阅读说明：本技术 一种提升滑块验证码安全性的方法 (Method for improving safety of slider verification code ) 是由 李元俊 于 2021-08-25 设计创作，主要内容包括：本发明公开了一种提升滑块验证码安全性的方法,属于网络安全技术领域,解决了传统技术中滑块人机验证难以发现是机器行为,验证码安全性低的问题,其包括以下步骤：步骤A：在滑块的拖动路径上,加入随机数量与位置的路径节点；步骤B：对路径节点的纵坐标进行随机调整,将滑块的拖动路径调整为非水平路径,实现了增加自动验证模拟难度,提高滑块的验证安全性的技术效果。(The invention discloses a method for improving safety of a slider verification code, belongs to the technical field of network safety, and solves the problems that machine behaviors are difficult to find by slider man-machine verification in the traditional technology, and the safety of the verification code is low, and the method comprises the following steps: step A: adding random number and position of path nodes on a dragging path of the sliding block; and B: the vertical coordinates of the path nodes are randomly adjusted, the dragging path of the sliding block is adjusted to be a non-horizontal path, the automatic verification simulation difficulty is increased, and the technical effect of improving the verification safety of the sliding block is achieved.)

1. A method for improving the safety of a slider verification code is characterized by comprising the following steps:

step A: adding random number and position of path nodes on a dragging path of the sliding block;

and B: and randomly adjusting the vertical coordinate of the path node, and adjusting the dragging path of the slide block into a non-horizontal path.

2. The method for improving the security of the slider verification code according to claim 1, wherein the specific process of the step a is as follows:

step A1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step A2: a random point C is generated with coordinates (XC, YC), where XC ═ XA + XB)/2 and YC ═ YA ═ YB.

3. The method for improving the security of the slider verification code according to claim 2, wherein the specific process of the step B is as follows:

step B1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step B2: and generating a RANDOM point C with coordinates of (XC and YC), adjusting the YC to YC1, wherein YC1 is YC + RANDOM.

Technical Field

The invention belongs to the technical field of network security, and particularly relates to a method for improving security of a slider verification code.

Background

In the current scenes of registration and login and the like, in order to improve the safety, besides the password, a plurality of man-machine verification modes are provided, wherein a slider verification code is one of the man-machine verification modes.

The existing slide block verification code basically adopts a mode of picture + sliding button or single sliding button, and a user horizontally slides the sliding button from left to right to enable pictures (jigsaw puzzle) to be matched; or directly sliding the button horizontally from left to right; to achieve the purpose of verification.

In the verification mode, in the current excellent practice, behavior track data generated by a user is added through a verification code background to perform machine learning modeling, and a human-computer judgment result is returned by combining multiple dimensional information such as access frequency, geographic position, historical records and the like; some verifications also add acceleration determination when dragging the slider (whether the slider is completely uniform) and picture goodness determination (whether the picture is completely matched when dragging the slider).

However, in the above manner, it is found that there still exists a safety problem, for example, some known technologies of process automation (such as RPA, etc.) can be used to perform verification by simulating a manual dragging slider by a machine, can also be used to simulate acceleration or uniform speed behavior in a dragging process, and can also be used to adjust image goodness of fit after dragging the slider. Under the technology of the process automation, the picture slider is difficult to find machine behavior through the man-machine verification, and the security of the verification code is obviously reduced.

Disclosure of Invention

Aiming at the problems that the slide block man-machine verification in the prior art is difficult to find machine behaviors and the verification code safety is low, the invention provides a method for improving the safety of a slide block verification code, which aims to solve the problems that: the automatic verification simulation difficulty is increased, and the verification safety of the sliding block is improved.

The technical scheme adopted by the invention is as follows:

a method for improving safety of a slider verification code comprises the following steps:

step A: adding random number and position of path nodes on a dragging path of the sliding block;

and B: randomly adjusting the vertical coordinate of the path node, and adjusting the dragging path of the sliding block into a non-horizontal path;

by adopting the scheme, the randomly generated dragging path is added in the dragging process of the sliding block, the original linear dragging mode is changed, the difficulty of the existing automatic verification simulation is greatly increased, and the verification safety is improved.

The specific process of the step A is as follows:

step A1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step A2: a random point C is generated with coordinates (XC, YC), where XC ═ XA + XB)/2, and YC ═ YA ═ YB.

The specific process of the step B is as follows:

step B1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step B2: and generating a RANDOM point C with coordinates of (XC and YC), adjusting the YC to YC1, wherein YC1 is YC + RANDOM.

In summary, due to the adoption of the technical scheme, the invention has the beneficial effects that:

1. the randomly generated dragging path is added in the dragging process of the sliding block, the original linear dragging mode is changed, the difficulty of the existing automatic verification simulation is greatly increased, and the verification safety is improved.

Drawings

The invention will now be described, by way of example, with reference to the accompanying drawings, in which:

FIG. 1 is a prior art schematic of one embodiment of the present invention;

FIG. 2 is a schematic diagram of random point C initialization according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of a technical comparison of an embodiment of the present invention.

Detailed Description

All of the features disclosed in this specification, or all of the steps in any method or process so disclosed, may be combined in any combination, except combinations of features and/or steps that are mutually exclusive.

The present invention will be described in detail with reference to fig. 1 and 2.

The first embodiment is as follows:

a method for improving safety of a slider verification code comprises the following steps:

step A: adding random number and position of path nodes on a dragging path of the sliding block;

and B: randomly adjusting the vertical coordinate of the path node, and adjusting the dragging path of the sliding block into a non-horizontal path;

the specific process of the step A is as follows:

step A1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step A2: a random point C is generated with coordinates (XC, YC), where XC ═ XA + XB)/2, and YC ═ YA ═ YB.

The specific process of the step B is as follows:

step B1: setting two initial points A and B, and initializing two-dimensional coordinates (X, Y), setting the coordinates of the initial point A as (XA, YA) and the coordinates of the initial point B as (XB, YB).

Step B2: and generating a RANDOM point C with coordinates of (XC and YC), adjusting the YC to YC1, wherein YC1 is YC + RANDOM.

In the above embodiment, the two-dimensional coordinates are defined as (X, Y), X representing the abscissa, and Y representing the ordinate. The coordinate position (XA, YA) of the starting point A is (5, 5), the coordinate position (XB, YB) of the ending point B is (15, 5), and for the selection of the abscissa of the point C, XC can be positioned as (XB + XA)/2, and the coordinate (XC, YC) of the point C is obtained as (10, 5).

After the initial positioning of the initial C point coordinate is completed, the ordinate of the C point coordinate is adjusted, the adjusted C point coordinate is (XC, YC1), where YC1 is YC + RANDOM, where RANDOM is a RANDOM number, and a range value thereof can be set, in this embodiment, the RANDOM is selected to be 2, and the final C point coordinate is (10,7), and a position thereof is as shown in fig. 3, where a broken line ACB is a path that a user needs to trace, an upper diagram in fig. 3 is a sliding path in the conventional art, and is a horizontal straight line, and a lower diagram is a sliding path of a RANDOM path provided by the present invention, and is a broken line of a RANDOM path.

It should be noted that the functions of selecting the RANDOM point C, setting the RANDOM number RANDOM, and the like are common knowledge of those skilled in the art, and therefore, the detailed description thereof is omitted.

The above-mentioned embodiments only express the specific embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the present application. It should be noted that, for those skilled in the art, without departing from the technical idea of the present application, several changes and modifications can be made, which are all within the protection scope of the present application.