TWI638307B - Multi-factor login system and login method - Google Patents
Multi-factor login system and login method Download PDFInfo
- Publication number
- TWI638307B TWI638307B TW106126323A TW106126323A TWI638307B TW I638307 B TWI638307 B TW I638307B TW 106126323 A TW106126323 A TW 106126323A TW 106126323 A TW106126323 A TW 106126323A TW I638307 B TWI638307 B TW I638307B
- Authority
- TW
- Taiwan
- Prior art keywords
- login
- menu
- host
- system host
- message
- Prior art date
Links
Landscapes
- Information Transfer Between Computers (AREA)
Abstract
一種多因子登入系統及其登入方法，利用一系統主機，至少一選單主 機與至少一使用者終端，當系統主機收到一登入請求後會顯示一驗證資訊並發送一登入訊息，選單主機用來產生一多重選單內建驗證資訊與複數個無關資訊，並在多重選單中驗證資訊被點選時發送登入通知給系統主機，使用者終端能夠連線系統主機並提出登入請求，依據登入訊息與選單主機建立連接後顯示多重選單供使用者點選，在該系統主機收到該登入通知後登入該系統主機。藉此，本發明不需要使用者設定密碼，使用者只需要連線正確的選單主機並點選多重選單內正確的驗證資訊就能正確的登入系統主機，過程便捷而且符合直覺，並且兼顧安全性。 Multi-factor login system and login method using a system host and at least one menu master Machine and at least one user terminal. When the system host receives a login request, it displays an authentication message and sends a login message. The menu host is used to generate a multi-menu built-in authentication information and a plurality of irrelevant information. When the authentication information in the menu is clicked, a login notification is sent to the system host. The user terminal can connect to the system host and make a login request. After establishing a connection with the menu host according to the login message, a multiple menu is displayed for the user to click. After receiving the login notification, log in to the system host. Therefore, the present invention does not require the user to set a password. The user only needs to connect to the correct menu host and click the correct authentication information in the multiple menus to log in to the system host correctly. The process is convenient and intuitive, and it also takes security into consideration. .
Description
本發明與網路系統的使用者登入驗證機制有關，具體而言是指一種多因子登入系統及其登入方法，利用系統主機動態指定登入主機，並搭配多重選單供使用者點選的方式進行使用者登入驗證，使用者在登入的整個過程當中不需要輸入任何密碼或憑證，兼顧便利性與安全性。 The invention relates to a user login authentication mechanism of a network system, and specifically relates to a multi-factor login system and a login method thereof. The system host is used to dynamically specify a login host, and is used in a manner of multiple menus for users to click. User login authentication, users do not need to enter any password or credentials during the entire login process, taking into account convenience and security.
現有網際網路的使用者登入驗證機制是以帳號搭配密碼為主，為了提高安全性，多半還會搭配數字驗證、圖形驗證或使用者憑證(例如自然人憑證)，使得使用者的登入程序變得繁瑣。此外，許多應用系統會限制使用者所設定密碼的長度與組合難度，甚至強制要求使用者定期更換新的密碼，對使用者造成記憶及使用上極大的負擔。 The existing Internet user login authentication mechanism is mainly based on account and password. In order to improve security, digital authentication, graphical authentication or user credentials (such as natural person credentials) are often used to make the user login process become Tedious. In addition, many application systems limit the length and difficulty of the password set by the user, and even force the user to periodically change the new password, causing a great burden on the user to remember and use.
此外，使用帳號搭配密碼的登入方式很容易遭到駭客破解與竊取，或是以不斷嘗試登入的暴力方式干擾系統主機的正常運作。因此，如何設計出既方便又能兼顧安全性的使用者登入機制成為重要的課題。 In addition, the login method using an account with a password is easy to be cracked and stolen by hackers, or interfere with the normal operation of the system host in a violent manner that constantly attempts to log in. Therefore, how to design a user login mechanism that is both convenient and secure has become an important issue.
有鑑於此，本發明提供一種多因子登入系統，包含有一系統主機，至少一選單主機與至少一使用者終端，其中系統主機收到一登入請求後會顯示一驗證資訊並發送一登入訊息，選單主機用來產生一多重選單內建驗證資訊與複數個無關資訊，並在多重選單中驗證資訊被點選時發送登入通知給系統主機，使用者終端能夠連線系統主機並提出登入請求，依據登入訊息與選單主機 建立連接後顯示多重選單供使用者點選，在該系統主機收到該登入通知後登入該系統主機。 In view of this, the present invention provides a multi-factor login system including a system host, at least one menu host, and at least one user terminal. The system host displays a verification message and sends a login message after receiving a login request. The host is used to generate a multi-menu built-in authentication information and a plurality of irrelevant information, and send a login notification to the system host when the authentication information is selected in the multi-menu. The user terminal can connect to the system host and make a login request. Login message and menu host After the connection is established, a multi-menu is displayed for the user to click, and the system host logs in to the system host after receiving the login notification.
藉此，本發明不需要使用者設定密碼，而改為要求使用者必須依據系統主機的登入訊息連線正確的選單主機，以作為第一道驗證機制，其次使用者必須點選多重選單內正確的驗證資訊，以作為第二道驗證機制，之後就能正確的登入系統主機進行作業，過程便捷而且符合直覺。而且本發明的登入訊息與多重選單都可以設定為動態產生，因此可以避免駭客使用暴力登入的方式來干擾系統主機的運作。 Therefore, the present invention does not require the user to set a password, but instead requires the user to connect to the correct menu host according to the login message of the system host as the first authentication mechanism, and then the user must click the multiple menu to be correct Authentication information as a second authentication mechanism. After that, you can log in to the system host correctly to perform operations. The process is convenient and intuitive. In addition, the login information and multiple menus of the present invention can be set to be dynamically generated, so that a hacker can be prevented from using the brute force login to interfere with the operation of the system host.
本發明的較佳實施態樣為，選單主機的數量為複數個。此外，系統主機產生登入資訊時會自動進行一預定時間的倒數，若在預定時間內未收到選單主機發送的登入通知則拒絕使用者終端的登入請求，進而提高安全性。 In a preferred embodiment of the present invention, the number of menu hosts is plural. In addition, the system host automatically performs a countdown of a predetermined time when the login information is generated. If the login notification sent by the menu host is not received within the predetermined time, the login request of the user terminal is rejected, thereby improving security.
同時，本發明還提供一種多因子登入方法，其步驟包含有：向系統主機提出登入請求，該系統主機接收登入請求後動態指定一選單主機，並顯示一驗證資訊，隨後產生並發送一登入訊息；使用者依據登入訊息連線選單主機，顯示選單主機產生內含驗證資訊與複數個無關資訊的一多重選單；以及點選多重選單中的驗證資訊，使選單主機發送一登入通知至系統主機，因而系統主機接受登入請求。 At the same time, the present invention also provides a multi-factor login method. The steps include: submitting a login request to the system host. The system host dynamically specifies a menu host after receiving the login request, displays a verification message, and then generates and sends a login message. ; The user connects to the menu host according to the login message, displays that the menu host generates a multiple menu containing authentication information and a plurality of irrelevant information; and clicks the authentication information in the multiple menu to cause the menu host to send a login notification to the system host , So the system host accepts the login request.
前述多因子登入系統與登入方法所使用的登入訊息為電子郵件或多媒體訊息，其內容包含有系統主機所指定選單主機的網址或IP位址，能夠適用於一個以上的使用者終端。當使用者終端的數量為二個時，其中一使用者終端連線系統主機並提出登入請求，另一使用者終端接收登入訊息並連線選單主機。如此一來，本發明可以讓使用者帳號對應設置的手機號碼或Email帳號作為 驗證機制的一環。 The login message used in the aforementioned multi-factor login system and login method is an email or a multimedia message, and its content includes the URL or IP address of the menu host designated by the system host, which can be applied to more than one user terminal. When the number of user terminals is two, one of the user terminals connects to the system host and makes a login request, and the other user terminal receives the login message and connects to the menu host. In this way, the present invention can allow the mobile phone number or Email account corresponding to the user account to be set as A part of the authentication mechanism.
10‧‧‧多因子登入系統 10‧‧‧Multi-factor login system
20‧‧‧系統主機 20‧‧‧System Host
30‧‧‧選單主機 30‧‧‧Menu Host
40‧‧‧使用者終端 40‧‧‧user terminal
S1~S6‧‧‧步驟 Steps S1 ~ S6‧‧‧‧
圖1為本發明所提供實施例的系統方塊圖。 FIG. 1 is a system block diagram of an embodiment provided by the present invention.
圖2為本發明所提供實施例的作業流程圖。 FIG. 2 is a working flowchart of the embodiment provided by the present invention.
圖3為本發明所提供實施例中選單主機所提供的多重選單示意圖。 FIG. 3 is a schematic diagram of multiple menus provided by a menu host in the embodiment provided by the present invention.
圖4為本發明所提供實施例中選單主機所提供的另一種多重選單示意圖。 FIG. 4 is a schematic diagram of another multiple menu provided by a menu host in the embodiment provided by the present invention.
為具體說明本發明的具體技術方案與所達成的技術功效，提供一較佳實施例並搭配圖式說明如下。請參閱圖1為本發明所提供一較佳實施例的系統方塊圖，多因子登入系統10包含有一系統主機20、複數個選單主機30與複數個使用者終端40。其中，系統主機20與選單主機30在本實施例中均為網路伺服器，使用者終端40則為使用者所擁有的運算裝置，例如筆電、平板電腦或手機。 In order to specifically explain the specific technical solution of the present invention and the technical effects achieved, a preferred embodiment is provided and illustrated with drawings as follows. Please refer to FIG. 1, which is a system block diagram of a preferred embodiment of the present invention. The multi-factor login system 10 includes a system host 20, a plurality of menu hosts 30 and a plurality of user terminals 40. Wherein, the system host 20 and the menu host 30 are network servers in this embodiment, and the user terminal 40 is a computing device owned by the user, such as a laptop, a tablet computer, or a mobile phone.
請參閱圖2為前述多因子登入系統的作業流程圖。首先為步驟S1，使用者啟動使用者終端40其中之一(例如筆電)，隨後執行步驟S2讓使用者終端40與系統主機20建立連線並提出登入請求(在本實施例為一使用者帳號)，系統主機20接收到登入請求之後會顯示一驗證資訊，隨後產生並發送一登入訊息到使用者另一個使用者終端(例如手機)。其中，驗證資訊在本實施例中為圖形與文字的組合，登入訊息則為電子郵件或多媒體訊息，其內容包含有系統主機20所指定該選單主機40其中之一的網址(URL)或IP位址。前述登入訊息的網址(URL)可以是以加密技術自動產生。系統主機20產生登入訊息之後可以連線所指定的 選單主機30，並通知登入訊息所內含的驗證碼，確保只有依據前述登入訊息的使用者終端40才能與選單主機建立連線。 Please refer to FIG. 2 for a flowchart of the aforementioned multi-factor login system. First, step S1, the user activates one of the user terminals 40 (such as a laptop), and then executes step S2 to allow the user terminal 40 to establish a connection with the system host 20 and make a login request (in this embodiment, a user Account), after receiving the login request, the system host 20 displays a verification message, and then generates and sends a login message to the user's other user terminal (such as a mobile phone). Wherein, the authentication information is a combination of graphics and text in this embodiment, and the login message is an email or a multimedia message, and the content includes the URL (URL) or IP address of one of the menu hosts 40 designated by the system host 20 site. The web address (URL) of the login message may be automatically generated by an encryption technology. After the system host 20 generates a login message, it can connect to the designated The menu host 30 and notifies the verification code contained in the login message to ensure that only the user terminal 40 based on the foregoing login message can establish a connection with the menu host.
在步驟S2當中，系統主機20接收到登入請求後將自動隱藏使用者帳號，並顯示一倒數計時器進行預定時間的倒數。避免使用者重複登入，並通知使用者必須在預定時間內完成後續步驟。 In step S2, after receiving the login request, the system host 20 will automatically hide the user account and display a countdown timer to count down for a predetermined time. Prevent users from signing in repeatedly and notify them that they must complete the next steps within a predetermined time.
使用者終端40接收到登入訊息之後可進行步驟S3，依據登入訊息而與被指定的選單主機30建立連線。接著在步驟S4，選單主機30會對應產生一多重選單具有複數個選項標誌(Banner)以分別顯示驗證資訊與複數個無關資訊。請參考圖3，由於驗證資訊在本實施例中為圖形與文字的組合(例如台中市政府托育一條龍文字與圖示logo)，其他無關資訊同樣為圖形與文字的組合。對於使用者而言，只要點選所欲進行作業項目的選項標誌即為正確的驗證資訊，不需要去記憶並輸入複雜的密碼或是其他驗證機制，對於使用者來說完全沒有造成負擔。 After receiving the login message, the user terminal 40 may proceed to step S3 to establish a connection with the designated menu host 30 according to the login message. Then in step S4, the menu host 30 correspondingly generates a multiple menu with a plurality of option flags to display the verification information and the plurality of unrelated information, respectively. Please refer to FIG. 3, since the verification information is a combination of graphics and text in this embodiment (for example, Taichung City Government fosters a train of characters and icon logo), other unrelated information is also a combination of graphics and text. For the user, as long as he clicks the option mark of the desired operation item, it is the correct authentication information, there is no need to remember and enter a complex password or other authentication mechanism, which does not cause a burden to the user at all.
前述驗證資訊與無關資訊可以是文字、數字、圖形、色塊與動態圖片其中之一或其組合。例如使用文字與數字的組合作為驗證資訊與無關資訊，則多重選單的畫面可以參考圖4，系統主機將會顯示驗證資訊(如A3)而讓使用者有所指引。 The aforementioned verification information and irrelevant information may be one or a combination of text, numbers, graphics, color blocks, and dynamic pictures. For example, a combination of text and numbers is used as authentication information and irrelevant information. The screen of the multi-menu can refer to FIG. 4. The system host will display the authentication information (such as A3) for user guidance.
當完成步驟S4之後，使用者接著在步驟S5點選多重選單上正確的的選項標誌，被指定的選單主機30會發送一登入通知給系統主機20，最後進入步驟S6讓使用者順利登入系統主機，可以開始作業。 When step S4 is completed, the user then clicks the correct option mark on the multi-menu in step S5. The designated menu host 30 sends a login notification to the system host 20, and finally proceeds to step S6 to allow the user to log in to the system host smoothly. , You can start working.
對於非使用者帳號的擁有者(例如駭客)，將無法接收到登入訊息來得知正確的選單主機30，而且即使發現選單主機30的位址，也需要有內含正 確驗證碼的網址(URL)才得以登入選單主機，且多重選單的設計也會讓非使用者帳號的擁有者無法以單機暴力方式進行破解。 For owners of non-user accounts (such as hackers), they will not be able to receive a login message to know the correct menu host 30, and even if the address of the menu host 30 is found, a positive Only the URL of the verification code can log in to the menu host, and the design of the multi-menu will prevent the owner of the non-user account from cracking it in a single-machine brute force.
此外，登入主機20要求使用者必須在預定時間內完成步驟S3至S5，否則會拒絕使用者終端40的登入請求，進一步提高了安全性。 In addition, the login host 20 requires the user to complete steps S3 to S5 within a predetermined time, otherwise the login request of the user terminal 40 is rejected, which further improves security.
在其他的實施態樣中，選單主機及使用者終端的數量也可以減少為一個，同樣可以運用本發明的登入方法。 In other embodiments, the number of menu hosts and user terminals can also be reduced to one, and the login method of the present invention can also be applied.
綜合上述說明，本發明的多因子登入系統與方法不使用傳統使用者帳號搭配密碼的登入方式，使用者無需記憶，也不會有帳號與密碼被竊取的風險。此外，本發明可以使用者憑證(例如自然人憑證或健保卡)來取代使用者帳號作為登入請求，使用上更加安全。 To sum up the above description, the multi-factor login system and method of the present invention does not use the traditional user account login mode with password login mode, the user does not need to remember, and there is no risk of the account and password being stolen. In addition, the present invention can replace the user account as a login request with a user credential (such as a natural person credential or a health insurance card), which is more secure in use.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW106126323A TWI638307B (en) | 2017-08-04 | 2017-08-04 | Multi-factor login system and login method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW106126323A TWI638307B (en) | 2017-08-04 | 2017-08-04 | Multi-factor login system and login method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| TWI638307B true TWI638307B (en) | 2018-10-11 |
| TW201911015A TW201911015A (en) | 2019-03-16 |
Family
ID=64802887
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW106126323A TWI638307B (en) | 2017-08-04 | 2017-08-04 | Multi-factor login system and login method |
Country Status (1)
| Country | Link |
|---|---|
| TW (1) | TWI638307B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW201248449A (en) * | 2011-05-24 | 2012-12-01 | Hon Hai Prec Ind Co Ltd | System and method for single sign-on |
| US20120310828A1 (en) * | 2011-06-01 | 2012-12-06 | Ebay, Inc. | Instant bank account verification through debit card network |
| CN105610865A (en) * | 2016-02-18 | 2016-05-25 | ***股份有限公司 | Method and device for authenticating identity of user based on transaction data |
| TW201727526A (en) * | 2016-01-27 | 2017-08-01 | 艾爾希格科技股份有限公司 | Methods for dynamic user identity authentication |
| TWM553448U (en) * | 2017-08-04 | 2017-12-21 | Taiwan Information Service Tech Corporation | Multi-factor login system |
-
2017
- 2017-08-04 TW TW106126323A patent/TWI638307B/en active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW201248449A (en) * | 2011-05-24 | 2012-12-01 | Hon Hai Prec Ind Co Ltd | System and method for single sign-on |
| US20120310828A1 (en) * | 2011-06-01 | 2012-12-06 | Ebay, Inc. | Instant bank account verification through debit card network |
| TW201727526A (en) * | 2016-01-27 | 2017-08-01 | 艾爾希格科技股份有限公司 | Methods for dynamic user identity authentication |
| CN105610865A (en) * | 2016-02-18 | 2016-05-25 | ***股份有限公司 | Method and device for authenticating identity of user based on transaction data |
| TWM553448U (en) * | 2017-08-04 | 2017-12-21 | Taiwan Information Service Tech Corporation | Multi-factor login system |
Also Published As
| Publication number | Publication date |
|---|---|
| TW201911015A (en) | 2019-03-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9813441B2 (en) | Detecting and breaking CAPTCHA automation scripts and preventing image scraping | |
| US10657243B2 (en) | Variation analysis-based public turing test to tell computers and humans apart | |
| US11372963B2 (en) | Client login method and apparatus and storage medium | |
| EP3044987B1 (en) | Method and system for verifying an account operation | |
| US7770002B2 (en) | Multi-factor authentication | |
| US10356079B2 (en) | System and method for a single sign on connection in a zero-knowledge vault architecture | |
| CN104320703A (en) | Method, device and system for logging in intelligent television terminal | |
| CN107870997B (en) | Conference blackboard-writing file management method and device, display device and storage medium | |
| JP5462021B2 (en) | Authentication system, authentication method, and authentication program | |
| CN110574350B (en) | Method and system for performing a prioritized generation of a second factor certificate | |
| WO2018059033A1 (en) | Verification method, server and system | |
| CN106570405B (en) | Method and device for encrypting/decrypting characters in input method | |
| WO2015032281A1 (en) | Method and system for generating and processing challenge-response tests | |
| US11281761B2 (en) | Method and system for using a plurality of accounts in an instant messaging application | |
| JP5991143B2 (en) | Information processing apparatus, system, and information registration method | |
| US9774571B2 (en) | Automatic provisioning of meeting room device | |
| KR101710824B1 (en) | Method and system for third-party service platform login | |
| JP6325654B2 (en) | Network service providing apparatus, network service providing method, and program | |
| TWI638307B (en) | Multi-factor login system and login method | |
| US20230008310A1 (en) | Communication device, non-transitory computer-readable recording medium storing computer-readable instructions for communication device, non-transitory computer-readable recording medium storing computer-readable instructions for server, and server | |
| TWM553448U (en) | Multi-factor login system | |
| JP5265658B2 (en) | Login authentication apparatus, login authentication method and program | |
| JP6080282B1 (en) | Authentication processing system, authentication auxiliary server, and web display program | |
| JP5770354B1 (en) | Server system and request execution control method | |
| JP2008071131A (en) | Secret information delivery method |