TWI640886B - Login method and login authentication device - Google Patents

Abstract

A system login method includes the following steps: the current system sends a user data to the login verification device; the login verification device receives the user data, generates an identification code, logs in the verification device, and outputs the identification code to the current system, and Transmitting the identification code and the user data to a temporary storage database; the current system sends the identification code to the target system; the target system sends the identification code to the login verification device; and the login verification device obtains the identification from the temporary storage database The code is compared with the identification code obtained from the target system; if the verification result is the same, the login verification device obtains the corresponding user data from the temporary storage database as the login data of the target system, and provides the login data to the target. The system is such that the target system initiates the login operation based on the login data.

Description

System login method and login verification device

The present invention relates to a system login method, and more particularly to a system login method for single sign-on.

Traditionally, when logging in to different systems, users must log in by entering the account number and password through the login interface provided by each system. Users also set different accounts and passwords in different systems based on security considerations. With more and more systems to be logged in, in addition to memorizing a large number of accounts and passwords, users must re-enter their accounts and passwords when they want to switch to other systems after logging in to a certain system, resulting in no use. Convenience.

Therefore, it is necessary to think about a new login system method to improve the above-mentioned shortcomings.

The main object of the present invention is to provide a system login method that allows a user to switch between different systems.

Another main object of the present invention is to provide a login verification device for cross-system login verification.

To achieve the above object, the present invention discloses a system login method that allows a user device to log in to a target system from the current system currently logged in, wherein the current system and the target system are connected to a login verification device. The system login method of the present invention includes the following steps: the current system sends a user data to the login verification device; the login verification device receives the user data, generates an identification code, and logs in the verification device and outputs the generated identification code to the current System, and transmitting the identification code and user data to a temporary database for storage; the current system sends the identification code to the target system; the target system sends the identification code to the login verification device; and the login verification device self-deposited database Obtain an identification code and compare it with the identification code obtained from the target system. If the verification result is the same, the login verification device obtains the corresponding user data from the temporary storage database as the login data of the target system, and provides the login. The data is sent to the target system so that the target system initiates the login operation based on the login data.

The invention further discloses a login verification device that connects the current system and the target system, and allows a user device to switch to the target system by the current system currently logged in. The login verification device of the present invention comprises a temporary storage database, a data transmission module, an identification code generation module, a verification module and a data providing module. The data transmission module is configured to receive user data from the current system and transmit the user data to the temporary storage database for storage. The identifier generation module is configured to generate an identification code, wherein the identification code is sent to the current system through the data transmission module, and is transmitted to the temporary storage database for storage. The verification module is configured to obtain an identification code from the temporary storage database and compare and verify the identification code obtained from the target system. The data providing module is configured to obtain the corresponding user data from the temporary storage database as the login data of the target system when the comparison verification result is the same, and provide the login data to the target system through the data transmission module to make the target The system starts the login operation based on the login data.

In order to better understand the technical contents of the present invention, a preferred embodiment will be described below.

Please refer to FIG. 1 for a schematic diagram of the usage environment of the system login method of the present invention.

As shown in FIG. 1, in an embodiment of the present invention, the system login method of the present invention allows a user U to operate a user device 70 to be logged into a target system 80 by a currently logged-in current system 90, where Both the system 90 and the target system 80 are connected to a login verification device 1 via the network. It should be noted that the system login method of the present invention is described below by taking only the switching between the two systems as an example. However, the present invention is not limited thereto, and the system connected to the login verification device 1 may be more. For the user U to switch between multiple systems to log in.

In an embodiment of the present invention, the login verification device 1 is, for example, one or several computer servers, including a data transmission module 10, an identification code generation module 20, a verification module 30, a data providing module 40, and a data. The module 50 and the temporary database 60 are deleted. It should be noted that, in addition to being configurable as a hardware device, a software program, a firmware, or a combination thereof, each of the above modules may also be configured by a circuit loop or other suitable type; and, in addition, each module may be configured in a separate type. It can also be combined with the type configuration. In a preferred embodiment, each module is stored in a software program on a memory, and each module is executed by a processor (not shown) in the login verification device 1 to achieve the functions of the present invention. In addition, the present embodiment is merely illustrative of preferred embodiments of the present invention, and in order to avoid redundancy, all possible combinations of variations are not described in detail. However, those of ordinary skill in the art will appreciate that the various modules or components described above are not necessarily required. In order to implement the invention, other well-known modules or elements of more detail may also be included. Each module or component may be omitted or modified as needed, and no other modules or components may exist between any two modules.

In the embodiment of the present invention, the data transmission module 10 is configured to receive user data (and supplementary user data) transmitted from the current system 90, and after receiving, the user data (and supplementary user data). Transfer to the temporary repository 50 for storage. The user data is obtained by the current system 90 based on the identity verification data input by the user U. The identity verification data is the verification data that the user must input before logging in to the current system 90. The verification data is used to verify the identity of the user. In order to avoid requesting the registrant to be non-authenticated, it is not the information for starting the login operation. Generally speaking, it consists of an account number and a password, but not limited to this. In a particular embodiment, the user profile may include at least one selected from an identification number, a code name, a name, a password, an address, an email address, a phone call, or a mobile phone. The user data is required to be logged into the target system 80 but is missing from the user data; for example, it is assumed that the information required to log in to the target system 80 includes name data, telephone data and email information, and is logged into the current system 90. When the required information (ie user data) only contains name information and telephone data, the electronic mail information is the supplementary user data referred to in the present invention. In this embodiment, the supplementary user data system is obtained from the system database D1 or D2 according to the user data, but the manner of obtaining the supplementary user data is not limited thereto, and the present invention does not need to obtain Supplement user data. For example, when the data (ie, user data) required to log in to the current system 90 can satisfy the information required to log in to the target system 80, that is, when the user data includes all the materials required to log in to the target system 80, At this point, there is no need to obtain additional user information. In addition, in other embodiments, the supplemental user profile may also be obtained by the target system 80; in detail, even if the user profile lacks the information required to log in to the target system 80, the current system 90 may only transmit the user profile to The data transmission module 10, after the user system 80 obtains the user data as described later, and then searches for the supplementary user data according to the user data, and the search mode can directly find the data from the system database D1 or the target system 80. D2, the target system 80 may also indicate that the current system 90 is looking for data from the system database D1. It should be noted that, in this embodiment, the system databases D1 and D2 for providing supplementary user data are databases in the current system 90 and the target system 80, but the present invention is not limited thereto. In other embodiments, the system database for providing supplementary user data may also be a third-party database, that is, a database for storing user data independently of the target system 80 and the current system 90.

In the embodiment of the present invention, the identification code generating module 20 is configured to generate an identification code after the data transmission module 10 receives the user data (and the supplementary user data), and the identification code can be transmitted through the data transmission module 10 It is passed back to the current system 90 and transferred to the temporary repository 50 for storage. The generated identification code establishes a pairing relationship with the received user data (and supplementary user data), and the login verification device 1 records the pairing between the identification code and the user data (and supplementary user data). relationship.

In an embodiment of the present invention, the data transmission module 10 is further configured to receive an identification code transmitted by the target system 80, wherein the identification code is obtained by the target system 80 from the current system 90. More specifically, after the current system 90 obtains the identification code from the login verification device 1, the identification code is sent to the target system 80, and then sent by the target system 80 to the login verification device 1, and the data transmission mode is used. Group 10 is received.

In the embodiment of the present invention, the verification module 30 is configured to obtain an identification code from the temporary storage database 60 and compare it with the identification code obtained from the target system 80.

When the verification module 30 compares the identification code obtained from the temporary storage database 60 with the identification code obtained from the target system 80, the result is provided to the data providing module 40. At this time, the data providing module 40 The user data (and the supplementary user data) obtained from the current system 90 and stored in the temporary storage database 60 are used as the login data of the target system 80, and the login data is provided to the target system through the data transmission module 10. 80, to enable the target system 80 to initiate a login operation based on the login data.

In the embodiment of the present invention, the data deletion module 50 is configured to provide the user data (and the supplementary user data) from the temporary storage database after providing the user data (and the supplementary user data) to the target system 80. 60 is deleted.

Next, please refer to FIG. 1 to FIG. 5 together. 2 and 3 are flowcharts showing the steps of the system login method of the present invention. Hereinafter, the steps shown in FIGS. 2 and 3 will be sequentially described with reference to FIGS. 1 and 3 to 5.

First, step S1: the current system receives an identity verification data, and obtains user data according to the identity verification data.

As shown in FIG. 1, in the embodiment of the present invention, when the user U operates the user device 70 (for example, a tablet computer) to connect to the current system 90 through the network, the current system 90 provides a first example. The login interface L shown in FIG. 4 is displayed on a screen (not shown) of the user device 70. As shown in FIG. 4, the login interface L includes an account field L1 and a password field L2, through which the user U can input the identity verification data including the account number and the password to the current system 90. After receiving the identity verification data input by the user U, the current system 1 first determines whether the account and password input by the user U are correct, and further determines the use of the account and/or password according to the input account and/or password. The user profile, such as the user U's name, phone number, and the like, and initiates the login operation based on the user profile, so that the user U logs into the current system 90. In a particular embodiment, the user profile may include at least one selected from an identification number, a code name, a name, a password, an address, an email address, a phone call, or a mobile phone.

For example, the current system 90 here may be an online office system within a company, and the user U is an employee of the company, and after inputting a preset account number and password through a login interface provided by the online office system, Log in to the online office system for specific services, but the application of the present invention is not limited thereto.

Step S2: The current system receives a system switching instruction, and determines, according to the system switching instruction, whether the user data lacks the information required to log in to the target system.

When the user U logs in to the current system 90, if he wants to log in to other systems, he can switch to the system to be logged in by inputting a system switching command. One of the specific embodiments, but not limited thereto, may display a connection of other systems on the current operating interface 91 of the current system 90 for the user to select an input system switching instruction (as shown in FIG. 5). For example, if the user U used the online office system to work, if he suddenly remembered that he had to take time off, he could click the link of the leave system and enter the request to log in to the leave system (ie, target system 80). System switching instructions.

In the embodiment of the present invention, after receiving the system switching instruction input by the user U, the current system 90 determines whether the previously obtained user data lacks the information required to log in to the target system 80 according to the system switching instruction. For example, each system including the current system 90 and the target system 80 stores the data required to log in to other systems; it is assumed that the user data required to log in to the online office system includes the user's name information and telephone data. The information required to log in to the leave system must include the user's name information, telephone data and e-mail information. When the user clicks on the link to the leave system (target system 80) in the online office system (current system 90), online The office system (current system 90) determines that the user U wants to switch the login system to the leave system according to the system switching instruction, and determines that the user information lacks the e-mail data required for the login leave system (target system 80).

Step S301: The current system sends the user data to the login verification device.

Once it is determined that the user data required to log in to the current system 90 does not lack the information required to log in to the target system 80, that is, the user profile already contains the information required to log in to the target system 80, the current system 90 will directly The obtained user data is sent to the login verification device 1 and received by the data transmission module 10 of the login verification device 1. The data transmission module 10 also transmits the user data to the temporary storage database 60 for storage (ie, step S401). ).

Step S302: The current system obtains a supplementary user data from the system database according to the user data, and sends the user data and the supplementary user data to the login verification device.

On the other hand, once it is determined that the user data required to log in to the current system 90 lacks the information required to log in to the target system 80, the current system 90 will obtain a supplementary user from the system database D1 or D2 based on the user data. data. The supplementary user data is the information that is required to be logged into the target system 80 but is missing from the user data, and may be obtained by the current system 90 from the system database D1 stored in itself, or may be obtained by the current system 90. It is stored in the system database D2 in the target system 80, but is not limited thereto. For example, as mentioned above, since the information required for the login and leave system (target system 80) includes the user's name, telephone number, and e-mail address, the e-mail information is not included in the user data. The current system 90 will first search for the corresponding email address of the name data and telephone data (ie, supplement the user data) from the system database D1 according to the user data. If the user's e-mail data is not stored in the system database D1, the current system 90 is further connected to the target system 80 to find the e-mail data (ie, supplemental user data) from the system database D2. .

After the user data is obtained, the current system 90 sends the supplementary user data together with the previously obtained user data to the login verification device 1 and receives it by the data transmission module 10 of the login verification device 1. The data transmission module 10 The user data is transferred to the temporary database 60 for storage (ie, step S402).

It should be noted that in other embodiments, even if the user profile does not include all the information required to log in to the target system 80, the current system 90 may only send the user profile to the login verification device 1, but by the target system 80. After obtaining the user data (that is, the login information mentioned later) as described later, it is judged whether the received user data lacks the information required for login, and when it is determined that the user data lacks the information required for login, The user data is searched for the supplementary user data, and then the user data and the supplementary user data are used to initiate the login verification operation. In other words, the supplemental user profile of the present invention can be obtained by the current system 90 or the target system 80.

Step S5: The login verification device generates an identification code and transmits the identification code to the temporary storage database for storage.

After the step S401 or S402 is completed, the identification code generating module 20 of the login verification device 1 generates an identification code, which is transmitted to the current system through the data transmission module 10 and transmitted to the temporary storage database 60. Store. The identification code generated therein is a one-time use code, which has a pairing relationship with the user data (and supplementary user data) received in step S401 or S402. In other words, each generated identification code is used to A unique code that identifies different user profiles (and supplements user profiles). The verification device 1 is logged in and records the pairing relationship between the generated identification code and the received user data (and supplementary user data).

As shown in FIG. 3, step S6 is next performed: the current system transmits an identification code to the target system.

The current system 90, after obtaining the identification code from the login verification device 1, then transmits the identification code to the target system 80.

Step S7: The target system sends the identification code to the login verification device.

After obtaining the identification code, the target system 80 then transmits the obtained identification code to the login verification device 1 to collect the information required for login from the login verification device 1.

Step S8: The login verification device obtains the identification code from the temporary storage database, and performs comparison verification with the identification code obtained from the target system.

Once the login verification device 1 obtains the identification code from the target system 80, the verification module 30 retrieves the previously stored identification code from the temporary storage database 60 and compares it with the identification code obtained from the target system 80. Verify that the identification code from the target system 80 is correct. If the verification result is the same, the data providing module 40 of the login verification device 1 uses the user data (and the supplementary user data) that is paired with the identification code as the login data of the target system 80 according to the identification code, and The login data is provided to the target system 80 (ie, step S9 is performed) to cause the target system 80 to initiate a login operation based on the login data (ie, perform step S10). After the login operation is completed, the user device 70 can successfully switch to the target system 80. For example, in the previous example, the user interface 70 is displayed in the leave system. At this time, the operation interface 81 (shown in FIG. 6) of the leave system (target system 80) is directly displayed on the screen of the user device 70, and no longer. The login page is displayed first to ask the user to enter the identity verification data.

Step S11: The login verification device deletes the user data (and the supplementary user data).

After the user data (and supplementary user data) is provided to the target system 80, in order to avoid the risk of the personal data being stolen after the login verification device is compromised, each time the user data (and the supplementary user data) is provided The data deletion module 50 of the login verification device 1 deletes the user data (and supplementary user data) from the temporary storage database 60.

In the above, the above-mentioned embodiments are only for the convenience of the description, and the scope of the claims should be based on the scope of the patent application, and not limited to the above embodiments.

Login verification device 1 data transmission module 10 identification code generation module 20 verification module 30 data providing module 40 data deletion module 50 temporary storage database 60 user device 70 target system 80 current system 90 current operation interface 91 system data Library D1, D2 User U Login Interface L Account Field L1 Password Field L2

1 is a schematic diagram of a usage environment of a login verification device of the present invention. 2 is a flow chart showing the first step of the system login method of the present invention. 3 is a flow chart showing the second step of the system login method of the present invention. FIG. 4 is a schematic diagram showing one of the login interfaces provided by the current system. Figure 5 is a schematic diagram showing one of the operating interfaces provided by the current system. Figure 6 is a schematic diagram showing one of the operational interfaces provided by the target system.

Claims (17)

A system login method for allowing a user device to switch to a target system by a current system, wherein the current system and the target system are connected to a login verification device, the system login method comprising the following steps: the current system determines a Whether the user profile lacks the information required to log in to the target system; if not, the current system sends the user profile to the login verification device; if so, the current system obtains a supplement from a system database based on the user profile User data, and the user data and the supplementary user data are sent to the login verification device; the login verification device receives the user data, or the user data and the supplementary user data, and generates an identification code. The login verification device outputs the identification code to the current system, and transmits the identification code and the user data to a temporary storage database; the current system sends the identification code to the target system; the target system sends The identification code to the login verification device; and the login verification device is taken from the temporary storage database The identification code is compared with the identification code obtained from the target system. If the verification result is the same, the login verification device obtains the corresponding user data from the temporary storage database as one of the target systems. Information and providing the login information to the target system to enable the target system to initiate a login operation based on the login data. The system login method of claim 1, wherein the login verification device receives the user profile through a data transmission module. The system login method of claim 1, wherein the login verification device receives the user data, and an identification code generation module generates an identification code, and the identification code is output through a data transmission module to The current system is transferred to the temporary repository for storage. The system login method of claim 1, wherein the login verification device obtains the corresponding user data from the temporary storage database as the login data through a data providing module. The system login method of claim 1, wherein the login verification device receives the identification code sent from the target system through a data transmission module. The system login method of claim 1, wherein the login verification device obtains the identification code from the temporary storage database through a verification module, and compares the identification code sent by the target system. For verification. The system login method of claim 1, wherein the login data is provided to the target system via a data transmission module. The system login method of claim 1, wherein the current system further sends the supplementary user data to the login verification device, so that the supplementary user data is used as the login when the verification result is the same. data. The system login method of claim 8, further comprising the step of: receiving, by the current system, a system switching instruction to determine, according to the system switching instruction, whether the user data lacks information required to log in to the target system. The system login method of claim 1, wherein the login verification device provides the login information to the target system, and further includes the following steps: the target system determines whether the user profile lacks the required login to the target system And if the target system obtains a supplementary user profile from a system database based on the user data, thereby initiating the login operation based on the user profile and the supplementary user profile. The system login method of claim 8 or 10, wherein the system database is stored in the current system. The system login method of claim 8 or 10, wherein the system database is stored in the target system. The system login method of claim 1, wherein the user profile comprises at least one selected from the group consisting of an ID number, a code name, a password, an address, an email address, a telephone number, or a mobile phone number. The system login method as described in claim 1 further includes the following steps: deleting the storage in the temporary storage system after the data providing module provides the user data to the target system through a data deletion module The user profile in the database. A login verification device that allows a user device to be logged into a target system by a current system, the login verification device comprising: a temporary storage database; and a data transmission module for receiving usage from one of the current systems And transmitting the user data to the temporary storage database, the data transmission module is further configured to receive supplementary user data from the current system, the supplementary user data is The user data is obtained from a system database when the information required for logging in to the target system is lacking; an identification code generating module is configured to generate an identification code, wherein the identification code is sent to the data transmission module The current system is transmitted to the temporary storage database for storage; a verification module is configured to obtain the identification code from the target system, and obtain the identification code from the temporary storage temporary storage database for comparison verification; And a data providing module for obtaining the comparison verification result from the verification module, wherein the data providing module is from the temporary storage database when the comparison verification result is the same To give the corresponding one of the user data to the target system as the login information, and providing the sign data through the data transmission module to the target system, so that the target operating system boot based on the sign in sign information. The login verification device of claim 15, wherein the user profile comprises at least one selected from the group consisting of an identification number, a code name, a name, a password, an address, an email address, a telephone call, or a mobile phone. The login verification device of claim 15 further includes a data deletion module for deleting the user data after the user data is returned to the target system.