CN101267332A - Method for Realizing Security Locking of Web Network Management Client and Web Network Management Client - Google Patents

Abstract

The invention discloses a method for realizing security locking of a Web network management client and a Web network management client, which detect whether the current page of the Web network management client is idle; when it is detected that the current page is idle, and the continuous idle time exceeds the idle time threshold , then the current page is locked, so the present invention can automatically lock the current page according to the duration of the current page idle state of the Web network management client. In addition, the present invention can also support unlocking the page through security verification, so that the user can quickly obtain the original page, thereby providing the user with a good experience. Moreover, the current page data will not be lost when the page is locked and unlocked, thereby improving the security of the web-based network management system. In addition, the embodiment of the present invention can also realize that the user actively locks the current page of the Web network management client.

Description

Method for Realizing Security Locking of Web Network Management Client and Web Network Management Client

technical field

The invention relates to the field of communication, in particular to safety locking and unlocking technology.

Background technique

In order to ensure the security of user data, various operators provide many security protection schemes.

For example, the current network management client generally has an interface locking function (similar to the computer locking function of Windows) and an unlocking function. The interface locking function is generally realized in two ways: one is active locking by the user; the other is automatic locking by the system, that is to say, if there is no operation interface within a certain time interval, the system will automatically lock the interface. When the interface is automatically locked by the system, the user is allowed to set whether to activate it, and if activated, the time interval can be set.

Through the interface locking function, the network management client locks the operation interface temporarily not used by the currently logged-in user. At this time, the user can only see the locked window, but cannot see the content of the interface before locking. When it is necessary to operate the network management client again, the user must first input the current user login password, and then return to the interface before locking after unlocking through the unlocking function of the network management client. This prevents the currently logged-in user from being operated by other unauthorized personnel when he leaves temporarily.

For the current Web-based network management system, it is possible to detect whether the user operates an event through the Document object in the Web network management client and the SVG object embedded in the page. The Document object provides the onmousemove method to detect the movement of the mouse, and the onkeyup event to detect whether the keyboard is operated; for the SVG object, the onmousemove event will be triggered continuously even if the mouse is not moving on it, indicating that the user is operating the event .

Based on the above objects, the current Web-based network management system provides a data protection scheme, which is implemented by using a session invalidation mechanism. The idea of the session invalidation mechanism is:

After the registered user logs in, the Web server will automatically detect the validity of the session. If it has not detected the user submitting a URL (Uniform Resource Locator, Uniform Resource Locator) request for a long time, the server will automatically make the session corresponding to the current Web network management client invalid. Afterwards, no matter which URL the user clicks through mouse or keyboard, they will be prompted to log in again or directly directed to the login page.

The data protection scheme of the traditional web-based network management system has the following defects:

1. It can only be determined whether the session corresponding to the current Web network management client is invalid according to the idle state of the current page of the Web network management client, and automatic locking cannot be realized according to the duration of the idle state of the current page of the Web network management client.

2. After the current page of the Web network management client is locked, it cannot be unlocked through security verification, but the user needs to log in again and be redirected to the original page, which leads to a long waiting time for the user and poor user experience.

3. When the session fails, the original page data is lost, and the security is still weak.

4. The user cannot actively lock the current page of the web network management client.

Contents of the invention

Embodiments of the present invention provide a method for realizing safe locking and a network management client, which can automatically lock the current page according to the duration of the idle state of the current page of the Web network management client.

Embodiments of the present invention are achieved through the following technical solutions:

Embodiments of the present invention provide a method for realizing safe locking, which includes:

Detect whether the current page of the web network management client is idle;

When it is detected that the current page is idle, and the continuous idle time exceeds the idle time threshold, the current page of the Web network management client is locked.

Embodiments of the present invention also provide a method for realizing secure locking of a Web network management client, which includes:

Obtain the operation information of the operation lock window, and lock the current page of the Web network management client according to the information.

Embodiments of the present invention also provide a Web network management client, which includes:

An operation detector, an idle timeout detector, and a locking unit;

The operation detector is used to detect whether there is an idle state on the current page of the Web network management client;

The idle timeout detector is used to obtain the detection result of the operation detector, and when the detection result is that the current page of the Web network management client is idle, and when the continuous idle time exceeds the idle time threshold, the locking unit is triggered ;

The locking unit is configured to lock the current page according to the trigger of the idle detector.

Embodiments of the present invention also provide a Web network management client, which includes:

An acquisition unit, configured to acquire the operation information of the operation lock window;

The active locking unit is configured to lock the current page of the Web network management client according to the operation information.

As can be seen from the specific implementation scheme provided by the above-mentioned embodiments of the present invention, wherein, whether the current page of the web network management client is detected is idle; when it is detected that the current page is idle, and the continuous idle time exceeds the idle time threshold, Then the current page of the Web network management client is locked, so the embodiment of the present invention can automatically lock the current page according to the duration of the idle state of the current page of the Web network management client.

Description of drawings

Fig. 1 is the structural principle diagram of the first embodiment provided by the present invention;

Fig. 2 is a flow chart of the second embodiment provided by the present invention.

Detailed ways

The first embodiment that the present invention provides is a kind of Web network management client, and its structure is as shown in Figure 1, comprises operation detector, idle timeout detector, locking unit and unlocking unit; Through above-mentioned components and parts, described Web network management client The terminal can realize the automatic locking function and the unlocking function. In order to ensure that the data of the locked current page is not lost, a heartbeat timer may also be included; a locking function setting unit may also be included to allow the user to set whether to use the automatic locking function. An active locking unit may also be included to provide active locking to the user.

The functions of each component in the network management client are described below:

1. Operate the detector

The operation detector is responsible for detecting whether the mouse and the keyboard are operated. It can be realized through the Document object in the Web network management client, which provides a method of monitoring the onmousemove event to detect the movement of the mouse, and provides a method of monitoring the onkeyup event to detect whether the keyboard is operated; it can also be used in the page The embedded SVG object is implemented, because when the mouse does not move on the SVG object, the onmousemove event will be triggered continuously, so when the SVG object is used, it is necessary to judge whether the coordinates of the mouse have changed in the onmousemove event processing.

When the user performs a mouse or keyboard operation, it is discovered by the operation detector and notified to the idle timeout detector.

2. Idle Timeout Detector

The idle timeout detector is responsible for obtaining the detection result of the operation detector, and when the detection result is no mouse or keyboard operation, it means that the current page is idle, and when the continuous idle time exceeds the idle time threshold, then Trigger the locking unit.

To implement this functionality, a status flag and a counter can be set. After the idle timeout detector receives the notification from the operation detector, it sets the status flag to True and clears the counter. And at regular time intervals, such as N seconds, regularly detect the status flag, if the status tag is True, set to False, and clear the counter; if the status tag is False, then set the The count value of the counter is increased by 1, and the obtained count value is multiplied by N to obtain the corresponding calculation result, which is regarded as the continuous idle time, and if the calculation result value is greater than the idle time threshold, the lock window is displayed.

3. Locking unit and unlocking unit

The locking unit is responsible for locking the current page of the Web network management client through a locking window according to the triggering of the idle detector. The lock window can cover the entire current page of the Web network management client.

When unlocking is required, the user can input a verification code through the unlock window, and/or, the password of the currently logged-in user, and the unlocking unit uses an asynchronous method to initiate a verification request to the server. After the verification is passed, the lock window is closed, so that the locked The page can be operated by the user again; if the verification fails, an error message will be displayed.

With the Auto-Lock feature enabled: the Action Detector is stopped when the Lock and Unlock window is displayed, and is started when the Lock and Unlock window is closed.

4. Session heartbeat timer

The session heartbeat timer is responsible for regularly accessing the specified URL of the Web server to ensure that the session is always valid. The session heartbeat timer starts after the user successfully logs in to the network, and stops after the user logs out. If the content in the web network management client consists of pages from multiple domains, a session heartbeat timer is provided for each different domain.

5. Lock function setting unit

The user can set a locking function through the locking function setting unit, and the locking function includes adopting an automatic locking function, or adopting an active locking function. If the user is set to use the auto-lock feature, they can also set the idle time threshold at which the auto-lock feature will start.

When the user sets the locking function, the locking function setting unit will obtain the locking function set by the user and save the obtained locking function. When saving, the obtained locking function can be saved in a persistent storage manner.

After the Web network management client logs in to the Web server, the locking function setting unit will obtain the saved locking function, and when the obtained locking function is an automatic locking function, it will trigger the operation detector to detect .

6. Active locking unit

The active locking unit is responsible for acquiring the operation information of the user operating the locking window, and operating the locking window to lock the current page of the Web network management client according to the information. Through the active locking unit, the user can actively operate the locking window to lock the current page of the Web network management client.

When the Web network management client performs the automatic locking function, the signal transmission relationship between each component in the network management client is as follows:

After the user logs in to the Web server through the network management client, the locking function setting unit will obtain the locking function, and when the obtained locking function is an automatic locking function, then trigger the operation detector to detect.

The operation detector detects whether the current page of the Web network management client is idle. During specific implementation, the Document object and the SVG object of the Web network management client can be used to detect whether there is a mouse or keyboard operation on the current page of the Web network management client to determine whether the current page is idle.

The idle timeout detector obtains the detection result of the operation detector, and when the detection result is that the current page is idle, and the continuous idle time exceeds the idle time threshold, the current page of the Web network management client is locked by the locking unit. locks and stops the manipulation detector.

When the current page of the Web network management client is locked, the unlocking unit judges whether the security check information is obtained, and when the security check information is obtained, requests the network server for the validity of the security check information, and when When it is determined that the verification information is valid, the locked current page is unlocked, and the operation detector is started to continue detection.

After the heartbeat timer obtains the information that the Web network management client successfully logs into the network, it periodically accesses the URL specified by the network server according to the set time interval.

The above is when the automatic locking function of the Web network management client is executed, the interactive relationship between the various components, when the user needs to actively lock the current page of the Web network management client, the interaction between the various components in the network management client The interaction relationship is as follows:

After the user logs in to the Web server through the Web network management client, the locking function setting unit will obtain the locking function, and the obtained locking function at this time is an active locking function. Then the operation detector and the idle timeout detector will not be triggered.

If the user needs to actively lock the current page, then input the lock operation information through the active lock unit, such as the operation information for operating the lock window, at this time the active lock unit will obtain the lock operation information, and according to the lock operation information to lock the current page of the web network management client.

After the locking unit locks the current page of the Web network management client, the unlocking unit judges whether the security check information is obtained, and after obtaining the security check information, requests the network server for the validity of the security check information, And when it is determined that the verification information is valid, the locked current page is unlocked.

After the heartbeat timer obtains the information that the Web network management client successfully logs into the network, it periodically accesses the URL specified by the network server according to the set time interval.

The second embodiment provided by the present invention is a method for implementing secure locking of a Web network management client, and its implementation process is shown in Figure 2, including:

In step S101, the locking function of the web network management client is obtained, and when the obtained locking function is an automatic locking function, a detection process is triggered.

Step S102, detecting whether the current page of the Web network management client is idle; when it is detected that the current page is idle, then execute step S103; otherwise, continue to execute step S102.

Step S102 can determine whether the current page is idle by detecting whether there is mouse or keyboard operation on the current page of the Web network management client through the Document object and the SVG object of the Web network management client. The details are the same as those in the first embodiment, and will not be described in detail here.

Step S103 , judging whether the idle duration exceeds the idle time threshold, and if so, execute step S104 , that is, lock the current page by locking the window; otherwise, continue to execute step S103 .

Step S105, while the current page is locked, it is judged whether the security verification information has been obtained, if obtained, then step S106 is executed, that is, the validity of the verification information is requested to the network server, and when the verification information is valid , close the lock window; otherwise, execute step S107 to continue to lock the current page through the lock window.

In the above embodiment, in order to ensure that the current page data is not lost, after obtaining the information that the Web network management client successfully logs in to the network, the URL specified by the network server is periodically accessed according to the set time interval.

The third embodiment provided by the present invention is a method for realizing security locking of the Web network management client, which is mainly for realizing the function of the user actively locking the Web network management client. The specific implementation process is as follows:

Obtain the locking function of the Web network management client, and when the obtained locking function is an active locking function, then obtain the operation information for operating the locking window;

After obtaining the operation information for operating the lock window, according to the information, operate the lock window to lock the current page;

While the current page is locked, it is judged whether the security verification information is obtained, if obtained, the validity of the verification information is requested to the network server, and when the verification information is valid, the locking window is closed; Otherwise, continue to lock the current page by locking the window.

In the above embodiment, in order to ensure that the current page data is not lost, after obtaining the information that the Web network management client successfully logs in to the network, the URL specified by the network server is periodically accessed according to the set time interval.

As can be seen from the specific implementation scheme provided by the above-mentioned embodiments of the present invention, wherein, it is detected whether the current page of the Web network management client is idle; when it is detected that the current page is idle, and the continuous idle time exceeds the idle time threshold, then The current page is locked, so the embodiment of the present invention can automatically lock the current page according to the duration of the idle state of the current page of the Web network management client.

In addition, the embodiment of the present invention can also realize that the user actively locks the current page of the Web network management client.

In addition, the embodiments of the present invention can also support unlocking the locked pages of the Web network management client through security verification, so that users can quickly obtain the original pages, thereby providing users with a good experience. Moreover, the current page data will not be lost when locking and unlocking the pages of the Web network management client, thereby improving the security of the Web-based network management system.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (14)

1. realize Web NM client safety locking method for one kind, it is characterized in that, comprising:

Whether the current page that detects the Web NM client is in idle condition;

When the current page that detects the Web NM client is in the free time, and continuous idle time surpasses free time during threshold value, then with described current page locking.

2. the method for claim 1 is characterized in that, also comprises:

In the blocked while of the current page of Web NM client, obtain safety check information;

After getting access to safety check information, to the validity of web server requests check information, and when described check information is effective, with blocked page release.

3. the method for claim 1 is characterized in that, also comprises:

After getting access to the information of Web NM client logging in network success, according to the time interval of setting, the periodically uniform resource position mark URL of access web server appointment.

4. as claim 1,2 or 3 described methods, it is characterized in that, before whether the current page that detects the Web NM client is in the process of idle condition, comprising:

Obtain lock function, and when the lock function that gets access to was the employing AutoLock feature, whether the current page that then triggers described detection Web NM client was in the process of idle condition.

5. a method that realizes Web NM client safety locking is characterized in that, comprising:

Obtain lock operation information, and according to described lock operation information, with the current page locking of Web NM client.

6. method as claimed in claim 5 is characterized in that, also comprises:

In the blocked while of the current page of Web NM client, obtain safety check information;

After getting access to safety check information, to the validity of web server requests check information, and when described check information is effective, with blocked page release.

7. as claim 5 or 6 described methods, it is characterized in that, also comprise:

After getting access to the information of Web NM client logging in network success, according to the time interval of setting, the periodically uniform resource position mark URL of access web server appointment.

8. a Web NM client is characterized in that, comprising:

Operations detector, idle overtime detector and lock cell;

Described operations detector, whether the current page that is used to detect the Web NM client is in the free time;

Overtime detector of described free time is used to obtain the testing result of described operations detector, and when described testing result be that the current page of Web NM client is in the free time, and continuous idle time surpasses free time during threshold value, then triggers described lock cell;

Described lock cell is used for the triggering according to described idle detector, and current page is locked.

9. Web NM client as claimed in claim 8 is characterized in that, also comprises:

Separate lock unit, be used for when the current page of Web NM client is locked, obtaining safety check information; And after getting access to safety check information, to the validity of the described safety check information of web server requests; When described check information is effective, with blocked page release.

10. Web NM client as claimed in claim 8 is characterized in that, also comprises:

The heartbeat timer is after being used to get access to the information of Web NM client logging in network success, according to the time interval of setting, the periodically uniform resource position mark URL of access web server appointment.

11. as claim 8,9 or 10 described Web NM clients, it is characterized in that, also comprise:

Lock function is provided with the unit, is used to obtain lock function, and when the lock function that gets access to is the employing AutoLock feature, then triggers described operations detector and detect.

12. a Web NM client is characterized in that, comprising:

Acquiring unit is used to obtain lock operation information;

Initiatively lock cell is used for according to described lock operation information, with the current page locking of Web NM client.

13. Web NM client as claimed in claim 12 is characterized in that, also comprises:

Separate lock unit, be used for when the current page of Web NM client is locked, obtaining safety check information; And after getting access to safety check information, to the validity of the described safety check information of web server requests; When described check information is effective, with blocked current page release.

14. as claim 12 or 13 described Web NM clients, it is characterized in that, also comprise:

The heartbeat timer is after being used to get access to the information of Web NM client logging in network success, according to the time interval of setting, the periodically uniform resource position mark URL of access web server appointment.

Images