WO2016062199A1

WO2016062199A1 - Method, apparatus, client, server, and system for checking security of account

Info

Publication number: WO2016062199A1
Application number: PCT/CN2015/091689
Authority: WO
Inventors: 殷光辉
Original assignee: 阿里巴巴集团控股有限公司; 殷光辉
Priority date: 2014-10-21
Filing date: 2015-10-10
Publication date: 2016-04-28
Also published as: CN105592004B; CN105592004A; HK1224455A1

Abstract

The present application provides a method for checking security of an account, comprising: detecting an operation of a user on an account; when the user performs the operation on the account, determining whether a current computing device saves a preset file in a preset path; and if the current computing device saves the preset file in the preset path, permit the operation, and otherwise, reject the operation. The present application further provides an apparatus for checking security of an account, a client and a server in a network environment, a method for checking security of an account, a client and a server for checking security of an account, and a system for checking security of an account. Advantages of the embodiments disclosed in the present application comprise: in one aspect, even if a password corresponding to an account of the user is cracked, security of the account is ensured; and in another aspect, for a user of a mobile terminal such as a smart phone, even if the mobile terminal device is lost, and a username of an account, a password, and a message verification mechanism all fail to work, the account security is ensured.

Description

Account security check method, device, client, server and system

Technical field

The present application relates to the field of computer security, and in particular, to an account security check method, apparatus, client, server, and system.

Background technique

Network technology has greatly changed people's daily lives. For this kind of network application, users need to establish an account. The theft of web application accounts is a very serious and urgent problem in the field of information security. For example, online game accounts and the theft of game equipment have occurred.

The development of the Internet has also brought new business models to the financial industry, and people have higher requirements for the security of online fund accounts.

The existing account protection mode is generally the password corresponding to the user name. As long as the password is cracked, the hacker can perform various operations, and often can cause irreparable losses to the actual user.

Summary of the invention

The technical problem to be solved by the present application is to provide an account security check method, device, client, server and system for the deficiencies of the prior art.

According to an aspect of the present application, an account security check method is provided, including: detecting an operation of a user on an account; when the user operates the account, determining whether the current computing device saves the preset file in a preset path; and if the current calculation If the device saves the preset file in the preset path, the operation is allowed. Otherwise, the operation is not allowed.

According to another aspect of the present application, an account security checking apparatus is provided, including: an operation detecting module, configured to detect an operation of a user by an account; and a determining module, configured to determine whether the current computing device saves the preset file in a preset path; And an operation switch module, configured to determine whether to allow the user's operation according to the judgment result of the judgment module.

According to another aspect of the present application, a client account security check method is provided, including: when detecting an operation of a user on an account, transmitting operation information to a server; receiving from a server The verification setting determines whether the preset file is saved in the preset path according to the verification setting, wherein the verification setting refers to the preset verification information; and the determination result is sent to the server.

According to another aspect of the present application, a server account security check method is provided, including: receiving operation information of a user from a client on an account; and calling a stored verification setting according to the account information corresponding to the user, where the verification setting refers to Pre-set verification information; sending the verification setting to the client; and receiving the judgment result from the client, and determining whether to allow the user to perform the account operation according to the judgment result.

According to another aspect of the present application, a client account security check method is provided, including: when an operation of a user is detected on an account, transmitting operation information to a server; receiving a read file request from a server; and reading a file according to the Request, send the corresponding file to the server.

According to another aspect of the present application, a server account security check method is provided, including: receiving operation information of a user from a client on an account; and calling a stored verification setting according to the account information corresponding to the user, where the verification setting refers to The preset verification information is sent to the client according to the file name and the file path in the verification setting; receiving the feedback from the client, and determining, according to the verification setting, whether the client saves the preset file in the preset path; And according to the judgment result, it is decided whether to allow the user to perform an account operation.

According to another aspect of the present application, a client account security check method is provided, including: when an operation of a user is detected on an account, transmitting operation information to a server; receiving a read file attribute request from a server; Read the file attribute request and send the corresponding file attribute to the server.

According to another aspect of the present application, a server account security check method is provided, including: receiving operation information of a user from a client on an account; and calling the stored verification setting according to the account information corresponding to the user; The file name and the file path send a read file attribute request to the client; receive feedback from the client, determine whether the client saves the preset file in the preset path according to the check setting; and determine whether to allow the user to perform the account operation according to the judgment result.

According to another aspect of the present application, a server account security check method is provided, including: receiving operation information of a user from a client on an account; and calling according to the account information corresponding to the user The verification setting of the storage, wherein the verification setting refers to the preset verification information; the request for reading the file attribute is sent to the client according to the file path in the verification setting; receiving the feedback from the client, determining whether it is in the verification setting according to the verification setting The preset file is saved in the preset path; and the user is allowed to perform the account operation according to the judgment result.

According to another aspect of the present application, an account security check client is provided, including: a client transmission module, configured to perform data transmission with a server; and an operation detection module, configured to: when detecting an operation of the account by the user, The operation information is sent to the server through the client transmission module; and the client judgment module is configured to receive the verification setting from the server through the client transmission module, determine whether to save the preset file in the preset path according to the verification setting, and The judgment result is fed back to the server through the client transmission module, wherein the verification setting refers to the preset verification information.

According to another aspect of the present application, an account security check server is provided, including: a server transmission module, configured to perform data transmission with a client; and a verification setting acquisition module, configured to receive operation information of the user through the server transmission module, according to The account information corresponding to the user invokes the stored verification setting, and is sent to the client through the server transmission module, where the verification setting refers to preset verification information; and the operation switch module is configured to receive the client from the server transmission module. The judgment result determines whether the user is allowed to perform an account operation according to the judgment result.

According to another aspect of the present application, an account security check client is provided, including: a client transmission module, configured to perform data transmission with a server; and an operation detection module, configured to: when detecting an operation of the account by the user, The operation information is sent to the server through the client transmission module; and the client file acquisition module is configured to receive the read file request from the server or read the file attribute request through the client transmission module, and read the corresponding file or file attribute and pass the The client transport module feeds back to the server.

According to another aspect of the present application, an account security check server is provided, including: a server transmission module, configured to perform data transmission with a client; and a verification setting acquisition module, configured to receive operation information of the user through the server transmission module, according to The account information corresponding to the user invokes the stored verification setting, wherein the verification setting refers to preset verification information; the server file acquisition module receives the verification setting of the verification setting acquisition module, based on the file path in the verification setting or File path and The file name sends a read file request or a read file attribute request to the client through the server transfer module, and receives the feedback file or file attribute through the server transfer module; the server judgment module receives the verification setting acquisition module verification setting and the server The file or file attribute of the file obtaining module determines whether the client saves the preset file in the preset path according to the check setting; and the operation switch module is configured to receive the judgment result of the server judgment module, and determine whether to allow the user to perform according to the judgment result. Account operation.

According to a last aspect of the present application, there is provided an account security system comprising: the above account security check client and an account security check server connected to the account security check client.

Advantages of various embodiments disclosed herein in comparison with the prior art include:

(1) Even after the password corresponding to the user account is cracked, the account security is guaranteed;

(2) For mobile terminal users such as smart phones, after the mobile terminal device is lost, the SMS verification mechanism also loses its effect, and account security can still be guaranteed.

DRAWINGS

1 is a flow chart of an account security check method provided in accordance with an embodiment of the present application;

2 is a flowchart of a method for checking a client account security according to an embodiment of the present application;

3 is a schematic diagram of a process of setting a verification setting according to an embodiment of the present application;

4 is a flowchart of a server account security check method provided in an embodiment of the present application;

FIG. 5 is a flowchart of a method for checking a client account security according to another embodiment of the present application; FIG.

6 is a flowchart of a server account security check method according to another embodiment of the present application;

7 is a flowchart of a method for checking a client account security according to another embodiment of the present application;

FIG. 8 is a flowchart of a server account security check method according to another embodiment of the present application; FIG.

9 is a schematic structural diagram of an account security checking apparatus according to an embodiment of the present application;

FIG. 10 is a schematic structural diagram of an account security check system according to an embodiment of the present application; FIG.

FIG. 11 is a schematic structural diagram of an account security check system according to another embodiment of the present application.

detailed description

In order to make the objects, technical solutions and advantages of the present application more clear, the present application will be further described in detail below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

Applicants have found through research that under normal circumstances, after the account password is cracked, the personal information and data in the account will be leaked and suffer losses. In addition to the regular password and mobile phone check code, the user can also verify the settings that the user has set. The specified file stored in a disk partition path, if there is no such file, or the path of the file is incorrect, it is determined that the operation is not performed (because the file name and the stored path are only known by the user), thus protecting the account security.

Embodiment 1, account security check method

Based on the above findings, according to an embodiment of the present application, an account security check method is provided.

As shown in Figure 1, the account security check method includes:

S11. Detect a user operation on an account.

The user's operations on the account may include the opening of the account, the attributes of the account or the modification, creation and deletion of data, etc., for example, the operation of paying with funds in the fund account. For another example, the user logs in to a mobile application personal account through the smart phone, and purchases the product through the account, and performs payment. At this time, the user is about to change the funds of the account, etc., in this process, the detection operation can be set to detect User's operation of the account.

S12. When the user operates the account, determine whether the current computing device saves the preset file in a preset path.

The computing device can be a PC, a smart phone, a desktop smart terminal, a tablet, a laptop, and the like.

Preferably, the preset path is a file storage path on the persistent device. For example, in the hard disk The storage path in the zone is C:\Windows\System32\.

The content information may or may not be saved in the preset file. The content information can be data of any file type.

The preset file under the preset path is used for verification. The specific verification method may be that the file is used for name verification, file type verification, file content verification, or MD5 verification directly.

According to an embodiment of the present application, the step of “determining whether the current computing device saves the preset file in the preset path” may include: checking whether the current computing device has a file with the same name as the preset file in the preset path.

According to another embodiment of the present application, the step of “determining whether the current computing device saves the preset file in the preset path” may include: (1) checking whether the current computing device has a file with the same name as the preset file in the preset path; And can further perform: (2) check whether the file is the same as the preset file. For example MD5 code check.

According to another embodiment of the present application, the step of “determining whether the current computing device saves the preset file in the preset path” may include: (1) checking whether the current computing device has a file with the same name as the preset file in the preset path; (2) Check if the file type is the same as the preset file type.

S13. If the current computing device saves the preset file in the preset path, the operation is allowed, otherwise the operation is not allowed.

Since the non-registered client does not save the same file in the same local path, it is impossible to perform the corresponding account operation even after the password corresponding to the user account is cracked. This makes the security of the account secure. Especially for mobile terminal users such as smart phones, even if the account is stolen, account security is guaranteed.

Account security check method in the first network environment

As shown in FIG. 2, according to an embodiment of the present application, a client account security check method in a network environment is provided, including:

S21: When the user's operation on the account is detected, the operation information is sent to the server.

According to an embodiment of the present application, after the user logs in to the client, the account fund transfer operation is performed. At this time, the client sends the operation code of the user operation and/or the operation name itself “transfer operation” to the server. For example, suppose the operation code corresponding to the transfer operation is OP-ID=000011. Client Send the "OP-ID=000011" message to the server.

After the server receives the operation code "OP-ID=000011" from the client, the stored verification settings are called according to the account information corresponding to the user, and sent to the client.

The verification setting is the related information of the “preserving the preset file in the preset path” in the first embodiment. The embodiment may include: a file name and a storage path at the client.

According to another embodiment of the present application, the verification settings are as shown in Table 1, including: a file name, a file type, and a file path (ie, a preset path).

The file name is "My Payment File.txt", the file type is a text file, and the path to save the file on the client is: C:\Windows\System32\config\Journal\. The server sends the verification settings to the client.

Table 1

预设路径Preset path	C:\Windows\System32\config\Journal\C:\Windows\System32\config\Journal\
文件名称file name	我的支付文件.txtMy payment file.txt
文件类型file type	文本文件Text file

According to another embodiment of the present application, the verification settings may include a file name, a file path, and a file MD5 encoding. For example, the MD5 encoding of the file is: f96b697d7cb7938d525a2f31aaf161d0.

As shown in FIG. 3, according to another embodiment of the present application, the process of setting a verification setting may include:

(1) The user creates a new file in the file directory of a specified hard disk partition. In order not to guess the file name, an irregular file name can be set; for example, the user is at C:\Windows\System32\config\ A "My Payment File.txt" file has been created in the Journal\ file directory. Further, the created new file can also be set to a file type that is not commonly used, such as an image file type that is not commonly used (for example, Jiaoyan.jpg), a sound file type, or a video file type.

(2) Specify the newly created file and the path it stores as the verification setting, and the server saves the verification settings to the database.

According to another embodiment of the present application, if the user can have multiple operating terminals, this file can be created in the same directory of the operating terminals.

S22. Receive a verification setting from the server, and determine, according to the verification setting, whether to save the preset file in a preset path.

The client judges whether there is a file named Jiaoyan.jpg under the local C:\Windows\System32\ according to the content of the verification setting, and whether the type of the file is JPG.

S23. Send the judgment result to the server.

The client feeds back the judgment result to the server. The server determines whether to allow the user to perform an account operation according to the judgment result, that is, the client determines whether there is a preset file in the preset path, and when the judgment result is “Yes”, the corresponding operation is performed, for example, the server performs the transfer operation “OP”. -ID=000011" to perform account fund change; when the judgment result is "No", the operation is not allowed, for example, the server ignores or rejects the transfer operation "OP-ID=000011". Therefore, the security of the user account funds is well protected.

Corresponding to the client operation, as shown in FIG. 4, according to an embodiment of the present application, a server account security check method in a network environment is provided, including:

S31. Receive operation information of the account from the user of the client.

S32. Call the stored verification setting according to the account information corresponding to the user;

S33. Send the verification setting to the client.

S34. Receive a judgment result from the client, and determine, according to the judgment result, whether the user is allowed to perform an account operation.

Account security check method in the second network environment

In the above first method, the client performs the judgment of the verification setting. Since the verification setting is sensitive information, there may be a security risk to the client, and if the verification setting is performed on the server, the account can be further improved. Security.

As shown in FIG. 5, according to another embodiment of the present application, a client account security check method in a network environment is provided, including:

S41. When the user's operation on the account is detected, the operation information is sent to the server.

As described in the above embodiment, after the user logs in to the client, the account fund transfer operation is performed. At this time, the client sends the "OP-ID=000011" information to the server.

After the server receives the operation code "OP-ID=000011" from the client, the stored verification setting is called according to the account information corresponding to the user, and the read file request is sent to the client according to the file name and the file path in the verification setting.

S42. Receive a read file request from a server.

S43. Send a corresponding file to the server according to the read file request.

The client sends a local file to the server according to the file path and file name in the file request of the server. If there is no such file locally, the client returns a read failure message to the server.

Corresponding to the client operation, as shown in FIG. 6, according to an embodiment of the present application, a server account security check method in a network environment is provided, including:

S51. Receive operation information of a user from the client on the account.

S52. Call the stored verification setting according to the account information corresponding to the user.

S53. Send a read file request to the client according to the file name and the file path in the verification setting.

S54. Receive feedback from the client, and determine, according to the verification setting, whether the client saves the preset file in a preset path.

If the server receives the file sent by the client, the file path and file name in the verification settings have passed the check. And preferably, it is also possible to continue to check whether the file type and/or the file content are consistent or the like.

If the server receives a read failure message, the client is an illegal client.

S55. Determine, according to the judgment result, whether the user is allowed to perform an account operation.

Account security check method in the third network environment

In the foregoing second method, the client directly sends the local file for verification to the server for verification setting judgment. If the content of the file is relatively large, repeated operations waste network traffic and cause operation delay. In order to improve the response speed, the amount of data sent can be reduced.

As shown in FIG. 7, according to another embodiment of the present application, a client account security check method in a network environment is provided, including:

S61. When detecting the operation of the account by the user, sending the operation information to the server;

S62. Receive a read file attribute request from a server.

S63. Send the corresponding file attribute to the server according to the read file attribute request.

The client sends the attributes of the local file, such as the file type and the MD5 encoding of the file, to the server according to the file path and file name in the file attribute request of the server. Piece, feedback to the server read failure message.

Corresponding to the client operation, as shown in FIG. 8, according to an embodiment of the present application, a server account security check method in a network environment is provided, including:

S71. Receive operation information of a user from the client on the account.

S72. Call the stored verification setting according to the account information corresponding to the user.

S73. Send a read file attribute request to the client according to the file name and the file path in the verification setting.

S74. Receive feedback from the client, and determine, according to the verification setting, whether to save the preset file in the preset path.

If the server receives the file attribute sent by the client, the file path and file name in the verification settings have passed the check, and the file type and the file content can be continuously checked, for example, by MD5 encoding.

If the server receives a read failure message, the client is an illegal client.

S75. Determine, according to the judgment result, whether the user is allowed to perform an account operation.

Account security check method in the fourth network environment

In the foregoing third method, the configuration file is limited to the file attribute of a specific file. In practice, in order to increase the complexity and further improve the account security, all the files in the entire preset path can be directly checked. The default file in the default path is all files in the default path, for example, "C:\Windows\System32\Test\*.*". At this time, the file attributes of each file in the path are saved in the configuration file.

According to another embodiment of the present application, a client account security check method in a network environment is provided, including:

S81. When detecting the operation of the account by the user, sending the operation information to the server;

S82. Receive a read file attribute request from the server, and send the corresponding file attribute to the server.

The client reads all the file attributes in the local file path according to the file path in the file attribute request of the server, for example, the file type, the MD5 encoding of the file, and the like, and sends the file to the server. If there is no such path locally, a read failure message is fed back to the server.

Corresponding to the client operation, according to an embodiment of the present application, a server account security check method in a network environment is provided, including:

S91. Receive operation information of a user from the client on the account.

S92. Call the stored verification setting according to the account information corresponding to the user.

In this embodiment, the verification setting includes a preset path and file attribute information of all files in the preset path, such as a file name, a file type, an MD5 code of the file content, and the like. According to an embodiment of the present application, the content of the verification setting is as shown in Table 2:

Table 2

S93. Send a read file attribute request to the client according to the file path in the verification setting.

As shown in Table 2, the default path content "C:\Windows\System32\Test\" in Table 1 is sent to the client, and the client is required to feed back the file attributes.

S94. Receive feedback from the client, and determine, according to the verification setting, whether to save the preset file in a preset path.

For example, the server receives feedback from the client as shown in Table 3:

table 3

It can be seen that the information stored in Table 3 is more than the four files in Table 2. In this case, as long as all the file attributes in Table 2 are present in Table 3, it can be determined that the client is a legitimate client. .

For another example, the server receives feedback sent by the client as shown in Table 4:

Table 4

It can be seen that the file type of the third file in Table 4 is different from the file type of the third file of the verification setting shown in Table 2. The file MD5 data of the fourth file is different from the MD5 data of the fourth file of the verification setting, and Determine that the client is an illegal client.

If the server receives a read failure message, the client is an illegal client.

S95. Determine, according to the judgment result, whether the user is allowed to perform an account operation.

That is, if it is determined that the client saves the preset file in the preset path, the client is a legal guest. At the client end, the server performs an operation request sent by the client; otherwise, the client is an illegal client, and the server ignores the account operation request of the illegal client.

Further, the server can also send an alarm message to the user of the client or lock the illegal client.

Embodiment 2, account security inspection device

Those skilled in the art can implement the functional modules of the product claims corresponding to the methods provided in the above respective embodiments by conventional means such as DSP/FPGA/ASIC according to the specification.

Corresponding to the above account security check method, the present application provides an account security check device.

As shown in FIG. 9, the account security check apparatus provided in one embodiment of the present application includes:

An operation detecting module 51, configured to detect a user operation on an account;

The determining module 52 is configured to determine whether the current computing device saves the preset file in a preset path;

The operation switch module 53 is configured to determine whether to allow the user's operation according to the judgment result of the determination module 52.

Embodiment 3, account security check system

Corresponding to the first one of the account security check methods in the network environment, the present application also provides an account security check system.

As shown in FIG. 10, according to an embodiment of the present application, an account security check system is provided, including:

The account security check client 61 further includes:

The operation detecting module 611 is configured to: when detecting the operation of the account by the user, trigger an account security check operation, and send the operation information of the user to the server through the client transmission module 613;

The client judging module 612 is configured to receive the verification setting from the server through the client transmission module 613, determine whether to save the preset file in the preset path according to the verification setting, and feed back the determination result to the client transmission module 613. server;

a client transmission module 613, configured to perform data transmission with the server;

The account security check server 62 further includes:

a server transmission module 621, configured to perform data transmission with the client;

The verification setting acquisition module 622 is configured to receive the operation information of the user through the server transmission module 621, invoke the stored verification setting according to the account information corresponding to the user, and send the verification setting to the client through the server transmission module 621;

The operation switch module 623 is configured to receive the judgment result from the client through the server transmission module 621, and determine whether to allow the user to perform an account operation according to the determination result.

Corresponding to the second of the account security check methods in the network environment, the present application also provides an account security check system.

As shown in FIG. 11, according to an embodiment of the present application, an account security check system is provided, including:

The account security check client 71 further includes:

The operation detecting module 711 is configured to: when detecting the operation of the account by the user, trigger an account security check operation, and send the operation information of the user to the server through the client transmission module 713;

The client file obtaining module 712 is configured to receive a read file request from the server through the client transmission module 713, read the corresponding file, and feed back to the server through the client transmission module 713;

a client transmission module 713, configured to perform data transmission with the server;

The account security check server 72 further includes:

a server transmission module 721, configured to perform data transmission with the client;

The verification setting obtaining module 722 is configured to receive operation information of the user through the server transmission module 721, and invoke the stored verification setting according to the account information corresponding to the user;

The server file obtaining module 723 receives the verification setting of the verification setting obtaining module 722, and sends a read file request to the client through the server transmission module 721 based on the file path and the file name in the verification setting, and receives the read file request through the server transmission module 721. Feedback file

The server determining module 724 receives the verification setting of the verification setting obtaining module 722 and the file of the server file obtaining module 723, and determines whether the client is in advance according to the verification setting. Set the default file to save the path.

If the server receives the file sent by the client, the file path and file name in the verification settings have passed the check, and the file type and the file content can be continuously checked, for example, by MD5 encoding.

The operation switch module 725 is configured to receive the determination result of the server determination module 723, and determine whether to allow the user to perform an account operation according to the determination result.

In order to save network transmission resources and improve account operation efficiency, corresponding to the third of the account security check methods in the network environment, the present application also provides an account security check system. Compared with the system corresponding to the embodiment of FIG. 10, the difference is that the file attribute information is transmitted between the client file obtaining module and the server file acquiring module instead of the file information.

In order to further improve account security, corresponding to the fourth of the account security checking methods in the network environment, the present application further provides an account security checking system. Compared with the system corresponding to the embodiment of FIG. 10, the difference is that the file attribute information is transmitted between the client file obtaining module and the server file acquiring module instead of the file information; in addition, the server file obtaining module is based on the file in the verification setting. The path sends a read file attribute request to the client instead of the file path and file name. The client file acquisition module feeds back the file attributes of all files in the required path to the server.

Advantages of various embodiments disclosed in the present application include: securing account security even after the password corresponding to the user account is cracked; for mobile terminal users such as smart phones, even if the mobile terminal device is lost, account username, password, and SMS authentication After the mechanism has lost its effect, account security is also guaranteed.

It should be noted and appreciated that various modifications and improvements can be made to the present invention described in detail above without departing from the spirit and scope of the invention as claimed. Therefore, the scope of the claimed technical solutions is not limited by any particular exemplary teachings presented.

Claims

An account security check method includes:

Detecting user operations on the account;

When the user operates the account, it is determined whether the current computing device saves the preset file in the preset path; and

If the current computing device saves the preset file in the preset path, the operation is allowed, otherwise the operation is not allowed.
The account security checking method of claim 1, wherein the predetermined path is a file storage path on a persistent device in the current computing device.
The account security check method according to claim 1, wherein the step of checking whether the current computing device saves the preset file in the preset path comprises:

Check if there is a file with the same name as the preset file in the preset path.
The account security check method according to claim 3, wherein the step of checking whether the current computing device saves the preset file in the preset path further comprises:

Whether the file type of the file with the same name is the same as the file type of the preset file.
The account security check method according to claim 4, wherein the step of checking whether the current computing device saves the preset file in the preset path further comprises:

Check whether the file MD5 code of the file with the same name is the same as the MD5 code of the preset file.
An account security inspection device includes:

An operation detecting module, configured to detect a user operation on an account;

a determining module, configured to determine whether the current computing device saves the preset file in a preset path; and

The operation switch module is configured to determine whether to allow the user's operation according to the judgment result of the determination module.
A method for checking client account security, including:

When the user's operation on the account is detected, the operation information is sent to the server;

Receiving the verification setting from the server, determining whether to save the preset file in the preset path according to the verification setting, wherein the verification setting refers to the preset verification information;

Send the judgment result to the server.
The client account security checking method according to claim 7, wherein the verification setting comprises: a file name, a file type, and a file path.
The client account security check method according to claim 8, wherein the verification setting further comprises: MD5 encoding of the file.
A server account security check method includes:

Receiving operation information of the account from the user of the client;

Resetting the stored verification setting according to the account information corresponding to the user, where the verification setting refers to preset verification information;

Send the verification settings to the client; and

Receiving the judgment result from the client, and determining whether to allow the user to perform an account operation according to the judgment result.
A method for checking client account security, including:

When the user's operation on the account is detected, the operation information is sent to the server;

Receiving a read file request or reading a file attribute request from a server; and

Send the corresponding file or file attribute to the server according to the read file request or the read file attribute request.
A server account security check method includes:

Receiving operation information of the account from the user of the client;

Resetting the stored verification setting according to the account information corresponding to the user, where the verification setting refers to preset verification information;

Send a read file request or read a file attribute request to the client according to the file path or the file path and the file name in the check setting;

Receiving feedback from the client, determining, according to the verification setting, whether the client saves the preset file in a preset path; and

According to the judgment result, it is determined whether the user is allowed to perform an account operation.
An account security check client that includes:

a client transmission module for performing data transmission with a server;

An operation detecting module, configured to send the operation information of the user to the server through the client transmission module when detecting the operation of the account by the user; and

The client judging module is configured to receive the verification setting from the server through the client transmission module, determine whether to save the preset file in the preset path according to the verification setting, and feed the judgment result to the server through the client transmission module, where The verification setting refers to the preset verification information.
An account security check server, comprising:

a server transmission module for performing data transmission with a client;

The verification setting acquisition module is configured to receive the operation information of the user through the server transmission module, invoke the stored verification setting according to the account information corresponding to the user, and send the verification setting to the client through the server transmission module, where the verification setting refers to the preset Check information; and

The operation switch module is configured to receive a judgment result from the client through the server transmission module, and determine, according to the judgment result, whether the user is allowed to perform an account operation.
An account security check client that includes:

a client transmission module for performing data transmission with a server;

An operation detecting module, configured to send the operation information of the user to the server through the client transmission module when detecting the operation of the account by the user; and

The client file obtaining module is configured to receive a read file request or read a file attribute request from the server through the client transmission module, read the corresponding file or file attribute, and feed back to the server through the client transmission module.
An account security check server, comprising:

a server transmission module for performing data transmission with a client;

The verification setting acquisition module is configured to receive the operation information of the user through the server transmission module, and invoke the stored verification setting according to the account information corresponding to the user, where the verification setting refers to the preset verification information;

The server file obtaining module receives the verification setting of the verification setting acquisition module, and sends a read file request or a read file attribute request to the client through the server transmission module based on the file path or the file path and the file name in the verification setting. And receiving the file or file attribute fed back by the client through the server transmission module;

The server judging module receives the verification setting of the verification setting acquisition module and the file or file attribute of the server file acquisition module, and determines, according to the verification setting, whether the client saves the preset file in the preset path; and

The operation switch module is configured to receive a judgment result of the server judgment module, and determine, according to the judgment result, whether the user is allowed to perform an account operation.
An account security check system, comprising:

The account security check client of claim 13;

The account security check server of claim 14 connected to said account security check client.
An account security check system, comprising:

The account security check client of claim 15;

The account security check server of claim 16 connected to said account security check client.