WO2017066994A1

WO2017066994A1 - Method and device for verifying access to server

Info

Publication number: WO2017066994A1
Application number: PCT/CN2015/092691
Authority: WO
Inventors: 刘均; 杨唐鹤; 陈明
Original assignee: 深圳还是威健康科技有限公司
Priority date: 2015-10-23
Filing date: 2015-10-23
Publication date: 2017-04-27
Also published as: CN105993156A; CN105993156B

Abstract

A method and device for verifying an access to a server. The method comprises: receiving an access request sent to a server by an intelligent terminal using application software (110), wherein the access request is used for requesting the server for service data and comprises first verification information; comparing the first verification information with second verification information prestored in the server (120); and allowing the intelligent terminal to access the service data if the first verification information is consistent with the second verification information (130). The method can greatly reduce the complexity of a verification process and improve the verification efficiency.

Description

Server access verification method and device

[0001] Technical Field]

[0002] The present application relates to the field of Internet, and in particular, to a server access verification method and apparatus.

[0003] Background]

[0004] With the increase of various applications in smart terminals, the interaction between smart terminals and servers is also increasing.

The data in the server may involve the user's private data. If the hacker illegally accesses the data in the server, the private data of the user may be leaked, which may affect the user's data security. In order to ensure the security of the user's data, the identity of the user needs to be verified. Therefore, the authentication method of the identity of the user of the prior art is very complicated, so the efficiency of the verification is very high.

SUMMARY OF INVENTION

The present invention provides a server access verification method, including: receiving an access request sent by an intelligent terminal to a server by using an application software, where the access request is used to request service data from the server, where the access request includes First verification information; comparing the first verification information with second verification information pre-stored in the server; if the first verification information is consistent with the second verification information, allowing the smart terminal Accessing the service data, searching for the service data in the server according to the request path; and if the first verification information is inconsistent with the second verification information, returning verification error information to the smart terminal.

[0007] Optionally, when the user accesses the server by using the application software, and the user does not log in to the application software, the first verification information includes an application software identifier, an interface key value, and a numerical signature, where The application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

[0008] Optionally, when the user accesses the server by using the application software, and the user logs in to the application software, the first verification information includes an application software identifier, an interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, the interface key value is used to identify an interface of the application software to access the server, and the user identifier is used to identify a user after logging in Identity, the user session identifier is used to identify the user session after logging in The present application provides a server access verification method, including: receiving an access request sent by an intelligent terminal to a server by using an application software, where the access request is used to request service data from the server, where the access request includes First verification information; comparing the first verification information with a second verification previously stored in the server; if the first verification information is consistent with the second verification information, allowing the smart terminal to access The business data.

[0010] Optionally, the access request further includes a request path, and if the first verification information is consistent with the second verification information, allowing the smart terminal to access the service data further includes: The request path finds the service data in the server.

[0011] Optionally, when the user accesses the server by using the application software, and the user does not log in to the application software, the first verification information includes an application software identifier, an interface key value, and a numerical signature, where The application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

[0012] Optionally, when the user accesses the server by using the application software, and the user logs in to the application software, the first verification information includes an application software identifier, an interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, the interface key value is used to identify an interface of the application software to access the server, and the user identifier is used to identify a user after logging in Identity, the user session identifier is used to identify the user session after logging in

[0013] Optionally, the method further includes: if the first verification information is inconsistent with the second verification information

And returning verification error information to the smart terminal.

[0014] The present application further provides a server access verification apparatus, where the apparatus includes: a receiving module, a comparison module, and an enabling module, where the receiving module is configured to receive an access request sent by the smart terminal to the server by using the application software, where The access request is used to request service data from the server, where the access request includes first verification information; the comparison module is configured to perform the first verification information with a second verification previously stored in the server The permission module is configured to allow the smart terminal to access the service data after the first verification information is consistent with the second verification information.

[0015] Optionally, the device further includes a searching module, where the searching module is configured to be located according to the request path The server looks for the service data.

[0016] Optionally, when the user accesses the server by using the application software, and the user does not log in to the application software, the first verification information includes an application software identifier, an interface key value, and a numerical signature, where The application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

[0017] Optionally, when the user accesses the server by using the application software, and the user logs in to the application software, the first verification information includes an application software identifier, an interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, the interface key value is used to identify an interface of the application software to access the server, and the user identifier is used to identify a user after logging in Identity, the user session identifier is used to identify the user session after logging in

[0018] Optionally, the device further includes a sending module, where the sending module is configured to return the verification error information to the smart terminal after the first verification information is inconsistent with the second verification information.

[0019] The present application receives an access request sent by an intelligent terminal to a server through an application software, and compares the first verification information with a second verification previously stored in the server, where the first verification information is consistent with the second verification information, Allow smart terminals to access business data. The above method can greatly reduce the complexity of the verification process and improve the efficiency of verification.

[0020] [Description of the Drawings]

1 is a flowchart of a server access verification method provided by the present invention;

2 is a schematic structural diagram of a server access verification apparatus provided by the present invention.

[Detailed Embodiment]

[0024] In the following description, for purposes of illustration and description, reference, However, it should be apparent to those skilled in the art that the present invention may be practiced in other embodiments without these specific details. In other instances, detailed descriptions of well-known devices, circuits, and methods are omitted so as not to obscure the description of the application.

[0025] Referring to FIG. 1, FIG. 1 is a flowchart of a server access verification method provided by the present invention. The server access verification method provided in this embodiment includes: [0026] Step 110: Receive an access request sent by the smart terminal to the server by using the application software, where the access request is used to request service data from the server, and the access request includes the first verification information.

[0027] The smart terminal may include user equipment such as a mobile computer, a tablet computer, a personal digital assistant (PDA), a media player, a smart TV, a smart watch, a smart glasses, a smart bracelet, and the like. The application software is a client installed on the smart terminal, and the application software can access the data in the server through the connection between the smart terminal and the server. The connections between the smart terminal box servers include, but are not limited to, Wi-Fi connections, cellular connections, Bluetooth connections, and the like.

[0028] When the smart terminal needs to access the server through the application software, the smart terminal sends an access request to the server.

, wherein the access request includes the first verification information. The server receives an access request from the smart terminal to the server through the application software. The first verification information may be one

A string of pre-agreed characters does not contain actual meaning characters, but can also be a string of pre-agreed and meaningful characters. When the first verification information is a pre-agreed character with a meaningful meaning, the first verification information adopts an application software identifier, an interface key value, a numerical signature, a language code, a system version, a software version, a user identifier, and the like according to an actual application scenario. User session identifiers and the like are combined as authentication information. The application identifier is used to identify the application software, the interface key value is used to identify the interface of the application software access server, the numerical signature is used to identify the digital information, the user identifier is used to identify the identity of the user after login, and the user session identifier is used for Identify the user session after logging in. For example, when the user accesses the server using the application software and the user does not log in to the application software, the first verification information includes the application software identifier, the interface key value, and the numerical signature. When the user accesses the server using the application software and the user logs in to the application software, the first verification information includes the application software identifier, the interface key value, the numerical signature, the user identifier, and the user session identifier.

[0029] Step 120: Compare the first verification information with the second verification information pre-stored in the server.

[0030] The second verification information is stored in the server in advance. After the server receives the first verification information, the first verification information is compared with the second verification information pre-stored in the server. When the user accesses the server using the application software, and the user does not log in to the application software, the server first verifies whether the application software identifier is supported by the server. If the server supports the server, the server further verifies whether the interface key value is supported by the server, and if Further support for server support Is the digital signature correct? If the above passes, the process proceeds to step 130. Otherwise, the process proceeds to step 140. When the user accesses the server using the application software and the user logs in to the application software, it is still necessary to continue to verify whether the user identifier and the user session identifier are supported by the server. If yes, proceed to step 130, otherwise, proceed to step 140.

[0031] Step 130: Allow the smart terminal to access the service data.

[0032] If the first verification information and the second verification information are consistent, the smart terminal is allowed to access the service data. Accessing the business data may be based on accessing the business data in the server according to a specific path, or may not access the business data in the server according to a specific path. It can be understood that if the access path is not included in the access request, when the smart terminal accesses the server, the service data in the server is not accessed according to the specific path. If the access request further includes a request path, when the smart terminal accesses the server, the server searches for the service data in the server according to the request path to improve the access efficiency.

[0033] Step 140: Returning the verification error information to the smart terminal.

[0034] If the first verification information and the second verification information do not match, the verification error information is returned to the smart terminal.

[0035] The present application receives an access request sent by an intelligent terminal to a server through an application software, and compares the first verification information with a second verification previously stored in the server, where the first verification information is consistent with the second verification information, Allow smart terminals to access business data. The above method can greatly reduce the complexity of the verification process and improve the efficiency of verification.

[0036] Referring to FIG. 2, FIG. 2 is a schematic structural diagram of a server access verification apparatus provided by the present invention. The server access verification apparatus provided in this embodiment includes: a receiving module 210, a comparing module 220, and an enabling module 230.

The module 240 and the sending module 250 are located.

[0037] The receiving module 210 is configured to receive an access request sent by the smart terminal to the server by using the application software, where

The access request is for requesting service data from the server, and the access request includes the first verification information.

[0038] The smart terminal may include, not limited to, a mobile computer, a tablet, a personal digital assistant (Personal)

User equipment such as Digital Assistant, PDA), media player, smart TV, smart watch, smart glasses, smart bracelet. The application software is a client installed on the smart terminal, and the application software can access the data in the server through the connection between the smart terminal and the server. The connections between the smart terminal box servers include, but are not limited to, Wi-Fi connections, cellular connections, Bluetooth connections, and the like.

[0039] When the smart terminal needs to access the server through the application software, the smart terminal sends an access request to the server. , wherein the access request includes the first verification information. The receiving module 210 receives an access request sent by the smart terminal to the server through the application software. The first verification information may be one

[0040] The comparison module 220 is configured to compare the first verification information with the second verification information previously stored in the server.

[0041] The second verification information is stored in the server in advance. After receiving the first verification information, the comparison module 22 compares the first verification information with the second verification information previously stored in the server. When the user accesses the server using the application software, and the user does not log in to the application software, the server first verifies whether the application software identifier is supported by the server. If the server supports the server, the server further verifies whether the interface key value is supported by the server, and if If you get server support, you need to further verify that the digital signature is correct. If the above passes, the permission module 230 is called, and conversely, the transmission module 250 is called. When the user accesses the server using the application software and the user logs in to the application software, it is necessary to continue to verify whether the user identifier and the user session identifier are supported by the server. If so, the permission module 2 30 is invoked, and conversely, the sending module 250 is invoked.

[0042] The enabling module 230 is configured to allow the smart terminal to access the service data after the first verification information is consistent with the second verification information.

[0043] if the first verification information and the second verification information are consistent, the permission module 230 allows the smart terminal to access the industry Data. After accessing the service data, the service data in the server may be accessed according to a specific path, or the service data in the server may not be accessed according to a specific path. It can be understood that if the request path is not included in the access request, when the smart terminal accesses the server, the service data in the server is not accessed according to the specific path. If the access request further includes a request path, when the smart terminal accesses the server, the searching module 240 searches for the service data in the server according to the request path to improve the access efficiency.

[0044] The sending module 250 is configured to return the verification error information to the smart terminal after the first verification information is inconsistent with the second verification information.

[0045] The present application compares an access request sent by an intelligent terminal to a server through an application software, and compares the first verification information with a second verification previously stored in the server, where the first verification information is consistent with the second verification information, Allow smart terminals to access business data. The above method can greatly reduce the complexity of the verification process and improve the efficiency of verification.

[0046] In several embodiments provided by the present application, it should be understood that the disclosed system, apparatus and method

, can be achieved in other ways. For example, the device implementations described above are merely illustrative. For example, the division of the modules or units is only a logical function division, and the actual implementation may have another division manner, for example, multiple units or components may be used. Combined or can be integrated into another system, or some features can be ignored, or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be electrical, mechanical or otherwise.

[0047] The unit described as a separate component may or may not be physically distributed, and the component displayed as a unit may or may not be a physical unit, that is, may be located in one place, or may be distributed to multiple On the network unit. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the present embodiment.

[0048] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented either in the form of hardware or in the form of a software functional unit.

[0049] The integrated unit is implemented in the form of a software functional unit and sold or used as a standalone product 吋, can be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application, in essence or the contribution to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. The instructions include a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: a USB flash drive, a removable hard disk, a read only memory (ROM, Rea d-Only Memory), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. medium.

technical problem

Problem solution

Advantageous effects of the invention

Claims

Claim

[Claim 1] A server access verification method, comprising:

Receiving an access request sent by the smart terminal to the server by using the application software, where the access request is used to request service data from the server, where the access request includes a first verification message;

Comparing the first verification information with second verification information previously stored in the server;

If the first verification information is consistent with the second verification information, allowing the smart terminal to access the service data, searching for the service data in the server according to the request path; if the first verification If the information does not match the second verification information, the verification error information is returned to the smart terminal.

[Claim 2] The method according to claim 1, wherein when the user accesses the server by using the application software but the user does not log in to the application software, the first verification information includes application software. The identification, the interface key value, and the numerical signature, wherein the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

[Claim 3] The method according to claim 1, wherein when the user accesses the server by using the application software and the user logs in to the application software, the first verification information includes an application software identifier. An interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server, The user identifier is used to identify the identity of the user after logging in, and the user session identifier is used to identify the user session after logging in.

[Claim 4] A server access verification method, comprising:

Performing the first verification information with second verification information previously stored in the server Compared;

And if the first verification information is consistent with the second verification information, allowing the smart terminal to access the service data.

[Claim 5] The method according to claim 4, wherein the access request further includes a request path,

And if the first verification information is consistent with the second verification information, after the smart terminal is allowed to access the service data, the method further includes:

Finding the service data in the server according to the request path.

[Claim 6] The method according to claim 4, wherein when the user accesses the server by using the application software but the user does not log in to the application software, the first verification information includes application software The identification, the interface key value, and the numerical signature, wherein the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

[Claim 7] The method according to claim 4, wherein when the user accesses the server by using the application software and the user logs in to the application software, the first verification information includes an application software identifier An interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server, The user identifier is used to identify the identity of the user after logging in, and the user session identifier is used to identify the user session after logging in.

[Claim 8] The method according to claim 4, wherein the method further comprises:

If the first verification information does not coincide with the second verification information, the verification error information is returned to the smart terminal.

[Claim 9] A server access verification apparatus, comprising: a receiving module, a comparison module, and an enabling module,

The receiving module is configured to receive an access request sent by the smart terminal to the server by using the application software, where the access request is used to request service data from the server, where the access request includes first verification information; The comparing module is configured to compare the first verification information with second verification information pre-stored in the server;

The permission module is configured to allow the smart terminal to access the service data after the first verification information is consistent with the second verification information.

The device according to claim 9, wherein the device further comprises a searching module, wherein the searching module is configured to search for the service data in the server according to the request path.

The device according to claim 9, wherein when the user accesses the server by using the application software but the user does not log in to the application software, the first verification information includes an application software identifier and an interface key value. And the value signature, where the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server.

The device according to claim 9, wherein when the user accesses the server by using the application software and the user logs in to the application software, the first verification information includes an application software identifier, an interface key value, a numerical signature, a user identifier, and a user session identifier, where the application software identifier is used to identify the application software, and the interface key value is used to identify an interface of the application software to access the server, where the user identifier is used by The identity of the user is identified upon login, and the user session identifier is used to identify the user session upon login.

The device according to claim 9, wherein the device further comprises a sending module, wherein the sending module is configured to return to the smart terminal after the first verification information is inconsistent with the second verification information Verify the error message.