WO2008110069A1 - Method for realizing safety locking of web network management user terminal and the web network management user terminal - Google Patents

Abstract

A method for realizing safety locking of web network management user terminal and the web network management user terminal, detecting whether the present page of the web network management user terminal is idle; if the present page is detected to be idle and the persistence idle time exceeds the threshold of idle time, then locking the present page, so the solution can lock the present page automatically according to the persistence idle time of present page idle status of the web network management user terminal. Additionally, the solution supports unlocking page by safety validation, so user can quickly obtain original page to provide goodexperience to user. The data of the present page will not lose during the locking and unlocking operations, so as to improve the safety of the web-based network management system. Additionally, the solution can also provide manual locking of the present page of the web network user terminal.

Description

 Method for realizing web network management client security locking and web network management client

 The present invention relates to the field of communications, and more particularly to security locking and unlocking techniques. Background technique

 In order to ensure the security of user data, various operators provide many security protection solutions.

 For example, current network management clients generally have an interface lock function (like the computer lock function of Windows), and an unlock function. The interface locking function is generally implemented in two ways: one is to actively lock by the user; the other is to automatically lock through the system, that is, the system automatically locks the interface if there is no operation interface in a certain time interval. When the interface is automatically locked by the system, the user is allowed to set whether to activate the locked interface, and if activated, the time interval can be set.

 Through the interface locking function, the network management client locks the operation interface that the current login user does not use temporarily. At this time, the user can only see the lock window, and cannot see the content of the interface before the lock. When the network management client needs to be operated again, the user must first enter the password for the current user login, and then unlock the interface before the lock is returned by the unlock function of the network management client. This avoids the current logged in user being operated by other non-instructors when they are temporarily away.

 For the current web-based network management system, you can detect whether the user operates the event by using the Web document in the client and the SVG object embedded in the page. The Document object provides an onmousemove method to detect the movement of the mouse, and provides an onkeyup event to detect whether the keyboard has an operation. For the SVG object, the onmousemove event is continuously triggered when the mouse is not moved thereon, indicating that the user is operating the event. .

 Based on the above objects, the current Web-based network management system provides a data protection scheme, which is implemented by a session failure mechanism. The idea of the session failure mechanism is:

After the registered user logs in, the web server automatically detects the validity of the session. If the user submits the URL (Uniform Resource Locator), the Uniform Resource Locator is not detected for a long time. If the request is made, the server will automatically invalidate the session corresponding to the current web network management client. After that, regardless of whether the user clicks on any URL via the mouse or keyboard, they will be prompted to log in again or directly to the login page.

 The data protection scheme of the traditional web-based network management system can only determine whether the session corresponding to the current web network management client is invalid according to the idle state of the current page of the web network management client. Summary of the invention

 Embodiments of the present invention provide a method for implementing security locking and a network management client capable of automatically locking a current page according to a duration of a current page idle state of a web network management client.

 Embodiments of the present invention are implemented by the following technical solutions:

 An embodiment of the present invention provides a method for implementing a security locking, the method comprising:

 Check whether the current page of the web network management client is idle.

 When the current page is detected to be idle and the idle time exceeds the idle time threshold, the current page of the web network management client is locked.

 The embodiment of the present invention further provides a method for implementing security locking of a web network management client, and the method includes:

 Obtain the operation information of the operation lock window, and according to the information, lock the current page of the web network management client.

 An embodiment of the present invention further provides a web network management client, where the client includes:

 Operating the detector, the idle timeout detector, and the locking unit; wherein

 The operation detector is configured to detect whether an idle state exists on a current page of the web network management client;

 The idle timeout detector is configured to acquire the detection result of the operation detector, and trigger the locking unit when the detection result is that the current page of the web network management client is idle, and the idle time exceeds the idle time threshold;

The locking unit is configured to lock the current page according to the trigger of the idle detector. An embodiment of the present invention further provides a web network management client, where the client includes: An obtaining unit, configured to obtain operation information of an operation locking window;

 The active locking unit is configured to lock the current page of the web network management client according to the operation information.

 It can be seen from the specific implementation provided by the foregoing embodiment of the present invention, wherein it is detected whether the current page of the web network management client is in an idle state; when it is detected that the current page is idle, and the idle time exceeds the idle time threshold At this time, the current page of the web network management client is locked, so the embodiment of the present invention can automatically lock the current page according to the duration of the current page idle state of the web network management client. DRAWINGS

 1 is a schematic structural view of a first embodiment provided by the present invention;

 2 is a flow chart of a second embodiment of the present invention. detailed description

 The first embodiment provided by the present invention is a web network management client, and its structure is as shown in FIG. 1 , which includes an operation detector, an idle timeout detector, a locking unit, and an unlocking unit. Through the above components, the web network management client The end can realize the automatic locking function and the unlocking function. In order to ensure that the data of the locked current page is not lost, a heartbeat timer may also be included; and a lock function setting unit may be included to allow the user to set whether to adopt the automatic lock function. An active locking unit may also be included to provide active locking to the user.

 The functions of each component in the network management client are respectively described below:

 1, operating the detector

The operation detector is responsible for detecting whether the mouse and the keyboard are operating. It can be implemented by the Document object in the web network management client, which provides a method for monitoring the onmousemove event to detect the movement of the mouse, and provides a method for monitoring the onkeyup event to detect whether the keyboard has an operation; The embedded SVG object is implemented, because when the mouse does not move on the SVG object, the onmousemove event is continuously triggered, so when the SVG object is used, It is necessary to judge whether the coordinates of the mouse have changed in the onmousemove event processing.

 When the user performs a mouse or keyboard operation, it is found by the operation detector and notified to the idle timeout detector.

 2, idle timeout detector

 The idle timeout detector is responsible for acquiring the detection result of the operation detector, and when the detection result is an operation without a mouse or a keyboard, indicating that the current page is idle, and the duration of the idle time exceeds the idle time threshold, The locking unit is triggered.

 To implement this function, you can set a status flag and a counter. When the idle time detector receives the operation detector notification, the status flag is set to True and the counter is cleared. And periodically detecting the status flag at a certain time interval, such as N seconds, if the status flag is Ture, setting to False, and clearing the counter; if the status flag is False, then the The counter value of the counter is incremented by 1, and the obtained count value is multiplied by N to obtain the corresponding calculation result, and is regarded as the time of continuous idleness. If the calculated result value is greater than the idle time threshold, the lock window is displayed.

 3. Locking unit and unlocking unit

 The pinning unit is responsible for locking the current page of the web network management client through a lock window according to the trigger of the idle timeout detector. The lock window can cover the current page of the entire web network management client.

 When unlocking is required, the user can enter the check code through the unlock window, and/or the password of the currently logged in user. The unlocking unit initiates a verification request to the server in an asynchronous manner. After the verification is passed, the locked window is closed, so that the locked window is locked. The page can be re-enabled by the user; if the verification fails, an error message is displayed.

 With the auto lock function enabled: When the lock and unlock window is displayed, the detector will stop operating; when the lock and unlock window is closed, the operation detector will be activated.

 4, session heartbeat timer

The session heartbeat timer is responsible for periodically accessing the specified URL of the web server, ensuring that the tongue is always valid. The session heartbeat timer starts after the user logs in to the network successfully, and stops after the user logs out. If the content in the web network management client consists of pages from multiple domains, Different domains provide a session heartbeat timer.

 5, lock function setting unit

 The user can set a locking function by using the locking function setting unit, and the locking function includes adopting an automatic locking function, or adopting an active locking function. If the user is set to use the auto-lock feature, you can also set the idle time threshold when the auto-lock feature is activated.

 When the user sets the lock function, the lock function setting unit acquires the lock function set by the user, and saves the acquired lock function. When saving, the acquired lock function can be saved according to the persistent save mode.

 After the web network management client logs in to the web server, the locking function setting unit acquires the saved locking function, and triggers the operation detector to detect when the obtained locking function is the automatic locking function.

 6, active locking unit

 The active locking unit is responsible for acquiring operation information of the user operation locking window, and according to the information, operating the locking window to lock the current page of the web network management client. Through the active locking unit, the user can actively operate the locked window to lock the current page of the web network management client.

 When the web network management client performs the automatic locking function, the signal transmission relationship between the various components in the network management client is as follows:

 After the user logs in to the web server through the network management client, the pinning function setting unit acquires the locking function, and when the obtained locking function is the automatic locking function, triggers the operation detector to detect.

 The operation detector detects whether the current page of the web network management client is idle. Specifically, it is possible to detect whether there is a mouse or keyboard operation on the current page of the web network management client through the Web object and the SVG object of the web network to determine whether the current page is idle.

The idle timeout detector obtains the detection result of the operation detector, and when the detection result is that the current page is idle, and the idle time exceeds the idle time alarm value, the current page of the web network management client is locked by the locking unit. Lock and stop the operation detector. After the current page of the web network management client is locked, the unlocking unit determines whether the security verification information is obtained, and after obtaining the security verification information, requests the network server for the validity of the security verification information, and when When it is determined that the verification information is valid, the current page that is locked is unlocked, and the operation detector is started to continue detecting.

 After obtaining the information that the web network management client logs in to the network successfully, the heartbeat timer periodically accesses the U L specified by the network server according to the set time interval.

 The above is the interaction relationship between the components when the web network management client performs the automatic locking function. When the user needs to actively lock the current page of the web network management client, the components in the network management client are The interaction is as follows:

 After the user logs in to the web server through the web network management client, the lock function setting unit acquires the lock function, and the lock function acquired at this time adopts the active lock function, and does not trigger the operation detector and the idle timeout. Detector.

 If the user needs to actively lock the current page, the locking operation information is input through the active locking unit, such as the operation information of the operation locking window, and the active locking unit acquires the locking operation information according to the locking operation information. , the current page of the web network management client is locked.

 After the locking unit locks the current page of the web network management client, the unlocking unit determines whether the security verification information is obtained, and after obtaining the security verification information, requests the network server for the validity of the security verification information, And when it is determined that the verification information is valid, the current page that is locked is unlocked.

 After obtaining the information that the web network management client logs in to the network successfully, the heartbeat timer periodically accesses the URL specified by the network server according to the set time interval.

 The second embodiment of the present invention provides a method for implementing security locking of an EB network management client. The implementation process is as shown in FIG. 2, and includes:

 In step S101, the locking function of the web network management client is obtained, and when the obtained locking function is the automatic locking function, the detection process is triggered.

Step S102: It is detected whether the current page of the web network management client is idle; when it is detected that the current page is idle, step S103 is performed; otherwise, step S102 is continued. Step S102: The document object and the SVG object of the web network management client are used to detect whether a mouse or keyboard operation exists on the current page of the web network management client to determine whether the current page is idle. It is specifically the same as the related description in the first embodiment, and will not be described in detail here.

 In step S103, it is determined whether the duration of the idle time exceeds the idle time value. If yes, step S104 is performed; otherwise, step S103 is continued.

 Step S104, the current page is locked.

 Step S105: When the current page is locked, it is determined whether the security check information is obtained. If yes, step S106 is performed; otherwise, step S107 is performed.

 Step S106, requesting validity of the face information from the network server, and closing the lock window when the information is valid.

 Step S107, continuing to lock the current page.

 In the above embodiment, in order to ensure that the current page data is not lost, after obtaining the information that the web network management client logs in to the network successfully, the URL specified by the network server is periodically accessed according to the set time interval.

 The third embodiment of the present invention is a method for implementing security locking of a web network management client, which is mainly for realizing the function of the user actively locking the web network management client. The specific implementation process is as follows: Obtain the locking function of the web network management client, and obtain the operation information of the operation locking window when the obtained locking function is the active locking function;

 After obtaining the operation information of the operation lock window, according to the information, operating the lock window to lock the current page;

 While the current page is locked, determining whether the security verification information is obtained, if obtained, requesting validity of the verification information from the network server, and when the verification information is valid, closing the locking window; Otherwise, continue to lock the current page through the lock window.

In the above embodiment, in order to ensure that the current page data is not lost, after obtaining the information that the web network management client logs in to the network successfully, the URL specified by the network server is periodically accessed according to the set time interval. It can be seen that the specific implementation provided by the foregoing embodiment of the present invention can detect whether the current page of the web network management client is idle; when detecting that the current page is idle, and the idle time exceeds the idle time threshold, The current page is locked, so embodiments of the present invention are able to automatically lock the current page based on the duration of the current page idle state of the web network management client.

 In addition, the embodiment of the present invention can also implement the user to actively lock the current page of the web network management client.

 In addition, the embodiment of the present invention can also support unlocking the locked web network management client's page through security verification, so that the user can quickly obtain the original page, thereby providing a good experience for the user. Moreover, when the page of the web network management client is locked and unlocked, the current page data is not lost, thereby improving the security of the web-based network management system. The spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and variations of the inventions

Claims

Rights request A method for implementing a security lock on a web network management client, the method comprising: detecting whether a current page of a web network management client is in an idle state;  The current page is locked when it is detected that the current page of the web network management client is idle and the idle time exceeds the idle time threshold.  2. The method of claim 1, wherein the method further comprises:  After obtaining the security check information, the network server is requested to verify the validity of the information, and when the verification information is valid, the locked page is unlocked.  3. The method according to claim 1, wherein the method further comprises:  After obtaining the information about successful login of the web network management client to the network, periodically access the uniform resource locator URL specified by the network server according to the set time interval.  The method according to claim 1, 2 or 3, wherein before the process of detecting whether the current page of the web network management client is in an idle state, the method includes:  The lock function is obtained, and when the obtained lock function is the automatic lock function, the process of detecting whether the current page of the web network management client is in an idle state is triggered.  A method for implementing security locking of a web network management client, the method comprising: obtaining locking operation information, and selling the current page of the web network management client according to the locking operation information.  6. The method of claim 5, further comprising:  After obtaining the security check information, the network server is requested to verify the validity of the information, and when the verification information is valid, the locked page is unlocked.  The method according to claim 5 or 6, wherein the method further comprises: after obtaining the information that the web network management client logs in to the network successfully, periodically accessing the specified by the network server according to the set time interval. Uniform resource locator UL.  8. A web network management client, wherein the client comprises: Operating the detector, the idle timeout detector, and the locking unit; wherein The operation detector is configured to detect whether the current page of the web network management client is idle; the idle timeout detector is configured to obtain the detection result of the operation detector, and when the detection result is the current status of the web network management client When the page is idle, and the idle time exceeds the idle time threshold, the selling unit is triggered;  The pinning unit is configured to lock the current page according to the trigger of the idle timeout detector. The web network management client of claim 8, wherein the client further comprises:  The unlocking unit is configured to request, after obtaining the security verification information, the validity of the security verification information to the network server; when the verification information is valid, unlock the locked page.  The web network management client of claim 8, wherein the client further comprises:  The heartbeat timer is used to obtain the information about the successful login of the web network management client to the network, and periodically access the uniform resource locator URL specified by the network server according to the set time interval.  The web network management client according to claim 8, 9 or 10, wherein the client further comprises:  The lock function setting unit is configured to acquire a lock function, and when the acquired lock function is an automatic lock function, the operation detector is triggered to perform detection.  12. A web network management client, wherein the client comprises:  An obtaining unit, configured to acquire locking operation information;  The active locking unit is configured to lock the current page of the web network management client according to the locking operation information.  The web network management client of claim 12, wherein the client further comprises:  The unlocking unit is configured to request, after obtaining the security verification information, the validity of the security verification information to the network server; when the verification information is valid, unlock the locked current page. The web network management client according to claim 12 or 13, wherein the client further comprises: The heartbeat timer is used to obtain the information about the successful login of the web network management client to the network, and periodically access the uniform resource locator URL specified by the network server according to the set time interval.