CN101729492A - Information recording system with client identification and method thereof - Google Patents

Abstract

An information recording system with client identification and a method thereof are used for solving the problem that the client cannot be effectively identified and the information recording cannot be accurately carried out.

Description

Information recording system with client identification and method thereof

technical field

The present invention relates to an information recording system and its method, in particular to an information recording system with client identification and its method which determines whether information is allowed to be recorded by identifying the client.

Background technique

In recent years, with the vigorous development of the Internet, the Internet has been widely accepted by people no matter in terms of price, function or application. Therefore, various services set up on the Internet, such as real-time communication, e-mail and web page services, have sprung up like mushrooms after rain.

Generally speaking, the above services are applied in the master-slave network structure (Client-Server). The service method is that when the client (Client) sends a service request to the server (Server) through the network, it receives the data responded by the server. to complete the service. However, in some cases, the user does not want the client to record the data that the server responds to. For example, when the client is a public computer, because of privacy and security considerations, it is usually not desirable for personal information such as real-time communication Information is recorded on public computers to protect it from prying eyes. Therefore, how to effectively identify the client as a private computer or a public computer, and then determine whether to allow recording of personal information, has become an issue that manufacturers are eager to solve.

In view of this, some manufacturers propose to use the uniqueness of the network address as the basis for identifying the client. However, although the network address is unique, the network address is not only fixedly configured on a certain personal computer, especially a personal computer using Dynamic Host Configuration Protocol (Dynamic Host Configuration Protocol, DHCP), the network address of the personal computer has a dynamic configuration. Therefore, using the network address as the basis for identifying the client still has the problem of being unable to effectively identify the client and accurately record information.

To sum up, it can be known that the prior art has long been unable to effectively identify the client and accurately record the information, so it is necessary to propose an improved technical means to solve this problem.

Contents of the invention

In view of the problems in the prior art, the invention discloses an information recording system with client identification and a method thereof.

The information recording system with client identification disclosed in the present invention is applied in a client/server network transmission environment, and the information recording system includes a server and a client. Wherein, the server includes a user database, a receiving module, an identification module and a verification module, the user database is used to store user data, and the user data includes verification data and verification selection conditions respectively; the receiving module is used to receive login information or identification information; The module is used to compare the login information with the user data, and transmit the verification selection conditions of the matched user data; the verification module is used to compare the identification information with the verification data, and generate and transmit the authorization when the comparison is met information. The client includes a login module, an extraction module, and a recording module. The login module receives and sends login information to the server, and receives the verification selection conditions returned by the server; Next, the hardware data of the client is captured to generate and transmit identification information; the recording module allows recording of personal information when the client receives the authorization information or when the verification selection condition is no verification.

As for the information recording method with client identification of the present invention, it is applied in the network transmission environment of client/server, comprising the steps of: establishing user data at the server, and the user data includes verification data and verification selection conditions respectively; Receive and send the login information to the server; the server receives the login information, compares the login information with the user data, and transmits the verification selection conditions of the matched user data; the client receives the verification selection conditions returned by the server Finally, according to the verification selection conditions and under the conditions that require verification, the hardware data of the client is retrieved to generate and transmit identification information; the server receives the identification information and compares the identification information with the verification data, and when the comparison matches Generate and transmit authorization information; when the client receives the authorization information or when the verification selection condition is no verification, it is allowed to record personal information.

As mentioned above, the difference between the system and method disclosed in the present invention and the prior art is that the present invention allows the client to record information.

Through the above technical means, the present invention can achieve the technical effect of improving the security of information recording.

Description of drawings

FIG. 1 is a block diagram of an information recording system with client identification according to the present invention.

Fig. 2 is a flow chart of the information recording method with client identification in the present invention.

Fig. 3 is a schematic diagram of applying the present invention for login verification.

Fig. 4 is a schematic diagram of step-by-step verification by applying the present invention.

Fig. 5 is a schematic diagram of the setting window of the present invention.

Detailed ways

The implementation of the present invention will be described in detail below with reference to the accompanying drawings and examples, so that one can fully understand how the present invention uses technical means to solve technical problems and achieve technical effects, and implement accordingly.

First of all, before describing the embodiments in detail, the application environment of the information recording system with client identification and its method proposed by the present invention will be described. The present invention is applied in the network transmission environment of client/server, and the client For example, computers, mobile phones, and personal digital assistants are devices that can be used to execute instructions and store data; and the server can be a computer host with a user database for identifying and processing the client, and its user database stores user data , the user data is the user's account number, password and personal data, and the user data includes verification data and verification selection conditions that can be set in advance, and the detailed identification process will be described later.

Next, before describing the embodiments of the present invention, the information recording system with client identification and its method of the present invention will be further described with reference to the accompanying drawings, please refer to "Fig. 1", "Fig. The block diagram of the information recording system identified by the client, the information recording system includes a server 100, a client 110 and a network 120, and the server 100 includes a user database 101, a receiving module 102, an identification module 103 and a verification module 104; and the client 110 It includes a login module 111, a retrieval module 112, and a recording module 113, and may further include a setting module 114; the server 100 and the client 110 are transmitted through a network 120 (such as at least one of the Internet and a telecommunications network).

Among them, in the part of the server 100, the user database 101 is used to store user data (such as the user's account number, password and personal data), the user data further includes verification data and verification selection conditions, and the verification data can be preset Hardware data, such as at least one of the hard disk serial number, central processing unit serial number, network card physical address and computer name, when the hardware data of the client 110 matches the preset hardware data, it means that the client 110 is allowed to record personal information ( For example, the information of real-time communication); And the verification selection condition is the condition setting of recording whether to verify, and further includes the condition setting of at least one of the record verification hard disk serial number, central processing unit serial number, network card entity address and computer name, For example, if the verification selection condition is recorded as the letter "Y", it means that verification is required; if it is recorded as the letter "N", it means that no verification is required; when it is recorded as the letter "Y", further items to be verified can be recorded such Hard disk serial number, if no item to be verified is set, all items (such as hard disk serial number, CPU serial number, network card physical address and computer name) must be verified by default.

The receiving module 102 is used to receive the login information sent by the client 110 through the network 120, or receive the identification information after the client 110 generates the identification information. The login information may include the user's account number and password, for Log in to the server 100, because the technology of logging into the server 100 is a known technology, so I won’t go into details here, and the identification information records the hardware data captured by the client 110, and this can be encrypted by an encryption algorithm (such as RSA or MD5). The hardware data is generated by encoding to prevent the hardware data from being captured or intercepted during transmission through the network 120 .

The identification module 103 is used to compare the login information with the user data, and send the verification selection conditions of the matched user data to the client 110, for example, the account number and password of the user in the login information and the preset The account number and the password of the user in the set user data are compared, and when the comparison meets, the verification selection condition (for example, needing verification) recorded in the user data that conforms to is sent to the client 110; the verification module 104 uses Then compare the identification information received by the receiving module 102 with the verification data in the user database 101 , and generate and send authorization information to the client 110 when the comparison is matched. As mentioned above, the identification information can be encoded by hardware data through an encryption algorithm, so the verification module 104 can also decode the encoded identification information through a decryption algorithm to restore the encoded identification information to unencoded identifying information.

In addition, in the part of the client 110, the client 110 includes a login module 111, which is used to receive and transmit login information (such as user account number and password) to the server 100, and receive the verification selection conditions returned by the server 100, The way to input the login information can be by pressing the function key (for example, typing the user's account number and password through the keyboard); is the letter "Y"), retrieve the hardware data of the client 110 (such as at least one of the hard disk serial number, the CPU serial number, the physical address of the network card, and the computer name), and use it to generate and transmit identification information, which has been in It has been described above, so it will not be described in detail here; when the client 110 receives the authorization information sent back by the server 100 or when the verification selection condition is not required to be verified (for example, the verification selection condition is the letter “N”), allowing the client 110 to record personal information (for example, real-time communication information or temporary data generated by browsing webpages) through the recording module 113 . In addition, the verification data and verification selection conditions mentioned above can be set through the setting window (detailed description will be made later in conjunction with "Figure 5").

As shown in "Fig. 2", "Fig. 2" is a flow chart of the information recording method with client identification in the present invention, which includes the steps of: establishing user data at the server 100, and this user data includes verification data and verification selection conditions (step 201); Receive and transmit the login information to the server 100 (step 202) at the client 110; The server 100 receives the login information, and compares the login information with the user data, and transmits the verification selection condition ( Step 203); After receiving the verification selection condition returned by the server 100, the client 110 retrieves the hardware data of the client according to the verification selection condition under the condition that verification is required, and is used to generate and transmit identification information (step 204) ; The server 100 receives the identification information, and compares the identification information with the verification data, and generates and transmits the authorization information (step 205) when the comparison matches; when the client 110 receives the authorization information or when the verification selection condition is not Under the condition that verification is required, personal information is allowed to be recorded (step 206). Wherein, the method further includes setting verification data and verification selection conditions through a setting window when creating user data. Through the above steps, the client 110 can be identified, which is used to solve the problem that the client 110 cannot be limited to record information, and further improve the security of information record.

The following description will be made in conjunction with "Figure 3" to "Figure 5" in the form of an embodiment. Please refer to "Figure 3" first. Block 310 , password input block 311 , re-input element 312 , confirmation sending element 313 , and login result display block 314 , the form and elements included in the login window 300 are not limited thereto.

When logging in at the client terminal 110 by applying the login window 300 of the present invention (for example, applying the login window of the real-time communication software of the present invention), the account input block 310 and the password input block 311 can be input for logging in respectively. account number and password (for example, the account number is "abc" and the password is "123"), then click the confirmation sending element 313 to generate the input account number and password as login information through the login module 111 and send the information sent to the server 100.

At this time, the server 100 receives the login information through the receiving module 102, and compares the login information with the user data in the user database 101 through the identification module 103. The comparison method is based on the account (for example, the account is "aaa") and The password (for example, the password is "123") is used as the comparison condition to query the user data that both the account number and the password match, and transmit the verification selection condition for the matching user data. For example, when the matching user data The content includes the account number "aaa", the password "123", the verification data as "hard disk serial number: aa; CPU serial number: bb; network card physical address: cc; computer name: dd" and the verification selection conditions are letters In the case of "Y", the recognition module 103 will transmit the verification selection condition of the record letter "Y".

Next, after the login module 111 of the client 110 receives the verification selection condition returned by the server 100 (for example, the record letter is "Y"), the retrieval module 112 determines that verification is required according to the verification selection condition (for example, The record letter is "Y" means verification is required; the record letter is "N" means no verification is required), so the hardware data of the client 110 is retrieved (for example, the serial number of the hard disk is "aa"; the serial number of the central processing unit is "bb"; The physical address of the network card is "cc"; the computer name is "dd") is used to generate the identification information, and it is transmitted to the server 100 through the network 120, and in the process of generating the identification information, it can be further encoded by an encryption algorithm to avoid Network 120 transmissions are captured or monitored.

As mentioned above, when the receiving module 102 of the server 100 receives the identification information sent by the client 110 (that is, including hard disk serial number, central processing unit serial number, network card physical address and computer name, etc.), the verification module 104 identifies the The information compares the user data from the user database 101 (for example, the content of the user data includes that the account number is "aaa", the password is "123", the verification data is "hard disk serial number: aa; central processing unit serial number: bb; network card entity address : cc; computer name: dd" and the verification selection condition is the letter "Y") verification data, because the hardware data in the identification information matches the verification data, so the verification module 104 generates and transmits the authorization information to the client 110. , the verification selection condition and the comparison result can be displayed in the login result display block 314 to achieve the effect of prompting. Finally, the client 110 receives the authorization information, so the logging module 113 allows logging of personal information (eg, information communicated in real time). In addition, the client 110 further includes a setting module 114, which is used to set verification data and verification selection conditions through the setting window. Detailed explanation.

Please refer to "Fig. 4", "Fig. 4" is a schematic diagram of step-by-step verification by applying the present invention. For the above example, the verification process is to compare the serial number of the hard disk, the serial number of the central processing unit, the physical address of the network card, and the name of the computer. When all of them match, the authorization information is sent to the client 110. Since the verification selection condition further includes recording the verification hard disk serial number , central processing unit serial number, network card physical address and computer name at least one conditional setting, so the corresponding hardware data can be made according to the set verification items (such as hard disk serial number and central processing unit serial number) through the verification window 400 Retrieve and verify, for example, when the verification selection condition is the letter "Y" and further includes setting the verification item as "hard disk serial number and CPU serial number", the set verification item display block 410 will be displayed The verification items, and then provide corresponding selections through the retrieval item selection block 420, that is to say, after checking the hard disk serial number and the CPU serial number in the retrieval item selection block 420, verify the data by clicking The component 430 performs verification, or clicks on the re-authentication component 431 to re-authenticate when the verification fails, and displays the verification result in the authorization information display block 440 (for example, displaying "success" in text).

As mentioned above, the verification data and verification selection conditions can be set through the setting window, so the method of setting is described in conjunction with "Figure 5", please refer to "Figure 5", "Figure 5" is a schematic diagram of the setting window of the present invention . When the user wants to set the verification data and verification selection conditions, the setting operation can be performed through the setting window 500 shown in FIG. 5 .

After logging in to the server 100, the user can know the connection status of the user database 101 (for example, displayed as "connected") through the status display block 510, and click the data retrieval component 501 to retrieve the client 110 hardware data, and the captured hardware data can be displayed in the verification data display area 520, or click clear capture 502 to clear the currently captured hardware data. Then, the verification selection condition can be set through the condition setting block 530, for example, check the need to verify and check the hard disk serial number in the verification item, and finally, the captured hardware data and the set The verification selection conditions of the server 100 are sent to the user database 101 of the server 100 to update the user data corresponding to the login information. The data is "hard disk serial number: aa; CPU serial number: bb; network card physical address: cc; computer name: dd" and the verification data whose verification selection condition is the letter "Y" is changed to "hard disk serial number: ee; CPU serial number : ff; physical address of the network card: gg; computer name: hh", and the verification selection condition further includes the record of setting the verification item as "hard disk serial number" in addition to maintaining the letter "Y". The components and setting methods included in the setting window 500 are not limited thereto.

In summary, it can be seen that the difference between the present invention and the prior art lies in the technical means of allowing the client to record information when the identification is successful after capturing the hardware data of the client and transmitting the hardware data to the server. This technical means can solve the problem that the previous technology cannot restrict the client to record information, and then achieve the technical effect of improving the security of information recording.

Although the embodiments disclosed in the present invention are as described above, the content is not intended to directly limit the patent protection scope of the present invention. Any person skilled in the technical field to which the present invention belongs may make changes in the implementation forms and details without departing from the disclosed spirit and scope of the present invention. The scope of patent protection of the present invention must still be defined by the appended claims as the criterion.

Claims (9)

1. An information recording system with client identification, which is applied in a client/server network transmission environment, the information recording system comprising: server, the server includes: a user database, which is used to store at least one user data, the user data respectively including at least one verification data and a verification selection condition; A receiving module, which is used to receive login information or identification information; an identification module, configured to compare the login information with the user data, and transmit the verification selection condition of the user data that is matched; and a verification module, which is used to compare the identification information with the verification data, and generate and transmit authorization information when the comparison is met; and client, the client includes: a login module, which receives and transmits the login information to the server, and receives the verification selection condition returned by the server; A retrieval module, which retrieves at least one piece of hardware data of the client under the condition that authentication is required according to the authentication selection condition, for generating and transmitting the identification information; and A recording module, which allows recording at least one piece of personal information when the client receives the authorization information or when the verification selection condition is no verification. 2. The information recording system with client identification as claimed in claim 1, wherein said client further comprises a setting module, said setting module is used to set said verification data and said verification selection condition through a setting window . 3. The information recording system with client identification as claimed in claim 1, wherein said verification data and said hardware data include at least one of hard disk serial number, central processing unit serial number, network card physical address and computer name; and said The verification selection condition further includes the condition setting of recording and verifying at least one of the serial number of the hard disk, the serial number of the central processing unit, the physical address of the network card and the name of the computer. 4. The information recording system with client identification as claimed in claim 1, wherein the identification information is generated by encoding the hardware data through an encryption algorithm, and passes through the verification module under the condition of verification The decryption algorithm decodes the encoded identification code. 5. An information recording method with client identification, the information recording method is applied in the network transmission environment of client/server, comprising steps: Establishing at least one user data on the server, the user data including at least one verification data and a verification selection condition; receiving and sending login information to the server at the client; The server receives the login information, compares the login information with the user data, and transmits the verification selection condition of the user data that matches the comparison; After receiving the verification selection condition sent back by the server, the client retrieves at least one piece of hardware data of the client under the condition that verification is required according to the verification selection condition, and is used to generate and transmit identifying information; The server receives the identification information, compares the identification information with the verification data, and generates and transmits authorization information when the comparison matches; and When the client receives the authorization information or the verification selection condition is that no verification is required, at least one piece of personal information is allowed to be recorded. 6. The information recording method with client identification as claimed in claim 5, wherein said step of establishing said user data further comprises setting said verification data and said verification selection condition through a setting window. 7. The information recording method with client identification as claimed in claim 5, wherein said verification data and said hardware data comprise at least one of hard disk serial number, central processing unit serial number, network card entity address and computer name; and said The verification selection condition further includes the condition setting of recording and verifying at least one of the serial number of the hard disk, the serial number of the central processing unit, the physical address of the network card and the name of the computer. 8. The information recording method with client identification as claimed in claim 5, wherein the step of retrieving at least one hardware data of the client for generating and transmitting the identification information further comprises passing the hardware data through An encryption algorithm is used to encode to generate the identification information, and the encoded identification code is decoded by a decryption algorithm under the condition that authentication is required. 9. The information recording method with client identification as claimed in claim 5, wherein the personal information includes at least one of real-time communication information and personalized settings.

Images