CN109587165B

CN109587165B - User authentication method based on IP address

Info

Publication number: CN109587165B
Application number: CN201811617959.4A
Authority: CN
Inventors: 张立杰; 刘延鹏
Original assignee: Shenzhen Bamboocloud Technology Co ltd
Current assignee: Shenzhen Zhuyun Technology Co ltd
Priority date: 2018-12-28
Filing date: 2018-12-28
Publication date: 2021-06-25
Anticipated expiration: 2038-12-28
Also published as: CN109587165A

Abstract

The invention relates to a user authentication method based on IP address, the steps of the invention are: in the preparation stage, the system needs to establish the binding relationship between the IP address of the computer terminal and the user account, and each user needs to set a PIN code; when user authentication is carried out, a user inputs a PIN code; the system checks whether the PIN code is matched with the IP address, if so, the corresponding user account is obtained, and the authentication is finished in a successful authentication state. The invention provides a new user authentication mode aiming at a specific scene by binding the IP address and the PIN code to the user account, and has the advantages of convenient authentication process and good authentication operation experience.

Description

User authentication method based on IP address

Technical Field

The present invention relates to a user authentication method, and more particularly, to a user authentication method based on an IP address.

Background

To distinguish between different users, the software system needs to set the current user session context to identify the user by means of a user authentication process. There are many different user authentication methods, some of which require the user to manually input authentication credentials, such as a username and password; some authentication methods employ biometric identification techniques, such as fingerprint authentication; some authentication methods need to use some devices, such as a mobile phone short message verification code authentication method.

The user authentication process needs to balance factors such as safety, convenience, cost and the like, the emphasis points under different scenes are different, and a proper authentication mode can be selected according to the needs. New authentication methods are emerging continuously, and the selectable range is gradually enriched.

One of the prior art solutions is fingerprint based authentication. In the preparation stage, the user needs to enter a fingerprint first so as to compare the fingerprints in the authentication stage. In the authentication stage, a user firstly provides a user name, then a fingerprint is input into the fingerprint equipment, the fingerprint input in the preparation stage is compared with the fingerprint currently provided by the authentication module, and if the fingerprint is matched with the fingerprint currently provided by the authentication module, the authentication is successful. This technique relies on fingerprint equipment, therefore needs to install fingerprint equipment and its driver on computer terminal, if there are a large number of terminals that need to use fingerprint authentication, just need to dispose fingerprint equipment and install driver for every terminal, and the cost is higher and the operation and maintenance work load is great.

The second technical scheme is authentication based on a short message verification code of a mobile phone. The technology firstly requires a user to input a mobile phone number on a credential input interface, then the system sends a verification code to the mobile phone, the user inputs the verification code on the credential input interface, an authentication module compares the sent verification code with the verification code input by the user, and if the verification code is matched with the verification code input by the user, the authentication is successful. This solution assumes that the handset is in the possession of the user himself, and when this assumption is not valid, there is a great security risk. The authentication module cannot know the risk and completely depends on the user to ensure that the mobile phone is owned by the user. The whole process of the scheme is complicated, and in order to avoid the complex process that the login process is repeated once every time, the application system and the user tend to use the function of maintaining the authentication state to avoid frequent login for many times, but certain security risk is brought. In addition, the mode is easy to be utilized by abusers to send harassment short messages, although the authentication system adopting the scheme generally sets the limit of the interval of sending the short messages to the same mobile phone number, the abusers send the short messages to a large number of mobile phone numbers at the same time, so that the limit is invalid. Some authentication systems set the check code, and the mobile phone verification code can be sent only by inputting the check code, which not only increases the burden of the user, but also can not fundamentally solve the sending of harassment short messages, because abusers can also manually input the check code.

Disclosure of Invention

The technical problem to be solved by the present invention is to provide a user authentication method based on an IP address to improve the user authentication efficiency, aiming at the defects in the prior art.

The technical scheme adopted by the invention for solving the technical problems is as follows: a user authentication method based on an IP address is constructed, a system needs to establish a binding relationship between the IP address of a computer terminal and a user account, and each user needs to set a PIN code, so that the authentication efficiency of the user is improved.

In the user authentication method based on the IP address, the steps of the user authentication method based on the IP address are as follows: the user authentication method based on the IP address comprises the following steps: in the preparation stage, the system needs to establish the binding relationship between the IP address of the computer terminal and the user account, and each user needs to set a PIN code; the PIN code is similar to the password, but the PIN is simpler, and the PIN code is only suitable for a specific IP address; the invention recommends that the PIN code adopts 4 digits; when user authentication is carried out, a user inputs a PIN code; the system checks whether the PIN code is matched with the IP address, if so, the corresponding user account is obtained, and the authentication is finished in a successful authentication state.

The user authentication method based on the IP address has the following beneficial effects: the invention provides a new user authentication mode aiming at a specific scene by binding the IP address and the PIN code to the user account, and has the advantages of convenient authentication process and good authentication operation experience.

Drawings

The invention will be further described with reference to the accompanying drawings and examples, in which:

FIG. 1 is a flow chart of the user authentication method based on IP address of the present invention

FIG. 2 is a diagram illustrating the establishment of correspondence during the preparation phase of the present invention

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

As shown in fig. 1, the user authentication method based on the IP address includes the steps of:

1. in the preparation stage, the system needs to establish the binding relationship between the IP address of the computer terminal and the user account, and each user needs to set a PIN code; the PIN code is similar to the password, but the PIN is simpler, and the PIN code is only suitable for a specific IP address; recommending that the PIN code adopts 4 digits;

2. when user authentication is carried out, a user inputs a PIN code; the system checks whether the PIN code is matched with the IP address, if so, the corresponding user account is obtained, and the authentication is finished in a successful authentication state.

Further, the user authentication method based on the IP address is suitable for a network environment in which a fixed IP address is allocated to a computer terminal, and each user uses a fixed computer terminal.

Although the present invention has been described with reference to the above embodiments, the scope of the present invention is not limited thereto, and modifications, substitutions and the like of the above members are intended to fall within the scope of the claims of the present invention without departing from the spirit of the present invention.

Claims

1. A user authentication method based on IP address is characterized in that the user authentication method based on IP address comprises the following steps: in the preparation stage, the system needs to establish the binding relationship between the IP address of the computer terminal and the user account, each user needs to set a PIN code, the PIN code is similar to the password, but the PIN is simpler, and the PIN code is only suitable for a specific IP address; recommending that the PIN code adopts 4 digits; when user authentication is carried out, a user inputs a PIN code; the system checks whether the PIN code is matched with the IP address, if so, the corresponding user account is obtained, and the authentication is finished in a successful authentication state.

2. The IP address based user authentication method according to claim 1, wherein the IP address based user authentication method is applied to a network environment in which a computer terminal is assigned a fixed IP address, and each user uses its own fixed computer terminal.