WO2016177342A1

WO2016177342A1 - Account login processing method, server and system therefor, and computer storage medium

Info

Publication number: WO2016177342A1
Application number: PCT/CN2016/081189
Authority: WO
Inventors: 申世安; 张立海
Original assignee: 努比亚技术有限公司
Priority date: 2015-05-06
Filing date: 2016-05-05
Publication date: 2016-11-10
Also published as: CN104980429A

Abstract

Disclosed are an account login processing method, a server and a system therefor, and a computer storage medium. The method comprises: setting a unified login account of a subscriber of a mobile terminal through a virtual subscriber identity module card in the mobile terminal, and constructing a mapping relationship between the unified login account of the subscriber and accounts of different applications of the subscriber; performing judgement certification on an application required by the subscriber through logging in based on the mapping relationship and the unified login account used by the subscriber; judging the security grade of the account corresponding to the application required by the subscriber based on the mapping relationship and the unified login account of the subscriber; and controlling an access authority of the subscriber to the application according to a judgement result after the subscriber logs in the application based on the account. By implementing the present invention, the effectiveness, security and convenience of logging in through different accounts can be improved.

Description

Account login processing method, server and system, computer storage medium

Technical field

The present invention relates to an account management technology in the field of communications, and in particular, to an account login processing method, a server and a system, and a computer storage medium based on a virtual subscriber identity card.

Background technique

The user needs to log in to each of the various mobile Internet-based applications currently used by the mobile terminal (including the user name and password). Generally, the naming rules of the account are also different. Each time the application is logged in, the account is required to be added to the user. The extra memory burden is also quite inconvenient to use.

Summary of the invention

The main purpose of the embodiments of the present invention is to provide an account login processing method, a server and a system, and a computer storage medium based on a virtual subscriber identity card, which are convenient, efficient, and secure for registering accounts of different applications.

The technical solution for solving the above technical problem in the embodiment of the present invention is as follows:

In a first aspect, an embodiment of the present invention provides an account login processing method, including:

Setting a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and constructing a mapping relationship between the unified login account of the user and an account of a different application of the user;

Determining and authenticating the application used by the user login request based on the mapping relationship and the unified login account used by the user;

Determining, by the user, the security level of the account corresponding to the application, based on the mapping relationship and the unified login account of the user;

Controlling, according to the judgment result, the user, after logging in to the application based on the account, to the application Access rights.

Optionally, each unified login account corresponds to one security control policy and one access control policy;

The security control policy is used to control at least one of the following:

The manner of verification using the manner of verification by the user of the mobile terminal includes: a password verification method and a biometric verification method;

a trigger condition for re-authentication of a user using the mobile terminal, including a change in a biometric of a user of the mobile terminal;

The prompting method for re-verifying the user of the mobile terminal includes a reminder and a limited number of reminders;

The access control policy is used for a security level of an account based on an application requested by the user, and an access authority of the application of the security level corresponding to the application;

The security levels include: read-only security level, general security level, advanced security level, and highest security level.

Optionally, the mapping relationship between the unified login account of the user and the account of the different application of the user is included, including:

And establishing, according to the security level of the different accounts of the user, the mapping relationship between the account of different security levels of the user and the unified login account of the user;

Alternatively, the mapping between the read-only security level account of the different users and the unified login account of the corresponding user is automatically constructed, and the mapping relationship between the common security level account of the different users and the unified login account of the corresponding user is automatically constructed.

Optionally, the determining, according to the mapping relationship, the unified login account used by the user, the application that is used by the user login request, includes:

Performing verification on at least one of a password verification method and a biometric verification method for a user using the mobile terminal;

And determining, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The security level of the account corresponding to the application used based on the user request is the application requested by the user to log in.

Optionally, the security level of the account corresponding to the application that is used by the user request is an application that is requested to be used by the user to log in, including:

When the account of the application requested by the user is a read-only security level account, the user allocates a random account of the application through the resource pool to log in to the application for the user based on the allocated random account;

When the account of the application requested by the user is a normal security level account, the user uses the account of the application set in advance or the account corresponding to the application that is input when the user requests to use the application. The user logs in to the application once; when the biometric of the user of the mobile terminal is detected to be changed, a reminder is performed, and the user is re-verified;

When the account of the application requested by the user is an advanced security level account, the account of the application set by the user in advance or the account corresponding to the application input when the user requests to use the application is The user logs in to the application in one time; when detecting that the biometric of the user of the mobile terminal changes, performs a preset number of reminders greater than one time, and re-verifies the user;

When the account of the application requested by the user is the highest security level account, the user is authenticated based on the password authentication method and the biometric verification mode, and the account or the application of the application preset by the user is verified when the user passes the verification. Determining, by the user, an account corresponding to the application that is input when the user uses the application, logging in to the application for the user; and detecting the user of the mobile terminal when the biometric of the user of the mobile terminal is changed. Unregister the app.

Optionally, the controlling, by the determining, the access rights of the user to the application after logging in to the application based on the account, includes:

When the judgment result indicates that the account of the application requested by the user is a read-only security level account, the user has the access right or the lowest priority authority assigned to the anonymous visitor of the application:

When the judgment result indicates that the account of the application requested by the user is a read-only security level account, the user is assigned read-only permission for the application;

When the judgment result indicates that the account of the application requested by the user is a normal security level account, all the usage rights of the user for the application are allocated;

When the judgment result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

When the judgment result indicates that the account of the application requested by the user is the highest security level account, and the user logs in to the mobile terminal by using the unified login account based on the password login and the biometric authentication mode, the user is assigned to the mobile terminal. The user's full usage rights for the application.

In a second aspect, an embodiment of the present invention provides a server, including:

a mapping unit, configured to set a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and construct a mapping relationship between the unified login account of the user and an account of a different application of the user;

The authentication unit is configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The access control unit is configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the user requesting the account corresponding to the application;

And controlling, according to the judgment result, the access authority of the user to the application after logging in to the application based on the account.

Optionally, the mapping unit is further configured to indicate different users according to the user a security level of the account, a mapping relationship between an account of a different security level of the user and a unified login account of the user;

Optionally, the authentication unit is further configured to perform verification on at least one of a password verification manner and a biometric verification manner by a user using the mobile terminal;

The authentication unit is further configured to determine, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The authentication unit is further configured to use, according to the security level of the account corresponding to the application that the user requests to use, an application that is requested to be used by the user to log in.

Optionally, the authentication unit is further configured to: when the account of the application requested by the user is a read-only security level account, allocate, by the resource pool, the user to use the random account of the application to be based on the allocated A random account is used to log in to the application for the user;

The access control unit is further configured to use, when the account of the application requested by the user is an ordinary security level account, input by using the account of the application set by the user or the user requesting to use the application. Corresponding to the account of the application, logging in to the application for the user; performing a reminder when detecting that the biometric of the user of the mobile terminal changes, and re-authenticating the user;

The access control unit is further configured to: when the account of the application requested by the user is an advanced security level account, the account of the application preset by the user or the user inputs the request when using the application Corresponding to the account of the application, logging in to the application for the user; performing a preset number of reminders greater than once when detecting that the biometric of the user of the mobile terminal changes, and re-performing the user Verification

The access control unit is further configured to: when the account of the application requested by the user is the highest security level account, verify the password verification mode and the biometric verification mode of the user, and pass the user when the verification is passed. Pre-set the account of the application or the account corresponding to the application that is input when the user requests to use the application, log in to the application for the user; when detecting the biometric of the user of the mobile terminal When the change occurs, the user of the mobile terminal is released from the login for the application.

Optionally, the access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the user is allocated to the anonymous visitor of the application. Permission or lowest priority authority;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the read-only permission of the user for the application is allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is an ordinary security level account, all the usage rights of the user for the application are allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is the highest security level account, and the user is based on the password login and the biometric authentication mode to use the unified login account. When the mobile terminal is logged in, all the usage rights of the user for the application are assigned.

In a third aspect, an embodiment of the present invention provides an account login processing system, including: a server and a mobile terminal provided with a virtual subscriber identity card;

The server configured to set the virtual subscriber identity card in the mobile terminal a unified login account of the user of the mobile terminal, and a mapping relationship between the unified login account of the user and an account of a different application of the user;

The server is further configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The server is further configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the account corresponding to the application request by the user;

The server is further configured to control, according to the determination result, the access authority of the user to the application after logging in to the application based on the account.

Optionally, the server is further configured to: according to the security level of the user indicating different accounts of the user, construct a mapping relationship between an account of a different security level of the user and a unified login account of the user;

Optionally, the server is further configured to control, by the mobile terminal, at least one of a password verification manner and a biometric verification manner to be used by a user using the mobile terminal;

The server is further configured to determine, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The server is further configured to use, according to the security level of the account corresponding to the application that the user requests to use, an application that is requested to be used by the user to log in.

Optionally, the server is further configured to: when the account of the application requested by the user is a read-only security level account, allocate, by the resource pool, the user to use the random account of the application to be based on the allocated random account. Logging in to the application for the user;

The server is further configured to: the account of the application requested by the user is normal security, etc. When the account is a level, the user is logged in to the application for the user by using the account of the application set in advance or the account corresponding to the application that is input when the user requests to use the application; Performing a reminder when the biometric of the user of the mobile terminal changes, and re-authenticating the user;

The server is further configured to: when the account of the application requested by the user is an advanced security level account, the account of the application preset by the user or the corresponding input when the user requests to use the application Applying an account for the user to log in to the application for one time; when detecting that the biometric of the user of the mobile terminal changes, performing a preset number of reminders greater than one time, and re-authenticating the user;

The server is further configured to verify, according to the password authentication mode and the biometric verification mode, that the account of the application requested by the user is the highest security level account, and the pre-set by the user when the verification is passed. The account of the application or the account corresponding to the application that is input when the user requests to use the application, log in to the application for the user; when detecting that the biometric of the user of the mobile terminal changes The login for the application is released for the user of the mobile terminal.

Optionally, the server is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the access rights of the anonymous visitors to the application or Minimum priority permissions:

The server is further configured to: when the determining result indicates that the account of the application requested by the user is a read-only security level account, the user is allocated read-only permission for the application;

The server is further configured to: when the determination result indicates that the account of the application requested by the user is an ordinary security level account, all the usage rights of the user for the application are allocated;

The server is further configured to allocate, to the user, all uses of the application when the determination result indicates that the account of the application requested by the user is an advanced security level account. Permission

The server is further configured to: when the determination result indicates that the account of the application requested by the user is the highest security level account, and the user logs in with the unified login account based on the password login and the biometric authentication mode. When the mobile terminal is described, all the usage rights of the user for the application are assigned.

In a fourth aspect, an embodiment of the present invention provides a computer storage medium, where the computer storage medium stores executable instructions, and the executable instructions are used to execute an account login processing method provided by an embodiment of the present invention.

The embodiment of the present invention provides a unified account login processing method based on a virtual user identification card. The present invention constructs a unified system for processing an account login by using a virtual user identification card as a center, and after setting the mapping relationship, the user does not need to Each time you enter your account information, you can log in to a common Internet application, which improves the convenience, efficiency, and security of automatic account login.

DRAWINGS

1 is a schematic structural diagram of hardware of a mobile terminal that implements various embodiments of the present invention;

2 is a schematic diagram of a wireless communication system of the mobile terminal shown in FIG. 1;

3 is a flowchart of a method for processing a unified account login based on a virtual subscriber identity card according to an embodiment of the present invention;

4 is a flowchart of a method for processing a unified account login based on a virtual subscriber identity card according to an embodiment of the present invention;

FIG. 5 is a flowchart of a unified account login method based on a virtual subscriber identity card according to an embodiment of the present invention; FIG.

FIG. 6 is a block diagram showing an exemplary structure of a unified account login processing server based on a virtual subscriber identity card according to an embodiment of the present invention; FIG.

FIG. 7 is a unified account login process based on a virtual subscriber identity card according to an embodiment of the present invention; An exemplary block diagram of the system.

detailed description

It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the scope of the invention.

A mobile terminal embodying various embodiments of the present invention will now be described with reference to the accompanying drawings. In the following description, the use of suffixes such as "module", "component" or "unit" for indicating an element is merely an explanation for facilitating the present invention, and does not have a specific meaning per se. Therefore, "module" and "component" can be used in combination.

The mobile terminal can be implemented in various forms. For example, the terminals described in the present invention may include, for example, mobile phones, smart phones, notebook computers, digital broadcast receivers, personal digital assistants (PDAs), tablet computers (PADs), portable multimedia players (PMPs), navigation devices, and the like. Mobile terminals and fixed terminals such as digital TVs, desktop computers, and the like. In the following, it is assumed that the terminal is a mobile terminal. However, those skilled in the art will appreciate that configurations in accordance with embodiments of the present invention can be applied to fixed type terminals in addition to components that are specifically for mobile purposes.

1 is a schematic diagram showing the hardware structure of a mobile terminal 100 that implements various embodiments of the present invention. As shown in FIG. 1, the mobile terminal 100 may include a wireless communication unit 110, an audio/video (A/V) input unit 120, and a user input unit 130. The sensing unit 140, the output unit 150, the memory 160, the interface unit 170, the controller 180, the power supply unit 190, and the like. FIG. 1 illustrates a mobile terminal 100 having various components, but it should be understood that not all illustrated components are required to be implemented. More or fewer components can be implemented instead. The elements of the mobile terminal 100 will be described in detail below.

Wireless communication unit 110 typically includes one or more components that permit radio communication between mobile terminal 100 and a wireless communication system or network. For example, the wireless communication unit 110 may include at least one of a broadcast receiving module 111, a mobile communication module 112, a wireless internet module 113, a short-range communication module 114, and a location information module 115.

The broadcast receiving module 111 receives a broadcast signal and/or broadcast associated information from an external broadcast management server via a broadcast channel. The broadcast channel can include a satellite channel and/or a terrestrial channel. The broadcast management server may be a server that generates and transmits a broadcast signal and/or broadcast associated information or a server that receives a previously generated broadcast signal and/or broadcast associated information and transmits it to the terminal. The broadcast signal may include a TV broadcast signal, a radio broadcast signal, a data broadcast signal, and the like. Moreover, the broadcast signal may further include a broadcast signal combined with a TV or radio broadcast signal. The broadcast associated information may also be provided via a mobile communication network, and in this case, the broadcast associated information may be received by the mobile communication module 112. The broadcast signal may exist in various forms, for example, it may exist in the form of Digital Multimedia Broadcasting (DMB) Electronic Program Guide (EPG), Digital Video Broadcasting Handheld (DVB-H) Electronic Service Guide (ESG), and the like. . The broadcast receiving module 111 can receive a signal broadcast by using various types of broadcast systems. In particular, the broadcast receiving module 111 can use forward link media (MediaFLO) by using, for example, multimedia broadcast-terrestrial (DMB-T), digital multimedia broadcast-satellite (DMB-S), digital video broadcast-handheld (DVB-H) The digital broadcasting system of the ^@ ) data broadcasting system, the terrestrial digital broadcasting integrated service (ISDB-T), and the like receives digital broadcasting. The broadcast receiving module 111 can be constructed as various broadcast systems suitable for providing broadcast signals as well as the above-described digital broadcast system. The broadcast signal and/or broadcast associated information received via the broadcast receiving module 111 may be stored in the memory 160 (or other type of storage medium).

The mobile communication module 112 transmits the radio signals to and/or receives radio signals from at least one of a base station (e.g., an access point, a Node B, etc.), an external terminal, and a server. Such radio signals may include voice call signals, video call signals, or various types of data transmitted and/or received in accordance with text and/or multimedia messages.

The wireless internet module 113 supports wireless internet access of the mobile terminal 100. The wireless internet module 113 can be internally or externally coupled to the terminal. The wireless internet access technologies involved in the wireless internet module 113 may include wireless local area network (WLAN), wireless compatibility authentication (Wi-Fi), wireless broadband (Wibro), global microwave interconnection access (Wimax), and high-speed downlink. Road Packet Access (HSDPA) and more.

The short range communication module 114 is a module for supporting short range communication. Some examples of short-range communication technology include Bluetooth ^TM, a radio frequency identification (RFID), infrared data association (IrDA), ultra wideband (UWB), ZigBee, etc. ^TM.

The location information module 115 is a module for checking or acquiring location information of the mobile terminal 100. A typical example of location information module 115 is Global Positioning System (GPS) module 115. According to the current technology, the GPS module 115 calculates distance information and accurate time information from three or more satellites and applies triangulation to the calculated information to accurately calculate three-dimensional current position information based on longitude, latitude, and altitude. Currently, the method for calculating position and time information uses three satellites and corrects the calculated position and time information errors by using another satellite. Further, the GPS module 115 is capable of calculating speed information by continuously calculating current position information in real time.

The A/V input unit 120 is for receiving an audio or video signal. The A/V input unit 120 may include a camera 121 and a microphone 122 that processes image data of still pictures or video obtained by the image capturing device in a video capturing mode or an image capturing mode. The processed image frame can be displayed on the display unit 151. The image frames processed by the camera 121 may be stored in the memory 160 (or other storage medium) or transmitted via the wireless communication unit 110, and two or more cameras 121 may be provided according to the configuration of the mobile terminal 100. The microphone 122 can receive sound (audio data) via a microphone in an operation mode of a telephone call mode, a recording mode, a voice recognition mode, and the like, and can process such sound as audio data. The processed audio (voice) data can be converted to a format output that can be transmitted to the mobile communication base station via the mobile communication module 112 in the case of a telephone call mode. The microphone 122 can implement various types of noise cancellation (or suppression) algorithms to cancel (or suppress) noise or interference generated during the process of receiving and transmitting audio signals.

The user input unit 130 can generate key input data according to a command input by the user to control the shift. Various operations of the mobile terminal 100. The user input unit 130 allows the user to input various types of information, and may include a keyboard, a pot, a touch pad (eg, a touch sensitive component that detects changes in resistance, pressure, capacitance, etc. due to contact), a scroll wheel , rocker, etc. In particular, when the touch panel is superimposed on the display unit 151 in the form of a layer, a touch screen can be formed.

The sensing unit 140 detects the current state of the mobile terminal 100 (eg, the open or closed state of the mobile terminal 100), the location of the mobile terminal 100, the presence or absence of contact (ie, touch input) by the user with the mobile terminal 100, and the mobile terminal. The orientation of 100, the acceleration or deceleration movement and direction of the mobile terminal 100, and the like, and generates a command or signal for controlling the operation of the mobile terminal 100. For example, when the mobile terminal 100 is implemented as a slide type mobile phone, the sensing unit 140 can sense whether the slide type phone is turned on or off. In addition, the sensing unit 140 can detect whether the power supply unit 190 provides power or whether the interface unit 170 is coupled to an external device.

The interface unit 170 serves as an interface through which at least one external device can connect with the mobile terminal 100. For example, the external device may include a wired or wireless headset port, an external power (or battery charger) port, a wired or wireless data port, a memory card port (a typical example is a universal serial bus USB port), for connection having The port of the device that identifies the module, the audio input/output (I/O) port, the video I/O port, the headphone port, and so on. The identification module may be stored to verify various information used by the user using the mobile terminal 100 and may include a User Identification Module (UIM), a Customer Identification Module (SIM), a Universal Customer Identity Module (USIM), and the like. In addition, the device having the identification module (hereinafter referred to as "identification device") may take the form of a smart card, and thus the identification device may be connected to the mobile terminal 100 via a port or other connection device.

The interface unit 170 can be configured to receive input (eg, data information, power, etc.) from an external device and transmit the received input to one or more components within the mobile terminal 100 or can be used at the mobile terminal 100 and externally Data is transferred between devices.

In addition, when the mobile terminal 100 is connected to the external base, the interface unit 170 may function as a path through which power is supplied from the base to the mobile terminal 100 or may be used as a bottom allowing The various command signals input by the cradle are transmitted to the path of the mobile terminal 100 therethrough. Various command signals or power input from the base can be used as signals for identifying whether the mobile terminal 100 is accurately mounted on the base.

Output unit 150 is configured to provide an output signal (eg, an audio signal, a video signal, an alarm signal, a vibration signal, etc.) in a visual, audio, and/or tactile manner. The output unit 150 may include a display unit 151, an audio output module 152, an alarm unit 153, and the like.

The display unit 151 can display information processed in the mobile terminal 100. For example, when the mobile terminal 100 is in a phone call mode, the display unit 151 can display a user interface (UI) or a graphical user interface (GUI) related to a call or other communication (eg, text messaging, multimedia file download, etc.). When the mobile terminal 100 is in a video call mode or an image capturing mode, the display unit 151 may display a captured image and/or a received image, a UI or GUI showing a video or image and related functions, and the like.

Meanwhile, when the display unit 151 and the touch panel are superposed on each other in the form of a layer to form a touch screen, the display unit 151 can function as an input device and an output device. The display unit 151 may include at least one of a liquid crystal display (LCD), a thin film transistor LCD (TFT-LCD), an organic light emitting diode (OLED) display, a flexible display, a three-dimensional (3D) display, and the like. Some of these displays may be configured to be transparent to allow a user to view from the outside, which may be referred to as a transparent display, and a typical transparent display may be, for example, a TOLED (Transparent Organic Light Emitting Diode) display or the like. According to a particular desired embodiment, the mobile terminal 100 may include two or more display units (or other display devices), for example, the mobile terminal 100 may include an external display unit (not shown) and an internal display unit (not shown) ). The touch screen can be used to detect touch input pressure as well as touch input position and touch input area.

The audio output module 152 may output audio data received by the wireless communication unit 110 or stored in the memory 160 when the mobile terminal 100 is in a call signal receiving mode, a call mode, a recording mode, a voice recognition mode, a broadcast receiving mode, and the like. Convert audio signals and The output is sound. Moreover, the audio output module 152 can provide audio output (eg, call signal reception sound, message reception sound, etc.) associated with a particular function performed by the mobile terminal 100. The audio output module 152 can include a speaker, a buzzer, and the like.

The alarm unit 153 can provide an output to notify the mobile terminal 100 of the occurrence of an event. Typical events may include call reception, message reception, key signal input, touch input, and the like. In addition to audio or video output, the alert unit 153 can provide an output in a different manner to notify of the occurrence of an event. For example, the alarm unit 153 can provide an output in the form of vibrations, and when a call, message, or some other incoming communication is received, the alarm unit 153 can provide a tactile output (ie, vibration) to notify the user of it. By providing such a tactile output, the user is able to recognize the occurrence of various events even when the user's mobile phone is in the user's pocket. The alarm unit 153 can also provide an output of the notification event occurrence via the display unit 151 or the audio output module 152.

The memory 160 may store a software program or the like that performs processing and control operations performed by the controller 180, or may temporarily store data (for example, a phone book, a message, a still image, a video, and the like) that has been output or is to be output. Moreover, the memory 160 can store data regarding vibrations and audio signals of various manners that are output when a touch is applied to the touch screen.

The memory 160 may include at least one type of storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (eg, SD or DX memory, etc.), a random access memory (RAM), a static random access memory ( SRAM), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), programmable read only memory (PROM), magnetic memory, magnetic disk, optical disk, and the like. Moreover, the mobile terminal 100 can cooperate with a network storage device that performs a storage function of the memory 160 through a network connection.

The controller 180 typically controls the overall operation of the mobile terminal 100. For example, the controller 180 performs the control and processing associated with voice calls, data communications, video calls, and the like. In addition, the controller 180 may include a multimedia module 181 for reproducing or playing back multimedia data, a multimedia module 181 may be constructed within controller 180 or may be configured to be separate from controller 180. The controller 180 may perform a pattern recognition process to recognize a handwriting input or a picture drawing input performed on the touch screen as a character or an image.

The power supply unit 190 receives external power or internal power under the control of the controller 180 and provides appropriate power required to operate the various components and components.

The various embodiments described herein can be implemented in a computer readable medium using, for example, computer software, hardware, or any combination thereof. For hardware implementations, the embodiments described herein may be through the use of application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays ( An FPGA, a processor, a controller, a microcontroller, a microprocessor, at least one of the electronic units designed to perform the functions described herein, in some cases, such an embodiment may be at the controller 180 Implemented in the middle. For software implementations, implementations such as procedures or functions may be implemented with separate software modules that permit the execution of at least one function or operation. The software code can be implemented by a software application (or program) written in any suitable programming language, which can be stored in memory 160 and executed by controller 180.

So far, the mobile terminal 100 has been described in terms of its function. Hereinafter, for the sake of brevity, the slide type mobile terminal 100 in various types of mobile terminals 100 such as a folding type, a bar type, a swing type, a slide type mobile terminal 100, and the like will be described as an example. Therefore, the present invention can be applied to any type of mobile terminal 100, and is not limited to the slide type mobile terminal 100.

The mobile terminal 100 as shown in FIG. 1 may be configured to operate using a communication system such as a wired and wireless communication system and a satellite-based communication system that transmits data via frames or packets.

A communication system in which the mobile terminal 100 according to the present invention can operate will now be described with reference to FIG.

Such communication systems may use different air interfaces and/or physical layers. For example, the air interface used by the communication system includes, for example, Frequency Division Multiple Access (FDMA), Time Division Multiple Access (TDMA), code. Divisional Multiple Access (CDMA) and Universal Mobile Telecommunications System (UMTS) (particularly, Long Term Evolution (LTE)), Global System for Mobile Communications (GSM), and the like. As a non-limiting example, the following description relates to a CDMA communication system, but such teachings are equally applicable to other types of systems.

Referring to FIG. 2, a CDMA wireless communication system can include a plurality of mobile terminals 100, a plurality of base stations (BS) 270, a base station controller (BSC) 275, and a mobile switching center (MSC) 280. The MSC 280 is configured to interface with a public switched telephone network (PSTN) 290. The MSC 280 is also configured to interface with a BSC 275 that can be coupled to the base station 270 via a backhaul line. The backhaul line can be constructed in accordance with any of a number of known interfaces including, for example, E1/T1, ATM, IP, PPP, Frame Relay, HDSL, ADSL, or xDSL. It will be appreciated that the system as shown in FIG. 2 may include multiple BSCs 2750.

Each BS 270 can serve one or more partitions (or regions), with each partition covered by a multi-directional antenna or an antenna pointing in a particular direction radially away from the BS 270. Alternatively, each partition may be covered by two or more antennas for diversity reception. Each BS 270 can be configured to support multiple frequency allocations, and each frequency allocation has a particular frequency spectrum (eg, 1.25 MHz, 5 MHz, etc.).

The intersection of partitioning and frequency allocation can be referred to as a CDMA channel. BS 270 may also be referred to as a Base Transceiver Subsystem (BTS) or other equivalent terminology. In such a case, the term "base station" can be used to generally mean a single BSC 275 and at least one BS 270. A base station can also be referred to as a "cell station." Alternatively, each partition of a particular BS 270 may be referred to as multiple cellular stations.

As shown in FIG. 2, a broadcast transmitter (BT) 295 transmits a broadcast signal to the mobile terminal 100 operating within the system. A broadcast receiving module 111 as shown in FIG. 1 is provided at the mobile terminal 100 to receive a broadcast signal transmitted by the BT 295. In Figure 2, several satellites 300 are shown, for example, a Global Positioning System (GPS) satellite 300 can be employed. The satellite 300 helps locate at least one of the plurality of mobile terminals 100.

In Figure 2, a plurality of satellites 300 are depicted, but it is understood that any number of The satellite gets useful positioning information. The GPS module 115 as shown in Figure 1 is typically configured to cooperate with the satellite 300 to obtain desired positioning information. Instead of GPS tracking techniques or in addition to GPS tracking techniques, other techniques that can track the location of the mobile terminal 100 can be used. Additionally, at least one GPS satellite 300 can selectively or additionally process satellite DMB transmissions.

As a typical operation of a wireless communication system, BS 270 receives reverse link signals from various mobile terminals 100. Mobile terminal 100 typically participates in calls, messaging, and other types of communications. Each reverse link signal received by a particular base station 270 is processed within a particular BS 270. The obtained data is forwarded to the relevant BSC 275. The BSC provides call resource allocation and coordinated mobility management functions including a soft handoff procedure between the BSs 270. The BSC 275 also routes the received data to the MSC 280, which provides additional routing services for interfacing with the PSTN 290. Similarly, PSTN 290 interfaces with MSC 280, which forms an interface with BSC 275, and BSC 275 controls BS 270 accordingly to transmit forward link signals to mobile terminal 100.

Based on the above-described hardware structure of the mobile terminal 100 and the communication system, various embodiments of the method of the present invention are proposed.

Various embodiments of the present invention are proposed based on the above-described mobile terminal hardware structure and communication system.

Embodiment 1

FIG. 3 is a flowchart of a unified account login processing method based on a virtual subscriber identity card according to Embodiment 1 of the present invention. FIG. 3 is a schematic diagram of a unified account login based on a virtual subscriber identity card according to an embodiment of the present invention. The processing method, as shown in FIG. 3, is a unified account login processing method based on a virtual subscriber identity card, including:

Step 101: The server sets a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and constructs a mapping relationship between the unified login account of the user and an account of a different application of the user.

The virtual subscriber identity card refers to the authentication information in the mobile terminal that is configured in the software mode to support the mobile terminal to access the communication network of the operator, and the mobile terminal does not set the entity identification of the entity. The module can access the communication network using voice or data communication functions. Since the virtual subscriber identity card stores the authentication information configured to uniquely identify the user, setting the user's unified login account based on the virtual subscriber identity card may be implemented to set the authentication information in the virtual subscriber identity card to the user's unified login. The account number, or in the case where the authentication information has a security requirement, is implemented as a unified login account obtained by encrypting the authentication information by using a one-way irreversible encryption algorithm. Of course, in practical applications, The user can also re-transform the authentication information or the encrypted information into a unified login account (including a user name, optionally, a password) that is convenient for the user to recognize and memorize.

In practice, the server can be implemented as a single server or collection of servers (such as an authentication server and an access control server).

For a mobile terminal user, it is possible to install multiple applications in the mobile terminal, such as a game application, a music client, an email (client), an instant messaging application, an electronic banking (client), etc., each application has a contradiction The account number (including the user name, optionally, including the password) is based on the unified account number of the user set by the virtual user identification card in the user's mobile terminal, and is associated with the account of the various applications installed by the user on the mobile terminal. Mapping relations.

The accounts of different applications corresponding to the unified login account of the user have different security levels, and the security levels of different application accounts may be manually set by the user, or may be automatically set by the server. Illustratively, the security levels include: a read-only security level, a general security level, an advanced security level, and a highest security level.

Step 102: The server performs judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user.

The server determines the account corresponding to the application requested by the user based on the mapping relationship and the unified login account used by the user, and determines whether the authenticated user can log in to the server by using the corresponding account.

Each account corresponds to a security control policy, and exemplary, accounts with different security levels The security control strategy adopted is different.

Step 103: The server determines, according to the mapping relationship and the unified login account of the user, the security level of the user requesting the account corresponding to the application.

The account of each application of the user corresponds to an access control policy. Illustratively, the access control policies adopted by the accounts of different security levels are different. The access control policy is configured to be based on a security level of an account of an application requested by the user, and an access authority of the application of the security level corresponding to the application; the security level includes: a read-only security level , general security level, advanced security level and highest security level. Illustratively, the type of access rights may include: all access rights of the application (ie, any operation can be performed on the application) and read-only permissions of the application (that is, only read permissions in the application).

Step 104: The server controls, according to the determination result, the access authority of the user to the application after logging in to the application based on the account.

It should be noted that the servers described in this embodiment and subsequent embodiments may be implemented in the form of a single server, multiple servers, or server clusters. Illustratively, according to different functions implemented by the server, for example, forming a mapping relationship and authenticating the user. And the control access rights can be implemented as a mapping relationship server, an authentication server, and an access authority controller.

In this embodiment, the present invention constructs a unified account system including a mapping relationship in a server based on a virtual subscriber identity card, and different security level accounts adopt different security control policies and access control policies, for example, when the user settings are different. After the security level of the applied account, the account with the lower security level, such as the account with the read-only security level, can be authenticated by the server without forcing the user to enter the user name and password every time the account is used for login, thereby improving the automatic login of the account. Convenience and efficiency.

Embodiment 2

Based on the first embodiment, FIG. 4 is a schematic diagram of a unified account login processing method based on a virtual subscriber identity card according to Embodiment 2 of the present invention; as shown in FIG. 4, a unified login account of a user is set. After the number is mapped to the account of the user's various applications, if the user needs to use the mobile terminal to request to use an account of an application, for example, using an account of the game application or using an account of the electronic bank, the server authenticates the user via the mobile terminal. For example, the user is authenticated by using a password verification method and/or a biometric authentication input method, and the password and biometrics of the legitimate user have been previously collected and maintained at least one of the server and the mobile terminal.

And determining, according to the mapping relationship, the unified login account used by the user, the account corresponding to the application requested by the user in the mapping relationship; determining the account corresponding to the account corresponding to the application used by the user request Security control policy, exemplarily, the security control policy is configured to control at least one of the following:

1) Using the manner of verification of the user of the mobile terminal, the manner of verification includes: a password verification method and a verification method of biometrics (eg, biometrics such as fingerprint, iris, voiceprint, palm print, etc.).

2) A trigger condition for re-authentication of a user using the mobile terminal, including a change in the biometrics of the user of the mobile terminal, that is, re-authentication of the user when the biometric of the user using the mobile terminal changes.

3) When the biometric of the application of the mobile terminal changes, the prompting manner for re-verifying the user of the mobile terminal includes a reminder and a limited number of times (greater than one time).

4) Based on the security control policy, the user logs in to the application server corresponding to the requested application, so that the user can use the application based on the account; if the verification fails, the user is not logged in to the requested application.

In this embodiment, before the user uses the mobile terminal, the user is authenticated by using at least one of the password verification mode and the biometric verification mode, and the user corresponding to the application requested by the user is logged in according to the account corresponding to the application requested by the user. The application server improves the efficiency and convenience of account login for the application server that does not log in to the user when the authentication is not passed.

Embodiment 3

FIG. 5 is a schematic diagram of a mapping relationship between a unified login account of a built-in user and an account of a different application of the user in the unified account login method of the virtual subscriber identity card according to the third embodiment of the present invention.

As shown in FIG. 5, the account includes: a read-only security level account, a general security level account, an advanced security level account, and a highest security level account. As shown in FIG. 5, the unified login account and the read-only security level account are randomly mapped; the unified login account and the common security level account are common mapping; the unified login account and the advanced security level account are advanced mapping; The unified login account and the highest security level account are the highest mapping.

As an optional implementation manner of the foregoing step 102 to step 104 of the first embodiment, the following situations are included:

1) verifying, by the user using the mobile terminal, at least one of a password verification mode and a biometric verification mode; and determining the mapping relationship based on the mapping relationship and the unified login account used by the user when the verification is passed The account corresponding to the application requested by the user; when the mobile terminal user requests to log in to the application of the read-only security level, the security level of the account corresponding to the application requested by the user is determined based on the mapping relationship, and the application requested by the user is used. When the account is a read-only security level account, the user is assigned a random account assigned through the resource pool, and the user completes the login browsing on the application server of the application by means of an anonymous visitor or an account with the lowest priority authority, and assigns the user only to the application. Read permission, the user is not verified again during the user's use of the application.

2) verifying, by using at least one of a password verification mode and a biometric verification mode, the user using the mobile terminal, and determining the mapping relationship based on the mapping relationship and the unified login account used by the user when the verification is passed. The security level of the account corresponding to the application requested by the user;

When the mobile terminal user requests to log in to the application of the read-only security level, the account corresponding to the application requested by the user is determined based on the mapping relationship, and the account of the application requested by the user is normal. In the security level account, the user logs in to the application server for the application by using the account set in advance for the application, or when the user inputs the corresponding account when requesting to log in to the application, so that the user does not need to input the account again during the subsequent use of the user. Information, and allocating all the usage rights for the application to the user. If the mobile terminal detects that the user's unified login account has changed, the server reminds the mobile terminal that the user of the mobile terminal changes and the mobile terminal authenticates the user;

3) verifying, by using at least one of a password verification mode and a biometric verification mode, the user using the mobile terminal, and determining the mapping relationship based on the mapping relationship and the unified login account used by the user when the verification is passed The security level of the account corresponding to the application requested by the user;

When the mobile terminal user requests to log in to the application of the read-only security level, the account corresponding to the application requested by the user is determined based on the mapping relationship, and when the account of the application requested by the user is an advanced security level account, the user presets for the application. The account number, or the user inputting the corresponding account when requesting to log in to the application, is a one-time login for the user in the application server of the application, so that the user does not need to input the account information again during the subsequent use, and allocate all the use for the application for the user. Permission, if it is detected that the user's unified login account has changed, the server reminds the mobile terminal to change the user of the mobile terminal at least twice, and causes the mobile terminal to verify the user, and the biometric and mobile terminal that will pass the verification when the verification passes The unified login account is bound and maintained on at least one of the mobile terminal and the server, configured for subsequent user authentication.

4) verifying, by the user using the mobile terminal, at least one of a password verification mode and a biometric verification mode; and determining the mapping relationship based on the mapping relationship and the unified login account used by the user when the verification is passed The security level of the account corresponding to the application requested by the user;

When the mobile terminal user requests to log in to the application of the read-only security level, the account corresponding to the application requested by the user is determined based on the mapping relationship, and the account of the application requested by the user is advanced. When the security level account is the highest security level account, the server determines the authentication mode adopted by the mobile terminal for the current user, and allocates all the usage rights for the application to the user when the current user simultaneously passes the password verification and biometric verification;

For the user permission to use the application by password authentication or biometric authentication, the user is not assigned the usage right for the application;

If it is detected that the biometric of the user changes, the server reminds the user of the mobile terminal to change through the mobile terminal, and cancels the login made for the current user for the current user of the mobile terminal; in order to ensure security, the account with the security level The processing method is different. The server directly cancels the login status of the application, does not verify the current user, and does not add authorization verification for the new biometric feature of the current user. Other users cannot use the login maximum security level account.

It can be seen that the four mappings correspond to different security control policies and access control policies. The unified login account formed by the virtual user identification card is used to construct a mapping relationship with the account of different security levels. After the user is set, the user can log in to the commonly used Internet application without entering the user name and password every time, thereby improving the automatic account. Convenience, efficiency and security of login.

In this embodiment, the read-only security level account includes: an account of a forum that is accidentally logged in; the general security level account includes: a video game account, an online music account; the advanced security level account, including: Email account, instant messaging account; the highest security level account, including: electronic banking application account, third-party payment application account, and the like.

The virtual user identification card is used to set the unified login account of the user, and the mapping relationship between the unified login account and different application accounts is constructed. The virtual user identification card is used as the starting point and the center for identifying the user, and the account of different applications is manually input. In the security level mode, an account system for different security levels of users is built in the server, and a system automatic method can also be constructed for a read-only security level account and a general security level account. After the user sets the security level of different accounts, when the server requests to log in to an application, the server determines based on the mapping relationship. Apply the corresponding account and log in to the application according to the security level. You do not need to enter the user name and password to log in every time, which improves the convenience, efficiency and security of the automatic login of the account.

Embodiment 4

FIG. 6 is a block diagram showing an exemplary structure of a unified account login processing server based on a virtual subscriber identity card according to Embodiment 4 of the present invention; FIG. 6 is a schematic diagram of a unified account login based on a virtual subscriber identity card according to an embodiment of the present invention; The processing server 400 includes:

The mapping unit 401 is configured to set a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and construct a mapping relationship between the unified login account of the user and an account of a different application of the user;

The authentication unit 402 is configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The access control unit 403 is configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the user requesting the account corresponding to the application;

Embodiment 5

Based on Embodiment 4, a unified account login processing server based on a virtual subscriber identity card according to an embodiment of the present invention includes:

The access control unit 403 is configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the account corresponding to the application request, and control the user to log in based on the account according to the determination result. The access authority to the application after the application.

The mapping unit constructs a mapping relationship according to the security level of the different accounts of the user, and constructs a mapping relationship between the account of different security levels of the user and the unified login account of the user; Alternatively, the mapping between the read-only security level account of the different users and the unified login account of the corresponding user is automatically constructed, and the mapping relationship between the common security level account of the different users and the unified login account of the corresponding user is automatically constructed.

Referring to FIG. 4, the authentication unit performs verification by using a user of the mobile terminal by using at least one of a password verification mode and a biometric verification mode; and when the verification is passed, based on the mapping relationship The unified login account used by the user determines the security level of the account corresponding to the application requested by the user in the mapping relationship; the security level of the account corresponding to the application used by the user request is the user login The application requested to use.

Based on FIG. 5, the authentication unit is based on the security level of the account corresponding to the application that the user requests to use, and the application is used by the user to log in, including the following methods:

1) The access control unit is further configured to: when the account of the application requested by the user is a read-only security level account, allocate the random account of the application to the user through the resource pool to be based on the allocated random The account is logged in to the application for the user;

2) The access control unit is further configured to: when the account of the application requested by the user is an ordinary security level account, use the user to use the application by using an account of the application set in advance or the user requests And inputting the account corresponding to the application, logging in to the application for the user; performing a reminder when detecting that the biometric of the user of the mobile terminal changes, and re-authenticating the user;

The access control unit is further configured to: when the account of the application requested by the user is an advanced security level account, when the account of the application preset by the user or the user requests to use the application Entering an account corresponding to the application, logging the application to the user at one time; performing a preset number of reminders greater than one time when detecting that the biometric of the user of the mobile terminal changes, and re-writing the User verification;

4) The access control unit is further configured to: when the account of the application requested by the user is the highest security level account, verify the password verification mode and the biometric verification mode of the user, and pass the verification An account of the application preset by the user or an account corresponding to the application that is input when the user requests to use the application, logging in to the application for the user; when detecting the user of the mobile terminal The user of the mobile terminal releases the login for the application when the biometric changes.

The access control unit controls, according to the determination result, the access authority of the user to the application after logging in to the application based on the account, including the following manner,

1) an access control unit, configured to: when the result of the determination indicates that the account of the application requested by the user is a read-only security level account, the user is assigned to the application Visitor access or minimum priority authority;

2) The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the read-only permission of the user for the application is allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is a normal security level account, all the usage rights of the user for the application are allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is the highest security level account, and the user is based on the password login and the biometric verification mode. When the login account is logged into the mobile terminal, all the usage rights of the user for the application are assigned.

The virtual user identification card is used to set the unified login account of the user, and the mapping relationship between the unified login account and different application accounts is constructed. The virtual user identification card is used as the starting point and the center for identifying the user, and the account of different applications is manually input. In the security level mode, an account system for different security levels of users is built in the server, and a system automatic method can also be constructed for a read-only security level account and a general security level account. After the user sets the security level of the different accounts, when requesting to log in to an application, the server determines the account corresponding to the application based on the mapping relationship, and logs the application for the user according to the security level, and does not need to input the user name each time. The password is logged in, which improves the convenience, efficiency and security of the automatic login of the account.

Embodiment 6

FIG. 7 is a block diagram showing an exemplary structure of a unified account login system based on a virtual subscriber identity card according to Embodiment 7 of the present invention. As shown in FIG. 7, a unified account registration system based on a virtual subscriber identity card according to the present invention includes: a mobile terminal 100 provided with a virtual subscriber identity card, an authentication server 500, and an access control server 600.

An authentication server configured to set a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and construct a mapping relationship between the unified login account of the user and an account of a different application of the user ;

The authentication server is further configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The access control server is further configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the user requesting the account corresponding to the application;

The access control server is further configured to control, according to the determination result, the access authority of the user to the application after logging in to the application based on the account.

The authentication server is further configured to: according to the security level of the user indicating the different accounts of the user, construct a mapping relationship between the account of different security levels of the user and the unified login account of the user; or, automatically The mapping relationship between the read-only security level account of the different users and the unified login account of the corresponding user is constructed, and the mapping relationship between the common security level account of different users and the unified login account of the corresponding user is automatically constructed.

The authentication server is further configured to control, by the mobile terminal, at least one of a password verification mode and a biometric verification mode by using a user of the mobile terminal;

The authentication server is further configured to determine, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The authentication server is further configured to use, according to the security level of the account corresponding to the application that the user requests to use, an application that is requested to be used by the user to log in.

The authentication server is further configured to: when the account of the application requested by the user is a read-only security level account, allocate the random account of the application to the user through the resource pool to be based on the allocated random account. The user logs in to the application;

The authentication server is further configured to use, when the account of the application requested by the user is an ordinary security level account, use the account of the application set by the user or the corresponding input when the user requests to use the application. The account of the application is used to log in to the application for the user; when it is detected that the biometric of the user of the mobile terminal changes, a reminder is performed, and the user is re-verified;

The authentication server is further configured to: when the account of the application requested by the user is an advanced security level account, the account of the application preset by the user or the corresponding input when the user requests to use the application The account of the application is used to log in to the application for the user; when it is detected that the biometric of the user of the mobile terminal changes, a preset number of reminders greater than one time is performed, and the user is re-verified;

And the authentication server is further configured to verify, according to the password authentication mode and the biometric verification mode, that the account of the application requested by the user is the highest security level account, and the user is preset by the user when the verification is passed. The account of the application or the account corresponding to the application that is input when the user requests to use the application, log in to the application for the user; when the biometric of the user of the mobile terminal is detected to change The login for the application is released for the user of the mobile terminal.

The access control server is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the access authority or the lowest priority assigned to the anonymous visitor of the application for the application Level permissions:

The access control server is further configured to: when the determination result indicates that the user requests to make When the account of the used application is a read-only security level account, the user is assigned read-only permission for the application;

The access control server is further configured to: when the determination result indicates that the account of the application requested by the user is an ordinary security level account, all the usage rights of the user for the application are allocated;

The access control server is further configured to: when the determination result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

The access control server is further configured to: when the determination result indicates that the account of the application requested by the user is the highest security level account, and the user is based on the password login and the biometric authentication mode to use the unified login account. When the mobile terminal is logged in, all the usage rights of the user for the application are assigned.

In this embodiment, the user's unified account login information is set by the virtual user identification card, and the unified account login information and the different application accounts, such as the mapping relationship between the social application and the email mailbox, are constructed, when logging in to an application of the terminal or logging in to a website. The authentication server authenticates the unified login account obtained by the login server. If the authentication is passed, the user or the website is directly logged into the application, and the access control server defines the content of the access control according to the security level. By using a virtual subscriber identity card as the center to build a unified account system on the server, after the user is set up, you can log in to the commonly used Internet application without entering the username and password each time, thus improving the convenience of automatic login of the account. , efficiency and safety.

In this embodiment, the authentication server records accounts of different security levels in different security levels. To ensure security, the authentication server can consider distributed deployment. It is best to record the account with the required security level in the encrypted form locally on the mobile terminal.

Example eight

The embodiment provides a computer storage medium, where the computer storage medium stores The executable instruction is used to execute the account login processing method provided by the embodiment of the present invention.

It is to be understood that the term "comprises", "comprising", or any other variants thereof, is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes those elements. It also includes other elements that are not explicitly listed, or elements that are inherent to such a process, method, article, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.

Claims

An account login processing method includes:

Setting a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and constructing a mapping relationship between the unified login account of the user and an account of a different application of the user;

Determining and authenticating the application used by the user login request based on the mapping relationship and the unified login account used by the user;

Determining, by the user, the security level of the account corresponding to the application, based on the mapping relationship and the unified login account of the user;

And controlling, according to the judgment result, the access authority of the user to the application after logging in to the application based on the account.
The account login processing method according to claim 1, wherein each of the unified login accounts corresponds to one security control policy and one access control policy;

The security control policy is used to control at least one of the following:

The manner of verification using the manner of verification by the user of the mobile terminal includes: a password verification method and a biometric verification method;

a trigger condition for re-authentication of a user using the mobile terminal, including a change in a biometric of a user of the mobile terminal;

The prompting method for re-verifying the user of the mobile terminal includes a reminder and a limited number of reminders;

The access control policy is used for a security level of an account based on an application requested by the user, and an access authority of the application of the security level corresponding to the application;

The security levels include: read-only security level, general security level, advanced security level, and highest security level.
An account login processing method according to claim 1, wherein the construction site The mapping relationship between the unified login account of the user and the account of the different application of the user includes:

And establishing, according to the security level of the different accounts of the user, the mapping relationship between the account of different security levels of the user and the unified login account of the user;

Alternatively, the mapping between the read-only security level account of the different users and the unified login account of the corresponding user is automatically constructed, and the mapping relationship between the common security level account of the different users and the unified login account of the corresponding user is automatically constructed.
The account login processing method according to claim 1, wherein the determining and authenticating the application used by the user login request based on the mapping relationship and the unified login account used by the user includes:

Performing verification on at least one of a password verification method and a biometric verification method for a user using the mobile terminal;

And determining, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The security level of the account corresponding to the application used based on the user request is the application requested by the user to log in.
The account login processing method according to claim 4, wherein the security level of the account corresponding to the application that is used by the user request is an application that is requested to be used by the user to log in, including:

When the account of the application requested by the user is a read-only security level account, the user allocates a random account of the application through the resource pool to log in to the application for the user based on the allocated random account;

When the account of the application requested by the user is a normal security level account, the user uses the account of the application set in advance or the account corresponding to the application that is input when the user requests to use the application. The user logs in to the application once; when the A reminder is made when the biometrics of the user of the mobile terminal changes, and the user is re-verified;

When the account of the application requested by the user is an advanced security level account, the account of the application set by the user in advance or the account corresponding to the application input when the user requests to use the application is The user logs in to the application in one time; when detecting that the biometric of the user of the mobile terminal changes, performs a preset number of reminders greater than one time, and re-verifies the user;

When the account of the application requested by the user is the highest security level account, the user is authenticated based on the password authentication method and the biometric verification mode, and the account or the application of the application preset by the user is verified when the user passes the verification. Determining, by the user, an account corresponding to the application that is input when the user uses the application, logging in to the application for the user; and detecting the user of the mobile terminal when the biometric of the user of the mobile terminal is changed. Unregister the app.
The account login processing method according to claim 1, wherein the controlling the access authority of the user to the application after logging in to the application based on the account, according to the determination result, includes:

When the judgment result indicates that the account of the application requested by the user is a read-only security level account, the user has the access right or the lowest priority authority assigned to the anonymous visitor of the application:

When the judgment result indicates that the account of the application requested by the user is a read-only security level account, the user is assigned read-only permission for the application;

When the judgment result indicates that the account of the application requested by the user is a normal security level account, all the usage rights of the user for the application are allocated;

When the judgment result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

When the judgment result indicates that the account of the application requested by the user is the highest security level account, and the user logs in to the mobile terminal by using the unified login account based on the password login and the biometric authentication mode, the user is assigned to the mobile terminal. The user's full usage rights for the application.
A server that includes:

a mapping unit, configured to set a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and construct a mapping relationship between the unified login account of the user and an account of a different application of the user;

The authentication unit is configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The access control unit is configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the user requesting the account corresponding to the application;

And controlling, according to the judgment result, the access authority of the user to the application after logging in to the application based on the account.
The server according to claim 7, wherein

The mapping unit is further configured to: according to the security level of the user indicating the different accounts of the user, construct a mapping relationship between the account of different security levels of the user and the unified login account of the user;

Alternatively, the mapping between the read-only security level account of the different users and the unified login account of the corresponding user is automatically constructed, and the mapping relationship between the common security level account of the different users and the unified login account of the corresponding user is automatically constructed.
The server according to claim 7, wherein

The authentication unit is further configured to perform verification on at least one of a password verification mode and a biometric verification mode by a user using the mobile terminal;

The authentication unit is further configured to determine, according to the mapping relationship, the unified login account used by the user, the application pair that is used by the user in the mapping relationship. The security level of the account number;

The authentication unit is further configured to use, according to the security level of the account corresponding to the application that the user requests to use, an application that is requested to be used by the user to log in.
The server according to claim 9, wherein

The authentication unit is further configured to: when the account of the application requested by the user is a read-only security level account, allocate the random account of the application to the user through the resource pool to be based on the allocated random account. The user logs in to the application;

The access control unit is further configured to use, when the account of the application requested by the user is an ordinary security level account, input by using the account of the application set by the user or the user requesting to use the application. Corresponding to the account of the application, logging in to the application for the user; performing a reminder when detecting that the biometric of the user of the mobile terminal changes, and re-authenticating the user;

The access control unit is further configured to: when the account of the application requested by the user is an advanced security level account, the account of the application preset by the user or the user inputs the request when using the application Corresponding to the account of the application, logging in to the application for the user; performing a preset number of reminders greater than once when detecting that the biometric of the user of the mobile terminal changes, and re-performing the user verification;

The access control unit is further configured to: when the account of the application requested by the user is the highest security level account, verify the password verification mode and the biometric verification mode of the user, and pass the user when the verification is passed. Pre-set the account of the application or the account corresponding to the application that is input when the user requests to use the application, log in to the application for the user; when detecting the biometric of the user of the mobile terminal When the change occurs, the user of the mobile terminal is released from the login for the application.
The server according to claim 7, wherein

The access control unit is further configured to: when the determination result indicates that the user requests to use When the account of the application is a read-only security level account, the user's access rights or lowest priority rights are assigned to the anonymous visitors of the application;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the read-only permission of the user for the application is allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is an ordinary security level account, all the usage rights of the user for the application are allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

The access control unit is further configured to: when the determination result indicates that the account of the application requested by the user is the highest security level account, and the user is based on the password login and the biometric authentication mode to use the unified login account. When the mobile terminal is logged in, all the usage rights of the user for the application are assigned.
An account login processing system includes: a server and a mobile terminal provided with a virtual subscriber identity card;

The server is configured to set a unified login account of the user of the mobile terminal by using a virtual subscriber identity card in the mobile terminal, and construct a mapping between the unified login account of the user and an account of a different application of the user. relationship;

The server is further configured to perform judgment and authentication on the application used by the user login request based on the mapping relationship and the unified login account used by the user;

The server is further configured to determine, according to the mapping relationship and the unified login account of the user, the security level of the account corresponding to the application request by the user;

The server is further configured to control, according to the determination result, the user to log in based on the account The access authority to the application after the application.
The system of claim 12, wherein

The server is further configured to construct a mapping relationship between an account of a different security level of the user and a unified login account of the user according to the security level of the user indicating the different accounts of the user;

Alternatively, the mapping between the read-only security level account of the different users and the unified login account of the corresponding user is automatically constructed, and the mapping relationship between the common security level account of the different users and the unified login account of the corresponding user is automatically constructed.
The system of claim 12, wherein

The server is further configured to control, by the mobile terminal, at least one of a password verification mode and a biometric verification mode by using a user of the mobile terminal;

The server is further configured to determine, according to the mapping relationship, the unified login account used by the user, the security level of the account corresponding to the application requested by the user in the mapping relationship;

The server is further configured to use, according to the security level of the account corresponding to the application that the user requests to use, an application that is requested to be used by the user to log in.
The system of claim 14 wherein

The server is further configured to: when the account of the application requested by the user is a read-only security level account, allocate, by the resource pool, the user to use the random account of the application to use the allocated random account as the user. Log in to the application;

The server is further configured to use, when the account of the application requested by the user is an ordinary security level account, use the account of the application set by the user or the corresponding input when the user requests to use the application. An account of the application, the user is logged in to the application for one time; when it is detected that the biometric of the user of the mobile terminal changes, a reminder is performed, and the user is re-verified;

The server is further configured to: when the account of the application requested by the user is an advanced security level account, the account of the application preset by the user or the corresponding input when the user requests to use the application Applying an account for the user to log in to the application for one time; when detecting that the biometric of the user of the mobile terminal changes, performing a preset number of reminders greater than one time, and re-authenticating the user;

The server is further configured to verify, according to the password authentication mode and the biometric verification mode, that the account of the application requested by the user is the highest security level account, and the pre-set by the user when the verification is passed. The account of the application or the account corresponding to the application that is input when the user requests to use the application, log in to the application for the user; when detecting that the biometric of the user of the mobile terminal changes The login for the application is released for the user of the mobile terminal.
The system of claim 12, wherein

The server is further configured to: when the determination result indicates that the account of the application requested by the user is a read-only security level account, the access rights or the lowest priority rights of the anonymous visitors to the application are allocated to the user. :

The server is further configured to: when the determining result indicates that the account of the application requested by the user is a read-only security level account, the user is allocated read-only permission for the application;

The server is further configured to: when the determination result indicates that the account of the application requested by the user is an ordinary security level account, all the usage rights of the user for the application are allocated;

The server is further configured to: when the determination result indicates that the account of the application requested by the user is an advanced security level account, all the usage rights of the user for the application are allocated;

The server is further configured to: when the judgment result indicates that the account of the application requested by the user is the highest security level account, and the user is based on the password login and the biometric check When the login mode is used to log in to the mobile terminal by using the unified login account, all the usage rights of the user for the application are allocated.
The system of claim 12, wherein

Each of the unified login accounts corresponds to a security control policy and an access control policy.
The system of claim 17 wherein

The security control policy is used to control at least one of the following:

The manner of verification using the manner of verification by the user of the mobile terminal includes: a password verification method and a biometric verification method;

a trigger condition for re-authentication of a user using the mobile terminal, including a change in a biometric of a user of the mobile terminal;

The prompting method for re-verifying the user of the mobile terminal includes a reminder and a limited number of reminders.
The system of claim 17 wherein

The access control policy is used for a security level of an account based on an application requested by the user, and an access authority of the application of the security level corresponding to the application;

The security levels include: read-only security level, general security level, advanced security level, and highest security level.
A computer storage medium storing executable instructions for executing the account login processing method according to any one of claims 1-6.