CN116257840B - A login information query management system and method based on big data - Google Patents

Abstract

The invention provides a login information inquiry management system and a login information inquiry management method based on big data, wherein the system comprises the following steps: the identity verification module is used for verifying the identity of the user, and the user passes through a login application of the user after the user is successfully verified; the content confirmation module is used for setting limiting information of the history record to be queried of the user after the user logs in; and the query browsing module is used for obtaining the query result according to the limit information and displaying the query result on a user browsing interface in a classified manner. The method is used for tracking the login information of each login account of the user, and is convenient for tracing abnormal login.

Description

A login information query management system and method based on big data

Technical field

The present invention relates to the technical field of information query, and in particular to a login information query management system and method based on big data.

Background technique

With the popularity of Internet applications and people's dependence on the Internet, Internet security issues have become increasingly prominent. Malicious programs, various types of phishing, and fraud continue to grow at a rapid pace. At the same time, hacker attacks and large-scale personal information leakage incidents occur frequently. Accompanying the substantial growth of various network attacks, there is the continuous increase in the leakage of personal information of a large number of netizens and the increase in property losses. . Network account theft occurs from time to time. In order to facilitate the tracing of stolen information, the present invention proposes a login information query and management system and method based on big data.

Contents of the invention

The present invention provides a login information query and management system and method based on big data, which are used to track the login information of each user's login account and facilitate the tracing of abnormal logins.

The present invention provides a login information query and management system based on big data, including:

The identity verification module is used to verify the user's identity and pass the user's login application after successful verification;

A content confirmation module, configured to set the limited information of the user's history record to be queried after the user logs in;

Wherein, the history record to be queried refers to the historical login information of the login account that the user wants to query;

A query and browsing module is used to obtain query results according to the limited information, and display the query results in categories on the user browsing interface.

Preferably, a login information query and management system based on big data also includes:

Rights management module, used for:

In the management of personal information on multiple commonly used login devices of the user, obtain all the remembered information saved in the remember password service of the user, and establish a directory to be authorized;

Based on the directory to be authorized, send login information to the user to obtain a consent form respectively;

Collect the login information that the user has confirmed and agreed to, obtain the name of the login platform corresponding to the consent form and its login account and password, and establish an authorization directory.

Preferably, the rights management module includes:

The account screening unit is used to obtain the login accounts and login passwords saved in the password remembering service on multiple commonly used login devices of the user, and establish a first directory to be authorized;

Determine whether the first duplicate account exists in the first authorized directory. If so, obtain the recording time of the first duplicate account, determine the latest recording time, retain the first duplicate account corresponding to the latest recording time, and delete the remaining third A duplicate account will obtain a second directory to be authorized;

If it does not exist, use the first directory to be authorized as the second directory to be authorized;

Based on the remembered information in the remember password service item, determine the login platform information corresponding to each login account in the second directory to be authorized, and determine whether there is a second duplicate account in the second directory to be authorized;

If so, determine whether the second duplicate account has synchronization binding information. If the second duplicate account has synchronization binding information, determine the identity of the binding person based on the synchronization binding information. When the second duplicate account has synchronization binding information, When the identity of the person bound to the account is consistent with the identity of the user, it is determined that the second directory to be authorized is the final directory to be authorized;

When the identity of the person bound to the second duplicate account is inconsistent with the identity of the user, delete the second duplicate account, update the second directory to be authorized, and obtain the final directory to be authorized;

If the second duplicate account does not have synchronized binding information, obtain the second duplicate account of the same target login platform and establish account grouping;

Determine the usage frequency of the second duplicate account in the account group based on the historical login records of the same account group on the multiple commonly used login devices;

Obtain alternative accounts within the account group whose usage frequency is greater than a preset value, and locate multiple login addresses based on the login IP addresses of the alternative accounts;

Classify the multiple login addresses according to the address tags set by the user, obtain historical login records corresponding to commonly used addresses, and obtain the login frequency of commonly used addresses;

When the login frequency is greater than the preset frequency value, it is determined that the alternative account is a reserved account; otherwise, the alternative account is deleted, the second directory to be authorized is updated, and the final directory to be authorized is obtained;

When the usage frequency of the second duplicate account in the account group is less than or equal to the preset value, obtain the second duplicate account with the highest frequency of use in the account group as a reserved account, and delete the remaining second duplicate account in the account group Account, update the second directory to be authorized, and obtain the final directory to be authorized.

Preferably, a login information query and management system based on big data also includes:

Login monitoring module, used for:

Monitor and obtain the login information of each login account in the authorized directory;

At the same time, several fixed information codes are generated according to the authorization directory, and each login platform corresponds to one fixed information code;

According to the fixed information code, the login start return code and the login end return code corresponding to each login platform are generated respectively;

When the login platform detects that the target account is logged in, the corresponding login start return code is sent to the information recording module;

When the login platform detects that the target account has logged out, the corresponding login completion return code is sent to the information recording module.

Preferably, the information recording module is used for:

After receiving the login start return code or login end return code, the corresponding storage data is generated according to the message data template;

At the same time, identify the encoded data segment corresponding to the fixed information code in the login start return code or the login end return code, and obtain the identification result;

According to the recognition result, the stored data is stored in the corresponding location under the label.

Preferably, the content confirmation module includes:

A scope limitation unit, used to set a limitation type of the history record to be queried, where the limitation type refers to the platform type of the login platform corresponding to the history record to be queried;

The time limit unit is used to set the limited time interval for the historical records to be queried;

The limit information includes a limit type and a limit time interval.

Preferably, the content confirmation module also includes:

Specify a limited setting unit for users to directly enter the name of the target login platform for the history records to be queried.

Preferably, the query browsing module includes:

A target confirmation unit, configured to lock the query target in the authorization directory according to the limited type, and perform data screening under the storage tag corresponding to the query target according to the limited time interval to obtain the target data;

A result acquisition unit is configured to generate a first query result based on the target data, process the first query result, add a risk label to the first query result according to the processing result, and obtain a second query result;

A browsing display unit is configured to display the second query result in blocks on the user browsing interface.

Preferably, the result acquisition unit includes:

The first generation subunit is used to process the target data according to the message display template, generate the first query result, and send the first query result to the result processing unit;

The result processing subunit is configured to, after receiving the first query result, determine whether the historical login device of each target login account has changed based on the first query result;

If the historical login device of the target login account is changed, determine whether there is an unusual device in the changed historical login device based on the user's commonly used device list. If not, search for the first query result corresponding to the target login account. add first tag;

If it exists, use the target login account as the account to be analyzed, obtain the first login information corresponding to the non-common device of the device to be analyzed, and determine the first login time based on the first login information;

Obtain the login time distribution diagram of the user at the target login account, and determine the normal login time interval of the user at the target login account point based on the login time distribution diagram;

When the first login time is within the normal login time range, obtain the platform browsing record of the user during the first login time based on the first login information;

According to the platform browsing record, it is determined whether preset specific information has been browsed during the first login time. If so, a second label is added to the first query result corresponding to the account to be analyzed, which will be very useful. The corresponding part of the device is highlighted first;

If not, add a first label to the first query result corresponding to the account to be analyzed;

When the first login time is not within the normal login time range, it is determined that the login of the platform to be analyzed is abnormal, a third label is added to the first query result corresponding to the account to be analyzed, and the unusual device is The part is highlighted a second time;

If the historical login device of the target login account has not changed, add a first label to the first query result corresponding to the target login platform;

The second generation subunit is used to classify the first query result based on risk label classification, obtain the classification result, and generate the second query result; wherein the risk labels respectively include a first label, a second label, and a third Label;

After the second query result is divided into blocks, it is displayed on the user's browsing interface.

The present invention provides a login information query and management method based on big data, including:

Step 1: Verify the user's identity and pass the user's login application after successful verification;

Step 2: After the user logs in, set the limited information of the user's history record to be queried;

Wherein, the history record to be queried refers to the historical login information of the login account that the user wants to query, and the limited information includes a limited type and a limited time interval;

Step 3: Obtain the query results according to the limited information, and display the query results in categories on the user browsing interface.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

The technical solution of the present invention will be further described in detail below through the accompanying drawings and examples.

Description of the drawings

The drawings are used to provide a further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. In the attached picture:

Figure 1 is a schematic structural diagram of a login information query and management system based on big data according to the present invention;

Figure 2 is a schematic structural diagram of a content confirmation module of a login information query management system based on big data according to the present invention;

Figure 3 is a schematic structural diagram of the query and browsing module of a login information query management system based on big data according to the present invention;

Figure 4 is a step flow chart of a login information query and management system based on big data of the present invention.

Detailed ways

The preferred embodiments of the present invention will be described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described here are only used to illustrate and explain the present invention, and are not intended to limit the present invention.

Example 1:

The present invention provides a login information query and management system based on big data, as shown in Figure 1, including:

The identity verification module is used to verify the user's identity and pass the user's login application after successful verification;

A content confirmation module, configured to set the limited information of the user's history record to be queried after the user logs in;

Wherein, the history record to be queried refers to the historical login information of the login account that the user wants to query;

A query and browsing module is used to obtain query results according to the limited information, and display the query results in categories on the user browsing interface.

In this embodiment, the user in the present invention refers to the user who uses the login information query management system of the present invention.

The beneficial effects of the above technical solution: the identity verification module of the present invention verifies the identity of users logging into the system, ensures the security of system data, and facilitates the acquisition of user-associated authorization directories based on user identity information to achieve the purpose of unified management of user login information for various accounts. , the content confirmation module limits the query information according to the user's query needs after the identity authentication is passed, improving the customer experience. The query browsing module displays the system's query results according to the user's needs, which is convenient for users to view and is conducive to tracing abnormal logins.

Example 2:

Based on the above-mentioned Embodiment 1, a login information query management system based on big data also includes:

Rights management module, used for:

In the management of personal information on multiple commonly used login devices of the user, obtain all the remembered information saved in the remember password service of the user, and establish a directory to be authorized;

Based on the directory to be authorized, send login information to the user to obtain a consent form respectively;

Collect the login information that the user has confirmed and agreed to, obtain the name of the login platform corresponding to the consent form and its login account and password, and establish an authorization directory.

In this embodiment, commonly used login devices include computers, mobile phones and other electronic products.

In this embodiment, the memorized information includes login account number, login password, and login platform.

In this embodiment, the directory to be authorized refers to a list generated based on all login accounts and login platforms collected on the user's commonly used login devices.

In this embodiment, the login information acquisition consent form refers to the authorization agreement between the user and the login information query management system of the present invention. Only after the user confirms the consent, the system searched by the present invention can treat the login account in the authorized directory. Monitor and obtain the login information of the login account.

In this embodiment, the authorization directory refers to a login account list established based on the information of the login account that the user agrees to be monitored and tracked by the system of the present invention. The list includes the name of the login platform, its login account and password.

Beneficial effects of the above technical solution: in the management of personal information on the user's multiple commonly used login devices, the present invention obtains the remembered information saved in all the remember password services of the user, establishes a directory to be authorized, and Obtain the consent form through login information to obtain monitoring permissions for each login account, establish an authorization directory, and provide a basis for querying login information.

Example 3:

Based on the above Embodiment 2, a login information query management system based on big data also includes:

The rights management module includes:

The account screening unit is used to obtain the login accounts and login passwords saved in the password remembering service on multiple commonly used login devices of the user, and establish a first directory to be authorized;

Determine whether the first duplicate account exists in the first authorized directory. If so, obtain the recording time of the first duplicate account, determine the latest recording time, retain the first duplicate account corresponding to the latest recording time, and delete the remaining third A duplicate account will obtain a second directory to be authorized;

If it does not exist, use the first directory to be authorized as the second directory to be authorized;

Based on the remembered information in the remember password service item, determine the login platform information corresponding to each login account in the second directory to be authorized, and determine whether there is a second duplicate account in the second directory to be authorized;

If so, determine whether the second duplicate account has synchronization binding information. If the second duplicate account has synchronization binding information, determine the identity of the binding person based on the synchronization binding information. When the second duplicate account has synchronization binding information, When the identity of the person bound to the account is consistent with the identity of the user, it is determined that the second directory to be authorized is the final directory to be authorized;

When the identity of the person bound to the second duplicate account is inconsistent with the identity of the user, delete the second duplicate account, update the second directory to be authorized, and obtain the final directory to be authorized;

If the second duplicate account does not have synchronized binding information, obtain the second duplicate account of the same target login platform and establish account grouping;

Determine the usage frequency of the second duplicate account in the account group based on the historical login records of the same account group on the multiple commonly used login devices;

Obtain alternative accounts within the account group whose usage frequency is greater than a preset value, and locate multiple login addresses based on the login IP addresses of the alternative accounts;

Classify the multiple login addresses according to the address tags set by the user, obtain historical login records corresponding to commonly used addresses, and obtain the login frequency of commonly used addresses;

When the login frequency is greater than the preset frequency value, it is determined that the alternative account is a reserved account; otherwise, the alternative account is deleted, the second directory to be authorized is updated, and the final directory to be authorized is obtained;

When the usage frequency of the second duplicate account in the account group is less than or equal to the preset value, obtain the second duplicate account with the highest frequency of use in the account group as a reserved account, and delete the remaining second duplicate account in the account group Account, update the second directory to be authorized, and obtain the final directory to be authorized.

In this embodiment, the first directory to be authorized refers to an unprocessed list generated directly based on all login accounts collected on the user's commonly used login devices and the login platform. The first directory to be authorized may contain multiple duplicate information.

In this embodiment, the first duplicate account means that the same login account has multiple pieces of remembered information in the password remembering service, resulting in the situation that the same login account corresponds to multiple login passwords in the first directory to be authorized.

In this embodiment, the recording time refers to the time when the first duplicate account is recorded by the password remembering service on the commonly used login device.

In this embodiment, the latest recording time refers to the first duplicate account recording time closest to the current time.

In this embodiment, the second directory to be authorized refers to the first directory to be authorized after deleting the first duplicate account or confirming that there is no first duplicate account.

In this embodiment, the second duplicate account refers to a login account with different login accounts but belonging to the same login platform.

In this embodiment, the synchronized binding information refers to the user binding information of the second duplicate account, including the user's mobile phone number, ID number, third-party platform (such as Alipay), bank card, etc.

In this embodiment, the identity of the bound person refers to the identity of the person bound to the second duplicate account.

In this embodiment, the final directory to be authorized refers to the directory to be authorized as a basis for sending login information to the user to obtain a consent form.

In this embodiment, account grouping refers to grouping all second duplicate accounts, and the login accounts of the same login platform are one group.

In this embodiment, the frequency of use is the number of times each second duplicate account in the account group is used within a certain period of time (for example, one month, three months, etc.).

In this embodiment, the alternative account refers to the second duplicate account in the account group whose usage frequency is greater than a preset value (for example, zero).

In this embodiment, the login address is the address where the alternative account is logged in. Address labels include business, home, etc.

In this embodiment, the common address refers to the address where the user often logs in to the alternative account, such as a company address and a home address.

In this embodiment, the login frequency refers to the number of times the candidate account has logged in with a common address in all its login records.

In this embodiment, retaining the account means leaving a second duplicate account that does not need to be deleted.

Beneficial effects of the above technical solution: The present invention initially establishes the first directory to be authorized by remembering the login account and login password saved in the password service item, and then deletes the duplicate information of the same login account (first duplicate account), While avoiding repeated sending of login information to obtain consent, it also ensures the simplicity of the directory to be authorized and the validity of the information in the directory to be authorized. It then filters the login accounts (second duplicate accounts) of the same login platform. Evaluate from the usage frequency to ensure that the reserved login account is in use, and evaluate from the login frequency of common addresses to avoid accidental login of non-user accounts in the final directory to be authorized, that is, an accidental login by someone else using the user's device. Try to ensure that the final directory to be authorized contains the user's own login account.

Example 4:

Based on the above Embodiment 2, a login information query management system based on big data also includes:

Login monitoring module, used for:

Monitor and obtain the login information of each login account in the authorized directory;

At the same time, several fixed information codes are generated according to the authorization directory, and each login platform corresponds to one fixed information code;

According to the fixed information code, the login start return code and the login end return code corresponding to each login platform are generated respectively;

When the login platform detects that the target account is logged in, the corresponding login start return code is sent to the information recording module;

When the login platform detects that the target account has logged out, the corresponding login completion return code is sent to the information recording module.

In this embodiment, the fixed information code refers to a code representing the identity of the login account, and the code includes the number of the login account in the authorization directory.

In this embodiment, the login start return code refers to the code returned to the system when it is detected that the target login account is logged in.

In this embodiment, the login end return code refers to the code returned to the system when it is detected that the target login account logs out.

In this embodiment, the target account refers to any login account that is all monitored in the authorization directory.

In this embodiment, the login information includes login time (start and end time), login browsing content, login address, etc.

Beneficial effects of the above technical solution: the present invention monitors and obtains the login information of each login account in the authorization directory, provides a basis for abnormal login query, and at the same time, sets a different login start return code and login end for each login account The return code facilitates the system to respond quickly and record the login information of the target login account.

Example 5:

Based on the above Embodiment 4, a login information query management system based on big data also includes:

The information recording module is used for:

After receiving the login start return code or login end return code, the corresponding storage data is generated according to the message data template;

At the same time, identify the encoded data segment corresponding to the fixed information code in the login start return code or the login end return code, and obtain the identification result;

According to the recognition result, the stored data is stored in the corresponding location under the label.

Beneficial effects of the above technical solution: The present invention quickly determines the storage location of message storage data based on the fixed information code in the login start return code or login end return code, improves system work efficiency, and ensures orderly storage of data.

Example 6:

Based on the above-mentioned Embodiment 1, a login information query management system based on big data also includes:

The content confirmation module, as shown in Figure 2, includes:

A scope limitation unit, used to set a limitation type of the history record to be queried, where the limitation type refers to the platform type of the login platform corresponding to the history record to be queried;

The time limit unit is used to set the limited time interval for the historical records to be queried;

The limit information includes a limit type and a limit time interval.

In this embodiment, the platform type refers to the type described in the platform, such as search type, social type, etc.

In this embodiment, the limited time interval refers to the range of the query login time, for example, July to August.

Beneficial effects of the above technical solution: the present invention limits the query content, reduces the amount of data calls and reduces system pressure while meeting user requirements. It also ensures that the query results are concise and convenient for users to view, and improves customer experience.

Example 7:

Based on the above Embodiment 6, a login information query management system based on big data also includes:

The content confirmation module, as shown in Figure 2, also includes:

Specify a limited setting unit for users to directly enter the name of the target login platform for the history records to be queried.

Beneficial effects of the above technical solution: In the present invention, users directly input the name of the target login platform whose history records are to be queried, thereby meeting the user's direct search needs.

Example 8:

Based on the above-mentioned Embodiment 1, a login information query management system based on big data also includes:

The query browsing module, as shown in Figure 3, includes:

A target confirmation unit, configured to lock the query target in the authorization directory according to the limited type, and perform data screening under the storage tag corresponding to the query target according to the limited time interval to obtain the target data;

A result acquisition unit is configured to generate a first query result based on the target data, process the first query result, add a risk label to the first query result according to the processing result, and obtain a second query result;

A browsing display unit is configured to display the second query result in blocks on the user browsing interface.

In this embodiment, target data refers to stored data waiting to be called determined based on limited information (including limited type and limited time interval).

In this embodiment, the number of storage tags refers to the location tag where the stored data is stored. The tag is generated based on the number of the login account in the authorization directory, and corresponds to the login account one-to-one.

In this embodiment, the first query result refers to the query result without processing (without risk assessment) generated directly by converting the target data through the message display template.

In this embodiment, the second query result refers to the first query result classified after risk assessment.

In this embodiment, the risk labels include a first label, a second label and a third label, and different risk labels correspond to different display box colors.

The beneficial effects of the above technical solution: the present invention locks the query target in the authorization directory according to the limited type, and performs data screening under the storage tag corresponding to the query target according to the limited time interval to obtain the target data and ensure that the data is called accurate, and at the same time, based on the target data, a first query result is generated, the first query result is processed, a risk label is added to the first query result, a second query result is obtained, and the second query result is The query results are displayed on the user browsing interface in blocks. The system predicts login risks in advance and displays the query results to users more intuitively, which helps users quickly find the login information corresponding to abnormal logins.

Example 9:

Based on the above-mentioned Embodiment 8, the result acquisition unit includes:

A first generation subunit, configured to process the target data according to the message display template, generate a first query result, and send the first query result to the result processing unit;

The result processing subunit is configured to, after receiving the first query result, determine whether the historical login device of each target login account has changed based on the first query result;

If the historical login device of the target login account is changed, determine whether there is an unusual device in the changed historical login device based on the user's commonly used device list. If not, search for the first query result corresponding to the target login account. add first tag;

If it exists, use the target login account as the account to be analyzed, obtain the first login information corresponding to the non-common device of the device to be analyzed, and determine the first login time based on the first login information;

Obtain the login time distribution diagram of the user at the target login account, and determine the normal login time interval of the user at the target login account point based on the login time distribution diagram;

When the first login time is within the normal login time range, obtain the platform browsing record of the user during the first login time based on the first login information;

According to the platform browsing record, it is determined whether preset specific information has been browsed during the first login time. If so, a second label is added to the first query result corresponding to the account to be analyzed, which will be very useful. The corresponding part of the device is highlighted first;

If not, add a first label to the first query result corresponding to the account to be analyzed;

When the first login time is not within the normal login time range, it is determined that the login of the platform to be analyzed is abnormal, a third label is added to the first query result corresponding to the account to be analyzed, and the unusual device is The part is highlighted a second time;

If the historical login device of the target login account has not changed, add a first label to the first query result corresponding to the target login platform;

The second generation subunit is used to classify the first query result based on risk label classification, obtain the classification result, and generate the second query result; wherein the risk labels respectively include a first label, a second label, and a third Label;

After the second query result is divided into blocks, it is displayed on the user's browsing interface.

In this embodiment, the message display template refers to a unified template for displaying query results designed for aesthetics during the user display process. After determining the target data, the target data is converted into a statement in a unified format according to the template to obtain the first query. result.

In this embodiment, the commonly used device list refers to a device list generated based on the user's commonly used devices.

In this embodiment, unusual devices refer to login devices that are not in the list of commonly used devices.

In this embodiment, the target login account refers to any login account among the login accounts included in the first query result.

In this embodiment, the first label is a risk-free label, and the color of its corresponding display box is green; the second label is a low-risk label, and the color of its corresponding display box is blue; and the third label is a high-risk label, The color of its corresponding display box is red.

In this embodiment, the account to be analyzed refers to the target login account whose corresponding historical login device has changed in the first query result.

In this embodiment, the first login information refers to the login information corresponding to the account to be analyzed.

In this embodiment, the first login time refers to multiple login times (including the start login time and the end login time) in the first query result of the account to be analyzed.

In this embodiment, the login time distribution graph is a time distribution graph for each login drawn based on all historical login information of the target login account (including login information outside the limited time interval).

In this embodiment, the normal login time interval refers to the time range during which the user logs in to the target account in the login time distribution chart.

In this embodiment, the platform browsing record refers to the browsing record of the target login account on its corresponding login platform at the first login time.

In this embodiment, the preset specific information refers to information within the range of important information set by the user on the target login account.

In this embodiment, the first highlighting is to highlight the login information that is logged in using an unusual device in the first query result of the account to be analyzed with the second label.

In this embodiment, the second highlighting is to highlight the login information that is logged in using an unusual device in the first query result of the account to be analyzed with the third label.

In this embodiment, segmentation processing refers to allocating the content to the corresponding color display box according to the risk label carried on the second query result.

The beneficial effects of the above technical solution: the present invention generates the first query result based on the target data and the message display template, ensuring the beauty of the data display on the browsing interface and improving the customer perception; and then based on the target login account in the first query result Based on changes in login devices, conduct a preliminary assessment of login risks, obtain accounts to be analyzed whose risks have yet to be determined, and conduct a secondary assessment of login risks of accounts to be analyzed based on the login time and platform browsing records within that login time;

Finally, the first query result is classified according to the risk tags added in the two risk assessments, and displayed in the display box corresponding to the risk tag for users to browse. The risk prediction is made for logins of different target login accounts at different times, and the risk is predicted through the color Blocking displays query results to users more intuitively, which helps users quickly find login information corresponding to abnormal logins.

Example 10:

Based on the above-mentioned Embodiment 8, the browsing display unit shown is also used to perform security scoring on the target login account:

Obtain the historical login information of the target login account, conduct a risk assessment on the historical login based on the result acquisition unit, and obtain the risk assessment result;

Based on the line evaluation results and the following formula, calculate the security score of the target login account:

Among them, P represents the security score of the target login account; α represents the error factor of the system, with a value of (0, 005); β represents the number of historical login information of the target login account; β ₃ represents all historical login information of the target login account. The number of historical login information with the third label after being processed by the result acquisition unit; β ₂ represents the number of historical login information with the second label after all the historical login information of the target login account has been processed by the result acquisition unit; τ ₁ represents The risk impact coefficient of historical login information with the third label, that is, high-risk login information, is in [0.7, 095); τ ₂ represents the risk impact coefficient (0.05) of historical login information with the second label, that is, low-risk login information. ,0.3];

Based on the above formula, the security scores of all target login accounts are obtained. When the security scores are greater than the preset score, the first color is used for display;

When the security score is less than or equal to the preset score, the second color is displayed and the user is recommended to change the login password.

The beneficial effects of the above technical solution: the present invention obtains the historical login information of the target login account, and performs risk assessment on the historical login based on the result acquisition unit to obtain the risk assessment results; based on the line assessment results and formulas, calculate the Describe the security score of the target login account, conduct a comprehensive evaluation of the target login account, and provide another basis for improving the risk assessment of the target login account. At the same time, the scores are displayed in different colors according to the security score, which is conducive to attracting the user's attention and ensuring that the user can quickly see Log in to an account with a higher security rating.

Example 11:

The present invention provides a login information query and management method based on big data, as shown in Figure 4, including:

Step 1: Verify the user's identity and pass the user's login application after successful verification;

Step 2: After the user logs in, set the limited information of the user's history record to be queried;

Wherein, the history record to be queried refers to the historical login information of the login account that the user wants to query, and the limited information includes a limited type and a limited time interval;

Step 3: Obtain the query results according to the limited information, and display the query results in categories on the user browsing interface.

Beneficial effects of the above technical solution: the present invention verifies the identity of users logging into the system, ensures the security of system data, facilitates the acquisition of user-associated authorization directories based on user identity information, and achieves the purpose of unified management of user login information for various accounts. After passing the verification, the query information is limited according to the user's query needs to improve the customer experience. Then, the system displays the query results according to the user's needs, which is convenient for users to view and is conducive to tracing abnormal logins.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the invention. In this way, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and equivalent technologies, the present invention is also intended to include these modifications and variations.

Claims (8)

1. A big data based login information query management system, comprising:

the identity verification module is used for verifying the identity of the user, and the user passes through a login application of the user after the user is successfully verified;

The content confirmation module is used for setting limiting information of the history record to be queried of the user after the user logs in;

the history record to be queried refers to historical login information of a login account to be queried by a user;

the query browsing module is used for obtaining a query result according to the limit information and displaying the query result on a user browsing interface in a classified manner;

the system further comprises:

the authority management module is used for:

in the personal information management of a plurality of common login devices of the user, the remembered information stored in all remembered password service items of the user is obtained, and a catalog to be authorized is established;

based on the catalog to be authorized, login information acquisition agreements are respectively sent to the users;

acquiring login information which is confirmed to be agreeable by the user, acquiring the name of a login platform corresponding to the agreeable form, a login account number and a password of the login platform, and establishing an authorization directory;

the rights management module includes:

the account screening unit is used for acquiring login accounts and login passwords stored in password service items remembered on a plurality of common login devices of the user and establishing a first to-be-authorized directory;

Judging whether a first duplicate account exists in the first directory to be authorized, if so, acquiring the recording time of the first duplicate account, determining the latest recording time, reserving the first duplicate account corresponding to the latest recording time, deleting the remaining first duplicate account, and acquiring a second directory to be authorized;

if not, the first directory to be authorized is used as a second directory to be authorized;

determining login platform information corresponding to each login account in the second directory to be authorized based on the memorized information in the memorized password service item, and judging whether a second repeated account exists in the second directory to be authorized;

if yes, judging whether the second repeated account has synchronous binding information, if yes, determining the identity of a binding person based on the synchronous binding information, and when the identity of the binding person of the second repeated account is consistent with the identity of a user, judging that the second directory to be authorized is a final directory to be authorized;

when the identity of the binding person of the second duplicate account is inconsistent with the identity of the user, deleting the second duplicate account, and updating the second catalog to be authorized to obtain a final catalog to be authorized;

If the second repeated account has no synchronous binding information, acquiring a second repeated account establishment account group of the same target login platform;

determining the use frequency of a second repeated account in the account group according to the historical login records of the same account group on the plurality of common login devices;

obtaining an alternative account number with the use frequency larger than a preset value in the account number group, and positioning to obtain a plurality of login addresses based on the login IP address of the alternative account number;

classifying the login addresses according to address labels set by users to obtain historical login records corresponding to common addresses and obtain login frequencies of the common addresses;

when the login frequency is larger than a preset frequency value, judging that the alternative account is a reserved account; otherwise, deleting the alternative account number, and updating the second catalog to be authorized to obtain a final catalog to be authorized;

when the use frequency of the second repeated accounts in the account grouping is smaller than or equal to a preset value, the second repeated account with the highest use frequency in the account grouping is obtained to be used as a reserved account, the remaining second repeated accounts in the account grouping are deleted, the second catalog to be authorized is updated, and the final catalog to be authorized is obtained.

2. The big data based login information query management system according to claim 1, further comprising:

the login monitoring module is used for:

monitoring and acquiring login information of each login account in the authorization directory;

meanwhile, generating a plurality of fixed information codes according to the authorization catalogue, wherein each login platform corresponds to one fixed information code;

according to the fixed information code, respectively generating a login initial return code and a login end return code corresponding to each login platform;

when the login platform monitors that the target account is logged in, a corresponding login initial return code is sent to the information recording module;

and when the login platform monitors that the target account is logged out, a corresponding login ending return code is sent to the information recording module.

3. The big data based login information query management system according to claim 2, wherein:

the information recording module is used for:

after receiving the login initial return code or the login end return code, generating corresponding storage data according to the message data template;

meanwhile, identifying the coded data segment corresponding to the fixed information code in the login initial return code or the login end return code to obtain an identification result;

And storing the storage data to the corresponding position under the label according to the identification result.

4. The big data based login information query management system according to claim 1, wherein said content confirmation module comprises:

the range limiting unit is used for setting limiting types of the history records to be queried, wherein the limiting types refer to platform types of login platforms corresponding to the history records to be queried;

the time limiting unit is used for setting a limiting time interval of the history record to be queried;

the limitation information includes a limitation type and a limitation time interval.

5. The big data based login information query management system according to claim 4, wherein said content confirmation module further comprises:

and the appointed limiting setting unit is used for directly inputting the name of the target login platform of the history record to be queried by the user.

6. The big data based login information query management system according to claim 4, wherein said query browsing module comprises:

the target confirmation unit is used for locking a query target in the authorization directory according to the limiting type, and carrying out data screening under a storage tag corresponding to the query target according to the limiting time interval to obtain target data;

The result acquisition unit is used for generating a first query result based on the target data, processing the first query result, adding a risk tag to the first query result according to the processing result, and obtaining a second query result;

and the browsing display unit is used for displaying the second query result on the user browsing interface in a blocking manner.

7. The big data based login information query management system according to claim 6, wherein said result acquisition unit includes:

the first generation subunit is used for processing the target data according to the message display template, generating a first query result and sending the first query result to the result processing unit;

the result processing subunit is used for judging whether the history login equipment of each target login account is changed or not based on the first query result after receiving the first query result;

if the history login equipment of the target login account is changed, judging whether the changed history login equipment has common equipment or not based on a common equipment list of the user, and if the changed history login equipment has common equipment, adding a first label to a first query result corresponding to the target login account;

If the target login account is present, the target login account is used as an account to be analyzed, first login information corresponding to the unusual equipment of the equipment to be analyzed is obtained, and first login time is determined based on the first login information;

acquiring a login time distribution diagram of a user in the target login account, and determining a normal login time interval of the user in the target login account based on the login time distribution diagram;

when the first login time is within the normal login time interval, acquiring a platform browsing record of the user within the first login time based on the first login information;

judging whether preset specific information is browsed in the first login time according to the platform browsing record, if yes, adding a second label to a first query result corresponding to the account to be analyzed, and performing first highlighting on a part corresponding to common equipment;

if not, adding a first label to a first query result corresponding to the account to be analyzed;

when the first login time is not in the normal login time interval, judging that the platform to be analyzed is abnormal in login, adding a third label to a first query result corresponding to the account to be analyzed, and performing second highlighting on a part corresponding to common equipment;

If the historical login equipment of the target login account is not changed, adding a first label to a first query result corresponding to the target login platform;

the second generation subunit is used for classifying the first query result based on risk tag classification to obtain a classification result and generating a second query result; the risk tag comprises a first tag, a second tag and a third tag respectively;

and after the second query result is subjected to blocking processing, displaying the second query result on a browsing interface of the user.

8. The login information query management method based on big data is characterized by comprising the following steps:

step 1: verifying the identity of the user, and applying for login through the user after the user is successfully verified;

step 2: after the user logs in, setting limit information of the history record to be queried of the user;

the history record to be queried refers to historical login information of a login account to be queried by a user, and the limiting information comprises a limiting type and a limiting time interval;

step 3: obtaining a query result according to the limit information, and displaying the query result on a user browsing interface in a classified manner;

the method further comprises the steps of:

In the personal information management of a plurality of common login devices of the user, the remembered information stored in all remembered password service items of the user is obtained, and a catalog to be authorized is established;

based on the catalog to be authorized, login information acquisition agreements are respectively sent to the users;

collecting login information which is confirmed to be agreeable by the user, obtaining the name of a login platform corresponding to the agreeable form, a login account and a password of the login platform, and establishing an authorization directory, wherein the login information comprises the following steps:

acquiring login account numbers and login passwords stored in password service items remembered on a plurality of common login devices of the user, and establishing a first directory to be authorized;

judging whether a first duplicate account exists in the first directory to be authorized, if so, acquiring the recording time of the first duplicate account, determining the latest recording time, reserving the first duplicate account corresponding to the latest recording time, deleting the remaining first duplicate account, and acquiring a second directory to be authorized;

if not, the first directory to be authorized is used as a second directory to be authorized;

determining login platform information corresponding to each login account in the second directory to be authorized based on the memorized information in the memorized password service item, and judging whether a second repeated account exists in the second directory to be authorized;

If yes, judging whether the second repeated account has synchronous binding information, if yes, determining the identity of a binding person based on the synchronous binding information, and when the identity of the binding person of the second repeated account is consistent with the identity of a user, judging that the second directory to be authorized is a final directory to be authorized;

when the identity of the binding person of the second duplicate account is inconsistent with the identity of the user, deleting the second duplicate account, and updating the second catalog to be authorized to obtain a final catalog to be authorized;

if the second repeated account has no synchronous binding information, acquiring a second repeated account establishment account group of the same target login platform;

determining the use frequency of a second repeated account in the account group according to the historical login records of the same account group on the plurality of common login devices;

obtaining an alternative account number with the use frequency larger than a preset value in the account number group, and positioning to obtain a plurality of login addresses based on the login IP address of the alternative account number;

classifying the login addresses according to address labels set by users to obtain historical login records corresponding to common addresses and obtain login frequencies of the common addresses;

When the login frequency is larger than a preset frequency value, judging that the alternative account is a reserved account; otherwise, deleting the alternative account number, and updating the second catalog to be authorized to obtain a final catalog to be authorized;

when the use frequency of the second repeated accounts in the account grouping is smaller than or equal to a preset value, the second repeated account with the highest use frequency in the account grouping is obtained to be used as a reserved account, the remaining second repeated accounts in the account grouping are deleted, the second catalog to be authorized is updated, and the final catalog to be authorized is obtained.