WO2022041179A1

WO2022041179A1 - Method, device and system for sending authentication information by means of instant messaging

Info

Publication number: WO2022041179A1
Application number: PCT/CN2020/112409
Authority: WO
Inventors: 马宇尘
Original assignee: 深圳市永兴元科技股份有限公司
Priority date: 2020-08-29
Filing date: 2020-08-31
Publication date: 2022-03-03
Also published as: CN112235177B; CN112235177A

Abstract

The present invention provides a method, a device and a system for sending authentication information by means of instant messaging, relating to the field of Internet technologies. A method for sending authentication information by means of instant messaging, comprising the following steps: a user using a second terminal to log in to a network; triggering authentication information, corresponding to the network login, to be sent to a first terminal associated with the second terminal; and acquiring the described authentication information by means of an instant messaging tool on the described first terminal, and sending the authentication information to the second terminal which has logged in to the same instant messaging tool identification number. By means of the present invention, authentication information is forwarded between a login terminal and an authentication information receiving terminal by means of an instant communication tool, thereby improving the convenience of authentication and improving the user experience.

Description

Method, device and system for sending authentication information through instant messaging

technical field

The present invention relates to the field of Internet technology.

Background technique

Type a background description paragraph here. Among the five functions of network information security (identity authentication, authorization, confidentiality, integrity and non-repudiation), authentication is the most basic and most important link. The role of identity authentication is to ensure that the true wishes of users are reflected in specific decision-making links. Usually, identity authentication has three elements (multi-factor authentication, MFA): what is known, such as password, security questions; all, such as mobile phone verification code, U shield; what is, such as fingerprint, pupil. From a cryptographic point of view, the verification performed using the above two is called two-factor authentication (TFA, Two factor authentication). As authentication information, verification codes have been widely used in people's daily life.

With the development of technology, mobile phones have been deeply embedded in people's lives. Nowadays, many Internet software or services use mobile phones as an important means to protect user passwords.

For example, a user sets a mobile phone number in an Internet software or service, and this number is used for all purposes such as daily contact, information push service, and password protection. In this way, when the user forgets the password, he can choose to retrieve the password through the mobile phone number in the software or service. Specifically, the following methods can be used: 1. The Internet software or service sends the user's password to the reserved mobile phone number through SMS; 2. Internet software or services may not send the password directly, but send a verification code or link to the reserved mobile phone number, and instruct the user to recover or reset the password according to the steps. When users forget their passwords, they can easily retrieve them through their mobile phones. For another example, when a user logs in to a website, a verification code is received through a mobile phone to authenticate the user's identity.

The above authentication information requires the user to operate the terminal multiple times, especially in the case where the terminal for receiving authentication information and the terminal for logging in are not the same terminal, the user often needs to switch operations between the terminal for logging in and the terminal for receiving authentication information, which is cumbersome and affects the user. operational efficiency.

Instant Messaging (IM) is the most popular communication method in the era of mobile Internet. Various instant messaging software supports instant transmission of messages.

How to provide users with a more intelligent and convenient authentication information transmission method in combination with the above-mentioned prior art is an urgent problem to be solved.

technical problem

The purpose of the present invention is to overcome the deficiencies of the prior art, and to provide a method, a device and a system for sending authentication information to a receiving terminal through instant messaging. The present invention forwards the authentication information between the login terminal and the authentication information receiving terminal through the instant communication tool, thereby improving the convenience of authentication and enhancing the user experience.

technical solutions

To achieve the above-mentioned goals, the present invention provides the following technical solutions:

A method for sending authentication information through instant messaging, comprising the following steps: a user uses a second terminal to log in to a network; triggering the transmission of authentication information corresponding to the network login to a first terminal associated with the second terminal; The instant messaging tool on the server collects the aforementioned authentication information, and sends the authentication information to the second terminal registered with the same instant messaging tool identification number.

Further, it also includes the step of: loading the aforementioned authentication information into the authentication information input column through the instant messaging tool or a third-party application associated with the instant messaging tool.

Further, the first terminal is a mobile phone, the authentication information is a short message verification code, and before the instant messaging tool collects the authentication information, the above-mentioned authentication information is received through the short message service of the mobile phone.

Further, the authentication information is a mailbox verification code, and before the instant messaging tool collects the authentication information, the foregoing authentication information is received through the Email tool on the first terminal.

Further, the associated first terminal and the second terminal are located in the same local area network.

Further, both the associated first terminal and the second terminal synchronously perform the identity authentication of the aforementioned user.

Further, collecting geographic location information of the second terminal and the first terminal;

determining whether the first terminal is located within the preset range of the second terminal;

If the determination is yes, the authentication information is sent to the first terminal.

Further, before sending the authentication information to the second terminal logged in with the same instant messaging tool identification number, it also includes the steps of:

Ask the user whether a forwarding operation is required at the first terminal;

When the operation message of the user is collected, and it is determined that the foregoing operation message corresponds to confirming the forwarding, the authentication information is sent to the second terminal registered with the same instant messaging tool identification number.

Further, the second terminal is associated with the first terminal based on the mobile phone number, instant messaging tool identification number, e-mail number, ID number and/or user name set by the user.

Further, the second terminal is associated with the first terminal based on the geographic address information and/or IP address information set by the user.

The invention also discloses a device for sending authentication information through instant messaging, and the device includes the following structure:

an authentication information sending unit, configured to trigger the authentication information corresponding to the network login to be sent to the first terminal associated with the second terminal when the user uses the second terminal to log in to the network;

The authentication information processing unit is configured to collect the authentication information through the instant messaging tool on the first terminal, and send the authentication information to the second terminal registered with the same instant messaging tool identification number.

The present invention also provides a system for sending authentication information through instant messaging, the system comprising:

The second terminal is used to trigger the authentication information corresponding to the network login to be sent to the associated first terminal when the user uses the second terminal to log in to the network, and to receive the authentication information sent by the first terminal;

The first terminal is used to receive the authentication information sent by the second terminal, collect the authentication information through the instant messaging tool, and send the authentication information to the second terminal logged in with the same instant messaging tool identification number.

beneficial effect

Compared with the prior art, the present invention has the following advantages and positive effects as an example because of adopting the above technical solutions: the present invention forwards the authentication information between the login terminal and the authentication information receiving terminal through the instant communication tool, thereby improving the authentication efficiency. Convenience and improve user experience.

Description of drawings

FIG. 1 is a flowchart of a method for sending authentication information through instant messaging according to an embodiment of the present invention.

FIG. 2 to FIG. 6 are exemplary diagrams of transmitting authentication information according to an embodiment of the present invention.

FIG. 7 is a module structure diagram of an apparatus for sending authentication information through instant messaging according to an embodiment of the present invention.

FIG. 8 is a module structure diagram of a system for sending authentication information through instant messaging according to an embodiment of the present invention.

Description of reference numbers:

Computer terminal 100, mobile terminal 200, ITEM item 210, contact list 220, user 300; device 400, authentication information sending unit 410, authentication information processing unit 420; system 500, first terminal 510, second terminal 520.

Embodiments of the present invention

Type the paragraphs describing embodiments of the invention here. The method, device and system for sending authentication information through instant messaging provided by the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that the technical features or combinations of technical features described in the following embodiments should not be considered isolated, and they can be combined with each other to achieve better technical effects. In the drawings of the following embodiments, the same reference numerals appearing in the various drawings represent the same features or components, which may be used in different embodiments. Therefore, once an item is defined in one figure, it need not be discussed further in subsequent figures.

It should be noted that the structures, proportions, sizes, etc. shown in the accompanying drawings in this specification are only used to cooperate with the contents disclosed in the specification, so as to be understood and read by those who are familiar with the technology, and are not used to limit the invention. The limited conditions for implementation, any structural modification, change in proportional relationship or adjustment of size, shall fall within the scope of the technical content disclosed in the invention without affecting the efficacy and purpose of the invention. within the range. The scope of the preferred embodiments of the present invention includes additional implementations in which the functions may be performed out of the order described or discussed, including performing the functions in a substantially simultaneous manner or in the reverse order depending upon the functions involved, which should be Embodiments of the invention will be understood by those skilled in the art to which the embodiments of the invention pertain.

Techniques, methods, and devices known to those of ordinary skill in the relevant art may not be discussed in detail, but where appropriate, such techniques, methods, and devices should be considered part of the authorized description. In all examples shown and discussed herein, any specific value should be construed as illustrative only and not as limiting. Accordingly, other examples of exemplary embodiments may have different values.

Example

Referring to FIG. 1, a method for sending authentication information through instant messaging is disclosed, including the following steps:

S100, the user uses the second terminal to log in to the network.

The second terminal is, by way of example, not a limitation, such as a user's desktop computer terminal. The network login can be any type of network access, such as login to a shopping website, login to chat software, login to online banking, etc. as an example and not a limitation.

S200, triggering the sending of authentication information corresponding to the network login to the first terminal associated with the second terminal.

The first terminal, by way of example and not limitation, may be various commonly used portable mobile terminals such as mobile phones, PDAs, and tablet computers, and various smart wearable electronic devices, such as smart glasses and smart watches.

The first terminal includes information content capable of identifying the user's identity. For example, when the first terminal is a mobile phone, the corresponding information content is the mobile phone number (the user's identity can be confirmed through the mobile phone number). In this embodiment, a mobile phone is preferably used as the first terminal.

Among the five functions of network information security (identity authentication, authorization, confidentiality, integrity and non-repudiation), authentication is the most basic and most important link. The role of identity authentication is to ensure that the true wishes of users are reflected in specific decision-making links. Usually, identity authentication has three elements (multi-factor authentication, MFA): what is known, such as password, security questions; all, such as mobile phone verification code, U shield; what is, such as fingerprint, pupil. From a cryptographic point of view, the verification performed using the above two is called two-factor authentication (TFA, Two factor authentication). For example, using the login password to complete the login is single-factor authentication; using the login password + mobile phone verification code to complete the payment is two-factor authentication (known + all); using the login password + payment password to complete the payment is also two-factor authentication (known + known).

In this embodiment, the authentication information is authentication information generated for the user's network login behavior. The authentication information is preferably time-limited, and is valid within a preset time. After the preset time limit is exceeded, the authentication Information invalid.

The manner of associating the second terminal with the first terminal may be based on the mobile phone number, instant messaging tool identification number, e-mail number, ID number and/or user name set by the user.

The association can be pre-established or established based on the user's network login operation, and the association between the two can be permanent or time-limited (a temporary association relationship is established, and the network login is successfully terminated. connection relation). As an example and not a limitation, for example, when a user logs in to a certain webpage on a computer and receives a verification code through his mobile phone number during the login process, based on the login operation, the computer and the mobile phone corresponding to the mobile phone number are associated. After the login is successful, the computer and the mobile phone are disconnected.

The manner of associating the second terminal with the first terminal may also be based on geographic address information and/or IP address (physical address) information set by the user.

As an example but not a limitation, for example, the geographic location information of the mobile phone terminal and the computer terminal is collected in real time, and the mobile phone terminal and the computer terminal at the same plane position and the same height position are associated. Or, obtain the local area network information accessed by the computer terminal and the computer terminal, and associate the mobile phone terminal and the computer terminal in the same local area network.

S300: Collect the authentication information through the instant messaging tool on the first terminal, and send the authentication information to the second terminal logged in with the same instant messaging tool identification number.

The authentication information is forwarded between the first terminal and the second terminal through the user's instant messaging tool, so that the user can log in to the web page at the login terminal (the second terminal).

In this embodiment, the authentication information may be a short message verification code, and before the instant messaging tool collects the authentication information, the foregoing authentication information is received through a short message service (SMS) of the mobile phone.

Alternatively, the authentication information is a mailbox verification code, and before the instant messaging tool collects the authentication information, the foregoing authentication information is received through an electronic mailbox (Email) tool on the first terminal.

By way of example and not limitation, typical implementations of this embodiment are described with reference to FIGS. 2 to 5 .

Referring to FIG. 2 , the user 300 needs to log in the account of a shopping website on the computer terminal 100 .

Referring to FIG. 3 , it is prompted on the user login interface that a mobile phone verification code needs to be sent for identity authentication. The mobile phone verification code is sent to the mobile phone terminal 200 of the user 300 . In the prior art, the user needs to find the mobile phone terminal 200, send it with the mobile phone verification code, check the mobile phone verification code, and then input it to the aforementioned login page.

In this embodiment, the user does not need to operate the mobile phone terminal 200. After receiving the mobile phone verification code, the mobile phone terminal 200 collects the aforementioned mobile phone verification code through the instant messaging tool of the user 300 on the mobile phone terminal 200, and then forwards the verification code. to the computer terminal 100 registered with the same instant messaging tool identification number.

Referring to Fig. 4, taking the user Austus as an example, he has logged in his own instant messaging (IM) tool QQ on his personal computer and mobile phone at the same time, then the mobile phone verification code received by the user on the mobile phone terminal 200 can be sent through the QQ mobile phone terminal. To the user's QQ computer terminal, the user can directly view the mobile phone verification code through the IM tool QQ on the computer terminal 100 without operating the mobile phone.

Referring to FIG. 5 , it is illustrated that the IM tool computer terminal 100 receives the mobile phone verification code sent by the mobile phone terminal 200 with the same instant messaging tool identification number. The user can view the mobile phone verification code on the instant messaging client of the computer terminal 100 .

Preferably, in this embodiment, it may further include the step of: loading the aforementioned authentication information into the authentication information input column through an instant messaging tool or a third-party application associated with the instant messaging tool. In this way, the user does not need to manually input the verification code in the authentication information input field.

The third-party application, as a proxy application of the IM tool, can directly fill in the verification code of the mobile phone into the verification code information input field, so that the user does not need to manually input it.

Referring to Fig. 6, an example of automatically filling the mobile phone verification code into the verification code information input field is illustrated.

In this embodiment, preferably, the associated first terminal and the second terminal are located in the same local area network. As an example and not a limitation, for example, the computer terminal and the mobile phone terminal are connected to the same router.

In this embodiment, the identity authentication of the aforementioned user may be performed synchronously on both the associated first terminal and the second terminal.

The information involved in the identity authentication of the user, by way of example and not limitation, may be one or more of passwords, credit cards, mobile phone numbers, USB shields, fingerprints, and facial data.

In another implementation manner of this embodiment, the first terminal may be further restricted according to the geographic location information of the first terminal and the second terminal.

Specifically, the geographic location information of the second terminal and the first terminal is collected; it is determined whether the first terminal is located within a preset range of the second terminal; and in the case of determination, authentication information is sent to the first terminal.

In another implementation of this embodiment, considering the user experience, the user's willingness may also be inquired before forwarding the authentication information.

Specifically, before sending the authentication information to the second terminal logged in with the same instant messaging tool identification number, the method further includes the steps of: asking the user whether a forwarding operation is required at the first terminal; collecting operation messages of the user, and determining that the aforementioned operation messages correspond to In order to confirm the forwarding, the authentication information is sent to the second terminal registered with the same instant messaging tool identification number.

Referring to FIG. 7, another embodiment of the present invention provides an apparatus for sending authentication information through instant messaging.

The device 400 includes the following structures:

The authentication information sending unit 410 is configured to trigger the sending of authentication information corresponding to the network login to the first terminal associated with the second terminal when the user uses the second terminal to log in to the network.

The authentication information processing unit 420 is configured to collect the authentication information through the instant messaging tool on the first terminal, and send the authentication information to the second terminal registered with the same instant messaging tool identification number.

The apparatus may also be provided with other functional modules as required. For details, refer to the foregoing embodiments, which will not be repeated here.

Referring to FIG. 8, another embodiment of the present invention provides a system for sending authentication information through instant messaging.

The system 500 includes:

The second terminal 520 is configured to trigger, when the user uses the second terminal to log in to the network, to send the authentication information corresponding to the network login to the associated first terminal, and to receive the authentication information sent by the first terminal.

The first terminal 510 is configured to receive the authentication information sent by the second terminal, collect the authentication information through an instant messaging tool, and send the authentication information to the second terminal logged in with the same instant messaging tool identification number.

The second terminal 520 is, by way of example, not a limitation, such as a user's desktop computer terminal. The network login can be any type of network access, such as login to a shopping website, login to chat software, login to online banking, etc. as an example and not a limitation.

The first terminal 510, by way of example and not limitation, may be various commonly used portable mobile terminals such as mobile phones, PDAs, and tablet computers, and various smart wearable electronic devices, such as smart glasses and smart watches.

The first terminal 510 contains information content that can identify the user's identity. For example, when the first terminal is a mobile phone, the corresponding information content is a mobile phone number (the user's identity can be confirmed through the mobile phone number). In this embodiment, a mobile phone is preferably used as the first terminal.

The authentication information is authentication information generated for the user's network login behavior. The authentication information is preferably time-limited, and is valid within a preset time period. After the preset time limit is exceeded, the authentication information is invalid.

Preferably, in this embodiment, the first terminal is a mobile phone, and the second terminal is associated with the first terminal based on a mobile phone number. The authentication information is forwarded between the first terminal and the second terminal through the user's instant messaging tool, so that the user can log in to the web page at the login terminal (the second terminal).

As an example and not a limitation, for example, a user needs to log in an account of a shopping website on a computer terminal.

On the user login interface, it is prompted that you need to send a mobile phone verification code for identity authentication. The mobile phone verification code is sent to the user's mobile phone terminal. After receiving the above-mentioned mobile phone verification code, the mobile phone terminal collects the above-mentioned mobile phone verification code through the user's instant messaging tool on the mobile phone terminal, and then forwards the verification code to the computer terminal registered with the same instant messaging tool identification number.

In the above description, although all components of various aspects of the present disclosure may be explained as being assembled or operatively connected as a circuit, the present disclosure is not intended to limit itself to these aspects. Rather, the various components may be selectively and operatively combined in any number within the intended scope of this disclosure. Each of these components may also itself be implemented in hardware, while the individual components may be combined in part or selectively collectively and implemented as a computer program having program modules for performing the functions of the hardware equivalent. Code or code segments to construct such programs can be readily derived by those skilled in the art. Such a computer program can be stored in a computer-readable medium, which can be executed to implement various aspects of the present disclosure. The computer-readable media may include magnetic recording media, optical recording media, and carrier wave media.

Additionally, terms like "includes," "includes," and "has" should by default be construed as inclusive or open, rather than exclusive or closed, unless explicitly defined to the contrary. All technical, scientific or other terms have the meaning as understood by those skilled in the art unless they are defined to the contrary. Common terms found in dictionaries should not be interpreted too ideally or too practically in the context of related technical documents, unless this disclosure explicitly defines them as such.

While exemplary aspects of the present disclosure have been described for illustrative purposes, those skilled in the art will appreciate that the foregoing description is merely a description of preferred embodiments of the present invention and is not intended to limit The scope of the embodiments includes additional implementations in which the functions may be performed out of the order described or discussed. Any changes and modifications made by those of ordinary skill in the field of the present invention according to the above disclosure fall within the protection scope of the claims.

Claims

A method for sending authentication information through instant messaging, characterized by comprising the following steps:

The user uses the second terminal to log in to the network;

triggering the sending of authentication information corresponding to the network login to the first terminal associated with the second terminal;

The authentication information is collected by the instant messaging tool on the first terminal, and the authentication information is sent to the second terminal registered with the same instant messaging tool identification number.
The method according to claim 1, further comprising the step of: loading the authentication information into the authentication information input field through an instant messaging tool or a third-party application associated with the instant messaging tool.
The method according to claim 1, wherein the first terminal is a mobile phone, the authentication information is a short message verification code, and the authentication information is received through a short message service of the mobile phone before the instant messaging tool collects the authentication information.
The method according to claim 1, wherein the authentication information is a mailbox verification code, and the authentication information is received by an Email tool on the first terminal before the instant messaging tool collects the authentication information.
The method according to claim 1, wherein the associated first terminal and the second terminal are located in the same local area network.
The method according to claim 1, characterized in that: both the associated first terminal and the second terminal synchronously perform the identity authentication of the user.
The method of claim 1, wherein:

collecting geographic location information of the second terminal and the first terminal;

determining whether the first terminal is located within the preset range of the second terminal;

If the determination is yes, the authentication information is sent to the first terminal.
The method according to claim 1, further comprising the step of: before sending the authentication information to the second terminal registered with the same instant messaging tool identification number,

Ask the user whether a forwarding operation is required at the first terminal;

When the operation message of the user is collected, and it is determined that the foregoing operation message corresponds to confirming the forwarding, the authentication information is sent to the second terminal registered with the same instant messaging tool identification number.
The method according to claim 1, wherein: based on the mobile phone number, instant messaging tool identification number, e-mail number, ID number and/or user name set by the user, the second terminal and the first terminal are to associate.
The method according to claim 1, wherein the second terminal is associated with the first terminal based on geographic address information and/or IP address information set by a user.
A device for sending authentication information through instant messaging is characterized by comprising the following structure:

an authentication information sending unit, configured to trigger the authentication information corresponding to the network login to be sent to the first terminal associated with the second terminal when the user uses the second terminal to log in to the network;

The authentication information processing unit is configured to collect the authentication information through the instant messaging tool on the first terminal, and send the authentication information to the second terminal registered with the same instant messaging tool identification number.
A system for sending authentication information through instant messaging, comprising:

The second terminal is used to trigger the authentication information corresponding to the network login to be sent to the associated first terminal when the user uses the second terminal to log in to the network, and to receive the authentication information sent by the first terminal;

The first terminal is used to receive the authentication information sent by the second terminal, collect the authentication information through the instant messaging tool, and send the authentication information to the second terminal logged in with the same instant messaging tool identification number.