如何检测用户是否从识别的计算机连接？ [英] How to detect if user is connecting from a recognized computer?

问题描述

在许多银行和投资网站上，该网站阻止用户在无法首先回答其他问题或激活该计算机之前从无法识别的计算机登录。

On many banking and investment websites, the site prevents users from logging in from an unrecognized computer without first answering an additional question or activating that machine. How do developers typically create this feature?

例如，以下是Salesforce.com在从无法识别的计算机连接到我的帐户时显示的消息：

For example, here is the message that Salesforce.com gives when I connect to my account from an unrecognized machine:

我们正试图从我们的应用程序中做相同类型的事情，但不确定最好的（和最安全的）方法。

We're trying to do the same type of thing from one of our applications, but aren't sure about the best (and most secure) approach.

推荐答案

有很多可能的方法可以做到这一点，但通常他们使用以下组合：

There are many possible approaches to do this, but typically they're using some combination of the following:

• 您从

连接的IP范围
• 您的主机名




• 用户代理字符串

• IP range you're connecting from
• your host name
• presence of cookies on your computer left by the site after a successful authentication
• user-agent string

如果与现有的受信任连接之间存在太多差异，则将该计算机视为不可信。在太多的地方绘制的线是安全性和方便性之间的权衡。

If you have too many differences from one of your existing trusted connections, the machine is considered untrusted. Where the line is drawn for "too many" is a tradeoff between security and convenience.

这篇关于如何检测用户是否从识别的计算机连接？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！