CN202218261U - Network Login Security Appliance - Google Patents

Abstract

A network entry security device, comprising: the system comprises a server, a conditional verification module and a database, wherein the server is connected with user terminal equipment through the Internet; the conditional verification module is arranged on the server and used for receiving the operation and protection in an operation interface of the conditional verification module when the user terminal equipment logs in a website to which the server belongs through the Internet, the conditional verification module comprises an account input unit for inputting a user account, a password input unit for inputting a user password and a custom question-and-answer unit, the custom question-and-answer unit is a question and answer requiring the user to log in the website in a custom mode, when the answer corresponds to the answer meeting the question, the user can be verified and logged in the website operation, and the database is connected with the server and used for storing data of the conditional verification module.

Description

Network Login Security Appliance

technical field

The utility model relates to a safety device, in particular to a safety device for network login.

Background technique

Due to the recent prevalence of network viruses, hacker programs, and phishing web pages, users are extremely vulnerable to attacks such as Trojan horse virus programs and worm programs. Once these attacks infiltrate personal computers or corporate servers, the losses caused are often unpredictable; moreover, Users also often leak personal information, login passwords, or credit card, debit card and other information by mistakenly entering phishing webpages and being stolen or fraudulently used. Generally speaking, due to the advancement of anti-virus technology, excellent anti-virus software and firewalls can indeed eliminate most computer viruses, Trojan horse programs, and worm programs. However, phishing web pages make users hard to guard against.

Because not all Internet users have a considerable concept of information security, and the degree of awareness of potential harm varies from person to person, often due to the user's temporary negligence, or the interface of the phishing webpage is too similar or sophisticated, resulting in If the user leaks personal confidential information or passwords without suspecting him, by the time the user finds out, his own rights have already been violated. The most effective way to prevent phishing webpages and websites is not the antivirus software itself, but the user's usage and vigilance. Therefore, how to provide an effective security mechanism without relying on users themselves to prevent phishing webpages is very important. topic.

In the current security mechanism of websites and webpages, there are methods such as security stamps to prevent phishing webpages and websites. However, this method usually needs to lock specific user terminal equipment. If the user changes his terminal equipment, he must It is not convenient to re-provide or set the security stamp. In this mode, phishing webpages can also imitate and then steal user login information. In view of this, how to provide a secure login protection mechanism is a problem that relevant operators want to think about.

Utility model content

In view of this, the purpose of the utility model is to provide a network login security device to solve the technical problem that the prior art cannot provide a secure login protection mechanism.

In order to achieve the above object, the utility model adopts the following technical solutions:

A network login security device, comprising:

a server connected to a user terminal device through the Internet;

A conditional verification module, connected to the server, the conditional verification module includes:

An account input unit for inputting a user account;

a password input unit for inputting the user password; and

A self-defined question and answer unit, which requires the user to customize a question and an answer for logging in to the website, and when the answer corresponds to the answer matching the question, the user can be authenticated and the user can log in to the website for operation; and

A database is connected to the server and stores the data of the conditional verification module.

According to the network login security device described in the present invention, the conditional verification module further includes a login condition unit, which provides user-defined login conditions.

According to the network login security device described in the present invention, the question and the answer of the self-defined question and answer unit are a text, a password, a picture file, a digitally signed file or a key.

According to the network login security device described in the present invention, the self-defined question and answer unit further includes an advanced setting unit, which is configured to present the question on an operation interface.

The network login security device according to the present invention further includes an administrator terminal device connected to the server and evaluating the answer entered by the user into the self-defined question and answer unit.

According to the network login security device of the present invention, the server further includes a security verification module for verification.

According to the network login security device described in the present invention, the security verification module performs verification by means of a digital certificate, a signature or a key.

According to the network login security device of the present invention, the answer of the conditional verification module is sent to the server by inputting or uploading.

According to the network login security device described in the present invention, the conditional verification module further includes an error tolerance rate calculation unit, when the error rate of the answer is higher than the standard, the account is blocked and a new login password is generated for the user end.

Compared with the prior art, the utility model has the following advantages and positive effects:

The utility model requires the user to customize the questions and answers for logging in to the website through the self-defined question and answer unit of the conditional verification module. Only by answering the corresponding answers to the questions can the user be verified and the user can log in to the website for operation. User-defined keys, in order to further prevent users from accidentally leaking personal login information on phishing webpages, and being hacked and causing damage to personal rights.

The detailed features and advantages of this utility model are described in detail below in the implementation mode, and its content is enough to make any person familiar with the related art understand the technical content of this utility model and implement it accordingly, and according to the content disclosed in this specification and the accompanying drawings, any Those skilled in the art can easily understand the purpose and advantages of the present invention.

Description of drawings

Fig. 1 is the structural representation of the utility model;

Fig. 2 is a schematic block diagram of the utility model;

Fig. 3 is the operation interface schematic diagram (1) of the present utility model;

Fig. 4 is the operation interface schematic diagram (two) of the utility model;

Fig. 5 is a schematic diagram of the step-gathering process of the present invention.

Detailed ways

Please refer to FIG. 1 and FIG. 2 , FIG. 1 is a schematic diagram of the structure, and FIG. 2 is a schematic diagram of a block.

The network login security device 1 includes: a server 10 , a conditional verification module 20 and a database 30 .

The server 10 is connected to the user terminal device 90 via the Internet. Here, the server 10 also includes a security verification module 101. When a user logs in and performs purchase, sale, upload, download, change of personal information, login password, question or answer, etc., the above-mentioned execution can be verified by the security verification module 101. program. The security verification module 101 of this embodiment may perform verification by means of digital certificates, signatures, or keys.

The conditional verification module 20 is installed on the server 10, and is used to operate and protect in the operation interface 21 of the conditional verification module 20 when the user terminal device 90 logs in to the website to which the server 10 belongs through the Internet. 20 includes an account input unit 22 , a password input unit 23 and a self-defined question and answer unit 24 .

The account input unit 22 is an area for the user to input the login account.

The password input unit 23 is an area for the user to input a login password.

The self-defined question and answer unit 24 requires the user to customize the questions that must be asked when logging in to the website and the answers to the corresponding questions. By answering the corresponding answers to the questions, the user can be verified and the user can log in to the website for operation. Here, the question and answer are preferably text, password, image file, digitally signed file or key, but they are not limited to this in actual use. The answer is preferably sent to the server 10 by inputting or uploading.

The self-defined question and answer unit 24 also includes an advanced setting unit 241 for setting how to present multiple questions on the operation interface 21 in an operation mode or sequence when more than two questions are asked.

In this embodiment, the conditional verification module 20 further includes a login condition unit 25, which provides user-defined login conditions for selection and verification. In this embodiment, the conditional verification module 20 further includes an error tolerance rate calculation unit 26 , which provides a standard for defining the error rate of the answer proposed by the user.

The database 30 is connected to the server 10 , and the database 30 is used to store the data input by the user in the conditional verification module 20 .

The network login security device 1 of the present invention also includes a manager terminal device 80 , which is connected to the server 10 and evaluates when the user inputs the answer of the user-defined question and answer unit 24 .

Please refer to Figure 3, Figure 4 and Figure 5, Figure 3 is a schematic diagram of the operation interface (1), Figure 4 is a schematic diagram of the operation interface (2), and Figure 5 is a schematic diagram of the step-by-step process. The operation interface 21 and its process description for users to log in to the webpage and perform security verification.

When the user logs in to the website to which the server 10 belongs and registers an account at the user terminal device 90, the platform provider of the manager terminal device 80 requires the user to specify a login at the password input unit 23 of the operation interface 21 for the above-mentioned execution. At the same time, the platform provider will still require the user to customize the conditional expression of login security in the conditional verification module 20, that is, the user is required to customize the question and answer for his login.

The login question set by the user will be displayed every time the user enters the login password and the password is passed, and then the user is required to enter the corresponding answer. Here, the order in which the questions appear can be sequential or random The order of appearance is determined by the number method, but it is not limited to this. And each question and each answer can be operated in the form of text, password, image file, digitally signed file or key, but not limited thereto.

In particular, since each question and each answer is user-defined, when the user enters the login password and finds that the question displayed on the web page is not set by himself, he can confirm that the web page or website appears. If there is a problem, it is very likely to be a phishing webpage. At this time, the user can log out of the webpage in a timely manner, and reconfirm whether the webpage or website he logs in is correct, so as to prevent it.

However, through the aforementioned operations, the login password is likely to have been stolen, and the question that appeared before may have been discovered and imitated. Even so, the user's account is still highly secure at this time, because the user The custom questions and corresponding answers have not been cracked yet. However, there can be one or more questions. Users are free to use multiple questions for protection. The more questions or the correlation between questions and answers The lower it is, the more secure it is.

The sequence of the above questions may be fixed or variable. The platform provider can evaluate, judge and check based on the corresponding answers to the questions entered. If the entered account number and login password are fraudulently used by unscrupulous people, attempting to log in and steal benefits, because they are not correct users, so other It is impossible to know and provide the corresponding answer, and it is impossible to crack the login procedure. On the other hand, at the same time, the platform provider will decide whether to block the account on the management side based on the answer status of the incorrect answer provided by the incorrect user and Regenerate a new login password, and then send the new login password to the account user's default communication place, such as email or any contact information, and the platform provider also requires the account user to log in with the new password And change the updated login password, questions, and corresponding answers again to ensure the security of their accounts.

After the user logs in his account correctly, if he wants to perform various security operations, including buying, selling, uploading, downloading, or changing personal information, login password, questions and answers, etc., the utility model will 10 also provides a security verification module 101 to verify the above-mentioned executed programs. Here, the security verification module 101 can perform verification in the form of digital certificates, signatures, keys, etc., and the platform provider is allowed to exercise various types of security after the verification is passed. In this way, multiple protections can be perfectly provided, and at the same time, the security mechanism of the network login security device 1 of the present invention is more flexible in use.

The conditional verification module 20 itself can provide user-defined login conditions, and the answers provided by the users can be sent to the server 10 by inputting or uploading. Comparison and verification, similarly, the verification method here can also be combined with digital signature, key, or various encryption and decryption algorithms, but not limited thereto.

The conditional expression defined by the user is a login key. Here, the method disclosed by the network login security device 1 will interpret the login key of the conditional expression by judging the correct status of the corresponding answer, and because Considering that real users also have the situation of inputting wrong answers, so the conditional verification module 20 also includes an error tolerance rate calculation unit 26, and considering that the error rate of general input wrong answers will not be too high, unless provided The user who answers is illegally logged in, and the user who is illegally logged in will cause a very high question error rate because he cannot provide a correct answer, that is, he cannot correctly answer the answer corresponding to the question. Therefore the error tolerance calculation unit 26 itself can define the error standard value, if the error rate corresponding to the answer exceeds the error standard value, the user is not allowed to log in and the account is blocked, and the new user password will be passed to the user. The default communication and contact methods, such as email address, phone number, contact address, etc., are sent to the user, and the user is required to log in to the account again with the newly generated login password, and change the login password, question and corresponding answer again .

The user-defined conditional security mechanism disclosed by the network login security device 1 includes an implementation feature, that is, when the user inputs the answer corresponding to the self-defined question, when the input is wrong, the operation interface 21 will not prompt What the user enters is a wrong answer, but waits until the user has answered all the custom questions before making an interpretation. If it is higher than the aforementioned error standard value, that is, it is below the threshold of safety and fault tolerance, the user will be notified that he cannot log in successfully The advantage of blocking the account is that even if the provider of the answer logs in illegally, he cannot use trial and error to guess or use a brute force attack to crack the corresponding answer. When an illegal login obtains the login account through phishing, there is only one chance to guess the answer to subsequent questions, so the error rate is high, and the network cannot be logged in; when the account of the real user defendant is illegally logged in, You can ask questions, answer questions, and change the login password by yourself, which will ensure the security of the user account.

The user-defined conditional safety mechanism disclosed by the network login security device 1 of the present utility model, its security depends on the user-defined conditional formula, first, the association between user-defined questions and answers The lower the security, the harder it is to be cracked; second, the more user-defined conditional expressions, the higher the security. However, the disadvantage is that it will cause inconvenience to the user when logging in, but how to decide depends on the user himself. The level of security can be changed at any time by customizing the conditional formula and considering the convenience of input.

The platform provider can decide whether the order of appearance of the user-defined conditional expressions is fixed or not, and at the same time adjust it according to different needs and security situations; in addition, the verification method of questions and answers can also be adjusted according to the situation, for example, for text , Digitally compare; or verify the signature for the digitally signed document; it is also possible to verify the answer provided by the user through encryption and decryption technology. The conditional round trip can be one-time or multiple times. If the encryption and decryption technology is integrated, the user end and the platform end can also pass the encrypted and decrypted files through this question and answer method, and then the back-end program To perform calculations, these are all feasible application methods.

Although the technical content of the present utility model has been disclosed above with preferred embodiments, it is not intended to limit the present utility model. Anyone who is familiar with the art should make some changes and modifications without departing from the spirit of the present utility model. It falls within the scope of the present utility model, so the protection scope of the present utility model should be defined by the claims.

Claims (9)

1. A network login security device, characterized in that it comprises: a server connected to a user terminal device through the Internet; A conditional verification module, connected to the server, the conditional verification module includes: An account input unit for inputting a user account; a password input unit for inputting the user password; and A self-defined question and answer unit, which requires the user to customize a question and an answer for logging in to the website, and when the answer corresponds to the answer matching the question, the user can be authenticated and the user can log in to the website for operation; and A database is connected to the server and stores the data of the conditional verification module. 2. The network login security device according to claim 1, wherein the conditional authentication module further comprises a login condition unit, which provides user-defined login conditions. 3. The network login security device according to claim 1, wherein the question and the answer of the self-defined question and answer unit are a text, a password, a picture file, a digitally signed file, or a key. 4 . The network login security device according to claim 1 , wherein the self-defined question and answer unit further comprises an advanced setting unit for setting the question to be presented on an operation interface. 5. The network login security device according to claim 1, further comprising an administrator terminal device connected to the server and evaluating the answer input by the user into the self-defined question and answer unit. 6. The network login security device according to claim 1, wherein the server further includes a security verification module for verification. 7 . The network login security device according to claim 6 , wherein the security verification module performs verification by means of a digital certificate, a signature or a key. 8. The network login security device according to claim 1, wherein the answer of the conditional verification module is sent to the server by inputting or uploading. 9. The network login security device according to claim 1, wherein the conditional verification module further includes a fault-tolerance rate calculation unit, and when the error rate of the answer is higher than the standard, the account is blocked and a new account is generated. The login password for the client.

Images