Summary of the invention
In view of this, main purpose of the present invention provides a kind of method, Apparatus and system of realizing logining affirmation, solution occurs being leaked, being stolen by the existing password of traditional login mode that the user inputs user name and password easily, thus the problem of harm user account safety.
For addressing the above problem, technical scheme provided by the invention is as follows:
A kind of method that realizes logining affirmation, this method comprises:
After platform to be logined received the username information of importing when the user initiates to login, the authentication service platform obtained the phone number corresponding with described username information and logins information to be confirmed; Wherein, described phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user;
Described authentication service platform sends described login information to be confirmed to described phone number corresponding mobile terminal;
Described authentication service platform is waited to login platform and is sent and allow log-on message to described after receiving the login confirmation that described portable terminal sends, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
Accordingly, described bindings comprises: the corresponding relation of preserving username information and phone number when the user registers.
Accordingly, described bindings comprises: judge whether the user is the registered user, if then preserve the corresponding relation of username information and phone number; If not, then register.
Accordingly, when the phone number of described username information correspondence was kept in the server of authentication service platform, described authentication service platform obtained the phone number corresponding with described username information and logins information to be confirmed, comprising:
Describedly wait to login platform and send described username information to described authentication service platform, described authentication service platform obtains the phone number of described user name correspondence and the login information to be confirmed of generation by the server of inquiring about described authentication service platform.
Accordingly, when the phone number of described username information correspondence was kept in the server of waiting to login platform, described authentication service platform obtained the phone number corresponding with described username information and logins information to be confirmed, comprising:
Describedly wait to login platform and obtain the phone number of described username information correspondence and generate login information to be confirmed by inquiring about the described server of logining platform of waiting, described authentication service platform obtains by phone number and the described login information to be confirmed of waiting to login the described username information correspondence that platform sends.
Accordingly, described authentication service platform sends described login information to be confirmed and described portable terminal to described phone number corresponding mobile terminal and sends the login confirmation or login refusal information sends by mobile network or operator's short message to described authentication service platform.
Accordingly, described method also comprises:
Before the authentication service platform obtains the phone number and login information to be confirmed of described user name correspondence, judge whether described username information exists, if, then the authentication service platform obtains phone number and the login information to be confirmed of described username information correspondence, if not, then point out mistake, make and wait to login the platform login failure.
Accordingly, described method also comprises:
If wait to login platform according to after forbidding that log-on message realizes the described user's of refusal login, before waiting that logining platform receives the permission log-on message again, forbid this username information corresponding account number login.
Accordingly, described login information to be confirmed comprises login time, login place, login platform, login username.
A kind of system that realizes logining affirmation, this system comprises:
Platform to be logined is used for: receive the username information of importing when the user initiates to login; After portable terminal sent the login confirmation to the authentication service platform, the permission log-on message according to the authentication service platform that receives sends realized described user's login; Portable terminal sent login refusal information to the authentication service platform after, the log-on message of forbidding according to the authentication service platform transmission that receives realized the described user's of refusal login;
Portable terminal, described portable terminal are the phone number corresponding mobile terminal of username information correspondence, are used for: after the login information to be confirmed that receives the transmission of authentication service platform, send login confirmation or login refusal information to the authentication service platform;
The authentication service platform is used for: after platform to be logined receives the username information of importing when the user initiates to login, obtain the phone number corresponding with described username information and login information to be confirmed; Wherein, described phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user; Send described login information to be confirmed to described phone number corresponding mobile terminal; After receiving the login confirmation that described portable terminal sends, wait to login platform and send and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
Accordingly, described authentication service platform comprises:
Acquisition module is used for obtaining the phone number corresponding with described username information and logining information to be confirmed after platform to be logined receives the username information of importing when the user initiates to login;
First sending module is used for sending described login information to be confirmed to described phone number corresponding mobile terminal;
Second sending module is used for after receiving the login confirmation that described portable terminal sends, and waits to login platform and sends and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
Accordingly, the phone number of described username information correspondence is to be kept in the server of described authentication service platform.
Accordingly, the phone number of described username information correspondence is to be kept in the described server of waiting to login platform.
A kind of device of realizing logining affirmation, this device comprises:
Acquisition module is used for obtaining the phone number corresponding with described username information and logining information to be confirmed after platform to be logined receives the username information of importing when the user initiates to login; Wherein, described phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user;
First sending module is used for sending described login information to be confirmed to described phone number corresponding mobile terminal;
Second sending module is used for after receiving the login confirmation that described portable terminal sends, and waits to login platform and sends and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
This shows that the present invention has following beneficial effect:
When the user waits to login platform in login, do not need to input password, but adopted by logining affirmation with the phone number corresponding mobile terminal reception of user name binding from the mode of the message of authentication service platform, therefore this login mode has been avoided issuable a series of safety issue because password reveals.In addition, this login mode does not need the user that login password is set yet, and has avoided the user to forget the problem of password.
Embodiment
For above-mentioned purpose of the present invention, feature and advantage can be become apparent more, below in conjunction with the drawings and specific embodiments the embodiment of the invention is described in further detail.
The present invention realizes logining the method for affirmation, it is the existing safety issue of traditional login mode of inputing user name and password by the user at of the prior art, realize that this method comprises: platform to be logined is received the username information of input when the user initiates to login, the authentication service platform obtains phone number and the login information to be confirmed of the username information correspondence of preservation in advance, and to this phone number corresponding mobile terminal transmission login information to be confirmed, the user use this portable terminal to send login confirmation or login refusal information to the authentication service platform by the user then, so that can login success or login failure.
Based on above-mentioned thought, referring to shown in Figure 1, the present invention realizes that the method for logining affirmation may further comprise the steps:
Step 11: after platform to be logined received the username information of importing when the user initiates to login, the authentication service platform obtained the phone number corresponding with username information and logins information to be confirmed; Wherein, this phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user;
Step 12: the authentication service platform sends login information to be confirmed to the phone number corresponding mobile terminal;
Step 13: the authentication service platform is after receiving the login confirmation that portable terminal sends, to waiting that logining platform sends the permission log-on message, in order to wait to login platform is realized the user according to this information login; After receiving the login refusal information that portable terminal sends, to waiting that logining the platform transmission forbids log-on message, in order to wait to login platform is realized refusing user's according to this information login.
Like this, when the user waits to login platform in login, do not need to input password, but adopt by logining affirmation with the phone number corresponding mobile terminal reception of user name binding from the mode of the message of authentication service platform, avoided issuable a series of safety issue because password reveals.Above-mentioned platform to be logined can be user website to be logined, and also can be user's software client to be logined etc.
Above-mentioned bindings can be finished when the user registers, and just preserves the corresponding relation of username information and phone number when the user registers; Can judge earlier also whether the user is the registered user, if then preserve the corresponding relation of username information and phone number; If not, then finish registration earlier, and preserve the corresponding relation of username information and phone number.
This corresponding relation can be kept in the server of service authentication platform, also can be kept to wait to login in the server of platform.When this corresponding relation is kept in the server of authentication service platform, wait to login platform the username information of receiving is sent to the authentication service platform, by inquiring about the phone number that its server directly obtains the username information correspondence, and generate login information to be confirmed by the authentication service platform; When this corresponding relation is kept in the server of waiting to login platform, by waiting to login platform obtains user name message correspondence by its server of inquiry phone number, and generate login information to be confirmed, wait to login platform and send this phone number and login information to be confirmed to the authentication service platform.
Above-mentioned login information to be confirmed comprises: information such as login time, login place, login platform, user name.The user can judge whether to finish this time register according to the content in the login information to be confirmed.
Above-mentioned authentication service platform process of photos and sending messages under the portable terminal can be that the mode by mobile network's PUSH message sends information to portable terminal, also can be that the mode by operator's short message sends information to portable terminal.Same, the process that portable terminal is sent out message on the authentication service platform can realize by the mode that sends mobile network's PUSH message, also can realize by the mode that sends operator's short message.In addition, authentication service platform photos and sending messages and portable terminal photos and sending messages on the authentication service platform under the portable terminal need be adopted in a like fashion and carry out.But, realize descending and upstream message by the mode that sends SMS message, expense is higher, increase use cost can for the user of user and authentication service platform, and realize descending and upstream message by the mode of mobile network's PUSH message, only need burden mobile network charge on traffic to get final product, cheap with respect to the expense that sends SMS message.Therefore, the mode by mobile network's PUSH message realizes that mutual transmission information is more preferred mode between authentication service platform and portable terminal.
The portable terminal here can be mobile phone, it also can be the portable terminal with SIM card, and have function of surfing the Net, can enough receive the pushed information from the mobile network, and send login confirmation or login refusal information by the mobile network to the authentication service platform.
When the corresponding relation of the username information of user login and cell-phone number was kept in the server of authentication service platform, as shown in Figure 2, the implementation procedure of a specific embodiment of method that the present invention realizes logining affirmation was as follows:
Step 21: wait to login platform and receive the username information of importing when the user initiates to login;
Step 22: wait to login platform and send this username information to the service authentication platform, the service authentication platform obtains the phone number of the username information correspondence of preserving in advance and the login information to be confirmed of generation by its server of inquiry;
Step 23: the authentication service platform sends login information to be confirmed by the mobile network to this phone number corresponding mobile terminal;
Step 24: the login information to be confirmed that the user receives according to this portable terminal judges whether to login, if, then use this portable terminal to send the login confirmation to the authentication service platform by the mobile network, if not, then use this portable terminal to send login refusal information to the authentication service platform by the mobile network;
Step 25: the authentication service platform is if receive the login confirmation, then to waiting that logining platform sends the permission log-on message, in order to wait to login platform is realized the user according to this information login; If receive login refusal information, then to waiting that logining the platform transmission forbids log-on message, in order to wait to login platform is realized refusing user's according to this information login.
In this embodiment, when the corresponding relation of the username information of user login and cell-phone number is kept in the server of authentication service platform, wait to login platform and earlier the username information of receiving is sent to the authentication service platform, again by the authentication service platform by inquiring about the phone number that its server directly obtains the username information correspondence, generate login information to be confirmed, and carry out subsequent step by the authentication service platform.
When the corresponding relation of the username information of user login and phone number was kept in the server of waiting to login platform, as shown in Figure 3, the implementation procedure of a specific embodiment of method that the present invention realizes logining affirmation was as follows:
Step 31: wait to login platform and receive the username information of importing when the user initiates to login;
Step 32: wait to login platform and obtain the phone number of user name message correspondence by its server of inquiry, and generate login information to be confirmed, the authentication service platform obtains by phone number and the login information to be confirmed of waiting to login the user name message correspondence that platform sends
Step 33: the authentication service platform sends login information to be confirmed by the mobile network to this phone number corresponding mobile terminal;
Step 34: the login information to be confirmed that the user receives according to this portable terminal judges whether to login, if, then use this portable terminal to send the login confirmation to the authentication service platform by the mobile network, if not, then use this portable terminal to send login refusal information to the authentication service platform by the mobile network;
Step 35: the authentication service platform is if receive the login confirmation, then to waiting that logining platform sends the permission log-on message, in order to wait to login platform is realized the user according to this information login; If receive login refusal information, then to waiting that logining the platform transmission forbids log-on message, in order to wait to login platform is realized refusing user's according to this information login.
In this embodiment, when the corresponding relation of the user name of user login and cell-phone number is kept in the server of waiting to login platform, earlier by waiting that logining platform obtains the corresponding phone number of user name by its server of inquiry, and generation login information to be confirmed, again phone number and the login information to be confirmed that inquires is sent to the authentication service platform, carries out subsequent step by the authentication service platform again.
The register of not being correlated with the user and when having received the relevant log-on message that sends from the authentication service platform, that is to say and the stolen situation of website number of the account to have occurred, the user is except sending login refusal information to forbid its number of the account login to the authentication service platform, can also further take some precautionary measures, such as the login of temporary transient this number of the account of shielding.
In addition, in the time of can also working as the user name input error, in the time of just can't obtaining corresponding phone number because there not being username information, return corresponding information.
Take all factors into consideration above various situation, as shown in Figure 4, the implementation procedure of an optimum embodiment of method that the present invention realizes logining affirmation is as follows:
Step 41: wait to login platform and receive the username information of importing when the user initiates to login;
Step 42: platform to be logined judges whether its server exists the username information of preservation in advance and the corresponding relation of phone number, if then execution in step 431, continue execution in step 44 afterwards, if not, then execution in step 432, continue execution in step 44 afterwards;
Step 431: platform to be logined judges whether to exist this username information, if, the phone number of the username information correspondence of importing by its server lookup user then, generate login information to be confirmed, and send phone number and the login information to be confirmed of user name message correspondence to the authentication service platform, if not, then point out error message, make login failure;
Step 432: wait to login platform and send this username information to the service authentication platform, the service authentication platform judges whether to exist this username information, if, then by inquiring about the phone number that its server obtains the user name correspondence that user inputs, and generation login information to be confirmed, if not, then to waiting that logining platform sends error message, makes login failure;
Step 44: the authentication service platform sends login information to be confirmed by the mobile network to this phone number corresponding mobile terminal;
Step 45: the login information to be confirmed that the user receives according to this portable terminal judges whether to login, if, then use this portable terminal to send the login confirmation to the authentication service platform by the mobile network, if not, then use this portable terminal to send login refusal information to the authentication service platform by the mobile network;
Step 46: the authentication service platform is if receive the login confirmation, then to waiting that logining platform sends the permission log-on message, in order to wait to login platform is realized the user according to this information login; If receive login refusal information, then to waiting that logining the platform transmission forbids log-on message, realize the login of refusing user's in order to wait to login platform according to this information, and before waiting that logining platform receives the permission log-on message again, forbid the corresponding number of the account login of this user name.
In this embodiment, before the authentication service platform obtains the phone number of username information correspondence, judge whether this user name exists earlier, if, just carry out subsequent step, if not, then make and wait to login the platform login failure, and the prompting mistake.In addition, after platform to be logined receives to forbid log-on message, before waiting that logining platform receives the permission log-on message again, forbid the corresponding number of the account login of this user name.Can make the user like this after finding the login of the unusual also refusal of its account existence, before the user normally logined again, its number of the account no longer was logged, and has protected the fail safe of user account.
Correspondingly, the system that the present invention also provides a kind of existing login to confirm as shown in Figure 5, is a kind of structured flowchart of this system.
In this embodiment, described system comprises: wait to login platform 501, portable terminal 502, authentication service platform 503.
Wherein, wait to login platform 501, be used for: receive the username information of importing when the user initiates to login; After portable terminal sent the login confirmation to the authentication service platform, the permission log-on message according to the authentication service platform that receives sends realized described user's login; Portable terminal sent login refusal information to the authentication service platform after, the log-on message of forbidding according to the authentication service platform transmission that receives realized the described user's of refusal login.
Portable terminal 502, described portable terminal is the phone number corresponding mobile terminal of username information correspondence, be used for: after the login information to be confirmed that receives the transmission of authentication service platform, send login confirmation or login refusal information to the authentication service platform.
Authentication service platform 503 is used for: after platform to be logined receives the username information of importing when the user initiates to login, obtain the phone number corresponding with described username information and login information to be confirmed; Wherein, described phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user; Send described login information to be confirmed to described phone number corresponding mobile terminal; After receiving the login confirmation that described portable terminal sends, wait to login platform and send and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
Described authentication service platform can comprise: acquisition module, first sending module, second sending module.
Wherein, acquisition module is used for obtaining the phone number corresponding with described username information and logining information to be confirmed after platform to be logined receives the username information of importing when the user initiates to login.
First sending module is used for sending described login information to be confirmed to described phone number corresponding mobile terminal.
Second sending module is used for after receiving the login confirmation that described portable terminal sends, and waits to login platform and sends and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
When the corresponding relation of the username information of user login and phone number was kept in the server of authentication service platform, the concrete operation principle of native system was:
Wait to login platform 501 and receive the username information of importing when the user initiates to login;
Service authentication platform 503 is after waiting to login platform 501 and sending these username informations to service authentication platform 503, and the server by the authentication query service platform obtains the phone number of the username information correspondence of preserving in advance and the login information to be confirmed of generation;
Authentication service platform 503 sends login information to be confirmed to this phone number corresponding mobile terminal 502;
The login information to be confirmed that the user receives according to this portable terminal 502 judges whether to login, if, then use this portable terminal 502 to send the login confirmation to authentication service platform 503, if not, then use this portable terminal 502 to send login refusal information to authentication service platform 503;
Authentication service platform 503 is after receiving the login confirmation, to waiting that logining platform 501 sends the permission log-on message, in order to wait to login platform 501 is realized described user according to this information login; After receiving login refusal information, to waiting that logining platform 501 transmissions forbids log-on message, in order to wait to login platform 501 is realized refusing user's according to this information login.
When the corresponding relation of the username information of user login and phone number was kept in the server of waiting to login platform, the concrete operation principle of native system was:
Wait to login platform 501 and receive the username information of importing when the user initiates to login;
Service authentication platform 503 obtains to wait to login phone number and the login information to be confirmed of the username information correspondence that platform 501 sends after waiting to login platform 501 and waiting to login the server of platform by inquiry and obtain the phone number of the username information correspondence of preserving in advance and generate login information to be confirmed;
Authentication service platform 503 sends login information to be confirmed to this phone number corresponding mobile terminal 502;
The login information to be confirmed that the user receives according to this portable terminal 502 judges whether to login, if, then use this portable terminal 502 to send the login confirmation to authentication service platform 503, if not, then use this portable terminal 502 to send login refusal information to authentication service platform 503;
Authentication service platform 503 is after receiving the login confirmation, to waiting that logining platform 501 sends the permission log-on message, in order to wait to login platform 501 is realized described user according to this information login; After receiving login refusal information, to waiting that logining platform 501 transmissions forbids log-on message, in order to wait to login platform 501 is realized refusing user's according to this information login.
The device that the present invention also provides a kind of existing login to confirm referring to shown in Figure 6, is a kind of structural representation of this device.In this embodiment, described device comprises: acquisition module 601, the first sending modules 602, the second sending modules 603.
Wherein, acquisition module 601 is used for obtaining the phone number corresponding with described username information and logining information to be confirmed after platform to be logined receives the username information of importing when the user initiates to login; Wherein, described phone number obtains for the corresponding relation that carries out the username information preserved after the bindings and phone number according to the registered user;
First sending module 602 is used for sending described login information to be confirmed to described phone number corresponding mobile terminal;
Second sending module 603 is used for after receiving the login confirmation that described portable terminal sends, and waits to login platform and sends and allow log-on message to described, in order to describedly wait to login platform is realized described user according to this information login; After receiving the login refusal information that described portable terminal sends, wait to login platform and send and forbid log-on message to described, in order to describedly wait to login platform is realized the described user of refusal according to this information login.
Need to prove that each embodiment adopts the mode of going forward one by one to describe in this specification, what each embodiment stressed is and the difference of other embodiment that identical similar part is mutually referring to getting final product between each embodiment.For the disclosed system of embodiment or device, because it is corresponding with the embodiment disclosed method, so description is fairly simple, relevant part partly illustrates referring to method and gets final product.
Also need to prove, in this article, relational terms such as first and second grades only is used for an entity or operation are made a distinction with another entity or operation, and not necessarily requires or hint and have the relation of any this reality or in proper order between these entities or the operation.And, term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability, thereby make and comprise that process, method, article or the equipment of a series of key elements not only comprise those key elements, but also comprise other key elements of clearly not listing, or also be included as the intrinsic key element of this process, method, article or equipment.Do not having under the situation of more restrictions, the key element that is limited by statement " comprising ... ", and be not precluded within process, method, article or the equipment that comprises described key element and also have other identical element.
The method of describing in conjunction with embodiment disclosed herein or the step of algorithm can directly use the software module of hardware, processor execution, and perhaps the combination of the two is implemented.Software module can place the storage medium of any other form known in random asccess memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable ROM, register, hard disk, moveable magnetic disc, CD-ROM or the technical field.
To the above-mentioned explanation of the disclosed embodiments, make this area professional and technical personnel can realize or use the present invention.Multiple modification to these embodiment will be apparent concerning those skilled in the art, and defined General Principle can realize under the situation that does not break away from the spirit or scope of the present invention in other embodiments herein.Therefore, the present invention will can not be restricted to these embodiment shown in this article, but will meet the wideest scope consistent with principle disclosed herein and features of novelty.