WO2023241060A1

WO2023241060A1 - Data access method and apparatus

Info

Publication number: WO2023241060A1
Application number: PCT/CN2023/074316
Authority: WO
Inventors: 陈锋; 卜广宝
Original assignee: 京东科技信息技术有限公司
Priority date: 2022-06-16
Filing date: 2023-02-03
Publication date: 2023-12-21
Also published as: CN115102744A

Abstract

Provided in the embodiments of the present disclosure are a data access method and apparatus. The data access method comprises: first receiving an access request of an integration party for a data page, wherein the access request comprises identification information of an accessed data page and browser setting information; then, on the basis of the browser setting information, generating browser fingerprint information corresponding to the integration party; performing information verification on the identification information and the browser fingerprint information on the basis of prestored verification information, so as to generate a verification result; and finally sending to the integration party a corresponding data access result on the basis of the verification result.

Description

Data access methods and devices

Cross-references to related applications

This disclosure claims priority from the Chinese patent application with application number 202210684373.

Technical field

Embodiments of the present disclosure relate to the field of computer technology and the field of Internet technology, specifically to the field of communication technology and the field of information security technology, and in particular to data access methods and devices.

Background technique

With the continuous development of information and communication, in platforms with nested output capabilities of external pages, joint login and login security guarantee are very common scenarios, which must be established on the premise of opening up the login status between the integrator and the integrated party. , data access can only be carried out after both parties have confirmed login security, and the link to the integrated party's page cannot be shared at will. Currently, common anti-theft methods for page links include: Token (token, identification information) allocation mechanism. The integrator obtains the token through the interface before accessing the page, and accesses the output page of the integrated party through access link splicing when accessing the page; or , using the REFERER (reference address) scheme, when the integrator accesses the output page of the integrated party, the integrated party verifies the correctness of the REFERER value of the integrator to ensure the security and legality of page access; furthermore, the visitor's IP or physical address is recorded. Address, records the IP or physical address of the integrator's last visit. If the IP or physical address of the integrator's users accessed twice is different, there may be a risk of shared link access.

However, the mechanism of the single Token solution cannot prevent the risk of data leakage caused by users sharing links, or the REFERER solution verification is usually used in scenarios where the number of user visits is counted. There are certain risks in using REFERER to prevent hotlinking, and some scenarios cannot be verified. Furthermore, using In the scheme of recording visitor IP or physical address, the user's IP address may change when switching networks, and there is a possibility of misjudgment if the method of recording the last user IP is chosen. Contents of the invention

Embodiments of the present disclosure provide a data access method, device, electronic device, and computer-readable medium.

Some embodiments of the present disclosure provide a data access method, which method includes: receiving an access request for a data page from an integration party, where the access request includes identification information and browser setting information for accessing the data page; based on the browser setting information , generate the browser fingerprint information corresponding to the integrator; based on the pre-stored verification information, perform information verification on the identification information and browser fingerprint information, and generate verification results; based on the verification results, send the corresponding data access results to the integrator .

Some embodiments of the present disclosure provide a data access device, which includes: a receiving module configured to receive an access request from an integration party for a data page, where the access request includes identification information and browser setting information for accessing the data page. ; The generation module is configured to generate the browser fingerprint information corresponding to the integration party based on the browser setting information; the verification module is configured to perform information verification on the identification information and browser fingerprint information based on the pre-stored verification information, Generate verification results; the sending module is configured to send corresponding data access results to the integration party based on the verification results.

Some embodiments of the present disclosure provide an electronic device, which includes: one or more processors; a storage device on which one or more programs are stored; when one or more programs are processed by one or more The processor executes, causing one or more processors to implement the data access method described in any of the above embodiments.

Some embodiments of the present disclosure provide a computer-readable medium on which a computer program is stored. When the computer program is executed by a processor, the data access method described in any of the above embodiments is implemented.

Some embodiments of the present disclosure provide a computer program product, including a computer program that, when executed by a processor, implements the data access method described in any of the above embodiments.

Description of the drawings

By reading the detailed description of the non-limiting embodiments with reference to the following figures, Other features, objects, and advantages of the present disclosure will become apparent as the description follows:

Figure 1 is an exemplary system architecture diagram in which an embodiment of the present disclosure may be applied;

Figure 2 is a flow chart of one embodiment of a data access method according to the present disclosure;

Figure 3 is a schematic diagram of an application scenario of the data access method according to the present disclosure;

Figure 4 is a flow chart of an embodiment of information verification of identification information and browser fingerprint information according to the present disclosure;

Figure 5 is a flow chart of another embodiment of a data access method according to the present disclosure;

Figure 6 is a flow chart of yet another embodiment of a data access method according to the present disclosure;

Figure 7 is a schematic structural diagram of an embodiment of a data access device according to the present disclosure;

FIG. 8 is a schematic structural diagram of an electronic device suitable for implementing embodiments of the present disclosure.

Detailed ways

The present disclosure will be further described in detail below in conjunction with the accompanying drawings and examples. It can be understood that the specific embodiments described here are only used to explain the relevant disclosure, but not to limit the disclosure. It should also be noted that, for convenience of description, only parts relevant to the relevant disclosure are shown in the drawings.

It should be noted that, as long as there is no conflict, the embodiments and features in the embodiments of the present disclosure can be combined with each other. The present disclosure will be described in detail below in conjunction with embodiments with reference to the accompanying drawings.

FIG. 1 shows an exemplary system architecture 100 to which a data access method and a data access apparatus according to embodiments of the present disclosure can be applied.

As shown in Figure 1, the system architecture 100 may include terminal devices 104, 105, and 106, a network 107, and servers 101, 102, and 103. The network 107 is a medium used to provide communication links between the terminal devices 104, 105, 106 and the servers 101, 102, 103. Network 107 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

Users can interact with servers 101, 102, 103 belonging to the same server cluster through the network 107 through the terminal devices 104, 105, 106 to receive or send information, etc. Various applications can be installed on the terminal devices 104, 105, and 106, such as item display applications, data analysis applications, search applications, etc.

The terminal devices 104, 105, and 106 may be hardware or software. When the terminal device is hardware, it can be various electronic devices that have a display screen and support communication with the server, including but not limited to smartphones, tablet computers, laptop computers, desktop computers, and so on. When the terminal device is software, it can be installed in the electronic devices listed above. It can be implemented as multiple software or software modules, or as a single software or software module. There are no specific limitations here.

Terminal devices 104, 105, 106 and servers 101, 102, 103 can serve as integrators and non-integrators. The integrated party can be the side that provides business capabilities to the integrator, and the integrator can use the services provided by the integrated party. business capabilities. Terminal devices 104, 105, 106 and servers 101, 102, 103 can receive an access request for a data page from an integration party. The access request includes identification information and browser setting information for accessing the data page, and then generate an integration based on the browser setting information. The browser fingerprint information corresponding to the party is obtained, and based on the pre-stored verification information, the identification information and browser fingerprint information are verified, and a verification result is generated. Finally, based on the verification result, the corresponding data access result is sent to the integration party.

It should be noted that the server can be hardware or software. When the server is hardware, it can be various electronic devices that provide various services for terminal devices. When the server is software, it can be implemented as multiple software or software modules that provide various services for the terminal device, or it can be implemented as a single software or software module that provides various services for the terminal device. There are no specific limitations here.

It should be noted that the data access method provided by the embodiment of the present disclosure can be executed by the terminal devices 104, 105, and 106 and the servers 101, 102, and 103. Correspondingly, data access devices are provided in terminal devices 104, 105, 106 and servers 101, 102, 103.

It should be understood that the number of terminal devices, networks and servers in Figure 1 is only illustrative. Depending on implementation needs, there can be any number of end devices, networks, and servers.

Continuing to refer to FIG. 2 , a process 200 of one embodiment of a data access method according to the present disclosure is shown. The data access method includes the following steps:

Step 210: Receive the integration party's access request for the data page.

In this step, the execution subject on which the data access method runs (for example, the terminal devices 104, 105, 106 and servers 101, 102, 103 in Figure 1) can be used as the collected Chengfang provides data access functions to the integrator so that the integrator can access the locally stored data pages. The user can perform login authentication on the integrator's terminal display interface. After completing the login authentication, enter the data page in the above execution subject. access operations. The integrator can determine the corresponding identification information based on the user's login authentication information. The identification information can be used to identify the user and corresponds to the user's login authentication information one-to-one. The integrator further obtains the browser used when the user enters the access operation, and obtains the browser setting information corresponding to the browser. The browser setting information may include the central processing unit (CPU, Central Processing Unit), language used, time zone, Cache, platform, font, resolution and other information. Then the integrator determines the access link corresponding to the data page based on the access operation to the data page, the identification information of the accessed data page, and the browser setting information. The integrator can generate an access request to access the data page based on the access link, and send The access request is sent to the above execution subject. Then the above-mentioned execution subject can receive an access request for the data page generated by the integrator based on the user's access operation. The access request can include the identification information and browser setting information of the accessed data page.

Step 220: Based on the browser setting information, generate browser fingerprint information corresponding to the integrator.

In this step, after receiving the access request for the data page, the above execution subject parses the access request and obtains the identification information and browser setting information included in the access request. The above execution subject can generate browser fingerprint information corresponding to the integrator based on the obtained browser setting information. The browser fingerprint information can be a string of characters that can uniquely identify the current browser. Different browsers can correspond to different Browser fingerprint information can be used to identify the browser that sent the access request.

The above execution subject can perform information splicing on various information in the browser setting information, and use the splicing result as the browser fingerprint information; it can also encrypt the information on various information in the browser setting information, and use the encryption result as the browser fingerprint. information.

The above-mentioned execution subject can generate the browser fingerprint information corresponding to the integrator based on the browser setting information through any method supported by relevant technologies, and this disclosure does not specifically limit this.

Step 230: Based on the pre-stored verification information, perform information verification on the identification information and browser fingerprint information, and generate a verification result.

In this step, after the above execution subject obtains the browser fingerprint information corresponding to the integrator, it can read the locally stored pre-stored verification information. The verification information can include identification information and browser fingerprints corresponding to different integrators. information, and each integrator corresponds to an identification information and browser fingerprint information.

The above execution subject can perform information verification on the identification information and browser fingerprint information corresponding to the access request and the identification information and browser fingerprint information corresponding to multiple integrators in the verification information, and determine the identification information and browser fingerprint information corresponding to multiple integrators in the verification information. Whether the identification information and the browser fingerprint information include both the identification information and the browser fingerprint information corresponding to the access request, that is, it is determined whether the identification information and the browser fingerprint information corresponding to the access request both exist in the verification information.

The above execution subject can traverse each identification information and browser fingerprint information in the verification information. If it is determined that the verification information includes both the identification information corresponding to the access request and the browser fingerprint information, then it is determined that the identification information corresponds to the browser fingerprint information. The integrator has access rights to the data page and can generate a successful verification result; if it is determined that the verification information does not include both the identification information corresponding to the access request and the browser fingerprint information, that is, it only includes identification information or If it only includes browser fingerprint information, it is determined that the integrator corresponding to the identification information and browser fingerprint information does not have access rights to the data page and can generate a verification result that fails the verification.

Step 240: Based on the verification result, send the corresponding data access result to the integration party.

In this step, after the above execution subject generates the corresponding verification results through information verification, it can determine the data access results corresponding to the verification results based on different verification results, and send the data access results to the integration party. , so that the integrator can display the data access results to the user through the terminal display interface.

Specifically, the above execution subject generates a successful verification result through information verification, obtains the corresponding data page according to the access request, uses the data page as the corresponding data access result, and sends the data access result to the integration party. , so that the integrator can render the data page and display the data page to the user through the terminal display interface.

Alternatively, if the above execution subject generates a verification result that fails the verification through information verification, it determines that the access request does not have permission to access, generates prompt information as the corresponding data access result, and sends the prompt information to the integrator so that the integrator can Prompt information is rendered, Prompt information is displayed to the user through the terminal display interface. The prompt information is used to prompt the user that he or she does not have access rights to the data page.

Continuing to refer to Figure 3, Figure 3 is a schematic diagram of an application scenario of the data access method according to this embodiment. This method can be applied to the application scenario in Figure 3. User A inputs the access operation of the data page on the integrator terminal 301. The integrator terminal 301 generates an access request for the data page based on the access operation and will include the identification information of the accessed data page. The access request and browser setting information are sent to the integrated party 302. After receiving the access request for the data page from the integrator terminal 301, the integrated party 302 can generate the browser fingerprint information corresponding to the integrator terminal 301 according to the browser setting information in the access request. Afterwards, the integrated party 302 can perform information verification on the identification information and browser fingerprint information based on the locally pre-stored verification information. If the verification is passed, a verification result indicating successful verification is generated. The integrated party 302 can obtain the data page corresponding to the access request, and send the data page to the integrator terminal 301 as the data access result. The integrator terminal 301 can render and display the data access results to user A. However, if user A shares the access link corresponding to the access request to user B, or user B steals the access link corresponding to user A's access request, user B initiates a new access to the integrated party 302 through the access link on terminal 303 request, after receiving the new access request, the integrated party 302 can generate new browser fingerprint information based on the new browser setting information in the new access request. Afterwards, the integrated party 302 can perform information verification on the identification information and the new browser fingerprint information based on the locally pre-stored verification information, and can determine that the new browser fingerprint information is different from the browser fingerprint information received last time. Then a verification result of failed verification is generated. The integrated party 302 may also generate prompt information indicating that the user does not have access rights to access the data page, and send the prompt information to the terminal 303 used by user B.

In the data access method provided by the embodiment of the present disclosure, the above-mentioned execution subject first receives an access request for the data page from the integration party. The access request includes the identification information and browser setting information of the accessed data page, and then generates the integration based on the browser setting information. Browser fingerprint information corresponding to the party, and based on the pre-stored verification information, information verification is performed on the identification information and browser fingerprint information to generate verification results. Finally, based on the verification results, the integration party Send the corresponding data access results, use the integrator's corresponding identification information and browser fingerprint information to perform information verification at the same time, prevent other users of the integrator from using the links corresponding to the data page to share, causing security issues, and improve the security and safety of data access. Reliability, and using the identification information and browser fingerprint information corresponding to the integrator, on the premise that the login status between the integrator and the integrated party is the same, it can be applied to the scenario of page nested output and joint login, and can solve the problem of page data embedding. It covers the issues of secure communication in cross-domain or non-cross-domain situations, improving the accuracy and security of data access in joint login scenarios.

Referring to Figure 4, Figure 4 shows a flow chart of an embodiment of information verification of identification information and browser fingerprint information, that is, the above-mentioned step 230, based on pre-stored verification information, verification of identification information and browser fingerprint information. Information verification and generating verification results may include the following steps:

Step 410: Determine whether at least one prestored identification information in the prestored verification information includes identification information.

In this step, the above-mentioned execution subject can read the locally stored pre-stored verification information. The verification information can include at least one pre-stored identification information and pre-stored browser fingerprint information corresponding to the pre-stored identification information. Different pre-stored identification information can To identify different users, the pre-stored identification information corresponds to the pre-stored browser fingerprint information one-to-one, and the verification information can be stored in the distributed cache.

The execution subject may compare the identification information corresponding to the access request with at least one pre-stored identification information in the verification information, and determine whether the at least one pre-stored identification information in the pre-stored verification information includes identification information.

Step 420: In response to determining that at least one prestored identification information in the prestored verification information includes identification information, determine the prestored browser fingerprint information corresponding to the identification information from the prestored verification information.

In this step, the execution subject determines through judgment that at least one pre-stored identification information in the pre-stored verification information includes identification information, then the pre-stored identification information can be determined from the verification information, and the pre-stored identification information can be determined from the verification information. The pre-stored browser fingerprint information corresponding to the identification information is used as the pre-stored browser fingerprint information corresponding to the identification information.

Step 430: Compare the pre-stored browser fingerprint information corresponding to the identification information with the browser fingerprint information.

In this step, after the above execution subject obtains the pre-stored browser fingerprint information corresponding to the identification information, it can compare the pre-stored browser fingerprint information corresponding to the identification information with the browser fingerprint information, and determine whether the pre-stored browser fingerprint information is the same as the browser fingerprint information. Whether the information is the same.

Step 440: In response to determining that the pre-stored browser fingerprint information corresponding to the identification information is the same as the browser fingerprint information, generate a verification result indicating that the verification is successful.

In this step, the above execution subject determines through comparison that the pre-stored browser fingerprint information corresponding to the identification information is the same as the browser fingerprint information, and then it is determined that the integration party corresponding to the identification information and the browser fingerprint information has the access rights to access the data page. A successful verification result can be generated.

In this implementation, by simultaneously verifying the identification information and browser fingerprint information, a successful verification result will be generated only after the identification information and browser fingerprint information pass verification at the same time, preventing other users of the integrator from Sharing links corresponding to data pages leads to security issues and improves the security and reliability of data access.

Further referring to Figure 4, the above step 230, based on the pre-stored verification information, performs information verification on the identification information and the browser fingerprint information, and generates the verification results, may include the following steps: Step 450, in response to determining the pre-stored identification information corresponding to The browser fingerprint information is different from the browser fingerprint information, resulting in a verification result that fails the verification.

In this step, the execution subject determines through judgment that the pre-stored browser fingerprint information corresponding to the identification information is different from the browser fingerprint information, and then determines that the browser fingerprint information corresponding to the access request is not the pre-stored browser fingerprint stored in the verification information. Information and generate verification results indicating that the verification failed.

In this implementation, the identification information and the browser fingerprint information are verified at the same time. If the browser fingerprint information does not meet the verification conditions, a verification result that fails the verification will be generated and the information verification will not pass, which improves the efficiency of the verification. Security and reliability of data access.

With further reference to Figure 4, the above-mentioned step 230, based on the pre-stored verification information, performs information verification on the identification information and browser fingerprint information to generate a verification result, which may include the following steps: Step: Step 460, in response to determining that at least one pre-stored identification information in the pre-stored verification information does not include identification information, correspondingly store the identification information and the browser fingerprint information into the pre-stored verification information, and generate a successful verification result.

In this step, the above execution subject judges the pre-stored identification information and determines that at least one pre-stored identification information in the pre-stored verification information does not include identification information. Then it is determined that the user corresponding to the identification information initiates data access for the first time, and the identification information can be The information is correspondingly bound to the browser fingerprint information, stored in the corresponding pre-stored verification information, and a verification result of successful verification is generated.

In this implementation, by binding and storing the identification information and browser fingerprint information that appear for the first time, and generating a successful verification result, the login status between the integrating party and the integrated party can be communicated. Under the premise, it is applicable to the scenario of joint login with page nested output. The use of identification information and browser fingerprint information can solve the problem of secure communication of page data nested in cross-domain or non-cross-domain situations, and improve the accuracy of data access in joint login scenarios. sex and safety.

Referring to Figure 5, Figure 5 shows a flow chart of another embodiment of a data access method, which may include the following steps:

Step 510: Receive the integration party's access request for the data page.

Step 510 in this embodiment can be performed in a manner similar to step 210 in the embodiment shown in FIG. 2, and will not be described again here.

Step 520: Based on the browser setting information, generate browser fingerprint information corresponding to the integrator.

Step 520 in this embodiment can be performed in a similar manner to step 220 in the embodiment shown in FIG. 2, and will not be described again here.

Step 530: In response to obtaining the identification information from the access request, obtain the expiration time corresponding to the identification information.

In this step, the above-mentioned execution subject parses the received access request and obtains the corresponding identification information. The above execution subject can obtain the expiration time corresponding to the identification information in the local storage based on the identification information. The expiration time can represent the duration of the valid state corresponding to the identification information. The expiration time is set for the identification information when the identification information is generated. , the identification information corresponds to the expiration time one-to-one.

Step 540: Based on the current time and the expiration time corresponding to the identification information, determine whether the identification information is in a valid state.

In this step, the above execution subject can obtain the current time, compare the current time with the expiration time corresponding to the identification information, and determine whether the current time is within the expiration time, that is, determine whether the identification information is in a valid state.

Specifically, if the above-mentioned expiration time is March 6, 2022, it can be determined that the identification information is in an invalid state within the time after March 6, 2022. The above-mentioned execution subject can compare the current time with the expiration time to determine the current time. Whether the time is within the time after the expiration time, so that it can be judged whether the identification information is in a valid state.

Step 550: In response to determining that the identification information is in a valid state, information verification is performed on the identification information and the browser fingerprint information based on the pre-stored verification information, and a verification result is generated.

In this step, the execution subject determines that the identification information is in a valid state through judgment, and further performs information verification on the identification information and browser fingerprint information based on the pre-stored verification information to generate a verification result.

Step 560: Based on the verification result, send the corresponding data access result to the integration party.

Step 560 in this embodiment can be performed in a manner similar to step 240 in the embodiment shown in FIG. 2, and will not be described again here.

In this embodiment, by judging the valid status of the received identification information, only when the identification information is in a valid state, the identification information and the browser fingerprint information will be verified, further improving the security of data access. and reliability.

With further reference to FIG. 5 , the above data access method may also include the following steps: Step 570 , in response to determining that the identification information is in an invalid state, generate prompt information for prompting that the permission has expired.

In this step, if the above-mentioned execution subject determines that the identification information is in an invalid state through judgment, it can generate a prompt information to prompt the permission to expire, and send the prompt information to the integrator, so that the integrator can render the prompt information and display it to the user .

In this embodiment, the validity status of the received identification information is judged. If it is in an invalid status, prompt information is generated without subsequent steps, thereby improving the efficiency of data access. Security and reliability.

Referring to Figure 6, Figure 6 shows a flow chart of yet another embodiment of a data access method, which may include the following steps:

Step 610: Receive the integration party's request for obtaining identification information.

In this step, the integrator can display the user login interface through the terminal display interface. The user can perform login authentication on the integrator's user login interface and enter the corresponding login information. The integrator can generate a request for obtaining identification information based on the user's login information. , and sends the acquisition request to the above-mentioned execution subject. The acquisition request may include the login information received by the integration party.

Step 620: Based on the login information in the acquisition request, generate the identification information and the expiration time corresponding to the identification information.

In this step, after receiving the acquisition request, the above execution subject can parse the acquisition request and obtain the login information in the acquisition request. The above execution subject can generate identification information corresponding to the login information based on the login information. The identification information corresponds to the login information one-to-one and is used to identify the user corresponding to the login information. Then, after the above execution subject generates the identification information, it can set the expiration time corresponding to the identification information according to the setting requirements and the generation time. The expiration time indicates that the identification information is in an invalid state within a time after this moment and no longer has access rights.

The above execution subject can generate identification information and the expiration time corresponding to the identification information through any method supported by relevant technologies, and this disclosure does not specifically limit this.

Step 630: Receive the integration party's access request for the data page.

Step 630 in this embodiment can be performed in a similar manner to step 210 in the embodiment shown in FIG. 2, and will not be described again here.

Step 640: Based on the browser setting information, generate browser fingerprint information corresponding to the integrator.

Step 640 in this embodiment can be performed in a similar manner to step 220 in the embodiment shown in FIG. 2, and will not be described again here.

Step 650: Based on the pre-stored verification information, perform information verification on the identification information and browser fingerprint information, and generate a verification result.

Step 650 in this embodiment can be performed in a similar manner to step 230 in the embodiment shown in FIG. 2, and will not be described again here.

Step 660: Based on the verification result, send the corresponding data access result to the integration party.

Step 660 in this embodiment can be performed in a similar manner to step 240 in the embodiment shown in FIG. 2, and will not be described again here.

In this embodiment, by generating identification information based on the login information for the first time, and completing the binding storage of the identification information and the browser fingerprint information during the first visit, it is possible to ensure that the login status between the integrating party and the integrated party is connected. , applicable to the scenario of joint login with page nesting output. The use of identification information and browser fingerprint information can solve the problem of secure communication of page data nested in cross-domain or non-cross-domain situations, and improve the accuracy and accuracy of data access in joint login scenarios. safety.

With further reference to FIG. 7 , as an implementation of the methods shown in the above figures, the present disclosure provides an embodiment of a data access device. This device embodiment corresponds to the method embodiment shown in Figure 2.

As shown in FIG. 7 , the data access device 700 in this embodiment may include: a receiving module 710 , a generating module 720 , a verification module 730 and a sending module 740 .

Wherein, the receiving module 710 is configured to receive an access request for the data page from the integration party, where the access request includes identification information and browser setting information for accessing the data page;

The generation module 720 is configured to generate browser fingerprint information corresponding to the integration party based on the browser setting information;

The verification module 730 is configured to perform information verification on the identification information and the browser fingerprint information based on the pre-stored verification information, and generate a verification result;

The sending module 740 is configured to send the corresponding data access result to the integrating party based on the verification result.

In some optional implementations of this implementation, the verification information includes at least one pre-stored identification information and pre-stored browser fingerprint information corresponding to the pre-stored identification information; and the verification module is further configured to: determine the pre-stored verification Whether at least one pre-stored identification information in the information includes identification information; in response to determining that at least one pre-stored identification information in the pre-stored verification information The stored identification information includes identification information, and the pre-stored browser fingerprint information corresponding to the identification information is determined from the pre-stored verification information; the pre-stored browser fingerprint information corresponding to the identification information is compared with the browser fingerprint information; in response to determining that the identification information corresponds to The pre-stored browser fingerprint information is the same as the browser fingerprint information, and a successful verification result is generated.

In some optional implementations of this implementation, the verification module is further configured to: in response to determining that at least one pre-stored identification information in the pre-stored verification information does not include identification information, correspond the identification information to the browser fingerprint information Store the pre-stored verification information and generate a successful verification result.

In some optional implementations of this implementation, the verification module is further configured to: in response to determining that the pre-stored browser fingerprint information corresponding to the identification information is different from the browser fingerprint information, generate a verification result indicating that the verification fails.

In some optional implementations of this implementation, the device further includes: an acquisition module, configured to: in response to obtaining the identification information from the access request, obtain the expiration time corresponding to the identification information; a judgment module, configured to: Based on the current time and the expiration time corresponding to the identification information, determine whether the identification information is in a valid state; and the verification module is further configured to: in response to determining that the identification information is in a valid state, based on the pre-stored verification information, compare the identification information and The browser fingerprint information is used for information verification and verification results are generated.

In some optional implementations of this implementation, the generation module is further configured to: in response to determining that the identification information is in an invalid state, generate prompt information for prompting that the permission has expired.

In some optional implementations of this implementation, the receiving module is further configured to: receive an acquisition request for identification information from the integrator, where the acquisition request includes the login information received by the integrator; the generating module is further configured to: : Based on the login information in the acquisition request, generate the identification information and the expiration time corresponding to the identification information.

In the data access device provided by the above embodiments of the present disclosure, the above execution subject first receives an access request from the integration party for the data page. The access request includes the identification information and browser setting information of the accessed data page, and then generates based on the browser setting information. The browser fingerprint information corresponding to the integrator, and based on the pre-stored verification information, performs information verification on the identification information and browser fingerprint information, generates verification results, and finally sends the corresponding data access results to the integrator based on the verification results. , using the identification information and browser corresponding to the integrator Fingerprint information is verified at the same time to prevent other users of the integrator from using the link corresponding to the data page to share, thereby improving the security and reliability of data access. In addition, the identification information and browser fingerprint information corresponding to the integrator are used. On the premise that the login status between the integrator and the integrated party is the same, it can be applied to the scenario of page nested output joint login, which can solve the problem of secure communication of page data nested in cross-domain or non-cross-domain, and improve the joint Accuracy and security of data access in login scenarios.

The method and device of the present disclosure use the identification information corresponding to the integrator and the browser fingerprint information to perform information verification at the same time, preventing other users of the integrator from using the corresponding link sharing of the data page to cause security problems, and improving the security and reliability of data access. sex.

Those skilled in the art can understand that the above-mentioned device also includes some other well-known structures, such as a processor, a memory, etc. In order to unnecessarily obscure the embodiments of the present disclosure, these well-known structures are not shown in FIG. 7 .

Referring now to FIG. 8 , a schematic structural diagram of an electronic device 800 suitable for implementing embodiments of the present disclosure is shown. Terminal devices in embodiments of the present disclosure may include, but are not limited to, mobile terminals such as smart screens, laptops, PADs (tablets), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and mobile terminals such as Fixed terminals for digital TV, desktop computers, etc. The terminal device shown in FIG. 8 is only an example and should not impose any restrictions on the functions and scope of use of the embodiments of the present disclosure.

As shown in FIG. 8, the electronic device 800 may include a processing device (eg, central processing unit, graphics processor, etc.) 801, which may be loaded into a random access device according to a program stored in a read-only memory (ROM) 802 or from a storage device 808. The program in the memory (RAM) 803 executes various appropriate actions and processes. In the RAM 803, various programs and data required for the operation of the electronic device 800 are also stored. The processing device 801, ROM 802 and RAM 803 are connected to each other via a bus 804. An input/output (I/O) interface 805 is also connected to bus 804.

Generally, the following devices may be connected to the I/O interface 805: input devices 806 including, for example, a touch screen, touch pad, keyboard, mouse, camera, microphone, accelerometer, gyroscope, etc.; including, for example, a liquid crystal display (LCD), speakers, vibration An output device 807 such as a computer; a storage device 808 including a magnetic tape, a hard disk, etc.; and a communication device 809. Pass The messaging device 809 may allow the electronic device 800 to communicate wirelessly or wiredly with other devices to exchange data. Although FIG. 8 illustrates an electronic device 800 having various means, it should be understood that implementation or availability of all illustrated means is not required. More or fewer means may alternatively be implemented or provided. Each block shown in Figure 8 may represent one device, or may represent multiple devices as needed.

In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product including a computer program carried on a computer-readable medium, the computer program containing program code for performing the method illustrated in the flowchart. In such embodiments, the computer program may be downloaded and installed from the network via communication device 809, or from storage device 808, or from ROM 802. When the computer program is executed by the processing device 801, the above-described functions defined in the method of the embodiment of the present disclosure are performed. It should be noted that the computer-readable medium in the embodiments of the present disclosure may be a computer-readable signal medium or a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples of computer readable storage media may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard drive, random access memory (RAM), read only memory (ROM), removable Programmed read-only memory (EPROM or flash memory), fiber optics, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above. In embodiments of the present disclosure, a computer-readable storage medium may be any tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. In embodiments of the present disclosure, the computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, in which computer-readable program code is carried. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device . Program code contained on a computer-readable medium may be transmitted using any suitable medium, including But not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

Computer program code for performing operations of embodiments of the present disclosure may be written in one or more programming languages, including object-oriented programming languages such as Java, Smalltalk, C++, and conventional programming languages, or a combination thereof. A procedural programming language such as "C" or a similar programming language. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In situations involving remote computers, the remote computer can be connected to the user's computer through any kind of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (such as through the Internet using an Internet service provider) .

The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operations of possible implementations of systems, methods, and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagram may represent a module, segment, or portion of code that contains one or more logic functions that implement the specified executable instructions. It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown one after another may actually execute substantially in parallel, or they may sometimes execute in the reverse order, depending on the functionality involved. It will also be noted that each block of the block diagram and/or flowchart illustration, and combinations of blocks in the block diagram and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or operations. , or can be implemented using a combination of specialized hardware and computer instructions.

The units involved in the embodiments of the present disclosure can be implemented in software or hardware. The described unit can also be provided in a processor, for example, it can be described as: a processor includes a receiving module, a generating module, a checking module and a sending module, where the names of these modules do not constitute Limitations on the module itself.

As another aspect, the present disclosure also provides a computer-readable medium. The computer-readable medium may be included in the above-mentioned electronic device; it may also exist alone. Not assembled into this electronic device. The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: receives an access request for a data page from the integrator, where the access request includes access to the data page. identification information and browser setting information; based on the browser setting information, generate the browser fingerprint information corresponding to the integrator; based on the pre-stored verification information, perform information verification on the identification information and browser fingerprint information, and generate verification results; Based on the verification results, the corresponding data access results are sent to the integration party.

The above description is only a description of the preferred embodiments of the present disclosure and the technical principles applied. Persons skilled in the art should understand that the scope of the invention involved in the embodiments of the present disclosure is not limited to technical solutions composed of specific combinations of the above technical features, and should also cover the above-mentioned technical solutions without departing from the above-mentioned inventive concept. Other technical solutions formed by any combination of technical features or their equivalent features. For example, a technical solution is formed by replacing the above features with technical features with similar functions disclosed in the embodiments of the present disclosure (but not limited to).

Claims

A data access method, the method includes:

Receive an access request from the integrator for the data page, where the access request includes identification information and browser setting information for accessing the data page;

Based on the browser setting information, generate browser fingerprint information corresponding to the integrator;

Based on the pre-stored verification information, perform information verification on the identification information and the browser fingerprint information, and generate a verification result;

Based on the verification result, the corresponding data access result is sent to the integration party.
The method according to claim 1, wherein the verification information includes at least one pre-stored identification information and pre-stored browser fingerprint information corresponding to the pre-stored identification information; and, based on the pre-stored verification information, the The identification information and the browser fingerprint information are used for information verification to generate verification results, including:

Determine whether at least one pre-stored identification information in the pre-stored verification information includes the identification information;

In response to determining that at least one pre-stored identification information in the pre-stored verification information includes the identification information, determine the pre-stored browser fingerprint information corresponding to the identification information from the pre-stored verification information;

Compare the pre-stored browser fingerprint information corresponding to the identification information with the browser fingerprint information;

In response to determining that the pre-stored browser fingerprint information corresponding to the identification information is the same as the browser fingerprint information, a verification result indicating successful verification is generated.
The method according to any one of claims 1-2, wherein the step of performing information verification on the identification information and the browser fingerprint information based on the pre-stored verification information and generating a verification result further includes:

In response to determining that at least one prestored identification information in the prestored verification information does not include the identification information, the identification information and the browser fingerprint information are correspondingly stored in The pre-stored verification information is generated, and a verification result indicating successful verification is generated.
The method according to any one of claims 1-2, wherein the step of performing information verification on the identification information and the browser fingerprint information based on the pre-stored verification information and generating a verification result further includes:

In response to determining that the pre-stored browser fingerprint information corresponding to the identification information is different from the browser fingerprint information, a verification result indicating that verification fails is generated.
The method according to any one of claims 1-4, further comprising:

In response to obtaining the identification information from the access request, obtain the expiration time corresponding to the identification information;

Based on the current time and the expiration time corresponding to the identification information, determine whether the identification information is in a valid state; and,

The step of performing information verification on the identification information and the browser fingerprint information based on the pre-stored verification information and generating a verification result includes:

In response to determining that the identification information is in a valid state, information verification is performed on the identification information and the browser fingerprint information based on the pre-stored verification information, and a verification result is generated.
The method according to any one of claims 1-5, further comprising:

In response to determining that the identification information is in an invalid state, prompt information for prompting permission invalidation is generated.
The method according to any one of claims 1-6, further comprising:

Receive an acquisition request for identification information from the integrator, wherein the acquisition request includes the login information received by the integrator;

Based on the login information in the acquisition request, the identification information and the expiration time corresponding to the identification information are generated.
A data access device, the device includes:

A receiving module configured to receive an access request from the integrator for the data page, where the access request includes identification information and browser setting information for accessing the data page;

A generation module configured to generate browser fingerprint information corresponding to the integrator based on the browser setting information;

A verification module configured to perform information verification on the identification information and the browser fingerprint information based on the pre-stored verification information, and generate a verification result;

The sending module is configured to send the corresponding data access result to the integrating party based on the verification result.
The device according to claim 8, wherein the verification information includes at least one pre-stored identification information and pre-stored browser fingerprint information corresponding to the pre-stored identification information; and the verification module is further configured to:

Determine whether at least one pre-stored identification information in the pre-stored verification information includes the identification information;

In response to determining that at least one pre-stored identification information in the pre-stored verification information includes the identification information, determine the pre-stored browser fingerprint information corresponding to the identification information from the pre-stored verification information;

Compare the pre-stored browser fingerprint information corresponding to the identification information with the browser fingerprint information;

In response to determining that the pre-stored browser fingerprint information corresponding to the identification information is the same as the browser fingerprint information, a verification result indicating successful verification is generated.
The device according to any one of claims 8-9, wherein the verification module is further configured to:

In response to determining that at least one pre-stored identification information in the pre-stored verification information does not include the identification information, the identification information and the browser fingerprint information are correspondingly stored in the pre-stored verification information, and a verification is generated. Verification result of successful verification.
The device according to any one of claims 8-9, wherein the verification module is further configured to:

In response to determining that the pre-stored browser fingerprint information corresponding to the identification information is different from the browser fingerprint information, a verification result indicating that verification fails is generated.
The device according to any one of claims 8-11, the device further comprising: an acquisition module configured to: in response to acquiring the identification information from the access request, acquire an invalidity corresponding to the identification information. time;

a judgment module configured to: judge whether the identification information is in a valid state based on the current time and the expiration time corresponding to the identification information; and

The verification module is further configured to: in response to determining that the identification information is in a valid state, perform information verification on the identification information and the browser fingerprint information based on the pre-stored verification information, and generate a verification module. test results.
The device according to any one of claims 8-12, wherein the generating module is further configured to: in response to determining that the identification information is in an invalid state, generate prompt information for prompting permission invalidation.
The device according to any one of claims 8-13, wherein the receiving module is further configured to: receive an acquisition request for identification information from the integrator, wherein the acquisition request includes the integrator receiving login information;

The generating module is further configured to: generate the identification information and the expiration time corresponding to the identification information based on the login information in the acquisition request.
An electronic device including:

one or more processors;

a storage device for storing one or more programs,

When the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the method according to any one of claims 1-7.
A computer-readable medium on which a computer program is stored, characterized in that when the computer program is executed by a processor, the method of any one of claims 1-7 is implemented. Law.
A computer program product comprising a computer program which, when executed by a processor, implements the method according to any one of claims 1-7.