by the user does not match the password sample information pre-stored in the database by the user, prompt information is output through the output module 12, and the prompt information is used to prompt the user to input the password error.

In one embodiment, the summary information is the first summary information, and the processing module 11 is further configured to: after the input module 10 receives the first indication information that the verification is passed, if the first indication information is detected An indication information indicates that the first summary information matches the target summary sample information corresponding to the password sample information pre-stored in the database by the user, and the second summary information for the password information is generated based on the information digest algorithm MD5 , And hash the second digest information according to the random number to obtain the hash value corresponding to the second digest information; perform encryption processing on the hash value corresponding to the second digest information to generate The encrypted second digest information corresponds to the second verification request of the hash value, and the second verification request is sent to the server through the output module 12, so that the server can base on the encrypted second verification request. The second digest information corresponds to the hash value verification, and after the password information entered by the user matches the password sample information pre-stored in the database by the user, return the third indication information that the verification passed to the client;

When the third instruction information is received through the input module 10, a step of login processing is performed on the user.

It should be noted that the functions of the functional modules of the login processing apparatus described in the embodiment of the present application can be specifically implemented according to the method in the method embodiment described in FIG. 2 or FIG. 3, and the specific implementation process may refer to FIG. 2 or FIG. The relevant description of the method embodiment of 3 will not be repeated here.

Refer to FIG. 7, which is a schematic block diagram of a client provided in an embodiment of the present application. As shown in the figure, the client in this embodiment may include: one or more processors 20; one or more input devices 21, one or more output devices 22, and a memory 23. The aforementioned processor 20, input device 21, output device 22, and memory 23 are connected by a bus. The memory 23 is configured to store a computer program including program instructions, and the processor 20 is configured to execute the program instructions stored in the memory 23. The processor 20 is configured to call the program instructions to execute: receive a login request carrying user information, the user information includes password information and account information entered by the user; and generate information based on a specified information digest algorithm for the password information The summary information; generate random numbers according to preset rules, and hash the summary information through the random numbers to obtain the hash value corresponding to the summary information; compare the hash value and the account information Perform encryption processing to generate a first verification request including the random number, the encrypted hash value, and the encrypted account information; send the first verification request to the server so that the server can base on the first verification request The verification request verifies the user, and after the verification is passed, returns to the client the first indication information that the verification is passed; when the first indication information that the verification passes is received, the user is logged in, The first indication information is used to indicate that the password information of the user and the account information are both verified.

It should be understood that, in the embodiment of the present application, the so-called processor 20 may be a central processing unit (Central Processing Unit, CPU), and the processor may also be other general-purpose processors or digital signal processors (Digital Signal Processors, DSP). , Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like.

The input device 21 may include a touch panel, a microphone, etc., and the output device 22 may include a display (LCD, etc.), a speaker, and the like.

The memory 23 may include a read-only memory and a random access memory, and provides instructions and data to the processor 20. A part of the memory 23 may also include a non-volatile random access memory. For example, the memory 23 may also store device type information.

In specific implementation, the processor 20, input device 21, and output device 22 described in the embodiment of this application can execute the implementation described in the method embodiment in FIG. 2 or FIG. 3 provided in the embodiment of this application, and may also execute The implementation of the device described in FIG. 6 in the embodiment of the present application will not be repeated here.

The embodiment of the present application also provides a login processing device. The device includes a module for executing the method described in FIG. 4, and is configured on a server. Specifically, refer to FIG. 8, which is a schematic block diagram of a login processing apparatus provided by an embodiment of the present application. The login processing device of this embodiment includes:

The communication module 30 is configured to receive a first verification request from the client, the first verification request carrying a random number, a hash value corresponding to the encrypted digest information, and encrypted account information, the digest information Is obtained by the client terminal performing data processing on the password information input by the user based on a specified information digest algorithm;

The processing module 31 is configured to decrypt the encrypted hash value and the account information based on the pre-configured key to obtain the plain text information corresponding to the account information and the decrypted hash value. If there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed;

The processing module 31 is further configured to obtain target digest sample information corresponding to the target password sample information stored in association with the target account sample information, and perform a hash calculation on the target digest sample information based on the random number to obtain If the hash value of the sample corresponding to the target digest sample information is detected to match the hash value of the sample, it is determined that the verification of the password information is passed;

The communication module 30 is further configured to return to the client the first indication information that has passed the verification, so that the client can log in the user based on the indication information, and the indication information is used to indicate Both the password information of the user and the account information are verified.

In one embodiment, the specified information digest algorithm includes an information digest algorithm MD5 or a cyclic redundancy check algorithm CRC, and the database pre-stores information based on the cyclic redundancy check algorithm CRC for the target password sample The generated first summary sample sub-information and the second summary sample sub-information generated for the target password information based on the information digest algorithm MD5, the processing module 31 is specifically configured to: communicate with the target account sample information in advance From the first summary sample sub-information and the second summary sample sub-information corresponding to the target password sample information stored in association, target summary sample information that matches the specified information digest algorithm is selected.

It should be noted that the functions of the functional modules of the login processing apparatus described in the embodiment of the present application can be specifically implemented according to the method in the method embodiment described in FIG. 4, and the specific implementation process can refer to the method in the method embodiment in FIG. Related descriptions are not repeated here.

Please refer to FIG. 9. FIG. 9 is a schematic block diagram of a server provided by an embodiment of the present application. As shown in FIG. 9, the server includes a processor 40, a memory 41 and a network interface 42. The above-mentioned processor 40, memory 41, and network interface 42 may be connected by a bus or in other ways. In FIG. 9 shown in the embodiment of the present application, connection by a bus is taken as an example. The network interface 42 is controlled by the processor to send and receive messages, the memory 41 is used to store a computer program, and the computer program includes program instructions, and the processor 40 is used to execute the program instructions stored in the memory 41. The processor 40 is configured to call the program instructions to execute: receive processing result information for processing the target document through the network interface 42, where the processing result information includes the processing request identifier corresponding to the processing of the target document and the processing station The document processing information corresponding to the target document; from the pre-established correspondence between the processing application identifier and the processing item, the target processing item corresponding to the processing application identifier of the target document is determined, and the target option to which the target processing item belongs is detected Type, and based on the correspondence between the preset option type and the preset storage mode, determine the target storage mode matching the target option type, and then store the bill processing information according to the target storage mode.

It should be understood that, in the embodiment of the present application, the so-called processor 40 may be a central processing unit (Central Processing Unit, CPU), and the processor 40 may also be other general-purpose processors, digital signal processors (Digital Signal Processors, DSPs). ), Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like.

The memory 41 may include a read-only memory and a random access memory, and provides instructions and data to the processor 40. A part of the memory 41 may also include a non-volatile random access memory. For example, the memory 41 may also store device type information.

In specific implementation, the processor 40, the memory 41, and the network interface 42 described in the embodiment of the present application can perform the implementation described in the method embodiment described in FIG. 4 provided by the embodiment of the present application, and can also perform the implementation of the present application For example, the implementation of the login processing device described in FIG. 8 will not be repeated here.

In another embodiment of the present application, a computer-readable storage medium is provided, the computer-readable storage medium stores a computer program, the computer program includes program instructions, and the program instructions are executed by a processor to realize: receiving A login request carrying user information, the user information including the password information and account information entered by the user; generating summary information for the password information based on a specified information digest algorithm; generating random numbers according to preset rules, and passing the random numbers Perform a hash process on the digest information to obtain a hash value corresponding to the digest information; perform an encryption process on the hash value and the account information to generate a hash including the random number and the encrypted process Value and the encrypted first verification request of the account information; sending the first verification request to the server, so that the server verifies the user based on the first verification request, and sends the first verification request to the The client returns the first indication information that the authentication is passed; when receiving the first indication information that the authentication is passed, the user is logged in, and the first indication information is used to indicate the user's password information and the password. The account information has been verified.

In another embodiment of the present application, a computer-readable storage medium is provided, the computer-readable storage medium stores a computer program, the computer program includes program instructions, and the program instructions are executed by a processor to realize: receiving A first verification request from the client, the first verification request carries a random number, a hash value corresponding to the encrypted digest information, and encrypted account information, the digest information is based on the client's specified The information digest algorithm is obtained by data processing on the password information input by the user; the encrypted hash value and the account information are decrypted based on the pre-configured key to obtain the plaintext information corresponding to the account information and The decrypted hash value; if it is detected that there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed; and the target password sample stored in association with the target account sample information is obtained The target digest sample information corresponding to the information, the target digest sample information is obtained by data processing the password sample information based on the specified information digest algorithm; the target digest sample information is hashed based on the random number , Obtain the sample hash value corresponding to the target digest sample information, if it is detected that the hash value matches the sample hash value, it is determined that the verification of the password information is passed; and the verification is returned to the client The passed first indication information is used to facilitate the client to perform login processing on the user based on the indication information, and the indication information is used to indicate that the password information of the user and the account information are both verified.

The computer-readable storage medium may be the internal storage unit of the server or the client described in any of the foregoing embodiments, such as the hard disk or memory of the server or the client. The computer-readable storage medium may also be an external storage device of the server or the client, such as a plug-in hard disk equipped on the server or the client, a smart memory card (Smart Media Card, SMC), and a secure digital (Secure Digital) Digital, SD) card, flash card (Flash Card), etc. Further, the computer-readable storage medium may also include both an internal storage unit of the server and an external storage device. The computer-readable storage medium is used to store the computer program and other programs and data required by the server or client. The computer-readable storage medium can also be used to temporarily store data that has been output or will be output.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through a computer program. The program can be stored in a computer readable storage medium. During execution, it may include the procedures of the above-mentioned method embodiments. Wherein, the storage medium may be a magnetic disk, an optical disc, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM), etc.

The above-disclosed are only part of the embodiments of this application. Of course, it cannot be used to limit the scope of rights of this application. Those of ordinary skill in the art can understand all or part of the process for implementing the above-mentioned embodiments and make them in accordance with the claims of this application. The equivalent changes still fall within the scope of the invention.

Claims (20)

1. A login processing method, which is applied to a client terminal, characterized in that the method includes:

   Receiving a login request carrying user information, where the user information includes password information and account information entered by the user;

   Generating digest information for the password information based on a designated information digest algorithm;

   Generating a random number according to a preset rule, and hashing the digest information by using the random number to obtain a hash value corresponding to the digest information;

   Performing encryption processing on the hash value and the account information, and generating a first verification request including the random number, the encrypted hash value, and the encrypted account information;

   Sending the first verification request to the server, so that the server verifies the user based on the first verification request, and returns the first indication information that the verification passed to the client after the verification is passed;

   When receiving the first indication information that the authentication is passed, log in to the user, where the first indication information is used to indicate that both the password information and the account information of the user pass the authentication.
2. The method according to claim 1, wherein the specified information digest algorithm includes an information digest algorithm MD5 or a cyclic redundancy check algorithm CRC, and the digest information includes a CRC based on the cyclic redundancy check algorithm for all The digest information generated by the password information or the digest information generated for the password information based on the information digest algorithm MD5.
3. The method according to claim 2, wherein the generating the digest information for the password information based on a specified information digest algorithm comprises:

   Determining the cyclic redundancy check algorithm CRC as the designated information digest algorithm from the preset information digest algorithm MD5 and the cyclic redundancy check algorithm CRC;

   The first summary information for the cryptographic information is generated based on the cyclic redundancy check algorithm CRC.
4. The method according to claim 3, wherein the summary information is the first summary information, and after the verification request is sent to the server, the method further comprises:

   Receiving the second indication information returned by the server after failing to verify the user;

   If it is detected that the second indication information indicates that the password information input by the user does not match the password sample information pre-stored by the user in the database, then output prompt information, the prompt information being used to prompt the The user password is entered incorrectly.
5. The method according to claim 3, wherein the summary information is the first summary information, and the method further comprises:

   After receiving the first indication information that passed the verification, if it is detected that the first indication information indicates that the first summary information corresponds to the target summary sample of the password sample information pre-stored in the database by the user Information matching

   Generating second digest information for the password information based on the information digest algorithm MD5, and hashing the second digest information according to the random number to obtain a hash value corresponding to the second digest information;

   Perform encryption processing on the hash value corresponding to the second digest information, generate a second verification request including the encrypted hash value corresponding to the second digest information, and send the second verification request to the Server, so that the server verifies that the password information entered by the user matches the password sample information pre-stored in the database by the user based on the hash value corresponding to the second digest information after the encryption process, and then sends the The client returns the third indication information that the verification is passed;

   When the third instruction information is received, trigger execution of the step of logging in to the user.
6. A login processing method, the method is applied to a server, and the method includes:

   Receive a first verification request from a client, the first verification request carries a random number, a hash value corresponding to the encrypted digest information, and encrypted account information, the digest information is based on the client The specified information digest algorithm is obtained by data processing the password information entered by the user;

   Performing decryption processing on the encrypted hash value and the account information based on the pre-configured key to obtain the plaintext information corresponding to the account information and the decrypted hash value;

   If it is detected that there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed;

   Obtaining target summary sample information corresponding to target password sample information stored in association with the target account sample information, where the target summary sample information is obtained by data processing the password sample information based on the specified information digest algorithm;

   Perform a hash calculation on the target digest sample information based on the random number to obtain the sample hash value corresponding to the target digest sample information. If it is detected that the hash value matches the sample hash value, it is determined The verification of the password information is passed;

   The first indication information that has passed the verification is returned to the client, so that the client can log in the user based on the indication information, and the indication information is used to indicate the user’s password information and the Account information is verified.
7. The method according to claim 6, characterized in that if it is detected that there is target account sample information matching the plaintext information in the database, before determining that the verification of the account information is passed, the method further comprises :

   Obtain an account identifier from the plaintext information;

   Search for a storage area corresponding to the account identifier from at least one preset storage area, and detect whether there is target account sample information matching the plaintext information in the storage area corresponding to the account identifier.
8. A login processing device, the device is configured on a client, and is characterized in that the device includes:

   The input module is used to receive a login request carrying user information, the user information including password information and account information entered by the user;

   The processing module is configured to generate digest information for the password information based on a specified information digest algorithm, generate random numbers according to preset rules, and hash the digest information through the random numbers to obtain the corresponding digest information Performing encryption processing on the hash value and the account information to generate a first verification request including the random number, the encrypted hash value, and the encrypted account information;

   The output module is configured to send the first verification request to the server, so that the server verifies the user based on the first verification request, and returns a first indication that the verification is passed to the client after the verification is passed information;

   The processing module is further configured to perform login processing on the user when the input module receives the first indication information that the verification is passed, and the first indication information is used to indicate the password information of the user and the Account information is verified.
9. The device according to claim 8, wherein the specified information digest algorithm includes an information digest algorithm MD5 or a cyclic redundancy check algorithm CRC, and the digest information includes a CRC based on the cyclic redundancy check algorithm for all The digest information generated by the password information or the digest information generated for the password information based on the information digest algorithm MD5.
10. The device according to claim 9, wherein the processing module is specifically configured to determine the cyclic redundancy check algorithm CRC as a preset message digest algorithm MD5 and a cyclic redundancy check algorithm CRC as Specify an information digest algorithm; generate first digest information for the password information based on the cyclic redundancy check algorithm CRC.
11. The device according to claim 10, wherein the device further comprises an output module, wherein:

    The input module is further configured to receive second indication information returned by the server after failing to verify the user; the output module is configured to, if the processing module detects that the second indication information indicates the If the password information input by the user does not match the password sample information pre-stored by the user in the database, prompt information is output, and the prompt information is used to prompt the user that the password is entered incorrectly.
12. The apparatus according to claim 10, wherein the summary information is the first summary information, and the processing module is further configured to receive the first indication that the verification is passed through the input module After information, if it is detected that the first indication information indicates that the first summary information matches the target summary sample information corresponding to the password sample information pre-stored in the database by the user, based on the information digest algorithm MD5, the target summary The second digest information of the password information, and hash the second digest information according to the random number to obtain the hash value corresponding to the second digest information; The hash value is encrypted, and a second verification request including the hash value corresponding to the encrypted second digest information is generated;

    The output module is further configured to send the second verification request to the server, so that the server verifies the password information entered by the user based on the hash value corresponding to the encrypted second digest information After matching with the password sample information pre-stored in the database by the user, return to the client the third indication information that the verification is passed;

    The processing module is further configured to trigger the execution of the step of logging in the user when the third instruction information is received through the input module.
13. A login processing device, the device is configured on a server, and is characterized in that the device includes:

    The communication module is configured to receive a first verification request from the client, the first verification request carrying a random number, a hash value corresponding to the encrypted digest information, and encrypted account information, the digest information being The client terminal performs data processing on the password information input by the user based on a specified information digest algorithm;

    The processing module is used to decrypt the encrypted hash value and the account information based on the pre-configured key to obtain the plain text information corresponding to the account information and the decrypted hash value, if detected If there is target account sample information matching the plaintext information in the database, it is determined that the verification of the account information is passed;

    The processing module is further configured to obtain target summary sample information corresponding to the target password sample information stored in association with the target account sample information, and perform hash calculation on the target summary sample information based on the random number to obtain The sample hash value corresponding to the target summary sample information, if it is detected that the hash value matches the sample hash value, it is determined that the verification of the password information is passed;

    The communication module is further configured to return first indication information that has passed the verification to the client, so that the client can log in to the user based on the indication information, and the indication information is used to indicate The password information of the user and the account information are both verified.
14. The device according to claim 13, wherein the processing module is further configured to obtain an account identifier from the plaintext information, and search for a storage area corresponding to the account identifier from at least one preset storage area, And detect in the storage area corresponding to the account identifier whether there is target account sample information that matches the plaintext information.
15. A client, characterized by comprising a processor, a memory, an input device, and an output device, the processor and the memory are connected to each other, wherein the memory is used to store a computer program, and the computer program includes program instructions The processor is configured to invoke the program instructions to execute: receive a login request carrying user information through the input device, the user information including password information and account information entered by the user; generate based on a specified information digest algorithm For the digest information of the password information; generate a random number according to a preset rule, and hash the digest information through the random number to obtain the hash value corresponding to the digest information; compare the hash value Perform encryption processing with the account information to generate a first verification request including the random number, the encrypted hash value, and the encrypted account information; and send the first verification request to the output device through the output device Server, so that the server verifies the user based on the first verification request, and returns to the client the first indication information that the verification passed after the verification is passed; when the verification passed is received through the input device The first instruction information is to perform login processing on the user, and the first instruction information is used to indicate that the password information of the user and the account information are both verified.
16. The client according to claim 15, wherein the specified information digest algorithm includes an information digest algorithm MD5 or a cyclic redundancy check algorithm CRC, and the digest information includes a CRC based on the cyclic redundancy check algorithm. The digest information generated by the password information or the digest information generated for the password information based on the information digest algorithm MD5.
17. The client according to claim 16, wherein the processor is specifically configured to determine the cyclic redundancy check algorithm CRC from a preset message digest algorithm MD5 and a cyclic redundancy check algorithm CRC Specify the information digest algorithm;

    The first summary information for the cryptographic information is generated based on the cyclic redundancy check algorithm CRC.
18. A server, characterized by comprising a processor, a memory, and a network interface, the processor, the memory, and the network interface are connected to each other, wherein the memory is used to store a computer program, and the computer program includes a program Instructions, the processor is configured to call the program instructions to execute: receive a first verification request from a client through the network interface, the first verification request carries a random number and the encrypted digest information corresponding to The hash value and encrypted account information, the summary information is obtained by the client based on a specified information digest algorithm on the password information input by the user; after the encryption processing based on the pre-configured key Decrypt the hash value of the account information and the account information to obtain the plaintext information corresponding to the account information and the decrypted hash value; if it is detected that there is a target account sample information that matches the plaintext information in the database, it is determined The verification of the account information is passed; the target digest sample information corresponding to the target password sample information stored in association with the target account sample information is obtained, and the target digest sample information is based on the specified information digest algorithm for the password sample Information is obtained by data processing; based on the random number, the target digest sample information is hashed to obtain the sample hash value corresponding to the target digest sample information, if the hash value and the sample are detected If the hash value matches, it is determined that the verification of the password information is passed; the first indication information that the verification passed is returned to the client through the network interface, so that the client can check the password based on the indication information. The user performs login processing, and the instruction information is used to indicate that the password information of the user and the account information are both verified.
19. The server according to claim 18, wherein the processor is further configured to

    Obtain the account identifier from the plaintext information, search for the storage area corresponding to the account identifier from at least one preset storage area, and detect in the storage area corresponding to the account identifier whether there is a match with the plaintext information Target account sample information.
20. A computer nonvolatile readable storage medium, wherein the computer nonvolatile readable storage medium stores a computer program, the computer program includes program instructions, and the program instructions when executed by a processor The processor is caused to execute the method according to any one of claims 1-5 or any one of claims 6-7.

Images