CN112398787B - Mailbox login verification method and device, computer equipment and storage medium - Google Patents

Abstract

The present application discloses a method, device and computer equipment for mailbox login verification, which relate to the field of information network security and can solve the problem that high-risk login behaviors cannot be accurately and automatically intercepted, so that mailbox login attacks cannot be effectively managed and controlled. The method includes: configuring and installing an attack discovery and risk control system to manage and control mailbox login behavior; using the attack discovery and risk control system to identify and record remote login information; The remote login information is verified; if the verification is successful, the login process of opening the mailbox is controlled. This application applies to verification of email login.

Description

Method, device, computer equipment and storage medium for email login verification

technical field

The present application relates to the field of information network security, and in particular, to a method, device and computer equipment for email login verification.

Background technique

So far, there are still a large number of "unpunished" overseas hackers who use various tools or social engineering methods to crack the password of the internal mailbox of the enterprise, and "manually poison" or steal information on other people in the enterprise by sending mass emails after logging in. If it is broken, the trusted IP can be used to attack, which seriously affects the protection ability and endangers the system security of a large number of user environments in the enterprise.

In reality, the most common control of mailbox login is to verify whether the source IP is an unfamiliar IP, and to ensure system security by restricting unfamiliar IPs.

However, the above-mentioned method of determining secure login only by the source IP can only exclude explicit attacks, and it is difficult to identify and discover the attack method that uses the correct account password to log in to the mail server due to the existence of weak passwords and loopholes. . Therefore, the commonly used general protection methods, including controlling logins from unfamiliar IPs and multiple login password errors, cannot effectively prevent them, nor can they control email login attacks from the root cause.

SUMMARY OF THE INVENTION

In view of this, the present application provides a method, device and computer equipment for email login verification, which can solve the problem that high-risk login behaviors cannot be accurately and automatically intercepted, so that email login attacks cannot be effectively managed and controlled.

According to an aspect of the present application, a method for email login verification is provided, and the method includes:

Configure and install the attack discovery and risk control system to manage and control mailbox login behavior;

Utilize the attack discovery and risk control system to identify and record remote login information;

Verifying the remote login information in the attack discovery and risk control system;

If the verification is successful, control the login process of opening the mailbox.

Specifically, the configuration and installation of an attack discovery and risk control system so as to manage and control the login behavior includes:

Install attack detection and risk control systems;

Perform management configuration on the network management center in the attack discovery and risk control system, where the management configuration includes configuring a list of email client tools and a list of browsers.

Correspondingly, the use of the attack discovery and risk control system to identify and record remote login information specifically includes:

Extract the process creation rules in the email client tool list;

identifying a remote control action if it is determined that there is a control operation that matches the process creation rule;

If it is determined that the remote control behavior is an active operation behavior, acquiring the unique machine identifier corresponding to the control operation;

The unique machine identifier is encrypted and stored in the network management center in the attack discovery and risk control system to realize remote login management.

Specifically, if it is determined that there is a control operation matching the process creation rule, the remote control behavior is identified, which specifically includes:

Obtain the browser plug-in and browsing process corresponding to the remote control behavior;

determining the uniform resource locator currently being accessed by the browser according to the browser plug-in and the browsing process;

Matching the uniform resource locator with the key uniform resource locator used for mailbox login, and if it is determined that the matching is successful, it is determined that the remote control behavior is an active operation behavior;

If the matching is unsuccessful, it is determined that the remote control behavior is abnormal, and the login operation is terminated.

Specifically, the verification of the remote login information in the attack discovery and risk control system specifically includes:

Extract the unique identifier of the target machine in the remote login information;

Matching the unique identification of the target machine with the configuration template corresponding to the unique identification of the machine;

If it is determined that the matching is successful, it is determined that the unique identification of the target machine has passed the verification.

Correspondingly, when terminating the login operation, it also specifically includes:

Output a message indicating that login is prohibited.

According to another aspect of the present application, an apparatus for email login verification is provided, and the apparatus includes:

The configuration module is used to configure and install the attack discovery and risk control system, so as to manage and control the mailbox login behavior;

an identification module for identifying and recording remote login information by using the attack discovery and risk control system;

a verification module for verifying the remote login information in the attack discovery and risk control system;

The control module is used to control the login process of opening the mailbox if the verification is successful.

Specifically, the configuration module is specifically used to install the attack discovery and risk control system;

The management configuration is performed on the network management center in the attack discovery and risk control system, and the management configuration includes configuring the mailbox client tool list, the browser list and the trusted terminal list.

Specifically, an identification module, which is specifically used to extract the process creation rules in the mailbox client tool list;

identifying a remote control action if it is determined that there is a control operation that matches the process creation rule;

If it is determined that the remote control behavior is an active operation behavior, acquiring the unique machine identifier corresponding to the control operation;

The unique machine identifier is encrypted and stored in the network management center in the attack discovery and risk control system to realize remote login management.

Specifically, the identification module is specifically used to obtain the browser plug-in and the browsing process corresponding to the remote control behavior;

determining the uniform resource locator currently being accessed by the browser according to the browser plug-in and the browsing process;

Matching the uniform resource locator with the key uniform resource locator used for mailbox login, and if it is determined that the matching is successful, it is determined that the remote control behavior is an active operation behavior;

If the matching is unsuccessful, it is determined that the remote control behavior is abnormal, and the login operation is terminated.

Specifically, a verification module, which is specifically used to extract the unique identifier of the target machine in the remote login information;

Matching the unique identification of the target machine with the configuration template corresponding to the unique identification of the machine;

If it is determined that the matching is successful, it is determined that the unique identification of the target machine has passed the verification.

Correspondingly, the output module is used to output the prompt information that the login is prohibited.

According to another aspect of the present application, a non-volatile readable storage medium is provided, a computer program is stored thereon, and when the program is executed by a processor, the above-mentioned method for mailbox login verification is implemented.

According to yet another aspect of the present application, a computer device is provided, comprising a non-volatile readable storage medium, a processor, and a computer program stored on the non-volatile readable storage medium and executable on the processor, The method for realizing the above mailbox login verification when the processor executes the program.

By means of the above-mentioned technical solutions, a method, device and computer equipment for mailbox login verification provided by the present application, compared with the current verification method mainly through whether the source IP is an unfamiliar IP, the present application can discover and risk by configuring installation attacks. The control system is used to manage and control the mailbox login behavior. Specifically, the attack discovery and risk control system can be used to identify and record the remote login information, and verify the remote login information. When the verification is passed, the mailbox login operation is controlled. It can ensure that only the terminal after the remote login management is allowed to log in to the mailbox server, and all other illegal logins will be rejected, thus greatly improving the mailbox remote login protection ability, and can control the mailbox login attack from the root. , to ensure the system security of the enterprise user environment.

Description of drawings

The drawings described herein are used to provide further understanding of the application, and constitute a part of the application. The schematic embodiments and descriptions of the application are used to explain the application and do not constitute an improper limitation to the local application. In the attached image:

1 shows a schematic flowchart of a method for email login verification provided by an embodiment of the present application;

FIG. 2 shows a schematic flowchart of another mailbox login verification method provided by an embodiment of the present application;

3 shows a flow chart of client management provided by an embodiment of the present application;

FIG. 4 shows a schematic structural diagram of an apparatus for mailbox login verification provided by an embodiment of the present application;

FIG. 5 shows a schematic structural diagram of another mailbox login verification apparatus provided by an embodiment of the present application.

Detailed ways

Hereinafter, the present application will be described in detail with reference to the accompanying drawings and in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features of the embodiments may be combined with each other in the case of no conflict.

Aiming at the problem that high-risk login behavior cannot be accurately and automatically intercepted at present, so that the mailbox login attack cannot be effectively managed and controlled, this application provides a method for mailbox login verification, as shown in Figure 1, the method includes:

101. Configure and install an attack discovery and risk control system to manage and control mailbox login behavior.

The execution subject of this embodiment may be a terminal that needs to perform mailbox login detection and protection, and manage and control the mailbox login behavior by configuring and installing an attack discovery and risk control system on the terminal.

102. Use the attack discovery and risk control system to identify and record remote login information.

The remote login information may include the remote control behavior and the unique machine identifier corresponding to the login terminal. Remote control behavior can be divided into user active operation behavior and program automatic implementation behavior. User active operation behavior refers to the user's active operation through keyboard, mouse, touch screen and other interactive devices, such as: double-clicking a mouse on the desktop. Program icon, execute the program, and then open a file through the program menu. The behavior under the user's active operation, compared with the program's automatic implementation behavior, will have different behavior permissions granted, such as: winword.exe (Microsoft's Office office suite), under the user's active operation, can read and write any location in any location. Document class file, but it can only operate on files (temporary files) it creates itself without the user's active selection.

103. Verify the remote login information in the attack discovery and risk control system.

For this embodiment, the verification of the remote login information is mainly the verification of the machine unique identifier corresponding to the login terminal, which is used to determine whether it conforms to the machine unique identifier configuration standard.

104. If the verification is successful, control the login process of opening the mailbox.

For this embodiment, in a specific application scenario, when it is determined that the machine unique identifier in the remote login information complies with the machine unique identifier configuration standard, the login process of opening a mailbox can be controlled.

With the email login verification method in this embodiment, the email login behavior can be managed and controlled by configuring and installing an attack discovery and risk control system. Specifically, the attack discovery and risk control system can be used to identify and record remote login information, and the remote The login information is verified. When the verification is passed, the login action of opening the mailbox is controlled. It can ensure that only the terminal after the remote login management is allowed to log in to the mailbox server, and all other illegal logins will be rejected, thus greatly improving the mailbox remote login protection ability, and can control the mailbox login attack from the root. Ensure the system security of enterprise user environment.

Further, as a refinement and extension of the specific implementation of the above embodiment, in order to fully describe the specific implementation process in this embodiment, another method for mailbox login verification is provided, as shown in FIG. 2 , the method includes:

201. Install an attack discovery and risk control system.

Among them, the attack discovery and risk control system (F&C) can include the attack discovery and risk control terminal, the attack discovery and risk control server, and the network management center (central control). The attack discovery and risk control terminal is mainly used to detect and identify remote control behaviors , when the login behavior of the user's active operation is detected, the machine unique identifier (MID) of the login terminal will be uploaded to the network management center in encrypted form and stored for a certain period of time, so as to be used for attack discovery and risk control server query; The attack discovery and risk control server is used to receive policies issued by the network management center. Then, after detecting that there is a terminal that wants to log in remotely, it will request an inquiry from the network management center. The network management center will return the MID list that has been clicked to the server in encrypted form. After the server decrypts it, it determines Whether the unique identifier of the target machine in the MID list that has been hit matches the configuration template corresponding to the unique identifier of the machine, if it is determined to match, the remote login is allowed; The role of the network management center is to store the MID of the login terminal sent by the attack discovery and risk control terminal, that is, to realize the record of remote login management. All MIDs stored locally are sent to the attack discovery and risk control server in the form of a list, so as to verify the unique identification of the target machine.

202. Manage and configure the network management center in the attack discovery and risk control system, and the management configuration includes configuring a list of email client tools and a list of browsers.

For this embodiment, in a specific application scenario, after the F&C is installed, it is necessary to log in to the network management center to perform management configuration. Because this application manages mailbox login behavior through the network management center, it is necessary to configure the list of mail client tools or browsers to be managed in the network management center in advance.

203. Extract the process creation rules in the email client tool list.

Among them, the process creation rule corresponds to the trigger rule of the mailbox login operation, and the purpose of extracting the process creation rule is to detect whether the current operation is a normal login trigger operation, and then eliminate the login operation triggered by the automatic implementation behavior of the program, and only the user actively Operation behavior for login verification.

204. If it is determined that there is a control operation matching the process creation rule, identify the remote control behavior.

In a specific application scenario, in order to identify the remote control behavior, step 204 in the embodiment may specifically include: acquiring the browser plug-in and browsing process corresponding to the remote control behavior; Resource Locator: Match the Uniform Resource Locator with the key Uniform Resource Locator used for mailbox login. If it is determined that the match is successful, the remote control behavior is determined to be an active operation behavior; if the match is unsuccessful, it is determined that the remote control behavior is abnormal. Terminate the login operation.

For this embodiment, in a specific application scenario, as shown in FIG. 3 , the attack discovery and risk control terminal can identify the current browser access by means of browser plug-ins (chrome, firefox) and process hooks (IE). Uniform resource locator (url), judge on the key uniform resource locator of mailbox login, confirm that the login behavior is a normal user's active operation, if not, it will not be processed. Because there is no RBI operation, it will refuse to log in. If it is the user's active operation, the attack discovery and risk control terminal will use the MID of the remote login terminal as data, encrypt it and send it to the central control and save it for a certain period of time.

205. If it is determined that the remote control behavior is an active operation behavior, acquire the unique identifier of the machine corresponding to the control operation.

For this embodiment, in a specific application scenario, if the remote control behavior in the current login operation is determined to be an active operation behavior based on the attack discovery and the risk control terminal, the attack discovery and risk control terminal will extract the unique machine corresponding to the active operation behavior. logo.

206. Encrypt and store the machine's unique identifier to the network management center in the attack discovery and risk control system to realize remote login management.

For this embodiment, in a specific application scenario, when the attack finds the machine unique identifier corresponding to the active operation behavior extracted by the risk control terminal, the unique identifier of the machine will be encrypted and stored in the network management center after the encryption is completed. Correspondingly, in order to save the storage space of the network management center, the storage duration can be set, and the storage duration can be determined according to the periodic frequency of the attack discovery and risk control server to obtain the MID list. After the MID list is extracted, the stored data of the MID list in the network management center can be cleared.

207. Extract the unique identifier of the target machine in the remote login information.

For this embodiment, in a specific application scenario, the attack discovery and risk control server can be used to extract the MID list from the network management center, and the machine unique identifier in the MID list can be determined as the only target machine that needs to be detected by the trusted terminal. logo.

208. Match the unique identifier of the target machine with the configuration template corresponding to the unique identifier of the machine.

The configuration template corresponds to the constituent elements and arrangement order of the machine's unique identification.

For this embodiment, in a specific application scenario, after extracting the unique identifier of the target machine, the attack discovery and risk control server will decrypt it in advance. The ID matches the configuration template corresponding to the machine's unique ID.

209. If it is determined that the matching is successful, it is determined that the unique identifier of the target machine has passed the verification.

For this embodiment, if it is determined that the matching is successful, the login process of opening a mailbox can be controlled.

Correspondingly, when the matching fails, a prompt message indicating that login is prohibited can be output.

The prompt information may include text prompt information, picture prompt information, audio prompt information, video prompt information, lighting prompt information, vibration prompt information, and the like. The information that prohibits logging in can be output in various forms such as audio, video, or text.

Through the above mailbox login verification method, the mailbox login behavior can be managed and controlled by configuring and installing the attack discovery and risk control system. Specifically, the control operations of the active operation behavior can be filtered out through the process creation rules, and the behaviors that belong to the automatic implementation of the program can be directly eliminated. For the control operations that belong to the active operation behavior, the machine unique identification verification is performed, and when the verification is passed, the login action of opening the mailbox is controlled. Using the above method, only the terminal after the remote login management is allowed to log in to the mailbox server, and all other illegal logins will be rejected. Even if the correct account is used, the protection ability of mailbox remote login can be greatly improved. It can control email login attacks, avoid remote attacks by hackers, and ensure the system security of the enterprise user environment.

Further, as a specific embodiment of the method shown in FIG. 1 and FIG. 2 , an embodiment of the present application provides an apparatus for mailbox login verification. As shown in FIG. 4 , the apparatus includes: a configuration module 31 , an identification module 32 , and a verification module 33. Control module 34.

The configuration module 31 is used to configure and install the attack discovery and risk control system, so as to manage and control the mailbox login behavior;

The identification module 32 is used to identify and record the remote login information by using the attack discovery and risk control system;

The verification module 33 is used to verify the remote login information in the attack discovery and risk control system;

The control module 34 is configured to control the login action of opening the mailbox if the verification is successful.

In a specific application scenario, in order to manage and control the login behavior, the configuration module 31 is specifically used to install the attack discovery and risk control system; to manage and configure the network management center in the attack discovery and risk control system, and the management configuration includes configuration Email client tool list, browser list.

Correspondingly, in order to use the attack discovery and risk control system to identify and record remote login information, the identification module 32 is specifically used to extract the process creation rules in the mailbox client tool list; if it is determined that there is a control operation that matches the process creation rules, then identify Remote control behavior; if it is determined that the remote control behavior is an active operation behavior, the unique machine identifier corresponding to the control operation is obtained; the machine unique identifier is encrypted and stored in the network management center in the attack discovery and risk control system to realize remote login management.

In a specific application scenario, in order to identify the remote control behavior when it is determined that there is a control operation that matches the process creation rule, the identification module 32 is specifically used to obtain the browser plug-in and the browsing process corresponding to the remote control behavior; The browser plug-in and the browsing process determine the Uniform Resource Locator currently being accessed by the browser; match the Uniform Resource Locator with the key Uniform Resource Locator used for mailbox login, if it is determined that the match is successful, the remote control behavior is determined to be an active operation Behavior; if the match is unsuccessful, it is determined that the remote control behavior is abnormal and the login operation is terminated.

Correspondingly, in order to verify the remote login information, the verification module 33 is specifically used to extract the unique identifier of the target machine in the remote login information; the unique identifier of the target machine is matched with the configuration template corresponding to the unique identifier of the machine; if it is determined to match If successful, it is determined that the unique identification of the target machine has passed the verification.

Correspondingly, in order to prompt the login terminal when the login operation is terminated, as shown in FIG. 5 , the device further includes: an output module 35 .

The output module 35 is used for outputting the prompt information of prohibition of login.

It should be noted that, for other corresponding descriptions of the functional units involved in the apparatus for email login verification provided in this embodiment, reference may be made to the corresponding descriptions in FIG. 1 to FIG. 2 , which will not be repeated here.

Based on the above methods shown in FIGS. 1 and 2 , correspondingly, an embodiment of the present application further provides a storage medium on which a computer program is stored. Show the method of email login verification.

Based on this understanding, the technical solution of the present application can be embodied in the form of a software product, and the software product can be stored in a non-volatile storage medium (which can be a CD-ROM, U disk, mobile hard disk, etc.), including several The instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods of various implementation scenarios of the present application.

Based on the methods shown in FIG. 1 and FIG. 2 and the virtual device embodiments shown in FIG. 4 and FIG. 5 , in order to achieve the above purpose, the embodiment of the present application also provides a computer device, which may be a personal computer, A server, a network device, etc., the physical device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to realize the above-mentioned method for mailbox login verification as shown in FIG. 1 and FIG. 2 .

Optionally, the computer device may further include a user interface, a network interface, a camera, a radio frequency (Radio Frequency, RF) circuit, a sensor, an audio circuit, a WI-FI module, and the like. The user interface may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the like, and the optional user interface may also include a USB interface, a card reader interface, and the like. Optional network interfaces may include standard wired interfaces, wireless interfaces (such as Bluetooth interfaces, WI-FI interfaces), and the like.

Those skilled in the art may understand that the computer device structure provided in this embodiment does not constitute a limitation on the physical device, and may include more or less components, or combine some components, or arrange different components.

The non-volatile readable storage medium may further include an operating system and a network communication module. The operating system is a program for the hardware and software resources of the physical device used for mailbox login verification, and supports the operation of information processing programs and other software and/or programs. The network communication module is used to implement communication between various components in the non-volatile readable storage medium, and communicate with other hardware and software in the physical device.

From the description of the above embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform, and can also be implemented by hardware. By applying the technical solution of the present application, compared with the current prior art, the present application can manage and control the mailbox login behavior by configuring and installing an attack discovery and risk control system. Specifically, the active operation behavior can be screened out through process creation rules. Control operation, directly eliminate the control operation that belongs to the automatic implementation of the program, match the unique machine identifier of the control operation that belongs to the active operation behavior, determine whether it belongs to the login terminal authorized to log in, and then control the login action of opening the mailbox. Using the above method, only the specified trusted terminal or browser can be used to log in to the mailbox server, and all other unauthorized logins will be rejected. It greatly improves the ability of mailbox remote login protection, can control mailbox login attacks from the root, avoid remote attacks by hackers, and ensure the system security of enterprise user environment.

Those skilled in the art can understand that the accompanying drawing is only a schematic diagram of a preferred implementation scenario, and the modules or processes in the accompanying drawing are not necessarily necessary to implement the present application. Those skilled in the art can understand that the modules in the device in the implementation scenario may be distributed in the device in the implementation scenario according to the description of the implementation scenario, or may be located in one or more devices different from the implementation scenario with corresponding changes. The modules of the above implementation scenarios may be combined into one module, or may be further split into multiple sub-modules.

The above serial numbers in the present application are only for description, and do not represent the pros and cons of the implementation scenarios. The above disclosures are only a few specific implementation scenarios of the present application, however, the present application is not limited thereto, and any changes that can be conceived by those skilled in the art should fall within the protection scope of the present application.

Claims (8)

1. A method for mailbox login verification, comprising:

configuring an installation attack discovery and risk control system so as to manage and control mailbox login behaviors;

the method for identifying and recording the remote login information by utilizing the attack discovery and risk control system comprises the following steps: extracting a process creation rule in the mailbox client tool list; if the control operation matched with the process creation rule is determined to exist, identifying a remote control behavior; if the remote control behavior is judged to be the active operation behavior, a machine unique identifier corresponding to the control operation is obtained; the unique machine identifier is used as remote login information to be encrypted and stored in a network management center in the attack discovery and risk control system, and remote login dotting is achieved;

verifying the telnet information in the attack discovery and risk control system, comprising: decrypting the encrypted remote login information and extracting a target machine unique identifier in the remote login information; matching the unique identifier of the target machine with a configuration template corresponding to the unique identifier of the machine; if the matching is determined to be successful, judging that the unique identifier of the target machine passes the verification;

if the verification is successful, controlling to open a mailbox login process;

wherein, if it is determined that there is a control operation matching the process creation rule, identifying a remote control behavior, specifically comprising:

acquiring a browser plug-in and a browsing process corresponding to the remote control behavior;

determining a uniform resource locator which is accessed by the current browser according to the browser plug-in and the browsing process;

matching the uniform resource locator with a key uniform resource locator for mailbox login, and if the matching is determined to be successful, judging that the remote control behavior is an active operation behavior;

and if the matching is unsuccessful, judging that the remote control behavior is abnormal, and terminating the login operation.

2. The method according to claim 1, wherein the configuring of the attack discovery and risk control system for installation to manage and control login behavior comprises:

installing an attack discovery and risk control system;

and managing and configuring a network management center in the attack discovery and risk control system, wherein the management configuration comprises a mailbox client tool list and a browser list.

3. The method according to claim 1, wherein when terminating the login operation, further comprising:

and outputting prompt information for forbidding login.

4. An apparatus for mailbox login verification, comprising:

the configuration module is used for configuring and installing an attack discovery and risk control system so as to manage and control the mailbox login behavior;

the identification module is used for identifying and recording the remote login information by using the attack discovery and risk control system and comprises: extracting a process creation rule in the mailbox client tool list; if the control operation matched with the process creation rule is determined to exist, identifying a remote control behavior; if the remote control behavior is judged to be the active operation behavior, a machine unique identifier corresponding to the control operation is obtained; the unique machine identifier is used as remote login information to be encrypted and stored in a network management center in the attack discovery and risk control system, and remote login dotting is achieved;

the verification module is used for verifying the remote login information in the attack discovery and risk control system and comprises: decrypting the encrypted remote login information and extracting a target machine unique identifier in the remote login information; matching the unique identifier of the target machine with a configuration template corresponding to the unique identifier of the machine; if the matching is determined to be successful, judging that the unique identifier of the target machine passes the verification;

the control module is used for controlling to open a mailbox login process if the verification is successful;

the identification module is specifically used for acquiring a browser plug-in and a browsing process corresponding to the remote control behavior; determining a uniform resource locator which is accessed by the current browser according to the browser plug-in and the browsing process; matching the uniform resource locator with a key uniform resource locator for mailbox login, and if the matching is determined to be successful, judging that the remote control behavior is an active operation behavior; and if the matching is unsuccessful, judging that the remote control behavior is abnormal, and terminating the login operation.

5. The apparatus according to claim 4, wherein the configuration module is specifically configured to install an attack discovery and risk control system; and carrying out management configuration on a network management center in the attack discovery and risk control system, wherein the management configuration comprises a mailbox client tool list and a browser list.

6. The apparatus of claim 4, further comprising: an output module;

and the output module is used for outputting the prompt information of forbidding login.

7. A non-transitory readable storage medium having stored thereon a computer program, wherein the program, when executed by a processor, implements the method of mailbox login verification as claimed in any one of claims 1 to 3.

8. A computer device comprising a non-transitory readable storage medium, a processor, and a computer program stored on the non-transitory readable storage medium and executable on the processor, wherein the processor when executing the program implements the method for mailbox login verification as claimed in any one of claims 1 to 3.

Images