Security authentication interception method based on json verification code

Abstract

The invention provides a security authentication interception method based on a json verification code. The method comprises the steps that all access links in a system are regarded as the resources of the system, and access is available for users who successfully log in, but is unavailable for users who do not log in; after successful login, the json verification code is granted to a user; when the user accesses the system resources, the json verification code is attached to each access request of the user; and access requests without the json verification code or with an expired json verification code are identified as illegal requests, and permission granting is prevented. Compared with the prior art, the security authentication interception method based on the json verification code has the advantages that the access efficiency of a server in a distributed environment is greatly improved; downtime caused by massive online users at the same time is avoided; the json verification code is AES265 encrypted and is time-based, which avoids the risk of information leak after the json verification code is intercepted; and the security authentication interception method has the advantages of high practicality, wide application range and easy promotion.

Description

technical field [0001] The invention relates to the technical field of computer software, in particular to a method for intercepting security authentication based on JSON verification codes. Background technique [0002] For applications in a distributed environment, the security of resource access is very important. If system resources can be accessed directly without logging in, the resources in the system may be leaked at any time, causing immeasurable losses. In addition, in a distributed environment, security authentication interception of user behavior will require higher performance. While ensuring information security, we must also ensure that security audits will not cause performance pressure, so as to improve the efficiency of security audits. [0003] Traditional security authentication interception methods rely on sessions to store user IDs and context information, requiring a large amount of server memory. To determine whether the user has logged in by detect...

AI Technical Summary

Problems solved by technology

In a distributed environment, there will be a large number of users online at the same time, and the session data containing a large amount of user information will quickly exhaust the server memory, which is likely to cause downtime

Therefore, the session mode is not suitable for a distributed environment with a large number of online users at the same time

Images