CN113065116A - Uniform login method and system for court integration platform - Google Patents

Uniform login method and system for court integration platform Download PDF

Info

Publication number
CN113065116A
CN113065116A CN202110389291.8A CN202110389291A CN113065116A CN 113065116 A CN113065116 A CN 113065116A CN 202110389291 A CN202110389291 A CN 202110389291A CN 113065116 A CN113065116 A CN 113065116A
Authority
CN
China
Prior art keywords
login
token
court
login token
integrated platform
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110389291.8A
Other languages
Chinese (zh)
Inventor
董芳
刘俊飙
李凯
喻晓斌
孙乐
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhejiang Huanma Information Technology Co ltd
Original Assignee
Zhejiang Huanma Information Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhejiang Huanma Information Technology Co ltd filed Critical Zhejiang Huanma Information Technology Co ltd
Priority to CN202110389291.8A priority Critical patent/CN113065116A/en
Publication of CN113065116A publication Critical patent/CN113065116A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/33User authentication using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2137Time limited access, e.g. to a computer or data

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The invention provides a uniform login method and a system for a court integrated platform, wherein the uniform login method for the court integrated platform comprises the following steps: generating a login token based on user login information input by a login interface, wherein the login token comprises object information representing the identity of a user and aging information representing the remaining login duration; sending a skip request; the target subsystem receives the skip request and acquires a login token; verifying the validity of the login token; and when the object information in the login token is legal and the residual login duration is within the set login duration range, jumping to the target subsystem without login.

Description

Uniform login method and system for court integration platform
Technical Field
The present invention relates to a login method, and more particularly, to a unified login method and system for a court integrated platform.
Background
The intelligent court is based on modern artificial intelligence, is based on the judicial law as the citizen and the justice, adheres to the law of the judicial law, integrates system reform and technical change, supports judicial judgment, litigation service and judicial management in a highly information mode, and realizes organization, construction, operation and management forms of the civil court of all-service online handling, all-flow legal disclosure and all-round intelligent service. The intelligent court is a highly integrated system, which comprises a large number of subsystems such as review data and execution data, the data in each subsystem has strong privacy, and multiple persons such as judges, regulators and lawyers can check the data in each subsystem after logging in through accounts.
Due to the high integration of the intelligent court, a user usually jumps back and forth among a plurality of subsystems after logging in so as to realize the viewing or operation of case data. In order to implement data security, it is usually required to log in and verify the identity of a user when logging in each subsystem, and the user needs to log in frequently, which is very inconvenient to use.
Disclosure of Invention
In order to overcome the defects of the prior art, the invention provides a uniform login method and a uniform login system for a court integrated platform, which can realize login-free skip among a plurality of subsystems and have high safety.
In order to achieve the above object, the present invention provides a unified login method for a court integrated platform, which comprises: generating a login token based on user login information input by a login interface, wherein the login token comprises object information representing the identity of a user and aging information representing the remaining login duration; sending a skip request; the target subsystem receives the skip request and acquires a login token; verifying the validity of the login token; and when the object information in the login token is legal and the residual login duration is within the set login duration range, jumping to the target subsystem without login.
According to an embodiment of the invention, the authority of the object information in the login token is also verified when the login token is verified, and when the user represented by the object information has the authority of jumping to the target system, the user is prevented from jumping to the target subsystem in a login mode.
According to an embodiment of the invention, the skip request comprises an address of the target subsystem and a login token, the target subsystem acquires the login token from the skip request and transmits the login token to the server, and the server verifies the login token and returns a verification result to the target subsystem.
According to an embodiment of the invention, the login token included in the skip request is the encrypted and rearranged encryption token, the server decrypts the encryption token, and the login token in an unencrypted state is restored and then verified.
According to an embodiment of the invention, after the login-free system jumps to the target subsystem, the validity of the login token is verified based on each operation request, and the operation request is executed after the verification is passed.
According to one embodiment of the invention, the login terminal transmits the acquired user login information to the server after encryption, and the server decrypts the encrypted user login information, generates the login token and returns the login token to the login terminal.
According to an embodiment of the present invention, after verifying the object information and the aging information in the login token, the verification result is returned to the login terminal, and when the verification result is the validity verification result, the remaining login duration of the login token is initialized by using the preset login duration as the length.
According to an embodiment of the present invention, a corresponding and unalterable trace is generated while the login token is authenticated, the trace including information of the login token sender, the sending time, and the login token authentication result.
Correspondingly, the invention also provides a uniform login system of the court integrated platform, which comprises a token generation module, a plurality of subsystems, a verification module and a skip module. The token generation module generates a login token based on user login information input by the login interface, wherein the login token comprises object information representing the identity of a user and time efficiency information representing the remaining login time. The current subsystem sends a jump request containing a login token. The target subsystem receives the jump request and obtains a login token from the jump request. The authentication module authenticates the validity of the login token. And when the object information in the login token is legal and the residual login duration is within the set login duration range, the skip module skips to the target subsystem without login.
According to an embodiment of the invention, the skip request comprises an address of the target subsystem and a login token, the target subsystem acquires the login token from the skip request and transmits the login token to the server, and the server verifies the login token and returns a verification result to the target subsystem.
In summary, the unified login method and system for the court integration platform provided by the invention generate a login token containing object information representing the identity of the user and time efficiency information representing the remaining login duration while the user logs in. The login token is carried when the jumping between the subsystems is realized, the legitimacy and timeliness of the login token are verified by the subsystems, and the login-free jumping-indication target subsystem can be realized after the verification is passed. The login token is set to realize login-free jumping among a plurality of subsystems, so that great convenience is brought to the use of a user; and simultaneously, the verification of the object information and the aging information in the login token ensures the safety of login-free jumping among subsystems. The uniform login method and the system for the court integration platform provided by the invention simultaneously take convenience in use and data security into consideration. In addition, the login token is transmitted by the login terminal following the skip request, is a dynamic process and is not limited by a network, and has very good expansibility.
In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.
Drawings
Fig. 1 is a schematic flowchart illustrating a unified login method for a court integrated platform according to an embodiment of the present invention.
Fig. 2 is a schematic flow chart illustrating the generation of a login token.
Fig. 3 is a schematic structural diagram of a unified login system of a court integration platform according to an embodiment of the present invention.
Detailed Description
The existing intelligent court platform is a highly integrated platform integrating a plurality of subsystems, and a user can conveniently use the platform by expecting that login-free jumping among the subsystems can be realized. However, the log-in free jump has a great safety hazard on data transmission. In view of this, the present embodiment provides a unified login method for a court integrated platform, which includes: a login token is generated based on the user login information input by the login interface, and the login token comprises object information representing the user identity and aging information representing the remaining login duration (step S10). The current subsystem transmits a jump request (step S20). The target subsystem receives the jump request and obtains a login token (step S30). It is verified whether the login token is valid (step S40). And jumping to the target subsystem without login when the object information in the login token is legal and the remaining login duration is within the set login duration range (step S50). The flow of the unified login method of the court integration platform provided by the present embodiment will be described in detail below with reference to fig. 1 and fig. 2.
As shown in fig. 1, the unified login method for the court integrated platform provided in this embodiment starts at step S10. When a user logs in the court integrated platform at a login terminal (webpage front end), user login information comprising a user name, a user password and the like is input from a login interface. And the court integrated platform transmits the user login information to the server, and the server generates a login token based on the user login information and returns the generated login token to the login terminal. The login token comprises object information representing the identity of the user and time efficiency information representing the remaining login duration. Specifically, in the embodiment, the format of the login token is JWT (json web token), and the JWT data format includes three parts, i.e., Header, Payload, and Signature. However, the present invention does not set any limit to the specific format of the login token.
And after the user logs in and verifies to enter the main interface of the court integrated platform, the user realizes the jump among different subsystems by selecting the link option on the main interface. For the user' S operation based on the link option, the current subsystem will send a jump request containing the login token generated in step S10 to the target subsystem (step S20). The target subsystem receives the jump request and obtains a login token (step S30). In this embodiment, the jump request includes an address of the target subsystem and the login token, and the target subsystem obtains the login token from the jump request and performs authentication. However, the present invention is not limited thereto. In other embodiments, the login token may also be stored in a storage area of the login terminal, and the login token may be obtained from the storage area after the target subsystem receives the jump request.
After the target subsystem acquires the login token, step S40 is executed to verify the object information and the aging information in the login token. In this embodiment, after receiving the skip request, the target subsystem transmits the obtained login token to the authentication module located in the server through the corresponding API interface in the login terminal. The verification module verifies the validity of the object information in the login token and the timeliness of the login duration and returns a verification result to the target subsystem.
And when the verification result received by the subsystem indicates that the object information in the login token is legal and the remaining login duration is within the set login duration, jumping to the target subsystem without login (step S50). In the unified login method for the court integrated platform provided by the embodiment, the login token is stored in the login terminal and is dynamically transmitted along with the jump request of the login terminal, and the target subsystem receives the jump request and judges the validity of the login token to determine whether login-free jump can be realized. The setting realizes the login-free skip in the court integrated platform with a plurality of subsystems by logging in the user once within the set login duration, thereby greatly simplifying the operation of the user; meanwhile, when the subsystem jumps each time, the verification of the object information and the aging information in the login token is required, so that the safety of the jump is ensured.
There are multiple subsystems within the court integrated platform and the type of data stored within each subsystem is also different. For example, a great amount of prosecution documents, information of parties, evidences, decision books and other approval data contained in the approval process are stored in the approval subsystem; while a large amount of execution data is stored within the execution subsystem. In practice, some data is private to the parties, and needs to be kept private to the public, but published to the attorneys and the associated judges of the case. Therefore, in this embodiment, in order to ensure the privacy of the information, after the login token is validated in step S40, the authority of the object information in the login token is also validated, and when the user represented by the object information has the authority to jump to the target system, the user jumps to the target subsystem without logging in. For example, for public users, the users can log in the execution subsystem to view the judgment and execution conditions of each case, but the users do not have the right to jump to the judgment subsystem to view case-related evidence. At the moment, the token verification module intercepts and returns information without the skip permission to the login terminal. The authority distribution based on the user role greatly improves the data privacy in the court integrated platform, and avoids unnecessary loss or damage to parties or witnesses caused by the leakage of personal information or private information such as evidence.
Furthermore, in the target subsystem after the login-free jump, the target subsystem needs to send the login token carried by the operation request to the server based on each operation request to verify the validity of the login token.
The operation request can be executed again only after the verification is passed. The setting avoids the risk that the operation can be continued after the login token is logged out overtime, thereby further improving the safety of the access and the operation of the integrated platform.
In order to further improve the security of data transmission, in step S10, the court integration platform encrypts the user login information input based on the terminal login interface by using the RSA asymmetric algorithm and transmits the encrypted user login information to the server. And the server decrypts the received encrypted user login information and generates a login token. At the same time, the server encrypts the generated login token and returns the encrypted login token to the login terminal. In this embodiment, the format of the login token is the JWT format, so the server performs RSA asymmetric algorithm encryption on the Header, Payload, and Signature of the generated login token, reassembles the encrypted login token into the original format of the JWT, and returns the encrypted login token to the login terminal. The setting effectively avoids that the login token is intercepted as the attached parameter and then analyzed to obtain the information when the subsystems jump, and greatly improves the security of the dynamic transmission of the login token. However, the present invention does not limit the encryption method of the data. In other embodiments, the user login information and login token may be encrypted using other encryption algorithms.
The setting of the effective duration of the login token avoids the risk that the login token can still continue to operate after being logged out overtime, and further improves the security of data transmission. Generally, the shorter the preset login time of the login token is, the higher the security will be, but the user will need to log in frequently, which is inconvenient to use. To solve this problem, in the present embodiment, when the verification result of the login token in step S40 is the validity verification result, the remaining login duration of the login token is initialized with the preset login duration T as the length (step S60). Specifically, the server verifies that the login token is a valid login token at the time T, and initializes the remaining login duration of the login token by taking the time T as the initial time and taking the preset login duration T as the length; namely, the login duration of the login token is automatically extended according to the validity verification result. If the server side does not return any validity verification result within the time period T, namely, no valid data interaction exists among the subsystems, the login token is invalid.
To further improve the security of data storage and transmission, in this embodiment, the server also generates a corresponding and unalterable trace while verifying the login token. The trace includes information of the login token sender, the sending time, and the login token authentication result. The administrator can check the trace regularly, or judge whether abnormal access exists based on the access information, if abnormal access exists (such as access in an abnormal time period), the login terminal with abnormal access can be tracked, and therefore the safety of data flow is ensured.
Corresponding to the uniform login method of the court integrated platform, the invention also provides a uniform login system of the court integrated platform, and the court integrated platform is internally provided with a plurality of subsystems. The court integrated platform unified login system comprises a token generation module 10, a plurality of subsystems 100, a verification module 40 and a skip module 50. The token generation module 10 generates a login token based on the user login information input by the login interface, where the login token includes object information representing the user identity and aging information representing the remaining login duration. The present subsystem 20 sends a jump request. The target subsystem 30 receives the jump request and obtains a login token. The authentication module 40 authenticates the validity of the login token. When the object information in the login token is legal and the remaining login duration is within the set login duration range, the skip module 50 skips to the target subsystem 30 without logging in.
In this embodiment, the token generation module 10 is located at a server side of the court integrated platform, and the login terminal of the court integrated platform encrypts user login information input by a user through an RSA asymmetric algorithm and transmits the encrypted user login information to the token generation module 10 at the server side. The token generation module 10 decrypts the user login information to generate a login token, and meanwhile, the RSA asymmetric algorithm is performed on all parts of the login token, and the parts are reassembled into a format of the login token and returned to the login terminal.
When the login terminal performs the inter-subsystem jump login, the current subsystem 20 transmits a jump request including a login token to the target subsystem 30. The target subsystem 30 splits the encrypted login token from the received jump request and transmits it to the authentication module 40 on the server side through the API interface. The verification module 40 decrypts the received encrypted login token, restores the encrypted login token into an unencrypted login token and verifies the object information and the aging information of the unencrypted login token; returning the verification result to the target subsystem.
The jump module 50 in the subsystem realizes the login-free jump based on the validity verification result returned by the verification module 40. Further, after logging in the target subsystem, the target subsystem sends the login token carried in the operation request to the verification module for verification based on each operation request, and the operation request is executed after the verification is passed.
In addition, for the verification module 40, when the verification result of the login token is the validity verification result, it will initialize the remaining login duration of the login token with the preset login duration T as the length.
In summary, the unified login method and system for the court integration platform provided by the invention generate a login token containing object information representing the identity of the user and time efficiency information representing the remaining login duration while the user logs in. The login token is carried when the jumping between the subsystems is realized, the legitimacy and timeliness of the login token are verified by the subsystems, and the login-free jumping-indication target subsystem can be realized after the verification is passed. The login token is set to realize login-free jumping among a plurality of subsystems, so that great convenience is brought to the use of a user; and simultaneously, the verification of the object information and the aging information in the login token ensures the safety of login-free jumping among subsystems. The uniform login method and the system for the court integration platform provided by the invention simultaneously take convenience in use and data security into consideration. In addition, the login token is transmitted by the login terminal following the skip request, is a dynamic process and is not limited by a network, and has very good expansibility.
Although the present invention has been described with reference to the preferred embodiments, it should be understood that various changes and modifications can be made therein by those skilled in the art without departing from the spirit and scope of the invention as defined by the appended claims.

Claims (10)

1. A unified login method of a court integrated platform is characterized in that the unified login method of the court integrated platform is applicable to the court integrated platform with a plurality of subsystems, and comprises the following steps:
generating a login token based on user login information input by a login interface, wherein the login token comprises object information representing the identity of a user and aging information representing the remaining login duration;
the current subsystem sends a skip request;
the target subsystem receives the skip request and acquires a login token;
verifying the validity of the login token;
and when the object information in the login token is legal and the residual login duration is within the set login duration range, jumping to the target subsystem without login.
2. The unified login method for the court integrated platform of claim 1, wherein the right of the object information in the login token is also verified when the login token is verified, and when the user represented by the object information has the right to jump to the target system, the login-free jump to the target subsystem is performed.
3. The unified login method of the court integrated platform as claimed in claim 1, wherein the jump request comprises an address of the target subsystem and a login token, the target subsystem acquires the login token from the jump request and transmits the login token to the server, and the server verifies the login token and returns a verification result to the target subsystem.
4. The unified login method for the court integrated platform according to claim 3, wherein the login token included in the skip request is an encrypted and rearranged encryption token, the server decrypts the encryption token, and the authentication is performed after the login token in an unencrypted state is restored.
5. The unified login method for the court integrated platform of claim 1, wherein after the login-free jump to the target subsystem, the validity of the login token is verified based on each operation request, and the operation request is executed after the verification is passed.
6. The unified login method for the court integrated platform according to claim 1, wherein the login terminal encrypts the obtained user login information and transmits the encrypted user login information to the server, and the server decrypts the encrypted user login information to generate a login token and returns the login token to the login terminal.
7. The unified login method for the court integrated platform according to claim 1, wherein the verification result is returned to the login terminal after the object information and the aging information in the login token are verified, and when the verification result is the validity verification result, the remaining login duration of the login token is initialized by using the preset login duration as the length.
8. The unified login method for the court integrated platform of claim 1, wherein a corresponding and unalterable trace is generated while the login token is authenticated, said trace comprising information of the login token sender, the sending time, and the login token authentication result.
9. The utility model provides a unified login system of court integrated platform which characterized in that, a plurality of subsystems have in the court integrated platform, the unified login system of court integrated platform includes:
the token generation module is used for generating a login token based on user login information input by a login interface, wherein the login token comprises object information representing the identity of a user and aging information representing the remaining login duration;
the current subsystem sends a skip request;
the target subsystem receives the skip request and acquires a login token;
the verification module is used for verifying the validity of the login token;
and the skipping module skips to the target subsystem without login when the object information in the login token is legal and the residual login duration is within the set login duration range.
10. The unified login system of the court integrated platform of claim 9, wherein the jump request comprises an address of the target subsystem and a login token, the target subsystem obtains the login token from the jump request and transmits the login token to the server, and the server verifies the login token and returns a verification result to the target subsystem.
CN202110389291.8A 2021-04-12 2021-04-12 Uniform login method and system for court integration platform Pending CN113065116A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110389291.8A CN113065116A (en) 2021-04-12 2021-04-12 Uniform login method and system for court integration platform

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110389291.8A CN113065116A (en) 2021-04-12 2021-04-12 Uniform login method and system for court integration platform

Publications (1)

Publication Number Publication Date
CN113065116A true CN113065116A (en) 2021-07-02

Family

ID=76566371

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110389291.8A Pending CN113065116A (en) 2021-04-12 2021-04-12 Uniform login method and system for court integration platform

Country Status (1)

Country Link
CN (1) CN113065116A (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107483437A (en) * 2017-08-14 2017-12-15 深圳市华傲数据技术有限公司 A kind of user's unified login management method and device
CN108769041A (en) * 2018-06-06 2018-11-06 深圳壹账通智能科技有限公司 Login method, system, computer equipment and storage medium
CN109089264A (en) * 2018-08-02 2018-12-25 江苏满运软件科技有限公司 A kind of mobile terminal exempts from the method and system of close login
CN110309636A (en) * 2019-07-04 2019-10-08 阿里巴巴集团控股有限公司 A kind of identity authentication method and system
CN110545272A (en) * 2019-08-29 2019-12-06 珠海格力电器股份有限公司 Identity authentication method, authority authentication method, device and user management system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107483437A (en) * 2017-08-14 2017-12-15 深圳市华傲数据技术有限公司 A kind of user's unified login management method and device
CN108769041A (en) * 2018-06-06 2018-11-06 深圳壹账通智能科技有限公司 Login method, system, computer equipment and storage medium
CN109089264A (en) * 2018-08-02 2018-12-25 江苏满运软件科技有限公司 A kind of mobile terminal exempts from the method and system of close login
CN110309636A (en) * 2019-07-04 2019-10-08 阿里巴巴集团控股有限公司 A kind of identity authentication method and system
CN110545272A (en) * 2019-08-29 2019-12-06 珠海格力电器股份有限公司 Identity authentication method, authority authentication method, device and user management system

Similar Documents

Publication Publication Date Title
US9350536B2 (en) Cloud key management system
CN101051908B (en) Dynamic cipher certifying system and method
CN103795692B (en) Open authorization method, system and certification authority server
CN101401387B (en) Access control protocol for embedded devices
CN104735065B (en) A kind of data processing method, electronic equipment and server
CN110175466B (en) Security management method and device for open platform, computer equipment and storage medium
US9203621B2 (en) Policy-based data management
CN105099676B (en) A kind of user login method, user terminal and server
CN108537046A (en) A kind of online contract signature system and method based on block chain technology
US9628516B2 (en) Policy-based data management
CN111949954A (en) Login verification method, system and computer storage medium
CN103455763A (en) Internet surfing log recording system and method capable of protecting personal privacies of users
CN109873805A (en) Cloud desktop login method, device, equipment and storage medium based on cloud security
CN103853950A (en) Authentication method based on mobile terminal and mobile terminal
CN106161348B (en) Single sign-on method, system and terminal
CN105790962B (en) Method, device and system for acquiring conference document
CN106341428A (en) Cross-domain access control method and system
CN107528865A (en) The method for down loading and system of file
CN112905979B (en) Electronic signature authorization method and device, storage medium and electronic device
CN105516135A (en) Method and device used for account login
CN107645474B (en) Method and device for logging in open platform
CN103401686A (en) User Internet identity authentication system and application method thereof
CN111539020B (en) Material purchase management system and method
CN114238912A (en) Digital certificate processing method and device, computer equipment and storage medium
CN109740319A (en) Digital identity verification method and server

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20210702

RJ01 Rejection of invention patent application after publication