WO2016206090A1

WO2016206090A1 - Two-factor authentication method, device and apparatus

Info

Publication number: WO2016206090A1
Application number: PCT/CN2015/082495
Authority: WO
Inventors: 徐志贤
Original assignee: 华为技术有限公司
Priority date: 2015-06-26
Filing date: 2015-06-26
Publication date: 2016-12-29
Also published as: CN106489155A

Abstract

The present invention relates to a two-factor authentication method, device and apparatus. The method comprises: acquiring an account inputted by a user when logging in; checking whether the account enables a picture factor authentication function; if the check result shows that the account enables the picture factor authentication function, displaying a prompt message for inputting a picture factor; receiving a password and the picture factor inputted by the user when logging in; and performing user login authentication according to the account, the password and the picture factor. As can be seen, the two-factor authentication method provided by the present invention uses the password as a first authentication factor and the picture as a second authentication factor, and is advantageous in that the picture is easy for the user to remember and can be stored at an account server end without requiring to be carried by the user, thus enabling an easy authentication process and convenient operation for the user.

Description

Two-factor authentication method, device and device

Technical field

The present invention relates to the field of identity authentication, and in particular, to a two-factor authentication method, apparatus, and device.

Background technique

Two-factor authentication (TFA or 2FA) refers to the use of two independent and irrelevant evidence to prove identity.

In the prior art, the independent evidence used in the two-factor authentication is:

1. A secret known to the person being authenticated, for example, a password or a Personal Identification Number (PIN);

2. Something owned by the person being certified, for example, a passport, a USB KEY, or a magnetic stripe card;

3. Characteristics inherent in the person being certified, such as fingerprints, looks, sounds, etc.

Certifications that rely on a combination of any of the above two independent evidences are two-factor authentication. At present, the most commonly used single-factor authentication for network applications is user name and password authentication. Therefore, the two-factor authentication required by the network application is an enhanced way of matching the user name and password authentication mode, that is, the above 1+2 or 1+3 mode.

It can be seen from the above that in the two-factor authentication method of the prior art, when the above-mentioned 1+2 mode is used for two-factor authentication, since the user is required to carry something, if the user does not carry the identity, the identity authentication cannot be performed; In the two-mode two-factor authentication, the biometric feature reading and identification special equipment is required, and the biological characteristics of the human body may change, resulting in the inability to perform identity authentication. That is to say, in the prior art two-factor authentication method, the authentication process is cumbersome and the user operation is inconvenient.

Summary of the invention

The embodiment of the invention provides a two-factor authentication method, device and device, and the authentication process is simple and the user is convenient to operate.

In a first aspect, a two-factor authentication method is provided, the method comprising:

Obtain the account entered when the user logs in;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving the password and picture factor entered when the user logs in;

User login authentication is performed according to the account number, the password, and the picture factor.

In conjunction with the first aspect, in a first possible implementation manner of the first aspect, before the receiving a password and a picture factor that are input when the user logs in, the method further includes:

Determine whether the interference picture information is updated;

When the judgment result is that the interference picture information is updated, the updated interference picture information is displayed;

The receiving the password and picture factor input when the user logs in, including:

The password input when the user logs in and the picture factor selected from the updated interference picture information when the user logs in are received.

In conjunction with the first aspect, or the first possible implementation manner of the first aspect, in the second possible implementation manner of the first aspect, before the acquiring an account that is input when the user logs in, the method further includes:

Obtain the account entered when the user registered;

When an instruction for enabling the picture factor authentication function for the account is obtained, prompt information for inputting a picture factor is displayed;

Receiving the password and picture factor entered when the user registers;

Performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.

In conjunction with the second possible implementation of the first aspect, in a third possible implementation manner of the first aspect, the receiving a password and a picture factor that are input when the user is registered include:

Receive the password entered when the user registers;

Randomly generating a picture list to display the picture list;

Receiving an instruction to select a picture from the picture list when the user registers;

The picture selected by the user is taken as the picture factor.

In conjunction with the second possible implementation of the first aspect, in a fourth possible implementation manner of the first aspect, the receiving a password and a picture factor that are input when the user registers, include:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

In conjunction with the fourth possible implementation of the first aspect, in a fifth possible implementation manner of the first aspect, the user uploading the image as a picture factor includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

In conjunction with the fourth or fifth possible implementation of the first aspect, in a sixth possible implementation of the first aspect, the method further includes:

Display prompt information for sharing pictures uploaded by users;

Receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to generate interference picture information for other accounts according to the picture uploaded by the user.

With reference to the fourth possible implementation of the first aspect, in a seventh possible implementation manner of the first aspect, the user uploaded the image is a signature picture drawn by the user;

Receiving the password entered by the user when logging in and the picture factor drawn by the user;

Performing user login authentication according to the account number, the password, and the picture factor, including:

By verifying the account number, whether the password is correct, and by comparing the picture factors User login authentication is performed similar to the signature picture.

With reference to the first aspect, in an eighth possible implementation manner of the first aspect, after the acquiring an account that is input when the user logs in, and querying whether the account is enabled with the picture factor authentication function, the method further includes:

When the query result is that the account factor authentication function is not enabled in the account, the password input by the user is received;

User login authentication is performed according to the account number and the password.

In conjunction with the eighth possible implementation of the first aspect, in a ninth possible implementation manner of the first aspect, the method further includes:

After the user logs in, the user is queried according to the user's instruction whether the picture factor authentication function is enabled.

When the result of the query is that the picture factor authentication function is not enabled on the account, the picture factor authentication function is enabled on the account according to the user's instruction;

Display prompt information for input picture factor;

Receiving a picture factor input by the user;

Re-registering the user according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.

With reference to the first aspect, or any one of the first to the ninth possible implementation manners of the first aspect, in the tenth possible implementation manner of the first aspect, the method further includes:

When the result of the query is that the picture factor authentication function is enabled for the account, the picture factor authentication function is cancelled according to the user's instruction;

Re-registering the user according to the account number and the password.

With reference to the first aspect, or any one of the first to the tenth possible implementation manners of the first aspect, in the eleventh possible implementation manner of the first aspect, the method further includes:

Obtain the account entered when the user retrieves the password;

Receiving a verification code and a picture factor input by the user;

The user retrieves the password authentication according to the account number, the verification code, and the picture factor.

With reference to the first aspect, in a twelfth possible implementation manner of the first aspect, the performing user login authentication according to the account, the password, and the picture factor includes:

When the account number, the password, and the picture factor are all correct, confirm that the authentication is successful, and display the login authentication result that the authentication is successful;

When at least one of the account number, the password, and the picture factor is incorrect, the authentication failure is confirmed, and the login authentication result of the authentication failure is displayed.

With reference to the first aspect, or any one of the first to the twelfth possible implementation manners of the first aspect, in the thirteenth possible implementation manner of the first aspect, the method further includes:

When the number of consecutive authentication failures exceeds a preset number of times, the account is locked.

In a second aspect, a two-factor authentication method is provided, the method comprising:

Obtain the account entered when the user retrieves the password;

Receiving the verification code and picture factor input when the user retrieves the password;

With reference to the second aspect, in a first possible implementation manner of the second aspect, before the receiving the verification code and the picture factor that are input when the user retrieves the password, the method further includes:

Determine whether the interference picture information is updated;

The verification code and the picture factor input when the user receives the password, including:

The verification code input when the user retrieves the password and the picture factor selected from the updated interference picture information when the user retrieves the password.

With reference to the second aspect, or the first possible implementation manner of the second aspect, in the second possible implementation manner of the second aspect, before the acquiring the account that is input when the user retrieves the password, the method further includes:

Obtain the account entered when the user registered;

Receiving the password and picture factor entered when the user registers;

With reference to the second possible implementation of the second aspect, in a third possible implementation manner of the second aspect, the receiving a password and a picture factor that are input when the user is registered include:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

With the third possible implementation of the second aspect, in a fourth possible implementation manner of the second aspect, the user uploading the image as a picture factor includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

In conjunction with the third or fourth possible implementation of the second aspect, in a fifth possible implementation of the second aspect, the method further includes:

Display prompt information for sharing pictures uploaded by users;

With reference to the third possible implementation manner of the second aspect, in a sixth possible implementation manner of the second aspect, the user uploaded the image is a signature picture drawn by the user;

Receiving the verification code input by the user when the password is retrieved and the picture factor drawn by the user;

Performing user password recovery authentication according to the account number, the verification code, and the picture factor, including:

The user retrieves the password authentication by verifying the account number, whether the verification code is correct, and by comparing the similarity between the picture factor and the signature picture.

In a third aspect, a two-factor authentication apparatus is provided, the apparatus comprising:

The obtaining unit is configured to obtain an account entered when the user logs in;

a query unit, configured to query whether an account factor obtained by the obtaining unit is enabled with a picture factor authentication function;

a display unit, configured to display prompt information of the input picture factor when the query result of the query unit is that the picture factor authentication function is enabled for the account;

a receiving unit, configured to receive a password and a picture factor input when the user logs in;

The authentication unit is configured to perform user login authentication according to the account acquired by the acquiring unit, the password received by the receiving unit, and a picture factor.

In conjunction with the third aspect, in a first possible implementation manner of the third aspect, the device further includes:

a determining unit, configured to determine whether the interference picture information is updated before the receiving unit receives the password and the picture factor input when the user logs in;

The display unit is further configured to display the updated interference picture information when the judgment result of the determining unit is that the interference picture information is updated;

The receiving unit is specifically configured to receive a password input when the user logs in and a picture factor selected from the updated interference picture information when the user logs in.

In combination with the third aspect or the first possible implementation of the third aspect, the second in the third aspect Possible implementations:

The obtaining unit is further configured to acquire an account that is input when the user registers, before acquiring an account that is input when the user logs in;

The display unit is further configured to display prompt information of the input picture factor when an instruction for enabling the picture factor authentication function for the account is obtained;

The receiving unit is further configured to receive a password and a picture factor input when the user registers;

The device also includes:

a registration unit, configured to perform user registration according to the account acquired by the acquiring unit, the password received by the receiving unit, and a picture factor, and generate interference picture information including the picture factor for the account.

In conjunction with the second possible implementation of the third aspect, in a third possible implementation manner of the third aspect, the receiving unit includes:

a receiving subunit, configured to receive a password input when the user registers;

a display subunit, configured to randomly generate a picture list, and display the picture list;

The receiving subunit is further configured to receive an instruction for selecting a picture from the picture list when the user registers;

A picture factor confirmation subunit is configured to use a picture selected by the user by the receiving subunit as a picture factor.

With reference to the second possible implementation of the third aspect, in a fourth possible implementation manner of the third aspect, the receiving unit includes:

The receiving subunit is further configured to receive an instruction that a user uploads a picture;

The picture factor confirmation subunit is configured to use the user uploaded picture received by the receiving subunit as a picture factor.

With reference to the fourth possible implementation manner of the third aspect, in a fifth possible implementation manner of the third aspect, the picture factor confirmation subunit is specifically configured to The grid is cropped; the cropped image is used as the image factor.

In conjunction with the fourth or fifth possible implementation of the third aspect, in a sixth possible implementation of the third aspect:

The display unit is further configured to display prompt information for sharing a picture uploaded by a user;

The receiving unit is further configured to receive an instruction of the user, and share the uploaded image of the user according to the instruction, so that the interference picture information can be generated for the other account according to the picture uploaded by the user.

With reference to the fourth possible implementation manner of the third aspect, in a seventh possible implementation manner of the third aspect, the user-uploaded picture received by the receiving sub-unit is a signature picture drawn by the user;

The receiving unit is specifically configured to receive a password input by the user when logging in and a picture factor drawn by the user;

The authentication unit is specifically configured to verify, by using the account acquired by the acquiring unit, whether the password received by the receiving unit is correct, and by comparing the picture factor received by the receiving unit with the signature picture received by the receiving subunit. Similarity, user login authentication.

In conjunction with the third aspect, in an eighth possible implementation of the third aspect:

The receiving unit is further configured to: when the obtaining unit acquires an account that is input when the user logs in, the query unit queries whether the image factor authentication function is enabled in the account, and the query result of the query unit is the account When the picture factor authentication function is not enabled, the password input by the user is received;

The authentication unit is further configured to perform user login authentication according to the account acquired by the acquiring unit and the password received by the receiving unit.

In conjunction with the eighth possible implementation of the third aspect, in a ninth possible implementation of the third aspect:

The query unit is further configured to: after the user logs in, query whether the account factor authentication function is enabled by the account according to an instruction of the user;

The device also includes:

An enabling unit, configured to: when the query result of the query unit is that the account factor is not enabled When the authentication function is performed, the picture factor authentication function is enabled for the account according to the user's instruction;

The display unit is further configured to display prompt information of an input picture factor;

The receiving unit is further configured to receive a picture factor input by the user;

The registration unit is further configured to re-register the user according to the account, the password, and the picture factor, and generate interference picture information including the picture factor for the account.

With reference to the third aspect or any one of the first to the ninth possible implementation manners of the third aspect, in the tenth possible implementation manner of the third aspect:

The device also includes:

a canceling unit, configured to cancel a picture factor authentication function on the account according to a user instruction when the query result of the query unit is that the picture factor authentication function is enabled on the account;

The registration unit is further configured to perform user registration again according to the account number and the password.

With reference to the third aspect, or any one of the first to the tenth possible implementation manners of the third aspect, in an eleventh possible implementation manner of the third aspect:

The obtaining unit is further configured to acquire an account that is input when the user retrieves the password;

The query unit is further configured to query whether an account factor obtained by the obtaining unit is enabled with a picture factor authentication function;

The display unit is further configured to: when the query result of the query unit is that the image factor authentication function is enabled for the account, display prompt information of the input picture factor;

The receiving unit is further configured to receive a verification code and a picture factor input by the user;

The authentication unit is further configured to perform user recovery password authentication according to the account number, the verification code, and the picture factor.

In conjunction with the third aspect, in a twelfth possible implementation manner of the third aspect, the authenticating unit is specifically configured to:

When the account number, the password, and the picture factor are all correct, confirm that the authentication is successful, and display Successful login verification results;

With reference to the third aspect, or any one of the first to the twelfth possible implementation manners of the third aspect, in the thirteenth possible implementation manner of the third aspect, the device further includes:

The locking unit is configured to lock the account when the number of consecutive authentication failures of the authentication unit exceeds a preset number of times.

In a fourth aspect, a two-factor authentication apparatus is provided, the apparatus comprising:

The obtaining unit is configured to obtain an account entered when the user retrieves the password;

a receiving unit, configured to receive a verification code and a picture factor input when the user retrieves the password;

The authentication unit is configured to perform user recovery password authentication according to the account acquired by the acquiring unit, the verification code received by the receiving unit, and the picture factor.

In conjunction with the fourth aspect, in a first possible implementation manner of the fourth aspect, the device further includes:

a determining unit, configured to determine whether the interference picture information is updated before the receiving unit receives the verification code and the picture factor input when the user retrieves the password;

The receiving unit is specifically configured to receive a verification code input when the user retrieves the password and a picture factor selected from the updated interference picture information when the user retrieves the password.

With reference to the fourth aspect, or the first possible implementation manner of the fourth aspect, in the second possible implementation manner of the fourth aspect, the acquiring unit is further configured to input when acquiring a password for the user to retrieve Before the account number, obtain the account number entered when the user registers;

The device also includes:

In conjunction with the second possible implementation of the fourth aspect, in a third possible implementation manner of the fourth aspect, the receiving unit includes:

The picture factor confirmation sub-unit is used to use the picture uploaded by the user as a picture factor.

With reference to the third possible implementation manner of the fourth aspect, in a fourth possible implementation manner of the fourth aspect, the picture factor confirmation sub-unit is specifically configured to perform, according to a unified specification, a user-uploaded picture; The cropped image acts as a picture factor.

With reference to the third or fourth possible implementation manner of the fourth aspect, in a fifth possible implementation manner of the fourth aspect, the display unit is further configured to display prompt information for sharing a user-uploaded picture;

With reference to the third possible implementation manner of the fourth aspect, in a sixth possible implementation manner of the fourth aspect, the user-uploaded picture received by the receiving sub-unit is a signature picture drawn by the user;

The receiving unit is specifically configured to receive a verification code input by the user when the password is retrieved and a picture factor drawn by the user;

The authentication unit is specifically configured to verify, by using the account acquired by the acquiring unit, whether the verification code received by the receiving unit is correct, and by comparing the picture factor received by the receiving unit with the receiving subunit. The similarity of the signature image is used to retrieve the password for the user.

In a fifth aspect, a two-factor authentication device is provided, the device comprising:

Memory

processor;

The memory is configured to store program instructions;

The processor is configured to perform the following operations according to program instructions stored in the memory:

Obtain the account entered when the user logs in;

Receiving the password and picture factor entered when the user logs in;

In conjunction with the fifth aspect, in a first possible implementation manner of the fifth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory:

Determining whether the interference picture information is updated before receiving the password and the picture factor input when the user logs in;

The processor performs an operation of receiving a password and a picture factor input when the user logs in, including:

With reference to the fifth aspect, or the first possible implementation manner of the fifth aspect, in a second possible implementation manner of the fifth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory :

Obtaining an account entered when the user registers, before obtaining the account entered when the user logs in;

Receiving the password and picture factor entered when the user registers;

With reference to the second possible implementation manner of the fifth aspect, in a third possible implementation manner of the fifth aspect, the performing, by the processor, the operation of receiving the password and the picture factor input when the user registers, includes:

Receive the password entered when the user registers;

Randomly generating a picture list to display the picture list;

The picture selected by the user is taken as the picture factor.

With reference to the second possible implementation manner of the fifth aspect, in a fourth possible implementation manner of the fifth aspect, the performing, by the processor, the operation of receiving the password and the picture factor input when the user registers, includes:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

With reference to the fourth possible implementation manner of the fifth aspect, in a fifth possible implementation manner of the fifth aspect, the performing, by the processor, the performing a user-uploaded picture as a picture factor includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

In conjunction with the fourth or fifth possible implementation of the fifth aspect, in a sixth possible implementation manner of the fifth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory :

Display prompt information for sharing pictures uploaded by users;

With reference to the fourth possible implementation manner of the fifth aspect, in a seventh possible implementation manner of the fifth aspect, the user uploaded the image is a signature picture drawn by the user;

The processor performs the operation of receiving the password and the picture factor input when the user logs in, including:

The processor performs the operation of performing user login authentication according to the account, the password, and the picture factor, including:

User login authentication is performed by verifying the account number, whether the password is correct, and by comparing the similarity between the picture factor and the signature picture.

In conjunction with the fifth aspect, in an eighth possible implementation manner of the fifth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory:

After the user account is logged in to obtain the image factor authentication function, when the query result is that the account factor authentication function is not enabled, the password input by the user is received;

In conjunction with the eighth possible implementation of the fifth aspect, in a ninth possible implementation manner of the fifth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory:

Display prompt information for input picture factor;

Receiving a picture factor input by the user;

With reference to the fifth aspect, or any one of the first to the ninth possible implementation manners of the fifth aspect, in a tenth possible implementation manner of the fifth aspect, the processor is further configured to use the memory The program instructions stored in it do the following:

Re-registering the user according to the account number and the password.

With reference to the fifth aspect, or any one of the first to the tenth possible implementation manners of the fifth aspect, in the eleventh possible implementation manner of the fifth aspect, the processor is further configured to Program instructions stored in memory perform the following operations:

Obtain the account entered when the user retrieves the password;

Receiving a verification code and a picture factor input by the user;

With reference to the fifth aspect, in a twelfth possible implementation manner of the fifth aspect, the performing, by the processor, the performing user login authentication according to the account, the password, and the picture factor, including:

Confirming authentication when at least one of the account number, the password, and the picture factor is incorrect Failure, showing the login authentication result of the authentication failure.

With reference to the fifth aspect, or any one of the first to the twelfth possible implementation manners of the fifth aspect, in the thirteenth possible implementation manner of the fifth aspect, the processor is further configured to perform The program instructions stored in the memory perform the following operations:

In a sixth aspect, a two-factor authentication device is provided, the device comprising:

Memory

processor;

The memory is configured to store program instructions;

Obtain the account entered when the user retrieves the password;

In conjunction with the sixth aspect, in a first possible implementation manner of the sixth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory:

Determining whether the interference picture information is updated before the verification code and the picture factor input when the user retrieves the password is received;

The processor performs the operation of receiving the verification code and the picture factor input when the user retrieves the password, including:

In combination with the sixth aspect or the first possible implementation of the sixth aspect, the second aspect of the sixth aspect In a possible implementation manner, the processor is further configured to perform the following operations according to the program instructions stored in the memory:

Obtaining an account entered when the user registers, before obtaining the account entered when the user retrieves the password;

Receiving the password and picture factor entered when the user registers;

With reference to the second possible implementation manner of the sixth aspect, in a third possible implementation manner of the sixth aspect, the performing, by the processor, the operation of receiving the password and the picture factor input when the user registers, includes:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

With reference to the third possible implementation manner of the sixth aspect, in the four possible implementation manners of the sixth aspect, the performing, by the processor, the performing a user-uploaded picture as a picture factor includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

In conjunction with the third or fourth possible implementation of the sixth aspect, in a fifth possible implementation manner of the sixth aspect, the processor is further configured to perform the following operations according to the program instructions stored in the memory :

Display prompt information for sharing pictures uploaded by users;

In conjunction with the third possible implementation of the sixth aspect, the sixth possible implementation in the sixth aspect In the current mode, the picture uploaded by the user is a signature picture drawn by the user;

The embodiment of the invention provides a two-factor authentication method, first obtaining an account input when a user logs in, and then querying whether the account factor authentication function is enabled for the account, and when the query result is that the image factor authentication function is enabled for the account, the user is Display the prompt information of the input picture factor, receive the password and picture factor input when the user logs in, and perform user login authentication according to the account number, password and picture factor. It can be seen that, in the two-factor authentication method provided by the embodiment of the present invention, the password is used as the first authentication factor, and the picture is used as the second authentication factor, because the picture has the characteristics that the user can easily remember, and can be performed in the account server. The storage does not need to be carried by the user, so the authentication process is simple and the user operates conveniently.

DRAWINGS

1 is a system architecture diagram on which a two-factor authentication method according to an embodiment of the present invention is based;

2 is a flowchart of a two-factor authentication method according to Embodiment 1 of the present invention;

3 is a signal flow diagram of a registration method in a two-factor authentication method according to Embodiment 2 of the present invention;

4 is a signal flow diagram of a login method in a two-factor authentication method according to Embodiment 3 of the present invention;

5 is a signal flow diagram of a method for setting a picture factor in a two-factor authentication method according to Embodiment 4 of the present invention;

6 is a signal flow diagram of a method for canceling a picture factor in a two-factor authentication method according to Embodiment 5 of the present invention;

7 is a flowchart of a two-factor authentication method according to Embodiment 6 of the present invention;

8 is a signal flow diagram of an authentication method for retrieving a password in a two-factor authentication method according to Embodiment 7 of the present invention;

9 is a structural diagram of a two-factor authentication apparatus according to Embodiment 8 of the present invention;

10 is a structural diagram of a two-factor authentication apparatus according to Embodiment 9 of the present invention;

11 is a structural diagram of a two-factor authentication device according to Embodiment 10 of the present invention;

FIG. 12 is a structural diagram of a two-factor authentication device according to Embodiment 11 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be described in conjunction with the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are part of the present invention. Embodiments, but not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The two-factor authentication method provided by the embodiment of the present invention can be applied to the authentication of a local system account or an Internet account. The password is used as the first authentication factor of the account, and the image is used as the second authentication factor of the account, and the two authentication factors are adopted. The combination method improves the security of account authentication. Since the picture has the characteristics that the user can easily remember, and can be stored in the account server without the user carrying, the authentication process is simple and the user is convenient to operate. The two-factor authentication method can be applied to any authentication process that requires authentication of an account. Specifically, it can be applied to an authentication process of an account login and a password recovery.

FIG. 1 is a system architecture diagram of a two-factor authentication method according to an embodiment of the present invention. The system includes an account server module and an account client module. Specifically, referring to FIG. 1( a ), when a two-factor authentication method is applied When the local system account is authenticated, the account server module and the account client module may be two modules in the same physical device; referring to FIG. 1(b), when the two-factor authentication method is applied to the authentication of the Internet account, the account is used. The server module and the account client module can also be Two modules are set in two physical devices that are remotely linked via the Internet.

The account client module is responsible for generating a human-computer interaction interface, so that the user inputs the account, password, and picture factor through the human-computer interaction interface, and displays the authentication result. The account client module is usually a child in the client application system. Module. The account server module is responsible for the account, password, picture factor storage, verification, interference picture generation, account, password and picture factor input correctness authentication. Among them, the correctness verification verifies whether the account number, password and picture factor are input correctly, and can confirm that the picture factor input is correct when the picture factor input by the user is completely consistent with the stored picture factor; also can input the picture factor and storage in the user When the similarity of the picture factor is greater than the preset threshold, confirm that the picture factor input is correct. For example, when the picture factor is a signature picture, the account server module can also determine the correctness of the input of the picture factor by handwriting comparison or picture similarity comparison.

In the embodiment of the present invention, when the user sets the picture factor, a picture may be selected from the picture list randomly generated by the account server as the picture factor of the account, or an image may be uploaded as the picture factor of the account, and the picture is uploaded. More user-friendly. User-uploaded images can be tailored to the client or server according to uniform specifications to prevent hackers from judging the images uploaded by users themselves. The user may be prompted to share the uploaded image, so as to generate interference image information for other accounts according to the uploaded image of the user, and the uploaded image of the user may be used as a picture factor or an interference picture in the interference picture information. The picture factor can be set at the time of registration, or the picture factor can be set, changed, or cancelled in the account management after the registration is completed. The account client can also use the drawing software to draw the signature picture as the picture factor. At this time, the account server can determine the correctness of the signature picture by comparing the signature picture handwriting or similarity.

2 is a flowchart of a two-factor authentication method according to Embodiment 1 of the present invention. The method is based on the system architecture shown in FIG. 1. When applied to the system architecture shown in FIG. 1(a), the execution body of the method may be A physical device including an account server module and an account client module, or when applied to the system architecture shown in FIG. 1(b), the execution body of the method may be a physical device including only the account client module. Specifically, it is applied to authentication during the login process, and the method includes:

Step 201: Acquire an account entered when the user logs in.

Step 202: Query whether the account factor authentication function is enabled on the account.

Specifically, the image factor authentication function may be locally queried in the account, and the other device may be queried whether the image factor authentication function is enabled.

In the two-factor authentication method provided by the embodiment of the present invention, a combination of two authentication factors is used for user authentication, and when applied to authentication in the user login process, a password may be used as the first authentication factor, and the image is used as the first authentication factor. For the convenience of description, the second authentication factor is called login authentication in the user login process, and the second authentication factor in the form of a picture is called a picture factor. The two-factor authentication method provided by the embodiment of the present invention can be compatible with the traditional one-factor authentication method, and the user selects whether to enable the picture factor authentication function. When the picture factor authentication function is enabled, the two-factor authentication mode of the password + picture is adopted, when not enabled. When the picture factor authentication function is used, the one-factor authentication method of the password is adopted. In the embodiment of the present invention, when the user registers, the picture factor authentication function may be enabled or disabled by the user.

When the user selects the enable picture factor authentication function when the user registers, the registration process may include: obtaining an account input when the user is registered; and when obtaining an instruction to enable the picture factor authentication function for the account, displaying the input picture factor a prompt information; receiving a password and a picture factor input when the user registers; performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account. The interference picture information may be specifically presented to the user in the form of a list for the user to select a picture factor from the list.

The user receives the picture factor input by the user, but is not limited to the following two methods: the first way, receiving the password input by the user; randomly generating the picture list, displaying the picture list; receiving the user from the The instruction for selecting a picture in the picture list is used as a picture factor for the picture selected by the user. In the second method, the password input by the user is received; the instruction for uploading the image by the user is received, and the image uploaded by the user is used as the picture factor. The using the image uploaded by the user as a picture factor may include: cutting a picture uploaded by the user according to a unified specification; and using the cut picture as a picture factor.

In the embodiment of the present invention, the picture factor set when the user is registered may be stored, so that when the user performs login authentication, the picture factor input when the user logs in is compared with the picture factor set when the user registers, when the two are consistent. To confirm that the picture factor entered when the user logs in is the correct picture factor.

Optionally, when the user registers, the method may further include: displaying prompt information for sharing a picture uploaded by the user; receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to be according to the user The uploaded image generates interference image information for other accounts.

When the user selects not to enable the picture factor authentication function when the user registers, the registration process may include: obtaining an account entered when the user registers; receiving an input when receiving an instruction that does not enable the picture factor authentication function for the account. Password; user registration based on the account number and the password.

In the embodiment of the present invention, after the user logs in, the picture factor authentication function or the picture factor authentication function can be enabled through the account management, and the picture factor can be set, changed, or cancelled.

The process of enabling the picture factor authentication function may include: after the user logs in, querying whether the account is enabled with the picture factor authentication function according to the user's instruction; when the query result is that the picture factor authentication function is not enabled for the account, according to the user's instruction Enabling a picture factor authentication function for the account; displaying prompt information for inputting a picture factor; receiving a picture factor input by the user; re-registering the user according to the account number, the password, and the picture factor, and generating an inclusion for the account Interference picture information of the picture factor.

The process of canceling the picture factor authentication function may include: after the user logs in, querying whether the account is enabled with the picture factor authentication function according to the user's instruction; when the query result is that the picture factor authentication function is enabled for the account, according to the user's instruction Deactivating the picture factor authentication function for the account; re-registering the user according to the account number and the password.

Step 203: When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed.

Step 204: Receive a password and a picture factor input when the user logs in.

In the embodiment of the present invention, the interference picture information may be displayed through the user interface, and the picture factor selected by the user from the interference picture information is received.

Optionally, the method further includes: determining whether the interference picture information is updated; and when the judgment result is that the interference picture information is updated, displaying the updated interference picture information to the user; and receiving the password and picture factor input by the user, The method includes: receiving a password input by the user and a picture factor selected by the user from the updated interference picture information.

Step 205: Perform user login authentication according to the account number, the password, and the picture factor.

Specifically, when the account number, the password, and the picture factor are all correct, confirming that the authentication is successful, displaying a successful login authentication result; when at least one of the account number, the password, and the picture factor is incorrect When the authentication fails, the login authentication result of the authentication failure is displayed.

Optionally, when the number of consecutive authentication failures exceeds a preset number of times, the account is locked.

The time for locking the account can be configured, and the short message alarm notification can be sent to the user according to the mobile phone number bound to the account, or the email alert notification can be sent to the user according to the email address bound to the account.

In the embodiment of the present invention, when the picture factor set when the user registers is the signature picture drawn by the user, correspondingly, the password input by the user when logging in and the picture factor drawn by the user are received, according to the account number, the password, and The performing the user login authentication may include: verifying the account, whether the password is correct, and performing user login authentication by comparing the similarity between the picture factor and the signature picture. For example, when the account number and the password are correct, and the similarity between the picture factor and the signature picture is greater than a preset threshold, the authentication is confirmed to be successful.

When the result of the query in step 202 is that the account factor authentication function is not enabled on the account, the account is authenticated by the single factor authentication method, and specifically, the password input by the user is received; and the account and the password are used according to the account and the password. User login authentication.

Through the above manner, the compatibility between the two-factor authentication method and the single-factor authentication method can be realized.

The two-factor authentication method of the embodiment of the present invention can also be applied to the authentication process of the user to retrieve the password. The specific processing procedure may include: obtaining an account input when the user retrieves the password; Whether the account factor authentication function is enabled for the account; when the query result is that the image factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed to the user; the verification code and the picture factor input by the user are received; according to the account number and the The verification code and the picture factor are used to perform user recovery password authentication.

The embodiment of the invention provides a two-factor authentication method, first obtaining an account input when a user logs in, and then querying whether the account factor authentication function is enabled for the account, and when the query result is that the image factor authentication function is enabled for the account, the user is Display the prompt information of the input picture factor, receive the password and picture factor input by the user, and perform user login authentication according to the account number, password and picture factor. It can be seen that, in the two-factor authentication method provided by the embodiment of the present invention, the password is used as the first authentication factor, and the picture is used as the second authentication factor, because the picture has the characteristics that the user can easily remember, and can be performed in the account server. The storage does not need to be carried by the user, so the authentication process is simple and the user operates conveniently.

3 is a signal flow diagram of a registration method in a two-factor authentication method according to Embodiment 2 of the present invention. The registration method includes a message interaction process that requires a user to set a picture factor, and the method includes:

In step 301, the account client obtains a registration request of the user.

Step 302: The account client displays a prompt message requesting the user to input an account, a password, selecting a picture, or newly uploading a picture through the user interface.

Step 303: The account client submits a registration request to the account server, where the registration request carries an account, a password, a selected picture information, or a picture uploaded by the user.

Step 304: The account server registers the account, saves the input picture information, and generates a list of interference pictures with multiple other pictures for the account.

In step 305, the account server returns the registration result to the account client.

In addition, when registering, the picture factor authentication function may not be enabled, and the image or password registration is not required to be selected or loaded. The image factor is subsequently selected by the user. When not set, the account only performs password single factor authentication.

When the user selects to enable the image two-factor authentication when registering, the user is from the N pictures provided by the system. Select a picture as the picture factor, or upload a picture yourself (either a device local picture or a camera photo or software to draw a picture) as a picture factor. You can also ask the user to draw a signature image through the drawing software.

The uploaded image of the user can be tailored or scaled according to the unified specifications on the account client or the account server, so as to prevent the hacker from judging the image uploaded by the user through the image size; and prompting the user to share the uploaded image as another user selection. Picture factor.

If the signature picture mode is adopted, the account server can only save the signature picture without generating a list of interference pictures with multiple other pictures.

4 is a signal flow diagram of a login method in a two-factor authentication method according to Embodiment 3 of the present invention. The login method includes a message interaction process that requires a user to select a picture factor, and the method includes:

In step 401, the account client obtains a login request for the account.

Step 402: The account client sends the query information to the account server, where the query information carries the account.

Step 403: The account server queries whether the account factor authentication function is enabled in the account, and generates a query result.

In step 402, the query information sent by the account client may also carry the previously cached interference picture list that is locally cached. In step 403, the account server needs to query the current interference picture list and the received interference. Whether the picture list is consistent. If they are consistent, the query result carries the identifier information of the interference picture list without updating; if not, the current interference picture list is carried in the query result.

The interference picture list includes a picture factor set by the user, and the interference picture list may specifically be a picture identifier or a digital abstract or a complete picture information.

In the embodiment of the present invention, the account server checks whether the interference picture list of the account is consistent with the requesting interface. If they are consistent, the returned interference picture list is not updated. Otherwise, the new interference picture list is returned, and the interference picture list can be implemented. When updating, the account server does not need to send an interference picture list to the account client, thereby effectively saving the system transmission bandwidth.

In step 404, the account server returns the query result of step 403 to the account client.

In step 405, the account client receives the password input by the user.

In step 406, the account client displays a list of interference pictures, and asks the user to select a picture set by himself.

Step 407: The account client sends a login authentication request to the account server, where the login authentication request carries the account, the password, and the selected picture information.

Step 408: The correctness of the account server authentication account, the password, and the selected picture information is correct. The login authentication result is confirmed as successful. Otherwise, the login authentication result is confirmed as the authentication failure.

By selecting the picture factor, when the account server authenticates the picture factor, it compares the identifier (ID) or the digital digest or the complete picture information of the input picture information to determine whether the picture factor is selected and input correctly.

In the embodiment of the present invention, password and picture anti-brute defense protection can also be performed, that is, after consecutive errors N times, the account is locked, and the lock time can be configured.

In step 409, the account server returns the login authentication result to the account client.

In step 410, the account client displays the login authentication result.

In the above process, the method of selecting a picture factor is mainly described. If the method of signing pictures is adopted, the specific process is different: after the account client sends the query information to the account server, the account server only returns the picture to the account client. Whether the factor authentication function is enabled or not; the account client requires the user to re-use the drawing software to draw the signature picture; the account server determines whether the picture factor is input correctly by comparing the similarity between the signature picture and the picture factor stored in the user registration.

FIG. 5 is a signal flow diagram of a method for setting a picture factor in a two-factor authentication method according to Embodiment 4 of the present invention. The setting method includes a message interaction process for setting a picture factor after an account with no picture factor is set, and the method includes:

In step 501, the account client obtains the account management request of the user.

Specifically, after the user logs in, the account management interface is entered.

Step 502: The account client sends an inquiry to the account server according to the account management request. begging.

Step 503: The account server queries whether the account factor authentication function is enabled according to the query request, and obtains the query result that the account factor authentication function is not enabled for the account.

In step 504, the account server returns the query result to the account client.

Step 505: The account client enables the picture factor authentication function according to the user's instruction.

Step 506: The account client requests the account server to obtain the interference picture list.

In step 507, the account server returns an interference picture list to the account client.

The account server can randomly generate an interference picture list and then return an interference picture list to the account client.

Step 508: The account client displays an interference picture list, prompting the user to select a picture or upload a picture by itself, and submit a set picture factor.

When receiving the picture factor set by the user, the user may also be required to enter a password to enhance security.

In step 509, the account client sends a request for setting a picture factor to the account server.

The request can carry an account, selected pictures or newly uploaded pictures; it can also carry a password to enhance security.

In step 510, the account server sets a picture factor for the account, and generates a list of interference pictures with multiple other pictures for the account.

Passwords can also be verified in this step to enhance security.

In step 511, the account server returns a result of successfully setting the picture factor to the account client.

In step 512, the account client displays the result of the successful setting of the picture factor.

In the above method for setting the picture factor, only the picture factor is selected by the user in the interference picture list, and the picture factor can also be set by using the signature picture mode.

FIG. 6 is a signal flow diagram of a method for canceling a picture factor in a two-factor authentication method according to Embodiment 5 of the present invention. The method includes the message exchange process of canceling the picture factor after the account with the picture factor is set to be registered, and the method includes:

In step 601, the account client obtains the account management request of the user.

Step 602: The account client sends a query request to the account server according to the account management request.

Step 603: The account server queries whether the account factor authentication function is enabled according to the query request, and obtains the query result that the account factor authentication function is enabled for the account.

In step 604, the account server sends the query result to the account client.

Step 605: The account client cancels the picture factor authentication function for the account according to the user's instruction.

Users can also be required to enter a password to enhance security.

Step 606: The account client sends a request for canceling the picture factor to the account server.

The request can carry an account; it can also carry a password to enhance security.

In step 607, the account server cancels the picture factor for the account.

Passwords can also be verified in this step to enhance security.

In step 608, the account server returns a result of the successful cancellation of the picture factor to the account client.

In step 609, the account client displays the result of the successful cancellation of the picture factor.

FIG. 7 is a flowchart of a two-factor authentication method according to Embodiment 6 of the present invention. The method is based on the system architecture shown in FIG. 1 and is specifically applied to the authentication in the process of retrieving a password. The method includes:

Step 701: Acquire an account entered when the user retrieves the password.

The two-factor authentication method used in the embodiment of the present invention needs to set a picture factor in advance. Therefore, before step 701, user registration is first performed, and a picture factor is set in the registration process, specifically, an account input when the user is registered; When the instruction for enabling the picture factor authentication function is enabled on the account, displaying prompt information of the input picture factor; receiving a password and a picture factor input when the user registers; performing user registration according to the account number, the password, and the picture factor, And generating interference picture information including the picture factor for the account.

The password and the picture factor that are input when the user is registered may include: receiving a password input by the user when registering; receiving an instruction for uploading a picture by the user; and using the picture uploaded by the user as a picture factor. Optionally, the user-uploaded image is clipped according to a uniform specification; the clipped image is used as a picture factor.

Optionally, during the user registration process, the following process may be further included: displaying prompt information for sharing a picture uploaded by the user; receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to The picture uploaded by the user generates interference picture information for other accounts.

Optionally, in the user registration process, the uploaded picture of the user is a signature picture drawn by the user; correspondingly, in the authentication process of the user retrieving the password, the verification code input by the user when the password is retrieved and the user-drawn a picture factor; performing user recovery password authentication by verifying whether the account number, the verification code is correct, and by comparing the similarity between the picture factor and the signature picture.

Step 702: Query whether the picture factor authentication function is enabled in the account.

Step 703: When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed.

Step 704: Receive a verification code and a picture factor input when the user retrieves the password.

In the embodiment of the present invention, before step 704, it may first determine whether the interference picture information is updated; when the judgment result is that the interference picture information is updated, the updated interference picture information is displayed; and the verification code input when the user retrieves the password is received. And a picture factor selected from the updated interference picture information when the user retrieves the password.

There are various ways to receive the picture factor input by the user, and specifically refer to the two-factor authentication method embodiment in the previous login process.

Step 705: Perform user recovery password authentication according to the account number, the verification code, and the picture factor.

8 is a signal flow diagram of an authentication method for retrieving a password in a two-factor authentication method according to Embodiment 7 of the present invention. The authentication method includes a picture factor that is set, and a message interaction process that requires a user to select a picture factor when the password is retrieved. The method includes:

In step 801, the account client receives the user's password recovery request and the account entered by the user.

Step 802: The account client sends the query information to the account server, where the query information carries the account.

In step 803, the account server queries whether the account factor authentication function is enabled in the account, and generates a query result.

In step 804, the account server returns the query result of step 703 to the account client.

Step 805: The account client receives an instruction that the user requests to obtain the verification code.

Step 806: The account client sends a request for obtaining a verification code to the account server.

Step 807: The account server sends a verification code to the user equipment according to the email address or mobile phone number bound to the account.

Step 808: The account server returns a result of successfully sending the verification code to the account client.

In step 809, the account client asks the user to input a verification code and a new password, and displays a list of interference pictures, and asks the user to select a picture set by himself.

Step 810: The account client sends a reset account password request to the account server, and the reset account password request carries the account, the new password, the verification code, and the selected picture information.

In step 811, the correctness of the account server authentication account, the verification code, and the selected picture information is correct. The authentication result is that the authentication is successful, and the password is reset. Otherwise, the authentication result is confirmed as the authentication failure.

In the embodiment of the present invention, the password, the verification code, and the picture factor can also be used to prevent brute force cracking, that is, after consecutive errors N times, the account is locked, and the lock time can be configured.

In step 812, the account server returns the authentication result to the account client.

In step 813, the account client displays the authentication result.

By obtaining the verification code according to the email address or mobile phone number bound to the account, entering the verification code, and verifying the verification code of the account server, it is a common password recovery process for the Internet single factor account system. In the embodiment of the present invention, other alternative methods such as entering a password prompt question may also be adopted.

In the embodiment of the present invention, a method of signing a picture may be adopted instead of selecting a picture factor. At this time, the query picture factor information only returns whether the picture factor authentication function is enabled; the account client requires the user to re-use the drawing software to draw the signature picture; the account server compares the signature picture with the picture factor stored in the user registration to determine the picture factor. Is it entered correctly?

FIG. 9 is a structural diagram of a two-factor authentication apparatus according to Embodiment 8 of the present invention. The apparatus is used to perform the two-factor authentication method provided by the embodiment of the present invention. The method is applied to authentication in a login process, and the apparatus includes:

The obtaining unit 901 is configured to acquire an account that is input when the user logs in;

The query unit 902 is configured to query whether the account factor acquired by the obtaining unit 901 is enabled with the picture factor authentication function;

The display unit 903 is configured to display prompt information of the input picture factor when the query result of the query unit 902 is that the picture factor authentication function is enabled on the account;

The receiving unit 904 is configured to receive a password and a picture factor that are input when the user logs in;

The authentication unit 905 is configured to perform user login authentication according to the account acquired by the acquiring unit 901, the password received by the receiving unit 904, and a picture factor.

Optionally, the device further includes:

The determining unit 906 is configured to determine whether the interference picture information is updated before the receiving unit 904 receives the password and the picture factor input when the user logs in;

The display unit 903 is further configured to: when the determination result of the determining unit 906 is that the interference picture information is updated, display the updated interference picture information;

The receiving unit 904 is specifically configured to receive a password input when the user logs in and a picture factor selected from the updated interference picture information when the user logs in.

Optionally, the obtaining unit 901 is further configured to: obtain an account that is input when the user registers, before acquiring an account that is input when the user logs in;

The display unit 903 is further configured to: when the instruction for enabling the picture factor authentication function on the account is acquired, displaying prompt information of the input picture factor;

The receiving unit 904 is further configured to receive a password and a picture factor input when the user registers;

The device also includes:

The registration unit 907 is configured to perform user registration according to the account acquired by the obtaining unit 901, the password and the picture factor received by the receiving unit 904, and generate the picture due to the account Sub-interference picture information.

Optionally, the receiving unit 904 includes:

Optionally, the picture factor confirmation subunit is specifically configured to cut a picture uploaded by the user according to a unified specification; and the cut picture is used as a picture factor.

Optionally, the display unit 903 is further configured to display prompt information for sharing a picture uploaded by the user;

The receiving unit 904 is further configured to receive an instruction of the user, and share the uploaded image of the user according to the instruction, so that the interference picture information can be generated for the other account according to the picture uploaded by the user.

Optionally, the user-uploaded picture received by the receiving sub-unit is a signature picture drawn by the user;

The receiving unit 904 is specifically configured to receive a password input by the user when logging in and a picture factor drawn by the user;

The authentication unit 905 is specifically configured to verify whether the account number acquired by the acquiring unit 901, the password received by the receiving unit 904 is correct, and the picture factor received by the receiving unit 904 and the receiver. The similarity of the signature pictures received by the unit, and the user login authentication is performed.

Optionally, the receiving unit 904 is further configured to: when the acquiring unit 901 acquires an account that is input when the user logs in, the query unit 902 queries whether the account is enabled with the picture factor authentication function, and when the query unit The query result of 902 is that when the account factor authentication function is not enabled for the account, the password input by the user is received;

The authentication unit 905 is further configured to perform user login authentication according to the account acquired by the acquiring unit 901 and the password received by the receiving unit 904.

Optionally, the querying unit 902 is further configured to: after the user logs in, query whether the account factor is enabled by the account according to an instruction of the user;

The device also includes:

The enabling unit 908 is configured to enable the picture factor authentication function on the account according to an instruction of the user when the query result of the query unit 902 is that the account factor is not enabled by the account;

The display unit 903 is further configured to display prompt information of the input picture factor;

The receiving unit 904 is further configured to receive a picture factor input by the user;

The registration unit 907 is further configured to re-register the user according to the account, the password, and the picture factor, and generate interference picture information including the picture factor for the account.

The device also includes:

The canceling unit 909 is configured to cancel the picture factor authentication function on the account according to the instruction of the user when the query result of the query unit 902 is that the picture factor authentication function is enabled on the account;

The registration unit 907 is further configured to perform user registration again according to the account number and the password.

Optionally, the obtaining unit 901 is further configured to acquire an account that is input when the user retrieves the password;

The query unit 902 is further configured to query whether the account factor acquired by the obtaining unit 901 is enabled with the picture factor authentication function;

The display unit 903 is further configured to: when the query result of the query unit 902 is that the image factor authentication function is enabled for the account, display prompt information of the input picture factor;

The receiving unit 904 is further configured to receive a verification code and a picture factor input by the user;

The authentication unit 905 is further configured to perform user recovery password authentication according to the account number, the verification code, and the picture factor.

Optionally, the authentication unit 905 is specifically configured to:

Optionally, the device further includes:

The locking unit 910 is configured to lock the account when the number of consecutive authentication failures of the authentication unit 905 exceeds a preset number of times.

10 is a structural diagram of a two-factor authentication apparatus according to Embodiment 9 of the present invention. The apparatus is used to perform the two-factor authentication method provided by the embodiment of the present invention. The method is applied to the authentication in the process of retrieving a password, and the apparatus includes:

The obtaining unit 1001 is configured to obtain an account that is input when the user retrieves the password;

The query unit 1002 is configured to query whether the account obtained by the obtaining unit 1001 enables the picture factor authentication function;

The display unit 1003 is configured to display prompt information of the input picture factor when the query result of the query unit 1002 is that the picture factor authentication function is enabled for the account;

The receiving unit 1004 is configured to receive a verification code and a picture factor that are input when the user retrieves the password;

The authentication unit 1005 is configured to perform user recovery password authentication according to the account acquired by the acquiring unit 1001, the verification code received by the receiving unit 1004, and the picture factor.

Optionally, the device further includes:

The determining unit 1006 is configured to determine whether the interference picture information is updated before the receiving unit 1004 receives the verification code and the picture factor input when the user retrieves the password;

The display unit 1003 is further configured to: when the determining unit 1006 determines that the interference result is an interference picture When the information is updated, the updated interference picture information is displayed;

The receiving unit 1004 is specifically configured to receive a verification code input when the user retrieves the password and a picture factor selected from the updated interference picture information when the user retrieves the password.

Optionally, the obtaining unit 1001 is further configured to acquire an account that is input when the user registers, before acquiring an account that is input when the user retrieves the password;

The display unit 1003 is further configured to: when the instruction for enabling the picture factor authentication function on the account is acquired, displaying prompt information of the input picture factor;

The receiving unit 1004 is further configured to receive a password and a picture factor input when the user registers;

The device also includes:

The registration unit 1007 is configured to perform user registration according to the account acquired by the obtaining unit 1001, the password and the picture factor received by the receiving unit 1004, and generate interference picture information including the picture factor for the account.

Optionally, the receiving unit 1004 includes:

Optionally, the display unit 1003 is further configured to display prompt information for sharing a picture uploaded by the user;

The receiving unit 1004 is further configured to receive an instruction of the user, and share the uploaded image of the user according to the instruction, so that the interference picture information can be generated for the other account according to the picture uploaded by the user.

The receiving unit 1004 is specifically configured to receive a verification code input by the user when the password is retrieved and a picture factor drawn by the user;

The authentication unit 1005 is specifically configured to verify whether the account number acquired by the acquiring unit 1001, the verification code received by the receiving unit 1004 is correct, and the ratio of the picture factor received by the receiving unit 1004 to the receiving. The similarity of the signature pictures received by the subunits is performed by the user to retrieve the password authentication.

FIG. 11 is a structural diagram of a two-factor authentication device according to Embodiment 10 of the present invention. The device is used to perform the two-factor authentication method provided by the embodiment of the present invention. The method is applied to the authentication in the login process, and the device includes:

Memory 1101;

The processor 1102;

The memory 1101 is configured to store program instructions;

The processor 1102 is configured to perform the following operations according to the program instructions stored in the memory 1101:

Obtain the account entered when the user logs in;

Receiving the password and picture factor entered when the user logs in;

Optionally, the processor 1102 is further configured to perform the following operations according to the program instructions stored in the memory 1101:

Receiving the password and picture factor entered when the user registers;

Optionally, the processor 1102 performs the operation of receiving the password and the picture factor input when the user registers, including:

Receive the password entered when the user registers;

Randomly generating a picture list to display the picture list;

The picture selected by the user is taken as the picture factor.

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

Optionally, the performing, by the processor 1102, the performing, by using the user-uploaded picture as a picture factor, includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

Display prompt information for sharing pictures uploaded by users;

Optionally, the picture uploaded by the user is a signature picture drawn by the user;

The processor 1102 performs the operation of receiving the password and the picture factor input when the user logs in, including:

The processor 1102 performs the operation of performing user login authentication according to the account, the password, and the picture factor, including:

Display prompt information for input picture factor;

Receiving a picture factor input by the user;

Re-registering the user according to the account number and the password.

Obtain the account entered when the user retrieves the password;

Receiving a verification code and a picture factor input by the user;

Optionally, the processor 1102 performs the operation of performing user login authentication according to the account, the password, and the picture factor, including:

FIG. 12 is a structural diagram of a two-factor authentication device according to Embodiment 11 of the present invention, where the device is used to perform the two-factor authentication method provided by the embodiment of the present invention, and the method is applied to the process of retrieving a password. The card includes:

Memory 1201;

The processor 1202;

The memory 1201 is configured to store program instructions;

The processor 1202 is configured to perform the following operations according to the program instructions stored in the memory 1201:

Obtain the account entered when the user retrieves the password;

Optionally, the processor 1202 is further configured to perform the following operations according to the program instructions stored in the memory 1201:

The processor 1202 performs the operation of receiving the verification code and the picture factor input when the user retrieves the password, including:

When an instruction to enable the picture factor authentication function for the account is obtained, the input picture is displayed due to Sub-information information;

Receiving the password and picture factor entered when the user registers;

Optionally, the processor 1202 performs the operation of receiving the password and the picture factor input when the user registers, including:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.

Optionally, the performing, by the processor 1202, the performing, by using the user-uploaded picture as a picture factor, includes:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.

Display prompt information for sharing pictures uploaded by users;

A person skilled in the art should further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

It will be understood by those skilled in the art that all or part of the steps of implementing the above embodiments may be performed by a program, and the program may be stored in a computer readable storage medium, which is non-transitory ( English: non-transitory) media, such as random access memory, read-only memory, flash memory, hard disk, solid state disk, magnetic tape (English: magnetic tape), floppy disk (English: floppy disk), CD (English: optical disc) And any combination thereof.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

A two-factor authentication method, the method comprising:

Obtain the account entered when the user logs in;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving the password and picture factor entered when the user logs in;

User login authentication is performed according to the account number, the password, and the picture factor.
The method of claim 1, wherein the method further comprises: before receiving the password and the picture factor input by the user when logging in, the method further comprising:

Determine whether the interference picture information is updated;

When the judgment result is that the interference picture information is updated, the updated interference picture information is displayed;

The receiving the password and picture factor input when the user logs in, including:

The password input when the user logs in and the picture factor selected from the updated interference picture information when the user logs in are received.
The method according to claim 1 or 2, wherein before the obtaining an account entered by the user when logging in, the method further comprises:

Obtain the account entered when the user registered;

When an instruction for enabling the picture factor authentication function for the account is obtained, prompt information for inputting a picture factor is displayed;

Receiving the password and picture factor entered when the user registers;

Performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The method according to claim 3, wherein said receiving a password and a picture factor input when the user registers, comprising:

Receive the password entered when the user registers;

Randomly generating a picture list to display the picture list;

Receiving an instruction to select a picture from the picture list when the user registers;

The picture selected by the user is taken as the picture factor.
The method according to claim 3, wherein said receiving a password and a picture factor input when the user registers, comprising:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.
The method according to claim 5, wherein said using the image uploaded by the user as a picture factor comprises:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.
The method of claim 5 or claim 6, wherein the method further comprises:

Display prompt information for sharing pictures uploaded by users;

Receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to generate interference picture information for other accounts according to the picture uploaded by the user.
The method according to claim 5, wherein the picture uploaded by the user is a signature picture drawn by the user;

The receiving the password and picture factor input when the user logs in, including:

Receiving the password entered by the user when logging in and the picture factor drawn by the user;

Performing user login authentication according to the account number, the password, and the picture factor, including:

User login authentication is performed by verifying the account number, whether the password is correct, and by comparing the similarity between the picture factor and the signature picture.
The method according to claim 1, wherein the method further comprises: after obtaining an account entered by the user to log in, and querying whether the account factor is enabled by the account, the method further comprises:

When the result of the query is that the account factor authentication function is not enabled for the account, the user receives the password. code;

User login authentication is performed according to the account number and the password.
The method of claim 9 wherein the method further comprises:

After the user logs in, the user is queried according to the user's instruction whether the picture factor authentication function is enabled.

When the result of the query is that the picture factor authentication function is not enabled on the account, the picture factor authentication function is enabled on the account according to the user's instruction;

Display prompt information for input picture factor;

Receiving a picture factor input by the user;

Re-registering the user according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The method according to any one of claims 1 to 10, wherein the method further comprises:

After the user logs in, the user is queried according to the user's instruction whether the picture factor authentication function is enabled.

When the result of the query is that the picture factor authentication function is enabled for the account, the picture factor authentication function is cancelled according to the user's instruction;

Re-registering the user according to the account number and the password.
The method according to any one of claims 1 to 11, wherein the method further comprises:

Obtain the account entered when the user retrieves the password;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving a verification code and a picture factor input by the user;

The user retrieves the password authentication according to the account number, the verification code, and the picture factor.
The method of claim 1, wherein the performing user login authentication according to the account number, the password, and the picture factor comprises:

When the account number, the password, and the picture factor are all correct, confirm that the authentication is successful, and display the login authentication result that the authentication is successful;

When at least one of the account number, the password, and the picture factor is incorrect, the authentication failure is confirmed, and the login authentication result of the authentication failure is displayed.
The method according to any one of claims 1 to 13, wherein the method further comprises:

When the number of consecutive authentication failures exceeds a preset number of times, the account is locked.
A two-factor authentication method, the method comprising:

Obtain the account entered when the user retrieves the password;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving the verification code and picture factor input when the user retrieves the password;

The user retrieves the password authentication according to the account number, the verification code, and the picture factor.
The method according to claim 15, wherein before the receiving the verification code and the picture factor input by the user when the password is retrieved, the method further includes:

Determine whether the interference picture information is updated;

When the judgment result is that the interference picture information is updated, the updated interference picture information is displayed;

The verification code and the picture factor input when the user receives the password, including:

The verification code input when the user retrieves the password and the picture factor selected from the updated interference picture information when the user retrieves the password.
The method according to claim 15 or 16, wherein the method further comprises: before the obtaining an account entered by the user when the password is retrieved, the method further comprises:

Obtain the account entered when the user registered;

When an instruction for enabling the picture factor authentication function for the account is obtained, prompt information for inputting a picture factor is displayed;

Receiving the password and picture factor entered when the user registers;

Performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The method according to claim 17, wherein said receiving a password and a picture factor input when the user registers, comprising:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.
The method according to claim 18, wherein said using the image uploaded by the user as a picture factor comprises:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.
The method of claim 18 or 19, wherein the method further comprises:

Display prompt information for sharing pictures uploaded by users;

Receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to generate interference picture information for other accounts according to the picture uploaded by the user.
The method according to claim 18, wherein the user-uploaded picture is a signature picture drawn by a user;

The verification code and the picture factor input when the user receives the password, including:

Receiving the verification code input by the user when the password is retrieved and the picture factor drawn by the user;

Performing user password recovery authentication according to the account number, the verification code, and the picture factor, including:

The user retrieves the password authentication by verifying the account number, whether the verification code is correct, and by comparing the similarity between the picture factor and the signature picture.
A two-factor authentication device, characterized in that the device comprises:

The obtaining unit is configured to obtain an account entered when the user logs in;

a query unit, configured to query whether an account factor obtained by the obtaining unit is enabled with a picture factor authentication function;

a display unit, configured to display prompt information of the input picture factor when the query result of the query unit is that the picture factor authentication function is enabled for the account;

a receiving unit, configured to receive a password and a picture factor input when the user logs in;

The authentication unit is configured to perform user login authentication according to the account acquired by the acquiring unit, the password received by the receiving unit, and a picture factor.
The device of claim 22, wherein the device further comprises:

a determining unit, configured to determine whether the interference picture information is updated before the receiving unit receives the password and the picture factor input when the user logs in;

The display unit is further configured to display the updated interference picture information when the judgment result of the determining unit is that the interference picture information is updated;

The receiving unit is specifically configured to receive a password input when the user logs in and a picture factor selected from the updated interference picture information when the user logs in.
A device according to claim 22 or 23, wherein:

The obtaining unit is further configured to acquire an account that is input when the user registers, before acquiring an account that is input when the user logs in;

The display unit is further configured to display prompt information of the input picture factor when an instruction for enabling the picture factor authentication function for the account is obtained;

The receiving unit is further configured to receive a password and a picture factor input when the user registers;

The device also includes:

a registration unit, configured to perform user registration according to the account acquired by the acquiring unit, the password received by the receiving unit, and a picture factor, and generate interference picture information including the picture factor for the account.
The apparatus according to claim 24, wherein said receiving unit comprises:

a receiving subunit, configured to receive a password input when the user registers;

a display subunit, configured to randomly generate a picture list, and display the picture list;

The receiving subunit is further configured to receive an instruction for selecting a picture from the picture list when the user registers;

A picture factor confirmation subunit is configured to use a picture selected by the user by the receiving subunit as a picture factor.
The apparatus according to claim 24, wherein said receiving unit comprises:

a receiving subunit, configured to receive a password input when the user registers;

The receiving subunit is further configured to receive an instruction that a user uploads a picture;

The picture factor confirmation subunit is configured to use the user uploaded picture received by the receiving subunit as a picture factor.
The device according to claim 26, wherein the picture factor confirmation sub-unit is specifically configured to trim the picture uploaded by the user according to a unified specification; and the clipped picture is used as a picture factor.
The device of claim 26 or 27, wherein:

The display unit is further configured to display prompt information for sharing a picture uploaded by a user;

The receiving unit is further configured to receive an instruction of the user, and share the uploaded image of the user according to the instruction, so that the interference picture information can be generated for the other account according to the picture uploaded by the user.
The device according to claim 26, wherein the user-uploaded picture received by the receiving sub-unit is a signature picture drawn by a user;

The receiving unit is specifically configured to receive a password input by the user when logging in and a picture factor drawn by the user;

The authentication unit is specifically configured to verify, by using the account acquired by the acquiring unit, whether the password received by the receiving unit is correct, and by comparing the picture factor and the received by the receiving unit. The similarity of the signature pictures received by the receiving subunit is described, and user login authentication is performed.
The device of claim 22 wherein:

The receiving unit is further configured to: when the obtaining unit acquires an account that is input when the user logs in, the query unit queries whether the image factor authentication function is enabled in the account, and the query result of the query unit is the account When the picture factor authentication function is not enabled, the password input by the user is received;

The authentication unit is further configured to perform user login authentication according to the account acquired by the acquiring unit and the password received by the receiving unit.
The device of claim 30 wherein:

The query unit is further configured to: after the user logs in, query whether the account factor authentication function is enabled by the account according to an instruction of the user;

The device also includes:

An enabling unit, configured to enable a picture factor authentication function on the account according to a user instruction when the query result of the query unit is that the account factor is not enabled by the account;

The display unit is further configured to display prompt information of an input picture factor;

The receiving unit is further configured to receive a picture factor input by the user;

The registration unit is further configured to re-register the user according to the account, the password, and the picture factor, and generate interference picture information including the picture factor for the account.
A device according to any one of claims 22 to 31, wherein:

The query unit is further configured to: after the user logs in, query whether the account factor authentication function is enabled by the account according to an instruction of the user;

The device also includes:

a canceling unit, configured to cancel a picture factor authentication function on the account according to a user instruction when the query result of the query unit is that the picture factor authentication function is enabled on the account;

The registration unit is further configured to perform user registration again according to the account number and the password.
A device according to any one of claims 22 to 32, wherein:

The obtaining unit is further configured to acquire an account that is input when the user retrieves the password;

The query unit is further configured to query whether an account factor obtained by the obtaining unit is enabled with a picture factor authentication function;

The display unit is further configured to: when the query result of the query unit is that the image factor authentication function is enabled for the account, display prompt information of the input picture factor;

The receiving unit is further configured to receive a verification code and a picture factor input by the user;

The authentication unit is further configured to perform user recovery password authentication according to the account number, the verification code, and the picture factor.
The device according to claim 22, wherein the authentication unit is specifically configured to:

When the account number, the password, and the picture factor are all correct, confirm that the authentication is successful, and display the login authentication result that the authentication is successful;

When at least one of the account number, the password, and the picture factor is incorrect, the authentication failure is confirmed, and the login authentication result of the authentication failure is displayed.
The device according to any one of claims 22 to 34, wherein the device further comprises:

The locking unit is configured to lock the account when the number of consecutive authentication failures of the authentication unit exceeds a preset number of times.
A two-factor authentication device, characterized in that the device comprises:

The obtaining unit is configured to obtain an account entered when the user retrieves the password;

a query unit, configured to query whether an account factor obtained by the obtaining unit is enabled with a picture factor authentication function;

a display unit, configured to display prompt information of the input picture factor when the query result of the query unit is that the picture factor authentication function is enabled for the account;

a receiving unit, configured to receive a verification code and a picture factor input when the user retrieves the password;

The authentication unit is configured to perform user recovery password authentication according to the account acquired by the acquiring unit, the verification code received by the receiving unit, and the picture factor.
The device of claim 36, wherein the device further comprises:

a determining unit, configured to determine whether the interference picture information is updated before the receiving unit receives the verification code and the picture factor input when the user retrieves the password;

The display unit is further configured to display the updated interference picture information when the judgment result of the determining unit is that the interference picture information is updated;

The receiving unit is specifically configured to receive a verification code input when the user retrieves the password and a picture factor selected from the updated interference picture information when the user retrieves the password.
The device of claim 36 or 37, wherein:

The obtaining unit is further configured to acquire an account that is input when the user registers, before acquiring an account that is input when the user retrieves the password;

The display unit is further configured to display prompt information of the input picture factor when an instruction for enabling the picture factor authentication function for the account is obtained;

The receiving unit is further configured to receive a password and a picture factor input when the user registers;

The device also includes:

a registration unit, configured to perform user registration according to the account acquired by the acquiring unit, the password received by the receiving unit, and a picture factor, and generate interference picture information including the picture factor for the account.
The apparatus according to claim 38, wherein said receiving unit comprises:

a receiving subunit, configured to receive a password input when the user registers;

The receiving subunit is further configured to receive an instruction that a user uploads a picture;

The picture factor confirmation sub-unit is used to use the picture uploaded by the user as a picture factor.
The device according to claim 39, wherein the picture factor confirmation sub-unit is specifically configured to trim the picture uploaded by the user according to a unified specification; and the clipped picture is used as a picture factor.
A device according to claim 39 or 40, wherein:

The display unit is further configured to display prompt information for sharing a picture uploaded by a user;

The receiving unit is further configured to receive an instruction of a user, and upload the user according to the instruction The picture is shared, so that the interference picture information can be generated for other accounts according to the picture uploaded by the user.
The device according to claim 39, wherein the user-uploaded picture received by the receiving sub-unit is a signature picture drawn by a user;

The receiving unit is specifically configured to receive a verification code input by the user when the password is retrieved and a picture factor drawn by the user;

The authentication unit is specifically configured to verify, by using the account acquired by the acquiring unit, whether the verification code received by the receiving unit is correct, and by comparing the picture factor received by the receiving unit with the receiving subunit. The similarity of the signature image is used to retrieve the password for the user.
A two-factor authentication device, the device comprising:

Memory

processor;

The memory is configured to store program instructions;

The processor is configured to perform the following operations according to program instructions stored in the memory:

Obtain the account entered when the user logs in;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving the password and picture factor entered when the user logs in;

User login authentication is performed according to the account number, the password, and the picture factor.
The device according to claim 43, wherein said processor is further configured to perform the following operations according to program instructions stored in said memory:

Determining whether the interference picture information is updated before receiving the password and the picture factor input when the user logs in;

When the judgment result is that the interference picture information is updated, the updated interference picture information is displayed;

The processor performs an operation of receiving a password and a picture factor input when the user logs in, including:

The password input when the user logs in and the picture factor selected from the updated interference picture information when the user logs in are received.
The device according to claim 43 or 44, wherein the processor is further configured to perform the following operations according to program instructions stored in the memory:

Obtaining an account entered when the user registers, before obtaining the account entered when the user logs in;

When an instruction for enabling the picture factor authentication function for the account is obtained, prompt information for inputting a picture factor is displayed;

Receiving the password and picture factor entered when the user registers;

Performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The device according to claim 45, wherein the processor performs the operation of receiving a password and a picture factor input when the user registers, including:

Receive the password entered when the user registers;

Randomly generating a picture list to display the picture list;

Receiving an instruction to select a picture from the picture list when the user registers;

The picture selected by the user is taken as the picture factor.
The device according to claim 45, wherein the processor performs the operation of receiving a password and a picture factor input when the user registers, including:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.
The device according to claim 47, wherein the processor performs the operation of using the image uploaded by the user as a picture factor, comprising:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.
A device according to claim 47 or 48, wherein said processor is further The following operations are performed according to the program instructions stored in the memory:

Display prompt information for sharing pictures uploaded by users;

Receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to generate interference picture information for other accounts according to the picture uploaded by the user.
The device according to claim 47, wherein the picture uploaded by the user is a signature picture drawn by the user;

The processor performs the operation of receiving the password and the picture factor input when the user logs in, including:

Receiving the password entered by the user when logging in and the picture factor drawn by the user;

The processor performs the operation of performing user login authentication according to the account, the password, and the picture factor, including:

User login authentication is performed by verifying the account number, whether the password is correct, and by comparing the similarity between the picture factor and the signature picture.
The device according to claim 43, wherein said processor is further configured to perform the following operations according to program instructions stored in said memory:

After the user account is logged in to obtain the image factor authentication function, when the query result is that the account factor authentication function is not enabled, the password input by the user is received;

User login authentication is performed according to the account number and the password.
The device according to claim 51, wherein said processor is further configured to perform the following operations according to program instructions stored in said memory:

After the user logs in, the user is queried according to the user's instruction whether the picture factor authentication function is enabled.

When the result of the query is that the picture factor authentication function is not enabled on the account, the picture factor authentication function is enabled on the account according to the user's instruction;

Display prompt information for input picture factor;

Receiving a picture factor input by the user;

Re-registering the user according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The device according to any one of claims 43 to 52, wherein the processor is further configured to perform the following operations according to program instructions stored in the memory:

After the user logs in, the user is queried according to the user's instruction whether the picture factor authentication function is enabled.

When the result of the query is that the picture factor authentication function is enabled for the account, the picture factor authentication function is cancelled according to the user's instruction;

Re-registering the user according to the account number and the password.
The device according to any one of claims 43 to 53, wherein the processor is further configured to perform the following operations according to program instructions stored in the memory:

Obtain the account entered when the user retrieves the password;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving a verification code and a picture factor input by the user;

The user retrieves the password authentication according to the account number, the verification code, and the picture factor.
The device according to claim 43, wherein the processor performs the operation of performing user login authentication according to the account, the password, and the picture factor, including:

When the account number, the password, and the picture factor are all correct, confirm that the authentication is successful, and display the login authentication result that the authentication is successful;

When at least one of the account number, the password, and the picture factor is incorrect, the authentication failure is confirmed, and the login authentication result of the authentication failure is displayed.
The device according to any one of claims 43 to 55, wherein the processor is further configured to perform the following operations according to program instructions stored in the memory:

When the number of consecutive authentication failures exceeds a preset number of times, the account is locked.
A two-factor authentication device, the device comprising:

Memory

processor;

The memory is configured to store program instructions;

The processor is configured to perform the following operations according to program instructions stored in the memory:

Obtain the account entered when the user retrieves the password;

Query whether the picture factor authentication function is enabled in the account;

When the query result is that the picture factor authentication function is enabled for the account, the prompt information of the input picture factor is displayed;

Receiving the verification code and picture factor input when the user retrieves the password;

The user retrieves the password authentication according to the account number, the verification code, and the picture factor.
The device according to claim 57, wherein said processor is further configured to perform the following operations according to program instructions stored in said memory:

Determining whether the interference picture information is updated before the verification code and the picture factor input when the user retrieves the password is received;

When the judgment result is that the interference picture information is updated, the updated interference picture information is displayed;

The processor performs the operation of receiving the verification code and the picture factor input when the user retrieves the password, including:

The verification code input when the user retrieves the password and the picture factor selected from the updated interference picture information when the user retrieves the password.
The device according to claim 57 or 58, wherein the processor is further configured to perform the following operations according to the program instructions stored in the memory:

Obtaining an account entered when the user registers, before obtaining the account entered when the user retrieves the password;

When an instruction to enable the picture factor authentication function for the account is obtained, the input picture is displayed due to Sub-information information;

Receiving the password and picture factor entered when the user registers;

Performing user registration according to the account number, the password, and the picture factor, and generating interference picture information including the picture factor for the account.
The device according to claim 59, wherein the processor performs the operation of receiving a password and a picture factor input when the user registers, including:

Receive the password entered when the user registers;

Receiving an instruction for a user to upload a picture;

Use the user-uploaded image as a picture factor.
The device according to claim 60, wherein the processor performs the operation of using the image uploaded by the user as a picture factor, including:

The user uploaded images are tailored according to uniform specifications;

Use the cropped image as the image factor.
The device according to claim 60 or claim 61, wherein the processor is further configured to perform the following operations according to program instructions stored in the memory:

Display prompt information for sharing pictures uploaded by users;

Receiving an instruction of the user, sharing the picture uploaded by the user according to the instruction, so as to be able to generate interference picture information for other accounts according to the picture uploaded by the user.
The device according to claim 60, wherein the picture uploaded by the user is a signature picture drawn by a user;

The processor performs the operation of receiving the verification code and the picture factor input when the user retrieves the password, including:

Receiving the verification code input by the user when the password is retrieved and the picture factor drawn by the user;

Performing user password recovery authentication according to the account number, the verification code, and the picture factor, including:

By verifying the account number, whether the verification code is correct, and by comparing the pictures due to The similarity between the child and the signature picture is performed, and the user retrieves the password authentication.