WO2019134234A1

WO2019134234A1 - Rooting-prevention log-in method, device, terminal apparatus, and storage medium

Info

Publication number: WO2019134234A1
Application number: PCT/CN2018/077313
Authority: WO
Inventors: 辜坤
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-01-08
Filing date: 2018-02-27
Publication date: 2019-07-11
Also published as: CN108462687B; CN108462687A

Abstract

Disclosed in the present application are a rooting-prevention log-in method, a device, a terminal apparatus, and a storage medium, pertaining to the technical field of network security. The rooting-prevention log-in method comprises: acquiring a log-in authentication request sent by a client, the log-in authentication request comprising a terminal ID; performing a search in a database on the basis of the terminal ID, and determining whether the database comprises an authentication serial number corresponding to the terminal ID; if so, determining, on the basis of serial number information in the authentication serial number, whether the authentication serial number is valid; if so, updating the serial number information of the authentication serial number, generating a graphic authentication code corresponding to the authentication serial number, and sending the graphic authentication code to the client corresponding to the terminal ID. A server in the method only responds to a client having a valid authentication serial number, thereby significantly reducing the risk of the server being hacked by means of multiple rooting operations.

Description

Anti-brush login method, device, terminal device and storage medium

This patent application is based on the Chinese Patent Application No. 201810014424.1 filed on Jan. 08, 2018, entitled "Method, Apparatus, Terminal Equipment and Storage Medium for Anti-Brushing," and requires priority.

Technical field

The present application relates to the field of network security, and in particular, to a method, an apparatus, a terminal device, and a storage medium for preventing a brush login.

Background technique

The C/S (Client/Server, Client and Server) structure is a common Internet architecture. By fully utilizing the advantages of the hardware environments at both ends, the tasks are reasonably distributed to the client and server. In order to maintain the security of the server, the server in the C/S structure needs to authenticate the client before performing the task. The graphic verification code is a commonly used authentication method. At present, the graphic authentication code authentication method does not have an anti-brush mechanism, and the security is not high.

Summary of the invention

The embodiment of the present invention provides a method, a device, a terminal device, and a storage medium for preventing the brush registration, so as to solve the problem that the current graphic verification code authentication method does not have an anti-brush mechanism and the security is not high.

In a first aspect, the embodiment of the present application provides a method for preventing a brush login, including:

Obtaining a login verification request sent by the client, where the login verification request includes a terminal ID;

Querying the database based on the terminal ID, determining whether there is a verification serial number corresponding to the terminal ID in the database;

If there is a verification serial number, it is determined whether the verification serial number is valid based on the serial number information in the verification serial number;

If the verification serial number is valid, the serial number information of the verification serial number is updated, a graphic verification code corresponding to the verification serial number is generated, and the graphic verification code is sent to the client corresponding to the terminal ID.

In a second aspect, an embodiment of the present application provides an apparatus for preventing a brush login, including:

Obtaining a login verification request module, configured to obtain a login verification request sent by the client, where the login verification request includes a terminal ID;

Determining a verification serial number module, configured to query a database based on the terminal ID, and determine whether a verification serial number corresponding to the terminal ID exists in the database;

Determining a serial number valid module, if there is a verification serial number, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

Sending a graphic verification code module, if the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the client corresponding to the terminal ID end.

A third aspect of the present application provides a terminal device including a memory, a processor, and computer readable instructions stored in the memory and executable on the processor, the computer readable instructions being implemented by a processor The following steps:

Determining, according to the terminal ID, a database, whether a verification sequence number corresponding to the terminal ID exists in the database;

If the verification serial number exists, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

If the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the client corresponding to the terminal ID end.

A fourth aspect of the present application provides a computer readable storage medium storing computer readable instructions that, when executed by a processor, implement the following steps:

The method, device, terminal device and storage medium of the anti-brushing login provided by the embodiment of the present application are implemented by determining whether the verification serial number corresponding to the terminal ID of the client is valid. If the verification serial number exists in the database, and when the verification serial number is valid, a graphic verification code corresponding to the verification serial number is generated, and the graphic verification code is sent to the client corresponding to the terminal ID. The server only responds to the client that validates the serial number, which greatly reduces the risk of hacking the server after multiple flashes.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings used in the description of the embodiments of the present application will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present application. Other drawings may also be obtained from those of ordinary skill in the art based on these drawings without the inventive labor.

1 is a flow chart of a method for preventing an anti-brushing in the first embodiment of the present application.

FIG. 2 is another specific flowchart of a method for preventing anti-brushing in Embodiment 1 of the present application.

FIG. 3 is another specific flowchart of a method for preventing anti-brushing in Embodiment 1 of the present application.

4 is a schematic block diagram of an apparatus for preventing an anti-brushing in the second embodiment of the present application.

FIG. 5 is a schematic diagram of a terminal device in Embodiment 4 of the present application.

Detailed ways

The technical solutions in the embodiments of the present application are clearly and completely described in the following with reference to the drawings in the embodiments of the present application. It is obvious that the described embodiments are a part of the embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

Example 1

Fig. 1 is a flow chart showing a method of anti-brush registration in the embodiment. This embodiment is applied to the Internet architecture of the C/S (Client/Server, client and server) structure, wherein the execution entity of the solution is a server configured with a database. As shown in FIG. 1, the method for preventing the brush login includes the following steps:

S10. Obtain a login verification request sent by the client, where the login verification request includes a terminal ID.

Specifically, the client in this embodiment includes, but is not limited to, a smart phone, a computer, a PAD, and the like, which can be used by the user to input information and interact with the server.

The login verification request is a request for the user to establish a secure connection after the user enters the authentication information (the authentication information can be a user ID and a user password) from the client.

The terminal ID is an identifier for identifying the client that sent the login verification request. The server may determine, according to the terminal ID, an IP address for identifying the client or a login MAC address or the like.

In this embodiment, the server is connected to the server through the login verification request sent by the client, and the security of the client can be confirmed before the server establishes a secure connection with the client.

S20. Query the database based on the terminal ID, and determine whether there is a verification serial number corresponding to the terminal ID in the database.

The verification serial number is a unique number assigned by the server to the terminal ID corresponding to the client based on the first login verification request of any client. The server can subsequently find the verification serial number corresponding to the client from the database based on the terminal ID of the client.

In this embodiment, based on the terminal ID of the client, the verification serial number associated with the terminal ID is stored in the database, and the verification serial number of the terminal ID can be quickly matched in the server storing the massive data, and the client corresponding to the terminal ID is obtained. Serial number information for secure verification based on the serial number information.

S30. If the verification sequence number exists, it is determined whether the verification sequence number is valid based on the serial number information in the verification sequence number.

Specifically, the serial number information is a login status of the terminal ID associated with the verification serial number, such as the number of logins of the verification serial number, the verification period, and the effective number of times. The verification period is the time that the server sets the number of logins for the client according to the actual situation; the effective number is the maximum number of logins in the verification period set by the server according to the actual situation; the number of logins is the login verification request sent by the client. frequency.

Further, if the current time of the system is within the verification period, and the number of logins corresponding to the terminal ID is within the effective number of times, the verification sequence number is valid, and vice versa. That is, when determining whether the verification sequence number is valid based on the serial number information, it is necessary to determine whether the current time of the system is within the verification period of the serial number information, and determine whether the number of logins corresponding to the terminal ID is within the effective number of serial number information, if the current system If the time is within the verification period, and the number of logins corresponding to the terminal ID is within the effective number, the verification serial number is valid; if the current time of the system is not within the verification period or the number of logins is not within the effective number, the verification serial number is invalid.

In this embodiment, the serial number information of the client can be quickly obtained through the serial number information, so as to determine the validity of the verification serial number based on the serial number information, and provide a corresponding feedback action.

Each time the server obtains the login verification information, the serial number information of the verification sequence number corresponding to the terminal ID is updated to change the serial number information in real time. In this embodiment, the temporary database (such as REDIS) storage sequence may be used. No. Information. REDIS is an open source, log-based, Key-Value database written in ANSI C, supporting the network, and can be persisted based on memory. Quick query can be achieved by using REDIS to store serial number information.

For example, the verification period can be set to 2 minutes and the effective number can be set to 20 times. That is, if the client does not log in more than 20 times within 2 minutes, the client's verification serial number is still valid. Understandably, if the client has 20 logins in 2 minutes, the client's verification serial number is invalid.

In this embodiment, by limiting the number of logins within the limited verification period not exceeding the effective number, it can be determined that the verification sequence number is valid, and the authenticity and accuracy of confirming whether the verification sequence number is valid is improved.

S40. If the verification serial number is valid, update the serial number information of the verification serial number, generate a graphic verification code corresponding to the verification serial number, and send the graphic verification code to the client corresponding to the terminal ID.

Specifically, the verification serial number is valid, and the serial number information associated with the verification serial number meets a preset requirement, including but not limited to: verifying the number of logins of the serial number within the valid number of times during the verification period of the verification serial number, and the like.

The server receives the login verification request, and determines that the verification sequence number is valid based on the obtained sequence number information associated with the terminal ID, and then needs to update the dynamic content in the sequence number information, for example, the verification sequence. Number of logins. Specifically, when the server receives a new login verification request, and when the verification serial number is valid, the number of logins of the verification serial number is incremented by 1, and so on.

In this embodiment, the login verification request of the client is limited, and only the graphic verification code is sent to the client whose verification serial number is valid, thereby effectively protecting the server from the malicious flashing initiated by the client.

The method for preventing the brush login provided in this embodiment is implemented by determining whether the verification sequence number corresponding to the terminal ID of the client is valid. If the verification serial number exists in the database, and when the verification serial number is valid, a graphic verification code corresponding to the verification serial number is generated, and the graphic verification code is sent to the client corresponding to the terminal ID. The server only responds to the client that validates the serial number. On the one hand, it greatly reduces the risk of hacking the server through multiple flashes. On the other hand, the access is restricted by the authentication serial number associated with the terminal ID. Increased user experience by restricting access to the server through IP.

In a specific embodiment, as shown in FIG. 1, after the step S30, that is, after the step of determining whether the verification serial number is valid based on the serial number information in the verification serial number, the method for preventing the login is further included:

S50. If the verification serial number is invalid, the verification serial number in the database is cleared, the login status of the terminal ID is set to the locked state in the database, and the login failure information is sent to the client.

Specifically, if the verification sequence number is invalid, that is, the sequence number information associated with the current verification sequence number does not meet the preset requirement. It can be understood that when the number of logins of the verification serial number exceeds the effective number within the verification period of the verification serial number, the verification serial number is invalid.

During the verification period of the verification serial number, the number of logins of the verification serial number exceeds the effective number, indicating that the client logs in to the server multiple times during the verification period, and there may be factors that the client is not secure. At this time, set the login status of the terminal ID to the locked state in the database, and set the lock period of the locked state to a preset time, such as 2 hours or 1 day, lock the client, and reject the login verification initiated by the client. request. At the same time of locking, the verification serial number corresponding to the client is also deleted in the database, which alleviates redundant data of the database, and facilitates the client to log in to the server again after unlocking. In this embodiment, by locking the client whose verification serial number is invalid, the server can be effectively protected from malicious brushing.

The login failure information is the notification information sent by the server to the client to notify the client of the login failure and to lock the information of the client during the lock period. The server sends the login failure information to the client to remind the client to re-access the server after the lock period.

In a specific embodiment, as shown in FIG. 1, before the step S20, that is, before the step of determining whether there is a verification serial number corresponding to the terminal ID in the database, the method for preventing the login further includes:

S60. Determine whether the login status corresponding to the terminal ID is a locked state.

Specifically, there are various situations in the client that logs in to the server: the first login, the login when the verification serial number is valid, the login when the verification serial number is invalid, the login during the locked period, the login after unlocking, etc., in which case the client is When logging in during lockout, the login status corresponding to the terminal ID is locked. After receiving the login verification request sent by the client, the server needs to quickly distinguish the login status of the client in order to respond to the response.

In this embodiment, the terminal ID of the client first determines whether the client is in the locked state, and can quickly respond to the login verification request sent by the client.

S70. If the login status is locked, the login failure information is sent to the client.

Specifically, the login failure information is notification information sent by the server to the client, to notify the client that the login fails, and the information that the client locks during the locking period. The server sends the login failure information to the client, which is used to remind the client to log in to the server again after the lock period.

In this embodiment, the user experience is improved by sending a login failure message to the client and giving the client a corresponding reminder.

S80. If the login status is not the locked state, the step of determining whether there is a verification sequence number corresponding to the terminal ID in the database is performed.

Specifically, if the login status is not the locked state, the client may be initially determined to be a secure client, and the subsequent verification of the verification serial number of the client may be performed. The non-locked state here includes, but is not limited to, the first login, the login when the verification serial number is valid, the login after the verification serial number is invalid, and the login after the unlock.

In this embodiment, it is first determined that the client is not locked, that is, not locked, and it can be confirmed that the client is temporarily a secure client, and the subsequent verification step (ie, the step after step S20) can be quickly performed, thereby improving the verification efficiency.

In a specific embodiment, as shown in FIG. 1, after the step S20, that is, after determining whether there is a verification sequence number corresponding to the terminal ID in the database, the method for preventing the login further includes:

S90. If the verification sequence number does not exist, assign a corresponding verification sequence number to the terminal ID, initialize the serial number information of the verification serial number, generate a graphic verification code associated with the verification serial number, and send the graphic verification code to the terminal ID. Corresponding client.

Specifically, the terminal ID of the client does not have a corresponding verification sequence number, indicating that the serial number information of the terminal ID does not exist in the database, and the server needs to establish a new record for the terminal ID for subsequent identification of the client. Further, a verification sequence number corresponding thereto is established based on the terminal ID, and corresponding sequence number information is established based on the verification sequence number, so as to establish complete record information in the server for the client. In this embodiment, the serial number information of the initialization verification sequence number refers to setting the number of logins in the serial number information to 1, so that the last time the login verification request sent by the same client is received, the last record can be recorded. The number of logins is incremented by one to verify that the verification serial number is valid based on its number of logins.

It can be understood that when the verification serial number is assigned to the client that does not have the verification serial number, it indicates that the client is the first login server, and the client can be temporarily determined to be a secure verification code.

In this embodiment, by assigning a verification serial number to the client that logs in to the server for the first time, and establishing related serial number information, the server can respond according to the serial number information of the client when the client applies for logging in to the server.

In a specific embodiment, as shown in FIG. 2, the method for preventing anti-brushing according to the embodiment further includes: the serial number information includes a verification period and an effective number of times.

S110. Acquire a timing update instruction, where the timing update instruction includes a program ID.

Specifically, the timing update instruction is an instruction for initiating an effective number of times in updating the sequence number information. The program ID is a unique number used to identify each instruction, and the server can call different program instructions by the program ID.

S120. When the current time of the system ends for each verification period, an update program corresponding to the program ID is triggered, and the effective number of times of updating the serial number information is zero.

Further, at the end of each verification period, the verification sequence number corresponding to the verification period still exists, and it is proved that the verification sequence number is still valid, that is, the number of logins of the client is within the effective number of times. Because the serial number corresponding to the client is valid during the verification period, the client can be initially confirmed as a secure client, and the client can be assigned the next verification period. It can be understood that, at this time, the effective number of times corresponding to the verification sequence number is zero, that is, the verification sequence number is continued for one verification period.

For example, the verification period can be set to 2 minutes and the effective number can be set to 20 times. That is, if the number of logins by the client within 2 minutes does not exceed 20 times, the client may initially determine that the client is a secure client, and the verification serial number may be reserved and corresponding to the next verification period. It can be understood that if the verification serial number corresponding to the client is within the effective number of times in the first 2 minutes, the maximum number of logins of the verification serial number may be 19 times in the second 2 minutes. At this time, it is necessary to clear the valid number of times corresponding to the verification serial number at the end of the first 2-minute verification period to re-count.

In this embodiment, the server automatically continues the next verification period for the client whose verification serial number is valid, and ensures the security of the server, and is also beneficial to improving the customer experience.

In a specific implementation, as shown in FIG. 3, after the step of sending the graphic verification code to the client corresponding to the terminal ID, the method for preventing the login is further included:

S130. Obtain an access verification request sent by the client, where the access verification request includes a terminal ID and a current verification code.

Specifically, the access verification request is a request for the server to verify the current verification code by sending a current verification code to the server based on the graphic verification code sent by the server.

In this embodiment, the server verifies the current verification code sent by the client, and is used to further determine the security of the client, so as to prevent the server from being maliciously initiated by the client.

S140. Acquire a corresponding graphic verification code based on the terminal ID.

Specifically, each time the client corresponding to the terminal ID sends an access verification request to the server, the server obtains a graphic verification code stored in the database based on the terminal ID query, so as to match the current verification code input by the client based on the graphic verification code. verification. It can be understood that after the server sends the graphic verification code to the client corresponding to the terminal ID, the graphic verification code needs to be stored in the database, so as to perform security verification based on the graphic verification code.

In this embodiment, by obtaining the graphic verification code corresponding to the terminal ID stored by the server, the security state of the client can be determined, which is simple and effective.

S150. If the current verification code matches the graphic verification code, the verification request is accessed.

In this embodiment, the client that matches the current verification code sent with the graphic verification code in the server can quickly access the verification request, which simplifies the verification process and ensures the security of the server.

S160. If the current verification code does not match the graphic verification code, perform a step of determining whether the verification serial number is valid based on the serial number information in the verification serial number.

Specifically, if the current verification code does not match the graphic verification code, the server needs to confirm whether to send the graphic verification code to the client for verification, that is, the database needs to be queried based on the terminal ID in the access verification request, and the verification corresponding to the terminal ID is obtained. The serial number, and then performing the step of judging whether the verification serial number is valid based on the serial number information in the verification serial number (ie, step S30).

Further, determining, by the verification sequence number corresponding to the terminal ID, based on the serial number information recorded by the verification serial number (such as the number of logins of the verification serial number, the verification period, the effective number of times, etc.), whether the verification serial number is valid, and if valid, The serial number information corresponding to the terminal ID needs to be updated, and a graphic verification code is sent to the client to remind the client to re-enter the access verification request.

The serial number information can be used to quickly know the serial number information of the client, determine the validity of the verification serial number, and give corresponding feedback actions.

In this embodiment, by obtaining the access verification request with the current verification code sent by the client, the security of the matching client may be firstly determined through the graphic verification code and the current verification, which is simple and effective; when the graphic verification code fails to pass the verification, The serial number information corresponding to the terminal ID is determined to perform a feedback action.

It should be understood that the size of the sequence of the steps in the above embodiments does not mean that the order of execution is performed. The order of execution of each process should be determined by its function and internal logic, and should not be construed as limiting the implementation process of the embodiments of the present application.

Example 2

Fig. 5 is a block diagram showing the operation of the apparatus for preventing the brush registration in one-to-one correspondence with the method of the anti-friction registration in the first embodiment. As shown in FIG. 5, the device for preventing the brush registration includes a login verification request module 10, a determination verification serial number module 20, a determination serial number effective module 30, and a transmission graphic verification code module 40. The steps of obtaining the login verification request module 10, determining the verification serial number module 20, determining the serial number validating module 30, and transmitting the graphic verification code module 40 correspond to the steps corresponding to the method for preventing the login in the embodiment, in order to avoid As described above, this embodiment will not be described in detail.

The login verification request module 10 is configured to obtain a login verification request sent by the client, where the login verification request includes a terminal ID.

The verification verification serial number module 20 is configured to query the database based on the terminal ID to determine whether there is a verification serial number corresponding to the terminal ID in the database.

The determining serial number validating module 30 is configured to determine, according to the serial number information in the verification serial number, whether the verification serial number is valid if the verification serial number exists.

Sending a graphic verification code module 40, if the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the terminal ID corresponding to the terminal Client.

Preferably, as shown in FIG. 5, the device for preventing the brush registration further includes a clear verification serial number module 50. The implementation function of the clearing verification serial number module 50 corresponds to the steps corresponding to the method for preventing the anti-sparking in the embodiment. To avoid redundancy, the present embodiment will not be described in detail. The verification verification serial number module 50 is configured to clear the verification serial number in the database if the verification serial number is invalid, set the login status of the terminal ID to the locked state in the database, and send the login failure information to the client.

Preferably, as shown in FIG. 5, the device for preventing the login of the brush further includes a determination lock status module 60, a send login failure information module 70, and an execution verification serial number module 80. The steps of determining the lock status module 60, the sending login failure information module 70, and the execution verification serial number module 80 are in one-to-one correspondence with the steps corresponding to the method for preventing the login in the embodiment. To avoid redundancy, the present embodiment does not. Detailed.

The lock status module 60 is configured to determine whether the login status corresponding to the terminal ID is a lock status.

The sending login failure information module 70 is configured to send the login failure information to the client if the login status is the locked state.

The verification verification serial number module 80 is configured to perform a step of determining whether there is a verification serial number corresponding to the terminal ID in the database if the login state is not the locked state.

Preferably, as shown in FIG. 5, the device for preventing the login of the brush further includes a distribution verification serial number module 90. The implementation function of the distribution verification serial number module 90 corresponds to the steps corresponding to the method for preventing the login in the embodiment. To avoid redundancy, the present embodiment will not be described in detail.

The distribution verification serial number module 90 is configured to assign a corresponding verification serial number to the terminal ID if the verification serial number does not exist, initialize the serial number information of the verification serial number, generate a graphic verification code associated with the verification serial number, and display the graphic The verification code is sent to the client corresponding to the terminal ID.

Preferably, the determining serial number validating module 30 is configured to verify that the serial number is valid if the current time of the system is within the verification period and the number of times the login verification request corresponding to the terminal ID is within the effective number, and vice versa.

Preferably, as shown in FIG. 5, the device for preventing the login of the brush further includes an acquisition update instruction module 110 and a departure update program module 120. The implementation functions of the acquisition update command module 110 and the departure update program module 120 are in one-to-one correspondence with the steps S110 and S120 corresponding to the method for the anti-scratch registration in the first embodiment. To avoid redundancy, the present embodiment will not be described in detail.

The update instruction module 110 is configured to acquire a timing update instruction, where the timing update instruction includes a program ID and a trigger time.

The departure update program module 120 is configured to trigger an update program corresponding to the program ID when the current time of the system is the trigger time, and clear the verification sequence number that the current time of the system is not in the verification period.

Preferably, as shown in FIG. 5, the anti-scratch login device further includes an acquisition access request module 130, an acquisition graphic verification code module 140, an access verification request module 150, and an access verification verification request module 160. The steps of the access access requesting module 130, the obtaining the graphic verification code module 140, the access verification requesting module 150, and the access denied verification requesting module 160 are corresponding to the steps corresponding to the method of the anti-sparking login in the embodiment, in order to avoid redundancy. This embodiment is not described in detail.

The access requesting module 130 is configured to obtain an access verification request sent by the client, where the access verification request includes a terminal ID and a current verification code.

The graphic verification code module 140 is configured to acquire a corresponding graphic verification code based on the terminal ID.

The access verification request module 150 is configured to access the verification request by accessing the verification code if the current verification code matches the graphic verification code.

The access verification request module 160 is configured to perform a step of determining whether the verification serial number is valid based on the serial number information in the verification serial number if the current verification code does not match the graphic verification code.

Example 3

The embodiment provides a computer readable storage medium on which computer readable instructions are stored, and when the computer readable instructions are executed by the processor, the method for preventing the login in the embodiment 1 is implemented. I won't go into details here. Alternatively, when the computer readable instructions are executed by the processor, the functions of the modules/units in the apparatus for preventing the login in the second embodiment are implemented. To avoid repetition, details are not described herein again.

The computer readable storage medium may include any entity or device capable of carrying the computer readable instruction code, a recording medium, a USB flash drive, a removable hard disk, a magnetic disk, an optical disk, a computer memory, a read only memory (ROM, Read- Only Memory), Random Access Memory (RAM), electrical carrier signals, telecommunications signals, and software distribution media.

Example 4

FIG. 5 is a schematic diagram of a device/terminal device for anti-brushing login according to an embodiment of the present application. As shown in FIG. 5, the device/terminal device 500 of the anti-spy login of this embodiment includes a processor 510, a memory 520, and computer readable instructions 530 stored in the memory 520 and operable on the processor 510, such as Brush the login program. The processor 510, when executing the computer readable instructions 530, implements the steps in the method embodiments of the various anti-swipe logins described above, such as steps S10 through S40 shown in FIG. Alternatively, processor 510, when executing computer readable instructions 530, implements the functions of the various modules/units of the various apparatus embodiments described above, such as the functions of modules 10-40 shown in FIG.

It will be apparent to those skilled in the art that, for convenience and brevity of description, only the division of each functional unit and module described above is exemplified. In practical applications, the above functions may be assigned to different functional units as needed. The module is completed by dividing the internal structure of the device into different functional units or modules to perform all or part of the functions described above.

The above-mentioned embodiments are only used to explain the technical solutions of the present application, and are not limited thereto; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still implement the foregoing embodiments. The technical solutions described in the examples are modified or equivalently replaced with some of the technical features; and the modifications or substitutions do not deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in Within the scope of protection of this application.

Claims

A method for preventing a brush login, which is characterized by comprising:

Obtaining a login verification request sent by the client, where the login verification request includes a terminal ID;

Determining, according to the terminal ID, a database, whether a verification sequence number corresponding to the terminal ID exists in the database;

If the verification serial number exists, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

If the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the client corresponding to the terminal ID end.
The method of the anti-scratch login method of claim 1, wherein the method of anti-brushing login further comprises:

And if the verification serial number is invalid, clearing the verification serial number in the database, setting a login status of the terminal ID to a locked state in the database, and sending login failure information to the client.
The method of anti-scratch registration according to claim 1, wherein the method of preventing the login is further performed before the step of determining whether there is a verification serial number corresponding to the terminal ID in the database include:

Determining whether the login status corresponding to the terminal ID is a locked state;

Sending login failure information to the client if the login status is a locked state;

If the login status is not the locked status, performing a step of determining whether the verification sequence number corresponding to the terminal ID exists in the database.
The method of the anti-scratch login method of claim 1, wherein the method of anti-brushing login further comprises:

If the verification sequence number does not exist, assign a corresponding verification sequence number to the terminal ID, initialize sequence number information of the verification sequence number, and generate a graphic verification code associated with the verification sequence number, The graphic verification code is sent to the client corresponding to the terminal ID.
The method of claim 1 according to claim 1, wherein the serial number information comprises a verification period, a login number, and an effective number of times;

Determining whether the verification serial number is valid based on the serial number information in the verification serial number, including:

If the current time of the system is within the verification period, and the number of logins corresponding to the terminal ID is within the valid number of times, the verification sequence number is valid, and vice versa.
The method of claim 1 for claim 1, wherein the serial number information comprises a verification period and an effective number of times;

The method for preventing the brush login further includes:

Obtaining a timing update instruction, the timing update instruction including a program ID;

At the end of each of the verification periods at the current time of the system, an update procedure corresponding to the program ID is triggered, and the effective number of times of updating the serial number information is zero.
The method of claim 1 or 4, wherein after the step of transmitting the graphic verification code to a client corresponding to the terminal ID, the method further comprises:

Obtaining an access verification request sent by the client, where the access verification request includes a terminal ID and a current verification code;

Obtaining a corresponding graphic verification code based on the terminal ID;

And if the current verification code matches the graphic verification code, verifying the request by using the access;

If the current verification code does not match the graphic verification code, performing a step of determining whether the verification serial number is valid based on the serial number information in the verification serial number.
An anti-brushing device, characterized in that it comprises:

Obtaining a login verification request module, configured to obtain a login verification request sent by the client, where the login verification request includes a terminal ID;

Determining a verification serial number module, configured to query a database based on the terminal ID, and determine whether a verification serial number corresponding to the terminal ID exists in the database;

Determining a serial number effective module, if the verification serial number is present, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

Sending a graphic verification code module, if the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to The client corresponding to the terminal ID.
A terminal device comprising a memory, a processor, and computer readable instructions stored in the memory and operable on the processor, wherein the processor executes the computer readable instructions as follows step:

Obtaining a login verification request sent by the client, where the login verification request includes a terminal ID;

Determining, according to the terminal ID, a database, whether a verification sequence number corresponding to the terminal ID exists in the database;

If the verification serial number exists, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

If the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the client corresponding to the terminal ID end.
The terminal device according to claim 9, wherein said processor further implements the following steps when said computer readable instructions are executed:

And if the verification serial number is invalid, clearing the verification serial number in the database, setting a login status of the terminal ID to a locked state in the database, and sending login failure information to the client.
The terminal device according to claim 9, wherein said processor executes said computer readable instruction before said step of determining whether said verification sequence number corresponding to said terminal ID exists in said database The following steps are also implemented:

Determining whether the login status corresponding to the terminal ID is a locked state;

Sending login failure information to the client if the login status is a locked state;

If the login status is not the locked status, performing a step of determining whether the verification sequence number corresponding to the terminal ID exists in the database.
The terminal device according to claim 9, wherein said processor further implements the following steps when said computer readable instructions are executed:

If the verification sequence number does not exist, assign a corresponding verification sequence number to the terminal ID, initialize sequence number information of the verification sequence number, and generate a graphic verification code associated with the verification sequence number, The graphic verification code is sent to the client corresponding to the terminal ID.
The terminal device according to claim 9, wherein the serial number information comprises a verification period, a login number, and an effective number of times;

Determining whether the verification serial number is valid based on the serial number information in the verification serial number, including:

If the current time of the system is within the verification period, and the number of logins corresponding to the terminal ID is within the valid number of times, the verification sequence number is valid, and vice versa.
The terminal device according to claim 9, wherein the serial number information includes a verification period and an effective number of times;

The processor further implements the following steps when executing the computer readable instructions:

Obtaining a timing update instruction, the timing update instruction including a program ID;

At the end of each of the verification periods at the current time of the system, an update procedure corresponding to the program ID is triggered, and the effective number of times of updating the serial number information is zero.
A computer readable storage medium storing computer readable instructions, wherein the computer readable instructions are executed by a processor to implement the following steps:

Obtaining a login verification request sent by the client, where the login verification request includes a terminal ID;

Determining, according to the terminal ID, a database, whether a verification sequence number corresponding to the terminal ID exists in the database;

If the verification serial number exists, determining whether the verification serial number is valid based on the serial number information in the verification serial number;

If the verification serial number is valid, updating the serial number information of the verification serial number, generating a graphic verification code corresponding to the verification serial number, and transmitting the graphic verification code to the client corresponding to the terminal ID end.
The computer readable storage medium of claim 15 wherein said computer readable instructions are executed by a processor to implement the following steps:

And if the verification serial number is invalid, clearing the verification serial number in the database, setting a login status of the terminal ID to a locked state in the database, and sending login failure information to the client.
A computer readable storage medium according to claim 15, wherein said processor executes said computer before said step of determining whether said verification sequence number corresponding to said terminal ID exists in said database The following steps are also implemented when the instructions are readable:

Determining whether the login status corresponding to the terminal ID is a locked state;

Sending login failure information to the client if the login status is a locked state;

If the login status is not the locked status, performing a step of determining whether the verification sequence number corresponding to the terminal ID exists in the database.
The computer readable storage medium of claim 15, wherein the processor further implements the following steps when the computer readable instructions are executed:

If the verification sequence number does not exist, assign a corresponding verification sequence number to the terminal ID, initialize sequence number information of the verification sequence number, and generate a graphic verification code associated with the verification sequence number, The graphic verification code is sent to the client corresponding to the terminal ID.
The computer readable storage medium according to claim 15, wherein said serial number information comprises a verification period, a number of logins, and a number of times of validity;

Determining whether the verification serial number is valid based on the serial number information in the verification serial number, including:

If the current time of the system is within the verification period, and the number of logins corresponding to the terminal ID is within the valid number of times, the verification sequence number is valid, and vice versa.
The computer readable storage medium of claim 15, wherein the serial number information comprises a verification period and an effective number of times;

The processor further implements the following steps when executing the computer readable instructions:

Obtaining a timing update instruction, the timing update instruction including a program ID;

At the end of each of the verification periods at the current time of the system, an update procedure corresponding to the program ID is triggered, and the effective number of times of updating the serial number information is zero.