CN103347002B - Socialization's login method, system and device - Google Patents

Abstract

The present invention proposes a kind of socialization login method, comprise the following steps: the platform identification of open platform, the mark of third party's service and the third party that the third party's service based on subscriber in a, terminal selects services the token loopback address of offer and generate agent logs address, and by terminal loads agent logs address；B, socialization's login service device log in the URI address of authorization page according to the mark of third party's service in logging request and the user of platform identification generation open platform, and redirect the terminal to URI address；C, terminal receive the identity information of user's input, and the identity information of user is fed back to open platform；D, third party service the third-party server of correspondence and pass through socialization's login service device user profile from open platform acquisition user after the user is authenticated.Present invention reduces development and maintenance cost, while convenient use, improve efficiency.

Description

Socialization's login method, system and device

Technical field

The present invention relates to field of computer technology, particularly to a kind of socialization login method, system and dress Put.

Background technology

Along with the appearance of more and more open platforms, huge by dock that each great opening platform opened Account system, for self website, the application more login users of introducing, promotes user's liveness, becomes Increasing third party's website and the inevitable choice of application.

Existing docking concept is that each third party's service is respectively directed to every open platform and does customized development.

Owing to different open platform external interfaces there are differences, the interface specification of such as different platform is different, Different to the degree of support of open authorization criteria agreement, external interface title and support parameter there is also difference Different, these differences cause each website or application to access any open platform, and developer is required for Learning and be familiar with the relevant interface document of this open platform, the api interface using this platform to be opened is carried out Corresponding customized development, the interface upgrade of the open platform of access to be undertaken is brought with change Additional system cost.

See on the whole, third party service introduce open platform open account system, the study paid, The platform quantity that exploitation, maintenance cost access with it is proportional.As it is shown in figure 1, it is micro-for such as Sina The open platforms such as rich, Tengxun, Taobao, Baidu, website A, B etc. dock with above-mentioned open platform, From the point of view of whole the Internet angle, this docking mode will produce the network relation figure shown in Fig. 1, complicated Property is the highest.

Summary of the invention

It is contemplated that at least solve one of technical problem present in prior art.

To this end, it is an object of the present invention to propose a kind of socialization login method.This method is by society Change the introducing of login service device so that third party services without developing for each open platform, reduce Development and maintenance cost, convenient use while improve efficiency.

Second object of the present invention is to propose a kind of socialization login system.

Third object of the present invention is to propose a kind of socialization login service device.

For reaching above-mentioned purpose, the embodiment of first aspect present invention proposes a kind of socialization login method, Comprise the following steps: the platform mark of the open platform that the third party's service based on subscriber in a, terminal selects Knowledge, the mark of third party's service and described third party service the token loopback address generation agency of offer and step on Record address, and by agent logs address described in described terminal loads, to send out to socialization's login service device Send logging request；B, described socialization login service device take according to third party described in described logging request The user of the mark of business and the described platform identification described open platform of generation logs in the URI ground of authorization page Location, and described terminal is redirected to described URI address；C, described terminal receive the body of user's input Part information and to described third party's authorization of service, and by the identity information of described user with to described third party Authorization of service feeds back to open platform so that described open platform according to described identity information to described user Verify；D, described third party service the third-party server of correspondence described user by verifying it Obtained the user profile of described user afterwards from described open platform by described socialization login service device, with Described terminal is made to complete to log in.

Socialization's login method according to embodiments of the present invention is sent agency by terminal to socialization's login service device Logging request, socialization's login service is thought highly of directional terminals to the login page of open platform, third party is taken The server of business correspondence obtains log-on message thus completes to log in.By socialization's login service device, difference is opened The difference setting level platform shields so that third party services without learning platform interface one by one, can dock not Same open platform, helps third-party platform to introduce more login users with less cost, reduce study, Exploitation and the workload safeguarded, decrease workload, reduce cost, improves the efficiency that exploitation is safeguarded, Reduce the complexity each docking the network relation brought.

In one embodiment of the invention, described step b farther includes:

Mark that b1, described socialization login service device service according to third party described in described logging request and It is that described third party services the application PKI of distribution and applies close that described platform identification obtains described open platform Key, and obtain described third party's service registry mandate loopback address on described open platform；

B2, described socialization login service device generate institute according to described application PKI and described mandate loopback address The user stating open platform logs in the URI address of authorization page；And

Described terminal is redirected to described URI address by b3, described socialization login service device.

In one embodiment of the invention, also include after described step c:

Described third party's service is verified by e, described socialization login service device.

In one embodiment of the invention, described step e farther includes:

E1, complete in authorization page to log in, award when described user logs in the described user of described open platform After power operation, described terminal is redirected to described mandate loopback address by described open platform, wherein, described Loopback address is authorized to include the authorization code that described open platform distributes；

E2, described socialization login service device are close according to described authorization code, described application PKI and described application Key sends the request exchanging the first token data for described open platform；

E3, described open platform according to described in exchange the request of the first token data for and generate the first token data also It is back to described socialization login service device；

E4, described socialization login service device generate temporary Authorization code according to described first token data, and build The mark that vertical described temporary Authorization code services to described third party, described open platform mark and described first order The corresponding relation of board data；

Described terminal is redirected to described token loopback address by e5, described socialization login service device, and By described token loopback address, described temporary Authorization code is fed back to described third-party server；

E6, described third-party server are according to described temporary Authorization code, the mark of described third party service and institute State socialization's login service device and distribute to the described application key of described third party service to described socialization Login service device sends the request exchanging token for；And

The mark that e7, described socialization login service device service according to described third party, described socialization log in Server-assignment give described third party service described application key and described temporary Authorization code to the described 3rd Side's server is authenticated.

In one embodiment of the invention, described step d farther includes:

D1, when described third-party server is by after certification, and described socialization login service device is according to described Temporary Authorization code obtains described first token data, described third party's service identifiers and described open platform mark Know；

D2, described socialization login service device are according to described first token data, the mark of described third party service Know, described platform identification generates the second token data, and described second token data is back to the described 3rd Side's server；

D3, described third-party server are sent out to described socialization login service device according to described second token data Send the request obtaining currently logged on user's relevant information；

D4, described socialization login service device obtain described first token data according to described second token data Identify with described open platform, and according to described first token data from corresponding the opening of mark of described open platform Set level platform and obtain the user profile of described terminal active user；And

Described user profile is sent extremely described third-party server by d5, described socialization login service device, with Described third-party server is made to complete to log in.

The embodiment of second aspect present invention proposes a kind of socialization login system, including third-party server, Open platform, socialization's login service device and operation have the terminal that third party services.

Wherein, described client is run in the terminal, the platform of the open platform for selecting according to user Mark, the mark of third party's service and described third party service the token loopback address of offer and generate agency Entry address, and load described agent logs address by described client, to log in described socialization Server sends logging request, and receives the identity information of user's input and award described third party's service Power, and by the identity information of described user and described third party's authorization of service is fed back to open platform, with Described open platform is made according to described identity information, described user to be verified；Described socialization logs in Server, raw for the mark according to the service of third party described in described logging request and described platform identification The user becoming described open platform logs in the URI address of authorization page, and described client is redirected To described URI address；Described third-party server, passes through after described user by checking Described socialization login service device obtains the user profile of described user from described open platform, so that described Client completes to log in；Described open platform, for verifying described user, and safeguards described use The user profile at family.

Socialization's login system according to embodiments of the present invention is sent agency by terminal to socialization's login service device Logging request, socialization's login service is thought highly of directional terminals to the login page of open platform, third party is taken The server of business correspondence obtains log-on message thus completes to log in.By socialization's login service device, difference is opened The difference setting level platform shields so that third party services without learning platform interface one by one, can dock not Same open platform, helps third-party platform to introduce more login users with less cost, reduce study, Exploitation and the workload safeguarded, decrease workload, reduce cost, improves the efficiency that exploitation is safeguarded, Reduce the complexity each docking the network relation brought.

In one embodiment of the invention, described socialization login service device is according to institute in described logging request Mark and the described platform identification described open platform of acquisition of stating third party's service are that described third party services distribution Application PKI and application key, and obtain described third party's service registry mandate on described open platform Loopback address, and the use of described open platform is generated according to described application PKI and described mandate loopback address Family logs in the URI address of authorization page, and described client is redirected to described URI address.

In one embodiment of the invention, described socialization login service device, it is additionally operable to described third party Service is verified.

In one embodiment of the invention, wherein, described open platform, it is additionally operable to when described open platform Described user log in complete in authorization page to log in, described client is redirected to after Authorized operation described Authorizing loopback address, wherein, described mandate loopback address includes the authorization code that described open platform distributes；Institute State socialization's login service device, be additionally operable to according to described authorization code, described application PKI and described application key Obtain the first token data from described open platform, and generate temporary Authorization code according to described first token data, And described client to be redirected to described token loopback address, and by described token loopback address Described temporary Authorization code is fed back to described third-party server；Described third-party server, is additionally operable to basis Institute distributed to by described temporary Authorization code, the mark of described third party service and described socialization login service device The described application key stating third party's service sends the request exchanging token for described socialization login service device, So that described socialization login service device service according to described third party mark, described socialization login service Device distribute to described third party service described application key and described temporary Authorization code described third party is taken Business device is authenticated.

In one embodiment of the invention, described socialization login service device leads at described third-party server Described first token data is obtained according to described temporary Authorization code after crossing certification, and according to described first token Data, the mark of described third party service, described platform identification generate the second token data, and by described Second token data is back to described third-party server, so that described third-party server is according to described second Token data sends the request obtaining currently logged on user's relevant information to described socialization login service device, with And obtain described client according to the described request obtaining currently logged on user's relevant information from described open platform The user profile of active user, and described user profile is sent to described third-party server, so that described Third-party server completes to log in.

The embodiment of third aspect present invention proposes a kind of socialization login service device, including receiver module, Generation module, redirection module and login control module.

Wherein, receiver module is for receiving the logging request that terminal sends, and wherein, described logging request includes Carry according to the platform identification of open platform, the mark of third party's service and the described third party's service that user selects The token loopback address of confession generates agent logs address；Generation module is for according to institute in described logging request The user of the mark and the described platform identification described open platform of generation of stating third party's service logs in authorization page URI address；Redirection module for being redirected to described URI address by described terminal, so that open platform Described terminal is carried out authentication；Log in control module and be used for after described user is by checking, from institute State open platform obtain described user user profile and be forwarded to described third party service correspondence third party clothes Business device, so that described terminal completes to log in.

Socialization's login service device according to embodiments of the present invention receives terminal and sends to socialization's login service device Agent logs is asked, the login page of redirection terminal to open platform, and is serviced the clothes of correspondence by third party Business device obtains log-on message thus completes to log in.By socialization's login service device by the difference of different open platforms Different shield so that third party services without learning platform interface one by one, different open platform can be docked, Help the third-party platform to introduce more login users with less cost, reduce study, develop and safeguard Workload, decreases workload, reduces cost, improves the efficiency that exploitation is safeguarded, it is the most right to reduce The complexity of the network relation that tape splicing comes.

In one embodiment of the invention, described generation module farther includes distribution sub module, authorizes back Adjust address acquisition module and generate submodule.

Distribution sub module is for the mark according to the service of third party described in described logging request and described platform mark Knowing the described open platform of acquisition is application PKI and the application key that described third party services distribution；Authorize readjustment Address acquisition module is for obtaining described third party's service registry mandate readjustment ground on described open platform Location；Generate submodule for generating described open platform according to described application PKI and described mandate loopback address User log in the URI address of authorization page.

In one embodiment of the invention, also include authentication module, for described third party's service is carried out Checking.

In one embodiment of the invention, described authentication module farther include the first redirection submodule, Send submodule, the first reception submodule, generate submodule, the second redirection submodule and authentication module.

First redirects submodule for completing in authorization page to step on when the described user of described open platform logs in After record, Authorized operation, described terminal being redirected to described mandate loopback address, wherein, described mandate is returned Address is adjusted to include the authorization code that described open platform distributes；Send submodule for according to described authorization code, institute State application PKI and described application key and send the request exchanging the first token data for described open platform；The One receive submodule for receive described open platform according to described in exchange for the first token data request generation First token data；Generate submodule to be used for generating temporary Authorization code according to described first token data, and build The mark that vertical described temporary Authorization code services to described third party, described open platform mark and shown first order The corresponding relation of board data；Second redirects submodule returns for described terminal is redirected to described token Adjust address, and by described token loopback address, described temporary Authorization code fed back to described third party service Device, so that described third-party server is according to described temporary Authorization code, the mark of described third party service and institute State socialization's login service device and distribute to the described application key of described third party service to described socialization Login service device sends the request exchanging token for；Authentication module for the mark serviced according to described third party, Described socialization login service device is distributed to the described application key of described third party service and described awards temporarily Described third-party server is authenticated by weighted code.

In one embodiment of the invention, described login control module farther includes the first token data and obtains Delivery block, the second token data generation module, the second receiver module, user profile acquisition module and user's letter Breath sending module.

Wherein, the first token data acquisition module is used for after described third-party server is by certification, root Described first token data, described third party's service identifiers and described opening is obtained according to described temporary Authorization code Platform identification；Second token data generation module is for according to described first token data, described third party clothes The mark of business, described platform identification generate the second token data, and described second token data are back to institute State third-party server；Second receiver module is used for receiving described third-party server according to described second token The request obtaining currently logged on user's relevant information that data send to described socialization login service device；User Data obtaining module is for putting down according to described second token data described first token data of acquisition and described opening Station identification, and obtain institute according to described first token data from the open platform that described open platform mark is corresponding State the user profile of terminal active user；User profile sending module is for sending described user profile to institute State third-party server, so that described third-party server completes to log in.

The additional aspect of the present invention and advantage will part be given in the following description, and part will be retouched from following Become obvious in stating, or recognized by the practice of the present invention.

Accompanying drawing explanation

Above-mentioned and/or the additional aspect of the present invention and advantage are from combining the accompanying drawings below description to embodiment Will be apparent from easy to understand, wherein:

Fig. 1 is the network relation exemplary plot of prior art；

Fig. 2 is the flow chart of socialization's login method according to embodiments of the present invention；

Fig. 3 is the network relation exemplary plot of the present invention；

Fig. 4 is the structural representation of socialization's login system according to embodiments of the present invention；With

Fig. 5 is the structural representation of socialization's login service device according to embodiments of the present invention.

Detailed description of the invention

Embodiments of the invention are described below in detail, and the example of embodiment is shown in the drawings, the most extremely Same or similar label represents same or similar element or has the element of same or like function eventually.Under Face is exemplary by the embodiment that is described with reference to the drawings, is only used for explaining the present invention, and it is not intended that Limitation of the present invention.

Describe socialization's login method according to embodiments of the present invention below with reference to Fig. 2, comprise the following steps:

Step a: the platform identification of the open platform that third party's service based on subscriber in terminal selects, the The mark of tripartite's service and third party service the token loopback address of offer and generate agent logs address, and By terminal loads agent logs address, to send logging request to socialization's login service device.

Step b: socialization's login service device is according to the mark peace station symbol of third party's service in logging request The user knowing generation open platform logs in the URI address of authorization page, and redirects the terminal to URI Address.

Wherein, step b farther includes:

Step b1: socialization's login service device according in logging request third party service mark and platform identification Obtaining open platform is application PKI and the application key that third party services distribution, and obtains third party and service note Volume mandate loopback address on an open platform；

Step b2: socialization's login service device is according to application PKI and authorizes loopback address to generate open platform User logs in the URI address of authorization page；And

Step b3: socialization's login service device redirects the terminal to URI address.

Step c: terminal receives the identity information of user's input and to third party's authorization of service, and by user Identity information and third party's authorization of service is fed back to open platform so that open platform according to identity believe User is verified by breath.

Also include after step c:

Step e: third party's service is verified by socialization's login service device.

Wherein, step e farther includes:

Step e1: complete in authorization page to log in when user logs in the user of open platform, after Authorized operation, Open platform redirects the terminal to authorize loopback address, wherein, authorizes loopback address to include open platform The authorization code of distribution；

Step e2: socialization's login service device is flat to opening according to authorization code, application PKI and application key Platform sends the request exchanging the first token data for；

Step e3: open platform generates the first token data according to the request exchanging the first token data for and returns It is back to socialization's login service device；

Step e4: socialization's login service device generates temporary Authorization code according to the first token data, and foundation is faced Time authorization code service to third party mark, open platform mark and the corresponding relation of the first token data；

Step e5: socialization's login service device redirects the terminal to token loopback address, and passes through token Temporary Authorization code is fed back to third-party server by loopback address；

Step e6: third-party server logs according to temporary Authorization code, the mark of third party's service and socialization The application key that server-assignment services to third party exchanges asking of token for socialization's login service device transmission Ask；And

Step e7: mark that socialization's login service device services according to third party, socialization's login service device Third-party server is authenticated by application key and the temporary Authorization code of distributing to third party's service.

Step d: third party services the third-party server of correspondence after the user is authenticated by society Change login service device and obtain the user profile of user from open platform, so that terminal completes to log in.

Wherein, step d farther includes:

Step d1: after third-party server is by certification, socialization's login service device is according to temporary Authorization Code obtains the first token data, third party's service identifiers and open platform mark.

Step d2: socialization's login service device is according to the first token data, the mark of third party's service, platform Mark generates the second token data, and the second token data is back to third-party server.

Step d3: third-party server sends acquisition according to the second token data to socialization's login service device and works as The request of front login user relevant information.

Step d4: socialization's login service device obtains described first token data according to the second token data and opens Set level station identification, and work as from the open platform acquisition terminal that open platform mark is corresponding according to the first token data The user profile of front user.

Step d5: user profile is sent to third-party server by socialization's login service device, so that third party Server completes to log in.

Below this method is further described, it is to be understood that the description below merely for example purpose, It is not limited to this according to embodiments of the invention.

Step S110: the third party's website in terminal or application, is referred to as third party's service, guides at it and uses Showing the open platform mark that user can select on the interface that family logs in, wherein, user passes through platform identification The platform account represented logs in third party's service.

Step S120: user selects the account using certain open platform to log in, by the side such as clicked on Formula selects the platform identification of corresponding open platform, and platform identification can use the shapes such as picture, button or Text Link Formula represents.

Step S130: third party services the open platform selected by the mark according to third party's service, user Platform identification, third party service the token loopback address of offer and build agent logs address.Wherein, the 3rd The socialization's login service device that is designated of side's service is that third party services the application of distribution and uniquely identifies, platform mark Knowing and typically defined by socialization's login service device, token loopback address is serviced offer, Dai Lideng by third party Record address is defined by socialization's login service device and is realized.Third party services the terminal currently used by user Loading agency and log in address, to send logging request to socialization's login service device, wherein, terminal can be Browser or client-side program.Such as, if terminal is client-side program, can browse by opening outside The mode of device loads, or loads by the way of embedded webview.

Step S140: socialization's login service device is according to the mark peace station symbol of third party's service in logging request The user knowing generation open platform logs in the URI address of authorization page, and redirects the terminal to URI address.

Concrete operations include:

Step S141: socialization's login service device reads from URL address parameter initiates agent logs request The platform identification of the open platform that mark, token loopback address and the user of third party's service selects.

Step S142: mark that socialization's login service device services according to third party and platform identification are from server Memory module in read this third party service on the open platform corresponding to platform identification application and trustship exist Application PKI in socialization's login service device and application key, especially, if this third party's service does not has Registered application on an open platform, the most do not applied for applying PKI and key, then with socialization accordingly Login service device self is registered on an open platform and application PKI and the key applied for service as this third party Application PKI and key.

Step S143: by third party service mark, application PKI, application key, open platform mark and The information such as token loopback address store as the session session data of active user.

Step S144: step on according to application PKI and the user authorizing loopback address generation to be opened by open platform The URI address of record authorization page, and return redirection instruction, redirect the terminal to the login of open platform In authorization page, wherein, authorize loopback address to be provided by socialization's login service device and existed by third party's service Register on open platform.

Step S150: after user completes to log in input, Authorized operation in the login authorization page of terminal, eventually The identity information of user is fed back to open platform, so that user is carried out by open platform according to identity information by end Checking, open platform redirects the user to authorize on loopback address.Wherein, loopback address is authorized to include out Set level the authorization code of platform distribution.

Step S160: after socialization's login service device receives mandate loopback address request, performs to operate as follows:

Step S161: socialization's login service device reads the authorization code that open platform returns from URL parameter, According to authorization code read from active user's session session data third party service mark, application PKI, Application key, open platform mark and token loopback address.

Step S162: socialization's login service device is flat to opening according to application PKI, application key and authorization code Open platform corresponding to station identification initiates to exchange for the request of the first token data.Open platform is according to exchanging for The request of one token data generates the first token data and is back to socialization's login service device.

Step S163: what socialization's login service device received that open platform returned exchanges the first token data for After, generating temporary Authorization code according to preset rules, temporary Authorization code is as returning to the unique of third party's service Identification string preserves.Socialization's login service device preserves temporary Authorization code and application the first mark simultaneously, flat Corresponding relation between station identification and the first token data.

Step S164: user terminal is redirected to token loopback address by socialization's login service device, and leads to Temporary Authorization code is back to third party's service by the URL parameter crossing token loopback address.

Step S165: after third-party server receives the request of token loopback address, take from URL parameter Go out temporary Authorization code, and according to temporary Authorization code, by third party's service of socialization's login service device distribution Mark and application the first key initiate to exchange for the request of token to socialization's login service device.

Step S170: socialization's login service device receives after exchanging token request for, performs to operate as follows:

Step S171: socialization's login service device is according to the mark of third party's service received, application first The identity that third party is serviced by key and temporary Authorization code carries out effectiveness certification.

Step S172: after third-party server is by certification, socialization's login service device is according to receiving Temporary Authorization code read corresponding platform identification and the first token data.Socialization's login service device root The second token data is generated according to mark, platform identification and first token data of third party's service, and by second Token data is back to third party and services the third-party server of correspondence.

Step S180: third party service correspondence third-party server receive the second token data after, according to Second token data initiates to obtain the request of currently logged on user's relevant information to socialization's login service device.Society Can change after login service device receives acquisition currently logged on user's relevant information request, obtain corresponding flat Station identification, the mark of third party's service and the first token data, and according to the first token data to platform identification Corresponding open platform initiates to obtain the request of user profile, will get user profile and do respective cache with pre- Third party's service it is back to after process.

Step S190: third party services and receives the user profile that socialization login service device returns, and according to Family information processing is docked with open platform, redirects the user to the user interface after logging in.

Socialization's login method according to embodiments of the present invention, by socialized service system device by third party service with The directly docking of open platform converts.Such as shown in Fig. 3, Sina's microblogging, Tengxun, Taobao etc. open Set level platform to be completed by socialization's login service device with docking of third party site for service A, B etc., simplify figure Network in 1.Carry out unified by socialization's login service device simultaneously, can accomplish and any open platform Docking, learns, develop, maintenance cost will not increase along with the growth of the platform quantity of access, i.e. accesses The cost of one open platform is almost identical with the cost accessing N family's open platform, decreases workload, fall Low cost, improves exploitation and maintenance efficiency.

Below with reference to Fig. 4, socialization's login system 100 according to embodiments of the present invention is described, including third party Server 110, open platform 120, socialization's login service device 130 and operation have the client that third party services End 140,

Wherein, client 140 is run in the terminal, the platform mark of the open platform for selecting according to user Knowledge, the mark of third party's service and third party service the token loopback address of offer and generate agent logs address, And load agent logs address by client 140, ask to send to log in socialization's login service device 130 Ask, and receive the identity information of user's input and to third party's authorization of service, and by the identity information of user Open platform 120 is fed back to, so that open platform 120 is according to identity information pair with to third party's authorization of service User verifies；Socialization's login service device 130 is for according to the mark of third party's service in logging request The user generating open platform with platform identification logs in the URI address of authorization page, and by client 140 weight It is directed to URI address；Third-party server 110 is for logging in by socialization after the user is authenticated Server 130 obtains the user profile of user from open platform 120, so that client 140 completes to log in； Open platform 120 is for verifying user, and safeguards the user profile of user.

Wherein, socialization's login service device 130 is according to the mark peace station symbol of third party's service in logging request Knowing acquisition open platform is application PKI and the application key that third party services distribution, and obtains third party's service Registration mandate loopback address on an open platform, and generate open according to application PKI and mandate loopback address The user setting level platform logs in the URI address of authorization page, and client 140 is redirected to URI address. Socialization's login service device 130 is additionally operable to verify third party's service.

Wherein, open platform 120 be additionally operable to when the user of open platform log in complete in authorization page log in, Client 140 is redirected to after Authorized operation authorize loopback address, wherein, authorizes loopback address to include out Set level the authorization code of platform 120 distribution；

Socialization's login service device 130 is additionally operable to put down from open according to authorization code, application PKI and application key Platform 120 obtains the first token data, and generates temporary Authorization code according to the first token data, and by client End 140 is redirected to token loopback address, and is fed back to by temporary Authorization code by token loopback address Third-party server 110；

Third-party server 110 is additionally operable to according to temporary Authorization code, the mark of third party's service and application key The request exchanging token for is sent to socialization's login service device 130, so that socialization's login service device 130 Distribute to the application key of third party's service according to mark, socialization's login service device of third party's service and face Time authorization code third-party server 110 is authenticated.

Socialization's login service device 130 after third-party server 110 is by certification according to temporary Authorization code Obtain the first token data, and generate according to the first token data, the mark of third party's service, platform identification Second token data, and the second token data is back to third-party server 110, so that third party's clothes Business device 110 sends acquisition currently logged on user's phase according to the second token data to socialization's login service device 130 The request of pass information, and obtain visitor according to the request obtaining currently logged on user's relevant information from open platform The user profile of family end 140 active user, and user profile is sent to third-party server 110, so that Third-party server 110 completes to log in.

Below native system is further described, it is to be understood that the description below merely for example purpose, It is not limited to this according to embodiments of the invention.

Third party's website in client 140 or application, be referred to as third party's service.Client 140 is Browser or other application programs, client 140 is run in the terminal, and terminal can be mobile phone, put down The equipment such as plate computer and personal computer.User selects the account using certain open platform to log in, logical Crossing the mode such as clicked on and select the platform identification of corresponding open platform, platform identification can use picture, button Or the form such as Text Link represents.Opening selected by mark that client 140 services according to third party, user Set level the platform identification of platform, third party service offer token loopback address build agent logs address.Its In, third party's service to be designated the application that socialization's login service device 130 services distribution for third party unique Mark, platform identification is typically defined by socialization's login service device 130, and token loopback address is by third party Service provides, and agent logs address is defined by socialization's login service device 130 and realized.Client 140 is led to Cross the currently used client of user 140 to load agency and log in address, to socialization's login service device 130 Sending logging request, wherein, client 140 can be browser or client-side program.Such as, if client End 140 is client-side program, can load by the way of opening external browser, or by interior The mode of embedding webview loads.

Socialization's login service device 130 generates according to mark and the platform identification of third party's service in logging request The user of open platform logs in the URI address of authorization page, and client 140 is redirected to URI address.

Concrete operations include: socialization's login service device 130 reads initiation agency from URL address parameter and steps on The platform of the open platform that mark, token loopback address and the user of third party's service of record request selects Mark.Mark that socialization's login service device 130 services according to third party and platform identification depositing from server Storage module reads this third party service on the open platform corresponding to platform identification, applies for that also trustship is in society Change the application PKI in login service device 130 and application key, especially, if this third party's service does not has Registered application on an open platform, the most do not applied for applying PKI and key, then with socialization accordingly Login service device 130 self is registered on an open platform and the application PKI applied for and key are as this third party The application PKI of service and key.Mark, application that third party is serviced by socialization's login service device 130 are public The information such as key, application key, open platform mark and token loopback address are as the session of active user Session data stores.Socialization's login service device 130 is according to application PKI and authorizes loopback address to generate The user opened by open platform logs in the URI address of authorization page, and returns redirection instruction, by visitor Family end 140 is redirected in the login authorization page of open platform, wherein, authorizes loopback address by socialization Login service device 130 provides and is serviced by third party and registers on an open platform.

After user completes to log in input, Authorized operation in the login authorization page of client 140, client The identity information of user is fed back to open platform 120 by 140, so that open platform 120 is according to identity information pair User verifies, open platform redirects the user to authorize on loopback address.Wherein, readjustment ground is authorized Location includes the authorization code that open platform 120 distributes.

After socialization's login service device 130 receives mandate loopback address request, perform to operate as follows:

Socialization's login service device 130 reads the authorization code that open platform returns from URL parameter, according to awarding Weighted code reads the mark of third party's service, application PKI, application from active user's session session data Key, open platform mark and token loopback address.Socialization's login service device 130 according to application PKI, Application key and authorization code initiate to exchange the first token data for the open platform corresponding to open platform mark Request.Open platform 120 generates the first token data according to the request exchanging the first token data for and is back to Socialization's login service device 130.What socialization's login service device 130 received that open platform returned exchanges for After first token data, generating temporary Authorization code according to preset rules, temporary Authorization code is as returning to the 3rd Unique identification string of side's service preserves.Socialization's login service device 130 preserve simultaneously temporary Authorization code with Application the first mark, the corresponding relation between platform identification and the first token data.Socialization's login service device 130 Subscription client 140 is redirected to token loopback address, and is joined by the URL of token loopback address Temporary Authorization code is back to third party's service by number.

After third-party server 110 receives the request of token loopback address, take out interim from URL parameter Authorization code, and according to temporary Authorization code, distributed by socialization's login service device 130 third party service mark Know and application the first key exchanges the request of token for socialization's login service device 130 initiation.

Socialization's login service device 130 receives after exchanging token request for, performs to operate as follows:

Socialization's login service device 130 according to receive third party service mark, apply the first key and The identity that third party is serviced by temporary Authorization code carries out effectiveness certification.When third-party server 110 is by recognizing After card, socialization's login service device 130 reads corresponding platform according to the temporary Authorization code received Mark and the first token data.Mark that socialization's login service device 130 services according to third party, platform mark Know and the first token data generate the second token data, and the second token data is back to third party service right The third-party server 110 answered.

Third party service correspondence third-party server 110 receive the second token data after, according to second order Board data initiate to obtain the request of currently logged on user's relevant information to socialization's login service device 130.Society After change login service device 130 receives acquisition currently logged on user's relevant information request, obtain corresponding Platform identification, the mark of third party's service and the first token data, and according to the first token data to platform mark Know corresponding open platform and initiate to obtain the request of user profile, will get user profile do respective cache with Third party's service it is back to after pretreatment.

Client 140 receives the user profile that socialization's login service device 130 returns, and completes to log in accordingly After, redirect the user to the user interface after logging in.

Socialization's login system according to embodiments of the present invention, by socialized service system device by third party service with The directly docking of open platform converts.Such as shown in Fig. 3, Sina's microblogging, Tengxun, Taobao etc. open Set level platform to be completed by socialization's login service device with docking of third party site for service A, B etc., simplify figure Network in 1.Carry out unified by socialization's login service device simultaneously, can accomplish and any open platform Docking, learns, develop, maintenance cost will not increase along with the growth of the platform quantity of access, i.e. accesses The cost of one open platform is almost identical with the cost accessing N family's open platform, decreases workload, fall Low cost, improves exploitation and maintenance efficiency.

Below with reference to Fig. 5, socialization's login service device 200 according to embodiments of the present invention is described, including receiving Module 210, generation module 220, redirection module 230, login control module 240 and authentication module 250.

Wherein, receiver module 210 is for receiving the logging request that terminal sends, and wherein, logging request includes Offer is serviced according to the platform identification of open platform, the mark of third party's service and the third party that user selects Token loopback address generates agent logs address；Generation module 220 is for according to third party in logging request The user of the mark of service and platform identification generation open platform logs in the URI address of authorization page；Redirect Module 230 is used for redirecting the terminal to URI address, so that open platform carries out authentication to terminal； Log in control module 240 to be used for after the user is authenticated, obtain the user profile of user from open platform And be forwarded to third party service correspondence third-party server so that terminal complete log in.

Also include authentication module 250, for third party's service is verified.

Generation module 220 farther includes distribution sub module 221, authorizes loopback address acquisition module 222 and Generate submodule 223.

Wherein, distribution sub module 221 is for the mark serviced according to third party in logging request and platform identification Obtaining open platform is application PKI and the application key that third party services distribution；Loopback address is authorized to obtain mould Block 222 is for obtaining third party's service registry mandate loopback address on an open platform；Generate submodule 223 The URI ground of authorization page is logged in for generating the user of open platform according to application PKI and mandate loopback address Location.

Authentication module 250 farther includes the first redirection submodule 251, sends submodule 252, first connects Receive submodule 253, generate submodule the 254, second redirection submodule 255 and authentication module 256.

Wherein, the first redirection submodule 251, after as user by checking, redirects the terminal to Authorize loopback address, wherein, authorize loopback address to include the authorization code that open platform distributes；Send submodule 252 for exchanging the first token data according to authorization code, application PKI and application key for open platform transmission Request；First receives submodule 253 for receiving open platform according to the request exchanging the first token data for The first token data generated；Generate submodule 254 to be used for generating temporary Authorization code according to the first token data, And set up mark, open platform mark and shown first token data that temporary Authorization code services to third party Corresponding relation；Second redirects submodule 255 is used for redirecting the terminal to token loopback address, and leads to Cross token loopback address and temporary Authorization code fed back to third-party server so that third-party server according to Answering of third party's service distributed to by temporary Authorization code, the mark of third party's service and socialization's login service device Exchange the request of token for socialization's login service device transmission with key；Authentication module 256 is for according to the 3rd Application key and the temporary Authorization of third party's service distributed to by the mark of side's service, socialization's login service device Third-party server is authenticated by code.

Log in control module 240 and farther include first token data acquisition module the 241, second token data Generation module the 242, second receiver module 243, user profile acquisition module 244 and user profile sending module 245。

Wherein, the first token data acquisition module 241 is used for after third-party server is by certification, root The first token data, third party's service identifiers and open platform mark is obtained according to temporary Authorization code；Second order Board data generation module 242 is for according to the first token data, the mark of third party's service, platform identification life Become the second token data, and the second token data is back to third-party server；Second receiver module 243 Current to the acquisition of socialization's login service device transmission according to the second token data for receiving third-party server The request of login user relevant information；User profile acquisition module 244 is for obtaining according to the second token data First token data and open platform mark, and according to the first token data from open platform corresponding the opening of mark Set level platform and obtain the user profile of terminal active user；User profile sending module 245 is for by user profile Send to third-party server, so that third-party server completes to log in.

Below this socialization login service device is further described, it is to be understood that the description below is only For illustrative purposes, it is not limited to this according to embodiments of the invention.

Third party's website in terminal or application, be referred to as third party's service, guides user to select open platform Mark, wherein, user logs in third party by the platform account that platform identification represents and services.User selects to adopt Log in by the account of certain open platform.Third party services selected by the mark according to third party's service, user The platform identification of the open platform selected, third party service the token loopback address of offer with building agent logs Location.Wherein, the socialization's login service device that is designated of third party's service is that third party services the application of distribution only One mark, platform identification is typically defined by socialization's login service device, and token loopback address is taken by third party Business provides, and agent logs address is defined by socialization's login service device and realized.User is passed through in third party's service Currently used terminal loads agency logs in address, to send logging request to socialization's login service device,

Receiver module 210 receives logging request, and generation module 220 reads initiation generation from URL address parameter The open platform that mark, token loopback address and the user of third party's service of reason logging request selects Platform identification.Mark that distribution sub module 221 services according to third party and platform identification are from the storage of server Module reads this third party service on the open platform corresponding to platform identification, applies for that also trustship is in socialization Application PKI in login service device and application key, especially, if this third party service is not opening Registered application on platform, the most do not applied for applying accordingly PKI and key, then log in clothes with socialization The application applying PKI and key to service as this third party that business device self is registered on an open platform and applied for PKI and key.Mark that third party is serviced by generation module 220, application PKI, application key, opening The information such as platform identification and token loopback address store as the session session data of active user. Loopback address acquisition module 222 is authorized to obtain third party's service registry mandate readjustment ground on an open platform Location.Generating submodule 223 according to application PKI and authorizes loopback address to generate the use opened by open platform Family logs in the URI address of authorization page, and returns redirection instruction, and terminal is reset by redirection module 230 To the login authorization page of open platform.

After user completes to log in input, Authorized operation in the login authorization page of terminal, terminal is by user's Identity information feeds back to open platform, so that user is verified by open platform according to identity information, open Platform redirects the user to authorize on loopback address.Wherein, loopback address is authorized to include that open platform distributes Authorization code.

After first redirection submodule 251 receives mandate loopback address request, read from URL parameter and open Set level the authorization code that platform returns, from active user's session session data, read third party according to authorization code The mark of service, application PKI, application key, open platform mark and token loopback address.Send son Module 252 is according to applying PKI, application key and authorization code to the open platform corresponding to open platform mark Initiate to exchange for the request of the first token data.Open platform generates the according to the request exchanging the first token data for One token data is also back to socialization's login service device.First receives submodule 253 receives open platform institute Return exchanges the first token data for, generates submodule 254 and generates temporary Authorization code according to preset rules, faces Time authorization code as return to third party service unique identification string preserve.Generate submodule 254 simultaneously Preserve temporary Authorization code and application the first mark, the corresponding relation between platform identification and the first token data.The Two redirect submodule 255 is redirected to token loopback address by user terminal, and is adjusted back by token Temporary Authorization code is back to third party's service by the URL parameter of address.

After third-party server receives the request of token loopback address, from URL parameter, take out temporary Authorization Code, and according to temporary Authorization code, by the mark of third party's service of socialization login service device distribution and application First key initiates to exchange for the request of token to socialization's login service device.

Authentication module 256 receive exchange for token request after, according to receive third party service mark, The identity applying the first key and temporary Authorization code to service third party carries out effectiveness certification.

First token data acquisition module 241, after certification is passed through, reads according to the temporary Authorization code received Corresponding platform identification and the first token data.Second token data generation module 242 is according to third party Mark, platform identification and first token data of service generate the second token data, and by the second token data It is back to third party and services the third-party server of correspondence.Third party services the third-party server of correspondence and receives After the second token data, initiate to obtain current login to socialization's login service device according to the second token data The request of user related information.Second receiver module 243 receives acquisition currently logged on user's relevant information please After asking, user profile acquisition module 244 obtain corresponding platform identification, third party service mark and First token data, and initiate to obtain user to the open platform that platform identification is corresponding according to the first token data The request of information, user profile sending module 245 will get after user profile does respective cache and pretreatment It is back to third party's service.

Third party in terminal services and receives the user profile that socialization's login service device returns, and completes corresponding After login, redirect the user to the user interface after logging in.

Socialization's login service device according to embodiments of the present invention is by the most right with open platform of third party's service Tap into row conversion.Such as shown in Fig. 3, the open platform such as Sina's microblogging, Tengxun, Taobao takes with third party The docking of business website A, B etc. is completed by socialization's login service device, simplifies the network in Fig. 1.Make Third party's service can be docked with any open platform, learns simultaneously, develops, maintenance cost will not be along with connecing The growth of the platform quantity entered and increase, i.e. access the cost of an open platform and access N family's open platform Cost almost identical, decrease workload, reduce cost, improve exploitation and maintenance efficiency.

In the description of this specification, reference term " embodiment ", " some embodiments ", " example ", The description of " concrete example " or " some examples " etc. means to combine this embodiment or example describes specific features, Structure, material or feature are contained at least one embodiment or the example of the present invention.In this manual, The schematic representation of above-mentioned term is not necessarily referring to identical embodiment or example.And, the tool of description Body characteristics, structure, material or feature can be with properly in any one or more embodiments or example Mode combine.

Although an embodiment of the present invention has been shown and described, for the ordinary skill in the art, It is appreciated that and these embodiments can be carried out multiple change without departing from the principles and spirit of the present invention Changing, revise, replace and modification, the scope of the present invention is limited by claims and equivalent thereof.

Claims (9)

1. socialization's login method, it is characterised in that comprise the following steps:

The platform identification of open platform of third party's service based on subscriber selection in a, terminal, third party The mark of service and described third party service the token loopback address of offer and generate agent logs address, and By agent logs address described in described terminal loads, ask to send to log in socialization's login service device Ask；

The mark that b, described socialization login service device service according to third party described in described logging request The user generating described open platform with described platform identification logs in the URI address of authorization page, and will Described terminal is redirected to described URI address；

C, described terminal receive the identity information of user's input and to described third party's authorization of service, and will The identity information of described user and described third party's authorization of service is fed back to open platform so that described in open Set level platform according to described identity information, described user to be verified；And

D, described third party service the third-party server of correspondence to be passed through after described user is by checking Described socialization login service device obtains the user profile of described user from described open platform, so that described Terminal completes to log in；

Also include after described step c:

Described third party's service is verified by e, described socialization login service device；

Described step e farther includes:

E1, complete in authorization page to log in, award when described user logs in the described user of described open platform Power operation after, described open platform described terminal is redirected to authorize loopback address, wherein, described in award Power loopback address includes the authorization code that described open platform distributes；

E2, described socialization login service device are according to described authorization code, application PKI and apply key to institute State open platform and send the request exchanging the first token data for；

E3, described open platform according to described in exchange the request of the first token data for and generate the first token data And it is back to described socialization login service device；

E4, described socialization login service device generate temporary Authorization code according to described first token data, and Set up the mark that described temporary Authorization code services, described open platform mark and described the to described third party The corresponding relation of one token data；

Described terminal is redirected to described token loopback address by e5, described socialization login service device, And by described token loopback address, described temporary Authorization code fed back to described third party and service；

E6, described third party service are according to described temporary Authorization code, the mark of described third party service and institute Stating socialization's login service device is that described third party services the application key of distribution and logs in described socialization Server sends the request exchanging token for；And

Mark, described socialization that e7, described socialization login service device service according to described third party step on Record server-assignment give described third party service described application key and described temporary Authorization code to described Third party's service is authenticated.

2. the method for claim 1, it is characterised in that described step b farther includes:

The mark that b1, described socialization login service device service according to third party described in described logging request Obtaining described open platform with described platform identification is that described third party services the application PKI of distribution and answers With key, and obtain described third party's service registry mandate loopback address on described open platform；

B2, described socialization login service device generate according to described application PKI and described mandate loopback address The user of described open platform logs in the URI address of authorization page；And

Described terminal is redirected to described URI address by b3, described socialization login service device.

3. the method for claim 1, it is characterised in that described step d farther includes:

D1, when described third-party server is by after certification, and described socialization login service device is according to institute State temporary Authorization code and obtain described first token data, described third party's service identifiers and described open platform Mark；

D2, described socialization login service device service according to described first token data, described third party Mark, described platform identification generate the second token data, and described second token data are back to described Third-party server；

D3, described third-party server according to described second token data to described socialization login service device Send the request obtaining currently logged on user's relevant information；

D4, described socialization login service device according to described second token data obtain described first token data and Described open platform identifies, and according to described first token data from the opening of described open platform mark correspondence Platform obtains the user profile of described terminal active user；And

Described user profile is sent to described third-party server by d5, described socialization login service device, So that described third-party server completes to log in.

4. socialization's login system, it is characterised in that include third-party server, open platform, Socialization's login service device and run and have the client that third party services, wherein,

Described client run in the terminal, for according to user select open platform platform identification, The mark of third party's service and described third party service the token loopback address of offer and generate agent logs ground Location, and load described agent logs address by described client, with to described socialization login service device Send logging request, and receive the identity information of user's input and to described third party's authorization of service, and By the identity information of described user and described third party's authorization of service is fed back to open platform, so that described Described user is verified by open platform according to described identity information；

Described socialization login service device, for the mark according to the service of third party described in described logging request Know the user with the described platform identification described open platform of generation and log in the URI address of authorization page, and Described client is redirected to described URI address；

Described third-party server, is logged in by described socialization after described user by checking Server obtains the user profile of described user from described open platform, so that described client completes to step on Record；And

Described open platform, for verifying described user, and safeguards the user profile of described user；

Wherein, described open platform, it is additionally operable to when the described user of described open platform logs in authorization page On complete to log in, described client is redirected to after Authorized operation authorize loopback address, wherein, described Loopback address is authorized to include the authorization code that described open platform distributes；

Described socialization login service device, is additionally operable to according to described authorization code, application PKI and application key Obtain the first token data from described open platform, and generate temporary Authorization according to described first token data Code, and described client is redirected to described token loopback address, and returned by described token Adjust address that described temporary Authorization code is fed back to described third-party server；And

Described third-party server, is additionally operable to according to described temporary Authorization code, the mark of described third party service Know and described socialization login service device distributes to the application key of described third party service to described society Change login service device and send the request of token of exchanging for, so that described socialization login service device is according to described the The described application of described third party service distributed to by the mark of tripartite's service, described socialization login service device Described third-party server is authenticated by key and described temporary Authorization code.

5. system as claimed in claim 4, it is characterised in that described socialization login service device root Mark and described platform identification according to the service of third party described in described logging request obtain described opening and put down Platform is application PKI and the application key that described third party services distribution, and obtains described third party and service note Volume mandate loopback address on described open platform, and return according to described application PKI and described mandate The user adjusting address to generate described open platform logs in the URI address of authorization page, and by described client End is redirected to described URI address.

6. system as claimed in claim 4, it is characterised in that

Described socialization login service device faces described in basis after described third-party server is by certification Time authorization code obtain described first token data, and according to described first token data, described third party clothes The mark of business, described platform identification generate the second token data, and described second token data are returned To described third-party server so that described third-party server according to described second token data to described Socialization's login service device sends the request obtaining currently logged on user's relevant information, and obtains according to described The request taking currently logged on user's relevant information obtains described client active user from described open platform User profile, and described user profile is sent to described third-party server, so that described third party Server completes to log in.

7. socialization's login service device, it is characterised in that including:

Receiver module, for receiving the logging request that terminal sends, wherein, described logging request includes root The platform identification of open platform, the mark of third party's service and the described third party's service that select according to user carry The token loopback address of confession generates agent logs address；

Generation module, for the mark according to the service of third party described in described logging request and described platform The user of the mark described open platform of generation logs in the URI address of authorization page；

Redirection module, for described terminal being redirected to described URI address, so that open platform Described terminal is carried out authentication；And

Log in control module, after described user by checking, obtain institute from described open platform State the user profile of user and be forwarded to described third party and service the third-party server of correspondence, so that described Terminal completes to log in；

Also include:

Authentication module, for verifying described third party's service；

Described authentication module farther includes:

First redirects submodule, for logging in authorization page complete as the described user of described open platform After becoming login, Authorized operation, it is redirected to described terminal authorize loopback address, wherein, described mandate Loopback address includes the authorization code that described open platform distributes；

Send submodule, for putting down to described opening according to described authorization code, application PKI and application key Platform sends the request exchanging the first token data for；

First receive submodule, for receive described open platform according to described in exchange the first token data for The first token data that request generates；

Generate submodule, for generating temporary Authorization code according to described first token data, and set up described The mark that temporary Authorization code services to described third party, described open platform mark and shown first token number According to corresponding relation；

Second redirects submodule, for described terminal is redirected to described token loopback address, and By described token loopback address, described temporary Authorization code is fed back to described third-party server, so that Described third-party server is according to described temporary Authorization code, the mark of described third party service and described society Change login service device and distribute to the described application key of described third party service to described socialization login clothes Business device sends the request exchanging token for；And

Authentication module, divides for mark, the described socialization login service device serviced according to described third party Described third-party server is entered by application key and the described temporary Authorization code of third party's service described in dispensing Row certification.

8. socialization as claimed in claim 7 login service device, it is characterised in that described generation mould Block farther includes:

Distribution sub module, for the mark according to the service of third party described in described logging request and described flat It is application PKI and the application key that described third party services distribution that station identification obtains described open platform；

Authorize loopback address acquisition module, be used for obtaining described third party's service registry at described open platform On mandate loopback address；

Generate submodule, for generating described opening according to described application PKI and described mandate loopback address The user of platform logs in the URI address of authorization page.

9. socialization as claimed in claim 7 login service device, it is characterised in that described login control Molding block farther includes:

First token data acquisition module, after when described third-party server by certification, according to Described temporary Authorization code obtains described first token data, described third party's service identifiers and described opening and puts down Station identification；

Second token data generation module, for according to described first token data, described third party service Mark, described platform identification generates the second token data, and described second token data is back to institute State third-party server；

Second receiver module, is used for receiving described third-party server according to described second token data to institute State the request obtaining currently logged on user's relevant information that socialization's login service device sends；

User profile acquisition module, for obtaining described first token data according to described second token data Identify with described open platform, and according to described first token data from corresponding the opening of mark of described open platform Set level platform and obtain the user profile of described terminal active user；And

User profile sending module, for described user profile being sent extremely described third-party server, with Described third-party server is made to complete to log in.