WO2021208744A1

WO2021208744A1 - Authorized login for application program

Info

Publication number: WO2021208744A1
Application number: PCT/CN2021/084644
Authority: WO
Inventors: 王坤; 丁靓子; 杨孝强
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2020-04-15
Filing date: 2021-03-31
Publication date: 2021-10-21
Also published as: CN111538965A; CN111538965B

Abstract

An authorized login method, device and system for an application program, the method comprising: after detecting an authorized login request, a first application invokes a pre-integrated preset software development kit (SDK) for a second application (S202). The first application acquires an authentication certificate for requesting authorized login from the second application by means of the SDK and by using a preset inter-process communication mode (S204). The first application sends the authentication certificate to a second server corresponding to the second application by means of the SDK, so that the second server verifies whether the authentication certificate is valid, and returns authorization data information when it is determined that the authentication certificate is valid (S206). The first application renders a corresponding authorization confirmation page on the basis of the received authorization data information by means of the SDK (S208). Once confirmation information of a user for the authorization confirmation page is received, a first server corresponding to the first application is triggered to perform a corresponding authorization login operation for the first application (S210).

Description

Authorized login of the application

Technical field

This document relates to the field of Internet technology, and in particular to an authorized login method, device and system for application programs.

Background technique

At present, with the advent of the Internet era, the Internet is widely used in people's daily study, work and life. People's daily affairs can be handled and presented through the Internet. At the same time, with the rapid development of the mobile Internet, various Internet service providers provide users with corresponding business services by developing their own applications. Users can install corresponding applications in their smartphones according to their actual needs, such as video applications. , Chat applications, shopping applications, payment applications, etc.

Among them, in order to improve the use security of the application, when the user requests to use the application, the user is required to first enter the account number and password to log in to the application. Further, considering that the user may forget the account or password, or is unwilling to enter the account or password, in order to ensure that the user can quickly complete the application login, the prior art provides a way to quickly log in using open authorization. Third-party applications, specifically, allow users to authorize third-party applications to access their account and password for login, so that when the target application is in the login state, the user can authorize the account and password to the third-party application to enable the third party The application completes quick login based on the account and password. However, in this process, it is necessary to first jump from the third-party application to the target application and then perform authorization, and then jump back from the target application to the third-party application after the authorization is successful. Make at least two jumps in between to complete the authorized login of the third-party application.

It can be seen from this that it is necessary to provide a faster and more convenient technical solution for application authorization login.

Summary of the invention

The purpose of one or more embodiments of this specification is to provide an authorized login method for an application program. The authorized login method of the application includes: after detecting the authorized login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorized login request includes an account that is authorized to use the second application. Information log in to the first application; the first application obtains the authentication credential for requesting authorization to log in from the second application through the SDK and using the preset inter-process communication method; the first application passes all The SDK sends the authentication credential to the second server corresponding to the second application, so that the second server verifies whether the authentication credential is legal, and when it is determined that the authentication credential is legal Return the authorization data information; the first application renders the corresponding authorization confirmation page based on the received authorization data information through the SDK; after receiving the user's confirmation information for the authorization confirmation page, triggers the The first server corresponding to the first application executes a corresponding authorized login operation for the first application.

The purpose of one or more embodiments of this specification is to provide an authorized login method for an application program. The authorization login method of the application includes: the second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated preset software development kit SDK of the second application, wherein the The authentication credential is obtained by the first application from the second application by invoking the SDK and using a preset inter-process communication method; the second server verifies the legality of the authentication credential to obtain the corresponding Legality verification result; if the legality verification result is that the authentication voucher is valid, return authorization data information to the first application, so that the first application renders based on the authorization data information through the SDK Corresponding authorization confirmation page, and trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

The purpose of one or more embodiments of this specification is to provide an authorized login device for application programs. The authorization login device of the application program includes: an SDK calling module, which after detecting the authorization login request, the first application calls the pre-integrated preset software development kit SDK of the second application, and the authorization login request includes open authorization to use A request for the account information of the second application to log in to the first application; an authentication credential obtaining module, the first application of which obtains from the second application through the SDK and using a preset inter-process communication method for requesting authorization to log in The authentication certificate; the authentication certificate sending module, the first application of which sends the authentication certificate to the second server corresponding to the second application through the SDK, so that the second server can verify Verifying whether the authentication certificate is legal, and returning authorization data information when it is determined that the authentication certificate is legal; an authorization page rendering module, whose first application passes through the SDK, based on the received authorization data information, Render the corresponding authorization confirmation page; the application authorization login module triggers the first server corresponding to the first application to perform the corresponding authorization for the first application after receiving the user's confirmation information for the authorization confirmation page Login operation.

The purpose of one or more embodiments of this specification is to provide an authorized login device for application programs. The authorization login device of the application includes: an authentication credential receiving module, the second server corresponding to the second application of the second application receives the authentication sent by the first application through the pre-integrated preset software development kit SDK of the second application. The authentication certificate, wherein the authentication certificate is obtained by the first application from the second application by invoking the SDK and using a preset inter-process communication mode; the authentication certificate verification module, the second server Perform a legality check on the authentication voucher to obtain a corresponding legality verification result; an authorization information sending module, if the legality verification result is that the authentication voucher is legal, it returns an authorization to the first application Data information, so that the first application renders the corresponding authorization confirmation page based on the authorization data information through the SDK, and triggers the first server corresponding to the first application to perform corresponding authorization for the first application Login operation.

The purpose of one or more embodiments of this specification is to provide an authorized login system for application programs. The authorized login system of the application includes a client, a first server corresponding to the first application, and a second server corresponding to the second application. Wherein, the client is installed with the first application and the second application. The first application, after detecting the authorization login request, invokes the pre-integrated preset software development kit SDK of the second application, the authorization login request includes the authorization to use the account information of the second application to log in to the first application Request; and, through the SDK and using a preset inter-process communication method, to obtain an authentication credential for requesting authorized login from the second application. The second server receives the authentication certificate sent by the first application through the SDK, verifies whether the authentication certificate is legal, and sends the authentication certificate to the first application when it is determined that the authentication certificate is legal. The application returns the authorization data information. The first application receives the authorization data information through the SDK, and renders the corresponding authorization confirmation page based on the authorization data information; and, after receiving the user's confirmation information for the authorization confirmation page, trigger The first server corresponding to the first application executes a corresponding authorized login operation for the first application.

The purpose of one or more embodiments of this specification is to provide an authorized login device for an application program, including: a processor; and a memory arranged to store computer-executable instructions. The computer-executable instructions, when executed, cause the processor to: after detecting an authorized login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorized login request includes open A request to authorize the use of the account information of the second application to log in to the first application; the first application obtains the authentication credential for requesting authorization to log in from the second application through the SDK and using a preset inter-process communication method; The first application sends the authentication credential to the second server corresponding to the second application through the SDK, so that the second server verifies whether the authentication credential is legal, and confirms When the authentication certificate is valid, the authorization data information is returned; the first application renders the corresponding authorization confirmation page based on the received authorization data information through the SDK; After the information is confirmed, the first server corresponding to the first application is triggered to perform a corresponding authorized login operation for the first application.

The purpose of one or more embodiments of this specification is to provide an authorized login device for an application program, including: a processor; and a memory arranged to store computer-executable instructions. When the computer-executable instructions are executed, the processor: the second server corresponding to the second application receives the authentication sent by the first application through the pre-integrated preset software development kit SDK of the second application. The authentication certificate, wherein the authentication certificate is obtained by the first application from the second application by invoking the SDK and using a preset inter-process communication method; the second server performs legal authentication on the authentication certificate The corresponding legality verification result is obtained; if the legality verification result is that the authentication certificate is legal, then the authorization data information is returned to the first application so that the first application can pass the SDK Rendering a corresponding authorization confirmation page based on the authorization data information, and triggering the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

The purpose of one or more embodiments of this specification is to provide a storage medium for storing computer-executable instructions. When the executable instruction is executed by the processor: after detecting the authorization login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorization login request includes the open authorization to use the second application. The account information of the application is a request to log in to the first application; the first application obtains the authentication credential for requesting authorization to log in from the second application through the SDK and using a preset inter-process communication method; The application sends the authentication voucher to the second server corresponding to the second application through the SDK, so that the second server verifies whether the authentication voucher is legal, and determines whether the authentication voucher is valid or not. When the credential is valid, the authorization data information is returned; the first application renders the corresponding authorization confirmation page based on the received authorization data information through the SDK; after receiving the user's confirmation information for the authorization confirmation page, The first server corresponding to the first application is triggered to perform a corresponding authorized login operation for the first application.

The purpose of one or more embodiments of this specification is to provide a storage medium for storing computer-executable instructions. When the executable instruction is executed by the processor: the second server corresponding to the second application receives the authentication certificate sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, where The authentication credential is obtained by the first application from the second application by invoking the SDK and using a preset inter-process communication method; the second server verifies the legality of the authentication credential, Obtain the corresponding legality verification result; if the legality verification result is that the authentication voucher is legal, then the authorization data information is returned to the first application, so that the first application passes the SDK based on the authorization The data information renders the corresponding authorization confirmation page, and triggers the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

Description of the drawings

In order to more clearly explain one or more embodiments of this specification or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, in the following description The accompanying drawings are only some embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor.

FIG. 1 is a schematic diagram of an application scenario of an authorized login system for an application program provided in one or more embodiments of this specification;

2 is a schematic diagram of the first flow chart of the authorized login method for an application provided by one or more embodiments of this specification;

FIG. 3 is a schematic diagram of the second flow chart of the application authorization login method provided by one or more embodiments of this specification;

FIG. 4 is a schematic diagram of a third flow chart of an application authorization login method provided by one or more embodiments of this specification;

FIG. 5 is a schematic diagram of the multi-terminal interaction process involved in the authorization login method for an application provided by one or more embodiments of this specification;

6 is a schematic flowchart of an authorization login method applied to an application program of a second server provided in one or more embodiments of this specification;

FIG. 7 is a schematic diagram of the first type of module composition of the authorized login device for application programs provided in one or more embodiments of this specification;

FIG. 8 is a schematic diagram showing the composition of a second type of module of the authorized login device for an application program provided in one or more embodiments of this specification; FIG.

Fig. 9 is a schematic structural diagram of an authorized login device for an application provided by one or more embodiments of this specification.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below in conjunction with the drawings in one or more embodiments of this specification. Description: Obviously, the described embodiments are only a part of one or more embodiments in this specification, rather than all the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of this document.

In the case of no conflict, one or more embodiments in this specification and features in the embodiments can be combined with each other. Hereinafter, one or more embodiments of this specification will be described in detail with reference to the drawings and in conjunction with the embodiments.

One or more embodiments of this specification provide an authorized login method, device, and system for an application program. The first application to be logged in invokes the pre-integrated preset software development kit SDK of the second application, and uses the preset process Communicate with the second application in the underlying communication mode to obtain the authentication credential for requesting authorized login from the second application; and then send the obtained authentication credential to the second server corresponding to the second application to trigger the second application. The second server verifies the validity of the authentication certificate, and after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then passes the SDK of the second application, based on the The authorization data information is rendered and the corresponding authorization confirmation page is displayed; based on the user's confirmation information for the authorization confirmation page, the first server corresponding to the first application is triggered to control the first application to complete the authorization login, which can realize the first application and the first application. The bottom layer communication between the two applications is to obtain the authentication credentials, so that the process of obtaining the authentication credentials and rendering the authorization confirmation page is completed in the first application, and there is no need to jump to the second application, eliminating the need for the first application and the second application. The multiple jumps between the two applications not only improve the user experience, but also simplify the business link for application authorization login and improve the authorization login success rate.

Figure 1 is a schematic diagram of an application scenario of an application authorization login system provided by one or more embodiments of this specification. As shown in Figure 1, the system includes a client, a first server corresponding to a first application, and a second application The corresponding second server. The client has a first application and a second application installed. The client can be a mobile terminal such as a smart phone or a tablet computer. The client can also be a terminal device such as a personal computer, the first server and the second server can be background servers for providing a certain business service, and the first server and the second server can be independent servers, It can also be a server cluster composed of multiple servers. The specific process of application authorization login is:

(1) After detecting the authorization login request for the first application, call the preset software development kit SDK of the second application pre-integrated in the data package of the first application and the authorization login request is for the second application;

Wherein, the above-mentioned authorized login request includes a request to openly authorize the use of the account information of the second application to log in to the first application. A plurality of different SDKs of the second application are integrated in the data package of the first application in advance, and according to the user's touch operation Determine the second application targeted by the authorized login request;

(2) The first application obtains the authentication credential for requesting authorized login from the second application through the SDK of the above-mentioned second application and using the preset inter-process communication method;

Among them, the aforementioned preset inter-process communication method may include any one of Messenger, AIDL, Content Provider, Broadcast Receiver, file sharing, and scoket; specifically, through the SDK of the second application and the preset inter-process communication method, the first Underlying communication between the application and the second application to obtain authentication credentials, so that there is no need to jump multiple times between the first application and the second application;

(3) The first application sends the obtained authentication credential to the second server through the SDK of the second application;

(4) After receiving the authentication certificate sent by the first application through the SDK of the second application, the second server verifies whether the authentication certificate is legal, and obtains the corresponding authentication certificate verification result;

Specifically, since the authentication certificate is signed by the second server using the private key and then distributed to the second application, the second server uses the corresponding public key to verify the obtained authentication certificate, if If the verification is passed, it is determined that the authentication certificate is legal;

(5) If the verification result of the above authentication certificate is that the authentication certificate is valid, the second server returns the authorization data information to the first application;

Wherein, the above-mentioned authorization data information includes the user authorization range, that is, the attribute field of the second application authorized by the user to the first application. For example, the user authorization range may be an avatar, account, nickname, etc.;

(6) The first application receives the authorization data information returned by the second server through the SDK of the second application, and renders the corresponding authorization confirmation page based on the authorization data information through the SDK of the second application;

For example, if the user authorization scope of the authorization data information is an avatar, account, and nickname, a prompt message for prompting the user to confirm whether to authorize the avatar, account, and nickname of the second application to the first application is displayed on the authorization confirmation page;

(7) After the first application detects the user's confirmation information for the authorization confirmation page, it requests the second server to obtain the authorization authentication code through the SDK of the second application;

Specifically, after detecting the user's click operation on the confirmation control of the first application authorized to log in to the first application using the second application, send an authorization authentication code acquisition request to the second server through the SDK of the second application;

(8) The first application sends the authorization authentication code returned by the second server to the first server;

(9) The first server requests the second server for the attribute information of the second application authorized to the first application based on the received authorization authentication code, and performs corresponding authorization for the first application based on the attribute information of the second application Login operation; wherein, the attribute information of the second application authorized to the first application is the value of the attribute field indicated by the authorization scope of the authorization data information.

During the authorization login process of the above-mentioned application, the first application to be logged in calls the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application at the bottom level. Obtain the authentication credential used to request authorized login from the second application; then send the obtained authentication credential to the second server corresponding to the second application to trigger the second server to verify the legality of the authentication credential , And after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then renders and displays the corresponding authorization confirmation page based on the authorization data information through the SDK of the second application; Then based on the user's confirmation information for the authorization confirmation page, the first server corresponding to the first application is triggered to control the first application to complete the authorization login, which can realize the underlying communication between the first application and the second application to obtain the authentication credentials , So that the process of obtaining authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, eliminating multiple jumps between the first application and the second application, which not only improves This improves the user experience, simplifies the business link for application authorization login, and improves the authorization login success rate.

FIG. 2 is a schematic diagram of the first flow chart of the authorization login method for an application provided by one or more embodiments of this specification. The method in FIG. 2 can be executed by the first application installed in the client shown in FIG. 1, as shown in FIG. As shown in 2, the method includes at least the following steps:

S202. After detecting the authorization login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, where the authorization login request includes the authorization to use the account information of the second application to log in to the first application. ask;

Among them, according to the actual needs of the business, multiple different SDKs of the second application are integrated in the data package of the first application in advance. Correspondingly, the user can select any second application as the target of open authorization to log in to the first application. application;

Specifically, after the user's login request for the first application is detected, the login interface of the first application is displayed, where multiple candidate application icons for requesting quick login are displayed in the login interface. If one target application icon is selected from the candidate application icons, it is determined that the account information of the second application corresponding to the target application icon is open to be authorized to log in to the first application; and an authorized login request is generated, that is, the user is in multiple candidate application icons The application corresponding to the selected target application icon is determined to be the second application to be opened for authorization, and the preset software development kit SDK of the second application is invoked to exchange information with the second application and the second server through the SDK;

For example, the first application is a travel application, and the second application is a social application. When the second application is in the login state, when logging in to the first application, the account information of the second application can be authorized to quickly log in to the first application. Specifically, The travel application calls the preset software development kit SDK of the pre-integrated social application to interact with the social application and the server corresponding to the social application through the SDK.

S204: The first application obtains an authentication credential for requesting authorized login from the second application through the SDK of the second application and using a preset inter-process communication method;

Among them, through the SDK of the second application and the preset inter-process communication mode, the first application and the second application can communicate with each other at the bottom to obtain the authentication credential, without awakening the second application, without jumping to the second application, and There is no need to open the interactive interface of the second application. Therefore, after the user confirms the authorization is detected, the process of calling the first application from the second application is also omitted.

S206: The first application sends the obtained authentication credential to the second server corresponding to the second application through the SDK of the second application, so that the second server verifies whether the authentication credential is legal, and determines whether the authentication credential is legal or not. Return the corresponding authorization data information when the authentication certificate is legal;

S208: The first application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK of the second application;

Wherein, the above authorization confirmation page contains prompt information for prompting the user to confirm whether to authorize the user authorization range corresponding to the authorization data information to the first application; specifically, open the authorization confirmation page directly in the first application without awakening the second application , No need to jump to the second application, and no need to open the interactive interface of the second application, therefore, after detecting that the user confirms the authorization, the process of transferring back to the first application from the second application is also omitted;

S210: After receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application;

Specifically, the first application obtains the authorization authentication code from the second server through the SDK of the second application, and sends the obtained authorization authentication code to the first server, and the first server sends the authorization authentication code to the second server based on the authorization authentication code. The second server obtains the target login information required to authorize the login to the first application, and authorizes the login to the first application based on the target login information.

In one or more embodiments of this specification, the first application to be logged in invokes the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application at the bottom level. The second application obtains the authentication credential used to request authorized login; then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to verify the legality of the authentication credential, And after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then renders and displays the corresponding authorization confirmation page based on the authorization data information through the SDK of the second application; Based on the user's confirmation information for the authorization confirmation page, the first server corresponding to the first application is triggered to control the first application to complete the authorization login, which enables the underlying communication between the first application and the second application to obtain authentication credentials, In this way, the process of obtaining authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, eliminating multiple jumps between the first application and the second application, which not only improves The user experience also simplifies the business link for application authorization login, and improves the authorization login success rate.

Among them, for the acquisition process of the authentication certificate used to request authorization to log in from the second server, as shown in FIG. The second application obtains the authentication credential used to request authorized login, which specifically includes:

S2041: The first application sends an authentication credential acquisition request to the second application through the SDK of the second application and using a preset inter-process communication method;

S2042: The first application receives the authentication credential for requesting authorized login that is returned by the second application using the preset inter-process communication method through the SDK of the second application.

The first application uses the SDK of the second application pre-integrated in its data packet, and uses the preset inter-process communication method to communicate with the second application at the bottom, eliminating the need for multiple times between the first application and the second application The process of jumping.

In order to ensure the security of the authorization login process of the first application, as shown in FIG. 4, the above S210, after receiving the user's confirmation information for the authorization confirmation page, triggers the first server corresponding to the first application to respond to the first application. An application performs corresponding authorized login operations, including:

S2101: After receiving the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code acquisition request to the second server through the SDK of the second application;

Specifically, after receiving the authorization authentication code acquisition request of the first application, the second server assigns the corresponding authorization authentication code authcode to the first application, so that the first application requests authorization to log in based on the authorization authentication code authcode. The login information of the target.

S2102: The first application receives the authorization authentication code returned by the second server through the SDK of the second application;

S2103: Based on the obtained authorization authentication code, the first application triggers the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.

Specifically, for the process of performing authorization login for the first application based on the authorization authentication code, in S2103, the first application triggers the first server corresponding to the first application to perform the corresponding authorization login for the first application based on the obtained authorization authentication code. Operations, including:

Step 1: The first application sends the obtained authorization authentication code to the first server corresponding to the first application, so that the first server sends the authorization authentication code to the second server based on the second server The returned authorization token and digital identity perform a corresponding authorized login operation for the first application;

The first application sends the obtained authorization authentication code authcode to the first server. After receiving the authorization authentication code, the first server sends the authorization authentication code to the second server; correspondingly, the second server After receiving the authorization authentication code, verify the authenticity of the authorization authentication code, and if it is determined that the authorization authentication code is credible, return the corresponding authorization token accesstoken and the digital identity openID to the first server; correspondingly Yes, the first server performs a corresponding authorized login operation on the first application based on the received authorization token and digital identity;

The first server creates and maps an application login account for the first application based on the received digital identity openID; and based on the received authorization token accesstoken, obtains the target login information required to authorize the login to the first application. The target login information includes attribute information of the second application authorized to the first application, for example, the avatar, account, and nickname of the second application; and authorization to log in to the first application based on the acquired target login information.

Step 2: The first application receives and displays the authorized login result information returned by the first server;

After the first server completes the authorization login of the first application based on the attribute information of the authorization field of the second application, it returns the authorization login result information to the first application, so that the client can display the information used to signify the successful login of the first application. Prompt information.

Further, considering that there may be a certain security risk in the process of calling the second application by the first application, in order to improve the security of calling the second application, based on this, in the above S202, the first application calls the pre-integrated pre-integrated second application. Before the software development kit SDK is set, it also includes: determining the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented; 2. The preset inter-process communication mode corresponding to the security requirement level of the application.

Specifically, according to the business security level of the second application, the corresponding inter-process communication method is selected. For example, for the situation that the security requirement level of the second application is relatively high, the inter-process communication method with identity verification function is adopted as the preliminary Set the method of inter-process communication. For example, if the security requirement level of the second application reaches the preset security level, AIDL is determined as the preset inter-process communication method; if the security requirement level of the second application is lower than the preset security level, broadcastreceiver , Or contentprovider is determined as the preset inter-process communication method.

Correspondingly, if the security requirement level of the second application reaches the preset security level, in S2041, the first application sends the authentication certificate to the second application through the SDK of the second application and using the preset inter-process communication method. The acquisition request specifically includes: the first application sends an authentication credential acquisition request to the second application through the SDK of the second application and uses a preset inter-process communication method, so that the second application triggers the corresponding second server to contact the second application. An application performs credibility verification and returns an authentication certificate after the credibility verification is passed.

In a specific embodiment, as shown in FIG. 5, a schematic diagram of the multi-terminal interaction process in the application authorization login method is provided, which specifically includes:

S501: After detecting the authorized login request, the first application invokes the pre-integrated SDK of the second application;

S502: The first application obtains an authentication credential for requesting authorized login from the second application through the SDK of the second application and using a preset inter-process communication method;

S503: The first application sends the obtained authentication credential to the second server through the SDK of the second application.

S504: After receiving the authentication certificate sent by the first application through the SDK of the second application, the second server verifies whether the authentication certificate is legal, and obtains a corresponding authentication certificate verification result;

S505: If the verification result of the authentication certificate is that the authentication certificate is valid, the second server returns authorization data information to the first application; specifically, the first application receives the authorization data returned by the second server through the SDK of the second application information;

S506: The first application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK of the second application;

S507: After detecting the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code acquisition request to the second server through the SDK of the second application;

S508: After receiving the authorization authentication code acquisition request, the second server returns a corresponding authorization authentication code to the first application; specifically, the first application receives the authorization authentication code returned by the second server through the SDK of the second application;

S509: The first application sends the authorization authentication code received through the SDK of the second application to the first server.

S510: The first server sends the authorization authentication code of the first application to the second server.

S511: The second server performs a credibility check on the received authorization authentication code, and obtains a corresponding credibility check result;

S512: If it is determined that the authorization authentication code is credible, the second server returns a corresponding authorization token and digital identity to the first server;

S513: The first server performs a corresponding authorized login operation on the first application based on the received authorization token and digital identity;

S514: The first server returns the authorized login success information to the first application, so that the first application displays the authorized login success information.

In one or more embodiments of this specification, the authorized login method of the application program, the first application to be logged in calls the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application. The application performs underlying communication to obtain the authentication credential for requesting authorized login from the second application; and then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to authenticate the authentication. After verifying the validity of the authorization certificate, and verifying that the authentication certificate is legal on the second server, the first application receives the authorization data information returned by the second server, and then renders and displays the authorization data information through the SDK of the second application Corresponding authorization confirmation page; based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the bottom layer between the first application and the second application can be realized Communication to obtain the authentication credentials, so that the process of obtaining the authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, which saves much effort between the first application and the second application. The second jump not only improves the user experience, but also simplifies the business link for application authorization login and improves the authorization login success rate.

Corresponding to the application authorization login method described in Figures 2 to 5, based on the same technical concept, one or more embodiments of this specification also provide an application authorization login method. Figure 6 is one or more of the application authorization login methods. A schematic flow chart of an application authorization login method provided by one embodiment. The method in FIG. 6 can be executed by the second server corresponding to the second application shown in FIG. 1. As shown in FIG. 6, the method includes at least the following steps :

S602. The second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated preset software development kit SDK of the second application, where the authentication credential is the authentication credential sent by the first application by calling The SDK is obtained from the second application using a preset inter-process communication method;

S604: The second server performs a legality check on the obtained authentication certificate, and obtains a corresponding legality verification result.

S606: If the above-mentioned legality verification result is that the authentication certificate is legal, return authorization data information to the first application, so that the first application renders the corresponding authorization confirmation page based on the authorization data information through the SDK of the second application, and triggers the first application. The first server corresponding to an application performs a corresponding authorized login operation for the first application.

In one or more embodiments of this specification, the first application to be logged in invokes the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application at the bottom level. The second application obtains the authentication credential used to request authorized login; then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to verify the legality of the authentication credential, And after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then renders and displays the corresponding authorization confirmation page based on the authorization data information through the SDK of the second application; Based on the user's confirmation information for the authorization confirmation page, the first server corresponding to the first application is triggered to control the first application to complete the authorization login, which can realize the underlying communication between the first application and the second application to obtain the authentication credentials, In this way, the process of obtaining authentication credentials and rendering of the authorization confirmation page is completed in the first application, without jumping to the second application, eliminating multiple jumps between the first application and the second application, which not only improves The user experience also simplifies the business link for application authorization login, and improves the authorization login success rate.

Wherein, in the above-mentioned S606, if the legality verification result is that the authentication certificate is legal, after returning the authorization data information to the first application, the method further includes: the second server receiving the authorization authentication sent by the first application through the SDK of the second application Code acquisition request; in response to the received authorization authentication code acquisition request, the second server returns the corresponding authorization authentication code to the first application, so that the first application is based on the authorization authentication code received through the SDK of the second application, The first server corresponding to the first application is triggered to perform a corresponding authorized login operation for the first application.

Wherein, after the second server returns the corresponding authorization authentication code to the first application in response to the received authorization authentication code acquisition request, the method further includes: the second server receives the authorization authentication code sent by the first server; second The server verifies the credibility of the received authorization authentication code, and obtains the corresponding credibility verification result; if the credibility verification result is that the verification is passed, the authorization token and the digital identity are returned to the first server, In order to enable the first server to perform a corresponding authorized login operation for the first application based on the received authorization token and digital identity.

Wherein, the above-mentioned preset inter-process communication method is determined by the following method: determining the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented; and communicating methods among multiple alternative processes Select the preset inter-process communication method corresponding to the above-mentioned security requirement level.

This embodiment in this specification is based on the same inventive concept as the previous embodiment in this specification. Therefore, the specific implementation of this embodiment can refer to the implementation of the aforementioned application authorization login method, and the repetition will not be repeated.

Corresponding to the application authorization login method described in Figures 2 to 5 above, based on the same technical concept, one or more embodiments of this specification also provide an application authorization login device. Figure 7 is one or more of this specification. A schematic diagram of the module composition of an application authorization login device provided in one embodiment. The device is set on the client side and is used to execute the application authorization login method described in FIGS. 2 to 5. As shown in FIG. 7, the device includes:

The SDK invocation module 701, after detecting the authorization login request, the first application invokes the pre-integrated preset software development kit SDK of the second application. The authorization login request includes the authorization to use the account information of the second application to log in the first application. An application request;

An authentication credential obtaining module 702, in which the first application obtains an authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method;

Authentication voucher sending module 703, wherein the first application sends the authentication voucher to the second server corresponding to the second application through the SDK, so that the second server verifies the authentication Whether the authorization certificate is legal, and return authorization data information when it is determined that the authentication certificate is legal;

An authorization page rendering module 704, the first application of which renders a corresponding authorization confirmation page based on the received authorization data information through the SDK;

The application authorization login module 705, after receiving the user's confirmation information for the authorization confirmation page, triggers the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

Optionally, the authentication credential obtaining module 702 is configured to: the first application sends an authentication credential obtaining request to the second application through the SDK and using a preset inter-process communication method; Through the SDK, the application receives the authentication credential for requesting authorized login returned by the second application using the preset inter-process communication mode.

Optionally, the application authorization login module 705, which: after receiving the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code to the second server through the SDK Obtaining request; the first application receives the authorization authentication code returned by the second server through the SDK; the first application triggers the first server corresponding to the first application based on the authorization authentication code Perform a corresponding authorized login operation for the first application.

Optionally, the application authorization login module 705, wherein: the first application sends the authorization authentication code to the first server corresponding to the first application, so that the first server will The authorization authentication code is sent to the second server, and a corresponding authorized login operation is performed for the first application based on the authorization token and digital identity returned by the second server; the first application receives and displays The authorized login result information returned by the first server.

Optionally, the above-mentioned apparatus further includes an inter-process communication determining module, which: determines the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented; In the inter-process communication mode, a preset inter-process communication mode corresponding to the security requirement level is selected.

Optionally, if the security requirement level of the second application reaches a preset security level, the authentication credential acquisition module 702, which: the first application passes the SDK and uses a preset inter-process communication method , Sending an authentication voucher acquisition request to the second application, so that the second application triggers the corresponding second server to verify the credibility of the first application, and return the authentication after the credibility verification is passed. Certificate of authority.

In one or more embodiments of this specification, in the authorized login device for an application program, the first application to be logged in calls the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application. The application performs underlying communication to obtain the authentication credential for requesting authorized login from the second application; and then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to authenticate the authentication. After verifying the validity of the authorization certificate, and verifying that the authentication certificate is legal on the second server, the first application receives the authorization data information returned by the second server, and then renders and displays the authorization data information through the SDK of the second application Corresponding authorization confirmation page; based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the bottom layer between the first application and the second application can be realized Communication to obtain the authentication credentials, so that the process of obtaining the authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, which saves much effort between the first application and the second application. The second jump not only improves the user experience, but also simplifies the business link for application authorization login and improves the authorization login success rate.

Corresponding to the application authorization login method described in FIGS. 2 to 5, based on the same technical concept, one or more embodiments of this specification also provide an application authorization login device. A schematic diagram of the module composition of an application authorization login device provided by one embodiment, the device is set on the second server corresponding to the second application, and is used to execute the application authorization login method described in FIGS. 2 to 5, as shown in FIG. 8 As shown, the device includes:

In the authentication voucher receiving module 801, the second server corresponding to the second application receives the authentication voucher sent by the first application through the pre-integrated preset software development kit SDK of the second application, wherein the authentication The right certificate is obtained by the first application from the second application by calling the SDK and using a preset inter-process communication method;

An authentication certificate verification module 802, the second server of which performs a legality check on the authentication certificate, and obtains a corresponding legality verification result;

The authorization information sending module 803, if the legality verification result is that the authentication credential is legal, it returns authorization data information to the first application, so that the first application is based on the authorization data through the SDK The information renders the corresponding authorization confirmation page, and triggers the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

Optionally, the above-mentioned apparatus further includes an authorization authentication code sending module, wherein: the second server receives the authorization authentication code acquisition request sent by the first application through the SDK; the second server responds to the The authorization authentication code acquisition request returns the corresponding authorization authentication code to the first application, so that the first application triggers the first application corresponding to the first application based on the authorization authentication code received through the SDK. The server performs a corresponding authorized login operation for the first application.

Optionally, the above device further includes an authorization token sending module, wherein: the second server receives the authorization authentication code sent by the first server; the second server trusts the authorization authentication code To obtain the corresponding credibility verification result; if the credibility verification result is passed, the authorization token and the digital identity are returned to the first server, so that the first server is based on The authorization token and the digital identity perform a corresponding authorized login operation for the first application.

Optionally, the preset inter-process communication mode is determined by the following method: determining the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented; Among the alternative inter-process communication methods, a preset inter-process communication method corresponding to the security requirement level is selected.

It should be noted that the embodiment of the application authorization login device in this specification is based on the same inventive concept as the embodiment of the application authorization login method in this specification, so the specific implementation of this embodiment can refer to the aforementioned corresponding application The implementation of the authorized login method of the program, the repetition will not be repeated.

Corresponding to the application authorization login method described in FIGS. 2 to 6 above, based on the same technical concept, one or more embodiments of this specification also provide an application authorization login system for executing FIGS. 2 to 6 The described application authorization login method, the system includes a client, a first server corresponding to the first application, and a second server corresponding to the second application. The client is installed with the first application and the second application. The first application, after detecting the authorization login request, invokes the pre-integrated preset software development kit SDK of the second application, the authorization login request includes the authorization to use the account information of the second application to log in to the first application Request; and, through the SDK and using a preset inter-process communication method, to obtain an authentication credential for requesting authorized login from the second application. The second server receives the authentication certificate sent by the first application through the SDK, verifies whether the authentication certificate is legal, and sends the authentication certificate to the first application when it is determined that the authentication certificate is legal. The application returns the authorization data information. The first application receives the authorization data information through the SDK, and renders the corresponding authorization confirmation page based on the authorization data information; and, after receiving the user's confirmation information for the authorization confirmation page, trigger The first server corresponding to the first application executes a corresponding authorized login operation for the first application.

In the authorized login system of the application program in one or more embodiments of this specification, the first application to be logged in calls the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application. The application performs underlying communication to obtain the authentication credential for requesting authorized login from the second application; and then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to authenticate the authentication. After verifying the validity of the authorization certificate, and verifying that the authentication certificate is legal on the second server, the first application receives the authorization data information returned by the second server, and then renders and displays the authorization data information through the SDK of the second application Corresponding authorization confirmation page; based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the bottom layer between the first application and the second application can be realized Communication to obtain the authentication credentials, so that the process of obtaining the authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, which saves much effort between the first application and the second application. The second jump not only improves the user experience, but also simplifies the business link for application authorization login and improves the authorization login success rate.

It should be noted that the embodiment of the application authorization login system in this specification and the embodiment of the application authorization login method in this specification are based on the same inventive concept, so the specific implementation of this embodiment can refer to the aforementioned corresponding application The implementation of the authorized login method of the program, the repetition will not be repeated.

Further, corresponding to the methods shown in FIGS. 2 to 5, based on the same technical concept, one or more embodiments of this specification also provide an application authorization login device, which is used to execute the above application The authorized login method is shown in Figure 9.

Authorized login devices for application programs may have relatively large differences due to different configurations or performances, and may include one or more processors 901 and a memory 902, and the memory 902 may store one or more stored application programs or data. Among them, the memory 902 may be short-term storage or persistent storage. The application program stored in the memory 902 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions to authorize the login device for the application program. Furthermore, the processor 901 may be configured to communicate with the memory 902, and execute a series of computer-executable instructions in the memory 902 on the device authorized to log in to the application program. The authorized login device of the application program may also include one or more power sources 903, one or more wired or wireless network interfaces 904, one or more input and output interfaces 905, one or more keyboards 906, and so on.

In a specific embodiment, the authorized login device of the application program includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more modules , And each module may include a series of computer-executable instructions in the device authorized to log in to the application program, and is configured to be executed by one or more processors. The one or more programs include computer-executable instructions for performing the following : After detecting the authorization login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorization login request includes a request to openly authorize the use of the account information of the second application to log in to the first application; The first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using the preset inter-process communication mode; the first application sends the authentication certificate to the second application through the SDK The second server corresponding to the application sends the authentication credential, so that the second server verifies whether the authentication credential is legal, and returns authorization data information when it is determined that the authentication credential is legal; An application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK; after receiving the user's confirmation information for the authorization confirmation page, triggers the first service corresponding to the first application The terminal performs a corresponding authorized login operation for the first application.

Optionally, when the computer-executable instructions are executed, the first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method, including: The first application sends an authentication credential acquisition request to the second application through the SDK and uses a preset inter-process communication method; the first application receives the second application using the SDK through the SDK The authentication credential used to request authorized login returned by the preset inter-process communication method.

Optionally, when the computer-executable instruction is executed, after receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to execute the corresponding authorization for the first application The login operation includes: after receiving the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code acquisition request to the second server through the SDK; the first application passes The SDK receives the authorization authentication code returned by the second server; the first application triggers the first server corresponding to the first application to execute the corresponding authentication code for the first application based on the authorization authentication code Authorize login operations.

Optionally, when the computer-executable instruction is executed, the first application triggers the first server corresponding to the first application to perform a corresponding authorized login operation for the first application based on the authorization authentication code, The method includes: the first application sends the authorization authentication code to a first server corresponding to the first application, so that the first server sends the authorization authentication code to the second server, And perform a corresponding authorized login operation for the first application based on the authorization token and digital identity returned by the second server; the first application receives and displays the authorized login result information returned by the first server .

Optionally, when the computer-executable instructions are executed, before the first application invokes the pre-integrated preset software development kit SDK of the second application, the instructions further include: according to the invocation of the business service of the second application The object attribute information determines the security requirement level of the second application; among a plurality of candidate inter-process communication modes, a preset inter-process communication mode corresponding to the security requirement level is selected.

Optionally, when the computer-executable instructions are executed, if the security requirement level of the second application reaches a preset security level, the first application passes the SDK and uses a preset inter-process communication method to The second application sending an authentication credential acquisition request includes: the first application sends an authentication credential acquisition request to the second application through the SDK and using a preset inter-process communication method, so that the first application The second application triggers the corresponding second server to perform credibility verification on the first application, and returns an authentication certificate after the credibility verification is passed.

For the authorized login device of the application program in one or more embodiments of this specification, the first application to be logged in calls the pre-integrated preset software development kit SDK of the second application, and uses the preset inter-process communication method to communicate with the second application. The application performs underlying communication to obtain the authentication credential for requesting authorized login from the second application; and then sends the obtained authentication credential to the second server corresponding to the second application to trigger the second server to authenticate the authentication. After verifying the validity of the authorization certificate, and verifying that the authentication certificate is legal on the second server, the first application receives the authorization data information returned by the second server, and then renders and displays the authorization data information through the SDK of the second application Corresponding authorization confirmation page; based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the bottom layer between the first application and the second application can be realized Communication to obtain the authentication credentials, so that the process of obtaining the authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, which saves much effort between the first application and the second application. The second jump not only improves the user experience, but also simplifies the business link for application authorization login and improves the authorization login success rate.

In another specific embodiment, the authorized login device of the application program includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more programs. Modules, and each module may include a series of computer-executable instructions in the device authorized to log in to the application program, and is configured to be executed by one or more processors. The one or more programs include the following computer-executable instructions: Instruction: The second server corresponding to the second application receives the authentication certificate sent by the first application through the pre-integrated preset software development kit SDK of the second application, where the authentication certificate is the first application Obtained from the second application by invoking the SDK and using a preset inter-process communication method; the second server verifies the legality of the authentication voucher to obtain the corresponding legality verification result; If the legality verification result is that the authentication voucher is legal, the authorization data information is returned to the first application, so that the first application renders the corresponding authorization confirmation page based on the authorization data information through the SDK, and The first server corresponding to the first application is triggered to perform a corresponding authorized login operation for the first application.

Optionally, when the computer executable instruction is executed, after returning the authorization data information to the first application, the method further includes: the second server receiving the authorization authentication code sent by the first application through the SDK Acquisition request; in response to the authorization authentication code acquisition request, the second server returns a corresponding authorization authentication code to the first application, so that the first application is based on the authorization received through the SDK The authentication code triggers the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.

Optionally, when the computer executable instruction is executed, after the second server returns a corresponding authorization authentication code to the first application in response to the authorization authentication code acquisition request, it further includes: the first application The second server receives the authorization authentication code sent by the first server; the second server verifies the credibility of the authorized authentication code to obtain the corresponding credibility verification result; if the credibility is verified If the result is that the verification is passed, an authorization token and a digital identity are returned to the first server, so that the first server executes corresponding actions on the first application based on the authorization token and the digital identity. Authorized login operation.

Optionally, when the computer-executable instructions are executed, the preset inter-process communication mode is determined in the following way: determining the second The security requirement level of the application; among the multiple alternative inter-process communication modes, a preset inter-process communication mode corresponding to the security requirement level is selected.

It should be noted that the embodiment of the application authorization login device in this specification and the embodiment of the application authorization login method in this specification are based on the same inventive concept, so the specific implementation of this embodiment can refer to the aforementioned corresponding application The implementation of the authorized login method of the program, the repetition will not be repeated.

Further, corresponding to the methods shown in FIGS. 2 to 5, based on the same technical concept, one or more embodiments of this specification also provide a storage medium for storing computer-executable instructions, a specific implementation In an example, the storage medium may be a U disk, an optical disk, a hard disk, etc., when the computer executable instructions stored in the storage medium are executed by the processor, the following process can be realized: after the authorized login request is detected, the first application calls The preset software development kit SDK of the integrated second application, the authorization login request includes a request to open the authorization to use the account information of the second application to log in to the first application; the first application passes through the SDK and uses the preset process By means of inter-communication, obtaining an authentication credential for requesting authorized login from the second application; the first application sends the authentication credential to the second server corresponding to the second application through the SDK, So that the second server verifies whether the authentication certificate is legal, and returns authorization data information when it is determined that the authentication certificate is legal; the first application passes through the SDK and is based on the received authorization Data information, rendering the corresponding authorization confirmation page; after receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the first application uses the SDK and uses a preset inter-process communication method to obtain information from the second application for requesting authorization to log in The authentication credential includes: the first application sends an authentication credential acquisition request to the second application through the SDK and using a preset inter-process communication mode; the first application receives the authentication credential through the SDK The second application uses the authentication credential returned by the preset inter-process communication method for requesting authorized login.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, after receiving confirmation information from the user for the authorization confirmation page, trigger the first server corresponding to the first application to respond to the The first application performs the corresponding authorization login operation, including: after receiving the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code acquisition request to the second server through the SDK The first application receives the authorization authentication code returned by the second server through the SDK; the first application triggers the first server corresponding to the first application to respond to the authorization authentication code based on the authorization authentication code The first application executes the corresponding authorized login operation.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the first application triggers the first server corresponding to the first application to target the first application based on the authorization authentication code. Performing the corresponding authorized login operation includes: the first application sends the authorization authentication code to the first server corresponding to the first application, so that the first server sends the authorization authentication code to The second server performs a corresponding authorized login operation for the first application based on the authorization token and digital identity returned by the second server; the first application receives and displays the first service Authorized login result information returned by the terminal.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, before the first application invokes the pre-integrated preset software development kit SDK of the second application, the method further includes: according to the second application The attribute information of the calling object to which the business service is oriented to determine the security requirement level of the second application; among a plurality of alternative inter-process communication methods, a preset inter-process communication method corresponding to the security requirement level is selected .

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, if the security requirement level of the second application reaches a preset security level, the first application passes the SDK and uses the preset security level. Supposing an inter-process communication mode, sending an authentication voucher acquisition request to the second application includes: the first application sends an authentication voucher acquisition to the second application through the SDK and using a preset inter-process communication mode Request, so that the second application triggers the corresponding second server to perform credibility verification on the first application, and returns an authentication certificate after the credibility verification is passed.

When the computer-executable instructions stored in the storage medium in one or more embodiments of this specification are executed by the processor, the first application to be logged in calls the pre-integrated second application's preset software development kit SDK, and uses the pre-integrated software development kit SDK. Suppose that the inter-process communication mode communicates with the second application at the bottom level to obtain the authentication credential for requesting authorized login from the second application; and then send the obtained authentication credential to the second server corresponding to the second application to The second server is triggered to verify the validity of the authentication certificate, and after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then passes the SDK of the second application, Render and display the corresponding authorization confirmation page based on the authorization data information; and then based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the first application can be realized Perform bottom-level communication with the second application to obtain authentication credentials, so that the process of obtaining authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, eliminating the need for the first application The multiple jumps with the second application not only improve the user experience, but also simplify the business link for application authorization login and improve the authorization login success rate.

In another specific embodiment, the storage medium may be a U disk, an optical disk, a hard disk, etc., and the computer executable instructions stored in the storage medium can implement the following process when executed by the processor:

The second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, where the authentication credential is that the first application invokes The SDK is obtained from the second application by using a preset inter-process communication method;

The second server performs a legality check on the authentication certificate, and obtains a corresponding legality verification result;

If the legality verification result is that the authentication voucher is legal, return authorization data information to the first application so that the first application can render a corresponding authorization confirmation page based on the authorization data information through the SDK , And trigger the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, after returning authorization data information to the first application, the method further includes: the second server receiving the first application through the The authorization authentication code acquisition request sent by the SDK; the second server, in response to the authorization authentication code acquisition request, returns the corresponding authorization authentication code to the first application, so that the first application is based on the The authorization authentication code received by the SDK triggers the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, after the second server responds to the authorization authentication code acquisition request and returns the corresponding authorization authentication code to the first application , Further including: the second server receiving the authorization authentication code sent by the first server; the second server performing credibility verification on the authorization authentication code to obtain a corresponding credibility verification result; If the credibility verification result is that the verification is passed, the authorization token and the digital identity are returned to the first server, so that the first server is directed to the first server based on the authorization token and the digital identity. The first application executes a corresponding authorized login operation.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the preset inter-process communication mode is determined in the following manner: according to the calling object attribute of the business service of the second application Information to determine the security requirement level of the second application; among a plurality of candidate inter-process communication modes, a preset inter-process communication mode corresponding to the security requirement level is selected.

When the computer-executable instructions stored in the storage medium in one or more embodiments of this specification are executed by the processor, the first application to be logged in invokes the pre-integrated second application's preset software development kit SDK, and uses the preset software development kit SDK. Suppose that the inter-process communication mode communicates with the second application at the bottom level to obtain the authentication credential for requesting authorized login from the second application; and then send the obtained authentication credential to the second server corresponding to the second application to The second server is triggered to verify the validity of the authentication certificate, and after the second server verifies that the authentication certificate is legal, the first application receives the authorization data information returned by the second server, and then passes the SDK of the second application, Render and display the corresponding authorization confirmation page based on the authorization data information; and then based on the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to control the first application to complete the authorization login, so that the first application can be realized Perform bottom-level communication with the second application to obtain authentication credentials, so that the process of obtaining authentication credentials and rendering the authorization confirmation page is completed in the first application, without jumping to the second application, eliminating the need for the first application The multiple jumps with the second application not only improve the user experience, but also simplify the business link for application authorization login and improve the authorization login success rate.

It should be noted that the embodiment of the storage medium in this specification and the embodiment of the application authorization login method in this specification are based on the same inventive concept, so the specific implementation of this embodiment can refer to the aforementioned corresponding application authorization login The implementation of the method will not repeat the repetition.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims can be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

In the 1990s, the improvement of a technology can be clearly distinguished between hardware improvements (for example, improvements in circuit structures such as diodes, transistors, switches, etc.) or software improvements (improvements in method flow). However, with the development of technology, the improvement of many methods and processes of today can be regarded as a direct improvement of the hardware circuit structure. Designers almost always get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be realized by the hardware entity module. For example, a programmable logic device (Programmable Logic Device, PLD) (such as a Field Programmable Gate Array (Field Programmable Gate Array, FPGA)) is such an integrated circuit whose logic function is determined by the user's programming of the device. It is programmed by the designer to "integrate" a digital system on a PLD without requiring the chip manufacturer to design and manufacture a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly realized with "logic compiler" software, which is similar to the software compiler used in program development and writing, but before compilation The original code must also be written in a specific programming language, which is called Hardware Description Language (HDL), and there is not only one type of HDL, but many types, such as ABEL (Advanced Boolean Expression Language) , AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HD Cal, JHDL (Java Hardware Description Language), Lava, Lola, My HDL, PALASM, RHDL (Ruby Hardware Description), etc., currently the most Commonly used are VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be clear to those skilled in the art that just a little bit of logic programming of the method flow in the above-mentioned hardware description languages and programming into an integrated circuit can easily obtain the hardware circuit that implements the logic method flow.

The controller can be implemented in any suitable manner. For example, the controller can take the form of, for example, a microprocessor or a processor and a computer-readable medium storing computer-readable program codes (such as software or firmware) executable by the (micro)processor. , Logic gates, switches, application specific integrated circuits (ASICs), programmable logic controllers and embedded microcontrollers. Examples of controllers include but are not limited to the following microcontrollers: ARC625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicon Labs C8051F320, the memory controller can also be implemented as a part of the control logic of the memory. Those skilled in the art also know that, in addition to implementing the controller in a purely computer-readable program code manner, it is entirely possible to program the method steps to make the controller use logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded logic. The same function can be realized in the form of a microcontroller or the like. Therefore, such a controller can be regarded as a hardware component, and the devices included in it for realizing various functions can also be regarded as a structure within the hardware component. Or even, the device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The systems, devices, modules, or units illustrated in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cell phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or Any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various units and described separately. Of course, when one or more of this specification is implemented, the functions of each unit can be implemented in the same one or more software and/or hardware.

Those skilled in the art should understand that one or more of the embodiments in this specification can be provided as a method, a system, or a computer program product. Therefore, one or more of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more of this specification can adopt computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. form.

One or more of this specification is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to one or more embodiments of this specification. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are used to generate It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory in computer readable media, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). Memory is an example of computer readable media.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

One or more of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more of this specification can also be practiced in a distributed computing environment. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The above description is only one or more embodiments of this specification, and is not used to limit one or more of this specification. For those skilled in the art, one or more of this specification can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within one or more of the spirit and principle of this specification shall be included in the scope of one or more of the claims of this specification.

Claims

An authorized login method for an application program, including:

After detecting the authorized login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorized login request includes a request to open the authorization to use the account information of the second application to log in to the first application;

The first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method;

The first application sends the authentication credential to the second server corresponding to the second application through the SDK, so that the second server verifies whether the authentication credential is legal, and confirms Return authorization data information when the authentication certificate is legal;

The first application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK;

After receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.
The method according to claim 1, wherein the first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method, comprising:

The first application sends an authentication credential acquisition request to the second application through the SDK and using a preset inter-process communication method;

Through the SDK, the first application receives an authentication credential for requesting authorized login that is returned by the second application using the preset inter-process communication method.
The method according to claim 1, wherein after receiving the user's confirmation information for the authorization confirmation page, triggering the first server corresponding to the first application to perform corresponding authorization for the first application Login operations, including:

After receiving the user's confirmation information for the authorization confirmation page, the first application sends an authorization authentication code acquisition request to the second server through the SDK;

The first application receives the authorization authentication code returned by the second server through the SDK;

The first application triggers the first server corresponding to the first application to perform a corresponding authorized login operation for the first application based on the authorization authentication code.
The method according to claim 3, wherein the first application triggering the first server corresponding to the first application to perform a corresponding authorized login operation for the first application based on the authorization authentication code comprises:

The first application sends the authorization authentication code to the first server corresponding to the first application, so that the first server sends the authorization authentication code to the second server based on The authorization token and the digital identity returned by the second server perform a corresponding authorized login operation for the first application;

The first application receives and displays the authorized login result information returned by the first server.
The method according to claim 2, wherein before the first application invokes the pre-integrated preset software development kit SDK of the second application, the method further comprises:

Determine the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented;

Among the multiple candidate inter-process communication methods, a preset inter-process communication method corresponding to the security requirement level is selected.
The method according to claim 5, wherein, if the security requirement level of the second application reaches a preset security level, the first application passes the SDK and uses a preset inter-process communication method to send the The second application sends an authentication credential acquisition request, including:

The first application sends an authentication credential acquisition request to the second application through the SDK and using a preset inter-process communication method, so that the second application triggers the corresponding second server to contact the first application. The application performs credibility verification and returns an authentication certificate after the credibility verification is passed.
An authorized login method for an application program, including:

The second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, where the authentication credential is that the first application invokes The SDK is obtained from the second application by using a preset inter-process communication method;

The second server performs a legality check on the authentication certificate, and obtains a corresponding legality verification result;

If the legality verification result is that the authentication voucher is legal, return authorization data information to the first application so that the first application can render a corresponding authorization confirmation page based on the authorization data information through the SDK , And trigger the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.
The method according to claim 7, wherein after returning the authorization data information to the first application, the method further comprises:

Receiving, by the second server, a request for obtaining an authorization authentication code sent by the first application through the SDK;

In response to the authorization authentication code acquisition request, the second server returns a corresponding authorization authentication code to the first application, so that the first application is based on the authorization authentication code received through the SDK, The first server corresponding to the first application is triggered to perform a corresponding authorized login operation for the first application.
The method according to claim 8, wherein after the second server responds to the authorization authentication code acquisition request and returns a corresponding authorization authentication code to the first application, the method further comprises:

Receiving the authorization authentication code sent by the first server by the second server;

The second server performs credibility verification on the authorization authentication code to obtain a corresponding credibility verification result;

If the credibility verification result is that the verification is passed, the authorization token and the digital identity are returned to the first server, so that the first server is directed to the first server based on the authorization token and the digital identity. The first application executes a corresponding authorized login operation.
The method according to claim 7, wherein the preset inter-process communication mode is determined in the following manner:

Determine the security requirement level of the second application according to the attribute information of the calling object to which the business service of the second application is oriented;

Among the multiple candidate inter-process communication methods, a preset inter-process communication method corresponding to the security requirement level is selected.
An authorized login device for an application program, including:

The SDK calling module, after detecting the authorization login request, the first application calls the pre-integrated second application's preset software development kit SDK, and the authorization login request includes opening authorization to use the account information of the second application to log in to the first Application request;

An authentication credential obtaining module, where the first application obtains an authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method;

An authentication credential sending module, where the first application sends the authentication credential to the second server corresponding to the second application through the SDK, so that the second server verifies the authentication Whether the certificate is legal, and return authorization data information when it is determined that the authentication certificate is legal;

An authorization page rendering module, the first application of which renders a corresponding authorization confirmation page based on the received authorization data information through the SDK;

The application authorization login module triggers the first server corresponding to the first application to perform a corresponding authorization login operation for the first application after receiving the user's confirmation information for the authorization confirmation page.
An authorized login device for an application program, including:

The authentication voucher receiving module, the second server corresponding to the second application receives the authentication voucher sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, wherein the authentication The credential is obtained by the first application from the second application by calling the SDK and using a preset inter-process communication method;

An authentication certificate verification module, the second server of which performs a legality check on the authentication certificate to obtain a corresponding legality verification result;

The authorization information sending module, if the legality verification result is that the authentication voucher is legal, it returns authorization data information to the first application, so that the first application can use the SDK based on the authorization data information Render the corresponding authorization confirmation page, and trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.
An authorized login system for application programs, including a client, a first server corresponding to a first application, and a second server corresponding to a second application. The client is installed with the first application and the second application ；

The first application, after detecting the authorization login request, invokes the pre-integrated preset software development kit SDK of the second application, and the authorization login request includes the authorization to use the account information of the second application to log in to the first application. Request; and, through the SDK and using a preset inter-process communication method, obtain an authentication credential for requesting authorized login from the second application;

The second server receives the authentication certificate sent by the first application through the SDK, verifies whether the authentication certificate is legal, and sends the authentication certificate to the first application when it is determined that the authentication certificate is legal. The application returns the authorization data information;

The first application receives the authorization data information through the SDK, and renders the corresponding authorization confirmation page based on the authorization data information; and, after receiving the user's confirmation information for the authorization confirmation page, trigger The first server corresponding to the first application executes a corresponding authorized login operation for the first application.
An authorized login device for an application program, including:

Processor; and

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

After detecting the authorized login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorized login request includes a request to open the authorization to use the account information of the second application to log in to the first application;

The first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method;

The first application sends the authentication credential to the second server corresponding to the second application through the SDK, so that the second server verifies whether the authentication credential is legal, and confirms Return authorization data information when the authentication certificate is legal;

The first application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK;

After receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.
An authorized login device for an application program, including:

Processor; and

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

The second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, where the authentication credential is that the first application invokes The SDK is obtained from the second application by using a preset inter-process communication method;

The second server performs a legality check on the authentication certificate, and obtains a corresponding legality verification result;

If the legality verification result is that the authentication voucher is legal, return authorization data information to the first application so that the first application can render a corresponding authorization confirmation page based on the authorization data information through the SDK , And trigger the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.
A storage medium for storing computer executable instructions, which implement the following methods when executed by a processor:

After detecting the authorized login request, the first application invokes the pre-integrated preset software development kit SDK of the second application, and the authorized login request includes a request to open the authorization to use the account information of the second application to log in to the first application;

The first application obtains the authentication credential for requesting authorized login from the second application through the SDK and using a preset inter-process communication method;

The first application sends the authentication credential to the second server corresponding to the second application through the SDK, so that the second server verifies whether the authentication credential is legal, and confirms Return authorization data information when the authentication certificate is legal;

The first application renders a corresponding authorization confirmation page based on the received authorization data information through the SDK;

After receiving the user's confirmation information for the authorization confirmation page, trigger the first server corresponding to the first application to perform a corresponding authorization login operation for the first application.
A storage medium for storing computer executable instructions, which implement the following methods when executed by a processor:

The second server corresponding to the second application receives the authentication credential sent by the first application through the pre-integrated pre-integrated software development kit SDK of the second application, where the authentication credential is that the first application invokes The SDK is obtained from the second application by using a preset inter-process communication method;

The second server performs a legality check on the authentication certificate, and obtains a corresponding legality verification result;

If the legality verification result is that the authentication voucher is legal, return authorization data information to the first application so that the first application can render a corresponding authorization confirmation page based on the authorization data information through the SDK , And trigger the first server corresponding to the first application to perform a corresponding authorized login operation for the first application.