CN110851814B - Verification method for user login based on image - Google Patents

Abstract

The invention discloses a verification method for user login based on an image, which expands the traditional login identification authentication method, increases picture identification and random change from original single, fixed and unchanged character passwords, and improves the security of own passwords, accounts and information after peeping when the user logs in. On the premise of using the personal password to carry out login verification, the login method capable of reducing the password attack of the user is provided, so that privacy revealing probability is reduced, and personal property safety is guaranteed.

Description

Verification method for user login based on image

Technical Field

The invention relates to the field of computers, in particular to a verification method for user login based on images.

Background

Traditional text passwords consist of numbers, letters, etc. that are sufficient to resist brute force attacks, but a powerful text password is hard to remember, so users tend to choose regular, concise passwords, which results in weaker password security.

Most previous passwords based on image recognition such as: the image point passwords need to be used for login authentication by drawing specified patterns by hands, but the passwords still cannot effectively resist attack of an attacker and are easy to be subjected to shoulder peeping attack.

Disclosure of Invention

Aiming at the defects related to the background technology, the invention provides a verification method for user login based on images.

The invention adopts the following technical scheme for solving the technical problems:

a verification method for user login based on images comprises the following steps:

step 1), when a user inputs a password, randomly selecting 9 patterns in a preset pattern library, randomly sequencing the patterns, sequentially filling the patterns into 9 password slots, and reminding the user to select one pattern as a mark pattern;

step 2), after the user selects the mark pattern, randomly sequencing the nine numbers 1 to 9, sequentially filling the nine numbers into the 9 password slots for display, reminding the user to memorize the positions of the password slots corresponding to the nine numbers, and then confirming;

step 3), after the user confirms, displaying the 9 patterns in the step 1), and reminding the user to input a password;

step 4), correcting the password after the user inputs the password:

judging whether the number corresponding to the code slot corresponding to the mark pattern is odd or even, and if the number is odd, directly taking the code input by the user as the corrected code; if the number is even, the passwords input by the user are arranged in reverse order and then used as corrected passwords;

and 5) sending the user name and the corrected password to a server, and judging whether the user name and the password are correct or not by the server.

Compared with the prior art, the technical scheme provided by the invention has the following technical effects:

1. the sequence of the patterns at each login can be randomly changed, and the positions of the identification patterns cannot be known in advance, so that the password security is greatly improved due to good defense effect on the shoulder peeping mode;

2. each time of random generation has good effect. The result shows that the random result can effectively avoid human factors, so that the password is safer.

Drawings

FIG. 1 is a schematic illustration of an interface for selecting a pattern as a logo pattern in accordance with the present invention;

FIG. 2 is a schematic diagram of an interface showing code slot numbering according to the present invention;

FIG. 3 is a schematic diagram of an interface for inputting a password according to the present invention.

Detailed Description

The technical scheme of the invention is further described in detail below with reference to the accompanying drawings:

this invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. In the drawings, the components are exaggerated for clarity.

The invention discloses a verification method for user login based on images, which comprises the following steps:

step 1), when a user inputs a password, randomly selecting 9 patterns in a preset pattern library, randomly sequencing, sequentially filling the 9 password slots, and reminding the user to select one pattern as a mark pattern, wherein the mark pattern is shown in fig. 1;

step 2), after the user selects the mark pattern, randomly sequencing the nine numbers 1 to 9, sequentially filling the nine numbers into the 9 password slots for display, reminding the user to memorize the positions of the password slots corresponding to the nine numbers, and then confirming the positions, as shown in figure 2;

step 3), after the user confirms, displaying the 9 patterns in the step 1), and reminding the user to input a password, as shown in fig. 3;

step 4), correcting the password after the user inputs the password:

judging whether the number corresponding to the code slot corresponding to the mark pattern is odd or even, and if the number is odd, directly taking the code input by the user as the corrected code; if the number is even, the passwords input by the user are arranged in reverse order and then used as corrected passwords;

and 5) sending the user name and the corrected password to a server, and judging whether the user name and the password are correct or not by the server.

At present, login verification mainly uses text passwords of combination of letters and numbers, when being attacked by shoulder peeping and the like, the security capability is very weak, and therefore account security of a user is seriously threatened under the condition. The invention adopts a brand new authentication scheme, achieves the aim of well preventing attack means such as shoulder peeping and the like, and can well protect the account against attack under the condition of facilitating the memory of a user, thereby greatly improving the safety.

It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

While the foregoing is directed to embodiments of the present invention, other and further details of the invention may be had by the present invention, it should be understood that the foregoing description is merely illustrative of the present invention and that no limitations are intended to the scope of the invention, except insofar as modifications, equivalents, improvements or modifications are within the spirit and principles of the invention.

Claims (1)

1. The verification method for user login based on the image is characterized by comprising the following steps:

step 1), when a user inputs a password, randomly selecting 9 patterns in a preset pattern library, randomly sequencing the patterns, sequentially filling the patterns into 9 password slots, and reminding the user to select one pattern as a mark pattern;

step 2), after the user selects the mark pattern, randomly sequencing the nine numbers 1 to 9, sequentially filling the nine numbers into the 9 password slots for display, reminding the user to memorize the positions of the password slots corresponding to the nine numbers, and then confirming;

step 3), after the user confirms, displaying the 9 patterns in the step 1), and reminding the user to input a password;

step 4), correcting the password after the user inputs the password:

judging whether the number corresponding to the code slot corresponding to the mark pattern is odd or even, and if the number is odd, directly taking the code input by the user as the corrected code; if the number is even, the passwords input by the user are arranged in reverse order and then used as corrected passwords;

and 5) sending the user name and the corrected password to a server, and judging whether the user name and the password are correct or not by the server.

Images