CN102025740B - Single sign-on method, fat client, server and system - Google Patents

Single sign-on method, fat client, server and system Download PDF

Info

Publication number
CN102025740B
CN102025740B CN201010587308.2A CN201010587308A CN102025740B CN 102025740 B CN102025740 B CN 102025740B CN 201010587308 A CN201010587308 A CN 201010587308A CN 102025740 B CN102025740 B CN 102025740B
Authority
CN
China
Prior art keywords
fat client
browser
server
sends
certification mark
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201010587308.2A
Other languages
Chinese (zh)
Other versions
CN102025740A (en
Inventor
陈良德
李春茂
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Digital Technologies Chengdu Co Ltd
Original Assignee
Huawei Symantec Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Symantec Technologies Co Ltd filed Critical Huawei Symantec Technologies Co Ltd
Priority to CN201010587308.2A priority Critical patent/CN102025740B/en
Publication of CN102025740A publication Critical patent/CN102025740A/en
Application granted granted Critical
Publication of CN102025740B publication Critical patent/CN102025740B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The invention discloses a single sign-on method, a fat client, a server and a system. The method comprises the following steps of: receiving an access request of a browser; acquiring the address of the fat client according to the correspondence between the access request and the address of the fat client; sending the address of the fat client to the server; receiving signed user information sent by the fat client; sending an authentication identificatio corresponding to the user information to the fat client; receiving the authentication identification sent by the browser; and sending the response result to the browser. In the single sign-on method disclosed by the invention, the fat client can be invoked to acquire the authentication identification corresponding to the user information of signed users on the fat client according to the relationship between the preset access request and the fat client, and the browser passes through the authentication of the server according to the authentication identification and realizes access to a target web page. The invention realizes various modes of single sign-on without inputting user names and passwords again, simplifies the operation, and is convenient for users to use.

Description

Single-point logging method, Fat Client, server and system
Technical field
The present invention relates to single-sign-on field, more particularly, relate to the single-point logging method between Fat Client and web page, Fat Client, server and system.
Background technology
SSO(single sign On) be in multiple application system, user only needs to log in the application system once just can accessing all mutual trusts, and login main specifically can be mapped to the mechanism being used for the login of same user in other application by it.When user uses application system, once can log in, repeatedly use, not need to input user's name and user cipher at every turn.Single-sign-on platform can improve the experience that user uses application system, is one of solution of business integration popular at present.
Single-sign-on scene the most frequently used is at present exactly in the system with Fat Client and web page, such as, instant communicating system.If user has logged in MSN and Fat Client, during the web page of log-in instant communication again, only need click " homepage " in MSN, automatically can sign in the web page of instant messaging, user's name and password need not be inputted again, user-friendly.But, after having logged in Fat Client, if pass through the web page network address of initiatively input system in a browser, then also need input user's name and password, cannot single-sign-on be realized.
Summary of the invention
In view of this, the invention provides a kind of single-point logging method, Fat Client, server and system, the problem of single-sign-on to web page can only be realized by Fat Client to solve in prior art.
To achieve these goals, the invention provides following scheme:
A kind of single-point logging method, is characterized in that, comprising:
Server receives the access request of browser;
Described server, according to the corresponding relation between the described access request preset and the address of Fat Client, obtains the address of described Fat Client;
Described server sends the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
Described server receives the user profile logged in that described Fat Client sends;
The certification corresponding with described user profile identifies and sends to described Fat Client by described server, to make described Fat Client, described certification mark is sent to described browser;
Described server receives the described certification mark that described browser sends;
Response results is sent to described browser by described server.
A kind of single-point logging method, comprising:
Fat Client receives the call request that browser sends;
Described Fat Client sends the user profile of the user that Fat Client has logged in server;
The certification corresponding with described user profile that described Fat Client receives the transmission of described server identifies;
Described Fat Client sends described certification mark to browser.
A kind of single-point logging method, comprising:
Browser sends access request to server;
Described server, according to the corresponding relation between the described access request preset and the address of Fat Client, obtains the address of described Fat Client;
Described server sends the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
The address of the Fat Client that described browser sends according to server, sends call request to described Fat Client, to obtain certification mark;
Described Fat Client receives the call request that browser sends, and sends the user profile of the user that Fat Client has logged in server;
The certification corresponding with described user profile that described Fat Client reception server sends identifies;
Described Fat Client sends described certification mark to browser;
Described browser receives the certification mark that Fat Client sends, and described certification mark is sent to server;
Described server returns response results according to described certification mark;
A kind of server, comprising:
Access request receiving element, for receiving the access request of browser;
Address acquisition unit, for according to the corresponding relation between the described access request preset and the address of Fat Client, obtains the address of described Fat Client;
Address transmitting element, for sending the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
User profile receiving element, for receiving the user profile logged in that described Fat Client sends;
Certification mark transmitting element, sends to described Fat Client for the certification corresponding with described user profile being identified, and to make described Fat Client, described certification mark is sent to described browser;
Certification mark receiving element, for receiving the described certification mark that described browser sends;
Response results transmitting element, for sending to described browser by response results.
A kind of Fat Client, comprising:
Access request receiving element, for receiving the call request that browser sends;
User profile transmitting element, for sending the user profile of the user that described Fat Client has logged in server;
Certification mark receiving element, the certification corresponding with described user profile sent for receiving described server identifies;
Certification mark transmitting element, for sending described certification mark to browser.
A kind of single-node login system, comprising: browser, server and Fat Client, wherein:
Described browser is used for, send access request to server, according to the call by location Fat Client of the Fat Client that server sends, receive the certification mark that Fat Client sends, described certification mark is sent to server, and reception server identifies the response results returned according to described certification;
Described server is used for, receive the access request of browser, according to the corresponding relation between the described access request preset and the address of Fat Client, obtain the address of described Fat Client, the address of described Fat Client is sent to described browser, according to the call by location of described Fat Client, described access request can be processed by Fat Client to make browser, receive the user profile logged in that described Fat Client sends, the certification corresponding with described user profile is identified and sends to described Fat Client, to make described Fat Client, described certification mark is sent to described browser, receive the described certification mark that described browser sends, response results is sent to described browser,
Described Fat Client is used for, and receives the call request that browser sends, sends the user profile logged in server, and the certification corresponding with described user profile receiving the transmission of described server identifies, and sends described certification mark to browser.
As can be seen from above-mentioned technical scheme, in the embodiment of the present invention, after user logs in Fat Client, when logging in web page by browser, according to the relation between the access request preset and Fat Client, can call the Fat Client acquisition certification corresponding with the user profile of user listed on Fat Client to identify, browser by the certification of server, realizes the access to object web page by this certification mark.Do not need to input user's name and password again, achieve the single-sign-on object of various ways, simplify operation, convenient for users.
Accompanying drawing explanation
In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
The flow chart of Fig. 1 single-point logging method disclosed in the embodiment of the present invention 1;
The flow chart of Fig. 2 single-point logging method disclosed in the embodiment of the present invention 2;
The flow chart of Fig. 3 single-point logging method disclosed in the embodiment of the present invention 3;
The flow chart of Fig. 4 single-point logging method disclosed in the embodiment of the present invention 4;
Fig. 5 is a kind of structural representation realizing the server of single-sign-on disclosed by the invention;
Fig. 6 is a kind of structural representation realizing the Fat Client of single-sign-on disclosed by the invention;
Fig. 7 is the structural representation of single-node login system disclosed by the invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, be clearly and completely described the technical scheme in the embodiment of the present invention, obviously, described embodiment is only the present invention's part embodiment, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making the every other embodiment obtained under creative work prerequisite, belong to the scope of protection of the invention.
The invention discloses a kind of single-point logging method, do not need to input the user profile logging in client, the certification being returned to browser by client identifies the object realizing single-sign-on, and simplify operation, its embodiment is as follows:
Embodiment one
The embodiment of the present invention 1 discloses a kind of single-point logging method, and its idiographic flow as shown in Figure 1, comprising:
The access request of step S11, reception browser;
Step S12, according to the corresponding relation between described access request and the address of Fat Client, obtain the address of described Fat Client;
Step S13, send the address of described Fat Client to described browser, according to the call by location of described Fat Client, described access request can be processed by Fat Client to make browser;
Step S14, receive described Fat Client send the user profile logged in;
Step S15, the certification corresponding with described user profile identified send to described Fat Client, to make described Fat Client, described certification mark is sent to described browser;
Step S16, receive the described certification mark that described browser sends;
Step S17, response results is sent to described browser.
Windows system supports registered network protocol handling program.Such as, after having installed emule, as long as at IE(or other browsers) in the network address that starts of input " ed2k: // ", browser will call emule to process this URL.This is because emule is when installation, a log-in protocol handling procedure list item can be with the addition of at system registry, specify ed2k agreement and processed by emule.
So, according to above-mentioned feature, we can register an agreement in windows system, such as, be called " sso " agreement, specifying needs the Fat Client carrying out SSO as the handling procedure of this agreement, sets up the corresponding relation between access request and Fat Client.And then according in said process, when user logs in the web webpage of this system, if the client not by logging in, then jump to a URL started with " SSO: ".System will call Fat Client that we specify to process this URL, and such as, to obtain a certification mark, token TOKEN, browser by the authentication of this certification mark by server, and then realizes single logging-on server.
Above-mentioned steps can be found out, single-point logging method disclosed by the invention does not need to input and logs in the user profile of client, but realizes the object of single-sign-on by the certification mark that client returns to browser, simplifies operation.
Embodiment two
Disclosed in the embodiment of the present invention 3, the flow process of single-point logging method as shown in Figure 2, comprising:
The access request of step S21, reception browser;
Step S22, according to the corresponding relation between described access request and the address of Fat Client, obtain the address of described Fat Client;
Step S23, send the address of described Fat Client to described browser, according to the call by location of described Fat Client, described access request can be processed by Fat Client to make browser;
Step S24, receive the user profile of the user logged in that described Fat Client sends, the user profile in this step comprises: user's name or session id;
Step S25, the certification corresponding with described user profile identified send to described Fat Client, to make described Fat Client, described certification mark is sent to described browser;
Step S26, receive the described certification mark that described browser sends;
Step S27, judge that the certification mark received is whether correct, if correct, perform step S28, if mistake, perform step S29;
Step S28, the page documents of access request being specified feed back to described browser;
Step S29, send request miscue to browser.
The certification added in the present embodiment receiving identifies the process verified, thus ensure that the accuracy of navigation process, avoid the certification mark caused due to the mistake in transmitting procedure incorrect, and then affect the accuracy of server to browser return information.Result according to judging sends different response results to browser.The present embodiment does not limit concrete response results, such as, when judging that certification mark is incorrect, the prompting of certification again can also be sent to browser, concrete response results type is determined according to actual conditions, as long as can realize user-friendly object.
Can be found out by above-mentioned steps, after user logs in Fat Client, when user logs in web page again, just the certification mark that Fat Client sends the current user's name that logged in and/or session id and then obtains server can be called, browser is forwarded to again by Fat Client, finally send certification by browser to identify to server, by the certification of server, realize the access to object web page.As long as active user has logged in Fat Client, just can log in the webpage of this system by any way, not need to input user's name and password again, realize the single-sign-on of various ways, facilitate user, improve Consumer's Experience, be specially adapted to user and there is the situation evaluating electron stream.
Embodiment three
The single-point logging method that present embodiment discloses is applicable to Fat Client, and its idiographic flow as shown in Figure 3, comprising:
The call request that step S31, reception browser send;
The address of the Fat Client that browser is obtained according to the corresponding relation between access request and the address of Fat Client by server, access Fat Client.
Step S32, send the user profile of the user logged in server;
After receiving access request, send the user profile logged in server, comprising user name or session id.
Step S33, receive described server send the certification corresponding with described user profile identify;
Server sends a certification mark to Fat Client, such as token TOKEN.
Step S34, to send described certification mark to browser.
In the present embodiment, Fat Client by the certification obtained from server end mark send to browser, make browser can by this certification mark send to server to verify, make server when recognize just identify correct, the access request of browser can be accepted, realize single-sign-on.
Embodiment four
The embodiment of the present invention 4 discloses a kind of single-point logging method, and its idiographic flow as shown in Figure 4, comprising:
Step 41, browser send access request to server;
The address of step 42, acquisition Fat Client;
In this step, described server, according to the corresponding relation between described access request and the address of Fat Client, obtains the address of described Fat Client;
Step 43, described server send the address of described Fat Client to described browser;
In this step, server sends the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
Step 44, send call request to described Fat Client;
In this step, the address of the Fat Client that described browser sends according to server, sends call request to described Fat Client, to obtain certification mark;
Step 45, send the user profile of the user that Fat Client has logged in server;
In this step, described Fat Client receives the call request that browser sends, and sends the user profile of the user that Fat Client has logged in server;
The certification corresponding with described user profile that step 46, described Fat Client reception server send identifies;
Step 47, described Fat Client send described certification mark to browser;
Step 48, described browser receive the certification mark that Fat Client sends, and described certification mark is sent to server;
Step 49, described server return response results according to described certification mark;
Above-mentioned steps can be found out, single-point logging method disclosed by the invention does not need to input the user profile logging in client, but is identified the object realizing single-sign-on to browser by client return authentication, simplifies operation.
The present invention discloses a kind of server realizing single-sign-on, its structure as shown in Figure 4, comprise: access request receiving element 51, address acquisition unit 52, address transmitting element 53, user profile receiving element 54, certification mark transmitting element 55, certification mark receiving element 56 and response results transmitting element 57, wherein:
Access request receiving element 51 is for receiving the access request of browser; Address acquisition unit 52, for according to the corresponding relation between described access request and the address of Fat Client, obtains the address of described Fat Client; Address transmitting element 53, for sending the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client; The user profile logged in that user profile receiving element 54 sends for receiving described Fat Client; Certification mark transmitting element 55 sends to described Fat Client for the certification corresponding with described user profile being identified, and to make described Fat Client, described certification mark is sent to described browser; The described certification mark that certification mark receiving element 56 sends for receiving described browser; Response results transmitting element 57 is for sending to described browser by response results.
Whether wherein, described response results transmitting element 57 comprises: judging unit 571, correct for judging the certification mark received; Page documents transmitting element 572, for when certification mark is correct, is sent to described browser by the page documents that described access request is specified; Miscue unit 573, for when described certification mark is incorrect, sends request bomp to described browser.
The present invention discloses a kind of Fat Client realizing single-sign-on, its structure as shown in Figure 6, comprising: access request receiving element 61, user profile transmitting element 62, certification mark receiving element 63 and certification mark transmitting element 64, wherein,
The call request that access request receiving element 61 sends for receiving browser; User profile transmitting element 62 is for sending the user profile logged in server; Certification mark receiving element 63 identifies for the certification corresponding with described user profile receiving the transmission of described server; Certification mark transmitting element 64 is for sending described certification mark to browser.
The present invention further discloses a kind of single-node login system, its structure as shown in Figure 7, comprising: browser 71, server 72 and Fat Client 73, wherein:
Described browser 71 for, send access request to server, according to the call by location Fat Client of the Fat Client that server sends, receive the certification mark that Fat Client sends, described certification mark is sent to server, and reception server identifies the response results returned according to described certification;
Described server 72 for, receive the access request of browser, according to the corresponding relation between described access request and the address of Fat Client, obtain the address of described Fat Client, the address of described Fat Client is sent to described browser, according to the call by location of described Fat Client, described access request can be processed by Fat Client to make browser, receive the user profile logged in that described Fat Client sends, the certification corresponding with described user profile is identified and sends to described Fat Client, to make described Fat Client, described certification mark is sent to described browser, receive the described certification mark that described browser sends, response results is sent to described browser,
Described Fat Client 73 for, receive browser send call request, sends the user profile logged in server, receive described server send the certification corresponding with described user profile identify, to browser send described certification identify.Single-point logging method disclosed by the invention, Fat Client, server and system, can realize after user has logged in the client of a C/S type, even if its by initiatively in a browser the mode of the web page network address of input system log in homepage, also can by the certification mark that Fat Client sends the current user's name that logged in and/or session id and then obtains server just can be called, browser is forwarded to again by Fat Client, finally send certification by browser to identify to server, by the certification of server, realize the access to object web page, and do not need at input username and password, simplify operating process, facilitate Consumer's Experience.
In this specification, each embodiment adopts the mode of going forward one by one to describe, and what each embodiment stressed is the difference with other embodiments, between each embodiment identical similar portion mutually see.For device disclosed in embodiment, because it corresponds to the method disclosed in Example, so description is fairly simple, relevant part illustrates see method part.
Professional can recognize, in conjunction with unit and the algorithm steps of each example of embodiment disclosed herein description, can realize with electronic hardware, computer software or the combination of the two, in order to the interchangeability of hardware and software is clearly described, generally describe composition and the step of each example in the above description according to function.These functions perform with hardware or software mode actually, depend on application-specific and the design constraint of technical scheme.Professional and technical personnel can use distinct methods to realize described function to each specifically should being used for, but this realization should not thought and exceeds scope of the present invention.
The software module that the method described in conjunction with embodiment disclosed herein or the step of algorithm can directly use hardware, processor to perform, or the combination of the two is implemented.Software module can be placed in the storage medium of other form any known in random asccess memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable ROM, register, hard disk, moveable magnetic disc, CD-ROM or technical field.
To the above-mentioned explanation of the disclosed embodiments, professional and technical personnel in the field are realized or uses the present invention.To be apparent for those skilled in the art to the multiple amendment of these embodiments, General Principle as defined herein can without departing from the spirit or scope of the present invention, realize in other embodiments.Therefore, the present invention can not be restricted to these embodiments shown in this article, but will meet the widest scope consistent with principle disclosed herein and features of novelty.

Claims (10)

1. a single-point logging method, is characterized in that, comprising:
Server receives the access request of browser;
Described server, according in advance by the corresponding relation between the described access request of single-sign-on SSO protocol and the address needing the Fat Client carrying out SSO of specifying, obtains the address of described Fat Client;
Described server sends the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
Described server receives the user profile logged in that described Fat Client sends;
The certification corresponding with described user profile identifies and sends to described Fat Client by described server, to make described Fat Client, described certification mark is sent to described browser;
Described server receives the described certification mark that described browser sends, and verifies the described certification mark received;
Response results is sent to described browser by described server.
2. method according to claim 1, is characterized in that, described user profile comprises: user name or session id.
3. method according to claim 1 and 2, is characterized in that, response results sends to described browser to comprise by described server:
Described server judges whether the certification mark received is correct;
When certification mark is correct, the page that described access request is specified is sent to described browser by described server;
When described certification mark is incorrect, described server sends request bomp to described browser.
4. method according to claim 3, is characterized in that, described certification is designated token TOKEN.
5. a single-point logging method, is characterized in that, comprising:
Fat Client receives the call request that browser sends; Described call request is used for described browser Fat Client according to the call by location of Fat Client and processes the access request of described browser; The address of described Fat Client is the access request being received described browser by server, according in advance by the described access request of single-sign-on SSO protocol and specify need the corresponding relation between the address of the Fat Client carrying out SSO to obtain and send to described browser;
Described Fat Client sends the user profile of the user that Fat Client has logged in server;
The certification corresponding with described user profile that described Fat Client receives the transmission of described server identifies;
Described Fat Client sends described certification mark to browser, sends described certification mark verify to make described browser to described server.
6. a single-point logging method, is characterized in that, comprising:
Browser sends access request to server;
Described server, according in advance by the corresponding relation between the described access request of single-sign-on SSO protocol and the address needing the Fat Client carrying out SSO of specifying, obtains the address of described Fat Client;
Described server sends the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
The address of the Fat Client that described browser sends according to server, sends call request to described Fat Client, to obtain certification mark;
Described Fat Client receives the call request that browser sends, and sends the user profile of the user that Fat Client has logged in server;
The certification corresponding with described user profile that described Fat Client reception server sends identifies;
Described Fat Client sends described certification mark to browser;
Described browser receives the certification mark that Fat Client sends, and described certification mark is sent to server;
Described server is verified the described certification mark received, and returns response results according to described certification mark.
7. a server, is characterized in that, comprising:
Access request receiving element, for receiving the access request of browser;
Address acquisition unit, for according in advance by the corresponding relation between the described access request of single-sign-on SSO protocol and the address needing the Fat Client carrying out SSO of specifying, obtains the address of described Fat Client; Address transmitting element, for sending the address of described Fat Client to described browser, can process described access request by Fat Client to make browser according to the call by location of described Fat Client;
User profile receiving element, for receiving the user profile logged in that described Fat Client sends;
Certification mark transmitting element, sends to described Fat Client for the certification corresponding with described user profile being identified, and to make described Fat Client, described certification mark is sent to described browser;
Certification mark receiving element, for receiving the described certification mark that described browser sends, verifies the described certification mark received;
Response results transmitting element, for sending to described browser by response results.
8. server according to claim 7, is characterized in that, described response results transmitting element comprises:
Judging unit, whether correct for judging the certification mark received;
Page documents transmitting element, for when certification mark is correct, is sent to described browser by the page documents that described access request is specified;
Miscue unit, for when described certification mark is incorrect, sends request bomp to described browser.
9. a Fat Client, is characterized in that, comprising:
Access request receiving element, for receiving the call request that browser sends; Described call request is used for described browser Fat Client according to the call by location of Fat Client and processes the access request of described browser; The address of described Fat Client is the access request being received described browser by server, according in advance by the described access request of single-sign-on SSO protocol and specify need the corresponding relation between the address of the Fat Client carrying out SSO to obtain and send to described browser; User profile transmitting element, for sending the user profile of the user that described Fat Client has logged in server;
Certification mark receiving element, the certification corresponding with described user profile sent for receiving described server identifies;
Certification mark transmitting element, for sending described certification mark to browser, sends described certification mark to make described browser to described server and verifies.
10. a single-node login system, is characterized in that, comprising: browser, server and Fat Client, wherein:
Described browser is used for, and sends access request to server; Receive the address of the described Fat Client that described server sends; According to the address of the Fat Client that server sends, send call request to described Fat Client, to obtain certification mark; Receive the certification mark that Fat Client sends; Described certification mark is sent to server; Reception server identifies the response results returned according to described certification;
Described server is used for, and receives the access request of browser; According in advance by the corresponding relation between the described access request of single-sign-on SSO protocol and the address needing the Fat Client carrying out SSO of specifying, obtain the address of described Fat Client; Send the address of described Fat Client to described browser, according to the call by location of described Fat Client, described access request can be processed by Fat Client to make browser; Receive the user profile logged in that described Fat Client sends; The certification corresponding with described user profile is identified and sends to described Fat Client, to make described Fat Client, described certification mark is sent to described browser; Receive the described certification mark that described browser sends, the described certification mark received is verified; Response results is sent to described browser;
Described Fat Client is used for, receive the call request that browser sends, send the user profile of the user that described Fat Client has logged in server, the certification corresponding with described user profile receiving the transmission of described server identifies, and sends described certification mark to browser.
CN201010587308.2A 2010-12-14 2010-12-14 Single sign-on method, fat client, server and system Expired - Fee Related CN102025740B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201010587308.2A CN102025740B (en) 2010-12-14 2010-12-14 Single sign-on method, fat client, server and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201010587308.2A CN102025740B (en) 2010-12-14 2010-12-14 Single sign-on method, fat client, server and system

Publications (2)

Publication Number Publication Date
CN102025740A CN102025740A (en) 2011-04-20
CN102025740B true CN102025740B (en) 2015-04-15

Family

ID=43866594

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201010587308.2A Expired - Fee Related CN102025740B (en) 2010-12-14 2010-12-14 Single sign-on method, fat client, server and system

Country Status (1)

Country Link
CN (1) CN102025740B (en)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102955705B (en) * 2011-08-26 2015-08-19 腾讯科技(深圳)有限公司 A kind of method and system realizing starting mutually between program
CN104065674A (en) * 2013-03-18 2014-09-24 联想(北京)有限公司 Terminal device and information processing method
CN104753855B (en) * 2013-12-25 2019-01-04 中国移动通信集团公司 Single-point logging method, applications client, browser, terminal and server
CN104394133B (en) * 2014-11-14 2017-12-22 百度在线网络技术(北京)有限公司 Login method and login system
CN104519050B (en) * 2014-11-14 2019-03-12 百度在线网络技术(北京)有限公司 Login method and login system
CN104735066B (en) * 2015-03-18 2018-10-16 百度在线网络技术(北京)有限公司 A kind of single-point logging method of object web page application, device and system
CN106982228B (en) * 2017-05-08 2018-10-09 北京深思数盾科技股份有限公司 A kind of realization identity authentication method and system
CN107528858B (en) * 2017-09-29 2021-04-06 广州视睿电子科技有限公司 Login method, device and equipment based on webpage and storage medium
CN108040090A (en) * 2017-11-27 2018-05-15 上海上实龙创智慧能源科技股份有限公司 A kind of system combination method of more Web
CN112364334A (en) * 2020-11-09 2021-02-12 成都卫士通信息产业股份有限公司 Single sign-on method and device, electronic equipment and storage medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101247216A (en) * 2008-03-17 2008-08-20 北京亿企通信息技术有限公司 Method for logging in web terminal from client terminal in instant communication tool
CN101350717A (en) * 2007-07-18 2009-01-21 中国移动通信集团公司 Method and system for logging on third party server through instant communication software

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101350717A (en) * 2007-07-18 2009-01-21 中国移动通信集团公司 Method and system for logging on third party server through instant communication software
CN101247216A (en) * 2008-03-17 2008-08-20 北京亿企通信息技术有限公司 Method for logging in web terminal from client terminal in instant communication tool

Also Published As

Publication number Publication date
CN102025740A (en) 2011-04-20

Similar Documents

Publication Publication Date Title
CN102025740B (en) Single sign-on method, fat client, server and system
CN108293053B (en) Single sign-on authentication of client applications via a browser
CN105007280B (en) A kind of application login method and device
US8646057B2 (en) Authentication and authorization of user and access to network resources using openid
EP2643955B1 (en) Methods for authorizing access to protected content
US9641513B2 (en) Methods and systems for controlling mobile terminal access to a third-party server
US9118657B1 (en) Extending secure single sign on to legacy applications
CN104320377B (en) The anti-stealing link method and equipment of a kind of files in stream media
US9338007B1 (en) Secure delegated authentication for applications
US20150121500A1 (en) Using application level authentication for network login
CN106302308B (en) Trust login method and device
CN111062023B (en) Method and device for realizing single sign-on of multi-application system
JP2002334056A (en) System and method for executing log-in in behalf of user
CN101420416A (en) Identity management platform, service server, login system and federation method
CN103024740A (en) Method and system for accessing internet by mobile terminal
CN105991640B (en) Handle the method and device of HTTP request
CN104767614B (en) A kind of information authentication method and device
US20180034809A1 (en) Technique for connecting to a service
CN102710621B (en) A kind of user authentication method and system
CN105991518A (en) Network access authentication method and device
CN113922982A (en) Login method, electronic device and computer-readable storage medium
CN102882686A (en) Authentication method and authentication device
KR101839049B1 (en) Single Sign-On Authentication Method of Supporting Session Management by Server and Cookie Information Sharing Way
EP1959629B1 (en) Method for authenticating a user for access to server based applications from mobile device, gateway and identity management unit
KR101404764B1 (en) Single Sign On Method at Mobile Device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C53 Correction of patent for invention or patent application
CB02 Change of applicant information

Address after: 611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River

Applicant after: Huawei Symantec Technologies Co., Ltd.

Address before: 611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River

Applicant before: Chengdu Huawei Symantec Technologies Co., Ltd.

COR Change of bibliographic data

Free format text: CORRECT: APPLICANT; FROM: CHENGDU HUAWEI SYMANTEC TECHNOLOGIES CO., LTD. TO: HUAWEI DIGITAL TECHNOLOGY (CHENGDU) CO., LTD.

C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20150415

Termination date: 20191214