WO2011097849A1

WO2011097849A1 - Authentication method, system, terminal, server and method and device for data downloading

Info

Publication number: WO2011097849A1
Application number: PCT/CN2010/073137
Authority: WO
Inventors: 蒲竞春; 鞠飞; 谢鑫; 陈程; 付丽琴; 练煜
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-02-10
Filing date: 2010-05-24
Publication date: 2011-08-18
Also published as: CN101800985B; CN101800985A

Abstract

An authentication method, a system, a terminal, a server and a method and a device for data downloading are provided. The method for authentication comprises the following steps: a user terminal selects preset authentication mode information matched with different authentication modes, and sends the selected authentication mode information to a server of a network side; the server selects the authentication information matched with the authentication mode information sent by the user terminal, and sends the selected authentication information to the user terminal; the user terminal sends the received authentication information to the server when it is in need of authenticating the user terminal; and the server finishes the authentication of the user terminal based on the authentication information sent by the user terminal. The method enables the user to set the authentication mode according to personal requirements.

Description

Authentication method and system, terminal, server and data downloading method and device

Technical field

The present invention relates to the field of communications technologies, and in particular, to an authentication method and system, a user terminal and a server, and a method and an apparatus for downloading backup data.

Background technique

At present, personal data (including business card holder data, short message data, schedule data, email data, etc.) stored in a user terminal (such as a mobile phone) can be backed up to a server on the network side, thereby replacing the user terminal or user at the user. When the data in the terminal changes, the backup data in the server can be conveniently downloaded to the user terminal. Since the data backed up by the user in the server is often important, when the subsequent user terminal downloads the backup data from the server, it is necessary to use security and effective measures to prevent the illegal user terminal from obtaining the backup data backed up by the customer on the server.

In the prior art, the user terminal is generally used to authenticate the user terminal to ensure that the backup data can be securely provided to the corresponding legal user terminal. The three existing authentication methods are as follows:

A. The server-level authentication mode, that is, the user terminal needs to provide the server with the first authentication information (which may be user name information and password information) of the user terminal before establishing a connection with the server, and the server determines the first authentication according to the first authentication. The information determines that the user terminal has the right to establish a connection with the server, and then establishes a connection with the user terminal and allows the user terminal to download the corresponding backup data;

B. The authentication mode at the database level, that is, when the user terminal establishes a connection with the server, and needs to download the backup data from the database of the server, the second authentication information of the user terminal needs to be provided to the server, and the server is configured according to the second The right information determines that the user terminal has the right to download the backup data from the database of the server, and then allows the user terminal to download the corresponding backup data;

C. Data object level authentication mode, that is, the user terminal establishes a connection with the server, and needs to download the specified backup data from the server database (the specified backup data here is generally some special backup data, such as the user's secret. When the data is backed up, the third authentication information of the user terminal needs to be provided to the server, and the server determines, according to the third authentication information, that the user terminal has the next When the permission of the specified backup data is carried, the user terminal is allowed to download the specified backup data. In the above authentication method provided by the prior art, the authentication mode used by the user is set by the server according to the type of the user. For example, if the server allocates the first authentication information to the ordinary user, the security level is higher. The user assigns the second or third authentication information, and the defect that the above-mentioned server sets the authentication information according to the type of the user is that the user cannot flexibly set the authentication mode according to his own needs, for example, the ordinary user cannot follow the authentication method. Set your own requirements to set a higher security level of authentication.

Summary of the invention

The embodiments of the present invention provide an authentication method and system, which are used to solve the problem that the authentication mode setting scheme provided by the prior art enables the user to flexibly set the authentication mode according to his own needs.

The embodiment of the invention further provides a user terminal and a server.

The embodiment of the invention further provides a backup data downloading method and device.

The following technical solutions are used in the embodiments of the present invention:

An authentication method includes: the user terminal selects a preset authentication mode information that matches different authentication modes; and sends the selected authentication mode information to a server on the network side; and the server selection and location Determining the authentication information matched by the authentication mode information sent by the user terminal, and sending the selected authentication information to the user terminal; when the user terminal needs to be authenticated, the user terminal will receive the authentication The right information is sent to the server; the server completes the authentication of the user terminal based on the authentication information sent by the user terminal.

The step of the user terminal selecting a preset authentication mode information that matches different authentication modes includes: selecting at least one profile from a webpage provided by the server for selecting authentication mode information matching different authentication modes. The right mode information; or select at least one authentication mode information from the authentication mode information matched in different authentication modes pre-stored in the user terminal.

When the authentication information selected by the server is the third authentication information corresponding to the authentication mode of the data object level, the method further includes: the user terminal sending the identifier of the specified backup data to the server And the identifier of the designated backup data by the server and the third The correspondence of the rights information is stored.

A backup data downloading method includes:

The server on the network side receives the identifier of the specified backup data sent by the user terminal, and stores the correspondence between the third authentication information corresponding to the authentication mode of the data object level and the identifier that is sent to the user terminal in advance. The server receives a backup data download request message that is sent by the user terminal and includes an identifier of the backup data. The server searches for the identifier of the backup data included in the request message from the stored correspondence relationship. Corresponding third authentication information; when the search result is no, the server sends the backup data indicated by the identifier of the backup data included in the request message to the user terminal; and when the search result is yes, The server instructs the user terminal to provide the third authentication information, and compares the third authentication information provided by the user terminal with the identifier of the backup data included in the request message stored by the server. When the three authentication information matches are consistent, the identifier of the backup data included in the request message is Backup data sending indication to the user terminal.

An authentication system includes a user terminal and a server on the network side, where the user terminal is configured to: select a preset authentication mode information that matches different authentication modes; and select the selected authentication mode information. Sending to the server; receiving the authentication information sent by the server, and sending the authentication information to the server when the user terminal needs to be authenticated; the server is configured to: receive the user terminal Sending authentication mode information, selecting authentication information matching the authentication mode information sent by the user terminal, and transmitting the selected authentication information to the user terminal; and authenticating based on the user terminal Information, completing authentication of the user terminal.

The user terminal is configured to select a preset authentication mode information that matches different authentication modes in the following manner:

Selecting at least one authentication mode information from a webpage provided by the server for selecting authentication mode information matching different authentication modes; or

At least one authentication mode information is selected from the authentication mode information that is previously stored in the user terminal and matched to different authentication modes. When the authentication information selected by the server is corresponding to the authentication mode of the data object level When the third authentication information is

The user terminal is further configured to: send an identifier of the specified backup data to the server; the server is further configured to: store a correspondence between the identifier of the specified backup data and the third authentication information.

A user terminal, comprising: a selecting unit, configured to select a preset authentication mode information that matches different authentication modes; and an authentication mode information sending unit configured to provide the authentication mode information selected by the selecting unit to a server on the network side; and a receiving unit, configured to: receive the authentication information fed back by the server according to the authentication mode information sent by the authentication mode information sending unit.

A server, comprising: a receiving unit, configured to: receive authentication mode information sent by a user terminal; a selecting unit configured to: select authentication information that matches an authentication mode information received by the receiving unit; and a sending unit And setting: sending the authentication information selected by the selection unit to the user terminal.

The selection unit is set to:

At least one authentication mode information is selected from the authentication mode information that is pre-stored in the user terminal and matched to different authentication modes. When the authentication information is the third authentication information corresponding to the authentication mode of the data object level, the user terminal further includes:

A data identification transmitting unit is configured to: send an identifier specifying the backup data to the server.

A backup data downloading device, comprising: an identifier receiving unit, configured to: receive an identifier of the specified backup data sent by the user terminal; and a storage unit configured to: send the data object level to the user terminal in advance The corresponding relationship between the third authentication information corresponding to the authentication mode and the identifier received by the identifier receiving unit is stored; the request message receiving unit is configured to: receive the backup data download request that is sent by the user terminal and includes the identifier of the backup data. a message; a search unit, configured to: from the correspondence stored in the storage unit, find whether there is a request message The third authentication information corresponding to the identifier of the backup data included in the request message received by the receiving unit; the first sending unit is configured to: when the search result obtained by the searching unit is no, the backup included in the request message The backup data indicated by the identifier of the data is sent to the user terminal, and the indication unit is configured to: when the search result obtained by the search unit is yes, instruct the user terminal to provide the third authentication information; the authentication information receiving unit The setting is: receiving the third authentication information that is provided by the user terminal according to the indication of the indication unit; and the comparing unit, configured to: compare the third authentication information received by the authentication information receiving unit with the storage stored by the storage unit Whether the third authentication information corresponding to the identifier of the backup data included in the request message matches; and the second sending unit is configured to: when the comparison result obtained by the comparing unit is yes, the backup included in the request message The backup data indicated by the identification of the data is sent to the user terminal.

In the embodiment of the present invention, the user terminal selects a preset authentication mode information that matches different authentication modes, and provides the selected authentication mode information to the server on the network side, and after receiving the authentication mode information, the server according to the The authentication mode information selects the matching authentication information, and sends the selected authentication information to the user terminal, thereby realizing the purpose that the user can flexibly implement the authentication mode according to his own needs by using the user terminal.

BRIEF abstract

FIG. 1 is a schematic flowchart of a method for authenticating an authentication method according to an embodiment of the present disclosure;

2 is a schematic flowchart of a backup data downloading method according to an embodiment of the present invention; FIG. 3 is a schematic diagram of an application flow of a backup data downloading method according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of another application flow of a backup data downloading method according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an authentication system according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of a user terminal according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a server according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of a backup data downloading apparatus according to an embodiment of the present invention. Preferred embodiment of the invention

In the embodiment of the present invention, the user terminal selects a preset authentication mode information that matches different authentication modes, and provides the selected authentication mode information to the server on the network side, and then the receiving server sends the information according to the authentication mode information. The authentication information solves the problem that the user existing in the prior art cannot flexibly implement the authentication mode according to his own needs.

The main implementation principles, specific implementation manners, and the corresponding beneficial effects that can be achieved by the technical solutions of the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

The embodiment of the present invention first provides a method for obtaining authentication information. The specific process diagram of the method is shown in FIG. 1 and includes the following steps:

Step 11: The user terminal selects a preset authentication mode information that is matched with different authentication modes. For example, the user terminal may provide information about the authentication mode that is matched by the different authentication modes from the server under the control of the user. Selecting at least one authentication mode information in the webpage, or the user terminal may select at least one authentication mode information from the authentication mode information that is pre-stored in the user terminal and matched with different authentication modes, where the authentication mode information may be Different identification information is matched with the three authentication methods mentioned in the background, respectively. The user can control the user terminal to select an authentication mode information matched by an authentication mode according to its own needs, or select multiple templates. Information about the authentication method matched by the right mode;

Step 12: The user terminal sends the selected authentication mode information to the server on the network side, and the user terminal provides the selected authentication mode information to the network side to obtain the authentication matched by the server and matched with the authentication mode information. Information

Step 13: The server selects the authentication information that matches the authentication mode information according to the authentication mode information provided by the user terminal, and sends the selected authentication information to the user terminal. In this step 13, if the user selects The authentication mode information corresponding to the server-level authentication mode introduced in the background art, the server may determine the authentication mode sent by the user terminal from the correspondence between the pre-stored authentication mode information and the authentication information. The first authentication information corresponding to the information is sent to the user terminal, and if the user selects the authentication information corresponding to the authentication mode of the data object level introduced in the background art, the server may And determining the third authentication information corresponding to the authentication mode information sent by the user terminal, and transmitting the third authentication information to the user terminal, where the authentication information is sent to the user terminal. Way of use, The method for downloading the backup data provided by the embodiment of the present invention is specifically described, and details are not described herein again. In this step 13, the server selects the authentication information that matches the authentication mode information sent by the user terminal. After that, the corresponding relationship between the selected authentication information and the user terminal identifier may be stored. Since the server may have previously assigned the default authentication mode information and the authentication information according to the type of the user, the server is in the pair. Before the selected authentication information is stored, the method may further include the following steps:

First, the server compares the authentication mode information sent by the user terminal with the default authentication mode information previously allocated to the user according to the type of the user;

Then, when the comparison result is consistent, the server stores the correspondence between the authentication information assigned to the user terminal by default and the user terminal identifier, and when the comparison result is inconsistent, the server further determines whether the user terminal can be provided by using the user terminal. Specifically, the server may determine, from the identifier of the preset user terminal and the authentication mode information that can be used by the user terminal, the authentication mode information that can be used by the user terminal, and determine the user terminal. When the provided authentication mode information is the authentication mode information that can be used by the user terminal, the correspondence between the authentication information of the selected user terminal and the user terminal identifier is stored, and the authentication mode provided by the user terminal is determined. When the information is not the authentication mode information that can be used by the user terminal, the correspondence between the authentication information of the user terminal and the user terminal identifier is not stored, and the notification message that the authentication mode setting is unsuccessful is sent to the user terminal, so that User terminal can know the user Set times for authentication methods fail;

Step 14. When the user terminal needs to be authenticated, the user terminal sends the received authentication information to the server.

Step 15: The server performs authentication on the user terminal based on the authentication information sent by the user terminal, where the process of authenticating the user terminal based on the authentication information sent by the user terminal may refer to the process provided in the prior art. I will not repeat them here.

It should be noted that, when the authentication information received by the user terminal is the third authentication information corresponding to the authentication mode of the data object level, the foregoing method provided by the embodiment of the present invention may further include:

The user terminal sends the identifier of the specified backup data to the server; The server stores the corresponding relationship between the identifier of the specified backup data and the third authentication information, so that the server can learn that the subsequent user terminal needs to provide the backup data indicated by the identifier of the designated backup data. After the third authentication information matches the consistent authentication information, the user terminal can be allowed to download the backup data.

The embodiment of the present invention further provides a backup data downloading method. The specific process of the method is as shown in FIG. 2, and includes the following steps:

Step 21: The server on the network side receives the identifier of the specified backup data sent by the user terminal, and the third authentication information corresponding to the authentication mode of the data object level and the identifier of the designated backup data that are sent to the user terminal in advance. Corresponding relationship is stored;

Step 22: The server on the network side receives a backup data download request message that is sent by the user terminal and includes an identifier of the backup data.

Step 23: The server searches for a third authentication corresponding to the identifier of the backup data included in the backup data download request message sent by the user terminal, from the stored correspondence between the identifier of the specified backup data and the third authentication information. Information, and when the search result is no, step 24 is performed, and when the search result is yes, step 25 is performed;

Step 24: The server sends the backup data indicated by the identifier of the backup data included in the backup data download request message to the user terminal.

Step 25: The server instructs the user terminal to provide the third authentication information, and compares the third authentication information provided by the user terminal with the third authentication corresponding to the identifier of the backup data included in the backup data download request message stored by the server. When the information matching is consistent, the backup data indicated by the identifier of the backup data included in the backup data download request message is sent to the user terminal.

It should be noted that the method for downloading the backup data provided by the embodiment of the present invention may be implemented based on the method for obtaining authentication information provided by the embodiment of the present invention, or may be implemented independently.

In the following, the application flow of the above-mentioned backup data downloading method provided by the embodiment of the present invention is taken as an example, and the specific implementation process of the method is described in detail. In the specific implementation process, it is assumed that the user terminal selects multiple authentication modes (including A specific schematic diagram of an implementation manner of the specific implementation process is shown in FIG. 3, including the following, as shown in FIG. 3, and the following is a schematic diagram of the authentication mode of the server-level authentication mode, the database-level authentication mode, and the data object-level authentication mode. step: Step 31: The user terminal sends a connection establishment request message to the server, where the request message includes an identifier of the user terminal.

Step 32: The server receives the connection establishment request message, and according to the identifier of the user terminal, the identifier of the user terminal and the first authentication information corresponding to the authentication mode of the server level are determined according to the identifier of the user terminal. In the corresponding relationship, determining whether there is first authentication information corresponding to the identifier of the user terminal, and when the determination result is yes, performing step 33; otherwise, the server directly establishes a connection with the user terminal, and allows the user terminal to access the server. And sending a connection establishment confirmation message to the user terminal, and jumping to step 37;

Step 33: The server sends a notification message to the user terminal indicating that the user terminal provides the first authentication information.

Step 34: The user terminal sends the first authentication information to the server.

Step 35: The server determines, according to the identifier of the user terminal, the first authentication information corresponding to the user terminal from the correspondence between the identifier of the pre-stored user terminal and the first authentication information, and determines the sent by the user terminal. If the first authentication information is consistent with the determined first authentication information, if the determination result is yes, step 36 is performed; otherwise, the server does not allow the user terminal to access the server, and feeds back the connection failure notification message to the user terminal, thereby ending Process;

Step 36: The server establishes a connection with the user terminal, allows the user terminal to access the server, and sends a connection establishment confirmation message to the user terminal.

Step 37: Assuming that the user terminal needs to download the backup data from the database of the server, the user terminal sends a backup data download request message containing the identifier of the backup data to the server, where the request message includes the identifier of the user terminal and the backup to be downloaded. Identification of the data;

Step 38: After receiving the backup data download request message sent by the user terminal, the server parses the identifier of the user terminal and the identifier of the backup data to be downloaded from the request message, and parses the user terminal according to the request message. And determining, by the correspondence between the identifier of the preset user terminal and the second authentication information corresponding to the authentication mode of the database level, whether there is second authentication information corresponding to the identifier of the user terminal, when If the result of the determination is yes, step 39 is performed; otherwise, the server allows the user terminal to access the database, and sends a notification message to the user terminal to allow access to the database, and jumps to step 312; Step 39: The server sends a notification message to the user terminal indicating that the user terminal provides the second authentication information.

Step 310: The user terminal sends second authentication information to the server.

Step 311: The server determines, according to the identifier of the user terminal, the second authentication information corresponding to the user terminal from the pre-stored correspondence between the identifier of the user terminal and the second authentication information, and determines the sending by the user terminal. If the second authentication information is consistent with the determined second authentication information, if the determination result is yes, step 312 is performed; otherwise, the server does not allow the user terminal to access the database, and accesses the database failure notification message to the user terminal, thereby End the process;

Step 312: The server determines, according to the identifier of the user terminal, the identifier of the backup data corresponding to the identifier of the user terminal from the correspondence between the identifier of the user terminal and the identifier of the backup data, and further, according to the needs of the analysis. The identifier of the downloaded backup data, from the correspondence between the identifier of the preset backup data and the third authentication information, whether there is a third authentication information corresponding to the identifier of the backup data to be downloaded, when the search result is If yes, go to step 313. Otherwise, the server sends the backup data corresponding to the identifier of the backup data to be downloaded to the user terminal, and the process of downloading the backup data by the user terminal ends;

Step 313: The server sends a notification message to the user terminal indicating that the user terminal provides the third authentication information.

Step 314: The user terminal sends third authentication information to the server.

Step 315: The server compares the received third authentication information with the third authentication information corresponding to the identifier of the backup data to be downloaded. If the comparison result is consistent, go to step 316. Otherwise, send the backup to the user terminal. The notification message of the data failure, the process ends;

Step 316: The server sends the backup data corresponding to the identifier of the backup data to be downloaded to the user terminal, and the process of downloading the backup data by the user terminal ends.

In the above steps shown in FIG. 3, the user terminal passively provides the corresponding authentication information to the server after receiving the notification message sent by the server indicating that the user terminal provides the authentication information, but actually, the user The terminal may also actively provide authentication information to the server while transmitting a request message such as downloading backup data to the server. In the case that the user terminal actively provides the authentication information to the server, the foregoing backup data downloading method provided by the embodiment of the present invention is another in practice. An application flow diagram is shown in Figure 4, including the following steps:

Step 41: The user terminal sends a connection establishment request message to the server, where the request message includes an identifier of the user terminal and first authentication information corresponding to an authentication mode of the server level.

Step 42: The server receives the connection establishment request message, and obtains the identifier of the user terminal and the first authentication information included in the request message by parsing the request message.

Step 43: The server determines, according to the identifier of the user terminal, the first authentication information corresponding to the user terminal from the correspondence between the identifier of the pre-stored user terminal and the first authentication information. Step 44: The server determines to establish a connection. Whether the first authentication information included in the request message matches the first authentication information determined above, and if the determination result is yes, step 45 is performed; otherwise, the server does not allow the user terminal to access the server, and feeds back the connection to the user terminal. The failure notification message ends the process;

Step 45: The server establishes a connection with the user terminal, allows the user terminal to access the server, and sends a connection establishment confirmation message to the user terminal.

Step 46, assuming that the user terminal needs to download the backup data from the database of the server, the user terminal sends a backup data download request message containing the identifier of the backup data to the server, where the request message includes the identifier of the user terminal and the backup to be downloaded. The identifier of the data, and the second authentication information corresponding to the authentication mode at the database level;

Step 47: After receiving the backup data download request message sent by the user terminal, the server parses the identifier of the user terminal, the identifier of the backup data to be downloaded, and the second authentication information from the request message, and according to the user terminal. Identifying, from the corresponding relationship between the identifier of the stored user terminal and the second authentication information, determining second authentication information corresponding to the identifier of the user terminal, and comparing the determined second authentication information with the parsed second Whether the authentication information is consistent, and when the comparison result is consistent, step 48 is performed. Otherwise, the server does not allow the user terminal to download the backup data from the database, and feeds back to the user terminal a notification message for accessing the database failure, and ends the process;

Step 48: The server determines, according to the identifier of the user terminal, the identifier of the backup data corresponding to the identifier of the user terminal from the correspondence between the identifier of the user terminal and the identifier of the backup data, and further, according to the needs of the analysis. The identifier of the downloaded backup data, from the correspondence between the identifier of the preset backup data and the third authentication information, whether there is a backup to be downloaded The third authentication information corresponding to the identifier of the data, when the search result is yes, step 49 is performed. Otherwise, the server sends the backup data corresponding to the identifier of the backup data to be downloaded to the user terminal, and the user terminal downloads the backup data. End;

Step 49: The server sends a notification message to the user terminal indicating that the user terminal provides the third authentication information.

Step 410: The user terminal sends third authentication information to the server.

Step 411: The server compares the received third authentication information with the third authentication information corresponding to the identifier of the backup data to be downloaded. If the comparison result is consistent, go to step 412. Otherwise, send the backup to the user terminal. The notification message of the data failure, the process ends;

Step 412: The server sends the backup data corresponding to the identifier of the backup data to be downloaded to the user terminal, and the process of downloading the backup data by the user terminal ends.

Correspondingly, the embodiment of the present invention further provides an authentication system for solving the problem that the authentication mode setting scheme provided by the prior art enables the user to flexibly set the authentication mode according to his own needs. A schematic diagram of a specific structure is shown in FIG. 5, including a user terminal 51 and a server 52 on the network side, where:

The user terminal 51 is configured to select preset authentication mode information that matches different authentication modes; and send the selected authentication mode information to the server 52; and receive the authentication information sent by the server 52, and need to use the user terminal. When the authentication is performed, the authentication information is sent to the server 52, where the user terminal 51 can select at least one authentication mode information from the webpage provided by the server 52 for selecting the authentication mode information that matches the different authentication modes. Alternatively, the user terminal 51 may also select at least one authentication mode information from the authentication mode information matched in different authentication modes stored in the user terminal 51 in advance;

The server 52 is configured to receive the authentication mode information sent by the user terminal 51, and select the authentication information that matches the authentication mode information sent by the user terminal 51, and send the selected authentication information to the user terminal 51; The authentication information sent by the terminal 51 completes the authentication of the 51 user terminal.

It should be noted that, when the authentication information selected by the server 52 is the third authentication information corresponding to the authentication mode of the data object level, the user terminal 51 should also send the identifier of the specified backup data to the identifier. After the server 52 receives the identifier of the specified backup data, the server 52 also needs to store the correspondence between the identifier of the specified backup data and the third authentication information.

Corresponding to the user terminal included in the system provided by the embodiment of the present invention, the embodiment of the present invention further provides a user terminal as shown in FIG. 6, and the user terminal includes the following functional units:

The selecting unit 61 is configured to select a preset authentication mode information that is matched with different authentication modes, where the selecting unit 61 may specifically select the authentication mode information from the webpage provided by the server for selecting the authentication mode information, or The at least one authentication mode information may be selected from the authentication mode information pre-stored in the user terminal;

The authentication mode information sending unit 62 is configured to send the authentication mode information selected by the selecting unit 61 to the server on the network side;

The receiving unit 63 is configured to receive the authentication information fed back by the server according to the authentication mode information sent by the authentication mode information sending unit 62.

Preferably, when the authentication information is the third authentication information of the authentication mode corresponding to the data object level introduced in the background, the user terminal provided by the embodiment of the present invention may further include a data identifier sending unit, where The data identification sending unit is configured to send the identifier of the specified backup data to the server.

The embodiment of the present invention further provides a server. The specific structure of the server is shown in FIG. 7, and includes the following functional units:

The receiving unit 71 is configured to receive authentication mode information sent by the user terminal.

The selecting unit 72 is configured to select authentication information that matches the authentication mode information received by the receiving unit 71;

The sending unit 73 is configured to send the authentication information selected by the selecting unit 72 to the user terminal. A backup data downloading method is provided in the embodiment of the present invention. The embodiment of the present invention further provides a backup data downloading apparatus. The specific structure of the apparatus is as shown in FIG. 8, and includes the following functional units:

The identifier receiving unit 81 is configured to receive the identifier of the specified backup data sent by the user terminal, and the storage unit 82 is configured to receive the third authentication information and the identifier that is corresponding to the data object level authentication manner that is sent to the user terminal in advance. The correspondence between the identifiers received by the unit 81 is stored; a request message receiving unit 83, configured to receive a backup data download request message that is sent by the user terminal and includes an identifier of the backup data;

The searching unit 84 is configured to search, from the correspondence relationship stored by the storage unit 82, whether there is third authentication information corresponding to the identifier of the backup data included in the request message received by the request message receiving unit 83;

The first sending unit 85 is configured to: when the search result obtained by the searching unit 84 is negative, send the backup data indicated by the identifier of the backup data included in the request message to the user terminal;

The indicating unit 86 is configured to: when the search result obtained by the searching unit 84 is YES, instruct the user terminal to provide the third authentication information;

The authentication information receiving unit 87 is configured to receive third authentication information that is provided by the user terminal according to the indication of the indication unit 86;

The comparing unit 88 is configured to compare the third authentication information received by the authentication information receiving unit 87 with the third authentication information corresponding to the identifier of the backup data included in the request message stored by the storage unit 82;

The second sending unit 89 is configured to: when the comparison result obtained by the comparing unit 88 is YES, send the backup data indicated by the identifier of the backup data included in the request message to the user terminal.

In the embodiment of the present invention, the function of the backup data downloading device can be implemented based on the authentication system provided by the embodiment of the present invention, but the implementation of the function of the backup data downloading device can also be independent of the function of the authentication system.

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and variations of the inventions

Industrial Applicability According to the present invention, a user can flexibly realize setting of an authentication method according to his/her own needs by using a user terminal.

Claims

Claim

1. An authentication method comprising:

The user terminal selects a preset authentication mode information that matches different authentication modes;

Sending the selected authentication mode information to the server on the network side;

The server selects authentication information that matches the authentication mode information sent by the user terminal, and sends the selected authentication information to the user terminal;

When the user terminal needs to be authenticated, the user terminal sends the received authentication information to the server;

The server completes authentication of the user terminal based on the authentication information sent by the user terminal.

2. The authentication method according to claim 1, wherein the step of the user terminal selecting a preset authentication mode information that matches different authentication modes comprises:

At least one authentication mode information is selected from the authentication mode information that is pre-stored in the user terminal and matched to different authentication modes.

The authentication method according to claim 1, wherein when the authentication information selected by the server is the third authentication information corresponding to the authentication mode of the data object level, the method further includes: The user terminal sends an identifier specifying the backup data to the server;

The server stores a correspondence between the identifier of the specified backup data and the third authentication information.

4. A backup data downloading method, comprising:

The server on the network side receives the identifier of the specified backup data sent by the user terminal, and stores the correspondence between the third authentication information corresponding to the authentication mode of the data object level and the identifier that is sent to the user terminal in advance. ;

Receiving, by the server, a backup data download request message that is sent by the user terminal and includes an identifier of the backup data;

The server searches for the presence or absence of the request message from the stored correspondence relationship The third authentication information corresponding to the identifier of the included backup data;

When the search result is no, the server sends the backup data indicated by the identifier of the backup data included in the request message to the user terminal;

When the search result is yes, the server instructs the user terminal to provide the third authentication information, and compares the third authentication information provided by the user terminal with the request message stored by the server. When the third authentication information corresponding to the identifier of the backup data is consistent, the backup data indicated by the identifier of the backup data included in the request message is sent to the user terminal.

5. An authentication system, including a user terminal and a server on the network side,

The user terminal is configured to: select preset authentication mode information that matches different authentication modes; and send the selected authentication mode information to the server; and receive authentication information sent by the server, And when the user terminal needs to be authenticated, sending the authentication information to the server;

The server is configured to: receive authentication mode information sent by the user terminal, select authentication information that matches the authentication mode information sent by the user terminal, and send the selected authentication information to the user terminal. And authenticating the user terminal based on the authentication information sent by the user terminal.

The authentication system according to claim 5, wherein the user terminal is configured to select a preset authentication mode information matching different authentication modes in the following manner:

The authentication system according to claim 5, wherein, when the authentication information selected by the server is the third authentication information corresponding to the authentication mode of the data object level,

8. A user terminal, comprising: a selection unit, which is configured to: select a preset authentication mode information that matches different authentication modes; and an authentication mode information sending unit, configured to: provide the authentication mode information selected by the selection unit to the server on the network side; as well as

And a receiving unit, configured to: receive the authentication information fed back by the server according to the authentication mode information sent by the authentication mode information sending unit.

The user terminal according to claim 8, wherein the selecting unit is configured to: select at least one authentication from a webpage provided by the server for selecting authentication mode information matching different authentication modes. Mode information; or

The user terminal according to claim 8, wherein, when the authentication information is the third authentication information corresponding to the authentication mode of the data object level, the user terminal further includes:

11. A server comprising:

a receiving unit, configured to: receive authentication mode information sent by the user terminal;

a selection unit, configured to: select authentication information that matches authentication mode information received by the receiving unit;

And a sending unit, configured to: send the authentication information selected by the selecting unit to the user terminal.

12. A backup data downloading apparatus, comprising:

And an identifier receiving unit, configured to: receive an identifier of the specified backup data sent by the user terminal; and the storage unit is configured to: perform third authentication corresponding to the data object level authentication manner previously sent to the user terminal Corresponding relationship between the information and the identifier received by the identifier receiving unit is stored;

a request message receiving unit, configured to: receive a backup data download request message that is sent by the user terminal and includes an identifier of the backup data;

a search unit, configured to: look up whether to save from the corresponding relationship stored by the storage unit Third authentication information corresponding to the identifier of the backup data included in the request message received by the request message receiving unit;

a first sending unit, configured to: when the search result obtained by the searching unit is negative, send backup data indicated by the identifier of the backup data included in the request message to the user terminal; and the indicating unit is set to When the search result obtained by the searching unit is yes, instructing the user terminal to provide third authentication information;

An authentication information receiving unit, configured to: receive third authentication information that is provided by the user terminal according to the indication of the indication unit;

a comparison unit, configured to: match whether the third authentication information received by the comparison authentication information receiving unit and the third authentication information corresponding to the identifier of the backup data included in the request message stored by the storage unit are consistent;

And a second sending unit, configured to: when the comparison result obtained by the comparing unit is YES, send the backup data indicated by the identifier of the backup data included in the request message to the user terminal.