CN115589308A - Login verification method, device, equipment and storage medium based on coordinate offset - Google Patents

Abstract

The embodiment of the invention provides a login verification method, a login verification device, login verification equipment and a login verification storage medium based on coordinate offset, which are applied to a server side, wherein the method comprises the following steps: acquiring user data information, and determining user offset according to the user data information; the user offset is used to represent a coordinate offset of the user during an update time interval; acquiring user login information, and generating a login token according to the user login information and the user offset; and performing login verification according to the generated login token. The data used for generating the login token is related to the user data information, so that the randomness of the generated login token and the uncertainty of the user data information based on the determined user coordinate offset are guaranteed, the indecipherability of the encrypted data can be guaranteed, and the safety of user login verification is improved.

Description

Login verification method, device, equipment and storage medium based on coordinate offset

technical field

The present invention relates to the field of network technology and security, in particular to a coordinate offset-based login verification method, a coordinate offset-based login verification device, a corresponding electronic device, and a corresponding computer storage medium.

Background technique

With the development of the mobile Internet, the number of mobile/client users is increasing day by day. Facing the huge number of users, there is a need to centralize the access pressure on the server. Every time the client requests the server, it is necessary to access the database to verify the account number. The password stress problem is solved.

At present, the above problems can be solved by introducing the method of generating Token. Token is a string of strings generated by the server, which can be used as a token for the client to request. Usually, the server returns to the client after generating a Token. , so that the client can perform login authentication based on the token when logging in. In the traditional token generation method, the token is usually generated based on the user's login account. This token generation method is easy to crack the user's account password information after obtaining the decrypted ciphertext, and the security of encrypted data is low.

Contents of the invention

In view of the above problems, the embodiments of the present invention are proposed to provide a coordinate offset-based login verification method, a coordinate offset-based login verification device, and a corresponding An electronic device and a corresponding computer storage medium.

The embodiment of the present invention discloses a login verification method based on coordinate offset, which is applied to the server, and the method includes:

Obtain user data information, and determine a user offset according to the user data information; the user offset is used to represent the coordinate offset of the user during the update time interval;

Obtain user login information, and generate a login token according to the user login information and the user offset;

Login verification is performed based on the generated login token.

Optionally, the user data information includes latitude and longitude information and step information where the user is located; determining the user offset according to the user data information includes:

determining the user offset distance according to the latitude and longitude information of the user;

Determine a user offset according to the user offset distance and the step number information.

Optionally, the latitude and longitude information of the user includes the first latitude and longitude of the user at the current moment and the second latitude and longitude of the user at the previous moment before the update time interval, and the step number information includes the first latitude and longitude counted at the current moment. The number of motion steps and the second motion steps counted at the previous moment before the update time interval;

The determining the user offset distance according to the latitude and longitude where the user is located includes:

Constructing a plane Cartesian coordinate system with the second latitude and longitude as the origin;

In the planar Cartesian coordinate system, using the first latitude and longitude and the second latitude and longitude to calculate the first user offset distance of the user from the previous moment before the distance update time interval to the current moment;

Randomly select any time within the time period from the previous time before the distance update time interval to the current time, and use the first user offset distance, the current time, and any selected time to calculate the user's distance from the selected time. The second user offset distance from any moment of to the previous moment before the update time interval.

Optionally, the user offset distance includes a second user offset distance to the current moment at any moment selected within the time period from the previous moment before the distance update time interval to the current moment;

The determining the user offset according to the user offset distance and the step number information includes:

Using the first number of motion steps counted at the current moment and the second number of motion steps counted at the previous moment before the update time interval, calculate the user's third movement steps from the previous moment before the update time interval to the current moment. number of steps;

Obtain the vertical coordinate point of the corresponding coordinate point of the first latitude and longitude in the plane coordinate system, and determine the angle chord value of the triangle formed in the plane Cartesian coordinate system according to the vertical coordinate point;

The user offset is determined according to the first number of motion steps, the second user offset distance, the third number of motion steps, and the angle chord of the formed triangle.

Optionally, the angle sine value includes a first angle sine value, a second angle cosine value, and a third angle tangent value; Angle chord, which determines user offsets, includes:

Using the product of the first number of motion steps and the sine value of the first angle, the product of the third number of motion steps and the cosine value of the second angle, and the offset distance from the second user and the tangent value of the third angle The sum of the products of , calculates the user offset.

Optionally, the generating a login token according to the user login information and the user offset includes:

Acquiring the user login account number, user login password, user's movement direction at the current moment and the current moment in the user login information;

Convert the current time into milliseconds of the current time, and concatenate and encrypt the user login account, user login password, the direction of movement of the user at the current moment, the milliseconds of the current time, and the user offset content;

Encrypt the encrypted content according to a preset encryption method to generate a login token.

Optionally, the login token uses the update time interval as the login validity period; and performing login verification according to the generated login token includes:

During the login validity period, if the login request sent by the client carries the generated login token, the login verification is passed.

The embodiment of the present invention also discloses a login verification device based on coordinate offset, which is applied to the server, and the device includes:

A user offset determining module, configured to obtain user data information, and determine a user offset according to the user data information; the user offset is used to represent the coordinate offset of the user during the update time interval;

A token generating module, configured to obtain user login information, and generate a login token according to the user login information and the user offset;

The login verification module is configured to perform login verification according to the generated login token.

Optionally, the user data information includes latitude and longitude information and step information where the user is located; the user offset determination module includes:

A user offset distance determining submodule, configured to determine the user offset distance according to the latitude and longitude information where the user is located;

The user offset determination submodule is configured to determine the user offset according to the user offset distance and the step number information.

Optionally, the latitude and longitude information of the user includes the first latitude and longitude of the user at the current moment and the second latitude and longitude of the user at the previous moment before the update time interval, and the step number information includes the first latitude and longitude counted at the current moment. The number of motion steps and the second motion steps counted at the previous moment before the update time interval;

The user offset distance determination submodule includes:

A coordinate system construction unit, configured to construct a plane Cartesian coordinate system with the second latitude and longitude as the origin;

The first user offset distance determination unit is configured to use the first latitude and longitude and the second latitude and longitude in the plane Cartesian coordinate system to calculate the user's second distance from the previous moment before the distance update time interval to the current moment. a user offset distance;

The second user offset distance determining unit is configured to randomly select any time within the time period from the previous moment before the distance update time interval to the current moment, and adopt the first user offset distance, the current moment and the At any selected moment, the second user offset distance of the user from the selected moment to the previous moment before the update time interval is calculated.

Optionally, the user offset distance includes a second user offset distance to the current moment at any moment selected within the time period from the previous moment before the distance update time interval to the current moment;

The user offset determination submodule includes:

The third motion step determination unit is configured to use the first motion step counted at the current moment and the second motion step counted at the previous moment before the update time interval to calculate the user's distance before the update time interval The number of third movement steps from the previous moment to the current moment;

An angle chord determination unit, configured to obtain the vertical coordinate point of the corresponding coordinate point of the first latitude and longitude in the plane coordinate system, and determine the angle chord value of the triangle formed in the plane Cartesian coordinate system according to the vertical coordinate point ;

The user offset determining unit is configured to determine the user offset according to the first movement steps, the second user offset distance, the third movement steps and the angle chords of the formed triangles.

Optionally, the angle sine value includes a first angle sine value, a second angle cosine value, and a third angle tangent value; the user offset determination unit includes:

The user offset determining subunit is used to use the product of the first motion steps and the sine value of the first angle, the product of the third motion steps and the second angle cosine value, and the product of the second The sum of the product of the user offset distance and the tangent of the third angle is used to calculate the user offset.

Optionally, the token generation module includes:

The user login information acquisition sub-module is used to acquire the user login account number, user login password, movement direction of the user at the current moment and the current moment in the user login information;

The encrypted content generation sub-module is used to convert the current time into the millisecond value of the current time, and convert the user login account, the user login password, the direction of movement of the user at the current moment, the millisecond value of the current time, and the User offset, splicing to get encrypted content;

The token generation sub-module is used to encrypt the encrypted content according to a preset encryption method to generate a login token.

Optionally, the login token uses the update time interval as the login validity period; the login verification module includes:

The login verification sub-module is configured to pass the login verification if the login request sent by the client carries the generated login token within the validity period of the login.

The embodiment of the present invention also discloses an electronic device, including: a processor, a memory, and a computer program stored on the memory and capable of running on the processor. When the computer program is executed by the processor, the Any one of the coordinate offset-based login verification methods.

The embodiment of the present invention also discloses a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, any one of the coordinate offset-based login verification methods described above is implemented .

Embodiments of the present invention include the following advantages:

In the embodiment of the present invention, the server can acquire user data information, and determine the user offset according to the acquired user data information, and the determined user offset can be used to represent the coordinate offset of the user during the update time interval, At this time, a login token may be generated by encrypting the user login information and the user offset used to represent the coordinate offset, so as to perform login verification on the user terminal. The data used to generate the login token is related to the user data information, which ensures the randomness of the generated login token and the uncertainty of the user data information based on the determination of the user coordinate offset, and can also ensure the unreliability of the encrypted data. Crackability, improve the security of user login verification.

Description of drawings

Fig. 1 is a flow chart of the steps of an embodiment of a coordinate offset-based login verification method of the present invention;

Fig. 2 is a flow chart of the steps of another embodiment of the login verification method based on coordinate offset of the present invention;

FIG. 3 is a schematic diagram of a token generation process provided by an embodiment of the present invention;

Fig. 4 is an implementation schematic diagram of obtaining user data information provided by an embodiment of the present invention;

Fig. 5 is an application scenario diagram of login verification based on coordinate offset provided by an embodiment of the present invention;

Fig. 6 is a structural block diagram of an embodiment of a coordinate offset-based login verification device of the present invention.

detailed description

In order to make the above objects, features and advantages of the present invention more comprehensible, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

With the development of the mobile Internet, the value of user personal information and enterprise asset data is high in the information age. Ensuring the security of user login accounts is the top priority in the development of Internet products. Internet products are required to consider the security of user login accounts To ensure the high security of user login account. In order to ensure the security of the user's login account, the generated login token Token can usually be introduced to perform login verification when the user end uses the user's login account to log in.

One of the core ideas of the embodiments of the present invention is to use the user offset representing the offset of the user coordinates as the relevant data for generating the login token, and the data used to generate the login token is related to the user data information, which can ensure that the generated The randomness of the login token increases the difficulty of cracking the login token; and, user data information can include the user's latitude and longitude information and step information, based on the user's daily travel mode, as well as the number of steps and locations. Determinism, which can ensure the uncrackability of encrypted data and improve the security of user login verification; further, based on the process of generating login tokens through a series of algorithms based on user formation, the login can be implemented according to the set update time interval The regular update of the token, while improving the security of the login token amount, can also ensure the non-repeatability of the generated login token, and even if the encrypted ciphertext is obtained by various means, it cannot be passed through the market. The traditional encryption method on the Internet can obtain the user's account password information, which increases the randomness of the encrypted data and the difficulty of cracking, and significantly improves the security of the encrypted data. In addition, in order not to infringe on the personal privacy of the user, the user data information used in the process of generating the login token is mainly collected based on the update time interval, that is, only the current data and data update are obtained. The data used at the last moment does not record user data information in real time, and the token generation algorithm proposed by the embodiment of the present invention can reduce the cost of generating login tokens and save system resources.

Referring to FIG. 1 , it shows a flow chart of steps of an embodiment of a coordinate offset-based login verification method of the present invention, which is applied to the server, and may specifically include the following steps:

Step 101, acquiring user data information, and determining a user offset according to the user data information;

In the embodiment of the present invention, the data used to generate the login token is related to user data information, which can ensure the randomness of the generated login token and increase the difficulty of cracking the login token. At this time, the user offset representing the user coordinate offset can be used as the relevant data for generating the login token, based on the difference in the user's daily travel mode in the user coordinate offset, as well as the uncertainty of the number of steps and location data, Ensure the uncrackability of encrypted data and improve the security of user login verification.

In an embodiment of the present invention, the user offset representing the user coordinate offset can be determined through the acquired user data information, and the acquired user data information can be data related to the user coordinate offset, for example The user's latitude and longitude information, step information, etc., so as to determine the user offset based on the data related to the coordinate offset.

Wherein, the determined user offset can be used to represent the coordinate offset of the user during the update time interval, then in the acquired user data information, the acquired latitude and longitude information can include the first latitude and longitude where the user is at the current moment and The moment before the current distance update time interval, that is, the second latitude and longitude where the user was at the last moment, and the acquired step information may include the first movement steps counted at the current moment and the current distance update time interval. The moment before the duration, that is, the second number of motion steps counted at the last moment, that is, when the user data information is used to calculate the user offset, the user data information used is the current moment and the current distance update time interval. The time before the duration, that is, the data related to the user coordinate offset at the previous time.

It should be noted that, in order not to violate the personal privacy of the user, the user data information used in the process of generating the login token is mainly collected based on the update time interval, that is, the data obtained is only the current moment As well as the data used at the last moment of data update, the user data information is not recorded in real time, and the collection of user data information based on the update time interval is performed with the user's knowledge and permission.

In addition, the update time interval may not only refer to the time interval for collecting user data information, but may also refer to the update time of the subsequent generated login token, and may also refer to the time interval of the generated login token. The login validity period, and the specific setting of the update time interval can be mainly set based on actual business conditions, which is not limited by the embodiment of the present invention.

Step 102, obtaining user login information, and generating a login token according to the user login information and user offset;

After obtaining the user offset generated based on the information related to the user offset location, in addition to using the user offset indicating the coordinate offset of the user during the update time interval as the relevant data for generating the login token, User login information can be obtained, and the user login information and user offset can be used as relevant data for generating a login token.

Wherein, the obtained user login information may not only include the user login account and user login password routinely required when the client logs in, but also include other data related to the user coordinate offset, for example, the user is currently The direction of movement, the current moment, etc. are further based on the uncertainty of these data to ensure the uncrackability of encrypted data and improve the security of user login verification.

In practical applications, in the process of encrypting and generating a login token based on user login information and user offset, the spliced content can be encrypted and generated by splicing the user login information and the determined user offset .

In a preferred embodiment, the generated login token has the same set login validity period as the update time interval, at this time, the generated login token can be updated based on the update time interval. The login token within is invalid. Exemplarily, assuming that the set update time interval is one hour, the generated login token will be updated every hour. Specifically, user data information can be re-collected every hour, and according to the re-collected user The data information regenerates the login token.

Step 103, perform login verification according to the generated login token.

After the login token is generated, the user terminal can be logged in and verified according to the generated login token. Since the data used to generate the login token is related to the user data information, the randomness of the generated login token is guaranteed, and Based on the uncertainty of the user data information for determining the user coordinate offset, it can also ensure the uncrackability of encrypted data and improve the security of user login verification.

In practical applications, after the server generates the login token, it can cache the generated login token and return the login token to the user. At this time, when the client uses the user login account and user login password for account login, the login request sent usually carries the login token generated by the server. When the server receives the login request, it can determine the login token. Whether the request carries a login token, and whether the carried login token is within the login validity period, that is, whether the carried login token is consistent with the cached login token. At this time, within the login validity period, if the client sends If the login request carries the generated login token, it is determined that the current login verification of the client is passed.

In the embodiment of the present invention, the server can acquire user data information, and determine the user offset according to the acquired user data information, and the determined user offset can be used to represent the coordinate offset of the user during the update time interval, At this time, a login token may be generated by encrypting the user login information and the user offset used to represent the coordinate offset, so as to perform login verification on the user terminal. The data used to generate the login token is related to the user data information, which ensures the randomness of the generated login token and the uncertainty of the user data information based on the determination of the user coordinate offset, and can also ensure the unreliability of the encrypted data. Crackability, improve the security of user login verification.

Referring to FIG. 2 , it shows a flow chart of steps of another embodiment of a coordinate offset-based login verification method of the present invention, which is applied to the server, and may specifically include the following steps:

Step 201, determining the user offset distance according to the latitude and longitude information where the user is located;

In the embodiment of the present invention, the data used to generate the login token is related to user data information, which can ensure the randomness of the generated login token and increase the difficulty of cracking the login token. At this time, the user offset representing the user coordinate offset can be used as the relevant data for generating the login token, based on the difference in the user's daily travel mode in the user coordinate offset, as well as the uncertainty of the number of steps and location data, Ensure the uncrackability of encrypted data and improve the security of user login verification.

Specifically, referring to FIG. 3 , it shows a schematic diagram of the token generation process provided by the embodiment of the present invention. The user offset representing the coordinate offset can be determined through the acquired user data information. The acquired user data The information may be data related to the user's coordinate offset, such as the user's latitude and longitude information, step information, etc., so as to determine the user offset based on the data related to the coordinate offset.

The determined user offset can be used to represent the coordinate offset of the user during the update time interval, then in the acquired user data information, the acquired latitude and longitude information can include the first latitude and longitude where the user is at the current moment and the current distance The moment before the update time interval, that is, the second latitude and longitude where the user was at the last moment, and the acquired step information can include the first movement steps counted at the current moment and the current distance before the update time interval. The moment, that is, the second number of motion steps counted at the previous moment, that is, when the user data information is used to calculate the user offset, the user data information used is before the current moment and the current distance update time interval. The moment of , that is, the data related to the user coordinate offset at the previous moment.

It should be noted that, in order not to violate the personal privacy of the user, the user data information used in the process of generating the login token is mainly collected based on the update time interval, that is, the data obtained is only the current moment As well as the data used at the last moment of data update, the user data information is not recorded in real time, and the collection of user data information based on the update time interval is performed with the user's knowledge and permission.

In order to determine the user offset, the user offset distance related to the user position offset can be determined first, and the time from the current moment to the time before the current distance update time interval is calculated, that is, the user within the time period of the previous moment The offset distance can specifically obtain the latitude and longitude information where the user is located, and determine it through the first latitude and longitude where the user is at the current moment and the time before the current distance update time interval, that is, the second latitude and longitude where the user was at the previous moment.

Specifically, as shown in Figure 4, a plane Cartesian coordinate system can be constructed with the corresponding coordinate point of the second latitude and longitude as the origin. At this time, in the plane Cartesian coordinate system, the first latitude and longitude and the second latitude and longitude can be used to calculate the update distance from the current distance of the user. The moment before the time interval, that is, the first user offset distance from the previous moment to the current moment; at this time, in order to avoid the overlap of user movement distances, the randomness can be increased based on any randomly selected moment to increase The hashability of the subsequent generated login token can be specifically expressed as a time before the current distance update time interval, that is, randomly select any time within the time period from the previous time to the current time, and use the first user Based on the offset distance, the current moment and any selected moment, the second user offset distance from the selected moment to the previous moment is calculated.

For example, assume that the user's current location, that is, the coordinate point corresponding to the first longitude and latitude where the user is located at the current moment t1 is point a, the first longitude and latitude of which is (x1, y1), and the previous moment is t2, assuming that the set update The time interval is one hour, and t2 can be expressed as the time before the current time is advanced by one hour. At this moment, the corresponding coordinate point of the user's second longitude and latitude can be point b, and its second longitude and latitude is (x2, y2). Then, a plane Cartesian coordinate system can be constructed with point b as the origin, and then the vertical coordinate point of point a in the plane Cartesian coordinate system can be taken, that is, point c to form a right triangle, and the first user within the time period from t2 to t1 can be determined The offset distance is √(x1 ² +y1 ² ).

At this time, any moment t3 can be randomly selected in the time interval from t2 to t1. Assuming that the user moves at a constant speed during this time, the second user offset distance of the user in this time period from t2 to t3 can be expressed as (t3- t2)/(t1-t2)*√(x1 ² +y1 ² ).

It should be noted that if the position of the first longitude and latitude obtained by the user at time t1 and the second longitude and latitude obtained by the user at time t2 do not change, the user's city or district center can be taken as point b, that is, as the construction The origin of the rectangular coordinate system of the plane.

Step 202, determine user offset according to user offset distance and steps information;

As shown in FIG. 3 , in order to determine the user offset, in addition to calculating the user offset distance, the step information may also be processed to determine the user offset based on the processed data and the user offset distance.

Specifically, the third number of exercise steps of the user from the previous moment to the current moment may be calculated by using the first number of exercise steps counted at the current moment and the second number of exercise steps counted at the previous moment. For example, assuming that the first number of motion steps counted at the current moment t1 is Z1, and the previous moment is t2, assuming that the set update time interval is one hour, t2 can be expressed as the moment before the current time is one hour ahead, The second number of motion steps counted at this moment is Z2. At this time, the third number of motion steps can be calculated by subtracting the second number of motion steps Z1 from the first number of motion steps Z1, which is expressed as (Z1-Z2).

Wherein, the initial moment for counting the number of motion steps can be 00:00 in the morning, that is, counting the number of motion steps from the early morning to obtain the first motion step number Z1 counted at the current time t1 and the counted number of motion steps Z1 at the previous time t2 The second number of motion steps Z2. It should be noted that the user's travel mode may be traveling by car during the time period from t2 to t1. At this time, the first number of exercise steps Z1 and the second number of exercise steps Z2 have not changed. The second number of motion steps Z2 can be directly used for the amount of movement, and the calculation of the third number of motion steps is not performed. It should be noted that the embodiment of the present invention does not acquire the specific travel mode of the user, but focuses on reflecting the relevant data of the point offset by the user.

As shown in Figure 4, the vertical coordinate point c point in the plane coordinate system of the corresponding coordinate point (i.e. point a) of the first longitude and latitude can also be obtained, and point c can form a right-angled triangle with point a and point b. The coordinate points determine the angle chord value of the triangle formed in the plane Cartesian coordinate system, so as to determine the user offset according to the first movement steps, the second user offset distance, the third movement steps and the angle chord value of the formed triangle .

It should be noted that the obtained vertical coordinate point c of point a in the plane coordinate system can not only be expressed as the vertical coordinate point c (x1,0) of point a perpendicular to the horizontal axis as shown in Figure 4 , which can also be expressed as point c (0, y1), the vertical coordinate point of point a perpendicular to the vertical axis.

The angle sine values of the formed triangle may include a first angle sine value, a second angle cosine value and a third angle tangent value. Take the vertical coordinate point c (x1,0) of point a perpendicular to the horizontal axis as an example, as shown in Figure 4, the formed right triangle is △ABC, at this time, ∠abc can be recorded as ∠d, and ∠acb is recorded as ∠f, and ∠bac is recorded as ∠e, then the sine value of the first angle can be expressed as the sine value of ∠d (ie sin∠d), and the cosine value of the second angle can be expressed as the cosine value of ∠f ( Namely cos∠f), the tangent value of the third angle can be expressed as the tangent value of ∠e (ie tan∠e).

Among them, the first angle ∠d can be expressed as the angle formed by the AB side and the BC side, the second angle ∠f can be expressed as the included angle formed by the AC side and the BC side, and the third angle ∠e can be expressed as the AB side It should be noted that the method for determining the first angle, the second angle, and the third angle for the angle formed with side AC is applicable to the case where the vertical coordinate point c is located on the horizontal axis and the vertical axis.

In the embodiment of the present invention, after calculating the third number of motion steps (Z1-Z2) and obtaining the angle chord values of the formed triangles, the first number of motion steps Z1 and the first angle sine value sin∠d can be used The product of the third motion steps (Z1-Z2) and the second angle cosine value cos∠f, and the offset distance from the second user (t3-t2)/(t1-t2)*√(x1 ² +y1 ² ) and the product of the third angle tangent tan∠e to calculate the user offset.

That is, the formula used to calculate the user offset can be expressed as:

Z1*sin∠d+(Z1-Z2)*cos∠f+((t3-t2)/(t1-t2)*√(x1 ² +y1 ² ))*tan∠e

Step 203, splicing the user login account number, user login password, user's movement direction at the current moment and the current moment in the user login information with the user offset, and encrypting to generate a login token;

After obtaining the user offset generated based on the information related to the user offset location, in addition to using the user offset indicating the coordinate offset of the user during the update time interval as the relevant data for generating the login token, User login information can be obtained, and the user login information and user offset can be used as relevant data for generating a login token.

The acquired user login information may include other data related to the user coordinate offset, such as the user's location at the current moment, in addition to the routinely required user login account and user login password when the client is logging in. Movement direction, current time, etc., to further ensure the uncrackability of encrypted data based on the uncertainty of these data, and improve the security of user login verification.

In practical applications, in the process of encrypting and generating a login token based on user login information and user offset, the spliced content can be encrypted and generated by splicing the user login information and the determined user offset .

Specifically, the user login account, the user login password, the direction of movement of the user at the current moment, and the current time can be obtained from the user login information, and the current time can be converted into the millisecond value of the current time. Specifically, the hour contained in the current moment can be compared with Minutes are converted into seconds respectively, and the second value contained in the current time is added to the converted second value and then converted into a millisecond value; then the user login account, user login password, and the user's current location at the current time can be added The direction of movement and the millisecond value of the current time are spliced to obtain encrypted content, which is expressed as the user login account + user login password + the direction of movement of the user at the current moment + the millisecond value of the current moment + Z1*sin∠d+(Z1-Z2)*cos ∠f+((t3-t2)/(t1-t2)*√(x1 ² +y1 ² ))*tan∠e.

Among them, the direction of movement of the user at the current moment can be mainly determined by setting due east (i.e. the positive semi-axis of the X axis), due west (i.e. the negative semi-axis of the X axis), due south (i.e. the negative semi-axis of the Y axis), and due north (i.e. the positive semi-axis of the Y axis), northeast (i.e. the first quadrant), southeast (i.e. the second quadrant), southwest (i.e. the third quadrant), and northwest (i.e. the fourth quadrant) and other eight directions into an array, The corresponding motion direction is determined by judging the quadrant that point a belongs to in the plane Cartesian coordinate system.

It should be noted that the direction of movement can be determined based on the quadrant where the current location is located, and the established array is mainly established for the direction of the user, which can be used to store the direction of movement of the user at different update moments, so that It is used to obtain the corresponding running direction during token generation. For example, assuming that the user’s moving direction is northeast at time t2, the array can be expressed as (0,0,0,0,1,0,0,0 ); and at the next update time t1, if the user's movement direction is southeast, the values in the array will also be changed accordingly. In addition to the above method of creating an array for storage, other methods may be used for storing the motion direction, which is not limited in this embodiment of the present invention.

Then, in a specific implementation, the encrypted content can be encrypted according to the preset encryption method to generate a login token, specifically through the MD5 algorithm (Message-DigestAlgorithm 5, information-digest algorithm 5, used to ensure the integrity and consistency of information transmission) Cryptographically generate a login token for login verification based on the generated login token.

Step 204, within the validity period of the login, if the login request sent by the client carries the generated login token, then the login verification is passed.

After the login token is generated, the user terminal can be logged in and verified according to the generated login token. Since the data used to generate the login token is related to the user data information, the randomness of the generated login token is guaranteed, and Based on the uncertainty of the user data information for determining the user coordinate offset, it can also ensure the uncrackability of encrypted data and improve the security of user login verification.

In practical applications, after the server generates the login token, it can cache the generated login token and return the login token to the user. At this time, when the client uses the user login account and user login password for account login, the login request sent usually carries the login token generated by the server. When the server receives the login request, it can determine the login token. Whether the request carries a login token, and whether the carried login token is within the login validity period, that is, whether the carried login token is consistent with the cached login token. At this time, within the login validity period, if the client sends If the login request carries the generated login token, it is determined that the current login verification of the client is passed.

In a preferred embodiment, the generated login token has the same set login validity period as the update time interval, at this time, the generated login token can be updated based on the update time interval. The login token within is invalid. Exemplarily, assuming that the set update time interval is one hour, the generated login token will be updated every hour. Specifically, user data information can be re-collected every hour, and according to the re-collected user The data information regenerates the login token, that is, the specific implementation manner of repeating the aforementioned steps 201 to 203 based on the set update time interval.

It should be noted that the update time interval may not only refer to the time interval for collecting user data information, but also refer to the update time of the subsequent login token generated, and may also refer to the generated login token The login validity period of the token, and the specific setting of the update time interval can be mainly set based on actual business conditions, which is not limited by the embodiment of the present invention.

In the embodiment of the present invention, the server can acquire user data information, and determine the user offset according to the acquired user data information, and the determined user offset can be used to represent the coordinate offset of the user during the update time interval, At this time, a login token may be generated by encrypting the user login information and the user offset used to represent the coordinate offset, so as to perform login verification on the user terminal. The data used to generate the login token is related to the user data information, which ensures the randomness of the generated login token and the uncertainty of the user data information based on the determination of the user coordinate offset, and can also ensure the unreliability of the encrypted data. Crackability, improve the security of user login verification.

Referring to FIG. 5 , it shows a schematic diagram of an application scenario of login verification based on coordinate offset provided by an embodiment of the present invention, involving a client 510 and a server 511, and the client 510 and the server 511 are connected in communication, wherein the client 510 can By inputting the user login account number and user login password, a login request is initiated to the server 511. At this time, the server 511 needs to perform login verification on the login request initiated by the user terminal. The login verification is not implemented by accessing the database to verify the account password. Instead, it is implemented through the login token Token carried in the login request.

In a specific implementation, the server 511 may cache the generated login token, and return the login token to the client 510 . At this time, when the user terminal uses the user login account and user login password to log in to the account, the login request sent can usually carry the login token generated by the server 511. When the server 511 receives the login request, it can pass Determine whether the login request carries a login token, and whether the carried login token is within the login validity period, that is, whether the carried login token is consistent with the cached login token. At this time, within the login validity period, if the client If the login request sent by 510 carries the generated login token, it can be determined that the current login verification of the client 510 is passed.

Wherein, the generation process of the login token may be as shown in FIG. 3 . The data used to generate the login token is related to user data information, which can ensure the randomness of the generated login token and increase the difficulty of cracking the login token. At this time, the user offset representing the user coordinate offset can be used as the relevant data for generating the login token, based on the difference in the user's daily travel mode in the user coordinate offset, as well as the uncertainty of the number of steps and location data, Ensure the uncrackability of encrypted data and improve the security of user login verification.

For example, assuming that the update time interval is one hour, the current time t1 is 2022-06-2308:13:26, the user's current location, that is, the coordinate point corresponding to the first longitude and latitude where the user is at the time t1 is point a, and its first The first latitude and longitude is (116.3852581°, 40.0106419°), and the first counted number of motion steps Z1 is 3536; and the user’s second latitude and longitude at the last moment t2 is 2022-06-2307:13:26. The corresponding coordinate point is point b, its second latitude and longitude is (116.3727537°, 39.9978197°), and the counted second number of motion steps Z2 is 2679.

At this time, as shown in Figure 4, a plane Cartesian coordinate system can be constructed with point b as the origin, then the first user offset distance of the user in the past hour can be calculated as √(116.3852581^2+40.0106419^2), at this time Any time t3 can be randomly selected between two times t1 and t2, for example, t3 is 2022-06-2307:36:11, and the user is set to exercise at a constant speed within this time interval, then the user will The offset distance during the period from -06-2307:13:26 (ie t2) to 2022-06-2307:36:11 (ie t3) is (07:36:11-07:13:26)/ (08:13:26-07:13:26)*√(116.3852581^2+40.0106419^2); and point b is in the first quadrant, it is determined that the user's movement direction at the current moment is northeast, and the user is updating time The number of motion steps Z1-Z2 at intervals (that is, within one hour) is 857. At this time, the encrypted content M can be obtained by splicing the user login account, user login password, the user's movement direction at the current moment, and the millisecond value of the current time. That is 123456789 (user login account) + 88888888 (user login password) + northeast + 1655943206 (millisecond value at the current moment) + 3536**sin∠d+857*cos∠f+(07:36:11-07:13:26 )/(08:13:26-07:13:26)*√(116.3852581^2+40.0106419^2)*tan∠e.

服务端511将M通过MD5算法进行加密后，即可生成登录令牌v1sa65g16ad1b6fd6z1b6df6SDFcDvDV5v61V6v1d6515165v61vs74cs7df1v6s1vG16G1sd6VDv11v66VSvdfh1a5r6h4a61g6dfz1b6z54bfz61VZD45FUBubyubuVCVK161，服务端将加密得到的登录令牌进行缓存，并返回给客户端，以便用于进行登录验证。

In practical applications, the generated login token has the same login validity period set as the update time interval. At this time, the generated login token can be updated based on the update time interval. The login token that is not within the login validity period Card expires. Exemplarily, assuming that the set update time interval is one hour, the generated login token will be updated every hour. Specifically, user data information can be re-collected every hour, and according to the re-collected user The data information regenerates the login token.

It should be noted that as the number of users increases, various Internet products also increase accordingly. The login verification method based on coordinate offsets proposed in the embodiment of the present invention can be widely used in various Internet products, especially APPs. Strong market potential.

In the embodiment of the present invention, the user offset representing the offset of the user coordinates is used as the relevant data for generating the login token, and the data used to generate the login token is related to the user data information, which can ensure that the generated login token The randomness of the card increases the difficulty of cracking the login token; and, the user data information can include the user's latitude and longitude information and step information, based on the user's daily travel mode, as well as the uncertainty of data such as the number of steps and location, It can ensure the uncrackability of the encrypted data and improve the security of user login verification; further, based on the process of generating a login token through a series of algorithms based on the user's formation, the login token can be verified according to the set update time interval. Regularly updated, while improving the security of the login token amount, it can also ensure the non-repeatability of the generated login token, and even if the encrypted ciphertext is obtained by various means, it cannot pass the traditional ciphertext on the market. The user's account password information is obtained by cracking the encryption method, which increases the randomness of the encrypted data and the difficulty of cracking, and significantly improves the security of the encrypted data. In addition, in order not to infringe on the personal privacy of the user, the user data information used in the process of generating the login token is mainly collected based on the update time interval, that is, only the current data and data update are obtained. The data used at the last moment does not record user data information in real time, and the token generation algorithm proposed by the embodiment of the present invention can reduce the cost of generating login tokens and save system resources.

It should be noted that, for the method embodiment, for the sake of simple description, it is expressed as a series of action combinations, but those skilled in the art should know that the embodiment of the present invention is not limited by the described action sequence, because According to the embodiment of the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 6 , it shows a structural block diagram of an embodiment of a coordinate offset-based login verification device of the present invention, which is applied to the server, and may specifically include the following modules:

The user offset determination module 601 is configured to obtain user data information, and determine a user offset according to the user data information; the user offset is used to represent the coordinate offset of the user during the update time interval;

A token generating module 602, configured to acquire user login information, and generate a login token according to the user login information and the user offset;

A login verification module 603, configured to perform login verification according to the generated login token.

In an embodiment of the present invention, the user data information includes latitude and longitude information and step information of the user; the user offset determination module 601 may include the following submodules:

A user offset distance determining submodule, configured to determine the user offset distance according to the latitude and longitude information where the user is located;

The user offset determination submodule is configured to determine the user offset according to the user offset distance and the step number information.

In an embodiment of the present invention, the latitude and longitude information of the user includes the first latitude and longitude of the user at the current moment and the second latitude and longitude of the user at the previous moment before the update time interval, and the step number information includes the current latitude and longitude of the user. The first number of motion steps counted at the moment and the second number of motion steps counted at the previous moment before the update time interval;

The user offset distance determination submodule may include the following units:

A coordinate system construction unit, configured to construct a plane Cartesian coordinate system with the second latitude and longitude as the origin;

The first user offset distance determination unit is configured to use the first latitude and longitude and the second latitude and longitude in the plane Cartesian coordinate system to calculate the user's second distance from the previous moment before the distance update time interval to the current moment. a user offset distance;

The second user offset distance determining unit is configured to randomly select any time within the time period from the previous moment before the distance update time interval to the current moment, and adopt the first user offset distance, the current moment and the At any selected moment, the second user offset distance of the user from the selected moment to the previous moment before the update time interval is calculated.

In an embodiment of the present invention, the user offset distance includes any time selected within the time period from the last time before the distance update time interval to the current time, and the second user at the current time offset distance;

The user offset determination submodule may include the following units:

The third motion step determination unit is configured to use the first motion step counted at the current moment and the second motion step counted at the previous moment before the update time interval to calculate the user's distance before the update time interval The number of third movement steps from the previous moment to the current moment;

An angle chord determination unit, configured to obtain the vertical coordinate point of the corresponding coordinate point of the first latitude and longitude in the plane coordinate system, and determine the angle chord value of the triangle formed in the plane Cartesian coordinate system according to the vertical coordinate point ;

The user offset determining unit is configured to determine the user offset according to the first movement steps, the second user offset distance, the third movement steps and the angle chords of the formed triangles.

In an embodiment of the present invention, the angle sine value includes a first angle sine value, a second angle cosine value, and a third angle tangent value; the user offset determination unit may include the following subunits:

The user offset determining subunit is used to use the product of the first motion steps and the sine value of the first angle, the product of the third motion steps and the second angle cosine value, and the product of the second The sum of the product of the user offset distance and the tangent of the third angle is used to calculate the user offset.

In one embodiment of the present invention, the token generation module 602 may include the following submodules:

The user login information acquisition sub-module is used to acquire the user login account number, user login password, movement direction of the user at the current moment and the current moment in the user login information;

The encrypted content generation sub-module is used to convert the current time into the millisecond value of the current time, and convert the user login account, the user login password, the direction of movement of the user at the current moment, the millisecond value of the current time, and the User offset, splicing to get encrypted content;

The token generation sub-module is used to encrypt the encrypted content according to a preset encryption method to generate a login token.

In an embodiment of the present invention, the login token takes the update time interval as the login validity period; the login verification module 603 may include the following submodules:

The login verification sub-module is configured to pass the login verification if the login request sent by the client carries the generated login token within the validity period of the login.

The login verification device based on coordinate offset proposed by the embodiment of the present invention can obtain user data information, and determine the user offset according to the acquired user data information, and the determined user offset can be used to indicate During the coordinate offset of the user, at this time, a login token can be generated by encrypting the user login information and the user offset used to represent the coordinate offset, so as to perform login verification on the user terminal. The data used to generate the login token is related to the user data information, which ensures the randomness of the generated login token and the uncertainty of the user data information based on the determination of the user coordinate offset, and can also ensure the unreliability of the encrypted data. Crackability, improve the security of user login verification.

As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The embodiment of the present invention also provides an electronic device, including:

It includes a processor, a memory, and a computer program stored on the memory and capable of running on the processor. When the computer program is executed by the processor, each process of the above embodiment of the login verification method based on coordinate offset is realized, and The same technical effect can be achieved, so in order to avoid repetition, details will not be repeated here.

The embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, each process of the above-mentioned embodiment of the login verification method based on coordinate offset can be realized, and can To achieve the same technical effect, in order to avoid repetition, no more details are given here.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, devices, or computer program products. Accordingly, embodiments of the invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of the invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

Embodiments of the present invention are described with reference to flowcharts and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor or processor of other programmable data processing terminal equipment to produce a machine such that instructions executed by the computer or processor of other programmable data processing terminal equipment Produce means for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the The instruction means implements the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded into a computer or other programmable data processing terminal equipment, so that a series of operational steps are performed on the computer or other programmable terminal equipment to produce computer-implemented processing, thereby The instructions executed above provide steps for implementing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

Having described preferred embodiments of embodiments of the present invention, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, the appended claims are intended to be construed to cover the preferred embodiment and all changes and modifications which fall within the scope of the embodiments of the present invention.

Finally, it should also be noted that in this text, relational terms such as first and second etc. are only used to distinguish one entity or operation from another, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or terminal equipment comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements identified, or also include elements inherent in such a process, method, article, or end-equipment. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or terminal device comprising said element.

A login verification method based on coordinate offset, a login verification device based on coordinate offset, a corresponding electronic device, and a corresponding computer storage medium provided by the present invention have been introduced above in detail. Application of specific examples has explained principle of the present invention and implementation mode, and the description of above embodiment is only used to help understanding method of the present invention and core idea thereof; Simultaneously, for those of ordinary skill in the art, according to thought of the present invention , there will be changes in specific implementation methods and application ranges. In summary, the content of this specification should not be construed as limiting the present invention.

Claims (10)

1. A login verification method based on coordinate offset, characterized in that it is applied to the server, and the method comprises: Obtain user data information, and determine a user offset according to the user data information; the user offset is used to represent the coordinate offset of the user during the update time interval; Obtain user login information, and generate a login token according to the user login information and the user offset; Login verification is performed based on the generated login token. 2. The method according to claim 1, wherein the user data information includes latitude and longitude information and step information of the user; and determining the user offset according to the user data information includes: determining the user offset distance according to the latitude and longitude information of the user; Determine a user offset according to the user offset distance and the step number information. 3. The method according to claim 2, wherein the latitude and longitude information of the user includes the first latitude and longitude of the user at the current moment and the second latitude and longitude of the user at the previous moment before the update time interval, the The number of steps information includes the first number of motion steps counted at the current moment and the second number of motion steps counted at the previous moment before the update time interval; The determining the user offset distance according to the latitude and longitude where the user is located includes: Constructing a plane Cartesian coordinate system with the second latitude and longitude as the origin; In the planar Cartesian coordinate system, using the first latitude and longitude and the second latitude and longitude to calculate the first user offset distance of the user from the previous moment before the distance update time interval to the current moment; Randomly select any time within the time period from the previous time before the distance update time interval to the current time, and use the first user offset distance, the current time, and any selected time to calculate the user's distance from the selected time. The second user offset distance from any moment of to the previous moment before the update time interval. 4. The method according to claim 2 or 3, wherein the user offset distance includes any time selected within the time period from the previous moment before the distance update time interval to the current moment, The second user offset distance to the current moment; The determining the user offset according to the user offset distance and the step number information includes: Using the first number of motion steps counted at the current moment and the second number of motion steps counted at the previous moment before the update time interval, calculate the user's third movement steps from the previous moment before the update time interval to the current moment. number of steps; Obtain the vertical coordinate point of the corresponding coordinate point of the first latitude and longitude in the plane coordinate system, and determine the angle chord value of the triangle formed in the plane Cartesian coordinate system according to the vertical coordinate point; The user offset is determined according to the first number of motion steps, the second user offset distance, the third number of motion steps, and the angle chord of the formed triangle. 5. The method according to claim 4, wherein the angle chord value comprises a first angle sine value, a second angle cosine value and a third angle tangent value; the offset distance according to the second user , the number of third motion steps and the angle chord of the formed triangle determine the user offset, including: Using the product of the first number of motion steps and the sine value of the first angle, the product of the third number of motion steps and the cosine value of the second angle, and the offset distance from the second user and the tangent value of the third angle The sum of the products of , calculates the user offset. 6. The method according to claim 1, wherein the generating a login token according to the user login information and the user offset comprises: Acquiring the user login account number, user login password, user's movement direction at the current moment and the current moment in the user login information; Convert the current time into milliseconds of the current time, and concatenate and encrypt the user login account, user login password, the direction of movement of the user at the current moment, the milliseconds of the current time, and the user offset content; Encrypt the encrypted content according to a preset encryption method to generate a login token. 7. The method according to claim 1 or 6, wherein the login token takes the update time interval as the login validity period; and performing login verification according to the generated login token includes: During the login validity period, if the login request sent by the client carries the generated login token, the login verification is passed. 8. A login verification device based on coordinate offset, characterized in that it is applied to a server, and the device includes: A user offset determining module, configured to obtain user data information, and determine a user offset according to the user data information; the user offset is used to represent the coordinate offset of the user during the update time interval; A token generating module, configured to obtain user login information, and generate a login token according to the user login information and the user offset; The login verification module is configured to perform login verification according to the generated login token. 9. An electronic device, characterized in that it comprises: a processor, a memory, and a computer program stored on the memory and capable of running on the processor, when the computer program is executed by the processor, the The login verification method based on coordinate offset according to any one of claims 1 to 7. 10. A computer-readable storage medium, wherein a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the coordinate-based Offset login authentication method.

Images