CN113422752A - User login processing method and device and electronic equipment - Google Patents

User login processing method and device and electronic equipment Download PDF

Info

Publication number
CN113422752A
CN113422752A CN202011198096.9A CN202011198096A CN113422752A CN 113422752 A CN113422752 A CN 113422752A CN 202011198096 A CN202011198096 A CN 202011198096A CN 113422752 A CN113422752 A CN 113422752A
Authority
CN
China
Prior art keywords
application
login
information
user
processing
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202011198096.9A
Other languages
Chinese (zh)
Other versions
CN113422752B (en
Inventor
董昊
华茹茹
赵壮
李朋
宋毅
郑舜
裴恺慧
冯博渊
章子鹏
于艳平
包立
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to CN202011198096.9A priority Critical patent/CN113422752B/en
Publication of CN113422752A publication Critical patent/CN113422752A/en
Application granted granted Critical
Publication of CN113422752B publication Critical patent/CN113422752B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

The embodiment of the invention provides a processing method and device for user login and electronic equipment, wherein the method comprises the following steps: responding to the login-free operation of the first application, and sending an information acquisition request for acquiring login information to the second application in the logged-in state through cross-process communication; receiving login information of the second application returned after the signature information passes the verification of the second application; the first application performs a login process using login information of the second application. The embodiment of the invention initiates login to the server by using the login information of another logged-in application through a cross-process communication mechanism on the basis of meeting the authentication relationship between the applications. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.

Description

User login processing method and device and electronic equipment
Technical Field
The application relates to a user login processing method and device and electronic equipment, and belongs to the technical field of computers.
Background
On a user terminal device, a large number of unregistered users exist in a plurality of applications, most of the unregistered users come from newly added and lost recall devices, login of the users is blocked due to overhigh login obstacles or no strong login willingness, the users become silent on the unregistered devices for a long time, and the users are lost and negative effects are caused on service operation of the applications in the past.
In the prior art, although there is a process of performing application login through a third-party account, in the process of the process, an original application corresponding to the third-party account needs to be used for performing certain operations, such as scanning confirmation and the like, or a user directly inputs information of a third-party account, and the like.
Disclosure of Invention
The embodiment of the invention provides a user login processing method, which is used for helping a user to conveniently and rapidly log in an account.
In order to achieve the above object, an embodiment of the present invention provides a method for processing user login, including:
responding to login-free operation of a first application, and sending an information acquisition request for acquiring login information to a second application in a logged-in state through cross-process communication, wherein the information acquisition request comprises signature information of the first application;
receiving login information of the second application returned after the signature information is verified by the second application;
the first application performs login processing of the first application using login information of the second application.
The embodiment of the invention also provides a processing method for user login, which comprises the following steps:
receiving a login request sent by a first application of a user terminal, wherein the login request comprises login information of a second application;
according to account intercommunication system data, authenticating the login behavior of the first application based on the login information of the second application, wherein the account intercommunication system data comprises login-free authorization relations among accounts of the same user on a plurality of applications;
and returning an authentication result to the first application of the user terminal.
The embodiment of the invention also provides a processing device for user login, which comprises:
the login information acquisition module is used for responding to login-free operation of a first application and sending an information acquisition request for acquiring login information to a second application in a logged state through cross-process communication, wherein the information acquisition request comprises signature information of the first application;
the login information providing module is used for receiving login information of the second application returned after the signature information is verified by the second application;
and the login processing module is used for executing the login processing of the first application by using the login information of the second application.
The embodiment of the invention also provides a processing device for user login, which comprises:
the login request receiving module is used for receiving a login request sent by a first application of a user terminal, wherein the login request comprises login information of a second application;
the login information authentication module is used for authenticating the login behavior of the first application based on the login information of the second application according to account intercommunication system data, and the account intercommunication system data comprises login-free authorization relations among accounts of the same user on a plurality of applications;
and the authentication result returning module is used for returning the authentication result to the first application of the user terminal.
Embodiments also provide an electronic device, comprising:
a memory for storing a program;
and the processor is used for operating the program stored in the memory so as to execute the processing method for user login.
According to the processing method and device for user login and the electronic equipment, disclosed by the embodiment of the invention, login is initiated to a server by using login information of another logged-in application on the basis of meeting the authentication relationship between applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.
Drawings
Fig. 1 is a schematic view of an application scenario of a processing method for user login according to an embodiment of the present invention.
Fig. 2 is a schematic process flow diagram of triggering a login-exempt operation based on page access according to an embodiment of the present invention.
Fig. 3 is a flowchart illustrating a user login processing method according to an embodiment of the present invention.
Fig. 4 is a second flowchart illustrating a user login processing method according to an embodiment of the invention.
Fig. 5 is a schematic structural diagram of a processing apparatus for user login according to an embodiment of the present invention.
Fig. 6 is a second schematic structural diagram of a processing device for user login according to an embodiment of the present invention.
Fig. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
On one hand, on one side of a user terminal, on the basis of meeting the authentication relation between applications through a cross-process communication mechanism based on the user terminal, login information of another logged-in application is used for initiating login to a server; on the other hand, on the server side, based on the account intercommunication system, under the condition that the login-free authorization relationship between accounts corresponding to different applications is met, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, and the barriers and the difficulty of user login are reduced, so that the user can conveniently and smoothly perform application login, the loss of the user who does not login for a long time can be prevented, and the potential revenue of the application can be increased.
Fig. 1 is a schematic view of an application scenario of a processing method for user login according to an embodiment of the present invention. And installing a first application and a second application on the user terminal, wherein the second application is already in a user login state, the first application is in a running state, and the user login is not performed. In such a case, when a certain trigger condition occurs, the first application can be enabled to perform login-free operation, that is, the login is directly completed without the user inputting the user information such as the user name and the password corresponding to the first application.
Specifically, when the login-free operation is executed, the first application initiates an information acquisition request for acquiring login information of the second application to the second application based on a cross-process communication mechanism provided by an operating system of the user terminal, for example, based on an Android Interface Definition Language (AIDL) toolkit, and the like, where the request carries signature information of the first application. The second application checks the signature information of the first application based on a pre-stored application white list allowing the login information to be provided, and if the first application is confirmed to be actually in the application white list, the login information of the second application is provided for the first application. The Login information may be a log Token or the like. The application white list may be that the second application is embedded into the second application when installed, and the application white list is generally a plurality of applications that are directly or indirectly operated by the same economic entity, for example, some large-scale e-commerce enterprises provide a payment application and an online shopping application on one hand, and also provide a video playing application, a social media application, a news application, and the like on the other hand. An account intercommunication system can be formed among the applications, so that the use of users is facilitated, and the overall management of an economic body is facilitated. The applications may be stored in an application white list, allowing the applications in the white list to provide login information based on cross-communication. The application white list information can be updated in real time through interaction with the service platform, the applications are not limited to applications under the same economic body, and an account intercommunication system can be established on the premise of ensuring the user information safety along with the cooperation relationship between different economic bodies. In addition, the above-mentioned account intercommunication may also adopt one or more applications as a basic application, an account corresponding to the basic application as a basic account, and based on a preset security policy, other applications may perform login-free operation based on the login information of the basic account, whereas, the basic application may not perform login-free operation based on the account login information of non-basic applications, and may not perform login-free operation based on the account login information of each other between non-basic applications, and in short, the establishment of a specific account intercommunication system may be customized according to the ecological mode of the economic entity and the security requirement.
Further, since the account interworking system may include a plurality of applications, when the first application performs the login-free operation, polling may be initiated to a plurality of second applications in the user terminal, and the polling may be performed in a certain order, for example, the method may start from an application most frequently used by the user, and if the authentication of the service platform fails, initiate a request for obtaining login information to another application, and send a login request to the service platform again. In most cases, the user will use the account corresponding to the application that is more commonly used as the basic account in the account interworking system, but some users may associate accounts between non-basic applications for privacy protection, so that the user can automatically find the account login information with interaction through the polling mechanism and perform login-free operation.
It should be noted that, in addition to the necessary security mechanism of the user information, the establishment of the above-mentioned account interworking system needs to obtain the explicit authorization of the user, that is, when the user creates an account of each application, the service platform needs to acquire the authorization of the user to implement the interworking between the accounts, and the user can perform the unified authorization on a plurality of accounts corresponding to different applications, and can perform the authorization on account interaction only on some of the accounts.
And after obtaining the login information of the second application, the first application includes the login information of the second application in the login request and sends the login request to the service platform. The method comprises the steps that account intercommunication system data are stored on one side of a service platform, the account intercommunication system data record the login-free authorization relationship among accounts of the same user on a plurality of applications, the service platform authenticates a login request according to the account intercommunication system data and returns an authentication result of whether login is allowed or not to a first application of a user terminal, and under the condition that the authentication is passed, the first application enters a login state and displays the login state as a state that the user logs in by using existing account information corresponding to a second application.
The condition for triggering the user log-in exemption may be that the user triggers the log-in exemption operation to the first application based on content access in the process of browsing the web page, for example, when the user browses the web page, the user clicks an advertisement on the web page to jump to the first application to trigger the log-in exemption operation. The scenario shown in fig. 1 is that the user triggers the first application to perform the login-free operation based on the page access of the browser.
In addition, the triggering condition may be that, when the user uses the first application but does not log in the account, the user clicks the guidance content on the first application interface for prompting the user to avoid the login operation, so as to trigger the login-free operation of the first application. In order to sufficiently protect the privacy of the user, in this case, a clear authorization prompt may be issued to the user through a popup window, and after the user authorization is confirmed, the login-free operation described above is performed. In some cases, if the login-free operation is not successfully responded after a period of time, the user can be switched to a manual login interface for the user to log in manually. The log-on-free operation may be a successful response, for example, if the user account has a lower security level and is in a user security perspective, and log-on-free is rejected.
In addition, the triggering condition can be that the user triggers the login-free operation of the first application on the basis of content access or association operation on the page of other application. For example, a user is watching a small video on a short video application, a link of related news is given on the video, and the user triggers and invokes the news application after clicking the news link, so that the login-free operation can be triggered based on the started news application, and the user can directly switch to the news application to view related news contents.
Further, as shown in fig. 2, it is a schematic diagram of a processing flow of triggering the logoff operation based on the page access according to the embodiment of the present invention. The processing flow relates to the processing of three parties of an online shopping service platform, a browser page and an online shopping application, the online shopping service platform can provide various channels for advertisement or information release, the channels can be provided by various media, for example, an advertisement position provided by a website can be regarded as the channels provided by the website, for example, various content promotion links provided by a short video application are also channels, the channels can belong to a third party outside the online shopping service platform, or belong to the online shopping service platform itself or an economic body for management, and the login-free processing of the online shopping application corresponding to the online shopping service platform can be started by residing the channels on the online shopping service platform.
As shown in fig. 2, after channels are installed in the online shopping service platform, the online shopping service platform may allow the content advertised by the channels to be associated with the content of the online shopping service platform, that is, a jump link is formed, so as to jump to a content page corresponding to the online shopping service platform. The mere channel residence is only the association of page contents, and to realize the trigger of the login-free operation, the channel needs to be registered as the login-free channel and added into the white list of the channel/equipment. The device white list as referred to herein refers to limitations for the terminal devices used by the user, for example, a login-free or login-free process may be provided for different models or different brands of devices. In fact, different devices can also be considered broadly channels.
After the channel registration and the registration-free channel registration are completed, content delivery can be performed on a browser page of the corresponding channel, for example, commercial advertisements are delivered on advertisement content provided on a news website (i.e., a channel provided by the news website), and when a user clicks the advertisement content on a webpage of the news website, a link is triggered to jump to a commercial page to be accessed by the online shopping application, so that the process of starting the online shopping application is triggered.
If the situation that the application is not installed yet may exist when the online shopping application is started, the downloading and installation processing of the application is triggered, and then the application is started. If the application is already installed on the user terminal, the application can be directly started.
The started application may obtain channel information based on information provided by the jump link, and the online shopping application may also obtain device information of the user terminal, such as an IMEI (International Mobile Equipment Identity), an IDFA (Identifier for advertisements), an OAID (open advertisement Identifier), and the like. The online shopping application can report the channel information to the online shopping service platform for verification processing through the equipment information, and the online shopping service platform verifies the channel information based on the white list of the channel/equipment and returns a verification result.
After the online shopping application obtains the verification result, whether login-free processing is executed or not is executed according to the verification result, if the verification is passed, the aforementioned login-free processing based on cross-process communication is executed, if the verification is not passed, the login-free processing is not executed, a commodity page can be directly displayed in a non-login state, a page allowing a user to manually log in can be popped up, and the like. The possibility of commodity transaction can be improved by enabling the user to directly access the commodity page in the login state without login operation.
The web-shopping application and the advertisement content jump based on the browser are taken as examples above, and the trigger mechanism of the login-free process is explained, and actually the login-free operation can be triggered in more application scenes, such as content link jump triggered based on other applications as media channels, and the basic principle of triggering the login-free process is consistent.
The processing method for user login of the embodiment of the invention uses the login information of another logged-in application to initiate login to a server on the basis of meeting the authentication relationship between applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
In addition, it should be noted that, in a specific authorization interaction form, only one simple window prompt may be popped up to enable the user to confirm whether to perform login-free authorization, or a more specific login-free authorization operation may be adopted to detect, in advance, a number of already logged-in associated applications in the user terminal, and provide these applications for the user to select, after the user selects, the applications may be used as a basis for subsequent login-free operation, and in a process of performing login-free processing in the future, the user is not required to perform repeated login-free authorization operations, and in this way, all responsible processing is completed by the back end, and user login obstacles are reduced.
The login-free authorization may also be implemented by a user authorization device, that is, a user may set a device with higher security as an authorization device, and the login-free operation may be performed by default based on login processing performed by an application on the authorization device. For example, the user can perform a login-free operation or the like through a computer at home by remote operation.
In addition, when the first application logs in by using login information such as an account password of a third party other than the first application, a certain permission level can be set, for example, when the first application logs in by using an account corresponding to the first application, full permission can be obtained, and after the first application logs in by using an account of the third party, only partial permission can be reserved, for example, the online shopping application can have the permission of adding a shopping cart but has no payment permission. If the user needs to use the limited rights, the rights need to be unlocked by means of password input authentication.
In addition, in the log-free processing logic, logic processing based on an account level can be introduced, that is, an application corresponding to a low-level account can use the login information of an application corresponding to a high-level account to realize login, for example, a news application can use the login information of a payment application to realize log-free processing, otherwise, the application is not used, because generally, the account of the payment application has a higher security level, and the login information of the payment application is used to log in the news application, so that potential safety hazards do not exist.
In addition, some service platforms also provide some account binding systems, for example, social media applications and online shopping applications are bound, and login avoidance can be achieved by mutually utilizing login information of the other party among the bound applications. The technical solution of the present invention is further illustrated by some specific examples.
Example one
As shown in fig. 3, which is a flowchart of a processing method for user login according to an embodiment of the present invention, the method may be run on a user terminal, and may be specifically executed by the first application, and the method may include:
s101: and responding to the login-free operation of the first application, and sending an information acquisition request for acquiring login information to the second application in the logged-in state through cross-process communication, wherein the information acquisition request comprises the signature information of the first application. The cross-process communication mechanism may be from a tool or a plug-in provided by an operating system of the user terminal, for example, a toolkit based on an Android interface definition language, and initiate an information acquisition request for acquiring login information of the second application to the second application. The Login information may be a log Token or the like. In addition, the second application may be multiple, that is, there may be multiple second applications in the same account interworking system as the first application, and in this case, the first application may send an information acquisition request for acquiring the login information to the multiple second applications according to a preset polling sequence.
S102: and receiving the login information of the second application returned after the signature information is verified by the second application. Specifically, the second application may perform verification processing based on an application white list on the signature information of the first application, and return login information of the second application to the first application if the signature information of the first application is in a preset application white list.
The application white list may be that the second application is embedded into the second application when installed, and the application white list is generally a plurality of applications that are directly or indirectly operated by the same economic entity, for example, some large-scale e-commerce enterprises provide a payment application and an online shopping application on one hand, and also provide a video playing application, a social media application, a news application, and the like on the other hand. An account intercommunication system can be formed among the applications, so that the use of users is facilitated, and the overall management of an economic body is facilitated. The applications may be stored in an application white list, allowing the applications in the white list to provide login information based on cross-communication. The application white list information can be updated in real time through interaction with the service platform, the applications are not limited to applications under the same economic body, and an account intercommunication system can be established on the premise of ensuring the user information safety along with the cooperation relationship between different economic bodies.
S103: the first application performs a login process of the first application using login information of the second application. The step may specifically include: the first application includes the login information of the second application in the login request and sends the login information to the server; and receiving an authentication result based on the account intercommunication system data returned by the server, and completing login processing of the first application according to the authentication result. Specifically, if the authentication result is that the authentication is passed, normal data access after login is performed, for example, a content page is loaded, the user may perform various functional operations after login, and the like. The server referred to herein may correspond to the service platform or a portion of the service platform shown in fig. 1.
In the specific login process of the first application, the login of the first application can be completed by using the login information of the second application in various forms, and the following ways can be specifically adopted:
the first method is as follows: the login is performed by using the login information of the second application, and the login account number of the first application after login is actually consistent with the second application, namely, the login is performed directly by using information such as the account password of the second application.
The second method comprises the following steps: and verifying the account of the first application by using the login information of the second application, thereby realizing that the first application logs in the account originally corresponding to the first application. Specifically, a server corresponding to a second application is triggered through the logged-in second application, account information verification interaction between the servers is initiated to the server corresponding to the first application, after the verification is passed, a verification result is returned to the second application, and then the second application returns the verification result to the first application, so that the logging-in of the first application is completed. That is, in the whole process, the login process of the first application is actually completed by means of the interaction between the second application and the server and the interaction between the servers. The method is particularly suitable for the situation that the first application and the second application belong to different service platforms, namely login needs to be completed through server interaction of cross platforms, but the interaction is completed by a background, and a user can realize no perception.
The third method comprises the following steps: the first application acquires the user name and the password corresponding to the first application from the server side through the second application, then provides the user name and the password to the first application through inter-process communication, and the first application completes login through the acquired user name and password.
The method is as follows: the first application sends the login information of the second application to the server, the server authenticates based on the account intercommunication system, and then the login information of the second application is used as an authentication reference to realize that the first application completes login by using the corresponding account.
In addition, the condition for triggering the login-free operation of the first application may be an operation based on a user clicking a page link, where the page link may be a jump link carried by page content on a browser webpage, or an adjustment link on other application pages, and the like. Specifically, after a user clicks a page link, in response to the click operation, a first application is triggered to acquire channel information and/or device information corresponding to the page link, specifically, the first application may acquire the channel information based on a position of the page link, for example, if the page link is on a certain news website page, the channel is the news website, and if the page link is from a video playing page of a certain short video application, the channel information is a website corresponding to the short video. The device information may be from access of the first application to the device information of the located user terminal, and the device information may specifically be IMEI, IDFA, OAID, and the like. After channel information and/or equipment information are obtained, reporting to a server; after the server verifies the channel information and/or the equipment information, the first application receives a verification result of the channel and/or the equipment returned by the server, if the verification result is that the verification is passed, the first application is triggered to execute login-free operation, if the verification is not passed, the login-free processing is not executed, a commodity page can be directly displayed in a non-login state, a page allowing a user to manually log in can be popped up, and the like.
In the process of executing the login-free operation, if the first application is not installed in the user terminal, the downloading and installation process of the first application is triggered, then the first application is started, and then the process of acquiring the channel information and/or the device information corresponding to the page link is triggered. And if the first application is installed in the current user terminal but is not started, starting the first application, and then triggering the processing of acquiring the channel information and/or the equipment information corresponding to the page link.
In addition, as another case of triggering the login-free operation of the first application, the user may use the first application but does not log in the account, and for this case, guidance content of the login-free operation may be provided on the page of the first application, for example, a popup prompt may prompt the user that the login-free operation may be performed in a fast manner, and after the user clicks the guidance content of the login-free operation, the login-free operation of the first application is triggered
The user can trigger the login-free operation of the first application by clicking the guide content for prompting the user to log in the login-free operation on the first application interface, for example, for the user who frequently uses the first application but does not log in for a long time, the user can be prompted to carry out the login-free operation in a fast mode by an active popup prompt mode, in this case, if the user clicks the popup prompt, a page for displaying the login-free authorization of the user can be triggered, then, the first application is triggered to execute the login-free operation processing in response to the login-free authorization operation of the user, namely, after sending an explicit authorization prompt and confirming the authorization of the user, the login-free operation is executed, otherwise, the login-free processing is not executed, and the original page which needs the manual login of the user is still provided.
The processing method for user login of the embodiment of the invention uses the login information of another logged-in application to initiate login to a server on the basis of meeting the authentication relationship between applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
Example two
As shown in fig. 4, which is a second flowchart of a processing method for user login according to an embodiment of the present invention, the method may be executed on a server, and the method may include:
s201: and receiving a login request sent by a first application of the user terminal, wherein the login request comprises login information of a second application.
S202: and authenticating the login behavior of the first application based on the login information of the second application according to the account intercommunication system data, wherein the account intercommunication system data comprises login-free authorization relations among accounts of the same user on a plurality of applications. The account intercommunication system can be constructed based on a plurality of applications operated directly or indirectly by the same economic body, and the account intercommunication system formed among the applications is convenient for users to use and the economic body to carry out integral management. The applications are not limited to the applications under the same economic body, and an account intercommunication system can be established on the premise of ensuring the user information security along with the cooperation relationship between different economic bodies. In addition, the above-mentioned account intercommunication may also adopt one or more applications as a basic application, an account corresponding to the basic application as a basic account, and based on a preset security policy, other applications may perform login-free operation based on the login information of the basic account, whereas, the basic application may not perform login-free operation based on the account login information of non-basic applications, and may not perform login-free operation based on the account login information of each other between non-basic applications, and in short, the establishment of a specific account intercommunication system may be customized according to the ecological mode of the economic entity and the security requirement.
S203: and returning an authentication result to the first application of the user terminal. And if the authentication result is that the authentication is passed, sending a display page in the login state of the account corresponding to the first application.
In addition, the server side may further include a verification process for the channel and/or the device to determine whether to allow the first application to perform the login-exempting operation, and specifically, the server may further perform the following processes:
the method comprises the steps of receiving first application reported channel information and/or equipment information, verifying the channel information and/or the equipment information according to a preset channel and/or equipment white list, and then returning a verification result to the first application. The white listing of the channels and/or devices may be performed based on channel enrollment and login-free registration performed by a third party in advance in the server, for example, a news website may be enrolled on the server with its advertisement page as a channel and perform login-free registration, that is, based on a user clicking on the advertisement page of the news website, a login-free operation of the first application can be triggered to access a content skip link corresponding to the advertisement page.
The processing method for user login of the embodiment of the invention uses the login information of another logged-in application to initiate login to a server on the basis of meeting the authentication relationship between applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
EXAMPLE III
As shown in fig. 5, which is a schematic structural diagram of a processing apparatus for user login according to an embodiment of the present invention, the apparatus may be disposed on a user terminal, and specifically may be disposed in the first application, and the apparatus may include:
the login information obtaining module 11 is configured to send, in response to a login-free operation of a first application, an information obtaining request for obtaining login information to a second application in a logged-in state through cross-process communication, where the information obtaining request includes signature information of the first application. The cross-process communication mechanism may be from a tool or a plug-in provided by an operating system of the user terminal, for example, a toolkit based on an Android interface definition language, or the like. The Login information may be a log Token or the like. In addition, the second application may be multiple, that is, there may be multiple second applications in the same account interworking system as the first application, and in this case, the first application may send an information acquisition request for acquiring the login information to the multiple second applications according to a preset polling sequence.
And the login information providing module 12 is configured to receive login information of the second application returned after the signature information is verified by the second application. Specifically, the second application may perform verification processing based on an application white list on the signature information of the first application, and return login information of the second application to the first application if the signature information of the first application is in a preset application white list. The application white list can be built in the second application when the second application is installed, the application white list is generally a plurality of applications operated by the same economic body directly or indirectly, and an account intercommunication system can be formed among the applications, so that the use of a user is facilitated, and the economic body is convenient to manage integrally. The applications may be stored in an application white list, allowing the applications in the white list to provide login information based on cross-communication. The application white list information can be updated in real time through interaction with the service platform, the applications are not limited to applications under the same economic body, and an account intercommunication system can be established on the premise of ensuring the user information safety along with the cooperation relationship between different economic bodies.
And a login processing module 13, configured to perform login processing of the first application using login information of the second application. The login processing may specifically include: the first application includes the login information of the second application in the login request and sends the login information to the server; and receiving an authentication result based on the account intercommunication system data returned by the server, and then completing login processing of the first application according to the authentication result. Specifically, if the authentication result is that the authentication is passed, normal data access after login is performed, for example, a content page is loaded, the user may perform various functional operations after login, and the like.
In addition, the apparatus of this embodiment may further include:
and the channel/device reporting processing module is configured to, in response to an operation of clicking a page link by a user, acquire channel information and/or device information corresponding to the page link, report the channel information and/or device information to a server, receive a verification result of the channel and/or device returned by the server, and instruct the login processing module 13 to perform login processing of the first application using login information of the second application if the verification result is that the verification is passed.
The detailed description of the above processing procedure, the detailed description of the technical principle, and the detailed analysis of the technical effect are described in the foregoing embodiments, and are not repeated herein.
The processing device for user login of the embodiment of the invention uses the login information of another logged-in application to initiate login to a server on the basis of meeting the authentication relationship between the applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
Example four
As shown in fig. 6, which is a schematic structural diagram of a processing apparatus for user login according to an embodiment of the present invention, secondly, the apparatus may be disposed on a server, and the apparatus may include:
the login request receiving module 21 is configured to receive a login request sent by a first application of a user terminal, where the login request includes login information of a second application.
And the login information authentication module 22 is configured to authenticate the login behavior of the first application based on the login information of the second application according to the account interworking system data, where the account interworking system data includes a login-free authorization relationship between accounts of the same user on multiple applications.
The account intercommunication system can be constructed based on a plurality of applications operated directly or indirectly by the same economic body, and the account intercommunication system formed among the applications is convenient for users to use and the economic body to carry out integral management. The applications are not limited to the applications under the same economic body, and an account intercommunication system can be established on the premise of ensuring the user information security along with the cooperation relationship between different economic bodies. In addition, the above-mentioned account intercommunication may also adopt one or more applications as a basic application, an account corresponding to the basic application as a basic account, and based on a preset security policy, other applications may perform login-free operation based on the login information of the basic account, whereas, the basic application may not perform login-free operation based on the account login information of non-basic applications, and may not perform login-free operation based on the account login information of each other between non-basic applications, and in short, the establishment of a specific account intercommunication system may be customized according to the ecological mode of the economic entity and the security requirement.
And an authentication result returning module 23, configured to return an authentication result to the first application of the user terminal.
In addition, the apparatus of this embodiment may further include:
and the channel/equipment verification module is used for receiving the channel information and/or equipment information reported by the first application, verifying the channel information and/or equipment information according to a preset channel and/or equipment white list, and returning a verification result to the first application. Wherein the white listing of channels and/or devices may be accomplished based on prior channel enrollment and log-off registration at the server by a third party.
The detailed description of the above processing procedure, the detailed description of the technical principle, and the detailed analysis of the technical effect are described in the foregoing embodiments, and are not repeated herein.
The processing device for user login of the embodiment of the invention uses the login information of another logged-in application to initiate login to a server on the basis of meeting the authentication relationship between the applications through a cross-process communication mechanism on a user terminal; on the side of the server, based on an account intercommunication system, under the condition of meeting the login-free authorization relationship among accounts corresponding to different applications, the applications are allowed to complete login operation. In the whole process, the user does not need to input account information and the like of the current application in a complicated way, the barriers and difficulty of user login are reduced, the user experience is improved, and the loss of the user is better recovered.
EXAMPLE five
The foregoing embodiment describes a flow process and a device structure of a processing method for user login, and the functions of the method and the device can be implemented by an electronic device, as shown in fig. 7, which is a schematic structural diagram of the electronic device according to the embodiment of the present invention, and specifically includes: a memory 110 and a processor 120.
And a memory 110 for storing a program.
In addition to the programs described above, the memory 110 may also be configured to store other various data to support operations on the electronic device. Examples of such data include instructions for any application or method operating on the electronic device, contact data, phonebook data, messages, pictures, videos, and so forth.
The memory 110 may be implemented by any type or combination of volatile or non-volatile memory devices, such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks.
The processor 120, coupled to the memory 110, is used for executing the program in the memory 110 to perform the operation steps of the processing method for user login described in the foregoing embodiments.
Further, the processor 120 may also include various modules described in the foregoing embodiments to perform the process of user login, and the memory 110 may be used, for example, to store data required by the modules to perform operations and/or output data.
The detailed description of the above processing procedure, the detailed description of the technical principle, and the detailed analysis of the technical effect are described in the foregoing embodiments, and are not repeated herein.
Further, as shown, the electronic device may further include: communication components 130, power components 140, audio components 150, display 160, and other components. Only some of the components are schematically shown in the figure and it is not meant that the electronic device comprises only the components shown in the figure.
The communication component 130 is configured to facilitate wired or wireless communication between the electronic device and other devices. The electronic device may access a wireless network based on a communication standard, such as WiFi, a mobile communication network, such as 2G, 3G, 4G/LTE, 5G, or a combination thereof. In an exemplary embodiment, the communication component 130 receives a broadcast signal or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 130 further includes a Near Field Communication (NFC) module to facilitate short-range communications. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.
The power supply component 140 provides power to the various components of the electronic device. The power components 140 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for an electronic device.
The audio component 150 is configured to output and/or input audio signals. For example, the audio component 150 includes a Microphone (MIC) configured to receive external audio signals when the electronic device is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signal may further be stored in the memory 110 or transmitted via the communication component 130. In some embodiments, audio assembly 150 also includes a speaker for outputting audio signals.
The display 160 includes a screen, which may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive an input signal from a user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundary of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.
Those of ordinary skill in the art will understand that: all or a portion of the steps of implementing the above-described method embodiments may be performed by hardware associated with program instructions. The aforementioned program may be stored in a computer-readable storage medium. When executed, the program performs steps comprising the method embodiments described above; and the aforementioned storage medium includes: various media that can store program codes, such as ROM, RAM, magnetic or optical disks.
Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims (14)

1. A processing method for user login comprises the following steps:
responding to login-free operation of a first application, and sending an information acquisition request for acquiring login information to a second application in a logged-in state through cross-process communication, wherein the information acquisition request comprises signature information of the first application;
receiving login information of the second application returned after the signature information is verified by the second application;
the first application performs login processing of the first application using login information of the second application.
2. The method of claim 1, wherein the first application performing login processing for the first application using login information for the second application comprises:
the first application includes the login information of the second application in a login request and sends the login request to a server;
and receiving an authentication result based on the account intercommunication system data returned by the server, and finishing the login processing of the first application according to the authentication result.
3. The method of claim 1, further comprising:
responding to the operation of clicking a page link by a user, and triggering the first application to acquire channel information and/or equipment information corresponding to the page link;
reporting the channel information and/or the equipment information to a server;
and receiving a verification result of the channel and/or the equipment returned by the server, and if the verification result is verification passing, triggering the first application to execute the login-free operation.
4. The method of claim 3, wherein triggering the first application to obtain channel information and/or device information corresponding to the page link comprises:
if the first application is not installed in the current user terminal, triggering downloading and installing processing of the first application, then starting the first application, and triggering processing of acquiring channel information and/or equipment information corresponding to the page link;
and if the first application is installed in the current user terminal but is not started, starting the first application, and then triggering the processing of acquiring the channel information and/or the equipment information corresponding to the page link.
5. The method of claim 1, further comprising:
triggering and displaying a user login-free authorization page in response to the operation that a user clicks login-free guide content on the page of the first application;
and responding to login-free authorization operation of a user, and triggering the first application to execute the processing of the login-free operation.
6. The method of claim 1, wherein the sending an information acquisition request for acquiring login information to the second application in the logged-in state through cross-process communication comprises:
and the first application sends an information acquisition request for acquiring login information to a plurality of second applications according to a preset polling sequence.
7. The method of claim 1, wherein the login information comprises a login token for the second application.
8. A processing method for user login comprises the following steps:
receiving a login request sent by a first application of a user terminal, wherein the login request comprises login information of a second application;
according to account intercommunication system data, authenticating the login behavior of the first application based on the login information of the second application, wherein the account intercommunication system data comprises login-free authorization relations among accounts of the same user on a plurality of applications;
and returning an authentication result to the first application of the user terminal.
9. The method of claim 8, further comprising:
receiving the channel information and/or the equipment information reported by the first application;
verifying the channel information and/or the equipment information according to a preset channel and/or equipment white list;
and returning a verification result to the first application.
10. A processing apparatus for user login, comprising:
the login information acquisition module is used for responding to login-free operation of a first application and sending an information acquisition request for acquiring login information to a second application in a logged state through cross-process communication, wherein the information acquisition request comprises signature information of the first application;
the login information providing module is used for receiving login information of the second application returned after the signature information is verified by the second application;
and the login processing module is used for executing the login processing of the first application by using the login information of the second application.
11. The apparatus of claim 10, further comprising:
and the channel/equipment reporting processing module is used for responding to the operation of clicking the page link by the user, acquiring the channel information and/or the equipment information corresponding to the page link, reporting the channel information and/or the equipment information to the server, receiving a verification result of the channel and/or the equipment returned by the server, and if the verification result is that the verification is passed, indicating the login processing module to execute login processing triggering the login information of the second application to execute the login processing of the first application.
12. A processing apparatus for user login, comprising:
the login request receiving module is used for receiving a login request sent by a first application of a user terminal, wherein the login request comprises login information of a second application;
the login information authentication module is used for authenticating the login behavior of the first application based on the login information of the second application according to account intercommunication system data, and the account intercommunication system data comprises login-free authorization relations among accounts of the same user on a plurality of applications;
and the authentication result returning module is used for returning the authentication result to the first application of the user terminal.
13. The apparatus of claim 12, further comprising:
and the channel/equipment verification module is used for receiving the channel information and/or the equipment information reported by the first application, verifying the channel information and/or the equipment information according to a preset channel and/or equipment white list, and returning a verification result to the first application.
14. An electronic device, comprising:
a memory for storing a program;
a processor for executing the program stored in the memory to perform the processing method of user login according to any one of claims 1 to 9.
CN202011198096.9A 2020-10-30 2020-10-30 User login processing method and device and electronic equipment Active CN113422752B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011198096.9A CN113422752B (en) 2020-10-30 2020-10-30 User login processing method and device and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011198096.9A CN113422752B (en) 2020-10-30 2020-10-30 User login processing method and device and electronic equipment

Publications (2)

Publication Number Publication Date
CN113422752A true CN113422752A (en) 2021-09-21
CN113422752B CN113422752B (en) 2024-03-26

Family

ID=77711727

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011198096.9A Active CN113422752B (en) 2020-10-30 2020-10-30 User login processing method and device and electronic equipment

Country Status (1)

Country Link
CN (1) CN113422752B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114357397A (en) * 2021-12-28 2022-04-15 北京骑胜科技有限公司 Method and system for logging in system by user

Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103634316A (en) * 2013-11-26 2014-03-12 乐视网信息技术(北京)股份有限公司 Account login method and electronic equipment
CN104348777A (en) * 2013-07-24 2015-02-11 腾讯科技(深圳)有限公司 Method and system for controlling access of mobile terminal to third party server
CN105072133A (en) * 2015-08-28 2015-11-18 北京金山安全软件有限公司 Login method and device for application program
CN105282126A (en) * 2014-07-24 2016-01-27 腾讯科技(北京)有限公司 Login authentication method, terminal and server
CN106534143A (en) * 2016-11-28 2017-03-22 上海斐讯数据通信技术有限公司 Method and system capable of realizing cross-application authentication authorization
WO2017063367A1 (en) * 2015-10-16 2017-04-20 腾讯科技(深圳)有限公司 Method for logging in to application, server, terminal, and non-volatile computer readable storage medium
CN107135218A (en) * 2017-05-04 2017-09-05 腾讯科技(深圳)有限公司 Log in state acquisition, sending method, voucher collocation method, client and server
US20180006818A1 (en) * 2015-10-28 2018-01-04 Tencent Technology (Shenzhen) Company Limited Authentication method, device, server, and system, and storage medium
CA3006135A1 (en) * 2017-05-24 2018-11-24 Magnificus Software Inc. Method and system for using a plurality of accounts in an instant messaging application
CN109787959A (en) * 2018-12-18 2019-05-21 中国平安财产保险股份有限公司 A kind of account information processing method and relevant apparatus
CN109995767A (en) * 2019-03-15 2019-07-09 中科恒运股份有限公司 Account single-point logging method, terminal device and storage medium
CN110278187A (en) * 2019-05-13 2019-09-24 网宿科技股份有限公司 Multiple terminals single-point logging method, system, sync server and medium
CN111062024A (en) * 2019-11-25 2020-04-24 泰康保险集团股份有限公司 Application login method and device
CN111628965A (en) * 2020-04-03 2020-09-04 北京奇艺世纪科技有限公司 Cross-domain name login method and device

Patent Citations (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104348777A (en) * 2013-07-24 2015-02-11 腾讯科技(深圳)有限公司 Method and system for controlling access of mobile terminal to third party server
CN103634316A (en) * 2013-11-26 2014-03-12 乐视网信息技术(北京)股份有限公司 Account login method and electronic equipment
CN105282126A (en) * 2014-07-24 2016-01-27 腾讯科技(北京)有限公司 Login authentication method, terminal and server
CN105072133A (en) * 2015-08-28 2015-11-18 北京金山安全软件有限公司 Login method and device for application program
WO2017063367A1 (en) * 2015-10-16 2017-04-20 腾讯科技(深圳)有限公司 Method for logging in to application, server, terminal, and non-volatile computer readable storage medium
US20180006818A1 (en) * 2015-10-28 2018-01-04 Tencent Technology (Shenzhen) Company Limited Authentication method, device, server, and system, and storage medium
CN106534143A (en) * 2016-11-28 2017-03-22 上海斐讯数据通信技术有限公司 Method and system capable of realizing cross-application authentication authorization
CN107135218A (en) * 2017-05-04 2017-09-05 腾讯科技(深圳)有限公司 Log in state acquisition, sending method, voucher collocation method, client and server
CA3006135A1 (en) * 2017-05-24 2018-11-24 Magnificus Software Inc. Method and system for using a plurality of accounts in an instant messaging application
CN109787959A (en) * 2018-12-18 2019-05-21 中国平安财产保险股份有限公司 A kind of account information processing method and relevant apparatus
CN109995767A (en) * 2019-03-15 2019-07-09 中科恒运股份有限公司 Account single-point logging method, terminal device and storage medium
CN110278187A (en) * 2019-05-13 2019-09-24 网宿科技股份有限公司 Multiple terminals single-point logging method, system, sync server and medium
CN111062024A (en) * 2019-11-25 2020-04-24 泰康保险集团股份有限公司 Application login method and device
CN111628965A (en) * 2020-04-03 2020-09-04 北京奇艺世纪科技有限公司 Cross-domain name login method and device

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114357397A (en) * 2021-12-28 2022-04-15 北京骑胜科技有限公司 Method and system for logging in system by user
CN114357397B (en) * 2021-12-28 2023-08-01 北京骑胜科技有限公司 Method and system for logging in system by user

Also Published As

Publication number Publication date
CN113422752B (en) 2024-03-26

Similar Documents

Publication Publication Date Title
US8832806B2 (en) User authentication management
US8850532B2 (en) Systems and methods to control access to multimedia content
US8667579B2 (en) Methods, systems, and computer readable media for bridging user authentication, authorization, and access between web-based and telecom domains
US9066227B2 (en) Hotspot network access system and method
CN106716960B (en) User authentication method and system
CN105897668A (en) Third party account authorization method, device, server and system
US20140181944A1 (en) Single sign-on for a native application and a web application on a mobile device
CN106716918B (en) User authentication method and system
US20080261562A1 (en) System and Method for Providing Bidirectional Message Communication Services with Portable Terminals
CN104618315B (en) A kind of method, apparatus and system of verification information push and Information Authentication
WO2014190789A1 (en) Method, device, client and server for interaction
CN104270404A (en) Login method and device based on terminal identification
CN110049062B (en) Verification code verification method, device, system, server, electronic equipment and storage medium
CN104967586A (en) User identity authentication method, user identity authentication apparatus and user identity authentication system
TW201203140A (en) Online service providing system, method, server and mobile device thereof, and computer program product
CN103747000A (en) Authentication method and authentication device for accessing wireless network
CN112968892B (en) Information verification method, device, computing equipment and medium
CN105809440B (en) Online payment method and device
US9398450B2 (en) Mobile survey tools with added security
CN113422752B (en) User login processing method and device and electronic equipment
CN107231338B (en) Network connection method, device and device for network connection
CN105516057B (en) Data processing method, device and system
KR101302362B1 (en) Key input security system and method using the same
CN113328971B (en) Access resource authentication method and device and electronic equipment
CN104765538A (en) Information handling method and terminal

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant