WO2015062362A1

WO2015062362A1 - Method, device, and system for user login

Info

Publication number: WO2015062362A1
Application number: PCT/CN2014/086298
Authority: WO
Inventors: 于富龙; 左文品; 王有存; 于天佐; 余鹏
Original assignee: 北京奇虎科技有限公司; 奇智软件（北京）有限公司
Priority date: 2013-11-01
Filing date: 2014-09-11
Publication date: 2015-05-07
Also published as: CN103647746A

Abstract

Provided in the present invention are a method, device, and system for user login. The method comprises: acquiring logged-in accounts of clients corresponding to a designated domain name, generating a login list consisting of the logged-in accounts; acquiring, on the basis of a specific logged-in account in the login list, account information of the specific logged-in account; and, utilizing the acquired account information to log in to the designated domain name. By means of the present invention, when a user is logging in to the designated domain name, the account information logged-in to a local client by the user can be detected and acquired by adding a plug-in for a browser, the user is prompted that the account information is present locally, the user can select among the accounts to log in to the designated website, thus obviating a step of re-entering an account password, simplifying user operations, and providing improved user experience.

Description

User login method, device and system

Technical field

The present invention relates to the field of Internet technologies, and in particular, to a method, device, and system for user login.

Background technique

At present, with the popularization and penetration of various Internet informationization, various softwares and websites used by users also have a tendency to connect. Moreover, with the horizontal development of the software developers' businesses, they will not only provide users with various client tools, but also provide users with various website services. In order to make it easier for users to enjoy the services they provide, simultaneous login behavior usually occurs.

For example, users may run instant messaging software, optimization software, security tools, browsers, etc. locally, and require users to log in to their accounts in order to get a better user experience.

At this time, due to the multi-client login of the user, when the user logs in to the website corresponding to the client software, the user still needs to input the same account number and password, and the repeated login behavior causes the user operation to be cumbersome and the experience is poor.

Therefore, at present, for some domain name websites, there are the following disadvantages when logging in:

There is a lack of connectivity between the website and the local client. Although the client has been logged in, but the related website is still required to log in repeatedly, the operation is cumbersome and the user experience is poor.

Summary of the invention

In view of the above problems, the present invention has been made in order to provide a method, apparatus and system suitable for user login that overcomes the above problems or at least partially solves the above problems.

According to an aspect of the present invention, a user login method is provided, including: acquiring a logged-in account of each client corresponding to a specified domain name, generating a login list composed of the logged-in account; obtaining according to a specific logged-in account in the login list The account information of the specific registered account; use the obtained account information to log in to the specified domain name.

According to an aspect of the present invention, a user login device is further provided, comprising: a memory configured to store a registered account and account information of a user currently in each client; a login list acquirer configured to obtain and specify from a memory The login account of each client corresponding to the domain name generates a login list composed of the logged-in account; the information acquirer is configured to obtain the account information of the specific logged-in account in the memory according to the specific logged-in account in the login list; , configured to use the obtained account information to log in Domain name.

According to an aspect of the present invention, a user login system is further provided, including the user login device described above, and a server for verification.

According to still another aspect of the present invention, a computer program is provided comprising computer readable code that, when executed on a computing device, causes the computing device to perform the aforementioned user login method.

According to still another aspect of the present invention, a computer readable medium storing the aforementioned computer program is provided.

The present invention provides a method, a device, and a system for logging in a user. When the user logs in to a specified domain name, the user can detect the account that the user logs in to the local client by adding a plug-in to the browser. The information reminds the user of the existing account information, and the user can select the account to log in to the designated domain name website, thereby eliminating the step of inputting the account password again, simplifying the user operation and having a better user experience.

The above description is only an overview of the technical solutions of the present invention, and the above-described and other objects, features and advantages of the present invention can be more clearly understood. Specific embodiments of the invention are set forth below.

DRAWINGS

Various other advantages and benefits will become apparent to those skilled in the art from a The drawings are only for the purpose of illustrating the preferred embodiments and are not to be construed as limiting. Throughout the drawings, the same reference numerals are used to refer to the same parts. In the drawing:

1 is a flow chart of a method for user login according to an embodiment of the present invention;

2 is a flow chart of a specific method for user login according to an embodiment of the present invention;

3 is a schematic diagram of a login list in accordance with one embodiment of the present invention;

4 is a structural block diagram of a user login device according to an embodiment of the present invention;

FIG. 5 is a structural diagram of a user login system according to an embodiment of the present invention;

Figure 6 is a schematic block diagram showing a computing device for performing a user login method in accordance with the present invention;

Fig. 7 schematically shows a storage unit for holding or carrying program code implementing a user login method according to the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Rather, these embodiments are provided so that this disclosure will be thoroughly understood, and the scope of the present disclosure can be fully conveyed to those skilled in the art.

Embodiment 1

The embodiment of the invention provides a user login method. This method improves on devices that support users logging in on different clients. For example, the device in this embodiment may be a user terminal device such as a PC (Personal Computer), a mobile phone, or a handheld computer.

FIG. 1 is a flowchart of a method for user login according to an embodiment of the present invention, where the method includes steps S102 to S106.

S102. Acquire a logged-in account of each client corresponding to the specified domain name, and generate a login list composed of the logged-in account.

S104. Acquire, according to the specific registered account in the login list, account information of the specific registered account. The specific registered account in this embodiment is the login account selected by the user.

S106. Log in to the specified domain name by using the obtained account information.

The embodiment of the invention provides a method for user login. With this method, when the user logs in to the specified domain name, the user can check the account information of the user in the local client by adding a plug-in to the browser, and remind the user of the existing account information, and the user can select the account information. The account is logged in to the designated domain name website, thereby eliminating the step of re-entering the account password, simplifying the user operation and having a better user experience.

Embodiment 2

This embodiment is a specific application scenario of the foregoing first embodiment. Through the embodiment, the method provided by the present invention can be more clearly and specifically illustrated.

It should be noted that, before performing the method provided in this embodiment, firstly, the account information of the user's logged-in account on each client (the plug-in, the application software, and the like on the application) is obtained, and the account information is obtained. Write to the device's system shared memory for easy subsequent information lookup. In order to ensure the security of the data, the account information is ciphertext information, which includes at least two parts of the cookieQ string and the cookieT string of the logged-in account, the cookieQ string includes the basic information corresponding to the logged-in account, and the cookieT string includes the encryption of the basic information. The generated check character.

Wherein, when the account information of the registered account of each client is written to the shared memory, the same dynamic link library is used for writing.

It should also be noted that, in this embodiment, when different clients are installed, different browser plug-ins are installed for the user, and after the account information is written to the shared memory, the shared memory will store the data. The limitation of access is that shared memory only allows plug-ins that are installed at the same time as the client (such as the IE (Internet Explorer plug-in) and NPAPI (Netscape Plugin Application Programming Interface) plug-in to make read-only calls. The restriction on shared memory data access prevents data from being maliciously called by unknown plugins, thus increasing data security.

Optionally, the storage format in the shared memory in this embodiment may be as follows:

Key1:key1,value1:value1

The method is specifically described below. FIG. 2 is a flowchart of a specific method for user login according to an embodiment of the present invention. The method specifically includes steps S201 to 210, which specifically support users to log in on different clients. The device to execute.

S201. Receive an indication from a user to access a specified domain name.

The indication mentioned in this embodiment may be triggered by the user entering the specified domain name in the browser and clicking on the access. For example, the domain name accessed is "axlogin.passport.360.cn".

After receiving the above indication, step S202 is performed. In step S202, the registered account of each client corresponding to the specified domain name is acquired, and a login list composed of the registered account is generated.

Optionally, when the step S202 is performed, the specific process may include: first, detecting whether a browser plug-in corresponding to the specified domain name is installed locally, and when detecting that the browser plug-in corresponding to the specified domain name is installed, The browser plug-in is invoked to obtain the registered account of each client corresponding to the specified domain name, and finally, a login list composed of the logged-in accounts is generated.

It should be noted that, in this embodiment, the operation of detecting whether the browser plug-in corresponding to the specified domain name is installed locally is performed by a specific script of the browser. After the specific script detects that the browser plug-in corresponding to the specified domain name is installed, the browser plug-in also performs the following security detection: the first is to verify whether the Microsoft digital signature of the loading process file is passed, and the security check guarantees The security of the operating environment. The second is to verify whether the domain name of the currently loaded plug-in is a specified domain name. For example, if the domain name of the currently loaded plug-in is "axlogin.passport.360.cn", the verification is passed.

In addition, the browser plugin also provides a method for obtaining a list of logged-in accounts corresponding to the specified domain name, namely the GetUserList method. The specific script of the browser can be invoked by the GetUserList method provided by the browser plug-in to detect the account that the user has logged in on each client, and obtain the logged-in account in the shared memory, and generate a list of the logged-in accounts.

After the generated account list is generated, the generated registered account list is outputted by step S203 for The user makes a selection. In this embodiment, the operation of outputting the generated registered account list is performed by the specific script described above.

Optionally, when two or more login accounts are included in the login list, in order to allow the user to more intuitively see each login account, the specific script may display the login account identifier when displaying the login list ( The user name can be displayed to the user, or the avatar corresponding to the logged-in account can be displayed together with the avatar corresponding to the logged-in account, so that the user can distinguish the logged-in account. The user selects the logged in account. This embodiment also provides FIG. 3, which shows a schematic diagram of a login list.

After the user selects the logged in account, step S204 is performed. In step S204, a selection instruction from the user is received, the logged-in account in the corresponding login list is obtained, and the account information is obtained. The user can select the login account by clicking the account avatar shown in FIG. 3.

For the embodiment, it should also be mentioned that the above description describes that the browser plug-in provides a method for obtaining a list of logged-in accounts corresponding to the specified domain name, that is, the GetUserList method. In addition, the browser plugin also provides a way to get account information, namely the GetCode method. Therefore, when the user clicks on the selected account avatar, the GetCode method is invoked by the specific script of the browser to obtain the account information of the user selected account.

After the account information is acquired, step S205 is continued. In step S205, the obtained account information is encrypted and calculated to generate an encrypted character string.

In this embodiment, the operation of encrypting the account information is also implemented by the GetCode method provided by the browser plug-in.

The specific calculation of the account information includes the following three processes:

First, the current timestamp is obtained by sending an HTTP protocol to the server. In this embodiment, the server can provide an accurate and reliable time stamp service externally, and adopts a precise time source, high strength and high standard security mechanism to confirm the existence of the system processing data at a certain time and the relative time of related operations. The order provides the basic services for time non-repudiation in the information system.

Secondly, the obtained timestamp, the logged-in account selected by the user, and the account information thereof are spliced in a preset order to obtain a spliced string. Optionally, in this embodiment, the foregoing information may be spliced in the following order, that is, a timestamp, a logged-in account selected by the user, a cookie Q value in the account information, and a cookie T value in the account information.

Third, the spliced string is encrypted by using a preset encryption rule and a predetermined encryption key to generate an encrypted string. The preset encryption key is a fixed public key agreed between the server and the login device, and the foregoing preset encryption rule may be AESCB256 encryption and BASE64 encoding, that is, the spliced string is encrypted by using the public key, and It performs the BASE64_ENCODE encoding operation.

Next, step S206 is executed to send the generated encrypted character string to the server. Optionally, the generated encrypted string can be sent to the server through the HTTP protocol.

After receiving the encrypted character string sent by the login device, the server performs step S207. In step S207, the encrypted character string is checked by the server and judged whether it has passed. If the verification fails, step S208 is executed, that is, the operation is stopped or the response to the verification failure is returned to the login device. If the verification is successful, step S209 is performed.

In this embodiment, the method for the server to verify the encrypted string includes:

First, verify that the encrypted string is from the specified domain name. For example, when the encrypted string comes from the specified domain name "axlogin.passport.360.cn", the verification is successful.

Second, verify that the encrypted string has been used. In this embodiment, the correct encrypted string is stored in the Memcache as a whole, and the record has been used. Each time the encrypted string is checked for elapsed time, it will check whether the encrypted string already exists in Memcache. If it exists, it indicates that the encrypted string has been used. At this time, the system refuses to access. If it does not exist, then Indicates that the encrypted string has not been used. In this case, verify that the encrypted string is successful.

Third, verify that the encrypted string is successfully decrypted, and that the carried timestamp, the specific registered account, and the account information are complete. In this embodiment, after receiving the encrypted character string, the server decrypts the private key and the decryption method agreed upon by the login device. If the decryption is unsuccessful, the encryption string verification fails. If the decryption is successful, it is determined whether the timestamp obtained after decryption, the specific registered account number and the account information are complete, and the timestamp, the specific registered account and the account number. When the information is complete, it is determined that the encrypted string is verified.

Fourth, verify that the timestamp carried in the encrypted string is out of date. The verification process needs to be performed after the verification of the third step above. Generally, in order to increase security, the time stamp provided by the server will have an expiration date. For example, the validity period is 5 minutes. In this case, check whether the timestamp carried in the encrypted string has exceeded 5 minutes. If it is not exceeded, the timestamp has not expired, that is, the verification is passed. Otherwise, the timestamp has expired. Failure, that is, the verification does not pass.

Fifth, verify that the account information carried in the encrypted string is valid. The verification process also needs to be performed after the verification of the third step above. As described above, the account information includes at least two parts of the cookieQ string and the cookie T string of the logged-in account. If the account information carried in the encrypted string is valid, the implementation of the cookieQ includes the basic account corresponding to the logged-in account. The information is verified and encrypted, and the encryption result is compared with the cookieT. When the comparison is the same, the account information carried in the encrypted string is valid, that is, the verification is passed, otherwise the account information carried in the encrypted string is invalid, that is, the school The test will not pass.

Sixth, it is verified whether the user account in the account information carried in the encrypted string is the same as the registered account selected by the user. The verification process also needs to be performed after the third step of the above verification, and at this time, the account information is The user account included in the cookieQ string is compared with the user account that has been decrypted. If the comparison is the same, the account information carried in the encrypted string is correct and the check is passed. Otherwise, the account information carried in the encrypted string is incorrect. The verification does not pass.

After the verification of the encrypted string is successful, step S209 is continued to generate a cookie encryption string corresponding to the registered account selected by the user, and return it to the login device.

The cookie encryption string is generated according to the selected login account selected by the user, and the cookie encryption string is valid for a preset time. For example, the server sets the cookie encryption string to be valid for 10 minutes, and expires.

After the login device receives the cookie encryption string returned by the server, step S210 is performed, that is, the cookie encryption string is set to log in to the specified domain name, and the specified domain name is registered by using the cookie encryption string.

In this embodiment, when the server returns to the cookie encryption string in step S209, the valid time is set for the server, so that the specific script of the browser can automatically save the setting of the cookie encryption string within the valid time, that is, The login device automatically logs in to the specified domain name using the login account selected by the user within the valid time.

It should be noted that, in this embodiment, after the login device has logged in to the specified domain name using the login account selected by the user, the server marks the encrypted string as used and stores it in the Memcache.

The embodiment of the invention provides a method for the user to log in. When the user logs in to the specified domain name, the user can add the plug-in for the browser to detect the account information that the user logs in to the local client, and remind the user that the local device exists. The account information, the user can select the account to log in to the designated domain name website, thereby eliminating the step of inputting the account password again, simplifying the user operation and having a better user experience.

Further, in the embodiment of the present invention, the account information of the user is written into the shared memory in advance, and the access restriction is performed on the data stored in the shared memory, and only the legal plug-in is allowed to be called, thereby preventing the user account information from being acquired by the malicious program, and increasing The security of the user's account information.

Further, the plug-in provided by the embodiment of the present invention verifies the Microsoft digital signature of the loading process before acquiring the account information of the user, so as to ensure that the plug-in is invoked by the malicious program, and the account information of the user is leaked.

Further, the browser plug-in provided by the embodiment of the present invention displays an avatar corresponding to the user's account when displaying the account list that the user has logged in on the local client, so that the user can more easily identify the account and help improve. user experience.

Further, when the user account is verified by using the plug-in provided in this embodiment, the account information is encrypted and transmitted by the encryption algorithm, and the timestamp information is added, thereby increasing the security of the user account verification. Avoid being intercepted by illegal hackers and causing loss to users.

Embodiment 3

FIG. 4 is a structural block diagram of a user login device according to an embodiment of the present invention. The device 400 includes:

The memory 410 is configured to store the currently registered account and account information of the user at each client;

The login list acquirer 420 is coupled to the memory 410 and configured to acquire the logged-in account of each client corresponding to the specified domain name from the memory, and generate a login list composed of the logged-in account.

The information acquirer 430 is coupled to the memory 410 and the login list acquirer 420, and configured to acquire the account information of the specific registered account from the memory 410 according to the specific registered account in the login list;

The account registrar 440 is coupled to the information acquirer 430 and configured to log in to the designated domain name using the acquired account information.

Optionally, the login list acquirer 420 includes:

The plug-in detecting unit 421 is configured to detect whether a browser plug-in corresponding to the specified domain name is installed;

The account reading unit 422 is configured to, when the plug-in detecting unit 421 detects that the browser plug-in is installed, invoke the browser plug-in to obtain the registered account of each client corresponding to the specified domain name;

The list generating unit 423 is configured to generate a login list composed of the registered accounts.

Optionally, the login list includes an identifier of the logged in account and/or an avatar corresponding to the logged in account.

Optionally, the information acquirer 430 is further configured to encrypt the particular logged in account information.

Optionally, the information acquirer 430 includes:

The timestamp obtaining unit 431 is configured to acquire a current timestamp.

The encryption processing unit 432 is configured to encrypt the time stamp, the specific registered account, and the account information by using a preset encryption rule to generate an encrypted character string.

Optionally, the encryption processing unit 432 is further configured to generate an encrypted string as follows:

The timestamp, the specific logged-in account, and the account information thereof are spliced in a preset order to obtain a spliced string;

The spliced string is encrypted by using a preset encryption rule and a predetermined encryption key to generate an encrypted string.

Optionally, the account registrar 440 includes:

The data sending unit 441 is configured to send the encrypted string to the server for verification by using a hypertext transfer protocol (HTTP);

The data receiving unit 442 is configured to receive a cookie encryption string returned by the server, where the cookie encryption string corresponds to a specific logged-in account, and is generated by the server after verifying that the encrypted string is passed;

The login setting unit 443 is configured to set a cookie encryption string for logging in the specified domain name and using the cookie The encrypted string is logged in to the specified domain name.

Optionally, the login setting unit 443 is further configured to set a cookie encryption string for logging in the specified domain name within a preset time, and log in to the specified domain name by using a cookie encryption string.

Optionally, the condition that the encrypted string is verified by the server includes at least one of the following:

The encrypted string comes from the specified domain name;

The encrypted string has not been used;

The encrypted string is successfully decrypted, and the timestamp, specific registered account, and account information carried are complete;

The timestamp carried in the encrypted string has not expired.

The account information carried in the encrypted string is valid.

The user account in the account information carried in the encrypted string is the same as the registered account selected by the user.

Optionally, the account information stored in the memory 410 includes at least two parts: a cookieQ string and a cookie T string of the logged-in account, the cookieQ string includes basic information corresponding to the logged-in account, and the cookie T string includes a check character generated by encrypting the basic information. .

FIG. 5 is a structural diagram of a user login system according to an embodiment of the present invention. The system 500 includes the user login device 400, and further includes a server 600 for verification.

An embodiment of the present invention provides a user login device and a system. When the user logs in to a specified domain name, the user can detect the account that the user logs in to the local client by adding a plug-in to the browser. The information reminds the user of the existing account information, and the user can select the account to log in to the designated domain name website, thereby eliminating the step of inputting the account password again, simplifying the user operation and having a better user experience. In the description provided herein, numerous specific details are set forth. However, it is understood that the embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of the description.

Similarly, the various features of the invention are sometimes grouped together into a single embodiment, in the above description of the exemplary embodiments of the invention, Figure, or a description of it. However, the method disclosed is not to be interpreted as reflecting the intention that the claimed invention requires more features than those recited in the claims. Rather, as the following claims reflect, inventive aspects reside in less than all features of the single embodiments disclosed herein. Therefore, the claims following the specific embodiments are hereby explicitly incorporated into the embodiments, and each of the claims as a separate embodiment of the invention.

Those skilled in the art will appreciate that the modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment. Modules or units or components in an embodiment may be combined into one module or unit or component, and in addition, they may be divided into multiple sub- Module or subunit or subcomponent. In addition to such features and/or at least some of the processes or units being mutually exclusive, any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined. Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are included in other embodiments and not in other features, combinations of features of different embodiments are intended to be within the scope of the present invention. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or digital signal processor (DSP) may be used in practice to implement some or all of the functionality of some or all of the components of the user login device and user login system in accordance with embodiments of the present invention. . The invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein. Such a program implementing the invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

For example, FIG. 6 illustrates a computing device, such as a personal computer or the like, that can implement a user login method in accordance with the present invention. The computing device conventionally includes a processor 810 and a computer program product or computer readable medium in the form of a memory 820. The memory 820 may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read Only Memory), an EPROM, a hard disk, or a ROM. Memory 820 has a memory space 830 for program code 831 for performing any of the method steps described above. For example, storage space 830 for program code may include various program code 831 for implementing various steps in the above methods, respectively. The program code can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards or floppy disks. Such a computer program product is typically a portable or fixed storage unit as described with reference to FIG. The storage unit may have storage segments, storage spaces, and the like that are similarly arranged to memory 820 in the computing device of FIG. The program code can be compressed, for example, in an appropriate form. Typically, the storage unit includes computer readable code 831', ie, code readable by a processor, such as 810, that when executed by a computing device causes the computing device to perform each of the methods described above step.

As used herein, "one embodiment", "an embodiment" or "one or more embodiments" means The specific features, structures, or characteristics described in connection with the embodiments are included in at least one embodiment of the invention. In addition, it is noted that the phrase "in one embodiment" is not necessarily referring to the same embodiment.

It is to be noted that the above-described embodiments are illustrative of the invention and are not intended to be limiting, and that the invention may be devised without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as a limitation. The word "comprising" does not exclude the presence of the elements or steps that are not recited in the claims. The word "a" or "an" The invention can be implemented by means of hardware comprising several distinct elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means can be embodied by the same hardware item. The use of the words first, second, and third does not indicate any order. These words can be interpreted as names.

In addition, it should be noted that the language used in the specification has been selected for the purpose of readability and teaching, and is not intended to be construed or limited. Therefore, many modifications and changes will be apparent to those skilled in the art without departing from the scope of the invention. The disclosure of the present invention is intended to be illustrative, and not restrictive, and the scope of the invention is defined by the appended claims.

Claims

A user login method includes:

Obtaining the logged in account of each client corresponding to the specified domain name, and generating a login list composed of the logged in account;

Obtaining account information of the specific logged-in account according to the specific logged-in account in the login list;

Logging in to the specified domain name using the obtained account information.
The method of claim 1, wherein the obtaining the logged-in account of each client corresponding to the specified domain name comprises:

Detecting whether a browser plug-in corresponding to the specified domain name is installed;

The browser plug-in is invoked to obtain the logged-in account of each client corresponding to the specified domain name.
The method of claim 1, wherein the login list comprises an identification of the logged in account and/or an avatar corresponding to the logged in account.
The method of claim 1, wherein the obtaining the account information of the specific logged-in account comprises:

Encrypting the specific registered account information.
The method according to claim 4, wherein the encrypting the account information obtained by the specific login has included:

Get the current timestamp;

The time stamp, the specific registered account and the account information thereof are encrypted by using a preset encryption rule to generate an encrypted character string.
The method according to claim 5, wherein the encrypting the time stamp, the specific registered account and the account information thereof by using a preset encryption rule, and generating an encrypted character string, comprising:

The timestamp, the specific logged-in account, and the account information thereof are spliced in a preset order to obtain a spliced string;

The spliced string is encrypted by using a preset encryption rule and a predetermined encryption key to generate an encrypted string.
The method of claim 5, wherein the logging in the specified domain name using the acquired account information comprises:

Sending the encrypted string to the server for verification by using a hypertext transfer protocol;

Receiving a cookie encryption string returned by the server, wherein the cookie encryption string corresponds to the specific logged in account, and is generated by the server after verifying that the encrypted string is passed;

The cookie encryption string is set to log in to the specified domain name, and the specified domain name is logged in by using the cookie encryption string.
The method of claim 7, wherein said setting said cookie encryption string for logging in said specified domain name comprises:

The cookie encryption string is set for logging in to the specified domain name within a preset time.
The method of claim 7, wherein the condition that the encrypted string is verified by the server comprises at least one of the following:

The encrypted string is from the specified domain name;

The encrypted string has not been used;

The encrypted string is successfully decrypted, and the time stamp, the specific registered account, and the account information carried are complete;

The timestamp carried in the encrypted string has not expired;

The account information carried in the encrypted string is valid;

The user account in the account information carried in the encrypted string is the same as the registered account selected by the user.
The method according to any one of claims 1 to 9, wherein the account information includes at least two parts of a cookieQ string and a cookie T string of the logged-in account, the cookieQ string including basic information corresponding to the logged-in account, The cookieT string includes a check character generated by encrypting the basic information.
A user login device includes:

a memory configured to store the currently logged in account and account information of each user on the client;

The login list acquirer is configured to obtain, from the memory, the logged-in account of each client corresponding to the specified domain name, and generate a login list composed of the logged-in account;

An information acquirer, configured to acquire account information of the specific logged-in account in the memory according to a specific logged-in account in the login list;

The account registrar is configured to log in to the specified domain name by using the obtained account information.
The device of claim 11, wherein the login list acquirer comprises:

a plug-in detecting unit configured to detect whether a browser plug-in corresponding to the specified domain name is installed;

The account reading unit is configured to: when the plug-in detecting unit detects that the browser plug-in is installed, invoke the browser plug-in to obtain a registered account of each client corresponding to the specified domain name;

The list generation unit is configured to generate a login list composed of the registered accounts.
The device according to claim 11, wherein the login list comprises an identifier of the logged in account and/or an avatar corresponding to the logged in account.
The device of claim 11, wherein the information acquirer is further configured to encrypt the particular logged in account information.
The device of claim 14, wherein the information acquirer comprises:

a timestamp obtaining unit configured to obtain a current timestamp;

The encryption processing unit is configured to encrypt the time stamp, the specific registered account, and the account information by using a preset encryption rule to generate an encrypted string.
The apparatus of claim 15, wherein the encryption processing unit is further configured to generate an encrypted string as follows:

The timestamp, the specific logged-in account, and the account information thereof are spliced in a preset order to obtain a spliced string;

The spliced string is encrypted by using a preset encryption rule and a predetermined encryption key to generate an encrypted string.
The device of claim 15, wherein the account registrar comprises:

a data sending unit, configured to send the encrypted string to the server for verification by using a hypertext transfer protocol;

a data receiving unit, configured to receive a cookie encryption string returned by the server, where the cookie The encrypted string corresponds to the specific registered account, and is generated by the server after verifying that the encrypted string is passed;

And a login setting unit configured to set the cookie encryption string to log in to the specified domain name, and log in the specified domain name by using the cookie encryption string.
The device according to claim 17, wherein said login setting unit is further configured to set said cookie encryption string for logging in said designated domain name within a preset time, and encrypting said designated domain name with said cookie Log in.
The apparatus of claim 17, wherein the condition that the encrypted string is verified by the server comprises at least one of the following:

The encrypted string is from the specified domain name;

The encrypted string has not been used;

The encrypted string is successfully decrypted, and the time stamp, the specific registered account, and the account information carried are complete;

The timestamp carried in the encrypted string has not expired;

The account information carried in the encrypted string is valid;

The user account in the account information carried in the encrypted string is the same as the registered account selected by the user.
The device according to any one of claims 11 to 19, wherein the account information stored in the memory includes at least two parts of a cookieQ string and a cookie T string of the logged-in account, and the cookieQ string includes a basic corresponding to the logged-in account. Information, the cookie T string includes a check character generated by encrypting the basic information.
A user login system, comprising the user login device of any one of claims 11 to 20, further comprising a server for verification.
A computer program comprising computer readable code, when the computer readable code is run on a computing device, causing the computing device to perform the user login method of any one of claims 1 to 10.
A computer readable medium storing the computer program of claim 22.