CN114124462B - Verification code transmission method and device, electronic equipment and storage medium - Google Patents
Verification code transmission method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN114124462B CN114124462B CN202111250964.8A CN202111250964A CN114124462B CN 114124462 B CN114124462 B CN 114124462B CN 202111250964 A CN202111250964 A CN 202111250964A CN 114124462 B CN114124462 B CN 114124462B
- Authority
- CN
- China
- Prior art keywords
- verification code
- verification
- content
- code content
- captcha
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000012795 verification Methods 0.000 title claims abstract description 482
- 238000000034 method Methods 0.000 title claims abstract description 57
- 230000005540 biological transmission Effects 0.000 title claims abstract description 34
- 238000004891 communication Methods 0.000 claims abstract description 67
- 230000006399 behavior Effects 0.000 claims description 39
- 238000007667 floating Methods 0.000 claims description 31
- 239000000725 suspension Substances 0.000 claims description 13
- 238000013507 mapping Methods 0.000 claims description 11
- 238000001514 detection method Methods 0.000 claims description 9
- 230000009471 action Effects 0.000 claims description 5
- 230000004044 response Effects 0.000 claims description 4
- 238000005339 levitation Methods 0.000 claims description 3
- 238000005336 cracking Methods 0.000 abstract description 21
- 230000000875 corresponding effect Effects 0.000 description 36
- 238000012545 processing Methods 0.000 description 9
- 238000010586 diagram Methods 0.000 description 8
- 230000003993 interaction Effects 0.000 description 7
- 238000005516 engineering process Methods 0.000 description 6
- 230000003287 optical effect Effects 0.000 description 5
- 230000008569 process Effects 0.000 description 4
- 230000005236 sound signal Effects 0.000 description 4
- 238000004590 computer program Methods 0.000 description 3
- 230000001960 triggered effect Effects 0.000 description 3
- 230000001133 acceleration Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 238000012790 confirmation Methods 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 238000007726 management method Methods 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 238000003491 array Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000003384 imaging method Methods 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000002093 peripheral effect Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
- H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
Abstract
The disclosure relates to a verification code transmission method, a device, an electronic device and a storage medium, wherein the method is applied to a client and comprises the following steps: responding to the verification code obtaining operation, and obtaining a first part of verification code content through a first communication channel between the verification code obtaining operation and a background server of the client; obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server and the verification server; the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification. According to the method and the device, the partial verification codes are respectively obtained from the verification server and the background server corresponding to the client through different communication channels, so that the problem and the answer are simultaneously obtained from the same server through the same communication channel, the technical problem of the verification code is completely cracked as long as the communication channel is cracked, the cracking difficulty of the verification code is improved, and the potential safety hazard is reduced.
Description
Technical Field
The disclosure relates to information security technology, and in particular relates to a verification code transmission method, a verification code transmission device, electronic equipment and a storage medium.
Background
With the rapid development of computers and networks, it is becoming particularly important to safely implement information interaction processes. In the related art, whether the user operation is performed is verified by using the verification code so as to ensure the safety of information interaction. However, the method of verifying whether the verification code is operated by the user is easy to be subjected to violent decoding of the verification code by machine attack, so that potential safety hazards are caused.
Therefore, a method for improving the cracking difficulty of the verification code is urgently needed to reduce the potential safety hazard caused by cracking the verification code.
Disclosure of Invention
In order to overcome the problems in the related art, the present disclosure provides a method, an apparatus, an electronic device, and a storage medium for transmitting a verification code. The technical scheme of the present disclosure is as follows:
according to a first aspect of an embodiment of the present disclosure, there is provided a method for transmitting a verification code, applied to a client, including:
responding to the verification code obtaining operation, and obtaining a first part of verification code content through a first communication channel between the verification code obtaining operation and a background server of the client;
obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server and the verification server;
the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
Optionally, after obtaining the first portion of the passcode content, the method further comprises:
generating and displaying a verification code page containing the first part of verification code content;
after obtaining the second portion of the verification code content corresponding to the first portion of the verification code content, the method further comprises:
creating a floating window, wherein the floating window is independent of the verification code page;
and displaying the second part of verification code content in the floating window.
Optionally, generating and displaying a verification code page containing the first portion of verification code content includes: generating a first verification code picture containing the first part of verification code content, and generating a verification code page by taking the verification code picture as a page element; and/or
Displaying the second portion of passcode content within the floating window, comprising: and generating a second verification code picture containing the second part of verification code content, and displaying the second verification code picture in the floating window.
Optionally, one of the first part of verification code content and the second part of verification code content is a verification code answer, and the other is a verification code question; the method further comprises the steps of:
detecting verification behaviors on the verification code answers;
and sending the answer to be verified corresponding to the verification behavior to the verification server so as to carry out security verification.
Optionally, in the case that the first part of the verification code content is a verification code answer including a plurality of verification characters, the first verification code picture includes a plurality of mapping areas corresponding to the plurality of verification characters one by one; detecting verification behavior on the verification code answer, comprising:
detecting selected behavior on the plurality of mapped regions.
Optionally, before obtaining the second portion of the authentication code content corresponding to the first portion of the authentication code content through a second communication channel with the authentication server, the method further includes:
establishing long connection with the verification server to obtain the second communication channel;
obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server, wherein the second part of verification code content comprises the following components:
and encrypting and transmitting the second part of verification code content through a second communication channel between the second part of verification code content and the verification server.
According to a second aspect of the embodiments of the present disclosure, there is provided an authentication code transmission device, applied to a client, including:
a first obtaining module configured to obtain, in response to a verification code obtaining operation, a first portion of verification code content through a first communication channel with a background server of the client;
a second obtaining module configured to obtain second partial verification code content corresponding to the first partial verification code content through a second communication channel with a verification server; the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
Optionally, after obtaining the first portion of the passcode content, the apparatus further comprises:
a first generation module configured to generate and display a verification code page containing the first portion of verification code content;
after obtaining the second portion of passcode content corresponding to the first portion of passcode content, the apparatus further comprises:
a floating creation module configured to create a floating window, the floating window being independent of the captcha page;
and the suspension display module is configured to display the second part of verification code content in the suspension window.
Optionally, the first generating module includes:
the first generation unit is configured to generate a first verification code picture containing the first part of verification code content, and generate the verification code page by taking the verification code picture as a page element; and/or
The levitation display module includes:
and the suspension display unit is configured to generate a second verification code picture containing the second part of verification code content, and display the second verification code picture in the suspension window.
Optionally, one of the first part of verification code content and the second part of verification code content is a verification code answer, and the other is a verification code question; the apparatus further comprises:
a behavior detection module configured to detect a verification behavior on the verification code answer;
and the answer sending module is configured to send an answer to be verified corresponding to the verification action to the verification server so as to carry out security verification.
Optionally, in the case that the first part of the verification code content is a verification code answer including a plurality of verification characters, the first verification code picture includes a plurality of mapping areas corresponding to the plurality of verification characters one by one; the behavior detection module comprises:
and a selected behavior detection unit configured to detect selected behaviors on the plurality of mapping areas.
Optionally, before obtaining the second portion of the authentication code content corresponding to the first portion of the authentication code content through a second communication channel with the authentication server, the apparatus further includes:
a long connection module is established and configured to establish long connection with the verification server to obtain the second communication channel;
the second obtaining module includes:
and the encryption transmission unit is configured to carry out encryption transmission on the second part of verification code content through a second communication channel between the encryption transmission unit and the verification server.
According to a third aspect of embodiments of the present disclosure, there is provided an electronic device, comprising:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the method of passcode transmission of the first aspect.
According to a fourth aspect of embodiments of the present disclosure, there is provided a computer readable storage medium, which when executed by a processor of an electronic device, causes the electronic device to perform the authentication code transmission method according to the first aspect.
According to a fifth aspect of embodiments of the present disclosure, there is provided a computer program product comprising a computer program or computer instructions which, when executed by a processor, implement the verification code transmission method according to the first aspect.
The technical scheme provided by the embodiment of the disclosure can comprise the following beneficial effects:
the method comprises the steps of responding to verification code obtaining operation, and obtaining first part of verification code content through a first communication channel between the verification code obtaining operation and a background server of a client; obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server and the verification server; the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification. The partial verification codes are respectively obtained from the verification server and the background server corresponding to the client through different communication channels, so that the problem and the answer are simultaneously obtained from the same server through the same communication channel, and the technical problem of the verification code is completely solved as long as the communication channel is cracked. Therefore, the difficulty of cracking the verification code is improved, and the potential safety hazard is reduced.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and together with the description, serve to explain the principles of the invention.
FIG. 1 is a flow chart illustrating a method of captcha transmission, in accordance with an exemplary embodiment;
FIG. 2 is an example diagram of a character behavior verification code in the present disclosure;
FIG. 3 is a communication example diagram of a verification code transmission method in the present disclosure;
FIG. 4 is a block diagram illustrating an authentication code transmission device according to an example embodiment;
fig. 5 is a block diagram illustrating an authentication code transmission apparatus according to an exemplary embodiment.
Detailed Description
In order to enable those skilled in the art to better understand the technical solutions of the present disclosure, the technical solutions of the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings.
It should be noted that the terms "first," "second," and the like in the description and claims of the present disclosure and in the foregoing figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the disclosure described herein may be capable of operation in sequences other than those illustrated or described herein. The implementations described in the following exemplary examples are not representative of all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present disclosure as detailed in the accompanying claims.
Fig. 1 is a flowchart illustrating a method for transmitting a verification code according to an exemplary embodiment, and as shown in fig. 1, the method for transmitting a verification code is applied to a client, and includes the following steps:
in step S11, in response to the authentication code acquisition operation, a first portion of authentication code content is acquired through a first communication channel with a background server of the client.
In step S12, obtaining second part of the verification code content corresponding to the first part of the verification code content through a second communication channel between the verification server and the verification server; the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
The client refers to a program corresponding to the server for providing local services to the user. The verification code acquisition operation can be actively triggered by a user, or can be automatically triggered when the client judges that the machine attack is possible. The verification server refers to another server which is different from the background server, can be an air control server or other servers and is used for being matched with the background server to finish issuing complete verification code content. The authentication server may be a server for long connections including push, message, etc. A communication channel originally exists between the client and the corresponding background server, and the channel between the client and the verification server can be a long connection channel established in advance. The long connection channel is not disconnected after each operation is finished, and the data packet is directly sent when the data packet is processed next time, so that connection is not required to be established again.
And the client responds to the verification code acquisition operation and acquires the first part of verification code content issued by the background server through a first communication channel with the background server. The verification code acquisition operation may be triggered on a front-end presentation page of the client. The client sends an authentication code acquisition request to the background server, the background server responds to the authentication code acquisition request and sends a wind control request to the authentication server, and the authentication server returns an authentication result according to the wind control request. The verification request refers to a behavior of requesting whether to perform a verification information interaction process, a network environment and the like; the verification result is whether the verification information interaction process, the network environment and the like are permitted to be safe or whether the verification information interaction process, the network environment and the like are not permitted to be safe, which are returned by the pointer to the verification request.
And the background server returns verification parameters to the client according to the wind control result of wind control after receiving the confirmation returned by the verification server. And the client generates and displays a verification code page according to the received verification parameters, wherein the page only comprises the first part of verification code content. The verification parameters refer to parameters containing verification code content.
And acquiring second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server and the verification server. After the verification code page is displayed, the client sends a second partial request to the verification server through a second communication channel, wherein the second partial request carries information of the first partial verification code content. And the verification server side sends second part verification code content corresponding to the first part verification code content to the client side according to the received second part request. And the client generates an area independent of the verification code page containing the first part of the verification code content according to the received second part of the verification code content, and displays the second part of the verification code content in the area independent of the verification code page.
The first portion of captcha content and the second portion of captcha content may constitute complete captcha content. The first portion of captcha content and the second portion of captcha content may be one that is a captcha answer, and the other that is a captcha question. The verification code question informs the user how to perform the verification code, so that the user performs corresponding actions on the verification code answers to perform verification. For example, the verification code question may inform the user to click on a certain shape, the verification code answer is a picture containing the shape, and the user can pass verification by clicking on the shape in the verification code answer picture; the verification code question can be the sum of two numbers in the input answers of the user, the verification code answers comprise two numbers and an input field, and the sum of the two numbers in the verification code answers input by the user in the input field can pass verification; the verification code question may be to inform the user to draw a slider in the verification code answer from left to right, and the verification code answer includes a slider, and the user can pass the verification by drawing the slider from left to right.
According to the verification code transmission method provided by the embodiment, part of verification codes are respectively acquired from the verification server and the background server corresponding to the client through different communication channels, so that the problem and the answer are simultaneously acquired from the same server through the same communication channel, and the technical problem of the verification code is completely decoded as long as the communication channel is decoded. Therefore, the difficulty of cracking the verification code is improved, and potential safety hazards are avoided.
On the basis of the technical scheme, after obtaining the first part of verification code content, the method further comprises the following steps: generating and displaying a verification code page containing the first part of verification code content; after obtaining the second portion of the verification code content corresponding to the first portion of the verification code content, the method further comprises: creating a floating window, wherein the floating window is independent of the verification code page; and displaying the second part of verification code content in the floating window.
After obtaining the first portion of captcha content, a captcha page containing the first portion of captcha content may be generated and presented. After obtaining the second portion of the captcha content, a floating window is created that is independent of the captcha page, and the second portion of the captcha content is presented within the floating window. Although the first part of verification code content and the second part of verification code content can be simultaneously displayed in the same display screen, the display areas carrying the first part of verification code content and the second part of verification code content are completely independent, and only one of the first part of verification code content and the second part of verification code content is cracked, so that the complete verification code content cannot be completely obtained.
The verification code page containing the first part of the verification code content can also comprise prompt information similar to 'please wait' so as to prompt the user that the verification code page does not contain the complete verification code. The floating window containing the second portion of the captcha content may be displayed at a position just above the prompt, such that the prompt is hidden when the floating window and the second portion of the captcha content are displayed.
The verification code transmission method provided by the present exemplary embodiment generates and displays a verification code page containing the first part of verification code content after the first part of verification code content is obtained, and generates a floating window displaying the second part of verification code content after the second part of verification code content is obtained. The user can obtain the complete verification code content through the displayed first part of verification code content and the second part of verification code content. And the complete verification code content cannot be obtained only by cracking the verification code page or only by cracking the suspension window; and in actual cracking, an attacker cannot easily determine whether the association exists between the floating window and the verification code page, so that the security can be greatly improved.
On the basis of the technical scheme, generating and displaying the verification code page containing the first part of the verification code content comprises the following steps: generating a first verification code picture containing the first part of verification code content, and generating a verification code page by taking the verification code picture as a page element; and/or displaying the second portion of passcode content within the floating window, including: and generating a second verification code picture containing the second part of verification code content, and displaying the second verification code picture in the floating window.
In the generated verification code page, the first part of verification code content can be a first verification code picture in a picture format. Meanwhile, in the generated floating window, the displayed second part of verification code content can also be a second verification code picture in a picture format.
Therefore, the content of the verification code can be displayed in the picture format, and the difficulty in cracking the verification code can be further improved.
On the basis of the technical scheme, one of the first part of verification code content and the second part of verification code content is a verification code answer, and the other is a verification code question; the method further comprises the steps of: detecting verification behaviors on the verification code answers; and sending the answer to be verified corresponding to the verification behavior to the verification server so as to carry out security verification.
One of the first portion of captcha content and the second portion of captcha content is a captcha answer, and the other is a captcha question. The verification code question informs the user how to perform the verification code so that the user performs corresponding actions on the verification code answers to perform verification.
The answer to the verification code is required to be operated by the user, so that when the answer to the verification code is in a picture format, different mapping is corresponding to each region of the picture. And detecting verification behaviors on the verification code answers, sending answers to be verified corresponding to the verification behaviors to a verification server, and carrying out safety verification by the verification server according to the answers to be verified.
The verification actions on the verification code answers need to be sent to the verification server. Therefore, compared with the verification code, the verification code has higher security when the answer is the second part of verification code obtained from the verification server, and then the to-be-verified behavior is returned to the verification server, and the verification code has higher security when the answer is the first part of verification code obtained from the background server; the former verification code answer only needs to be connected with the verification server, the issuing of the verification code answer and the uploading of the to-be-verified answer from the verification code answer are both through the same channel, the issuing of the latter verification code answer is through the first communication channel, and the uploading of the to-be-verified answer from the verification code answer is through the second communication channel, so that the latter has higher security.
On the basis of the technical scheme, under the condition that the first part of verification code content is a verification code answer containing a plurality of verification characters, the first verification code picture contains a plurality of mapping areas corresponding to the verification characters one by one; detecting verification behavior on the verification code answer, comprising: detecting selected behavior on the plurality of mapped regions.
The core idea of the behavior verification code is to utilize the behavior characteristics of the user to perform verification safety judgment, and complete verification through the operation behavior of the user without the user needing to read and understand distorted picture characters. The security of the behavior verification code is higher, and the user experience is better. Fig. 2 discloses an exemplary diagram of a character behavior verification code that does not require the user to understand "wang", "li" and "zhao" in the verification code answers, but only to find the same words as "wang" in the verification code questions.
And under the condition that the content of the first part of verification code is in a picture format and the verification code answers of a plurality of verification characters are contained in the first part of verification code, the first verification code picture contains a plurality of mapping areas which are in one-to-one correspondence with the plurality of verification characters. And detecting selected behaviors on the plurality of mapping areas, and generating corresponding answers to be verified.
On the basis of the technical scheme, before obtaining the second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server, the method further comprises: establishing long connection with the verification server to obtain the second communication channel; obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel between the verification server, wherein the second part of verification code content comprises the following components: and encrypting and transmitting the second part of verification code content through a second communication channel between the second part of verification code content and the verification server.
The client itself has long connection capability and the second communication channel with the authentication server is obtained by a long connection established with the authentication server. Based on the long connection capability, the captcha content may be unpacked. The long connection channel is not disconnected after each operation is finished, and the data packet is directly sent when the data packet is processed next time, so that connection is not required to be established again.
Through long connection, the second part of verification code content can be encrypted and transmitted, and the client decrypts the second part of verification code content, so that the second communication channel is prevented from being cracked, and the security of issuing the second part of verification code content is ensured.
According to the verification code transmission method provided by the exemplary embodiments of the present disclosure, the difficulty of cracking the verification code is improved by the following method: by adopting different communication channels to respectively transmit part of the verification code content, the situation that all the verification code content can be cracked by cracking one communication channel is avoided; the partial verification code contents acquired from different communication channels are respectively displayed in mutually independent areas, so that the situation that all the verification code contents can be cracked by cracking one page is avoided; the verification code content is displayed in a picture format, so that the cracking difficulty can be further improved; and the second part of verification code content is encrypted and transmitted by utilizing the long connection capability of the client, so that the condition of cracking a communication channel to acquire the verification code content is avoided. Therefore, the verification code transmission method provided by the embodiment of the disclosure improves the verification code cracking difficulty and reduces the potential safety hazard.
Fig. 3 is a communication example diagram of a verification code transmission method according to an exemplary embodiment, and as shown in fig. 3, the verification code transmission method includes:
the front-end page of the client initiates a verification code acquisition request to a corresponding background server, the background server responds to the verification code acquisition request and sends a wind control request to the verification server, and the verification server returns a wind control result according to the wind control request. And the background server returns verification parameters to the front-end page of the client according to the wind control result of the confirmation wind control returned by the verification server. And generating and displaying a verification code page by the front-end page of the client according to the received verification parameters, wherein the page only comprises verification code answers.
And after the verification code page comprising the verification code answer is displayed, the client sends a second part of request to the verification server. And the verification server side sends the verification code questions corresponding to the verification code answers to the client side according to the received second part request. And the client generates an area independent of the verification code page containing the verification code answers according to the received verification code questions, and displays the verification code questions in the area independent of the verification code page.
After the verification code answers and the verification code questions are displayed, the user performs behavior verification, generates answers to be verified, and sends the answers to be verified to the verification server. And the verification server performs verification according to the answer to be verified, and returns the information passing the verification to the front-end page of the client when the verification passes.
After the verification is passed, the client can execute the subsequent service and send a service request to the background server. In order to ensure safety, the background server sends a verification request to the verification server according to the received service request. The verification server verifies whether the service request is safe or not, and returns a verification result. And the background server executes the service request when the returned verification result is safe.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.
Fig. 4 is a block diagram illustrating an authentication code transmission apparatus according to an exemplary embodiment, and referring to fig. 4, the apparatus includes a first obtaining module 41 and a second obtaining module 42.
The first obtaining module 41 is configured to obtain, in response to the verification code obtaining operation, a first part of verification code content through a first communication channel with a background server of the client;
the second obtaining module 42 is configured to obtain a second part of the verification code content corresponding to the first part of the verification code content through a second communication channel with the verification server; the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
Optionally, after obtaining the first portion of the passcode content, the apparatus further comprises:
a first generation module configured to generate and display a verification code page containing the first portion of verification code content;
after obtaining the second portion of passcode content corresponding to the first portion of passcode content, the apparatus further comprises:
a floating creation module configured to create a floating window, the floating window being independent of the captcha page;
and the suspension display module is configured to display the second part of verification code content in the suspension window.
Optionally, the first generating module includes:
the first generation unit is configured to generate a first verification code picture containing the first part of verification code content, and generate the verification code page by taking the verification code picture as a page element; and/or
The levitation display module includes:
and the suspension display unit is configured to generate a second verification code picture containing the second part of verification code content, and display the second verification code picture in the suspension window.
Optionally, one of the first part of verification code content and the second part of verification code content is a verification code answer, and the other is a verification code question; the apparatus further comprises:
a behavior detection module configured to detect a verification behavior on the verification code answer;
and the answer sending module is configured to send an answer to be verified corresponding to the verification action to the verification server so as to carry out security verification.
Optionally, in the case that the first part of the verification code content is a verification code answer including a plurality of verification characters, the first verification code picture includes a plurality of mapping areas corresponding to the plurality of verification characters one by one; the behavior detection module comprises:
and a selected behavior detection unit configured to detect selected behaviors on the plurality of mapping areas.
Optionally, before obtaining the second portion of the authentication code content corresponding to the first portion of the authentication code content through a second communication channel with the authentication server, the apparatus further includes:
a long connection module is established and configured to establish long connection with the verification server to obtain the second communication channel;
the second obtaining module 42 includes:
and the encryption transmission unit is configured to carry out encryption transmission on the second part of verification code content through a second communication channel between the encryption transmission unit and the verification server.
The verification code transmission device provided by the embodiment of the invention improves the cracking difficulty of the verification code by the following method: by adopting different communication channels to respectively transmit part of the verification code content, the situation that all the verification code content can be cracked by cracking one communication channel is avoided; the partial verification code contents acquired from different communication channels are respectively displayed in mutually independent areas, so that the situation that all the verification code contents can be cracked by cracking one page is avoided; the verification code content is displayed in a picture format, so that the cracking difficulty can be further improved; and the second part of verification code content is encrypted and transmitted by utilizing the long connection capability of the client, so that the condition of cracking a communication channel to acquire the verification code content is avoided. Therefore, the verification code transmission method provided by the embodiment of the disclosure improves the verification code cracking difficulty and reduces the potential safety hazard.
The specific manner in which the various modules perform the operations in the apparatus of the above embodiments have been described in detail in connection with the embodiments of the method, and will not be described in detail herein.
Fig. 5 is a block diagram illustrating an apparatus 500 for passcode transmission, according to an example embodiment. For example, the apparatus 500 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, an exercise device, a personal digital assistant, or the like.
Referring to fig. 5, an electronic device 500 may include one or more of the following components: a processing component 502, a memory 504, a power component 506, a multimedia component 508, an audio component 510, an input/output (I/O) interface 512, a sensor component 514, and a communication component 516.
The processing component 502 generally controls overall operation of the apparatus 500, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. The processing component 502 may include one or more processors 520 to execute instructions to perform all or part of the steps of the methods described above. Further, the processing component 502 can include one or more modules that facilitate interactions between the processing component 502 and other components. For example, the processing component 502 can include a multimedia module to facilitate interaction between the multimedia component 508 and the processing component 502.
Memory 504 is configured to store various types of data to support operations at device 500. Examples of such data include instructions for any application or method operating on the apparatus 500, contact data, phonebook data, messages, pictures, videos, and the like. The memory 504 may be implemented by any type or combination of volatile or nonvolatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disk.
The power supply component 506 provides power to the various components of the device 500. The power components 506 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for the device 500.
The multimedia component 508 includes a screen between the device 500 and the user that provides an output interface. In some embodiments, the screen may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from a user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensor may sense not only the boundary of a touch or slide action, but also the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 508 includes a front-facing camera and/or a rear-facing camera. The front-facing camera and/or the rear-facing camera may receive external multimedia data when the device 500 is in an operational mode, such as a shooting mode or a video mode. Each front camera and rear camera may be a fixed optical lens system or have focal length and optical zoom capabilities.
The audio component 510 is configured to output and/or input audio signals. For example, the audio component 510 includes a Microphone (MIC) configured to receive external audio signals when the device 500 is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals may be further stored in the memory 504 or transmitted via the communication component 516. In some embodiments, the audio component 510 further comprises a speaker for outputting audio signals.
The I/O interface 512 provides an interface between the processing component 502 and peripheral interface modules, which may be keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to: homepage button, volume button, start button, and lock button.
The sensor assembly 514 includes one or more sensors for providing status assessment of various aspects of the apparatus 500. For example, the sensor assembly 514 may detect the on/off state of the device 500, the relative positioning of the components, such as the display and keypad of the apparatus 500, the sensor assembly 514 may also detect a change in position of the apparatus 500 or one component of the apparatus 500, the presence or absence of user contact with the apparatus 500, the orientation or acceleration/deceleration of the apparatus 500, and a change in temperature of the apparatus 500. The sensor assembly 514 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 514 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 514 may also include an acceleration sensor, a gyroscopic sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.
The communication component 516 is configured to facilitate communication between the apparatus 500 and other devices in a wired or wireless manner. The apparatus 500 may access a wireless network based on a communication standard, such as WiFi, an operator network (e.g., 2G, 3G, 4G, or 5G), or a combination thereof. In one exemplary embodiment, the communication component 516 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 516 further includes a Near Field Communication (NFC) module to facilitate short range communications. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, ultra Wideband (UWB) technology, bluetooth (BT) technology, and other technologies.
In an exemplary embodiment, the electronic device 500 may be implemented by one or more Application Specific Integrated Circuits (ASICs), digital Signal Processors (DSPs), digital Signal Processing Devices (DSPDs), programmable Logic Devices (PLDs), field Programmable Gate Arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic elements for performing the above-described verification code transmission methods.
In an exemplary embodiment, a computer-readable storage medium is also provided, such as memory 504, including instructions executable by processor 520 of apparatus 500 to perform the above-described method. For example, the non-transitory computer readable storage medium may be ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.
In an exemplary embodiment, a computer program product is also provided, comprising readable program code executable by the processor 520 of the electronic device 500 to perform the above-described verification code transmission method. Alternatively, the program code may be stored in a storage medium of the electronic device 500, which may be a non-transitory computer readable storage medium, such as ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.
Other embodiments of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the invention following, in general, the principles of the invention and including such departures from the present disclosure as come within known or customary practice within the art to which the invention pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the invention being indicated by the following claims.
It is to be understood that the invention is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the invention is limited only by the appended claims.
Claims (12)
1. A method for transmitting an authentication code, applied to a client, the method comprising:
responding to the verification code obtaining operation, and obtaining a first part of verification code content through a first communication channel between the verification code obtaining operation and a background server of the client;
obtaining second part of verification code content corresponding to the first part of verification code content through a second communication channel which is obtained through long connection established between the verification servers, wherein the second part of verification code content is transmitted through encryption through the long connection;
generating an area independent of the verification code page according to the second part of the verification code content, and displaying the second part of the verification code content in the area, wherein the verification code page contains the first part of the verification code content;
the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
2. The method of claim 1, wherein after obtaining the first portion of passcode content, the method further comprises:
generating and displaying a verification code page containing the first part of verification code content;
after obtaining the second portion of the verification code content corresponding to the first portion of the verification code content, the method further comprises:
creating a floating window, wherein the floating window is independent of the verification code page;
and displaying the second part of verification code content in the floating window.
3. The method of claim 2, wherein generating and presenting a captcha page containing the first portion of captcha content, comprises: generating a first verification code picture containing the first part of verification code content, and generating a verification code page by taking the first verification code picture as a page element; and/or
Displaying the second portion of passcode content within the floating window, comprising: and generating a second verification code picture containing the second part of verification code content, and displaying the second verification code picture in the floating window.
4. A method according to claim 3, wherein one of the first portion of captcha content and the second portion of captcha content is a captcha answer, the other being a captcha question; the method further comprises the steps of:
detecting verification behaviors on the verification code answers;
and sending the answer to be verified corresponding to the verification behavior to the verification server so as to carry out security verification.
5. The method of claim 4, wherein in the case where the first portion of the verification code content is a verification code answer including a plurality of verification characters, the first verification code picture includes a plurality of mapping areas in one-to-one correspondence with the plurality of verification characters; detecting verification behavior on the verification code answer, comprising:
detecting selected behavior on the plurality of mapped regions.
6. An authentication code transmission apparatus, applied to a client, comprising:
a first obtaining module configured to obtain, in response to a verification code obtaining operation, a first portion of verification code content through a first communication channel with a background server of the client;
the second obtaining module is configured to obtain second part of verification code content corresponding to the first part of verification code content through a second communication channel obtained through long connection established between the second obtaining module and the verification server, and the second part of verification code content is transmitted through encryption through the long connection;
the device is configured to generate a region independent of the verification code page according to the second part of the verification code content, and display the second part of the verification code content in the region, wherein the verification code page comprises the first part of the verification code content;
the first part verification code content and the second part verification code content form complete verification code content which is used for safety verification.
7. The apparatus of claim 6, wherein after obtaining the first portion of the passcode content, the apparatus further comprises:
a first generation module configured to generate and display a verification code page containing the first portion of verification code content;
after obtaining the second portion of passcode content corresponding to the first portion of passcode content, the apparatus further comprises:
a floating creation module configured to create a floating window, the floating window being independent of the captcha page;
and the suspension display module is configured to display the second part of verification code content in the suspension window.
8. The apparatus of claim 7, wherein the first generation module comprises:
the first generation unit is configured to generate a first verification code picture containing the first part of verification code content, and generate the verification code page by taking the first verification code picture as a page element; and/or
The levitation display module includes:
and the suspension display unit is configured to generate a second verification code picture containing the second part of verification code content, and display the second verification code picture in the suspension window.
9. The apparatus of claim 8, wherein one of the first portion of captcha content and the second portion of captcha content is a captcha answer, the other being a captcha question; the apparatus further comprises:
a behavior detection module configured to detect a verification behavior on the verification code answer;
and the answer sending module is configured to send an answer to be verified corresponding to the verification action to the verification server so as to carry out security verification.
10. The apparatus of claim 9, wherein in the case where the first portion of the captcha content is a captcha answer comprising a plurality of captchas, the first captcha picture comprises a plurality of mapped areas in one-to-one correspondence with the plurality of captchas; the behavior detection module comprises:
and a selected behavior detection unit configured to detect selected behaviors on the plurality of mapping areas.
11. An electronic device, comprising:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the passcode transmission method of any one of claims 1 to 5.
12. A computer readable storage medium, which when executed by a processor of an electronic device, causes the electronic device to perform the verification code transmission method of any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111250964.8A CN114124462B (en) | 2021-10-26 | 2021-10-26 | Verification code transmission method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111250964.8A CN114124462B (en) | 2021-10-26 | 2021-10-26 | Verification code transmission method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114124462A CN114124462A (en) | 2022-03-01 |
| CN114124462B true CN114124462B (en) | 2023-12-19 |
Family
ID=80377121
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111250964.8A Active CN114124462B (en) | 2021-10-26 | 2021-10-26 | Verification code transmission method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114124462B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114826610A (en) * | 2022-04-14 | 2022-07-29 | 函谷数巢品牌管理(广州)有限公司 | Method and device for account binding demonstration based on multimedia |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104038502A (en) * | 2014-06-24 | 2014-09-10 | 五八同城信息技术有限公司 | Verification method and system |
| CN109670291A (en) * | 2017-10-17 | 2019-04-23 | 腾讯科技（深圳）有限公司 | A kind of implementation method of identifying code, device and storage medium |
| CN109714297A (en) * | 2017-10-26 | 2019-05-03 | 中国电信股份有限公司 | Safe verification method, system and user terminal and application platform |
| CN110730162A (en) * | 2019-09-16 | 2020-01-24 | 北京齐尔布莱特科技有限公司 | Page verification method, mobile terminal and readable storage medium |
| CN111353140A (en) * | 2018-12-24 | 2020-06-30 | 阿里巴巴集团控股有限公司 | Verification code generation and display method, device and system |
| CN111683103A (en) * | 2016-12-21 | 2020-09-18 | 阿里巴巴集团控股有限公司 | Information interaction method and device |
| CN112214751A (en) * | 2019-07-11 | 2021-01-12 | 上海游昆信息技术有限公司 | Verification code generation method and device |
-
2021
- 2021-10-26 CN CN202111250964.8A patent/CN114124462B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104038502A (en) * | 2014-06-24 | 2014-09-10 | 五八同城信息技术有限公司 | Verification method and system |
| CN111683103A (en) * | 2016-12-21 | 2020-09-18 | 阿里巴巴集团控股有限公司 | Information interaction method and device |
| CN109670291A (en) * | 2017-10-17 | 2019-04-23 | 腾讯科技（深圳）有限公司 | A kind of implementation method of identifying code, device and storage medium |
| CN109714297A (en) * | 2017-10-26 | 2019-05-03 | 中国电信股份有限公司 | Safe verification method, system and user terminal and application platform |
| CN111353140A (en) * | 2018-12-24 | 2020-06-30 | 阿里巴巴集团控股有限公司 | Verification code generation and display method, device and system |
| CN112214751A (en) * | 2019-07-11 | 2021-01-12 | 上海游昆信息技术有限公司 | Verification code generation method and device |
| CN110730162A (en) * | 2019-09-16 | 2020-01-24 | 北京齐尔布莱特科技有限公司 | Page verification method, mobile terminal and readable storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114124462A (en) | 2022-03-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106453052B (en) | Message interaction method and device | |
| CN109039990B (en) | Behavior verification method and device based on verification code | |
| CN106790043B (en) | Method and device for sending message in live broadcast application | |
| CN113386129B (en) | Service robot and safety interaction device | |
| US20220382884A1 (en) | Method and device for parsing shared password | |
| CN107959757B (en) | User information processing method and device, APP server and terminal equipment | |
| CN111368232A (en) | Password sharing reflux method and device, electronic equipment and storage medium | |
| CN110049062B (en) | Verification code verification method, device, system, server, electronic equipment and storage medium | |
| CN110234030B (en) | Bullet screen information display method and device | |
| US20210326429A1 (en) | Access control method and device, electronic device and storage medium | |
| CN107147815B (en) | Call processing method and device based on taxi taking | |
| EP3407278A1 (en) | Method and apparatus for reporting loss of card or device associated with account number or stolen of account number | |
| CN109302341B (en) | Instant messaging method, instant messaging device, electronic equipment and storage medium | |
| CN105407070A (en) | Logging-in authorization method and device | |
| US9667784B2 (en) | Methods and devices for providing information in voice service | |
| CN109246094B (en) | User terminal verification method, device and storage medium | |
| CN114124462B (en) | Verification code transmission method and device, electronic equipment and storage medium | |
| CN110619097A (en) | Two-dimensional code generation method and device, electronic equipment and storage medium | |
| CN111368329B (en) | Message display method and device, electronic equipment and storage medium | |
| CN110764847B (en) | User information processing method, device, electronic equipment and storage medium | |
| CN113726905B (en) | Data acquisition method, device and equipment based on home terminal equipment | |
| CN106712960B (en) | Processing method and device of verification code information | |
| CN113946812A (en) | Identity authentication method and device, electronic equipment and storage medium | |
| CN110708427B (en) | Information processing method, device and storage medium | |
| CN113742689A (en) | Automatic driving method and device with participation of security officer, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |