CN110138800A - Interface alternation and its verification method, log on request generation and verification method and device - Google Patents

Interface alternation and its verification method, log on request generation and verification method and device Download PDF

Info

Publication number
CN110138800A
CN110138800A CN201910467418.6A CN201910467418A CN110138800A CN 110138800 A CN110138800 A CN 110138800A CN 201910467418 A CN201910467418 A CN 201910467418A CN 110138800 A CN110138800 A CN 110138800A
Authority
CN
China
Prior art keywords
request
routing information
log
interface
specified object
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201910467418.6A
Other languages
Chinese (zh)
Inventor
钟望
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Kingsoft Cloud Network Technology Co Ltd
Beijing Kingsoft Cloud Technology Co Ltd
Original Assignee
Beijing Kingsoft Cloud Network Technology Co Ltd
Beijing Kingsoft Cloud Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Kingsoft Cloud Network Technology Co Ltd, Beijing Kingsoft Cloud Technology Co Ltd filed Critical Beijing Kingsoft Cloud Network Technology Co Ltd
Priority to CN201910467418.6A priority Critical patent/CN110138800A/en
Publication of CN110138800A publication Critical patent/CN110138800A/en
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
    • G06F3/048—Interaction techniques based on graphical user interfaces [GUI]
    • G06F3/0481—Interaction techniques based on graphical user interfaces [GUI] based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
    • G06F3/048—Interaction techniques based on graphical user interfaces [GUI]
    • G06F3/0484—Interaction techniques based on graphical user interfaces [GUI] for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
    • G06F3/0485—Scrolling or panning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Human Computer Interaction (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • User Interface Of Digital Computer (AREA)

Abstract

The present invention provides a kind of interface alternation and its verification methods, log on request generation and verification method and device, wherein the interface alternation method includes: to monitor whether mouse chooses the specified object preset in picture on interface；If chosen, the routing information that mouse drag specifies object to slide on default picture is obtained；Interface alternation request is generated based on the routing information；Interface alternation request is sent to server, so that server verifies whether interface alternation request is triggered by real user according to routing information.The present invention is based on the routing information that mouse drag specifies object to slide on default picture, whether verifying interface alternation request is triggered by real user, the attack that machine simulation people carries out interface alternation can be effective against, to improve the stability of system.

Description

Interface alternation and its verification method, log on request generation and verification method and device
Technical field
The present invention relates to interface alternation technical fields, more particularly, to a kind of interface alternation and its verification method, log in and ask It seeks survival into and verification method and device.
Background technique
In the related technology, user log in, post, upper transmitting file, the interface alternations behavior such as ballot when, generally use User identifies that the mode of image content verifies the legitimacy of above-mentioned interbehavior, if the image content that user submits is incorrect, Then think that above-mentioned interbehavior is triggered by machine, and refuses to respond the interbehavior.But pass through image recognition technology, machine Programmed algorithm can be used and identify image content easily, so that simulating people inputs image content, this reduces above-mentioned authentications The safety of formula makes system be difficult to keep out the malicious attack of machine initiation, to affect the stability of system.
Summary of the invention
In view of this, the purpose of the present invention is to provide a kind of interface alternation method, interface alternation verification method and devices And server, to improve the safety of verification mode, to improve system stability.
In a first aspect, the embodiment of the invention provides a kind of interface alternation method, this method comprises: monitoring whether mouse selects The specified object in picture is preset on median surface；If chosen, obtaining mouse drag, this specifies object to slide on default picture Routing information；The routing information includes the coordinate value of multiple location points on the path that specified object passes through；Based on the path Information generates interface alternation request；Interface alternation request is sent to server, so that server is verified according to the routing information Whether interface alternation request is triggered by real user.
In preferred embodiments of the present invention, the above-mentioned acquisition mouse drag road for specifying object to slide on default picture The step of diameter information, comprising: according to the preset sampling interval, acquires mouse drag and specify object when sliding on default picture, The coordinate value for each location point that the specified object passes through.
Second aspect, the embodiment of the invention provides a kind of interface alternation verification methods, this method comprises: receiving from visitor The interface alternation at family end is requested；Interface alternation request includes the path letter that mouse drag specifies object to slide on default picture Breath；The routing information includes the coordinate value of multiple location points on the path that specified object passes through；It is determined according to the routing information Whether specified object slides along preset path；If the specified object is slided along preset path, determine that interface alternation is requested It is triggered by real user.
It is above-mentioned to determine whether specified object is sliding along preset path according to routing information in preferred embodiments of the present invention Dynamic step, comprising: judge the source location set in the coordinate value and preset path of the source location set in the routing information Whether the absolute value of the first difference of coordinate value meets the first difference threshold；If the absolute value of the first difference meets the first difference Threshold value judges the second of the coordinate value of the end position point in the coordinate value and preset path of the end position point in routing information Whether the absolute value of difference meets the second difference threshold；If the absolute value of the second difference meets the second difference threshold, according to road Intermediate position points in diameter information determine whether specified object slides along preset path.
In preferred embodiments of the present invention, whether the above-mentioned intermediate position points according in routing information determine specified object The step of being slided along preset path, comprising: judge the coordinate value of each intermediate position points in routing information one by one, if be located at The corresponding coordinate value range of preset path；Statistics coordinate value is located at the intermediate position points of the corresponding coordinate value range of preset path Quantity；Determine the ratio of the quantity of the intermediate position points of statistics and the intermediate position points sum of the routing information；If the ratio Meet preset fractional threshold, determines that specified object is slided along preset path.
It is above-mentioned to determine whether specified object is sliding along preset path according to routing information in preferred embodiments of the present invention Before dynamic step, this method further include: the sum of location point in statistical path information；Judge whether the sum of location point meets Preset amount threshold；The step for specifying object whether to slide along preset path is determined according to routing information if it is satisfied, executing Suddenly.
The third aspect, the embodiment of the invention provides a kind of log on request generation methods, exist this method comprises: obtaining user The account information inputted in log-in interface；Monitor whether mouse chooses the specified object preset in picture on interface；If chosen, Obtain the routing information that mouse drag specifies object to slide on default picture；The routing information includes the road that specified object passes through The coordinate value of multiple location points on diameter；Monitor whether mouse clicks designated button；If mouse clicks designated button, generation is stepped on Land request；The log on request includes account information and routing information；Log on request is sent to server so that server according to Whether routing information verifying log on request is triggered by real user.
Fourth aspect, the embodiment of the invention provides a kind of log on request verification methods, this method comprises: receiving from visitor The logging request at family end；The logging request includes the routing information and user that mouse drag specifies object to slide on default picture The account information inputted in log-in interface；The routing information includes the seat of multiple location points on the path that specified object passes through Scale value；It is determined according to routing information and specifies whether object slides along preset path；If specified object is sliding along preset path It is dynamic, determine that logging request is triggered by real user.
5th aspect, the embodiment of the invention provides a kind of interface alternation device, which includes: that mouse monitors module, For monitoring whether mouse chooses the specified object preset in picture on interface；First obtains module, if obtained for choosing The routing information that mouse drag specifies object to slide on default picture；The routing information includes on the path that specified object passes through Multiple location points coordinate value；Interface alternation requests generation module, for generating interface alternation request based on routing information；Boundary Face interaction request sending module, for interface alternation request to be sent to server, so that server is verified according to routing information Whether interface alternation request is triggered by real user.
In preferred embodiments of the present invention, above-mentioned first obtains module, is also used to: according to the preset sampling interval, adopting Collection mouse drag specifies object when sliding on default picture, the coordinate value for each location point which passes through.
6th aspect, the embodiment of the invention provides a kind of interface alternations to verify device, which includes: that interface alternation is asked Receiving module is sought, for receiving the interface alternation request from client；Interface alternation request includes specified pair of mouse drag As the routing information slided on default picture；The routing information includes multiple location points on the path that specified object passes through Coordinate value；First determining module, for determining whether specified object slides along preset path according to routing information；Interaction request Determining module determines that interface alternation request is triggered by real user if slided for specified object along preset path.
In preferred embodiments of the present invention, above-mentioned first determining module is also used to: judging the start bit in routing information Setting the absolute value of the first difference of the coordinate value of the source location set in coordinate value and preset path a little, whether to meet first poor It is worth threshold value；If the absolute value of the first difference meets the first difference threshold, the coordinate of the end position point in routing information is judged Whether the absolute value of the second difference of the coordinate value of the end position point in value and preset path meets the second difference threshold；If The absolute value of second difference meets the second difference threshold, according to the intermediate position points in routing information determine specified object whether edge Preset path sliding.
In preferred embodiments of the present invention, above-mentioned sliding path determining module is also used to: judging in routing information one by one The coordinate value of each intermediate position points, if be located at the corresponding coordinate value range of preset path；It counts coordinate value and is located at default road The quantity of the intermediate position points of the corresponding coordinate value range of diameter；In the quantity and routing information for determining the intermediate position points of statistics Between location point sum ratio；If ratio meets preset fractional threshold, determine that the specified object is slided along preset path.
In preferred embodiments of the present invention, above-mentioned apparatus further includes location point quantity judgment module, is used for: statistical path The sum of location point in information；Judge whether the sum of location point meets preset amount threshold；If it is satisfied, triggering operation the One determining module.
7th aspect, the embodiment of the invention provides a kind of log on request generating means, which includes: that account information obtains Modulus block, the account information inputted in log-in interface for obtaining user；First monitors module, for monitoring whether mouse selects The specified object in picture is preset on median surface；Second obtains module, if obtaining mouse drag for choosing and object being specified to exist The routing information slided on default picture；The routing information includes the coordinate of multiple location points on the path that specified object passes through Value；Second monitors module, for monitoring whether mouse clicks designated button；Log on request generation module, if referred to for clicking Determine button, generates log on request；The log on request includes account information and routing information；Log on request sending module, being used for will Log on request is sent to server, so that server verifies whether log on request is triggered by real user according to routing information.
Eighth aspect, the embodiment of the invention provides a kind of log on request to verify device, and above-mentioned apparatus includes: logging request Receiving module, for receiving the logging request from client；The logging request includes that mouse drag specifies object in default figure The account information that the routing information of on piece sliding and user input in log-in interface；The routing information includes that specified object passes through Path on multiple location points coordinate value；Second determining module, for according to routing information determine specified object whether edge Preset path sliding；Logging request determining module determines that the login is asked if slided for specified object along preset path It asks and is triggered by real user.
9th aspect, the embodiment of the invention provides a kind of servers, including processor and memory, memory to be stored with The machine-executable instruction that can be executed by processor, the processor execute machine-executable instruction with real interface alternation method, Interface alternation verification method, log on request generation method or log on request verification method.
Tenth aspect, the embodiment of the invention provides a kind of machine readable storage medium, which is deposited Machine-executable instruction is contained, when being called and being executed by processor, which promotees the machine-executable instruction Processor is set to realize interface alternation method, interface alternation verification method, log on request generation method or log on request verification method.
Above-mentioned interface alternation method, interface alternation verification method, log on request generation method, log on request verification method, Device and server, first listen to whether mouse chooses the specified object preset in picture on interface；If chosen, mouse is obtained Mark drags the routing information that specified object slides on default picture；And then interface alternation request is generated based on the routing information, And it is sent to server, so that server verifies whether interface alternation request is triggered by real user according to the routing information.This The routing information that invention specifies object to slide on default picture based on mouse drag, whether verifying interface alternation request is by true User's triggering, it is security verified higher, it can be effective against the attack that machine simulation people carries out interface alternation, to improve The stability of system.Meanwhile aforesaid way inputs the character informations such as identifying code without user, so that verification operation mode is more It is convenient.
Other feature and advantage of the disclosure will illustrate in the following description, alternatively, Partial Feature and advantage can be with Deduce from specification or unambiguously determine, or by implement the disclosure above-mentioned technology it can be learnt that.
To enable the above objects, features, and advantages of the disclosure to be clearer and more comprehensible, preferred embodiment is cited below particularly, and cooperate Appended attached drawing, is described in detail below.
Detailed description of the invention
It, below will be to specific in order to illustrate more clearly of the specific embodiment of the invention or technical solution in the prior art Embodiment or attached drawing needed to be used in the description of the prior art be briefly described, it should be apparent that, it is described below Attached drawing is some embodiments of the present invention, for those of ordinary skill in the art, before not making the creative labor It puts, is also possible to obtain other drawings based on these drawings.
Fig. 1 is a kind of schematic diagram of the application scenarios of interface alternation provided in an embodiment of the present invention；
Fig. 2 is a kind of flow chart of interface alternation method provided in an embodiment of the present invention；
Fig. 3 is the flow chart of another interface alternation method provided in an embodiment of the present invention；
Fig. 4 is a kind of schematic diagram of default picture provided in an embodiment of the present invention；
Fig. 5 is a kind of flow chart of interface alternation verification method provided in an embodiment of the present invention；
Fig. 6 is the flow chart of another interface alternation verification method provided in an embodiment of the present invention；
Fig. 7 is a kind of flow chart of log on request generation method provided in an embodiment of the present invention；
Fig. 8 is a kind of flow chart of log on request verification method provided in an embodiment of the present invention；
Fig. 9 is a kind of structural schematic diagram of interface alternation device provided in an embodiment of the present invention；
Figure 10 is the structural schematic diagram that a kind of interface alternation provided in an embodiment of the present invention verifies device；
Figure 11 is a kind of structural schematic diagram of log on request generating means provided in an embodiment of the present invention；
Figure 12 is the structural schematic diagram that a kind of log on request provided in an embodiment of the present invention verifies device；
Figure 13 is a kind of structural schematic diagram of server provided in an embodiment of the present invention.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with attached drawing to the present invention Technical solution be clearly and completely described, it is clear that described embodiments are some of the embodiments of the present invention, rather than Whole embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art are not making creative work premise Under every other embodiment obtained, shall fall within the protection scope of the present invention.
In order to make it easy to understand, a kind of application scenarios of interface alternation are shown first, as shown in Figure 1, the scene includes terminal And server；The terminal can be mobile terminal (such as tablet computer, mobile phone), computer or special-purpose terminal equipment, in terminal Client or browser are installed；Server can be cloud server or property server, on server operation have website or System；Client of the user by being installed in terminal or website or system on the accessible server of browser.
By taking the interface alternation of logging in system by user as an example；After user opens login interface, terminal is requested to server first One identifying code picture, then user inputs the identifying code that the identifying code picture is shown on login interface, submits logging request When identifying code is sent to server together；The identifying code that the server authentication receives whether the identifying code picture phase with transmission Matching, if it does, then confirming that above-mentioned logging request is submitted by people, i.e., the logging request is triggered by real user, and is held The row logging request；If it does not match, illustrating that the logging request may be to be submitted by machine, the logging request is illegal and refuses The exhausted logging request.
But it is increasingly developed with picture recognition technology and artificial intelligence technology, machine using program code easily It identifies the identifying code in identifying code picture, to simulate people's input and submit identifying code to server, reduces above-mentioned identifying code The safety of mode；Since machine can identify identifying code easily, login account and password can be submitted repeatedly in a short time, To crack the account number cipher of user, other malicious operations are carried out using the account number cipher, affect the stability of system.It is based on This, the embodiment of the present invention provides a kind of interface alternation and its verification method, log on request generate and verification method and device, the skill Art can be applied in the scene of various man-machine interface interactions, such as logs in, posts, voting, upper transmitting file.
Firstly, a kind of flow chart of interface alternation method shown in Figure 2；This method is applied to terminal, this method packet Include following steps:
Step S202, monitors whether mouse chooses the specified object preset in picture on interface；
The default picture is usually the picture that server is returned according to the interaction request of terminal, which, which is used to verify, works as Whether preceding interface alternation is to be operated by people.Specified object in default picture can be specific shape, character, pattern etc.； The specified object can be highlighted in default picture, can also be indicated by way of explanatory note and be had in the default picture Which object of body is specified object.User's control mouse carries out clicking operation on specified object, that is, can be identified as mouse and choose The specified object；The clicking operation can be that a certain key pressed on mouse is motionless, or press a certain on mouse Key unclamps again the key.
Step S204 obtains the routing information that the mouse drag specifies object to slide on default picture if chosen；It should Routing information includes the coordinate value of multiple location points on the path that specified object passes through；
After mouse chooses specified object, specified object can be moved with the movement of mouse.Browser can be passed through at this time Or preassembled component, script etc. in application program, obtain the routing information of mouse, the routing information of the mouse i.e. specified pair The routing information of elephant.The coordinate value for multiple location points on path that the routing information can pass through for specified object；The path Information is specifically as follows the set of the coordinate value of multiple location points under the coordinate system established based on current display window, can also be with For the set of the coordinate value of multiple location points under the coordinate system established based on default picture.
In acquisition process, primary current position can be specifically acquired with every preset time period (such as 10ms, 100ms) Coordinate can stop acquiring above-mentioned position coordinates when specified object is chosen in mouse stopping.User control mouse it is mobile when, It would generally be moved according to the path indicated on default picture；For example, showing path in default picture, user can pass through Mouse drag specifies object to move along the path；Default picture can be configured with explanatory note, and user is based on the text and says It is bright to drag specified object movement.
Step S206 generates interface alternation request based on above-mentioned routing information；
Routing information is generally included in interface alternation request, it can also be simultaneously comprising in account name and account password etc. Hold；Account name therein and account password are pre-entered by user；When mouse clicks the associated button in interface, that is, produce Interface alternation request, and interface alternation request will be sent to server.
The request of above-mentioned interface alternation is sent to server, so that server verifies boundary according to routing information by step S208 Whether face interaction request is triggered by real user.
In order to ensure the safety of routing information transmitting, interface alternation can be requested to carry out by preset Encryption Algorithm Encryption, or encryption is carried out to the routing information in request and is retransmited.Above-mentioned default picture middle finger is previously stored in server Determine the standard routes information of object；Server the routing information received can be compared with standard routes information, if The two deviation can determine that above-mentioned interface alternation request is the request that people submits, be by really using in reasonable threshold range Family triggering.
If it is the above-mentioned request that machine is submitted, machine is generally difficult to identify the path in above-mentioned default picture, or is difficult to Understand the default corresponding explanatory note of picture, and then control specified object and slided according to correct path, therefore, if machine mentions It hands in and states interface alternation request, routing information therein is probably larger with standard routes errored message, has exceeded above-mentioned threshold It is worth range, thus server, which can determine the request not, to be triggered by real user, is illegal request.
Above-mentioned interface alternation method, first listens to whether mouse chooses the specified object preset in picture on interface；If It chooses, then obtains the routing information that mouse drag specifies object to slide on default picture；And then it is generated based on the routing information Interface alternation request, and it is sent to server, so that whether server verifies interface alternation request by true according to the routing information Real user's triggering.The present invention is based on the routing informations that mouse drag specifies object to slide on default picture, verify interface alternation Whether request is triggered by real user, security verified higher, can be effective against machine simulation people and be carried out attacking for interface alternation Behavior is hit, to improve the stability of system.Meanwhile aforesaid way inputs the character informations such as identifying code without user, so that Verification operation mode is more convenient.
The embodiment of the present invention also provides another interface alternation method, and this method is on the basis of above-described embodiment the method Upper realization；The specific implementation for the routing information that this method emphasis description acquisition mouse drag specifies object to slide on default picture Process, and the specific implementation process that interface alternation is requested is generated according to the routing information, as shown in figure 3, this method includes such as Lower step:
Step S302, monitors whether mouse chooses the specified object preset in picture on interface；If so, executing step S304；If not, executing step S302；
Step S304 acquires mouse drag and specifies object when sliding on default picture according to the preset sampling interval, should The coordinate value for each location point that specified object passes through；
The above-mentioned preset sampling interval can choose default sample interval when specified object for browser to mouse long-pressing, Under different browsers, the sampling interval is typically different；Sampling interval can certainly be specifically set according to actual needs.It is such as above-mentioned Described in embodiment, mouse drag specifies object during sliding on default picture, can be established based on browser window Coordinate system acquires the coordinate value for each location point that specified object passes through, and the set of the coordinate value is above-mentioned routing information；? Coordinate system can be established on default picture, the collection process of coordinate value is carried out based on the coordinate system.
Step S306, monitors whether mouse clicks designated button；If so, executing step S308；If not, executing step S306；
The designated button is specifically as follows the buttons such as " login ", " determination ", " submission ", " upload ".With the boundary of system login For the interaction of face, user inputs name on account, password on interface and drags specified object in default picture by mouse control After upper slide, it will usually click above-mentioned " login " button.By taking the interface alternation posted as an example, user is defeated on interface Enter model data to be delivered, and specified object is dragged after slide on default picture by mouse control, usually Above-mentioned " submission " button can be clicked.
Step S308 generates interface alternation request；Interface alternation request includes each position that above-mentioned specified object passes through Set coordinate value a little；
The request of above-mentioned interface alternation is sent to server by step S310, so that server is passed through according to above-mentioned specified object Whether the coordinate value verifying interface alternation request for each location point crossed is triggered by real user.
Above-described embodiment in order to better understand, following Fig. 4 are a kind of example of default picture；Include in the default picture The preset path of the white of one arc and the specified object placed in preset path starting point, the specified object is with sliding block For.There are also related texts to illustrate at the top of default picture, i.e., " please dragging sliding block by following track " in figure, to indicate user Carry out correct verification operation.User is moved since the starting point of preset path along preset path by mouse drag sliding block It is dynamic, until the terminal of preset path.
In addition, default picture bottom is also set up, there are two buttons, respectively Refresh button and " determination " button；Work as user After the drag operation for completing sliding block, " determination " button is clicked, interface alternation request can be generated based on collected routing information； In being dragged to operating process, if it find that sliding block deviates from the path in default picture, then Refresh button, sliding block can be clicked Path starting point can be returned to, the acquisition of routing information is re-started.
In aforesaid way, terminal acquires mouse drag and specifies object sliding on default picture according to the preset sampling interval When dynamic, the coordinate value for each location point for specifying object to pass through, to obtain the routing information of specified object；When mouse click refers to When determining button, interface alternation request is generated based on the routing information；Which can be effective against machine simulation people and carry out interface Interactive attack, to improve the stability of system.Meanwhile aforesaid way is not necessarily to user inputs character information, so that Verification operation mode is more convenient.
The present embodiment additionally provides a kind of interface alternation verification method, and this method is on the basis of above-described embodiment the method Upper realization；This method emphasis, which describes terminal, requests interface alternation after being sent to server, and server is requested for interface alternation The verification process whether triggered by real user, as shown in figure 5, this method comprises the following steps:
Step S502 receives the interface alternation request from client；Interface alternation request is specified including mouse drag The routing information that object slides on default picture；The routing information includes multiple location points on the path that specified object passes through Coordinate value；
Step S504 is determined according to above-mentioned routing information and is specified whether object slides along preset path；
As described in above-described embodiment, the coordinate for each location point that specified object passes through is generally comprised in the routing information Value, above-mentioned preset path are generally also made of each location point；By compare routing information in each location point coordinate value with The coordinate value of each location point in preset path, that is, can determine whether specified object slides along preset path.For example, can be first First judge whether the coordinate value of the source location set in the coordinate value and preset path of the source location set in routing information is being permitted Perhaps in error range, then judge end position point in the coordinate value and preset path of the end position point in routing information Then whether coordinate value judges in routing information in addition to source location set and end position point in the error range of permission Whether the coordinate value of location point is in the error range of permission, can be with if most location point is in error range Determine that specified object is slided along preset path.
Step S506 determines interface alternation request by real user if specified object is slided along above-mentioned preset path Triggering.
If passage path information determines that specified object is slided along above-mentioned preset path, the interface alternation can be determined Request is submitted by people, and interface alternation request is triggered by real user, i.e., the requests verification passes through；If specified object does not have edge The sliding of above-mentioned preset path, then can determine that the object of control mouse does not identify the path in default picture, having very much can Interface alternation request can be submitted by machine, interface alternation request is triggered by real user, i.e., the requests verification fails.
The present invention provides a kind of interface alternation verification methods, receive the interface alternation request from client first；So It is determined afterwards according to the routing information and specifies whether object slides along preset path；If specified object is sliding along the preset path It is dynamic, determine that interface alternation request is triggered by real user.Which is based on mouse drag and object is specified to slide on default picture Routing information, verifying interface alternation request whether triggered by real user, it is security verified higher, machine can be effective against The attack that people carries out interface alternation is simulated, to improve the stability of system.Meanwhile aforesaid way is inputted without user Character information, so that verification operation mode is more convenient.
The embodiment of the invention also provides another interface alternation verification method, this method method shown in above-mentioned Fig. 5 On the basis of realize；The description of this method emphasis determines the specific reality whether specified object slides along preset path according to routing information Existing mode, as shown in fig. 6, this method comprises the following steps:
Step S602 receives the interface alternation request from client；Interface alternation request is specified including mouse drag The routing information that object slides on default picture.
Step S604 counts the sum of location point in above-mentioned routing information；
Step S606, judges whether the sum of location point meets preset amount threshold；If it is satisfied, executing step S608；If conditions are not met, executing step S616；
Above-mentioned preset amount threshold can be arranged according to demand, for example, the amount threshold is set as 20.If location point Sum it is very few, then may illustrate user by mouse only drag specify object slided a part of path, do not reach default The terminal in path, it is also possible to illustrate that mouse is manipulated by machine, slide one section at random in the case where no identification preset path Path.Thus in order to which the reliability for improving verification mode is first united before determining whether specified object slides along preset path Whether the sum for counting location point is enough, if the sum of the location point is less than preset amount threshold, server if determines interface Interaction request is illegal, and requests verification failure information is back to terminal；If the sum of the location point is more than or equal to pre- If amount threshold, then carry out the process of subsequent path comparison, be specifically described below.
Step S608 judges the source location set in the coordinate value and preset path of the source location set in routing information Whether the absolute value of the first difference of coordinate value meets the first difference threshold；If the absolute value of the first difference meets the first difference Threshold value executes step S610；Otherwise, step S616 is executed；
In actual implementation, above-mentioned first difference generally includes the first abscissa difference and the first ordinate difference, wherein The difference of the abscissa value of source location set in the abscissa value and preset path of source location set in routing information is the One abscissa difference, the ordinate of the source location set in the ordinate value and preset path of the source location set in routing information The difference of value is the first ordinate difference.Above-mentioned difference threshold usually can be according to verifying demand setting.If the first abscissa The absolute value of difference is greater than the first difference threshold or the absolute value of the first ordinate difference is greater than the first difference threshold, then Interface alternation request can be determined as illegal, message of the server to terminal return authentication failed；If the first abscissa difference Absolute value be less than or equal to the first difference threshold, and the absolute value of the first ordinate difference be less than or equal to the first difference Threshold value then executes subsequent verification process, that is, judges whether the coordinate value of the end position point in routing information allows in error In the range of.
Step S610 judges the end position point in the coordinate value and preset path of the end position point in routing information Whether the absolute value of the second difference of coordinate value meets the second difference threshold；If the absolute value of the second difference meets the second difference Threshold value executes step S612；It is no to then follow the steps S616；
Above-mentioned second difference generally includes the second abscissa difference and the second ordinate difference, wherein in routing information The difference of the abscissa value of end position point in the abscissa value and preset path of end position point is the second abscissa difference, The difference of the ordinate value of end position point in the ordinate value and preset path of end position point in routing information is the Two ordinate differences.Above-mentioned second difference threshold can be identical as the first difference threshold, can also be different.If the second abscissa The absolute value of difference is greater than the second difference threshold or the absolute value of the second ordinate difference is greater than the second difference threshold, then Above-mentioned interface alternation request can be determined as illegal, message of the server to terminal return authentication failed；If the second abscissa The absolute value of difference is less than or equal to the second difference threshold, and the absolute value of the second ordinate difference is less than or equal to second Difference threshold, executes subsequent verification process, i.e., according to the intermediate position points in routing information judge specified object whether along Preset path sliding.
Step S612 is determined according to the intermediate position points in routing information and is specified whether object slides along preset path； If specified object is slided along above-mentioned preset path, step S614 is executed；Otherwise, step S616 is executed；
Step S614 determines that interface alternation request is triggered by real user.Terminate.
If verification result is interface alternation, request is triggered by real user, and server sends interface alternation request to terminal The token triggered by real user, terminal can request to enter corresponding system business interface according to the token, such as log in and connect Mouth, invitation interface etc..
Step S616 determines that interface alternation request is triggered by real user.
If verification result shows interface alternation, request is triggered by real user, and interface alternation request is illegal, Server returns to requests verification failure news to terminal.
Above-mentioned intermediate position points generally include the position in routing information other than source location set and final position point Point；If the difference of some intermediate position points of the coordinate value and preset path of the intermediate position points in routing information is preset In range, then it can determine that the two intermediate position points are overlapped；If the quantity for the intermediate position points being overlapped accounts for the ratio of total quantity Example is more than or equal to designated value, then can determine that specified object is slided along preset path；But if the weight in routing information The negligible amounts of the intermediate position points of conjunction can then determine that mouse is not slided along preset path, and interface alternation request can It with determination is triggered by real user, server returns to the message of authentication failed to terminal.
In a further mode of operation, whether the above-mentioned intermediate position points according in routing information determine specified object along default The step of path is slided, can also be realized by following step 60- step 65:
Step 60, the coordinate value of each intermediate position points in routing information is judged one by one, if it is corresponding to be located at preset path Coordinate value range；
For any one intermediate position points in routing information, judge whether the abscissa value of the intermediate position points meets First coordinate range, first coordinate range can be with are as follows: the abscissa value greater than the source location set in preset path subtracts One difference threshold, and the abscissa value for the end position point being less than in preset path adds the first difference threshold, that is, above-mentioned first Coordinate range can be used for judging intermediate position points abscissa value whether preset path abscissa allowable range of error It is interior；If the abscissa value of intermediate position points meets first coordinate range, then obtain in preset path with the intermediate position points The identical location point of abscissa value ordinate value, and then judge the ordinate values of the intermediate position points and the vertical seat that gets Whether the absolute value of the difference of scale value meets difference threshold, if the absolute value of the difference is greater than difference threshold, by the interposition It sets and is a little not in coordinate value range；If the absolute value of the difference is less than or equal to difference threshold, by the middle position Point is located in coordinate value range.
Step 61, statistics coordinate value is located at the quantity of the intermediate position points of the corresponding coordinate value range of preset path；The system The quantity of the intermediate position points of meter is the quantity labeled as successful intermediate position points.
Step 62, the ratio of the quantity of the intermediate position points of statistics and the intermediate position points sum of routing information is determined；
Step 63, judge whether the ratio meets preset fractional threshold；If so, executing step 64；If not, executing Step 65；
Step 64, determine that specified object is slided along preset path.Terminate.
Step 65, determine that specified object is not slided along preset path.Terminate.
If above-mentioned ratio is more than or equal to proportion threshold value, determine that specified object is slided along preset path；On if Ratio is stated less than proportion threshold value, server will determine that specified object is not slided along preset path, alternatively, determining this boundary Validation-cross request in face is that machine operates, while the message of interface alternation authentication failed is sent to terminal.
In aforesaid way, the start bit in the coordinate value and preset path of the source location set in routing information is first determined whether Whether the absolute value for setting the first difference of coordinate value a little meets difference threshold；If the absolute value of the first difference meets difference threshold Value, judges that the second of the coordinate value of the end position point in the coordinate value and preset path of the end position point in routing information is poor Whether the absolute value of value meets difference threshold；If the absolute value of the second difference meets difference threshold, according in routing information Intermediate position points finally determine whether specified object slides along preset path, and which can be further improved requests verification Reliability improves the stability of system.
In view of logging in system by user is a kind of typical interface alternation mode, it is based on above-mentioned interface alternation method, this reality It applies example and additionally provides a kind of log on request generation method, as shown in fig. 7, this method is applied to terminal, this method includes following step It is rapid:
Step S702 obtains the account information that user inputs in log-in interface；Account information include login account and Login password.
Step S704, monitors whether mouse chooses the specified object preset in picture on interface；
Step S706 obtains the routing information that above-mentioned mouse drag specifies object to slide on default picture if chosen； The routing information includes the coordinate value of multiple location points on the path that specified object passes through；
Step S708, monitors whether above-mentioned mouse clicks designated button；
Step S710 generates log on request if mouse clicks designated button；The log on request includes account information and road Diameter information；
Log on request is sent to server by step S712, so that server verifies the log on request according to routing information Whether triggered by real user.
In actual implementation, the routing information in above-mentioned logging request first can be sent to server by terminal, to be serviced It is to return to an authorization token to terminal after being triggered by real user that device, which verifies logging request according to the routing information,；And then eventually The authorization token and above-mentioned account information are sent to server again by end.
The account information that above-mentioned logging request generation method, first acquisition user input in log-in interface；If monitored The specified object preset in picture on interface is chosen to mouse, obtains the road that mouse drag specifies object to slide on default picture Diameter information；Then when mouse clicks designated button, log on request is generated, and the log on request is sent to server, so that Server verifies whether the log on request is triggered by real user according to routing information.In which, submit logging request it Before, whether the routing information for first specifying object to slide on default picture based on mouse drag verifies logging request by really using Family triggering, it is security verified higher, it can be effective against the attack that machine simulation people is logged in, avoid the machine short time Interior repeated multiple times submission logging request is to crack user password, to improve the stability of system.Meanwhile aforesaid way is not necessarily to User inputs character information, so that verification operation mode is more convenient.
Based on above-mentioned logging request generation method, the present embodiment additionally provides a kind of log on request verification method, such as Fig. 8 institute Show, this method is applied to server, and this method comprises the following steps:
Step S802 receives the logging request from client；The logging request includes that mouse drag specifies object pre- If the account information that the routing information and user that slide on picture input in log-in interface；The routing information includes specified object The coordinate value of multiple location points on the path of process；
Step S804 is determined according to above-mentioned routing information and is specified whether object slides along preset path；
Step S806 determines that logging request is triggered by real user if specified object is slided along preset path.
Above-mentioned log on request verification method, first logging request of the reception from client；Then according in logging request Routing information determines whether specified object slides along preset path；If specified object is slided along preset path, determination is stepped on Record request is triggered by real user.In which, before submitting logging request, first specify object default based on mouse drag The routing information slided on picture, whether verifying logging request is triggered by real user, security verified higher, can effectively be supported The attack that anti-machine simulation people is logged in avoids in the machine short time repeated multiple times submission logging request to crack user Password, to improve the stability of system.Meanwhile aforesaid way inputs the character informations such as identifying code without user, so that testing It is more convenient to demonstrate,prove mode of operation.
Corresponding to above-mentioned interface alternation embodiment of the method, the embodiment of the invention provides a kind of interface alternation device, such as Fig. 9 Shown, which includes:
Mouse monitors module 90, for monitoring whether mouse chooses the specified object preset in picture on interface；
First obtains module 91, if obtaining the road that mouse drag specifies object to slide on default picture for choosing Diameter information；The routing information includes the coordinate value of multiple location points on the path that specified object passes through；
Interface alternation requests generation module 92, for generating interface alternation request based on above-mentioned routing information；
Interface alternation request sending module 93, for by interface alternation request be sent to server so that server according to Whether routing information verifying interface alternation request is triggered by real user.
Above-mentioned interface alternation device, first listens to whether mouse chooses the specified object preset in picture on interface；If It chooses, obtains the routing information that mouse drag specifies object to slide on default picture；And then boundary is generated based on the routing information Face interaction request, and it is sent to server, so that whether server verifies interface alternation request meeting by true according to routing information User's triggering.The routing information that the present apparatus specifies object to slide on default picture based on mouse drag, it is security verified higher, It can be effective against the attack that machine simulation people carries out interface alternation, to improve the stability of system.Meanwhile it is above-mentioned Mode inputs the character informations such as identifying code without user, so that verification mode is more convenient.
Further, above-mentioned first module 91 is obtained, be also used to: according to the preset sampling interval, acquired mouse drag and refer to Object is determined when sliding on default picture, the coordinate value for each location point for specifying object to pass through.
The technical effect and foregoing interface of interface alternation device provided by the embodiment of the present invention, realization principle and generation Exchange method embodiment is identical, and to briefly describe, interface alternation Installation practice part does not refer to place, can refer to foregoing interface Corresponding contents in exchange method embodiment.
Corresponding to above-mentioned interface alternation verification method embodiment, the embodiment of the invention provides a kind of verifyings of interface alternation to fill It sets, as described in Figure 10, which includes:
Interface alternation request receiving module 101, for receiving the interface alternation request from client；The interface alternation is asked Seek the routing information for specifying object to slide on default picture including mouse drag；The routing information includes that specified object passes through The coordinate value of multiple location points on path；
First determining module 102, for determining whether specified object slides along preset path according to above-mentioned routing information；
Interaction request determining module 103 determines that interface alternation is requested if slided for specified object along preset path It is triggered by real user.
Above-mentioned interface alternation verifies device, receives the interface alternation request from client first；Then according to the path Information determines whether specified object slides along preset path；If specified object is slided along the preset path, interface is determined Interaction request is triggered by real user.The routing information that the device specifies object to slide on default picture based on mouse drag, Verifying interface alternation request whether triggered by real user, it is security verified higher, can be effective against robot simulation people into The attack of row interface alternation, to improve the stability of system.Meanwhile aforesaid way inputs verifying letter without user Breath, so that verification operation mode is more convenient.
Further, above-mentioned first determining module 102, is also used to: judging the coordinate of the source location set in routing information Whether the absolute value of the first difference of the coordinate value of the source location set in value and preset path meets the first difference threshold；If The absolute value of first difference meets the first difference threshold, judges the coordinate value and preset path of the end position point in routing information In the absolute value of the second difference of coordinate value of end position point whether meet the second difference threshold；If the second difference is exhausted Second difference threshold is met to value, determines whether specified object is sliding along preset path according to the intermediate position points in routing information It is dynamic.
Further, above-mentioned first determining module 102, is also used to: judging each intermediate position points in routing information one by one Coordinate value, if be located at the corresponding coordinate value range of preset path；Statistics coordinate value is located at the corresponding coordinate value of preset path The quantity of the intermediate position points of range；The intermediate position points sum of the quantity and routing information of the intermediate position points of determining statistics Ratio；If the ratio meets preset fractional threshold, determine that specified object is slided along preset path.
Further, above-mentioned apparatus further includes location point quantity judgment module, is used for: location point in statistical path information Sum；Judge whether the sum of location point meets preset amount threshold；If it is satisfied, triggering the first determining module 102 of operation.
Interface alternation provided by the embodiment of the present invention verifies device, the technical effect of realization principle and generation and aforementioned Interface alternation verification method embodiment is identical, and to briefly describe, interface alternation verifying Installation practice part does not refer to place, can With reference to corresponding contents in foregoing interface validation-cross embodiment of the method.
Corresponding to above-mentioned logging request generation method embodiment, generates and fill the embodiment of the invention provides a kind of log on request It sets, as shown in figure 11, which includes:
Account information obtains module 110, the account information inputted in log-in interface for obtaining user；
First monitors module 111, for monitoring whether mouse chooses the specified object preset in picture on interface；
Second obtains module 112, if obtaining the road that mouse drag specifies object to slide on default picture for choosing Diameter information；The routing information includes the coordinate value of multiple location points on the path that specified object passes through；
Second monitors module 113, for monitoring whether mouse clicks designated button；
Log on request generation module 114, if generating log on request for clicking designated button；The log on request includes Account information and routing information；
Log on request sending module 115, for log on request to be sent to server, so that server is according to routing information Whether verifying log on request is triggered by real user.
The account information that above-mentioned logging request generating means, first acquisition user input in log-in interface；If monitored The specified object preset in picture on interface is chosen to mouse, obtains the road that mouse drag specifies object to slide on default picture Diameter information；Then monitor whether mouse clicks designated button；If mouse clicks designated button, log on request is generated, and should Log on request is sent to server, so that server verifies whether the log on request is triggered by real user according to routing information. The device before submitting logging request, test by the routing information for first specifying object to slide on default picture based on mouse drag Whether card logging request is triggered by real user, security verified higher, can be effective against what machine simulation people was logged in Attack, avoids in the machine short time that repeated multiple times submission logging request is to crack user password, to improve system Stability.Meanwhile aforesaid way is not necessarily to user inputs character information, so that verification operation mode is more convenient.
Generation method embodiment is verified corresponding to above-mentioned logging request, the embodiment of the invention provides a kind of log on request to test Card device, as shown in figure 12, which includes:
Logging request receiving module 120, for receiving the logging request from client；The logging request includes that mouse drags The account information that the routing information and user that dynamic specified object slides on default picture input in log-in interface；Path letter Breath includes the coordinate value of multiple location points on the path that specified object passes through；
Second determining module 121, for determining whether specified object slides along preset path according to routing information；
Logging request determining module 122 determines logging request by true if slided for specified object along preset path Real user's triggering.
The log on request verifies device, first logging request of the reception from client；Then according to logging request Road Diameter information determines whether specified object slides along preset path；If specified object is slided along preset path, determines and log in Request is triggered by real user.The device first specifies object in default picture before submitting logging request based on mouse drag The routing information of upper sliding, whether verifying logging request is triggered by real user, security verified higher, can be effective against machine The attack that device simulation people is logged in, avoids repeated multiple times submission logging request in the machine short time close to crack user Code, to improve the stability of system.Meanwhile aforesaid way inputs the character informations such as identifying code without user, so that verifying Mode of operation is more convenient.
Shown in Figure 13 the embodiment of the invention also provides a kind of server, which includes processor 130 and deposits Reservoir 131, the memory 131 are stored with the machine-executable instruction that can be executed by processor 130, which executes Machine-executable instruction is to realize above-mentioned interface alternation method, above-mentioned interface alternation verification method, above-mentioned log on request generation side Method or above-mentioned log on request verification method.
Further, server shown in Figure 13 further includes bus 132 and communication interface 133, and processor 130, communication connect Mouth 133 and memory 131 are connected by bus 132.
Wherein, memory 131 may include high-speed random access memory (RAM, Random Access Memory), It may further include non-labile memory (non-volatile memory), for example, at least a magnetic disk storage.By extremely A few communication interface 133 (can be wired or wireless) is realized logical between the system network element and at least one other network element Letter connection, can be used internet, wide area network, local network, Metropolitan Area Network (MAN) etc..Bus 132 can be isa bus, pci bus or Eisa bus etc..The bus can be divided into address bus, data/address bus, control bus etc..Only to be used in Figure 13 convenient for indicating One four-headed arrow indicates, it is not intended that an only bus or a type of bus.
Processor 130 may be a kind of IC chip, the processing capacity with signal.It is above-mentioned during realization Each step of method can be completed by the integrated logic circuit of the hardware in processor 130 or the instruction of software form.On The processor 130 stated can be general processor, including central processing unit (Central Processing Unit, abbreviation CPU), network processing unit (Network Processor, abbreviation NP) etc.；It can also be digital signal processor (Digital Signal Processing, abbreviation DSP), specific integrated circuit (Application Specific Integrated Circuit, abbreviation ASIC), ready-made programmable gate array (Field-Programmable Gate Array, abbreviation FPGA) or Person other programmable logic device, discrete gate or transistor logic, discrete hardware components.It may be implemented or execute sheet Disclosed each method, step and logic diagram in inventive embodiments.General processor can be microprocessor or the processing Device is also possible to any conventional processor etc..The step of method in conjunction with disclosed in the embodiment of the present invention, can be embodied directly in Hardware decoding processor executes completion, or in decoding processor hardware and software module combination execute completion.Software mould Block can be located at random access memory, flash memory, read-only memory, programmable read only memory or electrically erasable programmable storage In the storage medium of this fields such as device, register maturation.The storage medium is located at memory 131, and processor 130 reads memory Information in 131, in conjunction with its hardware complete previous embodiment method the step of.
The embodiment of the invention also provides a kind of machine readable storage medium, which is stored with machine Executable instruction, for the machine-executable instruction when being called and being executed by processor, which promotes processor Realize above-mentioned interface alternation method, above-mentioned interface alternation verification method, above-mentioned log on request generation method or above-mentioned log on request Verification method, specific implementation can be found in embodiment of the method, and details are not described herein.
The calculating of interface alternation method, interface alternation verification method and device and server provided by the embodiment of the present invention Machine program product, the computer readable storage medium including storing program code, the instruction that said program code includes are available In executing previous methods method as described in the examples, specific implementation can be found in embodiment of the method, and details are not described herein.
It, can be with if the function is realized in the form of SFU software functional unit and when sold or used as an independent product It is stored in a computer readable storage medium.Based on this understanding, technical solution of the present invention is substantially in other words The part of the part that contributes to existing technology or the technical solution can be embodied in the form of software products, the meter Calculation machine software product is stored in a storage medium, including some instructions are used so that a computer equipment (can be a People's computer, server or network equipment etc.) it performs all or part of the steps of the method described in the various embodiments of the present invention. And storage medium above-mentioned includes: that USB flash disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), arbitrary access are deposited The various media that can store program code such as reservoir (RAM, Random Access Memory), magnetic or disk.
Finally, it should be noted that embodiment described above, only a specific embodiment of the invention, to illustrate the present invention Technical solution, rather than its limitations, scope of protection of the present invention is not limited thereto, although with reference to the foregoing embodiments to this hair It is bright to be described in detail, those skilled in the art should understand that: anyone skilled in the art In the technical scope disclosed by the present invention, it can still modify to technical solution documented by previous embodiment or can be light It is readily conceivable that variation or equivalent replacement of some of the technical features；And these modifications, variation or replacement, do not make The essence of corresponding technical solution is detached from the spirit and scope of technical solution of the embodiment of the present invention, should all cover in protection of the invention Within the scope of.Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims (14)

1. a kind of interface alternation method, which is characterized in that the described method includes:
Monitor whether mouse chooses the specified object preset in picture on interface；
If chosen, the routing information for specifying object to slide on the default picture described in the mouse drag is obtained；It is described Routing information includes the coordinate value of multiple location points on the path that the specified object passes through；
Interface alternation request is generated based on the routing information；
Interface alternation request is sent to server, so that the server verifies the interface according to the routing information Whether interaction request is triggered by real user.
2. specifying object described pre- described in the mouse drag the method according to claim 1, wherein obtaining If the step of routing information slided on picture, comprising:
According to the preset sampling interval, acquires and specify object when sliding on the default picture described in the mouse drag, institute State the coordinate value for each location point that specified object passes through.
3. a kind of interface alternation verification method, which is characterized in that the described method includes:
Receive the interface alternation request from client；The interface alternation request includes that mouse drag specifies object in default figure The routing information of on piece sliding；The routing information includes the coordinate of multiple location points on the path that the specified object passes through Value；
Determine whether the specified object slides along preset path according to the routing information；
If the specified object is slided along the preset path, determine that the interface alternation request is triggered by real user.
4. according to the method described in claim 3, it is characterized in that, whether determining the specified object according to the routing information The step of being slided along preset path, comprising:
Judge the coordinate value of the source location set in the routing information and the coordinate of the source location set in the preset path Whether the absolute value of the first difference of value meets the first difference threshold；
If the absolute value of first difference meets first difference threshold, the end position in the routing information is judged Whether the absolute value of the second difference of the coordinate value of the coordinate value and end position point in the preset path of point meets second Difference threshold；
If the absolute value of second difference meets second difference threshold, according to the middle position in the routing information Point determines whether the specified object slides along preset path.
5. according to the method described in claim 4, it is characterized in that, determining institute according to the intermediate position points in the routing information The step of whether specified object slides along preset path stated, comprising:
The coordinate value of each intermediate position points in the routing information is judged one by one, if is located at the corresponding seat of the preset path Scale value range；
Statistics coordinate value is located at the quantity of the intermediate position points of the corresponding coordinate value range of the preset path；
Determine the ratio of the quantity of the intermediate position points of statistics and the intermediate position points sum of the routing information；
If the ratio meets preset fractional threshold, determine that the specified object is slided along preset path.
6. according to the method described in claim 3, it is characterized in that, according to the routing information determine the mouse whether along Before the step of preset path is slided, the method also includes:
Count the sum of location point in the routing information；
Judge whether the sum of the location point meets preset amount threshold；
The step of whether specified object slides along preset path is determined according to the routing information if it is satisfied, executing.
7. a kind of log on request generation method, which is characterized in that the described method includes:
Obtain the account information that user inputs in log-in interface；
Monitor whether mouse chooses the specified object preset in picture on interface；
If chosen, the routing information for specifying object to slide on the default picture described in the mouse drag is obtained；It is described Routing information includes the coordinate value of multiple location points on the path that the specified object passes through；
Monitor whether the mouse clicks designated button；
If the mouse clicks the designated button, log on request is generated；The log on request include the account information and The routing information；
The log on request is sent to server, so that the server verifies the log on request according to the routing information Whether triggered by real user.
8. a kind of log on request verification method, which is characterized in that the described method includes:
Receive the logging request from client；The logging request includes that mouse drag specifies object to slide on default picture Routing information and the account information that is inputted in log-in interface of user；The routing information includes that the specified object passes through The coordinate value of multiple location points on path；
Determine whether the specified object slides along preset path according to the routing information；
If the specified object is slided along the preset path, determine that the logging request is triggered by real user.
9. a kind of interface alternation device, which is characterized in that described device includes:
Mouse monitors module, for monitoring whether mouse chooses the specified object preset in picture on interface；
First obtains module, if obtaining for choosing and specifying object sliding on the default picture described in the mouse drag Dynamic routing information；The routing information includes the coordinate value of multiple location points on the path that the specified object passes through；
Interface alternation requests generation module, for generating interface alternation request based on the routing information；
Interface alternation request sending module, for interface alternation request to be sent to server, so that the server root Verify whether interface alternation request is triggered by real user according to the routing information.
10. a kind of interface alternation verifies device, which is characterized in that described device includes:
Interface alternation request receiving module, for receiving the interface alternation request from client；The interface alternation request packet Include the routing information that mouse drag specifies object to slide on default picture；The routing information includes that the specified object passes through Path on multiple location points coordinate value；
First determining module, for determining whether the specified object slides along preset path according to the routing information；
Interaction request determining module determines that the interface is handed over if slided for the specified object along the preset path Mutually request is triggered by real user.
11. a kind of log on request generating means, which is characterized in that described device includes:
Account information obtains module, the account information inputted in log-in interface for obtaining user；
First monitors module, for monitoring whether mouse chooses the specified object preset in picture on interface；
Second obtains module, if obtaining for choosing and specifying object sliding on the default picture described in the mouse drag Dynamic routing information；The routing information includes the coordinate value of multiple location points on the path that the specified object passes through；
Second monitors module, for monitoring whether the mouse clicks designated button；
Log on request generation module, if generating log on request for clicking the designated button；The log on request includes institute State account information and the routing information；
Log on request sending module, for the log on request to be sent to server, so that the server is according to the road Whether log on request described in diameter Information Authentication is triggered by real user.
12. a kind of log on request verifies device, which is characterized in that described device includes:
Logging request receiving module, for receiving the logging request from client；The logging request includes that mouse drag refers to Determine the routing information that object slides on default picture and the account information that user inputs in log-in interface；The routing information The coordinate value of the multiple location points on path passed through including the specified object；
Second determining module, for determining whether the specified object slides along preset path according to the routing information；
Logging request determining module determines that the login is asked if slided for the specified object along the preset path It asks and is triggered by real user.
13. a kind of server, which is characterized in that including processor and memory, the memory is stored with can be by the place The machine-executable instruction that device executes is managed, the processor executes the machine-executable instruction to realize claim 1 to 2 times Described in the described in any item interface alternation verification methods of interface alternation method described in one, claim 3 to 6, claim 7 Log on request generation method or log on request verification method according to any one of claims 8.
14. a kind of machine readable storage medium, which is characterized in that the machine readable storage medium is stored with the executable finger of machine It enables, for the machine-executable instruction when being called and being executed by processor, the machine-executable instruction promotes processor to realize The described in any item interface alternation methods of claim 1 to 2, the described in any item interface alternation authentications of claim 3 to 6 Method, log on request generation method as claimed in claim 7 or log on request verification method according to any one of claims 8.
CN201910467418.6A 2019-05-30 2019-05-30 Interface alternation and its verification method, log on request generation and verification method and device Pending CN110138800A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910467418.6A CN110138800A (en) 2019-05-30 2019-05-30 Interface alternation and its verification method, log on request generation and verification method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910467418.6A CN110138800A (en) 2019-05-30 2019-05-30 Interface alternation and its verification method, log on request generation and verification method and device

Publications (1)

Publication Number Publication Date
CN110138800A true CN110138800A (en) 2019-08-16

Family

ID=67583293

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910467418.6A Pending CN110138800A (en) 2019-05-30 2019-05-30 Interface alternation and its verification method, log on request generation and verification method and device

Country Status (1)

Country Link
CN (1) CN110138800A (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110909353A (en) * 2019-11-28 2020-03-24 网易（杭州）网络有限公司 Plug-in detection method and device
CN111625819A (en) * 2020-05-26 2020-09-04 北京思特奇信息技术股份有限公司 Method and system for preventing client from using plug-in
CN111831912A (en) * 2020-07-17 2020-10-27 小红书科技有限公司 Method for providing recommendation information when starting application program
CN112257052A (en) * 2020-10-22 2021-01-22 上海悦易网络信息技术有限公司 Verification method and device based on picture
CN113688378A (en) * 2021-08-25 2021-11-23 四川新网银行股份有限公司 Method for improving safety of slider verification code

Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103488934A (en) * 2013-09-24 2014-01-01 刘雪英 Method, device and system for inputting verification codes
CN104573437A (en) * 2013-10-23 2015-04-29 深圳市腾讯计算机系统有限公司 Information authentication method, device and terminal
CN105303096A (en) * 2014-05-27 2016-02-03 联想（新加坡）私人有限公司 Symbol selection for swipe based authentication
CN105574398A (en) * 2015-12-10 2016-05-11 魅族科技（中国）有限公司 Verification code verification method and device
CN105956436A (en) * 2016-06-16 2016-09-21 深圳市金立通信设备有限公司 Permission control method of application program, and terminal
CN106815515A (en) * 2016-12-12 2017-06-09 微梦创科网络科技（中国）有限公司 A kind of identifying code implementation method and device based on track checking
CN106991303A (en) * 2017-03-07 2017-07-28 微梦创科网络科技（中国）有限公司 A kind of recognition methods of gesture identifying code and device
CN107301337A (en) * 2016-04-14 2017-10-27 腾讯科技（深圳）有限公司 Information Authentication method and apparatus
CN107395594A (en) * 2017-07-21 2017-11-24 华东师范大学 A kind of automatic identifying method for pulling identifying code
CN107871072A (en) * 2017-11-09 2018-04-03 王海鸥 A kind of verification method being applied in client end interface and system
CN108008898A (en) * 2017-12-13 2018-05-08 东软集团股份有限公司 Page info acquisition methods, device, computer equipment and storage medium
KR20180093294A (en) * 2017-02-13 2018-08-22 조선대학교산학협력단 Method and Device for Authenticating using Pressure Information
CN108985041A (en) * 2018-05-17 2018-12-11 厦门二五八网络科技集团股份有限公司 A kind of identifying code identification input method and system based on sliding verifying

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103488934A (en) * 2013-09-24 2014-01-01 刘雪英 Method, device and system for inputting verification codes
CN104573437A (en) * 2013-10-23 2015-04-29 深圳市腾讯计算机系统有限公司 Information authentication method, device and terminal
CN105303096A (en) * 2014-05-27 2016-02-03 联想（新加坡）私人有限公司 Symbol selection for swipe based authentication
CN105574398A (en) * 2015-12-10 2016-05-11 魅族科技（中国）有限公司 Verification code verification method and device
CN107301337A (en) * 2016-04-14 2017-10-27 腾讯科技（深圳）有限公司 Information Authentication method and apparatus
CN105956436A (en) * 2016-06-16 2016-09-21 深圳市金立通信设备有限公司 Permission control method of application program, and terminal
CN106815515A (en) * 2016-12-12 2017-06-09 微梦创科网络科技（中国）有限公司 A kind of identifying code implementation method and device based on track checking
KR20180093294A (en) * 2017-02-13 2018-08-22 조선대학교산학협력단 Method and Device for Authenticating using Pressure Information
CN106991303A (en) * 2017-03-07 2017-07-28 微梦创科网络科技（中国）有限公司 A kind of recognition methods of gesture identifying code and device
CN107395594A (en) * 2017-07-21 2017-11-24 华东师范大学 A kind of automatic identifying method for pulling identifying code
CN107871072A (en) * 2017-11-09 2018-04-03 王海鸥 A kind of verification method being applied in client end interface and system
CN108008898A (en) * 2017-12-13 2018-05-08 东软集团股份有限公司 Page info acquisition methods, device, computer equipment and storage medium
CN108985041A (en) * 2018-05-17 2018-12-11 厦门二五八网络科技集团股份有限公司 A kind of identifying code identification input method and system based on sliding verifying

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110909353A (en) * 2019-11-28 2020-03-24 网易（杭州）网络有限公司 Plug-in detection method and device
CN111625819A (en) * 2020-05-26 2020-09-04 北京思特奇信息技术股份有限公司 Method and system for preventing client from using plug-in
CN111625819B (en) * 2020-05-26 2023-04-28 北京思特奇信息技术股份有限公司 Method and system for preventing client from using plug-in
CN111831912A (en) * 2020-07-17 2020-10-27 小红书科技有限公司 Method for providing recommendation information when starting application program
CN112257052A (en) * 2020-10-22 2021-01-22 上海悦易网络信息技术有限公司 Verification method and device based on picture
CN113688378A (en) * 2021-08-25 2021-11-23 四川新网银行股份有限公司 Method for improving safety of slider verification code

Similar Documents

Publication Publication Date Title
CN110138800A (en) Interface alternation and its verification method, log on request generation and verification method and device
US11736478B2 (en) Device, system, and method of user authentication based on user-specific characteristics of task performance
CN108650226B (en) A kind of login validation method, device, terminal device and storage medium
US8004491B2 (en) System for and methods of storing and comparing computer generated continuous vector lines through a non-secure or a secure communication channel
US11645379B2 (en) Security verification method and relevant device
US20180308107A1 (en) Living-body detection based anti-cheating online research method, device and system
CN107682368B (en) Verification method, client, server and system based on interactive operation
CN105574398B (en) A kind of verification code verification method and device
CN108881126B (en) Method, device and system for verifying verification code, storage medium and computer terminal
CN104954131B (en) The verification method and system of identifying code
US10192042B2 (en) User verifying method, terminal device, server and storage medium
CN111241517A (en) Method and device for constructing biological characteristic verification question-answer library
CN112187702A (en) Method and device for verifying client
CN109407947A (en) Interface alternation and its verification method, logging request generation and verification method and device
KR20130015922A (en) Method and apparatus for input password in using game
CN108121906A (en) A kind of verification method, device and computing device
CN107370770A (en) Login method, apparatus and system
CN107211030A (en) Use the method and system for anti-phishing of intelligent image
CN108804885A (en) Man-machine verification method and device, storage medium and processor
CN106130739A (en) Application program login process method and device
CN109726543A (en) A kind of login method of application program, device, terminal device and storage medium
CN111143812B (en) Login authentication method based on graphics
CN107358088A (en) Verification method and system based on clock
CN111090849A (en) Memory, verification code implementation method, device and equipment
US20190205777A1 (en) Method and apparatus for evaluating a user-specified path in an activity

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20190816

RJ01 Rejection of invention patent application after publication